Каталог CVE

CVE-2024-21248

python3-virtualbox-7.1.4-1.1 on GA media

This update for virtualbox fixes the following issues: Update to release 7.1.4: * NAT: Fixed DHCP problems with certain guests when domain is empty * VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels * Linux Guest Additions: Introduce initial support for kernel 6.12 * EFI: Added missing LsiLogic MPT SCSI driver again to fix booting from devices attached to this device if the EFI firmware is used (7.1.0 regression) * EFI: Restored broken network boot support (7.1.0 regression) * Adressed CVE-2024-21248 [boo#1231735], CVE-2024-21273 [boo#1231736], CVE-2024-21259 [boo#1231737], CVE-2024-21263 [boo#1231738] - Make the Extension Pack work with our compiler flags and RT_NOEXCEPT choices. [boo#1231225] Update to release 7.1: * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Changed license from Gpl-2.0 to Gpl-3.0 Version bump to VirtualBox 7.0.20 (released July 16 2024 by Oracle)) This is a maintenance release. The following items were fixed and/or added: - TPM: Fixed errors appearing the event viewer with Windows guests - macOS Hosts: Fixed passing USB devices to the VM (bug #21218) - Audio: Fixed recording with HDA emulation after newer Windows 10 / 11 guests got rebooted - USB: Fixed a deadlock in OHCI triggered when saving the current state of a VM or taking a snapshot (bug #22059) - Linux Guest and Host: Introduced initial support for OpenSuse 15.6 kernel - Linux Guest and Host: Introduced initial support for RHEL 9.5 kernel (bug #22099) - Guest Additions: Shared Clipboard: Fixed issue when extra new lines were pasted when copying text between Win and X11 (bug #21716) - UEFI Secure Boot: Add new Microsoft certificates to list for new VMs

Критичність: Невідомо
Published: Jan 1, 2024, 12:00:00 AM UTC
Updated: Feb 4, 2026, 3:58:40 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.23% · Oct 27, 2026

Projects and upstream resources

[virtualbox-guest-additions-iso][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Opensusetumbleweed	virtualbox	`7.1.4-1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:14413-1]Feb 4, 2026, 2:38:32 AM UTC
Susepackage hub 15 sp6	kbuild	`0.1.9998+svn3613-bp156.2.3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Susepackage hub 15 sp6	virtualbox	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Susepackage hub 15 sp6	virtualbox-kmp	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Opensuseleap 15.6	kbuild	`0.1.9998+svn3613-bp156.2.3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Opensuseleap 15.6	virtualbox	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Opensuseleap 15.6	virtualbox-kmp	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Opensuseleap 15.6	kbuild	`0.1.9998+svn3613-bp156.2.3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Opensuseleap 15.6	virtualbox	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Opensuseleap 15.6	virtualbox-kmp	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Opensusetumbleweed	virtualbox	`7.1.4-1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:14413-1]Feb 4, 2026, 2:38:32 AM UTC
Susepackage hub 15 sp6	kbuild	`0.1.9998+svn3613-bp156.2.3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Susepackage hub 15 sp6	virtualbox	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC
Susepackage hub 15 sp6	virtualbox-kmp	`7.1.4-lp156.2.4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0364-1]Feb 4, 2026, 3:58:40 AM UTC

Original provider fields

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "kbuild",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.1.9998+svn3613-bp156.2.3.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0364-1",
      "fixed_version": "0.1.9998+svn3613-bp156.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0364-1",
      "provider_updated_at": "2026-02-04T03:58:40.318897Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.4-lp156.2.4.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0364-1",
      "fixed_version": "7.1.4-lp156.2.4.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0364-1",
      "provider_updated_at": "2026-02-04T03:58:40.318897Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox-kmp",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.4-lp156.2.4.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0364-1",
      "fixed_version": "7.1.4-lp156.2.4.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0364-1",
      "provider_updated_at": "2026-02-04T03:58:40.318897Z",
      "applicability_unknown": true
    },
    {
      "name": "kbuild",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.1.9998+svn3613-bp156.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0364-1",
      "fixed_version": "0.1.9998+svn3613-bp156.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0364-1",
      "provider_updated_at": "2026-02-04T03:58:40.318897Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.4-lp156.2.4.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0364-1",
      "fixed_version": "7.1.4-lp156.2.4.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0364-1",
      "provider_updated_at": "2026-02-04T03:58:40.318897Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox-kmp",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.4-lp156.2.4.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0364-1",
      "fixed_version": "7.1.4-lp156.2.4.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0364-1",
      "provider_updated_at": "2026-02-04T03:58:40.318897Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.4-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:14413-1",
      "fixed_version": "7.1.4-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:14413-1",
      "provider_updated_at": "2026-02-04T02:38:32.815580Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Зіставлення пакетів триває.

[openSUSE Tumbleweed]

[virtualbox]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · x86_64 · tumbleweed
  Виправлена · Виправлена: 7.1.4-1.1
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-devel]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · x86_64 · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-guest-desktop-icons]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · noarch · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-guest-source]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · noarch · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-guest-tools]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · x86_64 · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-host-source]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · noarch · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-qt]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · x86_64 · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-vnc]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · x86_64 · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed
[virtualbox-websrv]Невідомо
Пакет джерела: [virtualbox]
Подробиці (1)
- 7.2.16-1.1 · x86_64 · tumbleweed
  Невідомо · Виправлена: 7.1.4-1.1
  Version impact unknown
  pypi · virtualbox · opensuse · tumbleweed

Спостережено: Oct 27, 2026, 1:32:48 AM UTC

Посилання

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]