Dear Gentoo GLSA developers, I'm often confused by the 'workarround' text in the GLSA reports. Perhaps being not an native English speaker is my problem here, but I find the workarround description confusing. It makes me think there isn't a solution (e.g. workarround) when the next version of a package does fix the GLSA. That's why I'd like to suggest a different description like: A workarround for this bug is not available, you need to install the latest version of the package to fix this security issue." Thanks in advice. Reproducible: Always Steps to Reproduce:
Good point. But I think we shouldn't speak about resolution in the workaround section *at all* (otherwise it duplicates the "All XXX users should upgrade to the latest version" part in Resolution). This was already discussed in the security team and we agreed on the correct wording for cases where no simple workaround exists : "There is no known workaround at this time." With nothing more. GLSA coordinators, please see coordinator guide for reference.