On Mon, Aug 10, 2015 at 07:16:59AM +0000, Gianfranco Costamagna wrote: > Yes, otherwise the points remains: > > 1) leave the oracle with CVEs in stable releases > > or > > 2) have an exception from Security Team and/or Release Team > > or > > 3) wait and hope Oracle will change the model or make an exception
We'll have a security team meeting at DebConf and will discuss virtualbox as well. Cheers, Moritz