CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/firefox-esr153.5.1,2

Web browser based on the browser portion of Mozilla

Maintainer
gecko@FreeBSD.org
Packages
firefox-esr 153.5.1,2
Upstream
up to date
CPE
mozilla:firefox_esr from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (189)

VuXML entries whose affected range this version has left.

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

Commits (926)

Mikael Urankar (mikael) · 115.12.0_1,1
lang/rust: Bump revisions after 1.79.0

PR:		279707
21476ca8a9
Christoph Moench-Tegeder (cmt) · 115.12.0,1
www/firefox-esr: update to 115.12.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.12.0/releasenotes/
42178d0ef5
Christoph Moench-Tegeder (cmt) · 115.11.0_1,1
www/firefox-esr: fix build with clang18

Submitted by:	jkim
PR:				278989
3c6cc9a950
Mikael Urankar (mikael) · 115.11.0_1,1
lang/rust: Bump revisions after 1.78.0

PR:		278834
2322b66100
Mikael Urankar (mikael) · 115.11.0,1
www/firefox-esr: Fix build with rust 1.78.0

PR:		278834
Approved by:	portmgr (build fix blanket)
cc6466e821
Christoph Moench-Tegeder (cmt) · 115.11.0,1
www/firefox-esr: update to 115.11.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.11.0/releasenotes/
97418a2774
Christoph Moench-Tegeder (cmt) · 115.10.0,1
www/firefox-esr: fix linking with libc++18

copied from www/firefox

PR:		276746
16543701d7
Christoph Moench-Tegeder (cmt) · 115.10.0,1
www/firefox-esr: fix build with libc++18

Reported By: cy (in thunderbird, but it's the same here)
80332146fe
Christoph Moench-Tegeder (cmt) · 115.10.0,1
www/firefox-esr: fix rust warnings "variable does not need to be mutable"

This led to build failure in thunderbird on some toolchains,
I'd expect the same here, so fix it.
https://bugzilla.mozilla.org/show_bug.cgi?id=1841919
ea1caa7f0b
Christoph Moench-Tegeder (cmt) · 115.10.0,1
www/firefox-esr: update to 115.10.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.10.0/releasenotes/
e28a98569c
Mikael Urankar (mikael) · 115.9.1_1,1
lang/rust: Bump revisions after 1.77.0

PR:		277786
d632fbe55e
Christoph Moench-Tegeder (cmt) · 115.9.1,1
www/firefox-esr: update to 115.9.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/115.9.1esr/releasenotes/
67d8de2ee3
Christoph Moench-Tegeder (cmt) · 115.9.0_1,1
www/firefox-esr: update to 115.9.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/
21a2c9ea49
Christoph Moench-Tegeder (cmt) · 115.9.0,1
www/firefox-esr: update to 115.9.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/
afeeaa2f6d
Christoph Moench-Tegeder (cmt) · 115.8.0_1,1
www/firefox-esr: fix process display in about::support

same patch as in www/firefox

PR:				277159
Reported By:	Lars Herschke
23fdb13510
Mikael Urankar (mikael) · 115.8.0_1,1
lang/rust: Bump revisions after 1.76.0

PR:		276920
7f5a7b0e52
Christoph Moench-Tegeder (cmt) · 115.8.0,1
www/firefox-esr: update to 115.8.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.8.0/releasenotes/
2c1be19355
Jan Beich (jbeich) · 115.7.0_1,1
multimedia/libvpx: update 1.14.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.13.1..v1.14.0
Reported by:	portscout
589aaaeb09
Christoph Moench-Tegeder (cmt) · 115.7.0,1
www/firefox-esr: update to 115.7.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.7.0/releasenotes/
2433d55d7c
Charlie Li (vishwin) · 115.6.0_2,1
devel/wasi-libc: update to sdk-21

Bump PORTREVISION of consumers
eabba650ca
Mikael Urankar (mikael) · 115.6.0_1,1
lang/rust: Bump revisions after 1.75.0

PR:		276033
109c3d4629
Muhammad Moinur Rahman (bofh) · 115.6.0,1
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
bbab7f59e9
Christoph Moench-Tegeder (cmt) · 115.6.0,1
www/firefox-esr: update to 115.6.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.6.0/releasenotes/
d701f160f1
Mikael Urankar (mikael) · 115.5.0_2,1
lang/rust: Bump revisions after 1.74.1

PR:		275243
b2afd89fb2
Charlie Li (vishwin) · 115.5.0_1,1
wasi: update libc to sdk-20 and modularise LLVM bits

wasi-libcxx and wasi-compiler-rt now meta ports (similar to u-boot);
the build process is the same for each LLVM version so child ports
are minimal. Minimum supported LLVM version is 12, thus its
corresponding child ports are resurrected and LLVM 11 child ports
are removed.

Since all supported LLVM versions are made available at once, remove
restriction in bsd.gecko.mk and switch to USES=llvm throughout. LTO
on gecko ports should now work with later LLVM versions so long as
${DEFAULT_VERSIONS} is set properly and matches the LLVM used in
rust (if not using the PORT_LLVM option).

Reviewed by: brooks (LLVM ports interactions)
Tested by: Eric Camachat <eric[at]camachat[dot]org>
Approved by: maintainer timeout (gecko@ portion, 2+ weeks)
PR: 274896
Differential Revision: https://reviews.freebsd.org/D40098
e38b3857f2
Jan Beich (jbeich) · 115.5.0_1,1
devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy
e55b80195e
Piotr Kubaj (pkubaj) · 115.5.0,1
www/firefox-esr: fix build on powerpc64*

In file included from Unified_cpp_dom_media_flac0.cpp:2:
/wrkdirs/usr/ports/www/firefox-esr/work/firefox-115.4.0/dom/media/flac/FlacDecoder.cpp:21:10: error: value of type 'media::DecodeSupportSet' (aka 'EnumSet<mozilla::media::DecodeSupport, unsigned long>') is not contextually convertible to 'bool'
         platform->SupportsMimeType("audio/flac"_ns);
         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/wrkdirs/usr/ports/www/firefox-esr/work/firefox-115.4.0/dom/media/flac/FlacDecoder.cpp:20:44: error: invalid operands to binary expression ('StripAtomic<mozilla::RelaxedAtomicBool>' (aka 'bool') and 'media::DecodeSupportSet' (aka 'EnumSet<mozilla::media::DecodeSupport, unsigned long>'))
  return StaticPrefs::media_flac_enabled() &&
         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^
2 errors generated.
94d830e457
Christoph Moench-Tegeder (cmt) · 115.5.0,1
www/firefox-esr: update to 115.5.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.5.0/releasenotes/
70beec2f16
Mikael Urankar (mikael) · 115.4.0_1,1
lang/rust: Bump revisions after 1.73.0

PR:		274499
dd10dc88a7
Christoph Moench-Tegeder (cmt) · 115.4.0,1
www/firefox-esr: update to 115.4.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.4.0/releasenotes/
4e5228a093
Jan Beich (jbeich) · 115.3.1_1,1
multimedia/dav1d: update to 1.3.0

Changes:	https://code.videolan.org/videolan/dav1d/-/tags/1.3.0
Reported by:	Repology
4fb0230f7f
Christoph Moench-Tegeder (cmt) · 115.3.1,1
www/firefox-esr: update to 115.3.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/115.3.1/releasenotes/
4c905ade22
Christoph Moench-Tegeder (cmt) · 115.3.0,1
www/firefox-esr: update to 115.3.0

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/115.3.0/releasenotes/
12434f9d5d
Christoph Moench-Tegeder (cmt) · 102.15.1,1
www/firefox-esr: update to 102.15.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/102.15.1/releasenotes/
e1ba81252a
Mikael Urankar (mikael) · 102.15.0_2,1
lang/rust: Bump revisions after 1.72.0

PR:		273331
aba8da2be1
Christoph Moench-Tegeder (cmt) · 102.15.0_1,1
www/firefox-esr: update to 102.15.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/102.15.0/releasenotes/
53a66ee735
Christoph Moench-Tegeder (cmt) · 102.15.0,1
www/firefox-esr: update to 102.15.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/102.15.0/releasenotes/
a6bd019c65
Daniel Engberg (diizzy) · 102.14.0_1,1
*/*: Bump jpeg-turbo users treewide

New major version 3.0.0
664a2fa1e5
Christoph Moench-Tegeder (cmt) · 102.14.0,1
www/firefox-esr: update to 102.14.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/102.14.0/releasenotes/
0be9f29a0c
Mikael Urankar (mikael) · 102.13.0_1,1
lang/rust: Bump revisions after 1.71.0

PR:		272449
cdf28617b4
Christoph Moench-Tegeder (cmt) · 102.13.0,1
www/firefox-esr: update to 102.13.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/102.13.0/releasenotes/
2b53f3fc50
Mikael Urankar (mikael) · 102.12.0_1,1
lang/rust: Bump revisions after 1.70.0

PR:		271797
e1d1045bc7
Mikael Urankar (mikael) · 102.12.0,1
www/firefox-esr: Fix build with rust 1.70.0

Import an upstream patch to fix a build failure with rust 1.70.0.

Obtained from: https://github.com/mozilla/mp4parse-rust/pull/376

PR:		271797
0aa4d0db89
Christoph Moench-Tegeder (cmt) · 102.12.0,1
www/firefox-esr: update to 102.12.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/102.12.0/releasenotes/
f0afb44555
Jan Beich (jbeich) · 102.11.0_1,1
www/firefox: drop reference to media.cubeb.backend=pulse (non-Rust)

https://bugzilla.mozilla.org/show_bug.cgi?id=1611658
bccc8a1c28
Jan Beich (jbeich) · 102.11.0_1,1
www/firefox: clarify about:networking non-support

PR:		270674
01998e811d
Jan Beich (jbeich) · 102.11.0_1,1
www/firefox-esr: supports Gamepad API after 0f60b8e1e225
b42def62d9
Christoph Moench-Tegeder (cmt) · 102.11.0_1,1
www/firefox-esr: update to 102.11.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/102.11.0/releasenotes/
bb033ff0e2
Christoph Moench-Tegeder (cmt) · 102.11.0,1
www/firefox-esr: update to 102.11.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/102.11.0/releasenotes/
edd3ef964e
Christian Weisgerber (naddy) · 102.10.0_3,1
audio/opus: bump consumers after update to 1.4
feb1fa34f5