There are two problems. The CVE, and the fact that the current fuzzing harness does did not find it. The CVE is getting fixed, but obviously the fuzzer needs work too because it exists to find these kinds of issues before they get used in the wild.

It's being handled how it should be. This happened, let's handle it, and how can we work to better address future problems.