Oracle Company kugadzirisa kuburitswa kweiyo virtualization system VirtualBox 6.0.6 uye 5.2.28, iyo yakacherekedza. . Zvakare zvakagadziriswa mune zvitsva zvinoburitswa , iyo 7 ine dhigirii yakaoma yengozi (CVSS Score 8.8). Details haina kupihwa, asi kutonga nedanho reCVSS matambudziko akagadziriswa, paPwn2Own 2019 makwikwi uye inokubvumidza kuti uite kodhi pane iyo host system side kubva kune yevaenzi system nharaunda.
Shanduko huru mukuburitswa 6.0.6:
- Tsigiro yeLinux kernels 4.4.169, 5.0 uye 5.1 yakawedzerwa kune Linux vashanyi nevaenzi. Yakawedzera danda nemhedzisiro yekuvaka modules yeLinux kernel. Kuungana kwevatyairi kurodha muSecure Boot mode kwaitwa. Kuvandudzwa kwekuita uye kuvimbika kwemafolda akagovaniswa;
- Shanduko diki dzakaitwa kune mushandisi interface. Kuratidzwa kwakavandudzwa kwekudzima kwesnapshot. Yakagadzirisa matambudziko nekukopa mafaera uye kuratidza kufambira mberi kwekukopa mashandiro mune yakavakirwa-mukati faira maneja. Yakagadziriswa zvikanganiso zvakaonekwa panguva yekugadzika otomatiki kweUbuntu mumasystem evaenzi;
- Yakawedzera rutsigiro rwekutanga rweQCOW3 fomati mukuverenga-chete modhi. Yakagadziriswa zvikanganiso paunenge uchiverenga mamwe maQCOW2 mifananidzo;
- Kugadziriswa kwakawanda kwakaitwa kuVMSVGA yakateedzerwa giraidhi mudziyo. Yakavandudzwa VMSVGA inoenderana nevakuru X maseva. Zvinokwanisika kushandisa VMSVGA paunenge uchishanda neEFI firmware interface. Matambudziko akagadziriswa ane cursor inonyangarika kana ma-add-ons ekubatanidza mbeva rutsigiro asina kuiswa.
Matambudziko ekurangarira saizi yevaenzi uye kushandisa RDP akagadziriswa; - Matambudziko nekurodha akachengetwa mamiriro eLsiLogic zvishandiso akagadziriswa;
- Matambudziko ane nested virtualization pane masisitimu ane AMD processors akagadziriswa;
- IDE PCI emulation yakagadziridzwa, ichibvumira vatyairi veNetWare IDE kushanda vachishandisa bhazi-mastering mode;
- Kune iyo DirectSound backend, kugona kutsvaga kuburikidza neanowanikwa madhizaini akawedzerwa;
- Munetiweki subsystem, matambudziko nekuwedzera kwepaketi kuzadza kana uchishandisa Windows padivi rekugamuchira akagadziriswa;
- Matambudziko ane serial port emulation akagadziriswa;
- Yakagadzirisa tsikidzi yakatungamira mukudzokororwa kwemadhairekitori akagovaniswa (Yakagovaniswa folda) mushure mekudzoreredza muchina chaiwo kubva munzvimbo yakachengetwa;
- Yakagadziriswa matambudziko kana uchikopa mafaera pakati pemuenzi uye muenzi system muDhonza uye kudonhedza modhi;
- Yakagadziriswa kuparara kana uchishandisa VBoxManage;
- Yakagadzirisa tsikidzi yakatungamira kuchando paunenge uchiedza kutanga muchina chaiwo mushure mekutadza;
- Mune masisitimu evaenzi ane Windows, matambudziko ekushandisa magadzirirwo akaomarara uchishandisa WDDM mutyairi akagadziriswa (Skype yeBusiness inotonhora uye kuparara kwevaenzi masisitimu neWDDM kwakagadziriswa);
- Tsigiro yakavandudzwa yemadhairekitori akagovaniswa evaenzi veOS/2;
- Webhu masevhisi anopa rutsigiro rweJava 11;
- Kubatanidza neLibreSSL kwakagadziridzwa;
- Nyaya nekuvaka kweFreeBSD dzakagadziriswa.
Source: opennet.ru