Branch: refs/heads/master
Home: https://github.com/NixOS/nixpkgs
Commit: 69e8bac9cd1b605440a28e4cb56a4acf6e2c0103
https://github.com/NixOS/nixpkgs/commit/69e8bac9cd1b605440a28e4cb56a4acf6e2c0103
Author: Graham Christensen <[email protected]>
Date: 2016-10-26 (Wed, 26 Oct 2016)
Changed paths:
M pkgs/applications/virtualization/virtualbox/default.nix
R pkgs/applications/virtualization/virtualbox/libressl.patch
M pkgs/applications/virtualization/virtualbox/upstream-info.json
Log Message:
-----------
virtualbox: 5.1.6 -> 5.1.8 for many CVEs:
>From LWN:
>From the NVD entries:
CVE-2016-5501: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality,
integrity, and availability via vectors related to Core, a different
vulnerability than CVE-2016-5538.
CVE-2016-5538: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality,
integrity, and availability via vectors related to Core, a different
vulnerability than CVE-2016-5501.
CVE-2016-5605: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.1.4 in Oracle Virtualization allows remote
attackers to affect confidentiality and integrity via vectors related
to VRDE.
CVE-2016-5608: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect availability via vectors
related to Core, a different vulnerability than CVE-2016-5613.
CVE-2016-5610: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality,
integrity, and availability via vectors related to Core.
CVE-2016-5611: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality via
vectors related to Core.
CVE-2016-5613: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect availability via vectors
related to Core, a different vulnerability than CVE-2016-5608.
Commit: 5465da610d6d663a29f9f4d669b0e6aeac8efa68
https://github.com/NixOS/nixpkgs/commit/5465da610d6d663a29f9f4d669b0e6aeac8efa68
Author: Graham Christensen <[email protected]>
Date: 2016-10-26 (Wed, 26 Oct 2016)
Changed paths:
M pkgs/applications/virtualization/virtualbox/default.nix
R pkgs/applications/virtualization/virtualbox/libressl.patch
M pkgs/applications/virtualization/virtualbox/upstream-info.json
Log Message:
-----------
Merge pull request #19887 from grahamc/vbox
virtualbox: 5.1.6 -> 5.1.8 for many CVEs:
Compare: https://github.com/NixOS/nixpkgs/compare/7de987d7bdb7...5465da610d6d_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits
