virtualbox - Debian Package Tracker

general

source: virtualbox (contrib)
version: 7.0.20-dfsg-1
maintainer: Debian Virtualbox Team (DMD)
uploaders: Gianfranco Costamagna [DMD] – Ritesh Raj Sarraf [DMD]
arch: amd64 i386
std-ver: 4.7.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

unstable: 7.0.20-dfsg-1

versioned links

7.0.20-dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

virtualbox (85 bugs: 2, 67, 16, 0)
virtualbox-dkms (18 bugs: 0, 17, 1, 0)
virtualbox-guest-utils (6 bugs: 1, 5, 0, 0)
virtualbox-guest-utils-hwe
virtualbox-guest-x11 (9 bugs: 0, 6, 3, 0)
virtualbox-guest-x11-hwe
virtualbox-qt (7 bugs: 0, 5, 2, 0)
virtualbox-source (5 bugs: 0, 5, 0, 0)

action needed

Debci reports failed tests high

unstable: neutral (log)
The tests ran in an unknown time
Last run: 2024-12-02T14:42:52.000Z
Previous status: unknown

testing: fail (log)
The tests ran in an unknown time
Last run: 2024-12-14T07:57:12.000Z
Previous status: unknown

Created: 2024-04-21 Last update: 2024-12-30 14:00

A new upstream version is available: 7.1.4 high

A new upstream version 7.1.4 is available, you should consider packaging it.

Created: 2024-09-14 Last update: 2024-12-30 12:04

5 security issues in sid high

There are 5 open security issues in sid.

5 important issues:

CVE-2024-21248: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L).
CVE-2024-21253: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
CVE-2024-21259: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
CVE-2024-21263: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H).
CVE-2024-21273: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Created: 2024-10-16 Last update: 2024-10-19 18:01

Depends on packages which need a new maintainer normal

The packages that virtualbox depends on which need a new maintainer are:

yasm (#1011573)
- Build-Depends: yasm
libidl (#738870)
- Build-Depends: libidl-dev
docbook-xml (#802368)
- Build-Depends: docbook-xml
docbook-xsl (#802370)
- Build-Depends: docbook-xsl

Created: 2024-04-21 Last update: 2024-12-30 13:33

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2024-07-22 Last update: 2024-12-30 13:31

1 bug tagged help in the BTS normal

The BTS contains 1 bug tagged help, please consider helping the maintainer in dealing with it.

Created: 2019-03-21 Last update: 2024-12-30 13:31

12 bugs tagged patch in the BTS normal

The BTS contains patches fixing 12 bugs, consider including or untagging them.

Created: 2024-02-25 Last update: 2024-12-30 13:31

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 7.1.0-dfsg-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit e11573e5635246340569eb5be143b2179c148cf6
Merge: e31a6a61 843b112e
Author: Gianfranco Costamagna <locutusofborg@debian.org>
Date:   Sat Dec 28 15:07:37 2024 +0000

    Merge branch 'fixvboxsetupapipath' into 'master'
    
    Fix vboxapisetup.py path
    
    See merge request pkg-virtualbox-team/virtualbox!11

commit 843b112e6cd59fa30850dd98303c70478442be7e
Author: cielavenir <cielartisan@gmail.com>
Date:   Wed Dec 4 09:45:50 2024 +0900

    Fix vboxapisetup.py path

commit e31a6a6198eb752242c0c59992914cf92fab4a14
Author: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Date:   Tue Oct 8 13:50:15 2024 +0200

    Update changelog

commit 4ee98d4cf40a1507a2362987afd8b05152198fbf
Author: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Date:   Tue Oct 8 13:49:30 2024 +0200

    Add libfuse2 runtime dependency (Closes: #1082889), thanks Marco Moock for the report

commit cb4c02808b9391a8bbca9e811669d9cfb502d381
Author: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Date:   Sun Sep 29 18:45:05 2024 +0200

    Tru to fix build with new dita-ot, switch to qt6, try to also build for arm

commit 42a1ca1291fde365bfba140cb21a8a074aaccce2
Author: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Date:   Sun Sep 29 18:44:51 2024 +0200

    Refresh patches

commit db3adc156cb5fcd7147c5dad2b24d259f0fdf157
Merge: 98319375 e6574556
Author: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Date:   Thu Sep 12 00:32:13 2024 +0200

    Update upstream source from tag 'upstream/7.1.0-dfsg'
    
    Update to upstream version '7.1.0-dfsg'
    with Debian dir 36ceb49bed75348fef1f7ebf53537662d6a556b0

commit e65745568c0769c27d1b12aa203b97f301478135
Author: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Date:   Thu Sep 12 00:28:27 2024 +0200

    New upstream version 7.1.0-dfsg

Created: 2024-09-30 Last update: 2024-12-28 17:00

AppStream hints: 1 warning for virtualbox-qt normal

AppStream found metadata issues for packages:

virtualbox-qt: 1 warning

You should get rid of them to provide more metadata about this software.

Created: 2024-04-21 Last update: 2024-05-04 04:11

debian/patches: 15 patches to forward upstream low

Among the 15 debian patches available in version 7.0.20-dfsg-1 of the package, we noticed the following issues:

15 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2024-07-17 12:04

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2024-05-10 Last update: 2024-05-10 21:33

testing migrations

This package will soon be part of the auto-libxml2 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
excuses:
- Migration status for virtualbox (- to 7.0.20-dfsg-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating virtualbox would introduce bugs in testing: #1057014, #1082157, #1085440, #794466
- ∙ ∙ autopkgtest for virtualbox/7.0.20-dfsg-1: amd64: No tests, superficial or marked flaky ♻, i386: Regression or new test ♻
- Additional info:
- ∙ ∙ Cannot be tested by piuparts (not a blocker) - (no link yet)
- ∙ ∙ 166 days old (needed 5 days)
- Not considered

news

[rss feed]

[2024-07-16] Accepted virtualbox 7.0.20-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2024-06-07] Accepted virtualbox 7.0.18-dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2024-05-03] Accepted virtualbox 7.0.18-dfsg-1 (source amd64) into unstable (Debian FTP Masters) (signed by: Gianfranco Costamagna)
[2024-05-03] Accepted virtualbox 7.0.16-dfsg-8 (source amd64) into unstable (Debian FTP Masters) (signed by: Gianfranco Costamagna)
[2024-05-03] Accepted virtualbox 7.0.16-dfsg-6 (source) into unstable (Gianfranco Costamagna)
[2024-05-01] Accepted virtualbox 7.0.16-dfsg-5 (source amd64) into unstable (Debian FTP Masters) (signed by: Gianfranco Costamagna)
[2024-04-27] Accepted virtualbox 7.0.16-dfsg-4 (source) into unstable (Gianfranco Costamagna)
[2024-04-26] Accepted virtualbox 7.0.16-dfsg-3 (source) into unstable (Gianfranco Costamagna)
[2024-04-17] Accepted virtualbox 7.0.16-dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2024-04-16] Accepted virtualbox 7.0.16-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2024-02-27] Accepted virtualbox 7.0.14-dfsg-4 (source) into unstable (Gianfranco Costamagna)
[2024-02-27] Accepted virtualbox 7.0.14-dfsg-3 (source) into unstable (Gianfranco Costamagna)
[2024-02-19] Accepted virtualbox 7.0.14-dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2024-01-17] Accepted virtualbox 7.0.14-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2023-10-18] Accepted virtualbox 7.0.12-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2023-08-25] Accepted virtualbox 7.0.10-dfsg-3 (source) into unstable (Gianfranco Costamagna)
[2023-07-19] Accepted virtualbox 7.0.10-dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2023-07-19] Accepted virtualbox 7.0.10-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2023-04-20] Accepted virtualbox 7.0.8-dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2023-04-19] Accepted virtualbox 7.0.8-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2023-01-25] Accepted virtualbox 7.0.6-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2022-12-27] Accepted virtualbox 7.0.4-dfsg-5 (source) into unstable (Gianfranco Costamagna)
[2022-11-30] Accepted virtualbox 7.0.4-dfsg-4 (source) into unstable (Gianfranco Costamagna)
[2022-11-25] Accepted virtualbox 7.0.4-dfsg-3 (source) into unstable (Gianfranco Costamagna)
[2022-11-25] Accepted virtualbox 7.0.4-dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2022-11-23] Accepted virtualbox 7.0.4-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2022-10-31] Accepted virtualbox 7.0.2-dfsg-2 (source) into experimental (Gianfranco Costamagna)
[2022-10-30] Accepted virtualbox 7.0.2-dfsg-1 (source) into experimental (Gianfranco Costamagna)
[2022-10-19] Accepted virtualbox 6.1.40-dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2022-09-06] Accepted virtualbox 6.1.38-dfsg-3 (source) into unstable (Gianfranco Costamagna)

bugs [bug history graph]

all: 179 183
RC: 5
I&N: 142 144
M&W: 32 34
F&P: 0
patch: 12
help: 1
NC: 1

links

homepage
buildd: logs, checks, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 7.0.20-dfsg-1build1
175 bugs