Re: Re: Re: cryptocat/decryptocat - needs a cve?

[security curmudgeon <jericho () attrition org>]

In reference to Kurt's post:
http://seclists.org/oss-sec/2013/q3/66

I went through the CryptoCat changelog, as well as the audit report from 2012 
and broke out all the issues as I saw them. They are all live on OSVDB, which 
may help on CVE assignments:

http://direct.osvdb.org/search?search%5Bvuln_title%5D=cryptocat&search%5Btext_type%5D=titles