Update to 5.2.26. https://www.virtualbox.org/wiki/Changelog-5.2#v26f226c4d673
Port details
emulators/virtualbox-ose-kmod6.1.50.1501000_1
VirtualBox kernel module for FreeBSD
- Maintainer
- vbox@FreeBSD.org
- Packages
- virtualbox-ose-kmod 6.1.50.1501000_1
- Upstream
- Higher version available: 7.2.22
- CPE
oracle:vm_virtualboxfrom the port- WWW
- https://www.virtualbox.org/
- Links
- cgit · VuXML
Unaddressed (16) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 7.0.20 would fix 16 of 16 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 7.0.16 13 · 7.0.20 16
| CVE-2024-21113 | 8.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21114 | 8.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21115 | 8.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21112 | 8.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21141 | 8.2 | 2024-07-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitab… |
| CVE-2024-21116 | 7.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21111 | 7.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21103 | 7.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21110 | 7.3 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21107 | 6.7 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21121 | 6.5 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21106 | 6.5 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21109 | 5.9 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficult to exp… |
| CVE-2024-21161 | 5.5 | 2024-07-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitab… |
| CVE-2024-21108 | 3.3 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab… |
| CVE-2024-21164 | 2.5 | 2024-07-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Difficult to exp… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (188)
Update to 5.2.24. https://www.virtualbox.org/wiki/Changelog-5.2#v24ce47baa1ab
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang, c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib plus, as a double check, everything INDEX-11 showed depending on lang/gcc7. PR: 231590a9f015d155
Update to 5.2.22. https://www.virtualbox.org/wiki/Changelog#22d1488972e2
Remove compatibility code for FreeBSD < 11.2 from all ports. Simplify some ports where DragonFlyBSD no longer needs to be special-cased. Submitted by: rene Reviewed by: bapt, jbeich Differential Revision: https://reviews.freebsd.org/D177248a502cb2d4
Support SMAP for amd64. This should stop kernel panics on SMAP supported CPUs after r336876. PR: 230460 MFH: 2018Q4b8c6eabbfe
Update to 5.2.20. https://www.virtualbox.org/wiki/Changelog#2027785eaba9
Update to 5.2.18. https://www.virtualbox.org/wiki/Changelog#18b621458fc9
Update to 5.2.16. https://www.virtualbox.org/wiki/Changelog#165ac9771135
Update to 5.2.14. https://www.virtualbox.org/wiki/ChangeLog#1452896eada3
Update to 5.2.12. https://www.virtualbox.org/wiki/Changelog#1275f1d3db92
Update to 5.2.10. https://www.virtualbox.org/wiki/Changelog#v10ff9707fa61
Bump PORTREVISIONs of all users of math/mpc that we just updated to version 1.1.0 (via revision 464079).c2a92a1aea
Update to 5.2.8. https://www.virtualbox.org/wiki/Changelog#v8cbe1220de7
Update to 5.2.6.bf36a2031a
Update to 5.2.4. https://www.virtualbox.org/wiki/Changelog#v45c32f53c15
Update to 5.2.2.b58bf791cc
Turn on VIMAGE option by default. VIMAGE is enabled in GENERIC kernels on head now.67f82eef26
Update to 5.2.0.a4ab367afe
Update to 5.1.30.0966a2ec16
Update to 5.1.28.729f257a7b
Update to 5.1.26.ee2c206199
Update to 5.1.24.0977443430
Update to 5.1.22.25b71d9688
Update to 5.1.20.8a781f8dbd
Update to 5.1.18.e90df162f1
Update to 5.1.16.9fc7e23845
Update to 5.1.14.e03ffb78e4
Update to 5.1.12.55eb3c678e
Update to 5.1.10.fb3b57862e
- Fix plist when DEBUG enabled on 11 Reviewed by: jkim Differential Revision: https://reviews.freebsd.org/D5071ab46678ab2
Update to 5.1.8. PR: 213683 Differential Revision: https://reviews.freebsd.org/D829201ac95e188
Update to 5.1.6.1563c9ac55
Update to 5.1.4.e60871787d
Disable TSC measurement thread. It causes a panic with INVARIANTS kernel option. In fact, I doubt that it works on FreeBSD.d271b01c94
Update to 5.0.26.3721902bc8
Update to 4.3.38. MFH: 2016Q2aec8860ef3
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat: portmgr
Sponsored by: Absolight4e1b79a0a6Update to 4.3.36.0e7f31a368
Update to 4.3.34. MFH: 2015Q4034170d71e
Update to 4.3.32. MFH: 2015Q47393b3be86
Remove UNIQUENAME and LATEST_LINK. UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now, we won't have conflicts there. Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel has the correct PKGNAME anyway. Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called OPTIONS_FILE now.) Reviewed by: antoine, bapt Exp-run by: antoine Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D333621a283f3be
Fix pre-build target to properly set environment variables. Note there is no functional change but it is done for correctness. Also, note the change is merged from emulators/virtualbox-ose (r355732).9ce8c1bf2d
Update to 4.3.30. MFH: 2015Q3db7da50ecb
Update to 4.3.28.3ddd0065cb
Update to 4.3.26.c2b05cbd68
Update to 4.3.24.19a52b429c
- Update to 4.3.22. - Install a wrapper for executables as Linux and Solaris installers do.d4c4b9a3af
Bump PORTREVISION. Needed by r37807431960e4ee4
Fix circular dep issues so this script can DTRT at boot. This script needs to run after ldconfig, however it's deps cause: a) A circular dependancy in rcorder b) It starts before ldconfig This causes the VBoxManage command to bail out when it's run by this script because it can't find it's required libs. The consequence of this is host only networks aren't set up properly at boot. By removing the explicit dependancy on ldconfig we get rid of the circular dependancy issues. However since the VBoxManage command does actually need libraries in /usr/local/lib we set that explicitly with LD_LIBRARY_PATH. There's not really a good solution to this issue. The real "problem" is that /usr could be an NFS mount and you have to run ldconfig after /usr is mounted. While LD_LIBRARY_PATH is kind of ugly, and removing an explicit dependancy is ugly, the other alternatives are uglier. (Break NFS mounted /usr for example) I'd also argue that having this just not work (which is the state of it before this commit) is pretty ugly too. Also, I apologize in advance for not discussing this on emulation@ and just doing a drive by commit, however hopefully the fact that "This fixes obvious breakage" makes up for the fact that I skipped peer review, proper approval, and most importantly giving the community to bikeshed this ad naseum.63daeb1703