CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/firefox-esr153.5.1,2

Web browser based on the browser portion of Mozilla

Maintainer
gecko@FreeBSD.org
Packages
firefox-esr 153.5.1,2
Upstream
up to date
CPE
mozilla:firefox_esr from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (189)

VuXML entries whose affected range this version has left.

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

Commits (926)

Trevor Johnson (trevor) · 0.8_2
Add comments explaining the installation process.
075bf4ee3d
Trevor Johnson (trevor) · 0.8_2
Don't install unnecessary MacOS/Windows-related material.
0512440803
Joe Marcus Clarke (marcus) · 0.8_2
* Fix broken installation (grrr..this fake thing is more trouble than it's   worth) * Fix up some path issues in the Makefile * Minor fix to plug-in installation * Restore Franz's fix for the LD_LIBRARY_PATH PREFIX problem * Bump PORTREVISION
15e0c52fd1
Joe Marcus Clarke (marcus) · 0.8_1
Backuo the previous commit before anyone notices.  I have a big patch coming that will fix this and some other things.  No need to bump PORTREVISION twice.
fb900956d3
Trevor Johnson (trevor) · 0.8_2
Fix accidental change of %%PREFIX%% to %PREFIX%% in patch-build_unix_run-mozilla.sh (new PORTREVISION).

Noticed by:	Franz Klammer of webonaut.com
Pointy hat to:	moi
86b505c335
Joe Marcus Clarke (marcus) · 0.8_1
Fix a bug where @PREFIX@ was being substituted with the fake package prefix paths.
4fb396918c
Joe Marcus Clarke (marcus) · 0.8
* Import the JPI_LIST changes from www/mozilla so that multiple JPI versions   will be tried.  There is one addition, though.  JPI_LIST is now   overrideable. [1] * Remove the bit about Perl version from pkg-message.  We support all versions   of Perl now.

Requested by:	ale
5b6aacf246
Joe Marcus Clarke (marcus) · 0.8
Add Firefox after a repo copy from mozilla-firebird.  Firefox is the next release of the Firebird web browser with a new name to avoid conflicts with the Firebird database.  This is version 0.8.

http://www.mozilla.org/products/firefox/releases/

* Update to 0.8 and change name to firefox [1]
* Make PLIST from a fake installation [1]
* Restore original credit and portname in Makefile [1]
* Optionally install headers and IDL files [2]
* Use PERL instead of REINPLACE_CMD in a few places [1]
* Use OPTIONS
* Enable the Inspector extension
* Fix another possible esound related problem
* Enable basic optimizations if WITH_DEBUG is not specified

PR:		62631 [2]
Submitted by:	trevor [1] [2]
6593022e89
Joe Marcus Clarke (marcus) · 0.7_3
* Fix a bug where Firebird would lock up after typing any text.  This had to   do with esound being installed, but not being used (e.g. when not running   under the GNOME Desktop).  What happens now is sound support is disabled by   default.  If you wish to enable Type Ahead Find sound support, edit your   prefs.js file, and add:

user_pref("accessibility.typeaheadfind.enablesound", true);

* Make portlint happy by not including anything after bsd.port.post.mk
* Clean up the pkg-message a bit to reflect reality with respect to Perl

Thanks to casaveli on BSDForums for finding it was esound causing the lock up
as well as testing the patch mentioned above.
61164983e3
Joe Marcus Clarke (marcus) · 0.7_2
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)
73f7c91b5d
Marcel Moolenaar (marcel) · 0.7_1
Port ia64 support from www/mozilla.
fb325c73d6
Trevor Johnson (trevor) · 0.7_1
Use the SORT macro defined in bsd.port.mk.
fdad5368da
Peter Wemm (peter) · 0.7_1
Port to amd64 (note: needs ld-elf.so.1 bugfix to actually work)

I've taken a chance and split the sparc64 and alpha mega-diffs up because
sparc64 patched the result of alpha's patches, and amd64 needed to do the
same again - but it was sorted lexically before alpha/sparc64.  I've
grouped the xptcall patches together since they are standalone and split
up and merged the other infrastructure jumbo-patches.

I also attempted to sync up the nspr vs firebird diffs for sparc64 and
alpha because they disagreed.  HOWEVER... While this port 'depends'
on the nspr port, it doesn't actually *use* it.  It should probably
be removed from the LIB_DEPENDS list.

Note that the amd64 xptcall code came from SuSE via the mozilla bugzilla
database.
7059589bd6
Joe Marcus Clarke (marcus) · 0.7_1
Don't build these ports on amd64.

Approved by:	portmgr (implicit)
4889bf65b1
Joe Marcus Clarke (marcus) · 0.7_1
Add a new patch-Double.cpp that fixes the recent core dumps during post-build on Sparc64.

Submitted by:	tmm (bless that man)
cad4a555e6
Joe Marcus Clarke (marcus) · 0.7_1
* Update the extensions list with a modern mozconfig.in * Add rich text editing (aka midas) support
8da2ffb9c0
Trevor Johnson (trevor) · 0.7
Correct the packing list.
0c4a4c6924
Trevor Johnson (trevor) · 0.7
Update to 0.7 with patch-config_preprocess.pl updated by obraun. De-support GTK+ 1.2 (requested by marcus).  Trim COMMENT.
7feccd9870
Joe Marcus Clarke (marcus) · 0.6.1_1
Mark as IGNORE on -STABLE Alpha.
7dddab53c3
Joe Marcus Clarke (marcus) · 0.6.1_1
Use ${PTHREAD_LIBS} instead of hardcoded -pthread and -lc_r in a few places. This should help the KSE and libthr people use these applications (plus it lets them build on -CURRENT).
23dad2b555
Joe Marcus Clarke (marcus) · 0.6.1_1
Add back the PKGNAMEPREFIX was the accidentally removed in my previous commit.
c962223045
Joe Marcus Clarke (marcus) · 0.6.1_1
Change the MASTER_SITE back to the official Mozilla FTP servers.  Note, people reinstalling this port will have to do a make distclean first, or simply ignore the MD5 checksum.
718fe1846c
Alexander Kabaev (kan) · 0.6.1_1
Restore the patch to stop mozilla from crashing on some russian sites.
55fc6b08a7
Joe Marcus Clarke (marcus) · 0.6.1_1
Fix the PLIST link.

PR:		55310
Submitted by:	Morten Rodal <morten@rodal.no>
Pointy hat to:	me
a4c693ac35
Joe Marcus Clarke (marcus) · 0.6.1_1
Fix the GTK+-1.2 plist.  To do this, we create one plist for GTK1 and one for GTK2.  This is easier to maintain using the cons-plist target.

Reported by:	kris via bento
1b4dbed476
Joe Marcus Clarke (marcus) · 0.6.1
Update to 0.6.1.  This is mainly a bug fix release according to the release notes at http://www.mozilla.org/projects/firebird/release-notes.html, but it went from being based on Mozilla 1.4b to 1.5a.

Note, the master site may be temporary.  The source tarball at
${MASTER_SITE_MOZILLA} was missing some key bits that prevented compilation.
84361df012
Joe Marcus Clarke (marcus) · 0.6
Create a static plist file to fix the package building problem with the new install mk code.  However, keep Alan's plist generating code around since it's cool, and it helps maintainers quickly generate a new plist.

PR:		54795
		54799
f37483ee74
Joe Marcus Clarke (marcus) · 0.6
Try my hand at removing the Perl 5.6.1 dependency.  This port now builds and seems to work just fine out-of-the-box on -STABLE with the built-in Perl 5.00503.
f70740038e
Joe Marcus Clarke (marcus) · 0.6
Use ${PERL5} to properly locate perl.

Submitted by:	perky
337ddf44a0
Joe Marcus Clarke (marcus) · 0.6
Add mozilla-firebird after a repo move from phoenix.

Mozilla Firebird is the browser reborn from the ashes of the Phoenix.

* Update to 0.6 [1]
* Add optional GTK+-2 support [2]
* Add [untested] Sparc64 support [3]
* Add [untested] Alpha support [4]
* Do not compile with -O2 by default.  Instead specify -DWITH_OPTIMIZED_CFLAGS
  to get extra optimizations
* Link the Java Plug-in again

Submitted by:	Stijn Hoop <stijn@win.tue.nl> [1]
		Christopher Nehren <apeiron@comcast.net> [2] (based on)
		tmm and kris [3]
		Bernd Walter <ticso@cicely.de> [4]
Minor fixes by:	obraun
ed564c5560
Alan Eldridge (alane) · 0.5_4
transfer to gnome@
c54cf098a4
Joe Marcus Clarke (marcus) · 0.5_4
Remove USE_GNOMENG.
b33eaf3276
Ade Lovett (ade) · 0.5_4
Clear moonlight beckons. Requiem mors pacem pkg-comment, And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.
7e52725f2a
Eric Anholt (anholt) · 0.5_4
Remove the renaming of Xft headers and library from the Xft (Xft2) port. Remove installing of Xft1 from XFree86-4-libraries, and add dependencies to the Xft port by all the ports that use it along with whatever patches are necessary.

Approved by:	portmgr (kris), marcus
38805e871a
Alan Eldridge (alane) · 0.5_4
remove ignore setting based on lfp fonts
66ddabe840
Alan Eldridge (alane) · 0.5_4
add missing dependency
0e9c05b83d
Alan Eldridge (alane) · 0.5_4
Patch by Greg Rumple & JMC to hopefully fix end-of-download crash. I'll submit this fix back to the Mozilla team, since it will affect Mozilla 1.3a as well.

Approved by:	kris before departure (one of these days this update will end)
05c21b9963
Alan Eldridge (alane) · 0.5_3
Fix really messed up BROKEN= blocks that happened with 0.5.

Approved by:	kris (all port of moving to 0.5)
32861cab29
Alan Eldridge (alane) · 0.5_3
Put back link to java now that fonts have been identified as cause of crashes or start failures.

Reviewed by:j
Approved by:	kris (last phase of phoenix 0.5 update)
3eaf8044e2
Alan Eldridge (alane) · 0.5_2
The problem wasn't the patch, it was third party font ports. The patch has been restored, extra knobs have added, and extensive diagnostics have been added. PLEASE upgrade to this version.

Approved by:	kris (part of phoenix upgrade)
ce7094e451
Alan Eldridge (alane) · 0.5_1
Finally, a release Phoenix that works and does not crash all the time.

Approved by:	kris (a long time ago)
fdfcd30ddc
Alan Eldridge (alane) · 0.4_10
Backed down to 0.4_10 because 0.5 was borked.
763b461efc
Alan Eldridge (alane) · 0.5.20021209
Update Phoenix to 0.5, the last release named Phoenix. Fixes a lot a bugs, adds some features, there is at least one crasher I've hit so far but I don't know if it is anomoly or not yet.

Approved by:	kris
052c9b9ee5
Alan Eldridge (alane) · 0.4_9
1. Add a link to support the java plugin. Thanks to Khairil Yusof <kaeru@pd.jaring.my> for this tip.

2. Build the plist automagically in a post-install target.

Approved by:	kris
5526661e03
Alan Eldridge (alane) · 0.4_8
Updated PORTREVISION to 8. Added patch from mozilla-devel to fix -CURRENT problem with accessing network sites.

Submitted by:	Hajimu UMEMOTO <ume@mahoroba.org>
Approved by:	kris
ecc5f6b3f2
Alan Eldridge (alane) · 0.4_7
Update maintainer utility for making distfiles from cvs checkouts. No significance to users of this port, unless you are making your own distfiles.
d582a2294c
Alan Eldridge (alane) · 0.4_7
* PORTREVISION ==> 7. * Allow building under -CURRENT. * Changes in LDFLAGS and CPPFLAGS passed to configure. * Removed stale javascript dirs (venkman) from plist. * Updated mkdistfile to remove more unneeded dirs. Used to make a   new distfile from a cvs checkout. For maintainers only, really. * Disable bi-directional text in config. * Remove dupes from mozconfig.in.

The problem with the martian file selection dialogs is gone. I am not sure of
the cause, but apparently it had to do with either which version of the NSPR
libs phoenix runs with or the link order of libraries. I don't care, as long as
it doesn't do it, 'cause I do not read Martian.

Should be running against its own set of NSPR libs now. (Note: you can't just
use ldd to check this since the startup scripts play all kinds of fun games.)

You are advised to remove $HOME/.phoenix before running the new version.
c7685d56b9
Alan Eldridge (alane) · 0.4_6
Accidentally forgot a dependency on libiconv.
0c860fb85c
Alan Eldridge (alane) · 0.4_6
1. PORTREVISION ==> 6. 2. Remove components (4) of javascript debugger from plist.
56fd26fcea
Alan Eldridge (alane) · 0.4_5
1. Broken for system perl. Sorry but we don't know yet how to make it work. 2. Disable javascript debugger (like we're at a stage where we want to do 	that .... hahaha). 3. Remove dupes from files/mozconfig.in. 4. Whack the share and include dirs in a post-install target (I know it's 	slower that way, but I'm gonna let Trevor work out how to do it 	otherwise, since he so kindly volunteered.) 5. We

Thanks to Adam Weinberger for his valuable info about perl versions,
and his continuing research. Thanks to everybody else who's tested, even
if y'all did report the same thing. 8-) Finally, thanks to Warren Zevon,
whose song My ****'s ****ed Up certainly applies to the early stages
of this port.
c842552dbf