On Mon, 2015-08-10 at 07:16 +0000, Gianfranco Costamagna wrote: > >But if the security team can agree up with this release model, then > the > >VBox team could just keep it up-to-date. > > > > Yes, otherwise the points remains: > > 1) leave the oracle with CVEs in stable releases > > or > > 2) have an exception from Security Team and/or Release Team > > or > > 3) wait and hope Oracle will change the model or make an exception > > ---- > > > 1) means a disappear of VBox from Testing I'm afraid > > 2) We will continue to provide security new releases, and fix almost > all the CVEs around here > (except for one in o-o-stable) > 3) this is kind of impossible right now I guess (even if Oracle > employees are continuing > to try to have it) Does anyone know what Fedora project's stand is on VBox ? From what I've checked so far, Fedora does not ship VBox. But I'm not sure what their reasons are....... -- Ritesh Raj Sarraf | http://people.debian.org/~rrs Debian - The Universal Operating System
Attachment:
signature.asc
Description: This is a digitally signed message part