This bug was fixed in the package virtualbox - 5.2.18-dfsg-
2ubuntu18.10.1
---------------
virtualbox (5.2.18-dfsg-2ubuntu18.10.1) cosmic-security; urgency=medium
* debian/patches/fix-for-guest-to-host-escape-vulnerability.patch:
- Apply patch for guest-to-host escape vulnerability (LP: #1809156)
- CVE-2018-3294
* cherry-pick build fix by using java8 (from 5.2.20 Debian uploads)
- use java8 again, java11 removes wsimport, useful to have the build finish.
-- Martin Konrad <[email protected]> Wed, 26 Dec 2018 19:41:57
-0500
** Changed in: virtualbox (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1809156
Title:
E1000 guest to host escape
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/virtualbox/+bug/1809156/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs