Patches 16 and 17 have the same summary "stdio-common: Reject significand prefixes in scanf [BZ #12701]", one of those summaries (I think the one for patch 17) is wrong. -- Joseph S. Myers josmyers@redhat.com