On Tue, 1 Feb 2005 17:15:32 +0000 (GMT), Mark J Cox <mjc@xxxxxxxxxx> wrote: > Actually it's to assert that we're providing a backported patch for a > security issue in a package. This is incredibly useful to end users, > especially those who have to respond to auditors (we get many requests > along these lines, where a customer wants to be able to show an auditor > that the old version of, say, OpenSSH, contains a fix for some particular > named issue). I relent. -jef