Hi, On Tue, Nov 03, 2026 at 05:44:55AM -0800, Sumit Verma wrote: [...] > So I think #1151196 should be reopened (or found in 10-2), and #1150649 > can be closed with 10-2. Alternatively, upstream v11 contains both > fixes.
This looks right, the applied change was for the other CVE. Thanks for reporting. Regards, Salvatore

