[Git][security-tracker-team/security-tracker][master] mark CVE-2026-77178 as fixed in 7.2.8

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5bff4e54 by Moritz Muehlenhoff at 2026-10-10T00:33:31+02:00
mark CVE-2026-77178 as fixed in 7.2.8

Sounds like MITRE took over since it was fixed in an older version of
vbox, so simply recording that version as fixed.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3389,8 +3389,7 @@ CVE-2026-82162 (Dell Command | Configure (DCC), versions prior to 5.2.3.35, cont
 CVE-2026-80327 (An open redirect vulnerability exists in the PingGateway Fragment Filt ...)
 	NOT-FOR-US: Ping Identity Corporation
 CVE-2026-77178 (Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an ou ...)
-	- virtualbox <undetermined>
-	TODO: check, https://gist.github.com/entropy1337/cd0d5b368445d20c43aca2590b313892 claims fixed in 7.2.8
+	- virtualbox 7.2.8-dfsg-1
 CVE-2026-76105 (Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-75820 (GNU Aspell contains an integer truncation vulnerability in the Writabl ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bff4e549f3629da7498fdd09bb8d451df47d61b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bff4e549f3629da7498fdd09bb8d451df47d61b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/c2ba139b/attachment.htm>