CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

emulators/virtualbox-ose-kmod6.1.50.1501000_1

VirtualBox kernel module for FreeBSD

Maintainer
vbox@FreeBSD.org
Packages
virtualbox-ose-kmod 6.1.50.1501000_1
Upstream
Higher version available: 7.2.22
CPE
oracle:vm_virtualbox from the port
WWW
https://www.virtualbox.org/
Links
cgit · VuXML

Unaddressed (16) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2024-211138.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211148.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211158.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211128.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211418.2published 2024-07-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracl…

CVE-2024-211167.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2024-211117.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2024-211037.8published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2024-211107.3published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human int…

CVE-2024-211076.7published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerab…

CVE-2024-211216.5published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211066.5published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle…

CVE-2024-211095.9published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized acce…

CVE-2024-211615.5published 2024-07-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2024-211083.3published 2024-04-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabi…

CVE-2024-211642.5published 2024-07-16

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Ora…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (188)

Bernhard Froehlich (decke) · 4.0.14
- Update to 4.0.14

Feature safe:	yes
423f6e98ed
Bernhard Froehlich (decke) · 4.0.12_2
- Fix panic: mutex vm page queue free mutex not owned on 10-CURRENT - Fix compile error: 'D_PSEUDO' undeclared here on 10-CURRENT - Bump PORTREVISION

PR:		ports/162186
Submitted by:	Jung-uk Kim <jkim@FreeBSD.org>
Feature safe:	yes
d6d01011a0
Bernhard Froehlich (decke) · 4.0.12_1
- Bump PORTREVISION which was missing since adding PG_UNMANAGED patch for HEAD - Pet portlint about LICENSE variables

Reported by:	avg
395d49b829
Bernhard Froehlich (decke) · 4.0.12
- Fix PG_UNMANAGED compile problem on HEAD after r224746.

Remove explicit initialization of m->flags and m->oflags because per
default vm_phys_alloc_contig() already initializes the page as unmanaged.
Chase move of PG_UNMANAGED flag from m->flags to m->oflags and renaming
to VPO_UNMANAGED for an additional assert.

PR:		ports/159675
Reported by:	Kyryll A Mirnenko <xmirya@gmail.com>,
		Michael Butler <imb@protected-networks.net>
Thanks to:	beat
a9293b1e11
Bernhard Froehlich (decke) · 4.0.12
- Update to 4.0.12
3d9d3b7e75
Bernhard Froehlich (decke) · 4.0.10
- Update to 4.0.10 - Fix kmod build on 9-CURRENT after removal of cpumask_t [1]

Submitted by:	Jung-uk Kim <jkim@FreeBSD.org> [1]
ea253ac9b9
Bernhard Froehlich (decke) · 4.0.8_1
- Fix panic: spin lock held too long on FreeBSD 7.x - Bump PORTREVISION

PR:		ports/157290
Submitted by:	Alexander Eichner <Alexander.Eichner@oracle.com>
Reported by:	Oleksii Krykun <kryol@bigmir.net>,
		Martin Birgmeier <xxllxrvt@aon.at>,
		Peter Klett <peter@netkey.at>
cd2186d43c
Bernhard Froehlich (decke) · 4.0.8
- Clarify VIMAGE option

PR:		ports/157253
Submitted by:	Warren Block <wblock@wonkity.com>
b9fb4c08e1
Bernhard Froehlich (decke) · 4.0.8
- Update to 4.0.8 - Add vboxheadless startscript [1] - Add vboxwebsrv startscript [2] - Change CONFLICTS to CONFLICTS_INSTALL [3] - Relax hardening for PC-BSD 9 [4] - Add VIMAGE support [5] - Install VBoxExtPackHelperApp [6] - Remove stale mirror - Extend pkg-message for USB configuration - Fix link_elf_obj: symbol RTStrCopy undefined [7]

PR:		ports/156699 (based on) [3]
Submitted by:	Stefan Tollkuehn <stefan.tollkuehn@editura.de>, [1][2]
		Raul Gigea <raul.gigea@editura.de>, [1]
		Tobias Oberstein <tobias.oberstein@tavendo.de>, [1]
		Emil <the_mix_room@hotmail.com>, [3]
		Kris Moore <kris@pcbsd.org>, [4]
		Mikolaj Golub <to.my.trociny@gmail.com>, [5]
		Mattia Rossi <mrossi@swin.edu.au>, [6]
		Florian Smeets <flo@FreeBSD.org> [7]
Thanks to:	dougb@, [1][2]
		Cr4zi3/EFNet, [2]
		crsd, [2]
		beat@,
		hps@,
		Alexander Eichner,
		all testers!
Approved by:	bapt (vbox hat)
662a124702
Baptiste Daroussin (bapt) · 3.2.12_1
Fix building with LOCALBASE != PREFIX
15de8793d4
Bernhard Froehlich (decke) · 3.2.12_1
- Fix build on current after removal of uio_yield() - Bump PORTREVISION

Submitted by:	Michael Butler <imb at protected-networks dot net>
755770b0bb
Beat Gaetzi (beat) · 3.2.12
- Update to 3.2.12 - Remove check for FreeBSD 6.x - Drop MD5 checksums
88e2a9fd48
Beat Gaetzi (beat) · 3.2.10
- Update to 3.2.10 - Add LICENSE and LICENSE_FILE
d0c63501c2
Beat Gaetzi (beat) · 3.2.8
- Update to 3.2.8
7cca3f6501
Beat Gaetzi (beat) · 3.2.6
- Update to 3.2.6 - No longer BROKEN on CURRENT

Feature safe:	yes
c6da10cdfd
Bernhard Froehlich (decke) · 3.2.4
- Update to 3.2.4

Approved by:	beat (co-mentor)
49521c8460
Beat Gaetzi (beat) · 3.2.2
- Update to 3.2.2 - Execute kldxref in do-install target. [1] - Set SYSDIR to SRC_BASE to fix build if the FreeBSD sources are not   installed in /usr/src. [2] - Set SRC_BASE to /usr/src if SRC_BASE is not set and not rely on the   /sys symlink. [2] - Mark BROKEN on recent CURRENT.

Reported by:	scf@ [1]
Submitted by:	imp@ [2]

Many thanks to the VirtualBox developers (especially Alexander Eichner
for all his work and help), all tester and patch submitter and the whole
vbox@ team especially decke@.
bdbbb7ff83
Beat Gaetzi (beat) · 3.1.8
- Update to 3.1.8
19324dd072
Beat Gaetzi (beat) · 3.1.6
- Update to 3.1.6 - Fix ioctl warnings in /var/log/messages [1] - Fix build with QT4 support disabled [2]

Obtained from:	http://www.virtualbox.org/changeset/25953 [1]
Reported by:	William DiNoia <william.dinoia AT gmail.com> [2]
On behalf of:	vbox@ (decke, dhn, itetcu, miwi, nox)
afdffe57e9
Doug Barton (dougb) · 3.1.4
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Martin Wilke (miwi) · 3.1.4
Presenting VirtualBox 3.1.4 for FreeBSD

Changelog from VirtualBox is available here:
http://www.virtualbox.org/wiki/Changelog

Changes in the port:
  - VirtualBox and Guest Additions iso updated to 3.1.4
  - Add UNIQUENAME to fix options file clashes between the virtualbox ports [0]
  - Fixed vtophys problems on CURRENT and STABLE kernes newer than
    January 23th [1]
  - Fixed page double wiring issue in rtR0MemObjNativeAllocPage [2]

PR: 		ports/143361 [0]
Submitted by:	Martin Birgmeier <martin.birgmeier AT aon.at> [0]
		Alexander Eichner <Alexander.Eichner AT Sun.COM> [1]
Thanks To:	All testers on emulation@ and current@ [1]
           	Giovanni Trematerra <giovanni.trematerra AT gmail.com> [1]
		Ian Freislich <ianf AT clue.co.za> [1]
Reported by: 	Alan Cox <alc AT cs dot rice dot edu> [2]
2a547baa1b
Beat Gaetzi (beat) · 3.1.2_1
- Add kldxref to pkg-plist. - Bump PORTREVISION.

Reported by:	Alexander Kabaev <kabaev AT gmail.com>,
		Rainer Hurling <rhurlin AT gwdg.de>,
		Nakata Maho <chat95 AT mac.com>,
		Andrzej Tobola <ato AT iem.pw.edu.pl>
On behalf of:   vbox@ (decke, dhn, itetcu, miwi, nox)
7ec69757cf
Beat Gaetzi (beat) · 3.1.2
emulators/virtualbox: - Remove emulators/virtualbox port. Renamed to emulators/virtualbox-ose   and seperate port for the kernel modules created:   emulators/virtualbox-ose-kmod.

emulators/virtualbox-ose:
- Update to 3.1.2
- Update guest additions to 3.1.2
- Port has been renamed to virtualbox-ose to reflect that we are using
  the OSE version. [1]
- Added proper PulseAudio support for FreeBSD [2]
- procfs is not required anymore because vbox uses sysctl(3) now [3]
- Update pkg-message to reflect recent changes
- Add nox's FreeBSD host networking patches that are now also in the
  upstream vbox svn (modulo vbox variable naming style adjustments:)
	http://lists.freebsd.org/pipermail/freebsd-emulation/2010-January/007260.html
	http://www.virtualbox.org/changeset/25698
  1. Allow direct tap networking again (for users that need the best
  network performance and/or need more complex network setups, like when
  they want to use routing instead of bridging to e.g. protect from guests
  messing with the lan's arp tables; a tap + routing + proxy arp example
  is in the above freebsd-emulation posting.)
  2. Enable vbox' shared mac feature when using bridged mode on a wifi
  interface, together with the virtualbox-ose-kmod change this
  should fix bridged mode for wifi users. [4]

emulators/virtualbox-ose-kmod:
- Update to 3.1.2
- Add rc.d script to load kernel modules
- Fix build with a non-standard location for the system source [5]
- Merge aeichner's vboxnetflt fix committed to upstream vbox svn
  (thanks!) that makes the shared mac feature enabled above actually work
  on FreeBSD hosts. [6]

Please see http://wiki.freebsd.org/VirtualBox for update instructions.

Many thanks to the VirtualBox developers, all tester, patch submitter and
the whole vbox@ team.

PR:		ports/141630 [2]
Noticed by:	mm@ [1]
Submitted by:	Noriyoshi Kawano <bowie AT nrik.jp> [2],
		Baptiste Daroussin <baptiste.daroussin AT gmail.com> [3]
		and Bernhard Froehlich <decke AT bluelife.at> [3],
		nox@ [4], scf@ [5]
Obtained from:	http://www.virtualbox.org/changeset/25699 [6]
On behalf of:	vbox@ (decke, dhn, itetcu, miwi, nox)
078a314586
Beat Gaetzi (beat) · 3.0.51.r22902_3
- Fix loading of vboxnetadp.ko kernel module without loading vboxnetflt.ko   kernel module first. - Bump PORTREVISION.

PR:			ports/141013
Reported / tested by:	Scot Hetzel <swhetzel AT gmail.com>
Submitted by:		Fredrik Lindberg <fli AT shapeshifter.se>
5909b90a90
Beat Gaetzi (beat) · 3.0.51.r22902_2
- Disable testcases to fix possible build breakage with non default   options set

PR:		ports/140171
Submitted by:	Hubert Tournier <hubert AT tournier.org>
Reported by:	Stanislav Dulis <stasd AT xnx.ru> (via private mail)
d262fe63c6
Beat Gaetzi (beat) · 3.0.51.r22902_2
- Fix build if OpenSSL is installed from ports. [1] - Some options require other ones. Add check for them. [2]

PR:		ports/139391 [1]
Submitted by:	"Y.A." <nexther0 AT gmail.com> [1]
Tested by:	Yuri Gorchakov <yuri.gorchakov AT point-group.ru> [1]
Reported by:	Maxim <maksims.k AT gmail.com> [2]
On behalf of:	vbox@ (decke, dhn, itetcu, miwi, nox)
f9297d2f2b
Beat Gaetzi (beat) · 3.0.51.r22902_2
- Fix build with custom LOCALBASE

Reported by:	QATty
Submitted by:	Bernhard Froehlich <decke AT bluelife.at>
On behalf of:	vbox@ (decke, dhn, itetcu, miwi, nox)
cb02e7670e
Martin Wilke (miwi) · 3.0.51.r22902_2
- Fix privilege escalation - Bump PORTREVISION

Security:	http://www.vuxml.org/freebsd/ebeed063-b328-11de-b6a5-0030843d3802.html
On behalf of:	vbox@ (decke, dhn, itetcu, beat, nox)
bee38bb86a
Juergen Lock (nox) · 3.0.51.r22902_1
Fix build on 7/amd64.

Approved by:	vbox@ (miwi, beat)
Feature safe:	yes
89cfd3dec6
Beat Gaetzi (beat) · 3.0.51.r22902_1
- Improve error message if /usr/lib32 is not installed on amd64. [1] - Fix pkg-plist. Additions directory is only created with   WITH_GUESTADDITIONS option. [2] - Add patch to fix panic with vboxnet driver. [3] - Bump PORTREVISION.

PR:		ports/138935 [1] (based on)
Reported by:	scf@ [3]
Submitted by:	Julian H. Stacey <jhs AT berklix.com> [1],
		Bernhard Froehlich <decke AT bluelife.at> [2],
		Fredrik Lindberg <fli AT shapeshifter.se> [3]
On behalf of:	vbox@ (decke, dhn, itetcu, miwi, nox)
Feature safe:	yes
972faa0f83
Martin Wilke (miwi) · 3.0.51.r22902
- Update to 3.0.51r22902. This version enables host serial support   and support for bridged and hostonly networking contributed by     Fredrik Lindberg <fli AT shapeshifter.se>. - Install GuestAdditions in designated directory. [1] - Install NLS files in designated directory. - Add workaround for directory permission problem.

Reported by:	Jonathan Chen <jonc AT chen.org.nz> [1]
On behalf of:	vbox@ (decke, dhn, beat, nox)
88d95ab6f9
Beat Gaetzi (beat) · 3.0.51.r22683
- Update to 3.0.51r22683. This version adds support for tap interface   networking done by nox@, working VT-x, ACPI and Host DVD/CD access   support and several FreeBSD related bugfixes. - Update Guest Additions to 3.0.6. - Respect CC and CXX variables. [1] - Add support for WITHOUT_X11 build. [2] - Fix pkg-plist for WITHOUT_NLS. [2] - Use LocalConfig.kmk to simplify configuration. [2] - Install v

PR:		ports/138063 [1]
Submitted by:	Anonymous <swell dot k at gmail dot com> [1],
		Bernhard Froehlich <decke AT bluelife.at> [2]
On behalf of:	vbox@ (decke, dhn, miwi, nox)
6bd419c4d0
Beat Gaetzi (beat) · 3.0.51.r22226
- Update to 3.0.51r22226 - Update Guest Additions to 3.0.4 - Add wiki page link to pkg-message - Add missing libxslt dependency [1] - Add NLS support [2] - Installing C and Python bindings [3] - Add patch to pass a physical disk to vbox [4]

Submitted by:	Guido Falsi <mad AT madpilot.net> [1], nork [2],
		Bernhard Froehlich <decke AT bluelife.at> [3], nox [4]
Thanks to:	All testers and patch submitters their patch already
		included upstream
On behalf of:	vbox@ (decke, dhn, miwi, nox)
d75f09543a
Beat Gaetzi (beat) · 2.2.51.r20457_3
- Add GID and UID for emulators/virtualbox. - Change virtualbox GID in port Makefile due to a conflict with   databases/couchdb and add UPDATING note. - Bump PORTREVISION.

Reported by:	Mike Harding <mvh AT ix.netcom.com>
1b7af2702d
Juergen Lock (nox) · 2.2.51.r20457_2
- Fix plist - Bump PORTREVISION

Submitted by:	miwi
b7565cd7ca
Juergen Lock (nox) · 2.2.51.r20457_1
- Actually install VBoxTestOGL (it was built, just not installed...) - Fix libGL.so.1 search so it isn't expected in / - Fix packaging for vboxdrv.ko - Bump PORTREVISION

Approved by:	vbox@ (miwi)
d922455054
Martin Wilke (miwi) · 2.2.51.r20457
- Restore VBoxGuestAdditions
9c6ebea530
Martin Wilke (miwi) · 2.2.51.r20457
VirtualBox is a family of powerful x86 virtualization products for enterprise as well as home use. Not only is VirtualBox an extremely feature rich, high performance product for enterprise customers, it is also the only professional solution that is freely available as Open Source Software under the terms of the GNU General Public License.

WWW:	http://www.virtualbox.org/

Note:

Please READ pkg-messages carefully, also please
take a look in the Wiki page (http://wiki.freebsd.org/VirtualBox)

Thanks to: thank you to everyone who helped make this possible.
afbf09cc33