Lucene search

K
suseSuseOPENSUSE-SU-2022:10129-1
HistorySep 23, 2022 - 12:00 a.m.

Security update for virtualbox (important)

2022-09-2300:00:00
lists.opensuse.org
18

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

An update that solves two vulnerabilities and has two fixes
is now available.

Description:

This update for virtualbox fixes the following issues:

Version bump to 6.1.38r86 released by Oracle September 02 2022

This is a maintenance release. The following items were fixed and/or added:

  • GUI: Improvements in Native Language Support area

  • Main: OVF Export: Added support for exporting VMs containing Virtio-SCSI
    controllers

  • Recording settings: Fixed a regression which could cause not starting
    the COM server (VBoxSVC) under certain circumstances (bug #21034)

  • Recording: More deterministic naming for recorded files (will now
    overwrite old .webm files if present)

  • Linux Host and Guest Additions installer: Improved check for systemd
    presence in the system (bug #19033)

  • Linux Guest Additions: Introduced initial support for kernel 6.0

  • Linux Guest Additions: Additional fixes for kernel RHEL 9.1 (bug #21065)

  • Windows Guest Additions: Improvements in Drag and Drop area

  • Fixes permission problem with /dev/vboxuser (boo#1203370)

  • Fixes missing firewall opening (boo#1203086)

  • Fixes boo#1201720 CVE items for CVE-2022-21571, CVE-2022-21554

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-2022-10129=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (x86_64):- openSUSE Leap 15.3 (x86_64):.x86_64.rpm
openSUSE Leap15.3noarch< - openSUSE Leap 15.3 (noarch):- openSUSE Leap 15.3 (noarch):.noarch.rpm

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H