CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

emulators/virtualbox-ose-kmod-717.1.18.1501000

VirtualBox kernel module for FreeBSD

Maintainer
vbox@FreeBSD.org
Packages
virtualbox-ose-kmod-71 7.1.18.1501000
Upstream
up to date
CPE
oracle:vm_virtualbox from the port
WWW
https://www.virtualbox.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (12)

Vladimir Druzenko (vvd) · 7.1.18.1501000
emulators/virtualbox-ose*-71,www/phpvirtualbox-71: Deprecate with expiration date 2026-12-31

"VirtualBox 7.1.x is no longer supported!"
https://www.virtualbox.org/wiki/Changelog-7.1

Upstream EOL reaches on 2025-04-15, use emulators/virtualbox-ose*-72
instead.
Set expiration date to 2026-12-31.

Sponsored by:	UNIS Labs
MFH:		2026Q2
c1b7acedba
Vladimir Druzenko (vvd) · 7.1.18
emulators/virtualbox-ose{,-nox11,-additions,-additions-nox11,-kmod}-71: Update 7.1.16 => 7.1.18 (fix 9 CVEs)

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.1
https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixOVIR

Security:	CVE-2026-35242
Security:	CVE-2026-35246
Security:	CVE-2026-35251
Security:	CVE-2026-35230
Security:	CVE-2026-35245
Security:	CVE-2026-35247
Security:	CVE-2026-35248
Security:	CVE-2026-35249
Security:	CVE-2026-35250
Sponsored by:	UNIS Labs
MFH:		2026Q2
994329dde7
Älven (alven) · 7.1.16
emulators/virtualbox-ose-*: VirtualBox 7.X: license changed from GNU GPLv2 to GNU GPLv3

PR:		294588
Reported by:	ykla <yklaxds@gmail.com>
Approved by:	vbox@ (vvd@)
Approved by:	db@, yuri@ (Mentors, implicit)
MFH:	 	2026Q2
cb332df603
Vladimir Druzenko (vvd) · 7.1.16
emulators/virtualbox-ose*: Exclude from extract bundled binary files of kBuild

Thes is ~430-640 files, ~30-55MB total for different platforms.
We are using devel/kBuild for build VirtualBox ports.
devel/kBuild is a newer version than the one included in the VirtualBox
tarballs.
c22c337cf0
Vladimir Druzenko (vvd) · 7.1.16
emulators/virtualbox-ose*-71: Update 7.1.14 => 7.1.16

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.1#v16

emulators/virtualbox-ose{,-nox11}-71:
Remove the OGG, VORBIS, and VPX options - without libogg and libvorbis
in the system, the ports attempts to use the bundled versions, but
without libvpx, the build fails. Even when using libvpx, building the
bundled libvorbis library also fails.
These 3 libraries are not heavy dependencies, so we simply make them
mandatory even for emulators/virtualbox-ose-nox11-71.

PR:		292801
Security:	CVE-2026-21955
Security:	CVE-2026-21956
Security:	CVE-2026-21987
Security:	CVE-2026-21988
Security:	CVE-2026-21990
Security:	CVE-2026-21989
Security:	CVE-2026-21957
Security:	CVE-2026-21983
Security:	CVE-2026-21984
Security:	CVE-2026-21982
Security:	CVE-2026-21986
Security:	CVE-2026-21963
Security:	CVE-2026-21985
Security:	CVE-2026-21981
MFH:		2026Q1
6a38da38e9
Vladimir Druzenko (vvd) · 7.1.14
emulators/virtualbox-ose{,-kmod,-nox11}-71: Update 7.1.12 => 7.1.14 (fixed 9 CVEs)

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.1

Fixed 9 CVEs:
https://www.oracle.com/security-alerts/cpuoct2025.html#AppendixOVIR

Security:	CVE-2025-62587
Security:	CVE-2025-62588
Security:	CVE-2025-62589
Security:	CVE-2025-62641
Security:	CVE-2025-62590
Security:	CVE-2025-61760
Security:	CVE-2025-61759
Security:	CVE-2025-62591
Security:	CVE-2025-62592
MFH:		2025Q4
b069930046
Vladimir Druzenko (vvd) · 7.1.12
emulators/virtualbox-ose{,-additions,-kmod}{,-70,-71,-legacy}: Update CONFLICTS_INSTALL before committing new ports with VirtualBox 7.2.x

PR:	289019
cec1e153ef
Vladimir Druzenko (vvd) · 7.1.12
emulators/virtualbox-ose{,-nox11,-kmod}-71: Update 7.1.10 => 7.1.12 (fixed 7 CVEs)

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.1

List of fixed CVEs:
https://www.oracle.com/security-alerts/cpujul2025.html#AppendixOVIR

Security:	CVE-2025-53024
Security:	CVE-2025-53025
Security:	CVE-2025-53026
Security:	CVE-2025-53027
Security:	CVE-2025-53028
Security:	CVE-2025-53029
Security:	CVE-2025-53030
MFH:		2025Q3
fa4ed84463
Vladimir Druzenko (vvd) · 7.1.10
emulators/virtualbox-ose{,-kmod,-nox11}-71: Update 7.1.8 => 7.1.10

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.1

MFH:	2025Q2
073f4ba0a4
Vladimir Druzenko (vvd) · 7.1.8
emulators/virtualbox-ose-kmod{,-70,-71,-legacy}: Fix on 15-CURRENT: linker_load_file: /boot/modules/vboxnetflt.ko - unsupported file type

After commit
https://github.com/freebsd/freebsd-src/commit/93b4a54456589e78dcd37f2db8333baff3f3f0b2
  kernel: linker_load_file: /boot/modules/vboxnetflt.ko - unsupported file type
  kernel: KLD vboxnetflt.ko: depends on netgraph - not available or version mismatch

Thanks to Benjamin Close <Benjamin.Close@clearchain.com> and
rkoberman@gmail.com for researching the issue and identifying its cause.

PR:	286204 286717
MFH:	2025Q2
f3a57fc3f6
Vladimir Druzenko (vvd) · 7.1.8
emulators/virtualbox-ose{,-kmod,-nox11}-71: Add new ports VirtualBox 7.1.8

Port based on patch from devel@stasyan.com.
The main work on porting was done by the author of the original patch.
The rest is a dozen various improvements and bug fixes that have been
made over the past few months in older versions: 7.0.x, 6.1.x, 5.2.x.

The requirements for 7.1.x are the same as for 7.0.x, but for now we'll
leave both versions in experimental/test mode.

The following ports also need to be created (they are not available for
version 7.0.x either):
 - emulators/virtualbox-ose-additions-71;
 - emulators/virtualbox-ose-additions-nox11-71.

www/phpvirtualbox-71 already in ports.

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.1

PR:		284439 271146
Tested by:	Mario Lobo <lobo@bsd.com.br>
Relnotes:	yes
b385e71707
Vladimir Druzenko (vvd) · 7.0.26
emulators/virtualbox-ose{,-kmod,-nox11}-71: Repocopy from emulators/virtualbox-ose{,-kmod,-nox11}-70

PR:	284439
36a9a113cd