l...@gnu.org (Ludovic Courtès) skribis: > What about raising the issue on oss-sec? Ideally the QEMU folks would > take care of labeling QEMU’s CVEs, the libxml2 folks would take care of > theirs, etc.
For the record I followed up on this discussion on oss-sec: http://www.openwall.com/lists/oss-security/2017/03/15/3 Ludo’.
