Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4360 > unrolled thread

Re: [SECURITY] [DSA 3359-1] virtualbox security update

Back to article view | Back to linux.debian.security

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: [SECURITY] [DSA 3359-1] virtualbox security update Georgi Naplatanov <gosho@oles.biz> - 2015-09-15 06:20 +0200
    Re: [SECURITY] [DSA 3359-1] virtualbox security update Moritz Mühlenhoff <jmm@inutil.org> - 2015-09-18 12:40 +0200

#4360 — Re: [SECURITY] [DSA 3359-1] virtualbox security update

On 09/13/2015 10:47 PM, Moritz Muehlenhoff wrote:
> -------------------------------------------------------------------------
> Debian Security Advisory DSA-3359-1                   security@debian.org
> https://www.debian.org/security/                       Moritz Muehlenhoff
> September 13, 2015                    https://www.debian.org/security/faq
> -------------------------------------------------------------------------
> 
> Package        : virtualbox
> CVE ID         : CVE-2015-2594
> 
> This update fixes an unspecified security issue in VirtualBox related to
> guests using bridged networking via WiFi. Oracle no longer provides
> information on specific security vulnerabilities in VirtualBox. To still
> support users of the already released Debian releases we've decided to
> update these to the respective 4.1.40 and 4.3.30 bugfix releases. 
> 
> For the oldstable distribution (wheezy), this problem has been fixed
> in version 4.1.40-dfsg-1+deb7u1.
> 
> For the stable distribution (jessie), this problem has been fixed in
> version 4.3.30-dfsg-1+deb8u1.
> 
> For the testing distribution (stretch), this problem has been fixed
> in version 4.3.30-dfsg-1.
> 
> For the unstable distribution (sid), this problem has been fixed in
> version 4.3.30-dfsg-1.
> 
> We recommend that you upgrade your virtualbox packages.
> 
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
> 
> Mailing list: debian-security-announce@lists.debian.org

Dear maintainer(s),
virtualbox-guest-additions-iso package version is 4.3.18. Are you going
to update the package to version 4.3.30?

Kind regards
Georgi

[toc] | [next] | [standalone]

#4367

Georgi Naplatanov <gosho@oles.biz> schrieb:
>
> Dear maintainer(s),
> virtualbox-guest-additions-iso package version is 4.3.18. Are you going
> to update the package to version 4.3.30?

The security team support doesn't support non-free. The maintainer can update
it in a point update if needed.

Cheers,
        Moritz

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web