VBoxWrapper Release 26210

This release contains next fixes:

• vboxwrapper (Mac): fix startup failure on Mac via #6016 by @davidpanderson
• vboxwrapper: create the 'virtualbox home directory' in the project dir via #6018 by @davidpanderson
• improve vboxwrapper network setup via #6111 by @computezrmle
• setup vbox profile location via #6116 by @computezrmle
• remove obsolete function launch_vboxsvc() via #6119 by @computezrmle
• Cleanup 'launch_vboxsvc' associated code via #6129 by @computezrmle
• Replace getcwd() with boinc_getcwd() via #6132 by @computezrmle
• Remove unused files and variables via #6139 by @computezrmle

server_release/1.4/1.4.7

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Fixed various vulnerabilities

Please see the git comparison with v1.4.5 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.7 -b server_release/1.4.7

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5967: Web: fix various vulnerabilities
#5968: Web: fix various XSS vulnerabilities

Full Changelog: server_release/1.4/1.4.5...server_release/1.4/1.4.7

server_release/1.4/1.4.6

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Fixed various vulnerabilities

Please see the git comparison with v1.4.5 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.6 -b server_release/1.4.6

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5967: Web: fix various vulnerabilities

Server Release v1.4.5

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Remove vulnerabilities in tree_threader and in unused badge function

Please see the git comparison with v1.4.4 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.5 -b server_release/1.4.5

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5964: Web: remove vulnerabilities in tree_threader and in unused badge function

Server Release v1.4.4

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Sanitize user URLs to prevent XSS attacks
• Don't allow special chars in user names.
• Fixed SQL injection vulnerability.

Please see the git comparison with v1.4.3 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.4 -b server_release/1.4.4

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#54950: Web: sanitize user URLs to prevent XSS attacks
#5846: web: don't allow special chars in user names.
#5962: fix vulnerability in yucky consent code

Server Release v1.4.3

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• CSRF vulnerability

Please see the git comparison with v1.4.2 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.3 -b server_release/1.4.3

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5950: web: fix CSRF vulnerability in edit passwd function

VBoxWrapper Release 26208

Fixes

• fix bug that caused VB version detection to fail via #5556 by @davidpanderson
• handling of outdated vboxmanage command options via #5587 by @computezrmle
• Report TIMEOUT from vbm_popen via #5585 by @computezrmle
• Add race mitigation lock to vboxwrapper via #5571 by @computezrmle
• Fix possible endless loop via #5598 by @computezrmle
• Fix 'File name too long' on Darwinvia #5608 by @computezrmle
• vboxwrapper: don't create projects/virtualbox via #5658 by @davidpanderson
• Set virtualbox vrde-property via #5823 by @computezrmle
• Revised heartbeat check via #5864 by @computezrmle
• Heartbeat checks deal with time leaps via #5866 by @computezrmle

Enhancements

• Replace deprecated VBoxManage command via #5542 by @computezrmle
• Avoid compiler warning in vboxwrapper.cpp via #5547 by @computezrmle
• Update is_extpack_installed via #5820 by @computezrmle
• Remove unused launch_vboxvm() via #5842 by @computezrmle

Client/Manager Release 8.0.4

Bugs fixed:

• #5667 boinc 8.0.3 (x64) Waiting for memory via #5669 by @davidpanderson
• #5676 Make the download link active (hyperlink) when checking the availability of new versions via #5687 by @AenBleidd

Full Changelog: client_release/8.0/8.0.3...client_release/8.0/8.0.4

Client/Manager Release 8.0.3

Bugs fixed:

• #5641: Client starts set of jobs too large for system memory via #5642 by @davidpanderson

Full Changelog: client_release/8.0/8.0.2...client_release/8.0/8.0.3

Client/Manager Release 8.0.2

What's changed:

• client: if GPU is missing, discard app versions and results that refer to it. via #5577
• [Windows] Fix client crash via #5591
• [CI] Add linux packages for Fedora 40 via #5600
• [CI] Build linux packages for Ubuntu 24.04 via #5603
• Fix screensaver on MacOS 14 via #5611
• [linux] fix install scripts to handle upgrade cases. via #5630
• Correct typo in hostinfo_win.cpp via #5631
• [linux][client] Fix check whether the client is configured to run as a daemon. via #5632
• [linux][Manager] Allow shutting down local client when run outside of BOINC Manager but not as a daemon via #5634
• [linux] add 'all_projects_list.xml' to the linux installation package via #5636

Thanks:

• @KenSharp

Full Changelog: client_release/8.0/8.0.1...client_release/8.0/8.0.2