[Pkg-virtualbox-devel] Bug#735410: Information on recent VBox CVEs

Felix Geyer fgeyer at debian.org
Sun Mar 9 17:51:56 UTC 2014


Hi,

On 09.02.2014 02:04, Moritz Mühlenhoff wrote:
> On Sun, Feb 09, 2014 at 01:14:08AM +1300, Matthew Daley wrote:
>> Hi,
>>
>> I've recently released some more detailed information on these CVEs
>> that can hopefully help out; see
>> <http://seclists.org/fulldisclosure/2014/Feb/48>.
> 
> Saw that, thanks for following up in the bug log.
> 
> Felix, given that the scope is actually broader than local DoS
> we should handle this via -security.

I finally got around to test the fixed packages for squeeze and wheezy.
Sorry it took so long ...

The debdiffs I posted to this bug work fine.
>From my perspective they can be pushed to the security archive.
Please let me know if you want me to upload them.

Cheers,
Felix



More information about the Pkg-virtualbox-devel mailing list