Security update for virtualbox SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2019:1814-1 Final 1 1 2019-07-30T07:38:06Z current 2019-07-30T07:38:06Z 2019-07-30T07:38:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for virtualbox This update for virtualbox to version 6.0.10 fixes the following issues: Security issues fixed: - CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850 (boo#1141801) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2019-1814 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN E-Mail link for openSUSE-SU-2019:1814-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1097248 SUSE Bug 1097248 https://bugzilla.suse.com/1098050 SUSE Bug 1098050 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 https://bugzilla.suse.com/1113894 SUSE Bug 1113894 https://bugzilla.suse.com/1115041 SUSE Bug 1115041 https://bugzilla.suse.com/1116050 SUSE Bug 1116050 https://bugzilla.suse.com/1130503 SUSE Bug 1130503 https://bugzilla.suse.com/1130588 SUSE Bug 1130588 https://bugzilla.suse.com/1132379 SUSE Bug 1132379 https://bugzilla.suse.com/1132439 SUSE Bug 1132439 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 https://bugzilla.suse.com/1133289 SUSE Bug 1133289 https://bugzilla.suse.com/1133492 SUSE Bug 1133492 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 https://www.suse.com/security/cve/CVE-2018-0734/ SUSE CVE CVE-2018-0734 page https://www.suse.com/security/cve/CVE-2018-11763/ SUSE CVE CVE-2018-11763 page https://www.suse.com/security/cve/CVE-2018-11784/ SUSE CVE CVE-2018-11784 page https://www.suse.com/security/cve/CVE-2018-3288/ SUSE CVE CVE-2018-3288 page https://www.suse.com/security/cve/CVE-2018-3289/ SUSE CVE CVE-2018-3289 page https://www.suse.com/security/cve/CVE-2018-3290/ SUSE CVE CVE-2018-3290 page https://www.suse.com/security/cve/CVE-2018-3291/ SUSE CVE CVE-2018-3291 page https://www.suse.com/security/cve/CVE-2018-3292/ SUSE CVE CVE-2018-3292 page https://www.suse.com/security/cve/CVE-2018-3293/ SUSE CVE CVE-2018-3293 page https://www.suse.com/security/cve/CVE-2018-3294/ SUSE CVE CVE-2018-3294 page https://www.suse.com/security/cve/CVE-2018-3295/ SUSE CVE CVE-2018-3295 page https://www.suse.com/security/cve/CVE-2018-3296/ SUSE CVE CVE-2018-3296 page https://www.suse.com/security/cve/CVE-2018-3297/ SUSE CVE CVE-2018-3297 page https://www.suse.com/security/cve/CVE-2018-3298/ SUSE CVE CVE-2018-3298 page https://www.suse.com/security/cve/CVE-2019-1543/ SUSE CVE CVE-2019-1543 page https://www.suse.com/security/cve/CVE-2019-2446/ SUSE CVE CVE-2019-2446 page https://www.suse.com/security/cve/CVE-2019-2448/ SUSE CVE CVE-2019-2448 page https://www.suse.com/security/cve/CVE-2019-2450/ SUSE CVE CVE-2019-2450 page https://www.suse.com/security/cve/CVE-2019-2451/ SUSE CVE CVE-2019-2451 page https://www.suse.com/security/cve/CVE-2019-2508/ SUSE CVE CVE-2019-2508 page https://www.suse.com/security/cve/CVE-2019-2509/ SUSE CVE CVE-2019-2509 page https://www.suse.com/security/cve/CVE-2019-2511/ SUSE CVE CVE-2019-2511 page https://www.suse.com/security/cve/CVE-2019-2525/ SUSE CVE CVE-2019-2525 page https://www.suse.com/security/cve/CVE-2019-2527/ SUSE CVE CVE-2019-2527 page https://www.suse.com/security/cve/CVE-2019-2554/ SUSE CVE CVE-2019-2554 page https://www.suse.com/security/cve/CVE-2019-2555/ SUSE CVE CVE-2019-2555 page https://www.suse.com/security/cve/CVE-2019-2556/ SUSE CVE CVE-2019-2556 page https://www.suse.com/security/cve/CVE-2019-2574/ SUSE CVE CVE-2019-2574 page https://www.suse.com/security/cve/CVE-2019-2656/ SUSE CVE CVE-2019-2656 page https://www.suse.com/security/cve/CVE-2019-2657/ SUSE CVE CVE-2019-2657 page https://www.suse.com/security/cve/CVE-2019-2678/ SUSE CVE CVE-2019-2678 page https://www.suse.com/security/cve/CVE-2019-2679/ SUSE CVE CVE-2019-2679 page https://www.suse.com/security/cve/CVE-2019-2680/ SUSE CVE CVE-2019-2680 page https://www.suse.com/security/cve/CVE-2019-2690/ SUSE CVE CVE-2019-2690 page https://www.suse.com/security/cve/CVE-2019-2696/ SUSE CVE CVE-2019-2696 page https://www.suse.com/security/cve/CVE-2019-2703/ SUSE CVE CVE-2019-2703 page https://www.suse.com/security/cve/CVE-2019-2721/ SUSE CVE CVE-2019-2721 page https://www.suse.com/security/cve/CVE-2019-2722/ SUSE CVE CVE-2019-2722 page https://www.suse.com/security/cve/CVE-2019-2723/ SUSE CVE CVE-2019-2723 page https://www.suse.com/security/cve/CVE-2019-2848/ SUSE CVE CVE-2019-2848 page https://www.suse.com/security/cve/CVE-2019-2850/ SUSE CVE CVE-2019-2850 page https://www.suse.com/security/cve/CVE-2019-2859/ SUSE CVE CVE-2019-2859 page https://www.suse.com/security/cve/CVE-2019-2863/ SUSE CVE CVE-2019-2863 page https://www.suse.com/security/cve/CVE-2019-2864/ SUSE CVE CVE-2019-2864 page https://www.suse.com/security/cve/CVE-2019-2865/ SUSE CVE CVE-2019-2865 page https://www.suse.com/security/cve/CVE-2019-2866/ SUSE CVE CVE-2019-2866 page https://www.suse.com/security/cve/CVE-2019-2867/ SUSE CVE CVE-2019-2867 page https://www.suse.com/security/cve/CVE-2019-2873/ SUSE CVE CVE-2019-2873 page https://www.suse.com/security/cve/CVE-2019-2874/ SUSE CVE CVE-2019-2874 page https://www.suse.com/security/cve/CVE-2019-2875/ SUSE CVE CVE-2019-2875 page https://www.suse.com/security/cve/CVE-2019-2876/ SUSE CVE CVE-2019-2876 page https://www.suse.com/security/cve/CVE-2019-2877/ SUSE CVE CVE-2019-2877 page openSUSE Leap 15.0 openSUSE Leap 15.1 python3-virtualbox-6.0.10-lp151.2.6.1 virtualbox-6.0.10-lp151.2.6.1 virtualbox-devel-6.0.10-lp151.2.6.1 virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 virtualbox-guest-source-6.0.10-lp151.2.6.1 virtualbox-guest-tools-6.0.10-lp151.2.6.1 virtualbox-guest-x11-6.0.10-lp151.2.6.1 virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 virtualbox-host-source-6.0.10-lp151.2.6.1 virtualbox-qt-6.0.10-lp151.2.6.1 virtualbox-vnc-6.0.10-lp151.2.6.1 virtualbox-websrv-6.0.10-lp151.2.6.1 python3-virtualbox-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-devel-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-guest-source-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-guest-tools-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-guest-x11-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-host-source-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-qt-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-vnc-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 virtualbox-websrv-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.0 python3-virtualbox-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-devel-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-guest-source-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-guest-tools-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-guest-x11-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-host-source-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-qt-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-vnc-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 virtualbox-websrv-6.0.10-lp151.2.6.1 as a component of openSUSE Leap 15.1 The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p). CVE-2018-0734 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-0734.html CVE-2018-0734 https://bugzilla.suse.com/1113534 SUSE Bug 1113534 https://bugzilla.suse.com/1113652 SUSE Bug 1113652 https://bugzilla.suse.com/1113742 SUSE Bug 1113742 https://bugzilla.suse.com/1122198 SUSE Bug 1122198 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 https://bugzilla.suse.com/1126909 SUSE Bug 1126909 https://bugzilla.suse.com/1148697 SUSE Bug 1148697 In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol. CVE-2018-11763 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-11763.html CVE-2018-11763 https://bugzilla.suse.com/1109961 SUSE Bug 1109961 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. CVE-2018-11784 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-11784.html CVE-2018-11784 https://bugzilla.suse.com/1110850 SUSE Bug 1110850 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3288 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3288.html CVE-2018-3288 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3289 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3289.html CVE-2018-3289 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3290 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3290.html CVE-2018-3290 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3291 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3291.html CVE-2018-3291 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3292 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3292.html CVE-2018-3292 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3293 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3293.html CVE-2018-3293 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3294 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 6 AV:N/AC:M/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3294.html CVE-2018-3294 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3295 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3295.html CVE-2018-3295 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3296 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3296.html CVE-2018-3296 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3297 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3297.html CVE-2018-3297 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-3298 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2018-3298.html CVE-2018-3298 https://bugzilla.suse.com/1112097 SUSE Bug 1112097 ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j). CVE-2019-1543 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 low 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-1543.html CVE-2019-1543 https://bugzilla.suse.com/1128189 SUSE Bug 1128189 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 https://bugzilla.suse.com/1154162 SUSE Bug 1154162 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). CVE-2019-2446 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2446.html CVE-2019-2446 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). CVE-2019-2448 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2448.html CVE-2019-2448 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2450 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2450.html CVE-2019-2450 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2451 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2451.html CVE-2019-2451 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2019-2508 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2508.html CVE-2019-2508 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2019-2509 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2509.html CVE-2019-2509 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). CVE-2019-2511 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2511.html CVE-2019-2511 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2525 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2525.html CVE-2019-2525 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.26 and prior to 6.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2019-2527 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2527.html CVE-2019-2527 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2554 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2554.html CVE-2019-2554 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2555 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2555.html CVE-2019-2555 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2556 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2556.html CVE-2019-2556 https://bugzilla.suse.com/1122212 SUSE Bug 1122212 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2574 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2574.html CVE-2019-2574 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2656 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2656.html CVE-2019-2656 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CVE-2019-2657 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2657.html CVE-2019-2657 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2678 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2678.html CVE-2019-2678 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H). CVE-2019-2679 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 3.6 AV:L/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2679.html CVE-2019-2679 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2680 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2680.html CVE-2019-2680 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2690 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2690.html CVE-2019-2690 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2696 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2696.html CVE-2019-2696 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2703 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2703.html CVE-2019-2703 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2721 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2721.html CVE-2019-2721 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2722 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2722.html CVE-2019-2722 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2723 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2723.html CVE-2019-2723 https://bugzilla.suse.com/1132827 SUSE Bug 1132827 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2019-2848 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2848.html CVE-2019-2848 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 2.8 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L). CVE-2019-2850 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2850.html CVE-2019-2850 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2859 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2859.html CVE-2019-2859 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). CVE-2019-2863 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2863.html CVE-2019-2863 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2864 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2864.html CVE-2019-2864 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2865 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2865.html CVE-2019-2865 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2866 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2866.html CVE-2019-2866 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2019-2867 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2867.html CVE-2019-2867 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). CVE-2019-2873 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2873.html CVE-2019-2873 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). CVE-2019-2874 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2874.html CVE-2019-2874 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). CVE-2019-2875 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2875.html CVE-2019-2875 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). CVE-2019-2876 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2876.html CVE-2019-2876 https://bugzilla.suse.com/1141801 SUSE Bug 1141801 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2019-2877 openSUSE Leap 15.0:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.0:virtualbox-websrv-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:python3-virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-devel-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-desktop-icons-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-tools-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-guest-x11-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-host-source-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-qt-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-vnc-6.0.10-lp151.2.6.1 openSUSE Leap 15.1:virtualbox-websrv-6.0.10-lp151.2.6.1 important 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN https://www.suse.com/security/cve/CVE-2019-2877.html CVE-2019-2877 https://bugzilla.suse.com/1141801 SUSE Bug 1141801