VirtualBox

Ticket #11319 (new defect)

Opened 16 months ago

Extension pack download is not secure

Reported by: eug Owned by:
Priority: major Component: installer
Version: VirtualBox 4.2.6 Keywords:
Cc: Guest type: all
Host type: all

Description

The installer downloads the extension pack from  http://dlc.sun.com.edgesuite.net/virtualbox/4.2.6. IMHO https should be used or there should be some kind of digital signature, even if it's just gpg.

Note: See TracTickets for help on using tickets.

www.oracle.com
ContactPrivacy policyTerms of Use