Oracle has published a corrective release of the VirtualBox 6.1.20 virtualization system, which notes 22 fixes. The list of changes does not explicitly address the 20 vulnerabilities that Oracle reported separately, but without detailing the details. It is only known that the three most dangerous problems have a severity level of 8.1, 8.2 and 8.4 (probably allow access to the host system from a virtual machine), and one of the problems allows a remote attack through the manipulation of the RDP protocol.
Major changes:
- Added support for Linux 5.11 and 5.12 kernels for Linux guests and hosts.
- In Guest Additions, when using Linux 4.10+ kernels, the maximum MTU size for network adapters in Host-Only mode has been increased to 16110.
- The Guest Additions fixed an issue with building the vboxvideo module for Linux 5.10.x kernels.
- The Guest Additions provide support for building kernel modules on RHEL 8.4-beta and CentOS Stream distributions.
- VBoxManage allows the use of the "modifyvm" command to change the network adapter attached to a saved virtual machine.
- Fixed a performance issue in Virtual Machine Manager (VMM), fixed guest handling issues with Hyper-V hypervisor, and fixed a bug when using nested virtualization.
- Fixed a SMAP (Supervisor Mode Access Prevention) host crash that occurred in Solaris 11.4 on systems with Intel Haswell processors and later.
- In the components for integration with OCI (Oracle Cloud Infrastructure), the ability to use cloud-init for exporting to OCI and for creating instances of environments in OCI has been added.
- In the GUI, the problem with the log Logs/VBoxUI.log being left when performing the "Delete all files" operation has been resolved.
- Improved sound support.
- Informing about the state of the network link for adapters in the "not attached" state has been set up.
- Resolved network connectivity issues when using the e1000 virtual network adapter in OS/2 guests.
- Improved e1000 driver compatibility with VxWorks.
- Fixed problems with checking port forwarding rules in the GUI (rules with IPv6 were not accepted).
- Fixed DHCP crash when fixed address settings are present.
- Fixed a virtual machine freezing when using the serial port in disconnected mode.
- Improved webcam driver compatibility with v4l2loopback.
- Fixed random freezes or reboots in Windows virtual machines that use the NVMe virtual driver.
- vboximg-mount now supports the '--root' option.
Source: opennet.ru