Lucene search

K
suseSuseOPENSUSE-SU-2020:1511-1
HistorySep 24, 2020 - 12:00 a.m.

Security update for virtualbox (important)

2020-09-2400:00:00
lists.opensuse.org
34

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

An update that fixes 25 vulnerabilities is now available.

Description:

This update for virtualbox fixes the following issues:

Version Bump to 6.0.24 (released July 14 2020 by Oracle)

This is a maintenance release. The following items were fixed and/or added:

  • API: Fix unintentionally enabled audio due to a settings file version
    dependent bug
  • VBoxManage: Fix crash of ‘VBoxManage internalcommands repairhd’ when
    processing invalid input (bug #19579)
  • Guest Additions: Fix issues detecting guest additions ISO at runtime
  • Fixes CVE-2020-14628, CVE-2020-14646, CVE-2020-14647, CVE-2020-14649,
    CVE-2020-14713, CVE-2020-14674, CVE-2020-14675, CVE-2020-14676,
    CVE-2020-14677, CVE-2020-14699, CVE-2020-14711, CVE-2020-14629,
    CVE-2020-14703, CVE-2020-14704, CVE-2020-14648, CVE-2020-14650,
    CVE-2020-14673, CVE-2020-14694, CVE-2020-14695, CVE-2020-14698,
    CVE-2020-14700, CVE-2020-14712, CVE-2020-14707, CVE-2020-14714,
    CVE-2020-14715 boo#1174159

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2020-1511=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.1x86_64< - openSUSE Leap 15.1 (x86_64):- openSUSE Leap 15.1 (x86_64):.x86_64.rpm
openSUSE Leap15.1noarch< - openSUSE Leap 15.1 (noarch):- openSUSE Leap 15.1 (noarch):.noarch.rpm

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N