openSUSE-SU-2021:1092-1

    Dashboard / Vulnerabilities / openSUSE-SU-2021:1092-1

    openSUSE-SU-2021:1092-1

    Published: 4 Aug 2021Last Modified: 4 Feb 2026

    Summary: Security update for virtualbox

    Details: This update for virtualbox fixes the following issues: Version bump to 6.1.24 (released July 20 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: - Storage: Fixed starting a VM if a device is attached to a VirtIO SCSI port higher than 30 (bug #20213) - Storage: Improvement to DVD medium change signaling - Serial: Fixed a the guest missing interrupts under certain circumstances (6.0 regression, bug #18668) - Audio: Multiple fixes and enhancements - Network: Fixed connectivity issue with virtio-net after resuming VM with disconnected link - Network: Fixed UDP GSO fragmentation issue with missing 8 bytes of payload at the end of the first fragment - API: Fixed VM configuration for recent Windows Server versions - Extension Pack: Fixed issues with USB webcam pass-through on Linux - Host and guest driver: Fix small memory leak (bug #20280) - Linux host and guest: Support kernel version 5.13 (bug #20456) - Linux host and guest: Introduce support for SUSE SLES/SLED 15 SP3 kernels (bug #20396) - Linux host: Installer will not attempt to build kernel modules if system already has them installed and modules versions match current version - Guest Additions: Fixed crash on using shared clipboard (bug #19165) - Linux Guest Additions: Introduce support for Ubuntu specific kernels (bug #20325) - Solaris guest: Increased default memory and disk sizes - EFI: Support network booting with the E1000 network controller emulation - EFI: Stability improvements (bug #20090) - This release fixes boo#1188535, VUL-0: CVE-2021-2454, boo#1188536, VUL-0: CVE-2021-2409, boo#1188537, VUL-0: CVE-2021-2442, and boo#1188538, VUL-0: CVE-2021-2443. - Add vboximg-mount to packaging. boo#1188045. - Fix CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT problem with kernel 5.13 as shown in boo#1188105. - Disable the build of kmp vboxvideo, at least temporarily. - Correct WantedBy entry in vboxadd-service - Require which for /usr/lib/virtualbox/vboxadd-service - fix license packaging, small cruft cleanup (avoid owning directories provided by filesystem rpm)

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/UQOOU7OS5PW5QXPE2UITMUDKYSU7JH54/, https://bugzilla.suse.com/1188045, https://bugzilla.suse.com/1188105, https://bugzilla.suse.com/1188535, https://bugzilla.suse.com/1188536, https://bugzilla.suse.com/1188537, https://bugzilla.suse.com/1188538, https://www.suse.com/security/cve/CVE-2021-2409, https://www.suse.com/security/cve/CVE-2021-2442, https://www.suse.com/security/cve/CVE-2021-2443, https://www.suse.com/security/cve/CVE-2021-2454

    Affected packages

    Package

    Name: virtualbox

    Purl: pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Leap%2015.3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -6.1.24-lp153.2.6.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2021:1092-1 | CVE-DB