Security update for virtualbox

This update for virtualbox fixes the following issues:

- Version bump to 6.1.38r86 released by Oracle September 02 2022

This is a maintenance release. The following items were fixed and/or added:

- GUI: Improvements in Native Language Support area
- Main: OVF Export: Added support for exporting VMs containing Virtio-SCSI controllers
- Recording settings: Fixed a regression which could cause not starting the COM server (VBoxSVC) under certain circumstances (bug #21034)
- Recording: More deterministic naming for recorded files (will now overwrite old .webm files if present)
- Linux Host and Guest Additions installer: Improved check for systemd presence in the system (bug #19033)
- Linux Guest Additions: Introduced initial support for kernel 6.0
- Linux Guest Additions: Additional fixes for kernel RHEL 9.1 (bug #21065)
- Windows Guest Additions: Improvements in Drag and Drop area

Fixes permission problem with /dev/vboxuser (boo#1203370)
Fixes missing firewall opening (boo#1203086)
- Fixes boo#1201720 CVE items for CVE-2022-21571, CVE-2022-21554

- Add a "Provides: virtualbox-guest-x11" to virtualbox-guest-tools. (boo#1203735)
- Fixed VBoxClient: VbglR3InitUser failed: VERR_ACCESS_DENIED (boo#1204019)

Fixed bugs
bnc#1203735
virtualbox-guest-tools obsoletes but does not provide virtualbox-guest-x11
bnc#1204019
VBoxClient: VbglR3InitUser failed: VERR_ACCESS_DENIED
bnc#1203086
package virtualbox-websrv does not contain firewall service defination
bnc#1203370
AUDIT-FIND: virtualbox: insecure permissions on /dev/vboxuser
bnc#1203306
VirtualBox 6.1.38 is available (new version)
bnc#1201720
VUL-0: CVE-2022-21571,CVE-2022-21554: Vulnerability in the Oracle VM VirtualBox (component: Core) affecting version prior to 6.1.36
Selected Binaries
openSUSE Build Service is sponsored by