Package: debsecan
Version: 0.4.2
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://idssi.enyo.de/tracker/CVE-2006-2426 currently states that no
fixed Sun Java packages exist and lists even version 1.5.0-08-1 as
vulnerable.

I think this is wrong because CVE-2006-2426 mentions only 
vulnerabilities in Java up to 1.5.0_06. 
The changelog of sun-java5 1.5.0-08-1 acknowledges that the 
upstream release 1.5.0_08 is included.


- -- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (991, 'testing'), (990, 'testing'), (400, 'unstable'), (1, 
'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-k7
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages debsecan depends on:
ii  debconf [debconf-2.0]         1.5.3      Debian configuration management sy
ii  python                        2.3.5-11   An interactive high-level object-o

Versions of packages debsecan recommends:
ii  cron                          3.0pl1-95  management of regular background p
ii  exim4                         4.62-4     metapackage to ease exim MTA (v4) 
ii  exim4-daemon-light [mail-tran 4.62-4     lightweight exim MTA (v4) daemon

- -- debconf information:
* debsecan/suite: etch
  debsecan/report: true

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFE8C4jo0W0/0CBg1MRAr7VAJ9vk/kyQChPjnllPSSZHZCmAjN+lgCgm+vV
U2vEWlVN516u057iP86NPbY=
=MuS2
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to