Mageia alert MGASA-2017-0250 (virtualbox)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2017-0250: Updated virtualbox packages fix security vulnerabilities 
Date:
    	     
 
Tue, 8 Aug 2017 22:25:16 +0200
Message-ID:
    	     
 
<20170808202516.31AC59F873@duvel.mageia.org>
MGASA-2017-0250 - Updated virtualbox packages fix security vulnerabilities

Publication date: 08 Aug 2017
URL: http://advisories.mageia.org/MGASA-2017-0250.html
Type: security
Affected Mageia releases: 5, 6
CVE: CVE-2017-10129,
     CVE-2017-10187,
     CVE-2017-10204,
     CVE-2017-10209,
     CVE-2017-10210,
     CVE-2017-10233,
     CVE-2017-10235,
     CVE-2017-10236,
     CVE-2017-10237,
     CVE-2017-10238,
     CVE-2017-10239,
     CVE-2017-10240,
     CVE-2017-10241,
     CVE-2017-10242

Description:
This update provides the virtualbox 5.1.26 maintenance release, fixing
security and other issues:

This Critical Patch Update contains 14 new unspcified security fixes
for Oracle VM VirtualBox. According to currently known info, none of
these vulnerabilities may be remotely exploitable without authentication,
i.e., none may be exploited over a network without requiring user
credentials.

For other fixes in this update see the referenced changelog.

References:
- https://bugs.mageia.org/show_bug.cgi?id=21325
- https://www.virtualbox.org/wiki/Changelog
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10129
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10187
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10204
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10209
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10210
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10233
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10235
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10236
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10237
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10238
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10239
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10240
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10241
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10242

SRPMS:
- 6/core/virtualbox-5.1.26-1.mga6
- 6/core/kmod-vboxadditions-5.1.26-1.mga6
- 6/core/kmod-virtualbox-5.1.26-1.mga6
- 5/core/virtualbox-5.1.26-1.mga5
- 5/core/kmod-vboxadditions-5.1.26-1.mga5
- 5/core/kmod-virtualbox-5.1.26-1.mga5