CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/firefox-esr153.5.1,2

Web browser based on the browser portion of Mozilla

Maintainer
gecko@FreeBSD.org
Packages
firefox-esr 153.5.1,2
Upstream
up to date
CPE
mozilla:firefox_esr from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (189)

VuXML entries whose affected range this version has left.

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

Commits (926)

Christoph Moench-Tegeder (cmt) · 140.4.0_1,1
www/firefox-esr: update to 140.4.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.4.0/releasenotes/
a67da4b289
Christoph Moench-Tegeder (cmt) · 140.4.0,1
www/firefox-esr: update to 140.4.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.4.0/releasenotes/
6c0572d73c
Mikael Urankar (mikael) · 140.3.1_1,1
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Christoph Moench-Tegeder (cmt) · 140.3.1,1
www/firefox-esr: update to 140.3.1 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.3.1/releasenotes/
a457b92ec3
Christoph Moench-Tegeder (cmt) · 140.3.0,1
www/firefox-esr: update to 140.3.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.3.0/releasenotes/
4fddd7270a
Mikael Urankar (mikael) · 140.2.0_2,1
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Charlie Li (vishwin) · 140.2.0_1,1
devel/wasi-libc: bump consumer PORTREVISIONs after update
c669bf1c7a
Christoph Moench-Tegeder (cmt) · 140.2.0,1
www/firefox-esr: update to 140.2 (rc1)

While here, chase WWW location move as advertised by upstream.

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/140.2.0/releasenotes/
aaf058292b
Christoph Moench-Tegeder (cmt) · 140.1.0_1,1
www/firefox{,-esr} mail/thunderbird{-esr}: fix runtime on arm64

reports of crashes on arm64 with aslr enabled.

PR:		271081
Reported by: markj@
c0f77d931c
Christoph Moench-Tegeder (cmt) · 140.1.0,1
www/firefox-esr: update to 140.1.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/140.1esr/releasenotes/
727214b387
Mikael Urankar (mikael) · 128.12.0_1,1
lang/rust: Bump revisions after 1.88.0

PR:		287766
f3f7e555b0
Christoph Moench-Tegeder (cmt) · 128.12.0,1
www/firefox-esr: update to 128.12.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.12.0/releasenotes/
c0bc83d7e1
Mikael Urankar (mikael) · 128.11.0_1,1
lang/rust: Bump revisions after 1.87.0

PR:		286829
3ed29b8185
Christoph Moench-Tegeder (cmt) · 128.11.0,1
www/firefox-esr: update to 128.11.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.11.0/releasenotes/
ae6b839d3c
Christoph Moench-Tegeder (cmt) · 128.10.1,1
www/firefox-esr: update to 128.10.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/128.10.1/releasenotes/
feb8172471
Christoph Moench-Tegeder (cmt) · 128.10.0,1
www/firefox-esr: update to 128.10.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.10.0/releasenotes/
6ad0acddcb
Jan Beich (jbeich) · 128.9.0_3,1
multimedia/libvpx: update 1.15.1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.0..v1.15.1
Reported by:	portscout
64f3a6bf7e
Mikael Urankar (mikael) · 128.9.0_2,1
lang/rust: Bump revisions after 1.86.0

PR:		285840
2a5976aebe
Christoph Moench-Tegeder (cmt) · 128.9.0_1,1
www/firefox-esr: update to 128.9.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.9.0/releasenotes/
359023517d
Christoph Moench-Tegeder (cmt) · 128.9.0,1
www/firefox-esr: update to 128.9.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.9.0/releasenotes/
5537cc116c
Christoph Moench-Tegeder (cmt) · 128.8.0,1
www/firefox-esr: update to 128.8.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.8.0/releasenotes/
ac709e30a2
Mikael Urankar (mikael) · 128.7.0_3,1
lang/rust: Bump revisions after 1.85.0

PR:		284884
cf7c4b037d
Daniel Engberg (diizzy) · 128.7.0_2,1
*/*: Bump consumers of devel/icu

...to avoid library mismatches
ff33dd4700
Piotr Kubaj (pkubaj) · 128.7.0_1,1
www/firefox-esr: enable wasi on powerpc64
282057dc98
Christoph Moench-Tegeder (cmt) · 128.7.0,1
www/firefox-esr: update to 128.7.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.7.0/releasenotes/
4c4e2ed103
Mikael Urankar (mikael) · 128.6.0_1,1
lang/rust: Bump revisions after 1.84.0

PR:		283962
fccaa1b326
Christoph Moench-Tegeder (cmt) · 128.6.0,1
www/firefox-esr: update to 128.6.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.6.0/releasenotes/
70b2f5309e
Christoph Moench-Tegeder (cmt) · 128.5.2,1
www/firefox-esr: update to 128.5.2

Releae Notes:
  https://www.mozilla.org/en-US/firefox/128.5.2/releasenotes/
94f4d242ac
Mikael Urankar (mikael) · 128.5.1_1,1
lang/rust: Bump revisions after 1.83.0

PR:		283000
1d1fd15a3e
Christoph Moench-Tegeder (cmt) · 128.5.1,1
www/firefox-esr: update to 128.5.1 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.5.1/releasenotes/
c8853d247a
Vladimir Druzenko (vvd) · 128.5.0,1
Reapply "devel/wasi-libc: chase missed _DEPENDS line changes after flavourisation"

Incorrect branch.

This reverts commit 85b72a5454c5bdcc850e153b66fdaa4e83e84f3d.
d36b71b2d0
Vladimir Druzenko (vvd) · 128.5.0,1
Revert "devel/wasi-libc: chase missed _DEPENDS line changes after flavourisation"

Flavorization of the devel/wasi-libc was not MFH.

This reverts commit 0c538aad8a8708a074157b767459360aa09398f0.
85b72a5454
Christoph Moench-Tegeder (cmt) · 128.5.0,1
www/firefox-esr: update to 128.5.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.5.0/releasenotes/
e3d4a0db5f
Mikael Urankar (mikael) · 128.4.0_2,1
lang/rust: Bump revisions after 1.82.0

PR:		282516
ca048c2884
Jan Beich (jbeich) · 128.4.0_1,1
multimedia/libvpx: update 1.15.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.14.1..v1.15.0
Reported by:	Repology
888cea7dee
Christoph Moench-Tegeder (cmt) · 128.4.0,1
www/firefox-esr: update to 128.4.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.4.0/releasenotes/
c708254470
Charlie Li (vishwin) · 128.3.1_1,1
devel/wasi-libc: chase missed _DEPENDS line changes after flavourisation
1c5ebef22a
Charlie Li (vishwin) · 128.3.1_1,1
wasi: update to latest commit past sdk-22

devel/wasi-libc is now flavourised per supported LLVM version. Each
flavour includes/copies the corresponding clang's stdarg.h and
stddef.h instead of simply using the latest clang release.

Technically upstream dropped support for LLVM < 18, but the commit
doing so admittedly operated under an uncertain assumption. LLVM
17 is still supported in these ports for the benefit of Rust and
gecko@ ports, which specify LLVM 17 minimum, and to facilitate LTO
with that version. LLVM 19 is also supported in this version, with
the corresponding ports to be committed separately.

Bump PORTREVISION of consumers
84b600fb9f
Christoph Moench-Tegeder (cmt) · 128.3.1,1
www/firefox-esr: update to 128.3.1 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.3.1/releasenotes/
de44c18a31
Christoph Moench-Tegeder (cmt) · 128.3.0_1,1
www/firefox www/firefox-esr mail/thunderbird: set wxneeded

people keep twiddling the knobs and see fallot from
setting kern.elf64.allow_wx

PR:		272767
df3c96e94d
Christoph Moench-Tegeder (cmt) · 128.3.0,1
www/firefox-esr: update to 128.3.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/128.3.0/releasenotes/
2b69e447c2
Christoph Moench-Tegeder (cmt) · 128.2.0_2,1
www/firefox{,-esr} mail/thunderbird: pet CPUTYPE builds

some combinations of custom CPUTYPE and compiler require special
linker/compiler flags - try to chase this.

PR:		277021
PR:		281404
Submitted by:	jkim@ (based on)
c67ddb28c6
Mikael Urankar (mikael) · 128.2.0_1,1
lang/rust: Bump revisions after 1.81.0

PR:		281300
89ab81d0e2
Christoph Moench-Tegeder (cmt) · 128.2.0,1
www/firefox-esr: update to 128.2.0

Release Notes:
  https://www.mozilla.org/en-US/firefox/128.2.0/releasenotes/
191df03872
Christoph Moench-Tegeder (cmt) · 115.15.0,1
www/firefox-esr: update to 115.15.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.15.0/releasenotes/
9b30aefa6c
Mikael Urankar (mikael) · 115.14.0_2,1
lang/rust: Bump revisions after 1.80.1

PR:		280490
7a55f95425
Christoph Moench-Tegeder (cmt) · 115.14.0_1,1
www/firefox-esr: update to 115.14.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.14.0/releasenotes/
2b37765853
Christoph Moench-Tegeder (cmt) · 115.14.0,1
www/firefox-esr: update to 115.14.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.14.0/releasenotes/
b5f1716bc3
Christoph Moench-Tegeder (cmt) · 115.13.0_1,1
www/firefox-esr: update to 115.13.0 (rc3)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.13.0/releasenotes/
5583fc82bd
Christoph Moench-Tegeder (cmt) · 115.13.0,1
www/firefox-esr: update to 115.13.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.13.0/releasenotes/
cab97ab644