Debian-LTS alert DLA-372-1 (virtualbox-ose)

From:
    	     
 
Raphael Hertzog <hertzog@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 372-1] virtualbox-ose 3.2.x is no longer supported in Debian 6 
Date:
    	     
 
Fri, 18 Dec 2015 10:52:26 +0100
Message-ID:
    	     
 
<20151218095226.GA18186@home.ouaza.com>
Package        : virtualbox-ose

Oracle stopped supporting version 3.2 of VirtualBox last June. They also
do not disclose enough information about vulnerabilities discovered
and fixed in newer versions so that it is impossible for us to
verify whether the vulnerability also applies to 3.2 and to backport
the fix when needed.

We are thus no longer supporting virtualbox-ose in Debian 6 Squeeze.
If you rely on it, you should either consider using backports of newer
versions (version 4.1.42 is available in squeeze-backports) or
upgrade to Debian 7 Wheezy (or newer).

-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/