Shirkadda Oracle siidaynta saxda ah ee nidaamka virtualization VirtualBox 6.0.6 iyo 5.2.28, kaas oo xusay . Sido kale go'an in la sii daayo cusub , kuwaas oo 7 ka mid ah ay leeyihiin heer halis ah (CVSS Score 8.8). Faahfaahinta lama bixin, laakiin marka la eego heerka CVSS dhibaatooyinka waa la hagaajiyay. tartanka Pwn2Own 2019 oo kuu ogolaanaya inaad ku fuliso code dhinaca nidaamka martida ee jawiga nidaamka martida.
Isbeddelada waaweyn ee siidaynta 6.0.6:
- Taageerada kernels Linux 4.4.169, 5.0 iyo 5.1 ayaa lagu daray martida Linux iyo martigaliyayaasha. Lagu daray log ay ku jiraan natiijooyinka cutubyada dhismaha ee kernel-ka Linux. Isu imaatinka darawalada ee ku shubista qaabka Boot Secure waa la hirgaliyay. Waxqabadka la hagaajiyay iyo isku halaynta galka la wadaago;
- Isbeddello yar ayaa lagu sameeyay is-dhexgalka isticmaalaha. Soo bandhigida horumarka tirtirka sawir-qaadista ee la hagaajiyay. Dhibaatooyinka go'an ee koobiyaynta faylalka iyo muujinta horumarka hawlgallada koobiyeynta ee maamulaha faylka ku dhex jira. Khaladaad go'an oo soo muuqday intii lagu jiray rakibaadda otomatiga ah ee Ubuntu ee nidaamyada martida;
- Waxaa lagu daray taageerada bilowga ah ee qaabka QCOW3 oo ah qaabka akhrinta-keliya. Khaladaadka go'an markaad akhrinayso qaar ka mid ah sawirada QCOW2;
- Hagaajin badan ayaa lagu sameeyay aaladda garaafyada ee VMSVGA ee lagu dayday. Laqabsiga VMSVGA oo la hagaajiyay Waa suurtogal in la isticmaalo VMSVGA markaad la shaqaynayso EFI firmware interface. Dhibaatooyinka go'an ee cursorku way baaba'ayaan haddii aan la rakibin ku-darka isku dhafka taageerada jiirka.
Dhibaatooyinka xusuusta cabbirka shaashadda martida iyo isticmaalka RDP waa la xalliyay; - Dhibaatooyinka rarida gobolka kaydsan ee aaladaha LsiLogic waa la xaliyay;
- Dhibaatooyinka ku saabsan qaab-dhismeedka buulka ee nidaamyada leh processor-yada AMD waa la xalliyey;
- Ku dayashada IDE PCI waa la hagaajiyay, taas oo u oggolaanaysa wadayaasha NetWare IDE inay ku shaqeeyaan iyagoo isticmaalaya habka haynta baska;
- Dib-u-celinta DirectSound, awoodda lagu baadho qalabka dhawaaqa ee la heli karo ayaa lagu daray;
- Nidaamka hoose ee shabakada, dhibaatooyinka buuxinta baakidhka kordhinta marka loo isticmaalayo Windows dhinaca martida loo yahay waa la xaliyay;
- Dhibaatooyinkii la xidhiidha ku dayashada dekedaha taxanaha ah waa la xaliyay;
- La dejiyay cilad horseeday nuqul ka mid ah hagaha la wadaago (Faylka la wadaago) ka dib soo celinta mishiinka farsamada ee xaalad badbaadsan;
- Dhibaatooyinka go'an marka la koobiyeeyo faylasha u dhexeeya nidaamka martida iyo martida ee Jiid iyo hoos u dhigista;
- Shil go'an marka la isticmaalayo VBoxManage;
- Kutaan go'an taasoo keentay inuu qaboojiyo markii la isku dayay inuu bilaabo mashiinka farsamada ka dib guuldarada;
- Nidaamyada martida ee Windows, mashaakilaadka isticmaalka qaabaynta shaashadda adag ee isticmaalaya darawalka WDDM waa la xaliyay (Barafka Skype for Business iyo shilalka nidaamka martida ee WDDM waa la hagaajiyay);
- Taageerada la wanaajiyay ee hagayaasha la wadaago ee martida OS/2;
- Adeegyada shabakada waxay taageero siiyaan Java 11;
- Isku-dubbaridka LibreSSL waa la hagaajiyay;
- Arrimaha ku saabsan dhismaha FreeBSD waa la xalliyey.
Source: opennet.ru