Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4364

Re: [SECURITY] [DSA 3359-1] virtualbox security update

Cross-posted to 2 groups.

Show all headers | View raw

Am 13.09.2015 um 21:47 schrieb Moritz Muehlenhoff:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> - -------------------------------------------------------------------------
> Debian Security Advisory DSA-3359-1                   security@debian.org
> https://www.debian.org/security/                       Moritz Muehlenhoff
> September 13, 2015                    https://www.debian.org/security/faq
> - -------------------------------------------------------------------------
>
> Package        : virtualbox
> CVE ID         : CVE-2015-2594
>
> This update fixes an unspecified security issue in VirtualBox related to
> guests using bridged networking via WiFi. Oracle no longer provides
> information on specific security vulnerabilities in VirtualBox. To still
> support users of the already released Debian releases we've decided to
> update these to the respective 4.1.40 and 4.3.30 bugfix releases.
>
> For the oldstable distribution (wheezy), this problem has been fixed
> in version 4.1.40-dfsg-1+deb7u1.
>
> For the stable distribution (jessie), this problem has been fixed in
> version 4.3.30-dfsg-1+deb8u1.
>
> For the testing distribution (stretch), this problem has been fixed
> in version 4.3.30-dfsg-1.
>
> For the unstable distribution (sid), this problem has been fixed in
> version 4.3.30-dfsg-1.
>
> We recommend that you upgrade your virtualbox packages.
>
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
>
> Mailing list: debian-security-announce@lists.debian.org
> -----BEGIN PGP SIGNATURE-----
>[.......]
>
> -----END PGP SIGNATURE-----

Hi,

your recommendation has produced bug #798979 and meanwhile 16 e-mails.
Why didn't you restrict these obviously not enough tested changes to 
distributions other than "stable" and "oldstable" or at least to those 
users who want to work with WiFi? As for Debian no homebanking programs 
are available which are able to handle with my RSA-chipcard, I am thrown 
on Windows under VirtualBox. If a new installation of the VM will be 
necessary I may be confronted with the loss of all my homebanking data, 
what an awful idea!

Dirk Olsen

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 3359-1] virtualbox security update Dirk Olsen <dirk-olsen@online.de> - 2015-09-18 12:00 +0200
  Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update Gianfranco Costamagna <locutusofborg@debian.org> - 2015-09-18 12:30 +0200
    Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update Gianfranco Costamagna <costamagnagianfranco@yahoo.it> - 2015-09-18 12:40 +0200
      Bug#798527: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update Ritesh Raj Sarraf <rrs@debian.org> - 2015-09-18 20:00 +0200
        Re: Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security  update Gianfranco Costamagna <costamagnagianfranco@yahoo.it> - 2015-10-03 18:10 +0200
    Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update Dirk Olsen <dirk-olsen@online.de> - 2015-09-18 15:50 +0200

csiph-web