Fedora has issued an advisory on January 29: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ODB635JMAUZLF63IZARIM7ZTPIKHQ2OQ/
Status comment: (none) => Patches available from Fedora
Assigning to wally because you have done many recent updates, even though it is not your baby. CC'ing NicolasS who did the last CVE on it.
Assignee: bugsquad => jani.valimaaCC: (none) => nicolas.salguero
Depends on: (none) => 30016
Fixed in 5.4.4, according to: https://bugs.mageia.org/show_bug.cgi?id=30016#c5
Resolution: (none) => FIXEDStatus: NEW => RESOLVED