Okay, not NEW new, the advisory is a couple weeks old. But the CVE is new so close enough.