Hi, in the case of vlc it does show up in the tracker as unfixed because the CVE ids in the CVE list are not marked with a DTSA tag because the ids are missing from DTSA/list. Any way to workaround this? I tried naming them with CVE-2007-YXXX CVE-2007XYXX and so on but the pre-commit hook doesn't like this. Kind regards Nico -- Nico Golde - http://www.ngolde.de - email@example.com - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted.
Description: PGP signature