Twice in the last two weeks, the package vulnerability list has been
shortened, but the update script (correctly) will not install a smaller
one. In other words, lines should be commented out, not deleted.
--Steve Bellovin, http://www.research.att.com/~smb (me)
http://www.wilyhacker.com ("Firewalls" book)