[Pkg-virtualbox-devel] Bug#611925: CVE-2010-4414: Does it affect Debian?

[Moritz Muehlenhoff]

Package: virtualbox-ose
Version: 3.2.10-dfsg-1
Severity: important
Tags: security

Hi,
the VirtualBox developers have released an advisory for virtualbox,
which has been assigned CVE-2010-4414.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4414

This might only affect proprietary addons, could you check with
upstream?

Cheers,
        Moritz

-- System Information:
Debian Release: 6.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages virtualbox-ose depends on:
ii  adduser                 3.112+nmu2       add and remove users and groups
ii  libc6                   2.11.2-10        Embedded GNU C Library: Shared lib
ii  libcurl3                7.21.0-1         Multi-protocol file transfer libra
ii  libgcc1                 1:4.4.5-8        GCC support library
ii  libpng12-0              1.2.44-1         PNG library - runtime
ii  libpython2.6            2.6.6-8+b1       Shared Python runtime library (ver
ii  libsdl1.2debian         1.2.14-6.1       Simple DirectMedia Layer
ii  libssl0.9.8             0.9.8o-4         SSL shared libraries
ii  libstdc++6              4.4.5-8          The GNU Standard C++ Library v3
ii  libvncserver0           0.9.7-2+b1       API to write one's own vnc server
ii  libx11-6                2:1.3.3-4        X11 client-side library
ii  libxcursor1             1:1.1.10-2       X cursor management library
ii  libxext6                2:1.1.2-1        X11 miscellaneous extension librar
ii  libxml2                 2.7.8.dfsg-2     GNOME XML library
ii  libxmu6                 2:1.0.5-2        X11 miscellaneous utility library
ii  libxt6                  1:1.0.7-1        X11 toolkit intrinsics library
ii  python                  2.6.6-3+squeeze5 interactive high-level object-orie
ii  python-central          0.6.16+nmu1      register and build utility for Pyt
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages virtualbox-ose recommends:
ii  libgl1-mesa-glx [libgl1]   7.7.1-4       A free implementation of the OpenG
ii  libqt4-opengl              4:4.6.3-4     Qt 4 OpenGL module
ii  libqtcore4                 4:4.6.3-4     Qt 4 core module
ii  libqtgui4                  4:4.6.3-4     Qt 4 GUI module
ii  virtualbox-ose-dkms        3.2.10-dfsg-1 x86 virtualization solution - kern
ii  virtualbox-ose-qt          3.2.10-dfsg-1 x86 virtualization solution - Qt b

Versions of packages virtualbox-ose suggests:
ii  libasound2                   1.0.23-2.1  shared library for ALSA applicatio
ii  libpulse0                    0.9.21-3+b1 PulseAudio client libraries
pn  vde2                         <none>      (no description available)
pn  virtualbox-guest-additions   <none>      (no description available)

-- no debconf information