| 2023-04-20 07:41:50 |
Gianfranco Costamagna |
bug |
|
|
added bug |
| 2023-04-20 07:42:03 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-ext-pack (Ubuntu) |
|
| 2023-04-20 07:42:11 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-hwe (Ubuntu) |
|
| 2023-04-20 07:42:34 |
Gianfranco Costamagna |
bug task added |
|
virtualbox (Ubuntu) |
|
| 2023-04-20 07:43:24 |
Gianfranco Costamagna |
cve linked |
|
2022-42916 |
|
| 2023-04-20 07:43:24 |
Gianfranco Costamagna |
cve linked |
|
2022-43551 |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
nominated for series |
|
Ubuntu Jammy |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox (Ubuntu Jammy) |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-guest-additions-iso (Ubuntu Jammy) |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-ext-pack (Ubuntu Jammy) |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-hwe (Ubuntu Jammy) |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
nominated for series |
|
Ubuntu Kinetic |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox (Ubuntu Kinetic) |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-guest-additions-iso (Ubuntu Kinetic) |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-ext-pack (Ubuntu Kinetic) |
|
| 2023-04-20 07:45:26 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-hwe (Ubuntu Kinetic) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
nominated for series |
|
Ubuntu Lunar |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox (Ubuntu Lunar) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-guest-additions-iso (Ubuntu Lunar) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-ext-pack (Ubuntu Lunar) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-hwe (Ubuntu Lunar) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
nominated for series |
|
Ubuntu Focal |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox (Ubuntu Focal) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-guest-additions-iso (Ubuntu Focal) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-ext-pack (Ubuntu Focal) |
|
| 2023-04-20 07:45:39 |
Gianfranco Costamagna |
bug task added |
|
virtualbox-hwe (Ubuntu Focal) |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-21987 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-21988 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-21989 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-21990 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-21991 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-21998 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-21999 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-22000 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-22001 |
|
| 2023-04-20 08:04:46 |
Gianfranco Costamagna |
cve linked |
|
2023-22002 |
|
| 2023-04-20 08:05:39 |
Gianfranco Costamagna |
summary |
[SRU] virtualbox |
[SRU] virtualbox 7.0.8 and 6.1.44 |
|
| 2023-04-20 08:09:05 |
Gianfranco Costamagna |
virtualbox-hwe (Ubuntu Lunar): status |
New |
Fix Committed |
|
| 2023-04-20 08:10:56 |
Gianfranco Costamagna |
description |
Sync vbox from Debian, fixing CVES
CVE-2023-21990 Oracle VM VirtualBox Core None No 8.2 Local Low High None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21987 Oracle VM VirtualBox Core None No 7.8 Local High Low None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2022-42916 Oracle VM VirtualBox Core (cURL) HTTP Yes 7.5 Network Low None None Un-
changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22002 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21989 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21998 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8 See Note 1
CVE-2023-22000 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22001 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21988 Oracle VM VirtualBox Core None No 3.8 Local Low Low None Changed Low None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21999 Oracle VM VirtualBox Core None No 3.6 Local High Low None Un-
changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21991 Oracle VM VirtualBox Core None No 3.2 Local Low High None Changed Low None None Prior to 6.1.44, Prior to 7.0.8 |
[ SRU impact ]
* All vbox users, host and guest
[ Test plan ]
* Install virtualbox, run VMs
[ Possible regressions ]
* Upstream has a really good testsuite and in package history regressions were mostly never found, except for really minor bugs
[ Other Info ]
Sync vbox from Debian, fixing CVES
CVE-2023-21990 Oracle VM VirtualBox Core None No 8.2 Local Low High None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21987 Oracle VM VirtualBox Core None No 7.8 Local High Low None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2022-42916 Oracle VM VirtualBox Core (cURL) HTTP Yes 7.5 Network Low None None Un-
changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22002 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21989 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21998 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8 See Note 1
CVE-2023-22000 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22001 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21988 Oracle VM VirtualBox Core None No 3.8 Local Low Low None Changed Low None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21999 Oracle VM VirtualBox Core None No 3.6 Local High Low None Un-
changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21991 Oracle VM VirtualBox Core None No 3.2 Local Low High None Changed Low None None Prior to 6.1.44, Prior to 7.0.8 |
|
| 2023-04-20 08:11:01 |
Gianfranco Costamagna |
virtualbox-guest-additions-iso (Ubuntu Lunar): status |
New |
Fix Committed |
|
| 2023-04-20 08:11:08 |
Gianfranco Costamagna |
virtualbox-ext-pack (Ubuntu Lunar): status |
New |
Fix Committed |
|
| 2023-04-20 08:11:14 |
Gianfranco Costamagna |
virtualbox (Ubuntu Lunar): status |
New |
Fix Committed |
|
| 2023-04-20 14:49:05 |
Gianfranco Costamagna |
information type |
Public |
Public Security |
|
| 2023-04-20 21:13:58 |
Gianfranco Costamagna |
virtualbox-guest-additions-iso (Ubuntu Lunar): status |
Fix Committed |
Fix Released |
|
| 2023-07-21 01:24:56 |
Ikuya Awashiro |
bug |
|
|
added subscriber Ikuya Awashiro |
| 2023-08-02 06:50:22 |
Qwerty Chouskie |
bug |
|
|
added subscriber Qwerty Chouskie |
| 2023-09-15 10:21:20 |
Gianfranco Costamagna |
description |
[ SRU impact ]
* All vbox users, host and guest
[ Test plan ]
* Install virtualbox, run VMs
[ Possible regressions ]
* Upstream has a really good testsuite and in package history regressions were mostly never found, except for really minor bugs
[ Other Info ]
Sync vbox from Debian, fixing CVES
CVE-2023-21990 Oracle VM VirtualBox Core None No 8.2 Local Low High None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21987 Oracle VM VirtualBox Core None No 7.8 Local High Low None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2022-42916 Oracle VM VirtualBox Core (cURL) HTTP Yes 7.5 Network Low None None Un-
changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22002 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21989 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21998 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8 See Note 1
CVE-2023-22000 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22001 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21988 Oracle VM VirtualBox Core None No 3.8 Local Low Low None Changed Low None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21999 Oracle VM VirtualBox Core None No 3.6 Local High Low None Un-
changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21991 Oracle VM VirtualBox Core None No 3.2 Local Low High None Changed Low None None Prior to 6.1.44, Prior to 7.0.8 |
[ MICRORELEASE PAGE ]
https://wiki.ubuntu.com/VirtualboxUpdates
[ SRU impact ]
* All vbox users, host and guest
[ Test plan ]
* Install virtualbox, run VMs
[ Possible regressions ]
* Upstream has a really good testsuite and in package history regressions were mostly never found, except for really minor bugs
[ Other Info ]
Sync vbox from Debian, fixing CVES
CVE-2023-21990 Oracle VM VirtualBox Core None No 8.2 Local Low High None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21987 Oracle VM VirtualBox Core None No 7.8 Local High Low None Changed High High High Prior to 6.1.44, Prior to 7.0.8
CVE-2022-42916 Oracle VM VirtualBox Core (cURL) HTTP Yes 7.5 Network Low None None Un-
changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22002 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21989 Oracle VM VirtualBox Core None No 6.0 Local Low High None Changed High None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21998 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8 See Note 1
CVE-2023-22000 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-22001 Oracle VM VirtualBox Core None No 4.6 Local Low High None Changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21988 Oracle VM VirtualBox Core None No 3.8 Local Low Low None Changed Low None None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21999 Oracle VM VirtualBox Core None No 3.6 Local High Low None Un-
changed Low Low None Prior to 6.1.44, Prior to 7.0.8
CVE-2023-21991 Oracle VM VirtualBox Core None No 3.2 Local Low High None Changed Low None None Prior to 6.1.44, Prior to 7.0.8 |
|
| 2023-09-15 10:21:27 |
Gianfranco Costamagna |
summary |
[SRU] virtualbox 7.0.8 and 6.1.44 |
[SRU] virtualbox 7.0.10 and 6.1.46 |
|
| 2023-09-16 07:25:41 |
Gianfranco Costamagna |
virtualbox (Ubuntu Kinetic): status |
New |
Invalid |
|
| 2023-09-16 07:25:51 |
Gianfranco Costamagna |
virtualbox-ext-pack (Ubuntu Kinetic): status |
New |
Invalid |
|
| 2023-09-16 07:26:01 |
Gianfranco Costamagna |
virtualbox-guest-additions-iso (Ubuntu Kinetic): status |
New |
Invalid |
|
| 2023-09-16 07:26:11 |
Gianfranco Costamagna |
virtualbox-hwe (Ubuntu Kinetic): status |
New |
Invalid |
|
| 2023-09-16 07:26:22 |
Gianfranco Costamagna |
virtualbox-guest-additions-iso (Ubuntu Lunar): status |
Fix Released |
In Progress |
|
| 2023-09-16 07:26:30 |
Gianfranco Costamagna |
virtualbox (Ubuntu Focal): status |
New |
In Progress |
|
| 2023-09-16 07:26:36 |
Gianfranco Costamagna |
virtualbox (Ubuntu Jammy): status |
New |
In Progress |
|
| 2023-09-16 07:26:41 |
Gianfranco Costamagna |
bug task deleted |
virtualbox (Ubuntu Kinetic) |
|
|
| 2023-09-16 07:26:45 |
Gianfranco Costamagna |
bug task deleted |
virtualbox-guest-additions-iso (Ubuntu Kinetic) |
|
|
| 2023-09-16 07:26:52 |
Gianfranco Costamagna |
virtualbox-ext-pack (Ubuntu Focal): status |
New |
In Progress |
|
| 2023-09-16 07:27:00 |
Gianfranco Costamagna |
virtualbox (Ubuntu Lunar): status |
Fix Committed |
In Progress |
|
| 2023-09-16 07:27:07 |
Gianfranco Costamagna |
virtualbox (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2023-09-16 07:27:15 |
Gianfranco Costamagna |
virtualbox-ext-pack (Ubuntu Jammy): status |
New |
In Progress |
|
| 2023-09-16 07:27:25 |
Gianfranco Costamagna |
virtualbox-ext-pack (Ubuntu Lunar): status |
Fix Committed |
In Progress |
|
| 2023-09-16 07:27:31 |
Gianfranco Costamagna |
virtualbox-ext-pack (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2023-09-16 07:27:37 |
Gianfranco Costamagna |
bug task deleted |
virtualbox-ext-pack (Ubuntu Kinetic) |
|
|
| 2023-09-16 07:27:42 |
Gianfranco Costamagna |
bug task deleted |
virtualbox-hwe (Ubuntu Kinetic) |
|
|
| 2023-09-16 07:27:50 |
Gianfranco Costamagna |
virtualbox-hwe (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2023-09-16 07:27:59 |
Gianfranco Costamagna |
virtualbox-guest-additions-iso (Ubuntu Focal): status |
New |
In Progress |
|
| 2023-09-16 07:28:06 |
Gianfranco Costamagna |
virtualbox-guest-additions-iso (Ubuntu Jammy): status |
New |
In Progress |
|
| 2023-09-16 07:28:13 |
Gianfranco Costamagna |
virtualbox-hwe (Ubuntu Focal): status |
New |
In Progress |
|
| 2023-09-16 07:28:20 |
Gianfranco Costamagna |
virtualbox-hwe (Ubuntu Jammy): status |
New |
In Progress |
|
| 2023-09-16 07:28:27 |
Gianfranco Costamagna |
virtualbox-hwe (Ubuntu Lunar): status |
Fix Committed |
In Progress |
|
| 2023-09-16 13:00:02 |
Luís Infante da Câmara |
bug |
|
|
added subscriber Luís Infante da Câmara |
| 2023-10-18 19:25:43 |
Qwerty Chouskie |
summary |
[SRU] virtualbox 7.0.10 and 6.1.46 |
[SRU] Virtualbox 7.0.12 and 6.1.48 |
|
