Lenny didn't get a security update for ghost. What you're thinking of is the LTS support effort [1] for a limited set of packages. It is maintained by a team of

Lenny didn't get a security update for ghost. What you're thinking of is the LTS support effort [1] for a limited set of packages. It is maintained by a team of volunteers and is not an official project. Libc6 has had a few security upgrades by the LTS team in 2014. See both squeeze and LTS changelogs [2] for a comparison. It is important to note that if people still run squeeze they will NOT have LTS support out of the box, it has to be configured manually. [1] https://wiki.debian.org/LTS https://wiki.debian.org/LTS [2] http://metadata.ftp-master.debian.org/changelogs//main/e/eglibc/eglibc_2.11.3-4_changelog http://metadata.ftp-master.debian.org/changelogs//main/e/egl... http://metadata.ftp-master.debian.org/changelogs//main/e/eglibc/eglibc_2.11.3-4+deb6u4_changelog http://metadata.ftp-master.debian.org/changelogs//main/e/egl...