Oracle has released a corrective update for the VirtualBox 7.2.6 virtualization system, addressing 14 vulnerabilities, details of which are not yet disclosed. Five of the vulnerabilities are rated as severe (8.2 out of 10). One vulnerability can be exploited remotely. Additionally, the new version features 35 changes, of which the following are noteworthy:
- VRDP server, USB smart card emulator, disk encryption components, and of virtual machines are now included in the base package that is distributed with the source code.
- The guest additions for Linux systems now provide initial support for kernel 6.19 and resolve build issues for Linux kernel 2.5.52 and earlier releases. Problems with kernels delivered in RHEL 9.8, 10.1, and 10.2 have been addressed. Errors that could cause VBoxService and user services to fail to start have been fixed.
- In the Linux host environment additions, issues with starting the vboxautostart-service during boot and launching virtual machines on systems with a real-time kernel have been resolved.
- Issues with booting virtual machines using IPXE have been addressed.
- Errors leading to VM crashes when booting a guest system with RHEL5 or during the installation of Windows update KB5066793, as well as in certain configurations of host systems with Windows, have been fixed.
- Issues with full-screen mode support in multi-monitor configurations have been resolved.
- In the GUI, problems with loading updates, displaying the list of virtual machines in the resource management tab, switching between light and dark themes, and showing the type of storage controller have been fixed.
- The issue with high CPU load when using address translation in virtual machine.
- VBoxManage has had a bug fixed that, under certain circumstances, prevented starting a VM from the command line.
- In the guest additions, problems with crashes due to insufficient memory in the system and during installation on 64-bit guest systems with Windows XP have been resolved.
Additionally, an update for the previous branch VirtualBox 7.1.16 has been released, addressing vulnerabilities and providing 18 fixes.
Source: opennet.ru
