Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

openSUSE Leap 15.2 Important: VirtualBox Security Update for Issues

opensuse
Calendar Grey August 10, 2021
Dist Opensuse Esm H88
A significant software patch for Fedora's VirtualBox resolves various vulnerabilities and enhances performance for its user base.
An update that solves four vulnerabilities and has two fixes is now available

Description

This update for virtualbox fixes the following issues:

Version bump to 6.1.26 (released July 28 2021 by Oracle)

This is a maintenance release. The following items were fixed and/or added:

- VMSVGA: fixed VM screen artifacts after restoring from saved state (bug

#20067)

- Storage: Fixed audio endianness for certain CUE sheet CD/DVD images.

- VBoxHeadless: Running VM will save its state on host shutdown

- VBoxManage: Fix OS detection for Ubuntu 20.10 ISO with unattended install

- Linux Additions: Fixed mouse pointer offsetting issue for VMSVGA

graphics adapter in multi-monitor VM setup (6.1.24 regression)

Version bump to 6.1.24 (released July 20 2021 by Oracle)

This is a maintenance release. The following items were fixed and/or added:

- Storage: Fixed starting a VM if a device is attached to a VirtIO SCSI

port higher than 30 (bug #20213)

- Storage: Improvement to DVD medium change signaling

- Serial: Fixed a the guest missing...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2021-1114=1

Package List

- openSUSE Leap 15.2 (x86_64):

python3-virtualbox-6.1.26-lp152.2.35.1

python3-virtualbox-debuginfo-6.1.26-lp152.2.35.1

virtualbox-6.1.26-lp152.2.35.1

virtualbox-debuginfo-6.1.26-lp152.2.35.1

virtualbox-debugsource-6.1.26-lp152.2.35.1

virtualbox-devel-6.1.26-lp152.2.35.1

virtualbox-guest-tools-6.1.26-lp152.2.35.1

virtualbox-guest-tools-debuginfo-6.1.26-lp152.2.35.1

virtualbox-guest-x11-6.1.26-lp152.2.35.1

virtualbox-guest-x11-debuginfo-6.1.26-lp152.2.35.1

virtualbox-kmp-debugsource-6.1.26-lp152.2.35.1

virtualbox-kmp-default-6.1.26_k5.3.18_lp152.84-lp152.2.35.1

virtualbox-kmp-default-debuginfo-6.1.26_k5.3.18_lp152.84-lp152.2.35.1

virtualbox-kmp-preempt-6.1.26_k5.3.18_lp152.84-lp152.2.35.1

virtualbox-kmp-preempt-debuginfo-6.1.26_k5.3.18_lp152.84-lp152.2.35.1

virtualbox-qt-6.1.26-lp152.2.35.1

virtualbox-qt-debuginfo-6.1.26-lp152.2.35.1

virtualbox-vnc-6.1.26-lp152.2.35.1

virtualbox-websrv-6.1.26-lp152.2.35.1

virtualbox-websrv-debuginfo-6.1.26-lp152.2.35.1

- openSUSE Leap 15.2 (noarch):

virtualbox-guest-desktop-i...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2021-2409.html

https://www.suse.com/security/cve/CVE-2021-2442.html

https://www.suse.com/security/cve/CVE-2021-2443.html

https://www.suse.com/security/cve/CVE-2021-2454.html

https://bugzilla.suse.com/1188045

https://bugzilla.suse.com/1188105

https://bugzilla.suse.com/1188535

https://bugzilla.suse.com/1188536

https://bugzilla.suse.com/1188537

https://bugzilla.suse.com/1188538

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2021:1114-1
Rating: important
Affected Products: openSUSE Leap 15.2 ble.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here