On Tue, 2 Apr 2019 at 08:49, Kang Kai <Kai.Kang at windriver.com> wrote: > I have checked CVE-2018-1000845 which is rejected that it is duplicate > of CVE-2017-6519. That why didn't list CVE-2018-1000845 in patch and > commit message. Okay it's actually been rejected, so tooling shouldn't be seeing it. Thanks, Ross