Bug#735410: virtualbox: CVE-2013-5892 CVE-2014-0407 CVE-2014-0406 CVE-2014-0404

2014-01-29 Thread Moritz Muehlenhoff
On Tue, Jan 28, 2014 at 10:26:06PM +0100, Felix Geyer wrote: Do you want to handle this through a security update? According to upstream the vulnerabilities are mostly about users on the VM being able to crash their VM. No ways to execute code on the host are known. I that case we don't need

Bug#735410: virtualbox: CVE-2013-5892 CVE-2014-0407 CVE-2014-0406 CVE-2014-0404

2014-01-28 Thread Felix Geyer
On 15.01.2014 09:19, Moritz Muehlenhoff wrote: Package: virtualbox Severity: grave Tags: security http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html Several vulnerabilities have been reported in VirtualBox. Details are scarce, so please get in touch with upstream

Bug#735410: virtualbox: CVE-2013-5892 CVE-2014-0407 CVE-2014-0406 CVE-2014-0404

2014-01-15 Thread Moritz Muehlenhoff
Package: virtualbox Severity: grave Tags: security http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html Several vulnerabilities have been reported in VirtualBox. Details are scarce, so please get in touch with upstream for more information on eventual backports to