{"schemaVersion":3,"id":"OPENSUSE-SU-2021:1393-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for virtualbox\n\nThis update for virtualbox fixes the following issues:\n\nVersion bump to 6.1.28 (released October 19 2021 by Oracle)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- VMM: Fixed guru meditation while booting nested-guests accessing debug registers under certain conditions\n- UI: Bug fixes for touchpad-based scrolling\n- VMSVGA: Fixed VM black screen issue on first resize after restoring from saved state (bug #20067)\n- VMSVGA: Fixed display corruption on Linux Mint (bug #20513)\n- Storage: Fixed a possible write error under certain circumstances when using VHD images (bug #20512)\n- Network: Multiple updates in virtio-net device support\n- Network: Disconnecting cable in saved VM state now is handled properly by virtio-net\n- Network: More administrative control over network ranges, see user manual\n- NAT: Fixed not rejecting TFTP requests with absolute pathnames (bug #20589)\n- Audio: Fixed VM session aborting after PC hibernation (bug #20516)\n- Audio: Fixed setting the line-in volume of the HDA emulation on modern Linux guests\n- Audio: Fixed resuming playback of the AC'97 emulation while a snapshot has been taken\n- API: Added bindings support for Python 3.9 (bug #20252)\n- API: Fixed rare hang of VM when changing settings at runtime\n- Linux host: Improved kernel modules installation detection which prevents unnecessary modules rebuild\n- Host Services: Shared Clipboard: Prevent guest clipboard reset when clipboard sharing is disabled (bug #20487)\n- Host Services: Shared Clipboard over VRDP: Fixed to continue working when guest service reconnects to host (bug #20366)\n- Host Services: Shared Clipboard over VRDP: Fixed preventing remote RDP client to hang when guest has no clipboard data to report\n- Linux Host and Guest: Introduced initial support for kernels 5.14 and 5.15\n- Linux Host and Guest: Introduced initial support for RHEL 8.5 kernel\n- Windows Guest: Introduced Windows 11 guest support, including unattended installation\n- Fixes CVE-2021-35538, CVE-2021-35545, CVE-2021-35540, CVE-2021-35542, and CVE-2021-2475 (boo#1191869)\n\n- Use kernel_module_directory macro for kernel modules (boo#1191526)\n- Finish UsrMerge for VirtualBox components (boo#1191104).","dates":{"published":"2021-10-26T10:00:51.000Z","modified":"2026-02-04T04:24:51.570Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"virtualbox-kmp&distro=openSUSE Leap 15.3","name":"virtualbox-kmp","label":"virtualbox-kmp&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 6.1.28-lp153.2.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.28-lp153.2.12.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"virtualbox&distro=openSUSE Leap 15.3","name":"virtualbox","label":"virtualbox&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/virtualbox&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 6.1.28-lp153.2.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.28-lp153.2.12.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TGGPXPQHCHAYI4TLQLUQ74AESTO2Y6W/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1191104","label":"bugzilla.suse.com/1191104","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1191526","label":"bugzilla.suse.com/1191526","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1191869","label":"bugzilla.suse.com/1191869","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2475","label":"www.suse.com/security/cve/CVE-2021-2475","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35538","label":"www.suse.com/security/cve/CVE-2021-35538","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35540","label":"www.suse.com/security/cve/CVE-2021-35540","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35542","label":"www.suse.com/security/cve/CVE-2021-35542","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35545","label":"www.suse.com/security/cve/CVE-2021-35545","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2021-2475","CVE-2021-35538","CVE-2021-35540","CVE-2021-35542","CVE-2021-35545"],"downstream":[],"duplicates":[],"related":["CVE-2021-2475","CVE-2021-35538","CVE-2021-35540","CVE-2021-35542","CVE-2021-35545"]},"timeline":[{"kind":"published","date":"2021-10-26T10:00:51.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:24:51.570Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T04:17:34.146Z","stale":false,"partial":false}}