Bug#785424: Re: [vbox-dev] CVE-2015-3456 aka VENOM

2015-05-20 Thread Moritz Mühlenhoff
On Tue, May 19, 2015 at 09:36:45AM +, Gianfranco Costamagna wrote: > Hi Debian security team, can we please followup with the two uploads then? > > I'm attaching the two debdiffs, Ok, please upload. Jessie needs to be build with "-sa" since virtualbox is new in jessie-security. I'll take car

Bug#785424: Re: [vbox-dev] CVE-2015-3456 aka VENOM

2015-05-19 Thread Gianfranco Costamagna
Hi Debian security team, can we please followup with the two uploads then? I'm attaching the two debdiffs, chers, Gianfranco Il Martedì 19 Maggio 2015 11:27, Frank Mehnert ha scritto: Hi Gianfranco, On Tuesday 19 May 2015 09:17:13 Gianfranco Costamagna wrote: > Hi Frank, are you sure the

Bug#785424: Re: [vbox-dev] CVE-2015-3456 aka VENOM

2015-05-19 Thread Frank Mehnert
Hi Gianfranco, On Tuesday 19 May 2015 09:17:13 Gianfranco Costamagna wrote: > Hi Frank, are you sure the bug is really fixed? > > the qemu patch seems to be different from the virtualbox one, and seems that > the affected code is not fixed > http://git.qemu.org/?p=qemu.git;a=blobdiff;f=hw/block/f