[security-advisories@freebsd.org: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-03:17.procfs]

[Will Andrews]

On Fri, Oct 03, 2003 at 10:10:41PM -0400, Barney Wolff wrote:
> Does this mean that the situation can ever arise where a security bug
> is corrected in the advisory's announced releases but not in -current?
> Or, can we assume that as of the time of the security announcement
> the vulnerability has *always* been corrected in -current?

No.  Yes.  The rule is that changes are always committed to
-CURRENT first, unless they do not apply.  This rule is rarely
broken in FreeBSD, and certainly never broken for security issues.

Regards,
-- 
wca