{"id":"openSUSE-SU-2023:0213-1","aliases":[],"status":"published","title":"Security update for virtualbox","description":"This update for virtualbox fixes the following issues:\n\nVirtualBox 7.0.10 (released July 18 2023)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- OCI: Introduced general improvements\n- VMM: Fixed a bug while walking page tables while executing nested VMs causing flooding of the release log as a consequence (Intel hosts only, bug #21551)\n- GUI: Added general improvements\n- TPM: Fixed a crash when a VM has a TPM version 1.2 configured (bug #21622)\n- 3D: Initial support for OpenGL 4.1\n- 3D: Fixed various graphics issues with Windows 11 guests (bugs #21136, #21515)\n- Guest Control/VBoxManage: Fixed parameter '--ignore-orphaned-processes'\n- Guest Control/VBoxManage: Fixed behavior of how handling argument 0 for a started guest process works: One can now explicitly specify it with the newly added option '--arg0'. This will effectively restore the behavior of former VirtualBox versions\n- Audio: Also use the PulseAudio backend when pipewire-pulse is running instead of falling back to ALSA (bug #21575)\n- NAT: Adjusted UDP proxy timeout from 18-21 to 21-24 range to respect intended 20 second timeout (bug #21560)\n- Linux Host: Added initial support for Indirect Branch Tracking (bug #21435)\n- Linux Host: Added initial support for kernel 6.5 (NOTE: Guest Additions do not support kernel 6.5 yet)\n- Linux Host and Guest: Improved condition check when kernel modules need to be signed\n- Linux Host and Guest: Added initial support for RHEL 8.8 (bug #21692), 8.9 (bug #21690) and 9.3 (bugs #21598 and #21671) kernels\n- Linux Guest Additions: Fixed issue when kernel modules were rebuilt on each boot when guest system has no X11 installed\n- Linux Guest Additions: Added initial support for kernel 6.4\n- Linux Guest Additions: Fixed issue when vboxvideo module reloading caused kernel panic in some guests (bug #21740)\n- Linux Guest Additions: Introduced general improvements in the installer area\n- Windows Guest Additions: Introduced general improvements in graphics drivers area \n- Fix issue with kernel on newer CPU (boo#1212209)\n \n- Turn build of VBoxSDL back on. This update addresses boo#1211941.\n- Detect vboxpython module with python 3.11\n- Fix Vagrant/virtualbox startup problems boo#1209727","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-08-06T16:21:12Z","modified":"2023-08-06T16:21:12Z","fixes":[{"ecosystem":"openSUSE:Leap 15.5","package":"virtualbox","fixed_in":["7.0.10-lp155.2.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"virtualbox-kmp","fixed_in":["7.0.10-lp155.2.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10-lp155.2.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"virtualbox-kmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10-lp155.2.5.1"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2T52QSP4MHAV46AAS3WJ36W4QEVXV5NV/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209727","tags":["report"]},{"url":"https://bugzilla.suse.com/1211941","tags":["report"]},{"url":"https://bugzilla.suse.com/1212209","tags":["report"]},{"url":"https://bugzilla.suse.com/1212761","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2023:0213-1","title":"Security update for virtualbox","description":"This update for virtualbox fixes the following issues:\n\nVirtualBox 7.0.10 (released July 18 2023)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- OCI: Introduced general improvements\n- VMM: Fixed a bug while walking page tables while executing nested VMs causing flooding of the release log as a consequence (Intel hosts only, bug #21551)\n- GUI: Added general improvements\n- TPM: Fixed a crash when a VM has a TPM version 1.2 configured (bug #21622)\n- 3D: Initial support for OpenGL 4.1\n- 3D: Fixed various graphics issues with Windows 11 guests (bugs #21136, #21515)\n- Guest Control/VBoxManage: Fixed parameter '--ignore-orphaned-processes'\n- Guest Control/VBoxManage: Fixed behavior of how handling argument 0 for a started guest process works: One can now explicitly specify it with the newly added option '--arg0'. This will effectively restore the behavior of former VirtualBox versions\n- Audio: Also use the PulseAudio backend when pipewire-pulse is running instead of falling back to ALSA (bug #21575)\n- NAT: Adjusted UDP proxy timeout from 18-21 to 21-24 range to respect intended 20 second timeout (bug #21560)\n- Linux Host: Added initial support for Indirect Branch Tracking (bug #21435)\n- Linux Host: Added initial support for kernel 6.5 (NOTE: Guest Additions do not support kernel 6.5 yet)\n- Linux Host and Guest: Improved condition check when kernel modules need to be signed\n- Linux Host and Guest: Added initial support for RHEL 8.8 (bug #21692), 8.9 (bug #21690) and 9.3 (bugs #21598 and #21671) kernels\n- Linux Guest Additions: Fixed issue when kernel modules were rebuilt on each boot when guest system has no X11 installed\n- Linux Guest Additions: Added initial support for kernel 6.4\n- Linux Guest Additions: Fixed issue when vboxvideo module reloading caused kernel panic in some guests (bug #21740)\n- Linux Guest Additions: Introduced general improvements in the installer area\n- Windows Guest Additions: Introduced general improvements in graphics drivers area \n- Fix issue with kernel on newer CPU (boo#1212209)\n \n- Turn build of VBoxSDL back on. This update addresses boo#1211941.\n- Detect vboxpython module with python 3.11\n- Fix Vagrant/virtualbox startup problems boo#1209727\n\n","status":"published","published":"2023-08-06T16:21:12Z","modified":"2023-08-06T16:21:12Z","updated_at":"2026-11-02T16:58:32.653274Z"}]}}