{"schemaVersion":3,"id":"OPENSUSE-SU-2021:1092-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for virtualbox\n\nThis update for virtualbox fixes the following issues:\n\nVersion bump to 6.1.24 (released July 20 2021 by Oracle)\n\n  This is a maintenance release. The following items were fixed and/or added:\n\n- Storage: Fixed starting a VM if a device is attached to a VirtIO SCSI port higher than 30 (bug #20213)\n- Storage: Improvement to DVD medium change signaling\n- Serial: Fixed a the guest missing interrupts under certain circumstances (6.0 regression, bug #18668)\n- Audio: Multiple fixes and enhancements\n- Network: Fixed connectivity issue with virtio-net after resuming VM with disconnected link\n- Network: Fixed UDP GSO fragmentation issue with missing 8 bytes of payload at the end of the first fragment\n- API: Fixed VM configuration for recent Windows Server versions\n- Extension Pack: Fixed issues with USB webcam pass-through on Linux\n- Host and guest driver: Fix small memory leak (bug #20280)\n- Linux host and guest: Support kernel version 5.13 (bug #20456)\n- Linux host and guest: Introduce support for SUSE SLES/SLED 15 SP3 kernels (bug #20396)\n- Linux host: Installer will not attempt to build kernel modules if system already has them installed and modules versions match current version\n- Guest Additions: Fixed crash on using shared clipboard (bug #19165)\n- Linux Guest Additions: Introduce support for Ubuntu specific kernels (bug #20325)\n- Solaris guest: Increased default memory and disk sizes\n- EFI: Support network booting with the E1000 network controller emulation\n- EFI: Stability improvements (bug #20090)\n\n- This release fixes boo#1188535, VUL-0: CVE-2021-2454,\n                     boo#1188536, VUL-0: CVE-2021-2409,\n                     boo#1188537, VUL-0: CVE-2021-2442, and\n                     boo#1188538, VUL-0: CVE-2021-2443.\n\n- Add vboximg-mount to packaging. boo#1188045.\n- Fix CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT problem with kernel 5.13 as shown in boo#1188105.\n- Disable the build of kmp vboxvideo, at least temporarily.\n- Correct WantedBy entry in vboxadd-service\n- Require which for /usr/lib/virtualbox/vboxadd-service\n- fix license packaging, small cruft cleanup (avoid owning directories provided by filesystem rpm)","dates":{"published":"2021-08-04T22:17:47.000Z","modified":"2026-02-04T04:09:36.829Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"virtualbox-kmp&distro=openSUSE Leap 15.3","name":"virtualbox-kmp","label":"virtualbox-kmp&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 6.1.24-lp153.2.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.24-lp153.2.6.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"virtualbox&distro=openSUSE Leap 15.3","name":"virtualbox","label":"virtualbox&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/virtualbox&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 6.1.24-lp153.2.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.24-lp153.2.6.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UQOOU7OS5PW5QXPE2UITMUDKYSU7JH54/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1188045","label":"bugzilla.suse.com/1188045","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188105","label":"bugzilla.suse.com/1188105","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188535","label":"bugzilla.suse.com/1188535","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188536","label":"bugzilla.suse.com/1188536","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188537","label":"bugzilla.suse.com/1188537","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188538","label":"bugzilla.suse.com/1188538","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2409","label":"www.suse.com/security/cve/CVE-2021-2409","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2442","label":"www.suse.com/security/cve/CVE-2021-2442","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2443","label":"www.suse.com/security/cve/CVE-2021-2443","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2454","label":"www.suse.com/security/cve/CVE-2021-2454","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2021-2409","CVE-2021-2442","CVE-2021-2443","CVE-2021-2454"],"downstream":[],"duplicates":[],"related":["CVE-2021-2409","CVE-2021-2442","CVE-2021-2443","CVE-2021-2454"]},"timeline":[{"kind":"published","date":"2021-08-04T22:17:47.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:09:36.829Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T15:22:59.671Z","stale":false,"partial":false}}