Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracl…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human int…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerab…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized acce…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Ora…
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (0)
No VuXML entries for this package.
Commits (214)
Vladimir Druzenko (vvd) · 6.1.50.1501000_4
emulators/virtualbox-ose-additions*: Flavorize, add xlibre flavor
Flavors: xorg (default), xlibre, nox11.
While here add PAE option for ARCH=i386, fix warnings from portclippy,
make non-functional changes related to indentation and formatting,
make simplification of CONFLICTS_INSTALL, make unification.
PR: 294806
Sponsored by: UNIS Labs
Co-authored-by: b-aaz <b-aazbsd@proton.me>
emulators/virtualbox-ose*: Exclude from extract bundled binary files of kBuild
Thes is ~430-640 files, ~30-55MB total for different platforms.
We are using devel/kBuild for build VirtualBox ports.
devel/kBuild is a newer version than the one included in the VirtualBox
tarballs.
emulators/virtualbox-ose-additions*: Fix "vboxmanage guestproperty" on host does not show interface name for FreeBSD guest
Upstream issue:
https://github.com/VirtualBox/virtualbox/issues/403
Upstream commit:
https://github.com/VirtualBox/virtualbox/commit/3cf64726847e2483c9539ca51c88862a0f1c7414
PR: 291128
MFH: 2025Q4
emulators/virtualbox-ose{,-additions,-kmod}{,-nox11}: Deprecate and set to expire on 2026-12-31
Upstream EOL reaches on 2024-01-31, use emulators/virtualbox-ose-*-72
instead.
PR: 290507
emulators/virtualbox-ose*: Improve ports
* Replace PORTVERSION with DISTVERSION.
* Fix CONFLICTS_INSTALL.
* Fix PYTHON in DEFAULT_OPTIONS in emulators/virtualbox-ose.
* Pet portclippy and portlint.
* Formatting and etc.
PR: 258159
emulators/virtualbox-ose{,-kmod,-additions}: update to 6.1.48
Based on patch from Sergey V. Dyatko <sergey.dyatko@gmail.com>.
Changelog: https://www.virtualbox.org/wiki/Changelog-6.1#v48
PR: 274555
Approved by: arrowd (mentor)
Differential Revision: https://reviews.freebsd.org/D42322
MFH: 2023Q4
Fix some more needless usages of UTF-8 where ASCII is sufficient
While here, drop the quotes around <beat 'em up> added in commit
fa4ecd821fadb6 as I have been convinced they are not needed here.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
emulators/virtualbox-ose-additions*: Bump portrevision.
Force update after xorg-server update. Sei PORTREVISION=0 on nox11
versions since those don't need reinstallation.
PR: 265731
Reported by: O. Hartmann <ohartmann@walstatt.org>
*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket)
emulators/virtualbox-ose: Update description and message files
- Add updated information about supported versions, installation
commands and mitigation for a known issue.
- Removed reference to the wiki page.
Reviewed on github:
https://github.com/freebsd/freebsd-ports/pull/115
PR: 254412
emulators/virtualbox-ose-additions: Assign default value to pointer
In the virtualbox virtual filesystem code we ship as a patch some
code in an else block is commented out. This produces a code path
in which a pointer variable is dereferenced in an unassigned state,
causing random crashes.
Lacking a better fix, give a default value of NULL to the pointer,
which at least avoids the random pointer dereference issue.
PR: 255386
emulators/virtualbox-ose: Update to 6.1.26
This new version has a regression in the pulseaudio host audio
driver. If enabled any VMs configured to use it fails to start.
Since no fix has been found the PULSEAUDIO option is forcibly
disabled. If you have any VM configured to use pulseaudio for audio
input/output, please reconfigure them to use a different driver.
Upstream ticket: https://www.virtualbox.org/ticket/20484
Other changes:
- Remove old patches that don't apply, the audio system has been
reworked upstream and the behavior of these patches is included in
the new code
- Add upgrading pkg-message note about the PULSEAUDIO option issue
described above
Reviewed by: koobs
Differential Revision: https://reviews.freebsd.org/D31264
emulators/virtualbox-ose: Update to 6.1.20
- Also update related kmod and additions ports
- In additions, use INSTALL_LIB to install X11 modules, so binaries
get stripped
- Trim some `#if __FreeBSD_version` checks for unsupported FreeBSD
versions from patches
PR: 255301
emulators/virtualbox-ose-additions: Fix vboxvfs panic
Fix panic on mount when trying to use vbox VFS after
base r355790 (or git commit hash 6fa079fc3f5e).
PR: 255208
MFH: 2021Q2
- Update VirtualBox OSE to 6.1.18 - Old VirtualBox OSE 5.2.44 preserved as "-legacy" versions of the ports (repocopied) - Add back extra patch removed in r528258, actually required to build DEBUG kmod - Correctly define WITH_DEBUG when enabling the DEBUG option, so binaries are not stripped
Please note that this new version supports only amd64 CPUs. If you need
to use older hardware please install the legacy ports.
Note that moving VM snapshots across major updates is unsupported, it's
strongly suggested to properly shutdown VMs before upgrading, please
check UPDATING for further details.
This update is the result of work from many people, and thanks to all
who gave feedback and tested things.
Patch based on work from: Mario Lobo <lobo@bsd.com.br> and jkim.
PR: 234878
Submitted by: kunda <chitty_cloud@me.com>
Approved by: vbox (implicit)
Reviewed by: decke
Tested by: jwb,
martin ilavsky <ilavsky.martin@gmail.com>,
Mario Lobo <lobo@bsd.com.br>
Relnotes: https://www.virtualbox.org/wiki/Changelog-6.1
Differential Revision: https://reviews.freebsd.org/D28871
emulators/virtualbox-ose-additions: drop optional support for OPENGL
OPENGL requires Python 2.7 which expired yesterday.
PR: 249682
Submitted by: swills (hint by VVD)
Fix patch to virtualbox-ose-additions OpenGL ssupport to actually work at runtime as much as possible.
The OpenGL bits in VirtualBox 5 are an old implementation that does
not play too well with what wee have in the tree now. Thesse patches
simply change the funzionn prototypess in VirtualBox to match the
ones from mesa so it caan compile and interface as much as possible
with it.
Thanks to Ronald Klop <ronald-lists@klop.ws> for testing.
PR: 250315
Submitted by: rozhuk.im@gmail.com
Approved by: portmgr (fixit blanket)
Apply fix to emulators/virtualbox-ose-additions to allow building with OPENGL option on after ports r552109.
PR: 250315
Submitted by: rozhuk.im@gmail.com
Approved by: portmgr (fixit blanket)
Remove unncessary memcpy(3) and fix file system ID handling.
I removed a bzero() call to reduce compiler warnings in the previous commit
(r544829). It turned out the next memcpy() call was also wrong. Just use
natural assignments here not to obfuscate the code.
Reported by: Martin Simmons (martin at lispworks dot com) (some time ago)
- Update VirtualBox ports to 5.2.44 - Adapt and regenerate patches - Reduce differences in patch-src_VBox_Devices_PC_vbox-cpuhotplug.dsl [1]
Patch based on one provided by Mario Lobo <lobo@bsd.com.br>.
Many thanks to people who provided ideas and suggetions in the
PR and review.
PR: 244212
Submitted by: Nikita Stepanov <nikitastepan0v@bk.ru>
Reviewed by: kevans [1]
Tested by: lwshu
Approved by: ports-secteam (joneum)
MFH: 2020Q3
Security: 1e7b316b-c6a8-11ea-a7d5-001999f8d30b
Differential Revision: https://reviews.freebsd.org/D25496
emulators/virtualbox-ose-{additions,kmod}: Remove missing patch
extrapatch-Config.kmk was merged in ports r528258 into the standard
Config.kmk patch out of necessity, but inadvertently missed that it was also
referenced in two other spots.
No PORTREVISION bump, as these are build-only fixes to fix the entirety of
virtualbox-ose-additions and the DEBUG option of virtualbox-ose-kmod.
PR: 245239
Approved by: koobs (mentor)
Approved by: portmgr (blanket: build fix, just-fix-it)
MFH: 2020Q2 (blanket: build fix)
Differential Revision: https://reviews.freebsd.org/D24260
Update xorg x11 servers to 1.20.7
Update xorg x11 servers to 1.20.7. This updates x11-servers/xorg-server,
xephyr, xorg-dmx, xorg-nestserver, xorg-vbserver and xwayland.
Enable the UDEV backend by default, instead of the DEVD backend, for
autoconfiguration of input devices on FreeBSD 12 and later.
FreeBSD 11 lacks the needed support in base and will keep on using the DEVD
backend.
Support for the HAL backend is dropped completely, it has been deprecated
for a long time.
Update and improve the DEVD backend.
Add a pkg message about sysctl configuration that might be needed when using
UDEV.
Use the upstream fix for glamour issues.
Use evdev xkb rules by default in xwayland [2]
Add x11-drivers/xf86-input-libinput to the list installed by default by
x11-drivers/xorg-drivers.
Fix net/tigervnc-server and emulators/virtualbox-ose
Bump portrevision of all x11 drivers, as well as other ports dependent on
xorg-server.
This represents work by many people over a long period. These include
wulf, ak, dumbbell, hselasky pete AT nomadlogic DOT org, jbeich, manu,
myself and possibly others (I tried to look through history, but might have
missed people. If so, I am sorry.)
PR: 196678 [1], 244129 [2]
Submitted by: hselasky, wulf [1], jbeich [2]
Obtained from: https://github.com/FreeBSDDesktop/freebsd-ports/tree/feature/xserver-1.20 (in part)
Fix build with OPENGL option when using 3.x as default Python.
Note the same problem in emulators/virtualbox-ose was fixed in r475363.
Reported by: fluffy
Add USES=xorg USES=gl, ports categories e and g
Add USES=xorg and USES=gl to ports in categories starting with 'e' and 'g'.
While here, try to sprinkle other USES (mostly gnome and sdl) as needed.