Re: Re: Bug#798979: [SECURITY] [DSA 3359-1] virtualbox security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi folks, with the Unstable/Strech fixed uploads I'm ready to ask for
a DSA, to fix the virtualbox "regression" problem.
Following the debdiff.
Basically we fixed the circular dependency that lead to a bad
behaviour during upgrades for some people.
I'm asking your permission to upload on ftp-master.
cheers,
(and thanks)
Gianfranco
diff --git a/debian/changelog b/debian/changelog
index 3da9c65..de7c7b0 100644
- --- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+virtualbox (4.3.30-dfsg-1+deb8u2) jessie-security; urgency=medium
+
+ [ Ritesh Raj Sarraf ]
+ * Move virtualbox-dkms | virtualbox-source to Depends,
+ needed to fully configure virtualbox kernel module prior
+ to reload virtualbox service, avoiding a race condition.
+ (Closes: #798527, #798979)
+
+ -- Gianfranco Costamagna <locutusofborg@debian.org> Fri, 18 Sep
2015 23:35:08 +0200
+
virtualbox (4.3.30-dfsg-1+deb8u1) jessie-security; urgency=medium
[ Ritesh Raj Sarraf ]
diff --git a/debian/control b/debian/control
index 2307870..4972d3c 100644
- --- a/debian/control
+++ b/debian/control
@@ -88,10 +88,8 @@ Description: x86 virtualization solution - Qt based
user interface
Package: virtualbox
Architecture: amd64 i386
Pre-Depends: dpkg (>= 1.15.6~)
- -Depends: adduser, ${misc:Depends}, ${python:Depends}, ${shlibs:Depends}
- -Recommends: virtualbox-dkms (= ${source:Version}) | virtualbox-source
(= ${source:Version}),
- - virtualbox-qt (= ${binary:Version}),
- - ${shlibs:Recommends}
+Depends: adduser, ${misc:Depends}, ${python:Depends},
${shlibs:Depends}, virtualbox-dkms (>= ${source:Version}) |
virtualbox-source (>= ${source:Version}) | virtualbox-modules (>=
${source:Version})
+Recommends: virtualbox-qt (= ${binary:Version}), ${shlibs:Recommends}
Suggests: vde2, virtualbox-guest-additions-iso
Conflicts: virtualbox-2.0,
virtualbox-2.1,
@@ -132,7 +130,8 @@ Package: virtualbox-dkms
Section: contrib/kernel
Architecture: all
Pre-Depends: dpkg (>= 1.15.6~)
- -Depends: virtualbox (>= ${source:Version}), ${misc:Depends}
+Depends: ${misc:Depends}
+Recommends: virtualbox (>= ${source:Version})
Description: x86 virtualization solution - kernel module sources for dk
ms
VirtualBox is a free x86 virtualization solution allowing a wide range
of x86 operating systems such as Windows, DOS, BSD or Linux to run on
a
@@ -151,6 +150,7 @@ Depends: build-essential,
kbuild,
module-assistant,
${misc:Depends}
+Recommends: virtualbox (>= ${source:Version})
Description: x86 virtualization solution - kernel module source
VirtualBox is a free x86 virtualization solution allowing a wide range
of x86 operating systems such as Windows, DOS, BSD or Linux to run on
a
@@ -159,6 +159,10 @@ Description: x86 virtualization solution - kernel
module source
This package provides the source code for the virtualbox kernel module
.
The virtualbox package is also required in order to make use of these
modules. Kernel sources or headers are required to compile this module
.
+ .
+ The source is placed under /usr/src, and after decompression it can
+ be built to produce a virtualbox-modules-_KVERS_ providing
+ "virtualbox-modules" package.
Package: virtualbox-guest-dkms
Section: contrib/kernel
@@ -194,6 +198,10 @@ Description: x86 virtualization solution - guest
addition module source
modules. The virtualbox-guest-utils package is also required in order
to
make use of these modules. Kernel sources or headers are required to
compile
these modules.
+ .
+ The source is placed under /usr/src, and after decompression it can
+ be built to produce a virtualbox-guest-modules-_KVERS_ providing
+ "virtualbox-guest-modules" package.
Package: virtualbox-guest-x11
Section: contrib/x11
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=41iN
-----END PGP SIGNATURE-----
diff --git a/debian/changelog b/debian/changelog
index 3da9c65..de7c7b0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+virtualbox (4.3.30-dfsg-1+deb8u2) jessie-security; urgency=medium
+
+ [ Ritesh Raj Sarraf ]
+ * Move virtualbox-dkms | virtualbox-source to Depends,
+ needed to fully configure virtualbox kernel module prior
+ to reload virtualbox service, avoiding a race condition.
+ (Closes: #798527, #798979)
+
+ -- Gianfranco Costamagna <locutusofborg@debian.org> Fri, 18 Sep 2015 23:35:08 +0200
+
virtualbox (4.3.30-dfsg-1+deb8u1) jessie-security; urgency=medium
[ Ritesh Raj Sarraf ]
diff --git a/debian/control b/debian/control
index 2307870..4972d3c 100644
--- a/debian/control
+++ b/debian/control
@@ -88,10 +88,8 @@ Description: x86 virtualization solution - Qt based user interface
Package: virtualbox
Architecture: amd64 i386
Pre-Depends: dpkg (>= 1.15.6~)
-Depends: adduser, ${misc:Depends}, ${python:Depends}, ${shlibs:Depends}
-Recommends: virtualbox-dkms (= ${source:Version}) | virtualbox-source (= ${source:Version}),
- virtualbox-qt (= ${binary:Version}),
- ${shlibs:Recommends}
+Depends: adduser, ${misc:Depends}, ${python:Depends}, ${shlibs:Depends}, virtualbox-dkms (>= ${source:Version}) | virtualbox-source (>= ${source:Version}) | virtualbox-modules (>= ${source:Version})
+Recommends: virtualbox-qt (= ${binary:Version}), ${shlibs:Recommends}
Suggests: vde2, virtualbox-guest-additions-iso
Conflicts: virtualbox-2.0,
virtualbox-2.1,
@@ -132,7 +130,8 @@ Package: virtualbox-dkms
Section: contrib/kernel
Architecture: all
Pre-Depends: dpkg (>= 1.15.6~)
-Depends: virtualbox (>= ${source:Version}), ${misc:Depends}
+Depends: ${misc:Depends}
+Recommends: virtualbox (>= ${source:Version})
Description: x86 virtualization solution - kernel module sources for dkms
VirtualBox is a free x86 virtualization solution allowing a wide range
of x86 operating systems such as Windows, DOS, BSD or Linux to run on a
@@ -151,6 +150,7 @@ Depends: build-essential,
kbuild,
module-assistant,
${misc:Depends}
+Recommends: virtualbox (>= ${source:Version})
Description: x86 virtualization solution - kernel module source
VirtualBox is a free x86 virtualization solution allowing a wide range
of x86 operating systems such as Windows, DOS, BSD or Linux to run on a
@@ -159,6 +159,10 @@ Description: x86 virtualization solution - kernel module source
This package provides the source code for the virtualbox kernel module.
The virtualbox package is also required in order to make use of these
modules. Kernel sources or headers are required to compile this module.
+ .
+ The source is placed under /usr/src, and after decompression it can
+ be built to produce a virtualbox-modules-_KVERS_ providing
+ "virtualbox-modules" package.
Package: virtualbox-guest-dkms
Section: contrib/kernel
@@ -194,6 +198,10 @@ Description: x86 virtualization solution - guest addition module source
modules. The virtualbox-guest-utils package is also required in order to
make use of these modules. Kernel sources or headers are required to compile
these modules.
+ .
+ The source is placed under /usr/src, and after decompression it can
+ be built to produce a virtualbox-guest-modules-_KVERS_ providing
+ "virtualbox-guest-modules" package.
Package: virtualbox-guest-x11
Section: contrib/x11
Reply to: