On Sat, 2006-05-06 at 15:11 -0400, Josh Bressers wrote: > > > > > You can mail cve@xxxxxxxxx with pointers at > > > new security issues and they should assign an ID. > > > > Done for the awstats issue, no response yet. > > You'll need patience when you mail MITRE. They are very busy and do get to > everything. It sometimes will take a day or two though. Yep, I guessed that, but thought I'd keep others on this list explicitly up to date. Will add the CVE id's in CVS and Bugzilla when I have them unless someone beats me to it.