Bugzilla – Bug 1185211
VUL-0: virtualbox: Oracle Critical Patch Update Advisory - April 2021
Last modified: 2021-04-29 08:49:54 UTC
Oracle Critical Patch Update Advisory - April 2021 https://www.oracle.com/security-alerts/cpuapr2021.html#AppendixOVIR CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283 CVE-2021-2284 CVE-2021-2285 CVE-2021-2286 CVE-2021-2287 CVE-2021-2291 CVE-2021-2296 CVE-2021-2297 CVE-2021-2306 CVE-2021-2309 CVE-2021-2310 CVE-2021-2312
CVE-2021-2264 was found by us and is already covered in bsc#1184542.
The VB upgrade to version 6.1.20 has been submitted to Tumbleweed, Leap 15.2 and Leap 15.3.
The initial list of CVEs was updated with an additional CVE. CVE-2021-2321 was added to the Virtualization risk matrix (2021-April-26). Same as the other CVEs, this issue only exists prior to 6.1.20.