[SECURITY] [DSA 3699-1] virtualbox end of life

Warum Debian und/oder eine seiner Spielarten? Was muss ich vorher wissen? Wo geht es nach der Installation weiter?
Antworten
inne
Beiträge: 3281
Registriert: 29.06.2013 17:32:10
Lizenz eigener Beiträge: GNU General Public License
Kontaktdaten:

[SECURITY] [DSA 3699-1] virtualbox end of life

Beitrag von inne » 25.10.2016 18:19:17

Hallo,

Heute kam eine Mail, das VirtualBox in Jessie EOL ist. Was tun, VirtualBox von http://www.virtualbox.org installieren?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3699-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
October 25, 2016 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : virtualbox

Upstream support for the 4.3 release series has ended and since no
information is available which would allow backports of isolated
security fixes, security support for virtualbox in jessie needed to be
ended as well.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=nXQ+
-----END PGP SIGNATURE-----
Zuletzt geändert von Anonymous am 25.10.2016 18:36:28, insgesamt 1-mal geändert.

Benutzeravatar
smutbert
Moderator
Beiträge: 8331
Registriert: 24.07.2011 13:27:39
Wohnort: Graz

Re: [SECURITY] [DSA 3699-1] virtualbox end of life

Beitrag von smutbert » 25.10.2016 18:23:05

entweder das, ignorieren :wink: oder die Version aus den backports installieren (5.0.x)

inne
Beiträge: 3281
Registriert: 29.06.2013 17:32:10
Lizenz eigener Beiträge: GNU General Public License
Kontaktdaten:

Re: [SECURITY] [DSA 3699-1] virtualbox end of life

Beitrag von inne » 25.10.2016 18:25:18

smutbert hat geschrieben:die Version aus den backports installieren (5.0.x)
Das habe ich nun getan.

Bekommen Backports auch Updates?

Benutzeravatar
tegula
Beiträge: 439
Registriert: 04.06.2004 13:51:04
Lizenz eigener Beiträge: MIT Lizenz

Re: [SECURITY] [DSA 3699-1] virtualbox end of life

Beitrag von tegula » 25.10.2016 18:40:08

inne hat geschrieben:
smutbert hat geschrieben:die Version aus den backports installieren (5.0.x)
Das habe ich nun getan.

Bekommen Backports auch Updates?
Jein :wink:.
https://backports.debian.org/FAQ/:

Code: Alles auswählen

[...]
Q: Is there security support for packages from backports.debian.org?

A: Unfortunately not. This is done on a best effort basis by the people who track the package, usually the ones who originally did upload the package into backports. When security related bugs are fixed in Debian unstable the backporter is permitted to upload the package from directly there instead of having to wait until the fix hits testing. You can see the open issues for wheezy-backports in the security tracker (though there may be false positives too, the version compare isn't perfect yet) 
[...]

Antworten