I read it to mean something different; I think the advisory being referred to is the FreeBSD advisory they wrote themselves [1]. The impact statement said: > A

I read it to mean something different; I think the advisory being referred to is the FreeBSD advisory they wrote themselves [1]. The impact statement said: > An attacker who can control the patch file can cause a crash or run arbitrary code under the credentials of the user who runs bspatch, in many cases, root. I suspect this is where they feel that in future they would perhaps have been better to mention the implication of this, given bspatch is used in the update process users will run in response to the advisory. [1] https://www.freebsd.org/security/advisories/FreeBSD-SA-16%3A25.bspatch.asc https://www.freebsd.org/security/advisories/FreeBSD-SA-16%3A...