> No, do not hold back, I got word that they can allocate > CVE IDs for Debian-specific issues only and we should ask > MITRE directly or use the Red Hat CNA. Ok, I'll just have him allocate it if he chooses to. -- Scott