[Pkg-virtualbox-devel] Bug#794466: Virtualbox might not be suitable for Stretch
Ritesh Raj Sarraf
rrs at debian.org
Mon Aug 10 08:11:52 UTC 2015
On Mon, 2015-08-10 at 07:16 +0000, Gianfranco Costamagna wrote:
> >But if the security team can agree up with this release model, then
> the
> >VBox team could just keep it up-to-date.
>
>
>
> Yes, otherwise the points remains:
>
> 1) leave the oracle with CVEs in stable releases
>
> or
>
> 2) have an exception from Security Team and/or Release Team
>
> or
>
> 3) wait and hope Oracle will change the model or make an exception
>
> ----
>
>
> 1) means a disappear of VBox from Testing I'm afraid
>
> 2) We will continue to provide security new releases, and fix almost
> all the CVEs around here
> (except for one in o-o-stable)
> 3) this is kind of impossible right now I guess (even if Oracle
> employees are continuing
> to try to have it)
Does anyone know what Fedora project's stand is on VBox ?
From what I've checked so far, Fedora does not ship VBox. But I'm not
sure what their reasons are.......
--
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-virtualbox-devel/attachments/20150810/1d0f74b6/attachment.sig>
More information about the Pkg-virtualbox-devel
mailing list