how to read security advisories

[Warren Block]

On Thu, 27 Feb 2014, Joe wrote:

> Builds which do not have the -p suffix in their release string do not have a patch level.
>
> Or maybe it's more accurate to say "If your release string does not contain the -p suffix, your build is not from the patched security branch"? 
??
> I'm sure you know better than I how to state this in a technically correct way.

"Release strings without a -p suffix have not been patched."