New release for CVE-2021-45959

[candrews]

Can you please make a new release addressing CVE-2021-45959?

It appears this issue was fixed back in July with commit 2038bf6 but no release was made.

Thank you!

[vitaut]

This is one of a series of false positives around 12 July that were closed without any changes to {fmt} (after some fuzzing infra issue has been addressed). In particular 2038bf6 is effectively a noop. I recommend marking this CVE as invalid.

[carnil]

Via https://cveform.mitre.org/ I asked if the CVE can be rejected (note I'm not either involved upstream, nor with the oss-fuzz, but stumpled over this issue while investigating the CVE in downstream Debian).

[vitaut]

Thanks!

[carnil]

@vitaut the CVE has been rejected now.

[vitaut]

Thanks @carnil!