[Pkg-virtualbox-devel] Bug#775888: [vbox-dev] Fwd: Re: Bug#775888: virtualbox: CVE-2014-6588 CVE-2014-6589 CVE-2014-6590 CVE-2014-6595 CVE-2015-0418 CVE-2015-0427

[Gianfranco Costamagna]

Hi all,

so to sum everything up:

experimental: NOT AFFECTED.
jessie: fixed all of them by disabling the code (attached jessie-debdiff)

wheezy: fixed CVE-2015-0377, CVE-2015-0418

wheezy-bpo: I propose to backport the new 4.3.18 into bpo when it reaches testing.
squeeze: no virtualbox there

squeeze-bpo: I propose to backport kbuild and then virtualbox 4.1 or 4.3 from wheezy-jessie.

Attached the debdiffs



thanks again Frank for your help!

cheers,

Gianfranco
-------------- next part --------------
A non-text attachment was scrubbed...
Name: wheezy-debdiff
Type: application/octet-stream
Size: 4293 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-virtualbox-devel/attachments/20150122/ace41da9/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jessie-debdiff
Type: application/octet-stream
Size: 1467 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-virtualbox-devel/attachments/20150122/ace41da9/attachment-0001.obj>