On Thu, Nov 14, 2013 at 02:41:32PM +0100, Mathy Vanhoef wrote: > Can a CVE ID be assigned to this? You have to refer to oss-security@lists.openwall.com. Debian can only assign CVE for non-public issues. Bastian -- The heart is not a logical organ. -- Dr. Janet Wallace, "The Deadly Years", stardate 3479.4