Re: Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update

2015-10-03 Thread Gianfranco Costamagna
ie-security; urgency=medium + + [ Ritesh Raj Sarraf ] + * Move virtualbox-dkms | virtualbox-source to Depends, +needed to fully configure virtualbox kernel module prior +to reload virtualbox service, avoiding a race condition. +(Closes: #798527, #798979) + + -- Gianfranco Costamagna Fri,

Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update

2015-09-18 Thread Gianfranco Costamagna
BTW I'm mostly sure as we specified in a previous email, this problem is not related to the security DSA, but with a race condition in an upgrade path handled by apt. (probably always here, but with systemd it might be occurring more frequently). (it might have happened with a one-line patch, or

Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update

2015-09-18 Thread Gianfranco Costamagna
Hi Dirk, >your recommendation has produced bug #798979 and meanwhile 16 e-mails. >Why didn't you restrict these obviously not enough tested changes to >distributions other than "stable" and "oldstable" or at least to those >users who want to work with WiFi? As for Debian no homebanking programs

Re: Bug#794466: Virtualbox might not be suitable for Stretch

2015-08-31 Thread Gianfranco Costamagna
Hi Moritz, > >We'll have a security team meeting at DebConf and will discuss >virtualbox as well. following up on the DebConf discussion, I did update vbox for wheezy and jessie, on the respective braches on git (names with the codenames) targeted -security. http://anonscm.debian.org/cgit/pkg-v

Re: Bug#794466: Virtualbox might not be suitable for Stretch

2015-08-10 Thread Gianfranco Costamagna
Hi, >Debian Security Team: >These are what we have currently in Debian: > >oldstable: 4.1.18 >stable: 4.3.18 >testing: 4.3.30 I would add (as Ben requested) old-old-stable 3.2.10 --> 3.2.28 (this will fix AFAICS all the CVEs on o-o-stable, but not the latest one) https://www.virtualbox.org

Re: Bug#794466: Virtualbox might not be suitable for Stretch

2015-08-08 Thread Gianfranco Costamagna
between versions, changelogs or whatever). (below a little snippet of the last two bug messages) cheers, Gianfranco Il Sabato 8 Agosto 2015 23:42, Jonathan Wiltshire ha scritto: On Sat, Aug 08, 2015 at 09:23:31PM +, Gianfranco Costamagna wrote: > Virtualbox suffers of many secur