openSUSE-SU-2023:0033-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0033-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2023:0033-1

Upstream

CVE (6)

CVE-2023-21884
CVE-2023-21885
CVE-2023-21886
CVE-2023-21889
CVE-2023-21898
CVE-2023-21899

Related

CVE (6)

CVE-2023-21884
CVE-2023-21885
CVE-2023-21886
CVE-2023-21889
CVE-2023-21898
CVE-2023-21899

Published

2023-01-29T03:02:15Z

Modified

2026-02-04T02:52:11Z

Summary

Security update for virtualbox

Details

This update for virtualbox fixes the following issues:

VirtualBox 7.0.6 (released January 17 2023)

This is a maintenance release. The following items were fixed and/or added: [1]

VMM: Fixed guru running the FreeBSD loader on older Intel CPUs without unrestricted guest support (bug #21332)
GUI: Fixed virtual machines grouping when VM was created or modified in command line (bugs #11500, #20933)
GUI: Introduced generic changes in settings dialogs
VirtioNet: Fixed broken network after loading saved state (bug #21172)
Storage: Added support for increasing the size of the following VMDK image variants: monolithicFlat, monolithicSparse, twoGbMaxExtentSparse, twoGbMaxExtentFlat
VBoxManage: Added missing --directory switch for guestcontrol mktemp command
Mouse Integration: Guest was provided with extended host mouse state (bug #21139)
DnD: Introduced generic improvements
Guest Control: Fixed handling creation mode for temporary directories (bug #21394)
Linux Host and Guest: Added initial support for building UEK7 kernel on Oracle Linux 8
Linux Host and Guest: Added initial support for RHEL 9.1 kernel
Linux Guest Additions: Added initial support for kernel 6.2 for vboxvideo
Audio: The '--audio' option in VBoxManage is now marked as deprecated; please use '--audio-driver' and '--audio-enabled' instead. This will allow more flexibility when changing the driver and/or controlling the audio functionality

Additionally, it fixes 6 CVE's: CVE-2023-21886, CVE-2023-21898, CVE-2023-21899, CVE-2023-21884, CVE-2023-21885, CVE-2023-21889

Links:

[1] https://www.virtualbox.org/wiki/Changelog-7.0#v6 [2] https://www.oracle.com/security-alerts/cpujan2023.html#AppendixOVIR

References

Affected packages

openSUSE:Leap 15.4 / virtualbox

Package

Name: virtualbox
Purl: pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Leap%2015.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.0.6-lp154.2.26.2

Ecosystem specific

{
    "binaries":  [
        {
            "python3-virtualbox":  "7.0.6-lp154.2.26.2",
            "virtualbox":  "7.0.6-lp154.2.26.2",
            "virtualbox-devel":  "7.0.6-lp154.2.26.2",
            "virtualbox-guest-desktop-icons":  "7.0.6-lp154.2.26.2",
            "virtualbox-guest-source":  "7.0.6-lp154.2.26.2",
            "virtualbox-guest-tools":  "7.0.6-lp154.2.26.2",
            "virtualbox-host-source":  "7.0.6-lp154.2.26.2",
            "virtualbox-kmp-default":  "7.0.6_k5.14.21_150400.24.41-lp154.2.26.2",
            "virtualbox-qt":  "7.0.6-lp154.2.26.2",
            "virtualbox-vnc":  "7.0.6-lp154.2.26.2",
            "virtualbox-websrv":  "7.0.6-lp154.2.26.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0033-1.json"

openSUSE:Leap 15.4 / virtualbox-kmp

Package

Name: virtualbox-kmp
Purl: pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE%20Leap%2015.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.0.6-lp154.2.26.2

Ecosystem specific

{
    "binaries":  [
        {
            "python3-virtualbox":  "7.0.6-lp154.2.26.2",
            "virtualbox":  "7.0.6-lp154.2.26.2",
            "virtualbox-devel":  "7.0.6-lp154.2.26.2",
            "virtualbox-guest-desktop-icons":  "7.0.6-lp154.2.26.2",
            "virtualbox-guest-source":  "7.0.6-lp154.2.26.2",
            "virtualbox-guest-tools":  "7.0.6-lp154.2.26.2",
            "virtualbox-host-source":  "7.0.6-lp154.2.26.2",
            "virtualbox-kmp-default":  "7.0.6_k5.14.21_150400.24.41-lp154.2.26.2",
            "virtualbox-qt":  "7.0.6-lp154.2.26.2",
            "virtualbox-vnc":  "7.0.6-lp154.2.26.2",
            "virtualbox-websrv":  "7.0.6-lp154.2.26.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0033-1.json"