[Pkg-virtualbox-devel] Bug#794466: Virtualbox might not be suitable for Stretch

Ritesh Raj Sarraf rrs at debian.org
Mon Aug 10 08:11:52 UTC 2015



On Mon, 2015-08-10 at 07:16 +0000, Gianfranco Costamagna wrote:
> >But if the security team can agree up with this release model, then 
> the
> >VBox team could just keep it up-to-date.
> 
> 
> 
> Yes, otherwise the points remains:
> 
> 1) leave the oracle with CVEs in stable releases
> 
> or
> 
> 2) have an exception from Security Team and/or Release Team
> 
> or
> 
> 3) wait and hope Oracle will change the model or make an exception
> 
> ----
> 
> 
> 1) means a disappear of VBox from Testing I'm afraid
> 
> 2) We will continue to provide security new releases, and fix almost 
> all the CVEs around here
> (except for one in o-o-stable)
> 3) this is kind of impossible right now I guess (even if Oracle 
> employees are continuing
> to try to have it)


Does anyone know what Fedora project's stand is on VBox ?
From what I've checked so far, Fedora does not ship VBox. But I'm not
sure what their reasons are.......


-- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-virtualbox-devel/attachments/20150810/1d0f74b6/attachment.sig>


More information about the Pkg-virtualbox-devel mailing list