USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
* Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
* Improve startup of VirtualBox through use of systemd service files:
a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
and build the necessary modules.
c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
be done at a later time.
* New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
* New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
* Some typos in virtualbox.spec are fixed.
- Add libelf-devel to build. Fixes bnc #1037511.
Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=331
This is a maintenance release. The following items were fixed and/or added:
VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
Storage: fixed a potential hang under rare circumstances (bug #16677)
Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=329
These should be converted to the service files native to systemd. This issue has been forced
as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
change starts the conversion to native systemd files. The original scripts are still used; however,
service files are used to start and stop the VB components. In a later change, all action will
be accomplished using systemd service files.
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=327
CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
Version bump to 5.1.20 (released 2017-04-18 by Oracle)
This is a maintenance release. The following items were fixed and/or added:
GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
GUI: don't crash on restoring defaults in the appliance import dialog
Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
ICH9: fix for Windows guests with a huge amount (>64G) of guest memory
BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=325
This is a maintenance release. The following items were fixed and/or added:
Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
VBoxBugReport: fixed VM log collection issue
Linux hosts: fixed autostart service script (bug #14955)
Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=320
Removed "vbox_fix_4.11_api_changes.patch" - fixed upstream
- Version bump to 5.1.16 (released 2017-03-08 by Oracle)
This is a maintenance release. The following items were fixed and/or added:
VMM: don't access the MSR_IA32_SMM_MONITOR_CTL MSR if dual-monitor treatment is not available (KVM workaround, bug #14965)
VMM: another fix for handling certain MSRs on ancient CPUs without VT-x support for MSR bitmaps
VMM: fixed VERR_SSM_LOAD_CPUID_MISMATCH errors when restoring a saved state with SMP guests on hosts without the CPUID/HTT bit set (bug #16428)
VMM: fixed a bug in call gate emulation
VMM: FWAIT instruction fix
VMM: fixed a sporadic guest hang under certain conditions
GUI: hide the mini-toolbar from the taskbar and the pager on certain X11 hosts
GUI: better error handling on the global settings / network / host-only / DHCP server settings
GUI: fixes for full-screen with multiple screens
Host-only Network: fixed host-only adapter creation issue preventing VirtualBox installation on Windows 10 hosts (bug #16379)
NAT network: fixed two potential crashes in the DHCP server
ICH9: fixed incorrect initialization of the primary bus for PCI bridges (5.1.14 regression)
Storage: LsiLogic fix for Windows 10
USB: fixed not being able to attach certain USB devices having invalid characters in the device strings (5.0.18 regression; bug #15956)
USB: several fixes for the USB/IP support (bug #16462)
VBoxSVC: fixed another crash during shutdown under rare circumstances
VBoxSVC: fixed a stack overflow on (Windows debug builds only; bug #16409)
OVF: when importing an appliance handle more than 10 network adapters if the OVA was created by VirtualBox (bug #16401)
OVF: fixes for exporting and importing appliances with many disks (bug #16402)
VBoxManage: fixed regression with modifyhd --resize (bug #16311)
rdesktop-vrdp: source code tarball fixes
Linux Installers: do not rebuild kernel modules unnecessarily (bug #16408)
Linux hosts: added an action for opening the VM manager window to the .desktop file
Linux hosts / guests: Linux 4.11 compile fixes (bug #16506)
Linux Additions: added vboxsf FS modules alias (bug #16404)
Linux Additions: fix for the shared folders kernel module to compile on Linux 4.10
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=317
- Version bump to 5.1.14 (released 2017-01-17 by Oracle)
This is a maintenance release. The following items were fixed and/or added:
VMM: fixed emulation of certain instructions for 64-bit guests on 32-bit hosts
VMM: properly handle certain MSRs for 64-bit guests on ancient CPUs without VT-x support for MSR bitmaps (bug #13886)
GUI: fixed a crash with multimonitor setups under certain conditions
GUI: allow cloning of snapshots when the VM is running
NVMe: fixed compatibility with the Storage Performance Development Kit (SPDK, bug #16368)
VBoxSVC: fixed a crash under rare circumstances
VBoxManage: added a sanity check to modifymedium --resize to prevent users from resizing their hard disk from 1GB to 1PB (bug #16311)
Windows hosts: another fix for recent Windows 10 hosts
Linux hosts: Linux 4.10 fixes
Linux Additions: fixed protocol error during certain operations on shared folders (bug #8463)
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=304
the logic has been inverted. Now, the required udev commands to allow passthru are included. The first time that VB is started,
the user will get a screen that points to the bug entry discussing the problem and states what they should do to block the
insecure usage. In any case, that screen will only be printed once. File "virtualbox-60-vboxdrv.rules" has been added
These changes address the issues in bnc #1018340.
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=303
This is a maintenance release. The following items were fixed and/or added:
VMM: fixed VERR_IEM_ASPECT_NOT_IMPLEMENTED Guru Meditations with certain Linux guests if KVM paravirtualization is enabled (5.1 regression; bugs #15613 and #16251)
VMM: fixed VERR_VMX_UNABLE_TO_START_VM Guru Meditations under rare conditions
GUI: prevent a crash under certain conditions if the VM is terminated very early
GUI: fixed certain keyboard capture issues (5.1.10 regression; Mac OS X hosts only; bug #16150)
GUI: fixed dragging guest windows in seamless mode with the keyboard captured (X11 hosts only; bug #15837)
GUI: fixed a problem where the new version detected dialog was covered by the appliance import dialog (Mac OS X hosts only; bug #16238)
Storage: fixed NVMe reset processing when doing rmmod nvme; modprobe nvme in a Linux guest (bug #16080)
Storage: fixed creating a snapshot when the VM is running and an NVMe controller is present
Storage: fixed a problem with the LsiLogic SCSI controller where requests could be lost with SMP guests
E1000: fixed "cable disconnected" issue (Mac OS X guests only; 5.1.10 regression; bug #16260)
E1000: fixed "TX unit hang" issue (Linux guests only; 5.1.10 regression; bug #16221)
API: don't crash when sanitizing certain VM names (bug #16299)
Linux hosts: automatically disable asynchronous I/O on Linux 2.6.18 kernels as high I/O load may trigger kernel oopses on these kernels if this feature is enabled
Linux hosts / guests: Linux 2.6.28 compile fix (bug #16267)
Linux hosts: compile Linux 4.9 compile fix (bug #16286)
Linux Additions: warn the user about a known bug with older Linux guests (e.g. Debian 7) requiring manual work to get 3D working (bug #15319)
Linux Additions: fix the graphics driver build with Linux 4.10 and later (bug #16298)
Windows Additions: fixed a crash in the WDDM driver under certain conditions
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=301
This is a maintenance release. The following items were fixed and/or added:
GUI: the USB filter settings dialog should allow to specify the USB revision in hexadecimal format (bug #15400)
GUI: fixed crash on certain hosts when pressing certain key combinations (Windows hosts only; bug #15719)
GUI: fixed issue with updating the available-geometry on host-screen work-area resize
GUI: don't crash / hang on certain environments if accessibility support is enabled
GUI: fixed various issues in Unscaled HiDPI Output mode (bug #15707)
GUI: extend the VM Input menu with Print Screen-related actions
GUI: improved handling of inserting the Guest Additions ISO image by trying all available optical drives rather than only the first one and by not asking the user if he wants to force unmounting (which doesn't work in most cases anyway)
API: default to RTC using UTC for Solaris 11 guests
Settings: be less restrictive when reading a VM configuration containing a host-only adapter without an interface name
Storage: fixed resizing VDI images resulting in an unbootable image under certain circumstances (bug #15983)
NAT: fixed several 5.1.8 regressions on Mac OS X and Windows hosts (bug #16084)
Audio: fixed a few 5.1.x regressions by using the audio code from 5.0.x until the audio overhaul is completed
VBoxManage: fixed documentation of the storagectl command (bug #15971)
Build system: another fix for building VirtualBox on systems which default to Python 3
Windows hosts: hardening fix for Windows 10 build 14971 (bug #16202)
Windows Additions: properly start the VirtualBox guest services even if the guest user name contains special characters (bug #15982)
Solaris Additions: fixed preemptible mouse notification callback being executed under a spinlock for Solaris guests
Linux hosts / guests: Linux 4.9 fixes (bugs #16155 and #16064)
Linux Additions: fixed Linux kernel module override rule (thanks Mark Furneaux)
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=293
