On Thu, 23 Jan 2014 05:54:36 -0800 (PST) Joerg Stephan wrote: > So best think i could do is learn how to maintain packages and > working on security related bug reports to triage them? Deep package maintenance skills or experience may not be really required. When checking if some package continues to be affected or is fixed now, version check may suffice in some case. In other cases, checking sources to see if patch was added should only require knowledge how to srpms and apply all patches. If you want to assist maintainers with fixing, you should know how to add patch to srpm and build patched rpms. -- Tomas Hoger / Red Hat Security Response Team -- security mailing list security@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/security