> Sorry, lost the ball on this -- stuff. > > I've pushed the entries for the ChangeLog, I suggest that Mats-Erik > amends them accordingly if he feels they could be improved. > > Which patch went with which CVE?
Thanks, It applies to you too :-) IMO, the fixed bugs were so obvious for years (gcc even warns about them when building), that I wouldn't care about s CVEs. Some downstream managers might want to have a CVE as it helps their organization - and they are free to do so. Ah, I was under the imperssion that one or several of your patches fixed some known CVEs. I agree that getting an assigned CVE for any of the fixes is way too much work.
