CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

emulators/virtualbox-ose-kmod6.1.50.1501000_1

VirtualBox kernel module for FreeBSD

Maintainer
vbox@FreeBSD.org
Packages
virtualbox-ose-kmod 6.1.50.1501000_1
Upstream
Higher version available: 7.2.22
CPE
oracle:vm_virtualbox from the port
WWW
https://www.virtualbox.org/
Links
cgit · VuXML

Unaddressed (16) · The CVE record lists this version as affected, no VuXML entry names the CVE

Updating to 7.0.20 would fix 16 of 16 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 7.0.16 13 · 7.0.20 16
CVE-2024-211138.82024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211148.82024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211158.82024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211128.82024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211418.22024-07-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitab…
CVE-2024-211167.82024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211117.82024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211037.82024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211107.32024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211076.72024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211216.52024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211066.52024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211095.92024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficult to exp…
CVE-2024-211615.52024-07-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitab…
CVE-2024-211083.32024-04-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitab…
CVE-2024-211642.52024-07-16Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Difficult to exp…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (188)

Jung-uk Kim (jkim) · 5.2.26
Update to 5.2.26.

https://www.virtualbox.org/wiki/Changelog-5.2#v26
f226c4d673
Jung-uk Kim (jkim) · 5.2.24
Update to 5.2.24.

https://www.virtualbox.org/wiki/Changelog-5.2#v24
ce47baa1ab
Gerald Pfeifer (gerald) · 5.2.22_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Jung-uk Kim (jkim) · 5.2.22
Update to 5.2.22.

https://www.virtualbox.org/wiki/Changelog#22
d1488972e2
Rene Ladan (rene) · 5.2.20_1
Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724
8a502cb2d4
Jung-uk Kim (jkim) · 5.2.20_1
Support SMAP for amd64.

This should stop kernel panics on SMAP supported CPUs after r336876.

PR:		230460
MFH:		2018Q4
b8c6eabbfe
Jung-uk Kim (jkim) · 5.2.20
Update to 5.2.20.

https://www.virtualbox.org/wiki/Changelog#20
27785eaba9
Jung-uk Kim (jkim) · 5.2.18
Update to 5.2.18.

https://www.virtualbox.org/wiki/Changelog#18
b621458fc9
Jung-uk Kim (jkim) · 5.2.16
Update to 5.2.16.

https://www.virtualbox.org/wiki/Changelog#16
5ac9771135
Jung-uk Kim (jkim) · 5.2.14
Update to 5.2.14.

https://www.virtualbox.org/wiki/ChangeLog#14
52896eada3
Jung-uk Kim (jkim) · 5.2.12
Update to 5.2.12.

https://www.virtualbox.org/wiki/Changelog#12
75f1d3db92
Jung-uk Kim (jkim) · 5.2.10
Update to 5.2.10.

https://www.virtualbox.org/wiki/Changelog#v10
ff9707fa61
Gerald Pfeifer (gerald) · 5.2.8_1
Bump PORTREVISIONs of all users of math/mpc that we just updated to version 1.1.0 (via revision 464079).
c2a92a1aea
Jung-uk Kim (jkim) · 5.2.8
Update to 5.2.8.

https://www.virtualbox.org/wiki/Changelog#v8
cbe1220de7
Jung-uk Kim (jkim) · 5.2.6
Update to 5.2.6.
bf36a2031a
Jung-uk Kim (jkim) · 5.2.4
Update to 5.2.4.

https://www.virtualbox.org/wiki/Changelog#v4
5c32f53c15
Jung-uk Kim (jkim) · 5.2.2
Update to 5.2.2.
b58bf791cc
Jung-uk Kim (jkim) · 5.2.0_1
Turn on VIMAGE option by default.

VIMAGE is enabled in GENERIC kernels on head now.
67f82eef26
Jung-uk Kim (jkim) · 5.2.0
Update to 5.2.0.
a4ab367afe
Jung-uk Kim (jkim) · 5.1.30
Update to 5.1.30.
0966a2ec16
Jung-uk Kim (jkim) · 5.1.28
Update to 5.1.28.
729f257a7b
Jung-uk Kim (jkim) · 5.1.26
Update to 5.1.26.
ee2c206199
Jung-uk Kim (jkim) · 5.1.24
Update to 5.1.24.
0977443430
Jung-uk Kim (jkim) · 5.1.22
Update to 5.1.22.
25b71d9688
Jung-uk Kim (jkim) · 5.1.20
Update to 5.1.20.
8a781f8dbd
Jung-uk Kim (jkim) · 5.1.18
Update to 5.1.18.
e90df162f1
Jung-uk Kim (jkim) · 5.1.16
Update to 5.1.16.
9fc7e23845
Jung-uk Kim (jkim) · 5.1.14
Update to 5.1.14.
e03ffb78e4
Jung-uk Kim (jkim) · 5.1.12
Update to 5.1.12.
55eb3c678e
Jung-uk Kim (jkim) · 5.1.10
Update to 5.1.10.
fb3b57862e
Li-Wen Hsu (lwhsu) · 5.1.8
- Fix plist when DEBUG enabled on 11

Reviewed by:	jkim
Differential Revision:	https://reviews.freebsd.org/D5071
ab46678ab2
Jung-uk Kim (jkim) · 5.1.8
Update to 5.1.8.

PR:		213683
Differential Revision:	https://reviews.freebsd.org/D8292
01ac95e188
Jung-uk Kim (jkim) · 5.1.6
Update to 5.1.6.
1563c9ac55
Jung-uk Kim (jkim) · 5.1.4
Update to 5.1.4.
e60871787d
Jung-uk Kim (jkim) · 5.0.26_1
Disable TSC measurement thread.  It causes a panic with INVARIANTS kernel option.  In fact, I doubt that it works on FreeBSD.
d271b01c94
Jung-uk Kim (jkim) · 5.0.26
Update to 5.0.26.
3721902bc8
Jung-uk Kim (jkim) · 4.3.38
Update to 4.3.38.

MFH:		2016Q2
aec8860ef3
Mathieu Arnold (mat) · 4.3.36
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Jung-uk Kim (jkim) · 4.3.36
Update to 4.3.36.
0e7f31a368
Jung-uk Kim (jkim) · 4.3.34
Update to 4.3.34.

MFH:		2015Q4
034170d71e
Jung-uk Kim (jkim) · 4.3.32
Update to 4.3.32.

MFH:		2015Q4
7393b3be86
Mathieu Arnold (mat) · 4.3.30
Remove UNIQUENAME and LATEST_LINK.

UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.

Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.

Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)

Reviewed by:	antoine, bapt
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3336
21a283f3be
Jung-uk Kim (jkim) · 4.3.30
Fix pre-build target to properly set environment variables.  Note there is no functional change but it is done for correctness.  Also, note the change is merged from emulators/virtualbox-ose (r355732).
9ce8c1bf2d
Jung-uk Kim (jkim) · 4.3.30
Update to 4.3.30.

MFH:		2015Q3
db7da50ecb
Jung-uk Kim (jkim) · 4.3.28
Update to 4.3.28.
3ddd0065cb
Jung-uk Kim (jkim) · 4.3.26
Update to 4.3.26.
c2b05cbd68
Jung-uk Kim (jkim) · 4.3.24
Update to 4.3.24.
19a52b429c
Jung-uk Kim (jkim) · 4.3.22
- Update to 4.3.22. - Install a wrapper for executables as Linux and Solaris installers do.
d4c4b9a3af
Josh Paetzel (jpaetzel) · 4.3.20_1
Bump PORTREVISION.

Needed by r378074
31960e4ee4
Josh Paetzel (jpaetzel) · 4.3.20
Fix circular dep issues so this script can DTRT at boot.

This script needs to run after ldconfig, however it's deps cause:

a) A circular dependancy in rcorder
b) It starts before ldconfig

This causes the VBoxManage command to bail out when it's run by
this script because it can't find it's required libs.  The consequence of
this is host only networks aren't set up properly at boot.

By removing the explicit dependancy on ldconfig we get rid of the circular
dependancy issues.  However since the VBoxManage command does actually need
libraries in /usr/local/lib we set that explicitly with LD_LIBRARY_PATH.

There's not really a good solution to this issue.  The real "problem" is that /usr
could be an NFS mount and you have to run ldconfig after /usr is mounted. While
LD_LIBRARY_PATH is kind of ugly, and removing an explicit dependancy is ugly,
the other alternatives are uglier. (Break NFS mounted /usr for example)

I'd also argue that having this just not work (which is the state of it before
this commit) is pretty ugly too.

Also, I apologize in advance for not discussing this on emulation@ and just doing
a drive by commit, however hopefully the fact that "This fixes obvious breakage"
makes up for the fact that I skipped peer review, proper approval, and most importantly
giving the community to bikeshed this ad naseum.
63daeb1703