Re: debsecan with squeeze-lts

2014-06-03 Thread Moritz Muehlenhoff
On Tue, Jun 03, 2014 at 12:14:13PM +0100, Steven Chamberlain wrote: > Hi, > > I noticed an interesting problem that squeeze-lts creates for debsecan. > > debsecan (at least the version in squeeze) doesn't seem to know about > libgnutls26 version 2.8.6-1+squeeze4, or even that it has the fixes fro

debsecan with squeeze-lts

2014-06-03 Thread Steven Chamberlain
Hi, I noticed an interesting problem that squeeze-lts creates for debsecan. debsecan (at least the version in squeeze) doesn't seem to know about libgnutls26 version 2.8.6-1+squeeze4, or even that it has the fixes from versions 2.8.6-1+squeeze3 and prior. It means that CVE-2014-3466 will remain