[BUGHUNTER]

OK, but real life (low budget) scenario is:

1. aptitude update && aptitude upgrade 2. ask yourself, if your system is vulnerable now 3. feel the good hope and go ahead.

If I had the budget / time to research every single CVE I would probably not trust repositories at all...

do YOU trust repositories?

[meaty]

Yeah and that's pretty much good enough for most people.

That's what we do for our internal dev systems.