CVE and update status of the FreeBSD ports tree4,805 unaddressed CVEs in 625 portsAll times are CET

Port details

www/firefox-esr153.5.1,2

Web browser based on the browser portion of Mozilla

0
unaddressed
0
VuXML only, still affected
189
fixed
Maintainer
gecko@FreeBSD.org
Packages
firefox-esr 153.5.1,2
Upstream
up to date
CPE
mozilla:firefox_esr from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (189)

VuXML entries whose affected range this version has left.
mozilla -- multiple vulnerabilitiesentered 2018-01-23

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

mozilla -- multiple vulnerabilitiesentered 2017-04-19

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

Commits (926)

Christoph Moench-Tegeder (cmt) · 153.6.0,2
www/firefox-esr: update to 153.6.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.6.0/releasenotes/
2f929049a9
Christoph Moench-Tegeder (cmt) · 153.5.1,2
www/firefox-esr: update to 153.5.1

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.5.1/releasenotes/
9be2351022
Piotr Kubaj (pkubaj) · 153.5.0_1,2
Mk/bsd.gecko.mk, lang/spidermonkey128: use RUST_LIB_BACKTRACE on powerpc64le

rust.mk only exports RUST_BACKTRACE, so RUST_LIB_BACKTRACE=0 from the
environment is enough and the per-port patches can go. spidermonkey128
is hit by the same cargo crash.
169e4aece1
Mikael Urankar (mikael) · 153.5.0_1,2
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Christoph Moench-Tegeder (cmt) · 153.5.0,2
www/firefox-esr: update to 153.5.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.5.0/releasenotes/
d9e9d2e8e8
Piotr Kubaj (pkubaj) · 153.4.0_1,2
mail/thunderbird*, www/firefox*: fix build on powerpc64*

1. On powerpc64 WASI seems to be broken.
2. On powerpc64le without recent LLVM patch, RUST_BACKTRACE is broken.
472e40ba3c
Christoph Moench-Tegeder (cmt) · 153.4.0_1,2
www/firefox{,-esr}: collect BINDGEN_FLAGS after 6e755229254f

This moved to bsd.gecko.mk in 6e755229254f
436d990f0b
Christoph Moench-Tegeder (cmt) · 153.4.0_1,2
www/firefox-esr: update to 153.4.0 (rc3)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.4.0/releasenotes/
c1b25f50c8
Christoph Moench-Tegeder (cmt) · 153.4.0,2
www/firefox-esr: update to 153.4.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.4.0/releasenotes/
49d082b7fa
Christoph Moench-Tegeder (cmt) · 153.3.0,2
www/firefox-esr: update to 153.3.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.3.0/releasenotes/
48648a2733
Mikael Urankar (mikael) · 153.2.0_2,2
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Charlie Li (vishwin) · 153.2.0_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
b25213c075
Christoph Moench-Tegeder (cmt) · 153.2.0,2
www/firefox-esr: update to 153.2.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.2.0/releasenotes/
90096a9725
Christoph Moench-Tegeder (cmt) · 153.1.0,2
www/firefox-esr: update to 153.1.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.1.0/releasenotes/
3ae3b9746a
Christoph Moench-Tegeder (cmt) · 153.0_1,2
gecko: declare NOT_FOR_ARCHS=i386

The building and linking of the rust parts on x86 needs a larger
address space than a 32bit platform can provide (at most 4GB).
The gecko ports have been failing for quite a while on the official
builders with an "rustc-LLVM ERROR: out of memory" message, e.g.
https://pkg-status.freebsd.org/beefy18/data/144i386-default/6f1fe399c86f/logs/thunderbird-153.0.2.log

We can as well stop trying to save the CPU cycles leading up to
this error.
368d875486
Mikael Urankar (mikael) · 153.0_1,2
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Christoph Moench-Tegeder (cmt) · 153.0,2
www/firefox-esr: update to 153.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.0esr/releasenotes/

We're switching esr early, as the previous esr had build problems on
very recent versions of FreeBSD.
7bf37049ae
Christoph Moench-Tegeder (cmt) · 140.13.0,2
www/firefox-esr: update to 140.13.0 (rc1)

Release Notes (soon):
  firefox.com/en-US/firefox/140.13.0/releasenotes/
5828272177
Christoph Moench-Tegeder (cmt) · 140.12.0,2
devel/rust-cbindgen: update to 0.29.4

Release Notes:
  https://github.com/mozilla/cbindgen/releases/tag/0.29.4

Second attempt, pull in fixes for gecko esr ports to fix build with
newer rust-cbindgen as per https://github.com/mozilla/cbindgen/issues/1165
625b0ffb53
Christoph Moench-Tegeder (cmt) · 140.12.0,2
www/firefox-esr: update to 140.12.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.12.0/releasenotes/
4f8c417e08
Mikael Urankar (mikael) · 140.11.0_2,2
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Christoph Moench-Tegeder (cmt) · 140.11.0_1,2
wasi/gecko: fix wasi target triple for FreeBSD

Our wasi target triple on "older" LLVM versions (<22) deviates from
the respective LLVM's defaults, so we need to align ports with that.

PR:		295332
e84b0b8772
Charlie Li (vishwin) · 140.11.0_1,2
wasi/gecko: remove ${REINPLACE_CMD} for unconditional wasm32-wasip1

No longer needed after toolchain.configure was restructured for
gecko 151, with upstream commit backported to the ESR branches in
the linked PR

PR: 295332
5cb777e21f
Christoph Moench-Tegeder (cmt) · 140.11.0_1,2
www/firefox-esr: enable configure with llvm 22

from clang 22.1 the target formerly known as wasm32-wasi is now
named wasm32-wasip1

Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=2023597

PR:		295332
Reported by:	Chad Jacob Milios
cb7d79ec39
Christoph Moench-Tegeder (cmt) · 140.11.0_1,2
www/firefox-esr: update to 140.11.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.11.0/releasenotes/
4dbe9f081b
Christoph Moench-Tegeder (cmt) · 140.11.0,2
www/firefox-esr: update to 140.11.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.11.0/releasenotes/
c21bf07369
Christoph Moench-Tegeder (cmt) · 140.10.2_1,2
www/firefox{,-esr} mail/thunderbird{,-esr}: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:		294981
Submitted by:	Andre Albsmeier
c839877b69
Christoph Moench-Tegeder (cmt) · 140.10.2,2
www/firefox-esr: update to 140.10.2 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.10.2/releasenotes/
ba5672970e
Christoph Moench-Tegeder (cmt) · 140.10.1,2
www/firefox-esr: update to 140.10.1

Release Notes:
  https://www.firefox.com/en-US/firefox/140.10.1/releasenotes/
32580c6f1f
Mikael Urankar (mikael) · 140.10.0_1,2
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 140.10.0,2
www/firefox-esr: Fix build with rust 1.95.0

Import part of upstream patch [1] to fix the following error,
upstream PR at [2]:

error[E0599]: no method named `select` found for struct `Mask<T, N>` in the current scope
  --> third_party/rust/encoding_rs/src/x_user_defined.rs:23:56

[1] https://hg-edge.mozilla.org/mozilla-central/rev/ec1dd05fd578
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=2033279

PR:		294615
Approved by:	portmgr (build fix blanket)
7133a26d07
Christoph Moench-Tegeder (cmt) · 140.10.0,2
www/firefox-esr: update to 140.10.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.10.0/releasenotes/
2fee95540b
Christoph Moench-Tegeder (cmt) · 140.9.1,2
www/firefox-esr: update to 140.9.1

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.9.1/releasenotes/
d7f428f335
Mikael Urankar (mikael) · 140.9.0_1,2
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Charlie Li (vishwin) · 140.9.0,2
wasi: consistently use the wasm32-wasip1 triple

The WebAssembly community have reclaimed wasm32-wasi, without suffix,
for a future WASI 1.0 standard. The first version of WASI, 0.1, is
now wasm32-wasip1 in triple form, WASI 0.2 is wasm32-wasip2, etc.
Starting LLVM 22 the non-suffixed form is deprecated, aligning with
Rust and Go:

https://github.com/llvm/llvm-project/issues/165344
https://blog.rust-lang.org/2024/04/09/updates-to-rusts-wasi-targets/

The Mozilla build system's WASI checks always pass -Werror so
configure fails when the non-suffixed target/triple is passed using
LLVM 22:

Using wasi sysroot in /usr/local/share/wasi-sysroot
checking for the wasm C compiler... /usr/local/bin/clang22
checking whether the wasm C compiler can be used... yes
checking the wasm C compiler version... 22.1.0
checking the wasm C compiler works... yes
checking the wasm C compiler can find wasi headers... yes
checking the wasm C linker can find wasi libraries... yes
checking for the wasm C++ compiler... /usr/local/bin/clang++22
checking whether the wasm C++ compiler can be used... yes
checking the wasm C++ compiler version... 22.1.0
checking the wasm C++ compiler works... yes
checking the wasm C++ compiler can find wasi headers... yes
checking the wasm C++ linker can find wasi libraries... yes
checking for clock() in wasi sysroot... no
checking for emulated clock() in wasi sysroot...
DEBUG: Creating `/tmp/conftest0vk5p554.c` with content:
DEBUG: | #include <time.h>
DEBUG: | int
DEBUG: | main(void)
DEBUG: | {
DEBUG: | clock();
DEBUG: |   ;
DEBUG: |   return 0;
DEBUG: | }
DEBUG: Executing: `/usr/local/bin/clang22 --target=wasm32-wasi /tmp/conftest0vk5p554.c -Werror -D_WASI_EMULATED_PROCESS_CLOCKS -lwasi-emulated-process-clocks --sysroot=/usr/local/share/wasi-sysroot`
DEBUG: The command returned non-zero exit status 1.
DEBUG: Its error output was:
DEBUG: | clang: error: argument '--target=wasm32-wasi' is deprecated, use --target=wasm32-wasip1 instead [-Werror,-Wdeprecated]
ERROR: Can't find clock() in wasi sysroot.

Mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=2023597

Bump all WASI ports for the new triple. Adjust consumers accordingly
but do not bump, since non-suffixed and p1 are identical as a
transition measure.
7c5b2039a4
Christoph Moench-Tegeder (cmt) · 140.9.0,2
www/firefox-esr: update to 140.9.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.9.0/releasenotes/
2d8954169f
Charlie Li (vishwin) · 140.8.0_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
cec47c79e8
Christoph Moench-Tegeder (cmt) · 140.8.0,2
www/firefox-esr: update to 140.8.0 (rc2)

Release Notes:
  https://www.firefox.com/en-US/firefox/140.8.0/releasenotes/
c7b6600259
Christoph Moench-Tegeder (cmt) · 140.7.1,2
www/firefox-esr: update to 140.7.1 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.7.1/releasenotes/
8b3dd5e779
Jan Beich (jbeich) · 140.7.0_4,2
multimedia/libvpx: update 1.16.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.2..v1.16.0
Reported by:	Repology
939d8775e7
Mikael Urankar (mikael) · 140.7.0_3,2
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Christoph Moench-Tegeder (cmt) · 140.7.0_2,2
www/firefox-esr: make legacy firefox compatible with current ffmpeg

Import patch from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1962139

PR:				291974
Reported By:	Yusuf Yaman
e7234a76a5
Charlie Li (vishwin) · 140.7.0_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
c67a1a28d3
Christoph Moench-Tegeder (cmt) · 140.7.0,2
www/firefox-esr: update to 140.7.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.7.0/releasenotes/
23e2ed5f0c
Mikael Urankar (mikael) · 140.6.0_1,2
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Christoph Moench-Tegeder (cmt) · 140.6.0,2
www/firefox-esr: update to 140.6.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.6.0/releasenotes/
c552de3006
Charlie Li (vishwin) · 140.5.0_2,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
4f2fef9a0a
Mikael Urankar (mikael) · 140.5.0_1,2
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Christoph Moench-Tegeder (cmt) · 140.5.0,2
www/firefox-esr: update to 140.5.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.5.0/releasenotes/
295bd45577
Christoph Moench-Tegeder (cmt) · 140.5.0,1
www/firefox-esr: update to 140.5.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.5.0/releasenotes/
072cf91345
page 1 of 19older →oldest »