Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4503

Re: [SECURITY] [DSA 3454-1] virtualbox security update

Show all headers | View raw

Could anyone give us a direct link to CVE-2015-5307, CVE-2015-8104 
CVE-2016-0495 and CVE-2016-0592 so that we do not have to 'google' for 
it? One search via such an engine costs as much as a light bulb being 
turned on for an hour besides the work of copying all the CVEs to your 
favourite search engine, searching for it and verifying the number of 
the found CVEs which is a pretty tedious task.
Thanks for your attention!

Am 2016-01-27 um 00:24 schrieb Moritz Muehlenhoff:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> - -------------------------------------------------------------------------
> Debian Security Advisory DSA-3454-1                   security@debian.org
> https://www.debian.org/security/                       Moritz Muehlenhoff
> January 27, 2016                      https://www.debian.org/security/faq
> - -------------------------------------------------------------------------
>
> Package        : virtualbox
> CVE ID         : CVE-2015-5307 CVE-2015-8104 CVE-2016-0495 CVE-2016-0592
>
> Multiple vulnerabilities have been discovered in VirtualBox, an x86
> virtualisation solution.
>
> Upstream support for the 4.1 release series has ended and since no
> information is available which would allow backports of isolated security
> fixes, security support for virtualbox in wheezy/oldstable needed to be
> ended as well.
> If you use virtualbox with externally procured VMs (e.g. through vagrant)
> we advise you to update to Debian jessie.
>
> For the stable distribution (jessie), these problems have been fixed in
> version 4.3.36-dfsg-1+deb8u1.
>
> For the testing distribution (stretch), these problems have been fixed
> in version 5.0.14-dfsg-1.
>
> For the unstable distribution (sid), these problems have been fixed in
> version 5.0.14-dfsg-1.
>
> We recommend that you upgrade your virtualbox packages.
>
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
>
> Mailing list: debian-security-announce@lists.debian.org
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQIcBAEBAgAGBQJWp//5AAoJEBDCk7bDfE42LuMQAJFWalANWmXRCt7VWRMJhVRf
> DJ65bj8+c0TPDMT+L2pNPUzkFXuSG3O4Klg4YhZg+P9NUMdGl5SbuZuBX5O6nKdI
> 5f+VSvkoymtNf2haAEy3AIQRe1Egs5WWOXaAgyPgFOe8/9KcYW+5kOltPYGXKScD
> C8NKlTcwaMZ12dRxljrCwQ6vMVcVd1+rX9AIL89H+0sVDQMgXRTuQ8/nAcKNYmW4
> a5tCa1DpQklBieS2x5tgN4Kp7uX0EmFFkgICoa2KAY3yPXJzw6Fwwou/6wjppX/X
> dYG8kGxAAFQb42s1ibHQB3uY3gybhZuxRUWHD+riNJRPiMj69xKs4FfGbG+5qOBj
> 9h/nJpKi9XTiSsjGzbnuP8Rqs1la3nx23jCMIGGpZ5OYIbEXlIGDyWJrQrJnohUe
> q3Hl+45+3B+U+objxfcrlqHi2Q5lCAx7bsPcdLuoc7ml6L3qyoJfh2Nom2ktmRSf
> yifLlECHrHJ4nY85q+EWDJcBJ3wjFiCQrWYW4/YKg7Mc25Hg912/T8jeKaRnwHgA
> RP7Rh5sMwiGRApBmhfIx3GGjgiMACjfAQf9YuxRxvhgPCI/cigwK6diEO22LOdW/
> d21+txExHrRXPSXWNUHZvIdeWp6FJU4K3hUS0hTZnjPGVGny+gEE6tTQhmylNhRz
> wIO6WtiqQypilOEqq6V3
> =EVv5
> -----END PGP SIGNATURE-----
>

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 3454-1] virtualbox security update Elmar Stellnberger <estellnb@gmail.com> - 2016-01-27 10:20 +0100
  Re: [SECURITY] [DSA 3454-1] virtualbox security update Jonathan Wiltshire <jmw@debian.org> - 2016-01-27 15:00 +0100

csiph-web