CVE-2023-28866 - Introducing commit not present in lts
upstream introducing commit: d0b137062b2de75b264b84143d21c98abc5f5ad2
upstream fix commit: bce56405201111807cc8e4f47c6de3e10b17c1ac