a first pass at writing up a post about reporting bugs
update dependencies as part of CVE-2013-4492