Re: [security-advisories_at_freebsd.org: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-03:17.procfs]

From: Will Andrews <will_at_csociety.org>
Date: Fri, 3 Oct 2003 19:17:50 -0700
On Fri, Oct 03, 2003 at 10:10:41PM -0400, Barney Wolff wrote:
> Does this mean that the situation can ever arise where a security bug
> is corrected in the advisory's announced releases but not in -current?
> Or, can we assume that as of the time of the security announcement
> the vulnerability has *always* been corrected in -current?

No.  Yes.  The rule is that changes are always committed to
-CURRENT first, unless they do not apply.  This rule is rarely
broken in FreeBSD, and certainly never broken for security issues.

Regards,
-- 
wca
Received on Fri Oct 03 2003 - 17:17:54 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:24 UTC