Khampani ea Oracle Litokollo tse lokisoang tsa sistimi ea virtualization VirtualBox 6.0.6 le 5.2.28, e hlokometseng . E boetse e hlophisitsoe ka likhatiso tse ncha , eo 7 e nang le tekanyo e tebileng ea kotsi (CVSS Score 8.8). Lintlha ha li fanoe, empa ho latela boemo ba CVSS mathata a lokisitsoe, tlholisanong ea Pwn2Own 2019 le ho u lumella ho etsa khoutu ka lehlakoreng la sistimi e amohelang baeti ho tsoa tikolohong ea sistimi ea baeti.
Liphetoho tse kholo tokollong ea 6.0.6:
- Ts'ehetso ea Linux kernels 4.4.169, 5.0 le 5.1 e kentsoe bakeng sa baeti ba Linux le ba amohelang. E kentse log e nang le liphetho tsa li-module tsa moaho bakeng sa kernel ea Linux. Kopano ea bakhanni ba ho kenya ka mokhoa o sireletsehileng oa Boot e kentsoe tšebetsong. Tshebetso e ntlafetseng le ho tšepahala ha li-folders tse arolelanoang;
- Ho entsoe liphetoho tse nyane ho sebopeho sa mosebelisi. Ponahalo e ntlafalitsoeng ea ts'ebetso ea ho hlakola senepe. Mathata a tsitsitseng ka ho kopitsa lifaele le ho bonts'a tsoelo-pele ea ts'ebetso ea ho kopitsa ho mookameli oa faele e hahiloeng. Liphoso tse tsitsitseng tse ileng tsa hlaha nakong ea ho kenya Ubuntu ka mokhoa o ikemetseng lits'ebetsong tsa baeti;
- E kenyellelitse ts'ehetso ea pele bakeng sa sebopeho sa QCOW3 ka mokhoa oa ho bala feela. Liphoso tse tsitsitseng ha u bala litšoantšo tse ling tsa QCOW2;
- Litokiso tse ngata li entsoe ho sesebelisoa sa litšoantšo sa VMSVGA. E ntlafalitse ho sebelisana le VMSVGA le li-server tsa khale tsa X. Hoa khoneha ho sebelisa VMSVGA ha u sebetsa le sebopeho sa firmware sa EFI. Mathata a tsitsitseng ka ho nyamela ha cursor haeba li-add-on tsa ho kopanya tšehetso ea mouse li sa kenngoa.
Mathata a ho hopola boholo ba skrini sa baeti le ho sebelisa RDP a rarollotsoe; - Mathata a ho kenya boemo bo bolokiloeng bakeng sa lisebelisoa tsa LsiLogic a rarollotsoe;
- Mathata a ts'ebeliso ea sehlaha ho litsamaiso tse nang le li-processor tsa AMD a rarollotsoe;
- Emulation ea IDE PCI e ntlafalitsoe, e lumella bakhanni ba NetWare IDE ho sebetsa ba sebelisa mokhoa oa ho laola libese;
- Bakeng sa backend ea DirectSound, bokhoni ba ho batla lisebelisoa tsa molumo tse fumanehang bo kentsoe;
- Sebakeng sa marang-rang, mathata a ho tlatsa lipakete tse ntseng li eketseha ha o sebelisa Windows ka lehlakoreng la moamoheli a rarollotsoe;
- Mathata a serial port emulation a rarollotsoe;
- Lokisa phoso e lebisitseng ho phetisetso ea li-directory tse arolelanoang (Sephutheloana se arolelanoeng) ka mor'a ho khutlisetsa mochine o tsoang sebakeng se bolokiloeng;
- Mathata a tsitsitseng ha o kopitsa lifaele pakeng tsa moeti le tsamaiso ea baeti ka mokhoa oa ho hula le ho theola;
- Ho senyeha ho tsitsitseng ha u sebelisa VBoxManage;
- Lokisa kokoanyana e lebisitseng ho hoama ha u leka ho qala mochini o hlakileng ka mor'a ho hloleha;
- Lits'ebetsong tsa baeti tse nang le Windows, mathata a ho sebelisa litlhophiso tse rarahaneng tsa skrine ho sebelisa mokhanni oa WDDM a rarollotsoe (Skype for Business freezing le ho senyeha ha litsamaiso tsa baeti le WDDM li lokisitsoe);
- Tšehetso e ntlafetseng bakeng sa li-directory tse arolelanoang bakeng sa baeti ba OS / 2;
- Litšebeletso tsa marang-rang li fana ka tšehetso bakeng sa Java 11;
- Ho kopanya le LibreSSL ho ntlafalitsoe;
- Mathata a mabapi le moaho oa FreeBSD a rarollotsoe.
Source: opennet.ru