Brian May <bam@debian.org> writes: > This is five separate issues. See #811308. So does it make sense to ask > for a separate CVE for each issue? Requests for CVEs aren't getting any response. Might have to deal without. http://www.openwall.com/lists/oss-security/2016/02/22/4 -- Brian May <bam@debian.org>