openSUSE-SU-2024:0364-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0364-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2024:0364-1
Upstream
CVE (4)
  • CVE-2024-21248
  • CVE-2024-21259
  • CVE-2024-21263
  • CVE-2024-21273
Related
Published
2024-11-10T09:55:36Z
Modified
2026-02-04T03:58:40Z
Summary
Security update for virtualbox
Details

This update for virtualbox fixes the following issues:

Update to release 7.1.4:

  • NAT: Fixed DHCP problems with certain guests when domain is empty
  • VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels
  • Linux Guest Additions: Introduce initial support for kernel 6.12
  • EFI: Added missing LsiLogic MPT SCSI driver again to fix booting from devices attached to this device if the EFI firmware is used (7.1.0 regression)
  • EFI: Restored broken network boot support (7.1.0 regression)
  • Adressed CVE-2024-21248 [boo#1231735], CVE-2024-21273 [boo#1231736], CVE-2024-21259 [boo#1231737], CVE-2024-21263 [boo#1231738]
  • Make the Extension Pack work with our compiler flags and RT_NOEXCEPT choices. [boo#1231225]

Update to release 7.1:

  • The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality.
  • VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires
  • NAT: New engine with IPv6 support.
  • Linux host and guest: Added Wayland support for Clipboard sharing.
  • Changed license from Gpl-2.0 to Gpl-3.0

Version bump to VirtualBox 7.0.20 (released July 16 2024 by Oracle))

This is a maintenance release. The following items were fixed and/or added:

  • TPM: Fixed errors appearing the event viewer with Windows guests
  • macOS Hosts: Fixed passing USB devices to the VM (bug #21218)
  • Audio: Fixed recording with HDA emulation after newer Windows 10 / 11 guests got rebooted
  • USB: Fixed a deadlock in OHCI triggered when saving the current state of a VM or taking a snapshot (bug #22059)
  • Linux Guest and Host: Introduced initial support for OpenSuse 15.6 kernel
  • Linux Guest and Host: Introduced initial support for RHEL 9.5 kernel (bug #22099)
  • Guest Additions: Shared Clipboard: Fixed issue when extra new lines were pasted when copying text between Win and X11 (bug #21716)
  • UEFI Secure Boot: Add new Microsoft certificates to list for new VMs
References

Affected packages

openSUSE:Leap 15.6
kbuild

Package

Name
kbuild
Purl
pkg:rpm/opensuse/kbuild&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.1.9998+svn3613-bp156.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "kbuild":  "0.1.9998+svn3613-bp156.2.3.1",
            "python3-virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox-devel":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-desktop-icons":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-tools":  "7.1.4-lp156.2.4.1",
            "virtualbox-host-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-kmp-default":  "7.1.4_k6.4.0_150600.23.25-lp156.2.4.1",
            "virtualbox-qt":  "7.1.4-lp156.2.4.1",
            "virtualbox-vnc":  "7.1.4-lp156.2.4.1",
            "virtualbox-websrv":  "7.1.4-lp156.2.4.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0364-1.json"
virtualbox

Package

Name
virtualbox
Purl
pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.4-lp156.2.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "kbuild":  "0.1.9998+svn3613-bp156.2.3.1",
            "python3-virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox-devel":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-desktop-icons":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-tools":  "7.1.4-lp156.2.4.1",
            "virtualbox-host-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-kmp-default":  "7.1.4_k6.4.0_150600.23.25-lp156.2.4.1",
            "virtualbox-qt":  "7.1.4-lp156.2.4.1",
            "virtualbox-vnc":  "7.1.4-lp156.2.4.1",
            "virtualbox-websrv":  "7.1.4-lp156.2.4.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0364-1.json"
virtualbox-kmp

Package

Name
virtualbox-kmp
Purl
pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.4-lp156.2.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "kbuild":  "0.1.9998+svn3613-bp156.2.3.1",
            "python3-virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox-devel":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-desktop-icons":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-tools":  "7.1.4-lp156.2.4.1",
            "virtualbox-host-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-kmp-default":  "7.1.4_k6.4.0_150600.23.25-lp156.2.4.1",
            "virtualbox-qt":  "7.1.4-lp156.2.4.1",
            "virtualbox-vnc":  "7.1.4-lp156.2.4.1",
            "virtualbox-websrv":  "7.1.4-lp156.2.4.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0364-1.json"
SUSE:Package Hub 15 SP6
kbuild

Package

Name
kbuild
Purl
pkg:rpm/suse/kbuild&distro=SUSE%20Package%20Hub%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.1.9998+svn3613-bp156.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "kbuild":  "0.1.9998+svn3613-bp156.2.3.1",
            "python3-virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox-devel":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-desktop-icons":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-tools":  "7.1.4-lp156.2.4.1",
            "virtualbox-host-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-kmp-default":  "7.1.4_k6.4.0_150600.23.25-lp156.2.4.1",
            "virtualbox-qt":  "7.1.4-lp156.2.4.1",
            "virtualbox-vnc":  "7.1.4-lp156.2.4.1",
            "virtualbox-websrv":  "7.1.4-lp156.2.4.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0364-1.json"
virtualbox

Package

Name
virtualbox
Purl
pkg:rpm/suse/virtualbox&distro=SUSE%20Package%20Hub%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.4-lp156.2.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "kbuild":  "0.1.9998+svn3613-bp156.2.3.1",
            "python3-virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox-devel":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-desktop-icons":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-tools":  "7.1.4-lp156.2.4.1",
            "virtualbox-host-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-kmp-default":  "7.1.4_k6.4.0_150600.23.25-lp156.2.4.1",
            "virtualbox-qt":  "7.1.4-lp156.2.4.1",
            "virtualbox-vnc":  "7.1.4-lp156.2.4.1",
            "virtualbox-websrv":  "7.1.4-lp156.2.4.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0364-1.json"
virtualbox-kmp

Package

Name
virtualbox-kmp
Purl
pkg:rpm/suse/virtualbox-kmp&distro=SUSE%20Package%20Hub%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.4-lp156.2.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "kbuild":  "0.1.9998+svn3613-bp156.2.3.1",
            "python3-virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox":  "7.1.4-lp156.2.4.1",
            "virtualbox-devel":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-desktop-icons":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-guest-tools":  "7.1.4-lp156.2.4.1",
            "virtualbox-host-source":  "7.1.4-lp156.2.4.1",
            "virtualbox-kmp-default":  "7.1.4_k6.4.0_150600.23.25-lp156.2.4.1",
            "virtualbox-qt":  "7.1.4-lp156.2.4.1",
            "virtualbox-vnc":  "7.1.4-lp156.2.4.1",
            "virtualbox-websrv":  "7.1.4-lp156.2.4.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0364-1.json"