Martin Ritchie wrote: > > Do you wait for them to release? Yes
Or ship patched, with a patch that is approved with the release. But that's usually not the best choice if you can get some traction at the project that has the flaw. It raises an interesting question, can ASF project X 'release' project Y's code? Because that is, in fact, what you are asking. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]