From owner-freebsd-security@FreeBSD.ORG  Tue Aug  5 11:51:17 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D7C4837B401
	for <freebsd-security@freebsd.org>;
	Tue,  5 Aug 2003 11:51:17 -0700 (PDT)
Received: from mx7.roble.com (mx7.roble.com [206.40.34.7])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 89BB443FB1
	for <freebsd-security@freebsd.org>;
	Tue,  5 Aug 2003 11:51:17 -0700 (PDT)
	(envelope-from marquis@roble.com)
Date: Tue, 5 Aug 2003 11:51:17 -0700 (PDT)
From: Roger Marquis <marquis@roble.com>
To: freebsd-security@freebsd.org
In-Reply-To: <20030805155842.6D55937B405@hub.freebsd.org>
References: <20030805155842.6D55937B405@hub.freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <20030805185117.41860DAC5F@mx7.roble.com>
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:08.realpath
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Aug 2003 18:51:18 -0000

Mike Hoskins wrote:
>... but I can also see KISS.  If you add more data than
>absolutely needed, confusion may also arise...
>
>> I think that if one takes the `Affects' lines (and the rest of the
>> advisory) at face value, without second-guessing, that it is crystal
>> clear what versions of FreeBSD are affected.

Along those lines it might be worth moving Affects: to the top of
advisories page format, ahead of Credits:, Announced:, Module:, and
Category:.

A "REL-Advisories" list would also be helpful to those of us who
don't use beta releases (aka -STABLE).

-- 
Roger Marquis
Roble Systems Consulting
http://www.roble.com/