Advisories » MGASA-2016-0226

Updated virtualbox packages fix security vulnerability

Publication date: 17 Jun 2016
Modification date: 17 Jun 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-0678

Description

This update provides virtualbox 5.0.20 maintenance release, and fixes
the following security issue:

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle
Virtualization VirtualBox before 5.0.18 allows local users to affect
confidentiality, integrity, and availability via vectors related to Core.
(CVE-2016-0678)

For other fixes in this update, see the referenced changelog.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=18236
• https://www.virtualbox.org/wiki/Changelog
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0678

SRPMS

5/core

• kmod-vboxadditions-5.0.20-3.mga5
• kmod-virtualbox-5.0.20-3.mga5
• virtualbox-5.0.20-1.1.mga5