Advisories ยป MGASA-2016-0259

Updated VirtualBox 5.1 packages fix security vulnerability

Publication date: 26 Jul 2016
Modification date: 26 Jul 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-3597

Description

This update provides the new VirtualBox 5.1 series, currently based
on 5.1.2 providing several perfomance enhancements

The highlights include:
* VMM: new APIC and I/O APIC implementations that result in significantly
  improved performance in certain situations (for example with networking)
* VMM: activate the x2APIC by default for Linux guests
* VMM: added support for Hyper-V paravirtualized debugging of Windows guests
* VMM: emulate even more MMIO and shadow pagetable exits without going back
  to user mode
* GUI: overall migration to Qt5
* GUI: passive API event listener improving the VM GUI performance and 
  response time
* Audio: added HDA (High Definition Audio) support for newer Linux guests
* Audio: added on-demand timers which should improve the overall performance
  and reduce the CPU consumption
* Audio: more fine-grained volume control for the AC'97 emulation, which now
  also takes the master volume control into account
* better support for Python 3 

It also resolves the following security issue:

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle
Virtualization VirtualBox before 5.0.26 allows local users to affect
availability via vectors related to Core (CVE-2016-3597). 

For other fixes, see the referenced changelog.

References

SRPMS

5/core