On Sep 21, Greg A. Woods wrote
> [ On Mon, September 21, 1998 at 18:19:54 (-0400), David Holland wrote: ]
> > Subject: Re: OpenBSD
> >
> > Well, that's not clear, because OpenBSD won't release their fixes,
> > because then other systems would be able to catch up to them on
> > security, or some kind of nonsense like that.
> > 
> > Their usual answer is to read their cvs commits mailing list.
> 
> I hate to be "the devil's advocate" on this one, but perhaps someone who
> is in fact on the NetBSD side should do so....
> 

I do. But I know of at last one commit which had a security issue and for which
the commit message was "RCS Id" or something like that. There was a long
tread in usenet about this.

--
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
--