Why it's important to work with upstream

[Eric Christensen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I contacted an upstream project last night regarding two CVEs that date back to 2009.  There is limited information regarding the vulnerabilities on the web so I wasn't sure in what version the CVEs were fixed.  Turns out upstream had never been notified.  An hour's worth of work later and he's fixed the two vulnerabilities.

- -- Eric

- --------------------------------------------------
Eric "Sparks" Christensen
Fedora Project

[e-mail] - [e-mail]
097C 82C3 52DF C64A 50C2  E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQGcBAEBCgAGBQJT27rVAAoJEB/kgVGp2CYvXwYL/27KOuDgorGSFaNUlyMmwBFB
> LyXU7Y3h1EcpDig8rsmP/5Ru4Mx/AifGBg42viNEj3eRHX8kehHJ+A5j9jA46W7s
> 7lPdDCu0H+hUPVhnJsWVhIFt1Y8tO/aZVE+HMWmMBdzjwZ8UzQV9Uskp5XUtFgon
> 7sZBqPab6OuM/2BkqHMBC6atUgZx+zUlHVyEWHkZznuhIsd0Fn2pAOo1WyWfq942
> UrVYERgWN21evrdgUO4vok8Zx88i/3EW+BdK0IlXwqnqrnNLuMqhC5IXZtLTajiv
> X3siWjk49Ab03KjgKMgrqr7+Cxp+AWus8gLdryUNdumrjJkFOUBhuXh5T8wCu2r6
> UHPywSveilGlarMTHhwJ0AZ3jh7pCC+QCxj11Bbb2VjkRvafB4D/MF7Mki4Rjo9A
> xXjqOidwgWiOAXb+z/iixqK1J+0dK5O5NFgYLkLIA9omZPR1nJpQTR7bQHEWmsvw
> 4Ip5M2COv7XCSu+be34efhVNzZzhDfQKZX6DWQFTnw==
> =TxTj
> -----END PGP SIGNATURE-----