{"id":"openSUSE-SU-2021:1393-1","summary":"Security update for virtualbox","details":"This update for virtualbox fixes the following issues:\n\nVersion bump to 6.1.28 (released October 19 2021 by Oracle)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- VMM: Fixed guru meditation while booting nested-guests accessing debug registers under certain conditions\n- UI: Bug fixes for touchpad-based scrolling\n- VMSVGA: Fixed VM black screen issue on first resize after restoring from saved state (bug #20067)\n- VMSVGA: Fixed display corruption on Linux Mint (bug #20513)\n- Storage: Fixed a possible write error under certain circumstances when using VHD images (bug #20512)\n- Network: Multiple updates in virtio-net device support\n- Network: Disconnecting cable in saved VM state now is handled properly by virtio-net\n- Network: More administrative control over network ranges, see user manual\n- NAT: Fixed not rejecting TFTP requests with absolute pathnames (bug #20589)\n- Audio: Fixed VM session aborting after PC hibernation (bug #20516)\n- Audio: Fixed setting the line-in volume of the HDA emulation on modern Linux guests\n- Audio: Fixed resuming playback of the AC'97 emulation while a snapshot has been taken\n- API: Added bindings support for Python 3.9 (bug #20252)\n- API: Fixed rare hang of VM when changing settings at runtime\n- Linux host: Improved kernel modules installation detection which prevents unnecessary modules rebuild\n- Host Services: Shared Clipboard: Prevent guest clipboard reset when clipboard sharing is disabled (bug #20487)\n- Host Services: Shared Clipboard over VRDP: Fixed to continue working when guest service reconnects to host (bug #20366)\n- Host Services: Shared Clipboard over VRDP: Fixed preventing remote RDP client to hang when guest has no clipboard data to report\n- Linux Host and Guest: Introduced initial support for kernels 5.14 and 5.15\n- Linux Host and Guest: Introduced initial support for RHEL 8.5 kernel\n- Windows Guest: Introduced Windows 11 guest support, including unattended installation\n- Fixes CVE-2021-35538, CVE-2021-35545, CVE-2021-35540, CVE-2021-35542, and CVE-2021-2475 (boo#1191869)\n\n- Use kernel_module_directory macro for kernel modules (boo#1191526)\n- Finish UsrMerge for VirtualBox components (boo#1191104).\n","modified":"2026-02-04T04:24:51.570753Z","published":"2021-10-26T10:00:51Z","related":["CVE-2021-2475","CVE-2021-35538","CVE-2021-35540","CVE-2021-35542","CVE-2021-35545"],"upstream":["CVE-2021-2475","CVE-2021-35538","CVE-2021-35540","CVE-2021-35542","CVE-2021-35545"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TGGPXPQHCHAYI4TLQLUQ74AESTO2Y6W/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1191104"},{"type":"REPORT","url":"https://bugzilla.suse.com/1191526"},{"type":"REPORT","url":"https://bugzilla.suse.com/1191869"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-2475"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-35538"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-35540"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-35542"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-35545"}],"affected":[{"package":{"name":"virtualbox","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.28-lp153.2.12.1"}]}],"ecosystem_specific":{"binaries":[{"virtualbox-websrv":"6.1.28-lp153.2.12.1","virtualbox":"6.1.28-lp153.2.12.1","python3-virtualbox":"6.1.28-lp153.2.12.1","virtualbox-guest-source":"6.1.28-lp153.2.12.1","virtualbox-guest-x11":"6.1.28-lp153.2.12.1","virtualbox-host-source":"6.1.28-lp153.2.12.1","virtualbox-kmp-preempt":"6.1.28_k5.3.18_59.27-lp153.2.12.1","virtualbox-qt":"6.1.28-lp153.2.12.1","virtualbox-vnc":"6.1.28-lp153.2.12.1","virtualbox-devel":"6.1.28-lp153.2.12.1","virtualbox-guest-desktop-icons":"6.1.28-lp153.2.12.1","virtualbox-guest-tools":"6.1.28-lp153.2.12.1","virtualbox-kmp-default":"6.1.28_k5.3.18_59.27-lp153.2.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1393-1.json"}},{"package":{"name":"virtualbox-kmp","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.28-lp153.2.12.1"}]}],"ecosystem_specific":{"binaries":[{"virtualbox-kmp-preempt":"6.1.28_k5.3.18_59.27-lp153.2.12.1","virtualbox":"6.1.28-lp153.2.12.1","python3-virtualbox":"6.1.28-lp153.2.12.1","virtualbox-guest-desktop-icons":"6.1.28-lp153.2.12.1","virtualbox-guest-tools":"6.1.28-lp153.2.12.1","virtualbox-host-source":"6.1.28-lp153.2.12.1","virtualbox-kmp-default":"6.1.28_k5.3.18_59.27-lp153.2.12.1","virtualbox-qt":"6.1.28-lp153.2.12.1","virtualbox-vnc":"6.1.28-lp153.2.12.1","virtualbox-websrv":"6.1.28-lp153.2.12.1","virtualbox-devel":"6.1.28-lp153.2.12.1","virtualbox-guest-source":"6.1.28-lp153.2.12.1","virtualbox-guest-x11":"6.1.28-lp153.2.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1393-1.json"}}],"schema_version":"1.7.3"}