Port details

emulators/virtualbox-ose-additions-legacy5.2.44.1501000_11

VirtualBox additions for FreeBSD guests

110

unaddressed

VuXML only, still affected

fixed

Maintainer: vbox@FreeBSD.org
Packages: virtualbox-ose-additions-legacy 5.2.44.1501000_11, virtualbox-ose-additions-nox11-legacy 5.2.44.1501000_11, virtualbox-ose-additions-xlibre-legacy 5.2.44.1501000_11
Upstream: Higher version available: 7.2.22
CPE: oracle:vm_virtualbox from the port
WWW: https://www.virtualbox.org/
Links: cgit · VuXML

Unaddressed (110) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2024-211138.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211148.8published 2024-04-16

CVE-2024-211158.8published 2024-04-16

CVE-2024-211128.8published 2024-04-16

CVE-2022-394278.8published 2022-10-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V…

CVE-2021-22648.4published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle …

CVE-2024-211418.2published 2024-07-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracl…

CVE-2023-219908.2published 2023-04-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulne…

CVE-2022-215718.2published 2022-07-19

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.36. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-24098.2published 2021-07-21

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22508.2published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-20748.2published 2021-01-20

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2020-148728.2published 2020-10-21

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2023-218868.1published 2023-01-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabilit…

CVE-2022-394248.1published 2022-10-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle V…

CVE-2022-394258.1published 2022-10-18

CVE-2022-394268.1published 2022-10-18

CVE-2021-22798.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle V…

CVE-2021-21297.9published 2021-01-20

CVE-2024-211167.8published 2024-04-16

CVE-2024-211117.8published 2024-04-16

CVE-2024-211037.8published 2024-04-16

CVE-2023-219877.8published 2023-04-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vuln…

CVE-2022-214917.8published 2022-04-19

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabil…

CVE-2021-355387.8published 2021-10-20

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabil…

CVE-2022-394227.5published 2022-10-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracl…

CVE-2022-216207.5published 2022-10-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracl…

CVE-2021-23097.5published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Orac…

CVE-2021-23107.5published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Orac…

CVE-2021-21457.5published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Orac…

CVE-2024-211107.3published 2024-04-16

CVE-2022-394217.3published 2022-10-18

CVE-2021-24437.3published 2021-07-21

CVE-2021-22807.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22817.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22827.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22837.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22847.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22857.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22867.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22877.1published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-24547.0published 2021-07-21

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerab…

CVE-2020-29137.0published 2020-04-15

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attack…

CVE-2020-29147.0published 2020-04-15

CVE-2024-211076.7published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerab…

CVE-2021-355456.7published 2021-10-20

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211216.5published 2024-04-16

CVE-2024-211066.5published 2024-04-16

CVE-2022-214716.5published 2022-04-19

CVE-2022-213946.5published 2022-01-19

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle …

CVE-2021-21286.5published 2021-01-20

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle …

CVE-2020-29106.5published 2020-04-15

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabi…

CVE-2019-102196.1published 2019-11-08

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

CVE-2023-220026.0published 2023-04-18

CVE-2023-219896.0published 2023-04-18

CVE-2022-394236.0published 2022-10-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle …

CVE-2022-216216.0published 2022-10-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle …

CVE-2021-24426.0published 2021-07-21

CVE-2021-23216.0published 2021-04-28

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-23066.0published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-22666.0published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2021-21246.0published 2021-01-20

CVE-2021-21266.0published 2021-01-20

CVE-2021-21316.0published 2021-01-20

CVE-2021-21196.0published 2021-01-20

CVE-2021-21206.0published 2021-01-20

CVE-2021-21216.0published 2021-01-20

CVE-2021-21116.0published 2021-01-20

CVE-2021-21126.0published 2021-01-20

CVE-2021-20866.0published 2021-01-20

CVE-2020-148816.0published 2020-10-21

CVE-2020-148846.0published 2020-10-21

CVE-2020-148856.0published 2020-10-21

CVE-2020-148866.0published 2020-10-21

CVE-2020-148896.0published 2020-10-21

CVE-2024-211095.9published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized acce…

CVE-2018-07355.9published 2018-10-29

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

CVE-2024-211615.5published 2024-07-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2023-218985.5published 2023-01-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attac…

CVE-2023-218995.5published 2023-01-18

CVE-2021-355405.5published 2021-10-20

CVE-2020-148925.5published 2020-10-21

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabil…

CVE-2021-22965.3published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Orac…

CVE-2021-22975.3published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Orac…

CVE-2021-22914.7published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerab…

CVE-2018-54074.7published 2018-11-15

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

CVE-2023-219984.6published 2023-04-18

CVE-2023-220004.6published 2023-04-18

CVE-2023-220014.6published 2023-04-18

CVE-2021-21254.6published 2021-01-20

CVE-2023-218844.4published 2023-01-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful atta…

CVE-2022-216274.4published 2022-10-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabil…

CVE-2022-215544.4published 2022-07-19

CVE-2021-355424.4published 2021-10-20

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2021-24754.4published 2021-10-20

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2021-23124.4published 2021-04-22

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2021-21274.4published 2021-01-20

CVE-2021-21304.4published 2021-01-20

CVE-2021-20734.4published 2021-01-20

CVE-2023-219883.8published 2023-04-18

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulner…

CVE-2023-218853.8published 2023-01-18

CVE-2023-218893.8published 2023-01-18

CVE-2022-214873.8published 2022-04-19

CVE-2022-214883.8published 2022-04-19

CVE-2022-212953.8published 2022-01-19

CVE-2023-219993.6published 2023-04-18

CVE-2024-211083.3published 2024-04-16

CVE-2023-219913.2published 2023-04-18

CVE-2021-21233.2published 2021-01-20

CVE-2024-211642.5published 2024-07-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Ora…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (26)

2026-04-30 15:33Vladimir Druzenko (vvd) · 5.2.44.1501000_11

emulators/virtualbox-ose-additions*: Flavorize, add xlibre flavor

Flavors: xorg (default), xlibre, nox11.

While here add PAE option for ARCH=i386, fix warnings from portclippy,
make non-functional changes related to indentation and formatting,
make simplification of CONFLICTS_INSTALL, make unification.

PR:		294806
Sponsored by:	UNIS Labs
Co-authored-by:	b-aaz <b-aazbsd@proton.me>

9ac890df9f

2026-02-03 19:27Vladimir Druzenko (vvd) · 5.2.44_10

emulators/virtualbox-ose*: Exclude from extract bundled binary files of kBuild

Thes is ~430-640 files, ~30-55MB total for different platforms.
We are using devel/kBuild for build VirtualBox ports.
devel/kBuild is a newer version than the one included in the VirtualBox
tarballs.

c22c337cf0

2026-01-06 16:29Vladimir Druzenko (vvd) · 5.2.44_10

emulators/virtualbox-ose-additions-legacy: Fix path to VBoxClient in VBoxClient-all script

PR:	254049
MFH:	2025Q4

53fd1bc993

2025-11-21 16:54Vladimir Druzenko (vvd) · 5.2.44_9

emulators/virtualbox-ose-additions*: Fix "vboxmanage guestproperty" on host does not show interface name for FreeBSD guest

Upstream issue:
https://github.com/VirtualBox/virtualbox/issues/403
Upstream commit:
https://github.com/VirtualBox/virtualbox/commit/3cf64726847e2483c9539ca51c88862a0f1c7414

PR:	291128
MFH:	2025Q4

89de71b8c7

2025-08-29 01:44Vladimir Druzenko (vvd) · 5.2.44_8

emulators/virtualbox-ose{,-additions,-kmod}{,-70,-71,-legacy}: Update CONFLICTS_INSTALL before committing new ports with VirtualBox 7.2.x

PR:	289019

cec1e153ef

2025-05-12 02:51Vladimir Druzenko (vvd) · 5.2.44_8

emulators/virtualbox-ose-additions{,-legacy}: Fix build on 15-CURRENT OSVERSION>=1500038

PR:	286718
MFH:	2025Q2

137787be31

2025-05-11 03:23Vladimir Druzenko (vvd) · 5.2.44_8

emulators/virtualbox-ose{,-additions,-kmod}{,-70,-legacy}: Update CONFLICTS_INSTALL before committing new ports with VirtualBox 7.1.x

PR:	284439

806da99dc2

2025-03-08 15:05Gleb Popov (arrowd) · 5.2.44_8

*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>

a347a92e6e

2025-02-02 20:15Vladimir Druzenko (vvd) · 5.2.44_7

emulators/virtualbox-ose{,-additions,-kmod}{,-legacy}: Update CONFLICTS_INSTALL and PORTSCOUT before commit new ports with VirtualBox 7.0.x

PR:	271146

179f17fc36

2025-01-07 20:37Vladimir Druzenko (vvd) · 5.2.44_7

emulators/virtualbox-ose{,-additions}{,-nox11}-legacy: Fix vboxvfs bugs

This commit fixes vboxvfs (shared foler) kernel module bugs:
* fix open file leaks on creating files that causes file descriptor
  leaks on host;
* fix halfway lookups.

PR:	245865
MFH:	2025Q1

abe3df235e

2025-01-07 19:16Vladimir Druzenko (vvd) · 5.2.44_6

emulators/virtualbox-ose{,-additions}-legacy: Unification of patches with ports emulators/virtualbox-ose{,-additions}

Replace REINPLACE_CMD in Makefiles with patches in files/*.

PR:	272991 279257
MFH:	2025Q1

c9b6fc0d29

2025-01-06 22:58Vladimir Druzenko (vvd) · 5.2.44_6

emulators/virtualbox-ose-additions-legacy: Fix MASTER_SITES

Fixes:	b4a6bc8744f4 (Improve ports)
MFH:	2025Q1

0c89f84bc7

2025-01-04 22:14Vladimir Druzenko (vvd) · 5.2.44_6

emulators/virtualbox-ose*: Improve ports

* Replace PORTVERSION with DISTVERSION.
* Fix CONFLICTS_INSTALL.
* Fix PYTHON in DEFAULT_OPTIONS in emulators/virtualbox-ose.
* Pet portclippy and portlint.
* Formatting and etc.

PR:	258159

b4a6bc8744

2024-06-28 21:08Vladimir Druzenko (vvd) · 5.2.44_6

emulators/virtualbox-ose{,-nox11,-kmod,-additions,-additions-nox11}-legacy: fix build with llvm15+, fix run with PAE on i386

* Fix build with llvm15+ from ports and from base:
  - ISO C++17 does not allow 'register' storage class specifier;
  - require -fPIC on i386.
* Fix load kernel modules on host and guest i386 if kernel compiled with
PAE option: add non-default option PAE to ports.
Based on patches from mi@.

PR:		279257 224616
Approved by:	vbox (maintainer, timeout 1 month and 6 years)

c9de267a35

2023-04-23 11:09Gerald Pfeifer (gerald) · 5.2.44_5

*: Bump PORTREVISIONs for math/mpc update to 1.3.1

8d3e020ed0

2022-09-07 23:58Stefan Eßer (se) · 5.2.44_4

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

fb16dfecae

2022-09-07 23:10Stefan Eßer (se) · 5.2.44_4

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

b7f05445c0

2022-08-09 16:45Guido Falsi (madpilot) · 5.2.44_4

emulators/virtualbox-ose-additions*: Bump portrevision.

Force update after xorg-server update. Sei PORTREVISION=0 on nox11
versions since those don't need reinstallation.

PR:		265731
Reported by:	O. Hartmann <ohartmann@walstatt.org>

f5957f1349

2022-07-05 19:51Bernhard Froehlich (decke) · 5.2.44_3

*/*: Release my babies from my "created by" comments

27d033713d

2021-11-23 23:11Stefan Eßer (se) · 5.2.44_3

*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)

5933ac0b09

2021-10-22 00:32Guido Falsi (madpilot) · 5.2.44_3

emulators/virtualbox-ose: Update description and message files

- Add updated information about supported versions, installation
  commands and mitigation for a known issue.
- Removed reference to the wiki page.

Reviewed on github:

https://github.com/freebsd/freebsd-ports/pull/115

PR:             254412

352af02b38

2021-05-22 17:42Guido Falsi (madpilot) · 5.2.44_3

emulators/virtualbox-ose-additions(-legacy): fix conflicts

- Add missing conflicts lines to emulators/virtualbox-ose-additions
  ports
- Remove duplicate entry in emulators/virtualbox-ose-additions-legacy
  CONFLICTS_INSTALL

PR:		256048

8b0a535c5a

2021-04-30 13:11Guido Falsi (madpilot) · 5.2.44_3

emulators/virtualbox-ose-legacy: limit portscout reporting

The VirtualBox legacy ports track version 5.x, limit portscout
reporting accordingly.

f8e2a64baa

2021-04-06 16:31Mathieu Arnold (mat) · 5.2.44_3

all: Remove all other $FreeBSD keywords.

135fdeebb9

2021-04-06 16:31Mathieu Arnold (mat) · 5.2.44_3

Remove # $FreeBSD$ from Makefiles.

305f148f48

2021-03-09 19:27Guido Falsi (madpilot) · 5.2.44_3

- Update VirtualBox OSE to 6.1.18 - Old VirtualBox OSE 5.2.44 preserved as "-legacy" versions of the   ports (repocopied) - Add back extra patch removed in r528258, actually required to   build DEBUG kmod - Correctly define WITH_DEBUG when enabling the DEBUG option, so   binaries are not stripped

Please note that this new version supports only amd64 CPUs. If you need
to use older hardware please install the legacy ports.

Note that moving VM snapshots across major updates is unsupported, it's
strongly suggested to properly shutdown VMs before upgrading, please
check UPDATING for further details.

This update is the result of work from many people, and thanks to all
who gave feedback and tested things.

Patch based on work from: Mario Lobo <lobo@bsd.com.br> and jkim.

PR:			234878
Submitted by:		kunda <chitty_cloud@me.com>
Approved by:		vbox (implicit)
Reviewed by:		decke
Tested by:		jwb,
			martin ilavsky <ilavsky.martin@gmail.com>,
			Mario Lobo <lobo@bsd.com.br>
Relnotes:		https://www.virtualbox.org/wiki/Changelog-6.1
Differential Revision:	https://reviews.freebsd.org/D28871

42d8425b62

www/linux-chrome 339 CVEs, highest 9.6	Oct 20
graphics/py-pillow 2 CVEs, highest 8.2	Oct 19

node	Oct 24
traefik	Oct 24
vifm	Oct 23
gitlab-ce	Oct 23
ca_root_nss	Oct 23
mailpit	Oct 23
keycloak	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
brotli	Oct 22
chromium	Oct 22