Does version 3.11.1 address CVE-2024-45411?

[0hmac]

(Sorry if it is difficult to read due to machine translation)
Version 3.11.1 is not listed among the patched versions on the Security page or in the CVE.

GHSA-6j75-5wfj-gh66

https://www.cve.org/CVERecord?id=CVE-2024-45411

However, according to the following GitHub history, version 3.11.1 appears to be included as a patched version.

GHSA-6j75-5wfj-gh66

41103dc

Does version 3.11.1 address CVE-2024-45411?
Thanks in advance for any guidance.

[stof]

yes it does.
the patch has been backported to 3.11 later one. The "affected versions" part of the advisory has been updated to account for the backport, but the "patched versions" has been forgotten.

[0hmac]

Hello stof.
Indeed, the “affected versions” showed that 3.11.1 is not affected by the vulnerability.
Thank you very much for your answer!