{"schemaVersion":3,"id":"OPENSUSE-SU-2021:1114-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for virtualbox\n\nThis update for virtualbox fixes the following issues:\n\nVersion bump to 6.1.26 (released July 28 2021 by Oracle)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- VMSVGA: fixed VM screen artifacts after restoring from saved state (bug #20067)\n- Storage: Fixed audio endianness for certain CUE sheet CD/DVD images.\n- VBoxHeadless: Running VM will save its state on host shutdown\n- VBoxManage: Fix OS detection for Ubuntu 20.10 ISO with unattended install\n- Linux Additions: Fixed mouse pointer offsetting issue for VMSVGA graphics adapter in multi-monitor VM setup (6.1.24 regression)\n\nVersion bump to 6.1.24 (released July 20 2021 by Oracle)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- Storage: Fixed starting a VM if a device is attached to a VirtIO SCSI port higher than 30 (bug #20213)\n- Storage: Improvement to DVD medium change signaling\n- Serial: Fixed a the guest missing interrupts under certain circumstances (6.0 regression, bug #18668)\n- Audio: Multiple fixes and enhancements\n- Network: Fixed connectivity issue with virtio-net after resuming VM with disconnected link\n- Network: Fixed UDP GSO fragmentation issue with missing 8 bytes of payload at the end of the first fragment\n- API: Fixed VM configuration for recent Windows Server versions\n- Extension Pack: Fixed issues with USB webcam pass-through on Linux\n- Host and guest driver: Fix small memory leak (bug #20280)\n- Linux host and guest: Support kernel version 5.13 (bug #20456)\n- Linux host and guest: Introduce support for SUSE SLES/SLED 15 SP3 kernels (bug #20396)\n- Linux host: Installer will not attempt to build kernel modules if system already has them installed and modules versions match current version\n- Guest Additions: Fixed crash on using shared clipboard (bug #19165)\n- Linux Guest Additions: Introduce support for Ubuntu specific kernels (bug #20325)\n- Solaris guest: Increased default memory and disk sizes\n- EFI: Support network booting with the E1000 network controller emulation\n- EFI: Stability improvements (bug #20090)\n\n- This release fixes boo#1188535, VUL-0: CVE-2021-2454,\n                     boo#1188536, VUL-0: CVE-2021-2409,\n                     boo#1188537, VUL-0: CVE-2021-2442, and\n                     boo#1188538, VUL-0: CVE-2021-2443.\n\n- Add vboximg-mount to packaging. boo#1188045.\n- Fixed CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT problem with kernel 5.13 as shown in boo#1188105.\n- Disable the build of kmp vboxvideo, at least temporarily.\n- Correct WantedBy entry in vboxadd-service\n- Require which for /usr/lib/virtualbox/vboxadd-service\n- fix license packaging, small cruft cleanup (avoid owning directories provided by filesystem rpm)","dates":{"published":"2021-08-09T22:43:07.000Z","modified":"2026-02-04T02:37:52.757Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"virtualbox-kmp&distro=openSUSE Leap 15.2","name":"virtualbox-kmp","label":"virtualbox-kmp&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 6.1.26-lp152.2.35.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.26-lp152.2.35.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"virtualbox&distro=openSUSE Leap 15.2","name":"virtualbox","label":"virtualbox&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/virtualbox&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 6.1.26-lp152.2.35.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.26-lp152.2.35.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XVEDYTCL4HZ2BYHJLWW2ON7AOWMAGAVD/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1188045","label":"bugzilla.suse.com/1188045","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188105","label":"bugzilla.suse.com/1188105","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188535","label":"bugzilla.suse.com/1188535","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188536","label":"bugzilla.suse.com/1188536","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188537","label":"bugzilla.suse.com/1188537","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1188538","label":"bugzilla.suse.com/1188538","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2409","label":"www.suse.com/security/cve/CVE-2021-2409","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2442","label":"www.suse.com/security/cve/CVE-2021-2442","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2443","label":"www.suse.com/security/cve/CVE-2021-2443","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2454","label":"www.suse.com/security/cve/CVE-2021-2454","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2021-2409","CVE-2021-2442","CVE-2021-2443","CVE-2021-2454"],"downstream":[],"duplicates":[],"related":["CVE-2021-2409","CVE-2021-2442","CVE-2021-2443","CVE-2021-2454"]},"timeline":[{"kind":"published","date":"2021-08-09T22:43:07.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:37:52.757Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T10:35:28.071Z","stale":false,"partial":false}}