[Pkg-virtualbox-devel] Bug#775888: virtualbox: CVE-2014-6588 CVE-2014-6589 CVE-2014-6590 CVE-2014-6595 CVE-2015-0418 CVE-2015-0427

[Moritz Mühlenhoff]

On Tue, Jan 27, 2015 at 09:53:45AM +0000, Gianfranco Costamagna wrote:
> Hi Moritz, please read carefully this thread :)
> 
> 
> >Could you please check back with upstream on CVE-2015-0377 and CVE-2015-0418?
> 
> jessie is not affected, and wheezy has already the patch on this thread
> 
> the two CVEs are for VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, 4.2.28
> 
> so 4.3 not affected.
> 
> 
> Since jessie is already pending fixed, I propose to go for wheezy with the above one.
> cheers,

Thanks, I've updated the security tracker.

Cheers,
        Moritz