I wish folks who announce security issues would link to the patches for the issues they are announcing. This should become standard practice.