Oracle Company corrective releases of the virtualization system VirtualBox 6.0.6 and 5.2.28, which noted . Also fixed in new releases , of which 7 have a critical degree of danger (CVSS Score 8.8). Details were not released, but the CVSS level seems to have fixed issues, at the Pwn2Own 2019 competition and allowing you to execute code on the side of the host system from the guest system environment.
Main changes in release 6.0.6:
- Added support for Linux 4.4.169, 5.0, and 5.1 kernels for Linux guests and hosts. Added a log with the results of building modules for the Linux kernel. Implemented assembly of drivers for booting in Secure Boot mode. Improved performance and reliability of shared folders;
- Minor changes have been made to the user interface. Improved display of the progress of deleting snapshots. Fixed problems with copying files and displaying the progress of copy operations in the built-in file manager. Fixed bugs that occur during automated installation of Ubuntu in guest systems;
- Added initial support for QCOW3 read-only format. Fixed errors when reading some QCOW2 images;
- Numerous fixes have been made to the emulated VMSVGA graphics device. Improved VMSVGA compatibility with older X servers. The ability to use VMSVGA when working with the EFI firmware interface is provided. Fixed issues with disappearing cursor if add-ons for integrating mouse support are not installed.
Fixed problems with remembering the guest screen size and using RDP; - Resolved issues with loading saved state for LsiLogic devices;
- Fixed problems with nested virtualization on systems with AMD processors;
- Improved IDE PCI emulation, enabled NetWare IDE drivers to work using bus-mastering mode;
- For the DirectSound backend, the ability to enumerate available sound devices has been added;
- In the network subsystem, problems with incremental packet filling when using Windows on the host side have been resolved;
- Fixed issues with serial port emulation;
- Fixed a bug that caused duplication of shared directories (Shared folder) after restoring a virtual machine from a saved state;
- Fixed issues when copying files between host and guest in drag and drop mode;
- Fixed crash when using VBoxManage;
- Fixed a bug that caused a hang when trying to start a virtual machine after a crash;
- In Windows guests, issues with complex display configurations using the WDDM driver have been resolved (Skype for Business hangs and crashes in WDDM guests have been fixed).
- Improved support for shared directories for OS/2 guests;
- Web services support Java 11;
- Improved compilation with LibreSSL;
- Fixed build issues for FreeBSD.
Source: opennet.ru