Comment 9 for bug 792193

I'm running some local tests to explore this situation.

I think we do need to add the upstream md5 check as stipulated, but I'm also slightly concerned about whether the upstream-2.6.24 tag will end up in the right place.