[Pkg-virtualbox-devel] Bug#775888: virtualbox: CVE-2014-6588 CVE-2014-6589 CVE-2014-6590 CVE-2014-6595 CVE-2015-0418 CVE-2015-0427

[Moritz Mühlenhoff]

On Mon, Jan 26, 2015 at 09:07:19PM +0530, Ritesh Raj Sarraf wrote:
> On 01/21/2015 01:23 PM, Moritz Muehlenhoff wrote:
> > In the past someone from upstream posted the upstream commits to the
> > bug log, maybe you can contact them for more information so that we
> > can merge the isolated fixes into the jessie version? Cheers, Moritz 
> 
> Moritz,
> 
> For unstable, I've pushed the upload an d asked for an exception.

I've added the VMSVGA fixes to the security tracker, but there are also
two issues in "Core", which apply to wheezy/jessie:

Could you please check back with upstream on CVE-2015-0377 and CVE-2015-0418?

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Cheers,
        Moritz