Hi, yes, this is exactly the situation I'm in. The CVE DB tracks "true" 
upstream, which hasn't uploaded in many years. I am defacto upstream. I don't 
know what to do here. 
You understood perfectly, Daniel.

Reply via email to