CVE and update status of the FreeBSD ports tree4,805 unaddressed CVEs in 625 portsAll times are CET

Port details

www/firefox158.0.1,2

Web browser based on the browser portion of Mozilla

Maintainer
gecko@FreeBSD.org
Packages
firefox 158.0.1,2
Upstream
up to date
CPE
mozilla:firefox from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (361)

VuXML entries whose affected range this version has left.

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

CVE-2012-1956, CVE-2012-1970, CVE-2012-1971, CVE-2012-1972, CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976, CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960, CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964, CVE-2012-3965, CVE-2012-3966, CVE-2012-3967, CVE-2012-3968, CVE-2012-3969, CVE-2012-3970, CVE-2012-3971, CVE-2012-3972, CVE-2012-3973, CVE-2012-3974, CVE-2012-3975, CVE-2012-3976, CVE-2012-3978, CVE-2012-3979, CVE-2012-3980

CVE-2011-1187, CVE-2011-3062, CVE-2012-0467, CVE-2012-0468, CVE-2012-0469, CVE-2012-0470, CVE-2012-0471, CVE-2012-0472, CVE-2012-0473, CVE-2012-0474, CVE-2012-0475, CVE-2012-0477, CVE-2012-0478, CVE-2012-0479, CVE-2012-1126, CVE-2012-1127, CVE-2012-1128, CVE-2012-1129, CVE-2012-1130, CVE-2012-1131, CVE-2012-1132, CVE-2012-1133, CVE-2012-1134, CVE-2012-1135, CVE-2012-1136, CVE-2012-1137, CVE-2012-1138, CVE-2012-1139, CVE-2012-1140, CVE-2012-1141, CVE-2012-1142, CVE-2012-1143, CVE-2012-1144

Commits (1,360)

Christoph Moench-Tegeder (cmt) · 159.0,2
www/firefox: update to 159.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/159.0/releasenotes/
0e2b6a53f8
Piotr Kubaj (pkubaj) · 158.0.1,2
www/firefox mail/thunderbird: fix build on powerpc64le

The wasm2c bundled with 158 forces SIMD loads with an asm "f" constraint on
anything that isn't x86_64, aarch64, riscv or s390x. On PowerPC that's a scalar
FP register, so clang can't put a v128 there. Take the upstream wabt fix
(d77389b8e748) that uses "v".
a740105ca7
Christoph Moench-Tegeder (cmt) · 158.0.1,2
www/firefox: update to 158.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/158.0.1/releasenotes/
4fb33f1da0
Piotr Kubaj (pkubaj) · 158.0_1,2
Mk/bsd.gecko.mk, lang/spidermonkey128: use RUST_LIB_BACKTRACE on powerpc64le

rust.mk only exports RUST_BACKTRACE, so RUST_LIB_BACKTRACE=0 from the
environment is enough and the per-port patches can go. spidermonkey128
is hit by the same cargo crash.
169e4aece1
Mikael Urankar (mikael) · 158.0_1,2
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Christoph Moench-Tegeder (cmt) · 158.0,2
mail/thunderbird www/firefox: fix build with option DBUS off

PR:			299070
Submitted by:	vvd
a7936040cc
Christoph Moench-Tegeder (cmt) · 158.0,2
www/firefox: update to 158.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/158.0/releasenotes/

Includes fix for DEBUG-enabled builds

PR:			298373
Submitted By:	 Bartosz
648e891ea0
Christoph Moench-Tegeder (cmt) · 157.0.1,2
www/freifox: update to 157.0.1

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/157.0.1/releasenotes/
f6726c254f
Piotr Kubaj (pkubaj) · 157.0,2
mail/thunderbird*, www/firefox*: fix build on powerpc64*

1. On powerpc64 WASI seems to be broken.
2. On powerpc64le without recent LLVM patch, RUST_BACKTRACE is broken.
472e40ba3c
Christoph Moench-Tegeder (cmt) · 157.0,2
www/firefox{,-esr}: collect BINDGEN_FLAGS after 6e755229254f

This moved to bsd.gecko.mk in 6e755229254f
436d990f0b
Christoph Moench-Tegeder (cmt) · 157.0,2
www/firefox: update to 157.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/157.0/releasenotes/
2408a2a2d2
Christoph Moench-Tegeder (cmt) · 156.0.1,2
www/firefox: update to 156.0.1 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/156.0.1/releasenotes/
364065851f
Christoph Moench-Tegeder (cmt) · 156.0,2
www/firefox: update to 156.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/156.0/releasenotes/
fe9b504c67
Mikael Urankar (mikael) · 155.0.1_1,2
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Christoph Moench-Tegeder (cmt) · 155.0.1,2
www/firefox: update to 155.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/155.0.1/releasenotes/
32eca12d35
Charlie Li (vishwin) · 155.0_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
b25213c075
Christoph Moench-Tegeder (cmt) · 155.0,2
www/firefox: update to 155.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/155.0/releasenotes/
a57fad23e9
Christoph Moench-Tegeder (cmt) · 154.0.1_1,2
www/firefox: fix typo in Makefile

Fixup commit 0074ee3b2ea7d87a02a6a3c345ddb0e634367675
38be41f50d
Christoph Moench-Tegeder (cmt) · 154.0.1,2
www/firefox: a shot at enabling WebSerial

PR:					297874
Submitted by:		pcc
0074ee3b2e
Christoph Moench-Tegeder (cmt) · 154.0.1,2
www/firefox: update to 154.0.1 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/154.0.1/releasenotes/
362e7c4cd6
Christoph Moench-Tegeder (cmt) · 154.0,2
www/firefox: update to 154.0 (rc1)

Relesae Notes (soon):
  https://www.firefox.com/en-US/firefox/154.0/releasenotes/
edd2352278
Christoph Moench-Tegeder (cmt) · 153.0.4,2
www/firefox: update tp 153.0.4 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.0.4/releasenotes/
bbde112fa4
Christoph Moench-Tegeder (cmt) · 153.0.3,2
gecko: declare NOT_FOR_ARCHS=i386

The building and linking of the rust parts on x86 needs a larger
address space than a 32bit platform can provide (at most 4GB).
The gecko ports have been failing for quite a while on the official
builders with an "rustc-LLVM ERROR: out of memory" message, e.g.
https://pkg-status.freebsd.org/beefy18/data/144i386-default/6f1fe399c86f/logs/thunderbird-153.0.2.log

We can as well stop trying to save the CPU cycles leading up to
this error.
368d875486
Christoph Moench-Tegeder (cmt) · 153.0.3,2
www/firefox: update to 153.0.3 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.0.3/releasenotes/
7db6617307
Christoph Moench-Tegeder (cmt) · 153.0.1_2,2
www/firefox: update to 153.0.1 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.0.1/releasenotes/
7042c53fbf
Mikael Urankar (mikael) · 153.0_2,2
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Christoph Moench-Tegeder (cmt) · 153.0_1,2
www/firefox: add libm to opus linker flags

some combinations of custom CPUTYPE and compiler require special
linker/compiler flags - try to chase this.

PR:		296825
Reported by:	Daniel Toschläger
81447da5d1
Christoph Moench-Tegeder (cmt) · 153.0,2
www/firefox: update to 153.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/153.0/releasenotes/
a7ebcb1cac
Christoph Moench-Tegeder (cmt) · 152.0.6,2
www/firefox: update to 152.0.6 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/152.0.6/releasenotes/
0673b1d8ce
Christoph Moench-Tegeder (cmt) · 152.0.5,2
www/firefox: update to 152.0.5 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/152.0.5/releasenotes/
124c3980c6
Piotr Kubaj (pkubaj) · 152.0.4,2
www/firefox: fix build on powerpc64le

Already fixed in upstream xsimd:
In file included from /wrkdirs/usr/ports/www/firefox/work/.build/gfx/thebes/Unified_cpp_gfx_thebes0.cpp:65:
In file included from /wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/gfx/thebes/gfxAlphaRecovery.cpp:12:
In file included from /wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/xsimd.hpp:63:
In file included from /wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/memory/xsimd_aligned_allocator.hpp:27:
In file included from /wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/config/xsimd_arch.hpp:19:
In file included from /wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/types/xsimd_all_registers.hpp:51:
/wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/types/xsimd_vsx_register.hpp:67:61: error: cannot use 'long' with '__vector bool'
   67 |         XSIMD_DECLARE_SIMD_BOOL_VSX_REGISTER(unsigned long, long);
      |                                                             ^
/wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/types/xsimd_vsx_register.hpp:67:55: warning: use of 'long' with '__vector' is deprecated [-Wdeprecated]
   67 |         XSIMD_DECLARE_SIMD_BOOL_VSX_REGISTER(unsigned long, long);
      |                                                       ^
/wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/types/xsimd_vsx_register.hpp:68:52: error: cannot use 'long' with '__vector bool'
   68 |         XSIMD_DECLARE_SIMD_BOOL_VSX_REGISTER(long, long);
      |                                                    ^
/wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/types/xsimd_vsx_register.hpp:68:46: warning: use of 'long' with '__vector' is deprecated [-Wdeprecated]
   68 |         XSIMD_DECLARE_SIMD_BOOL_VSX_REGISTER(long, long);
      |                                              ^
/wrkdirs/usr/ports/www/firefox/work/firefox-152.0.2/third_party/xsimd/include/xsimd/types/xsimd_vsx_register.hpp:70:54: error: cannot use 'long' with '__vector bool'
   70 |         XSIMD_DECLARE_SIMD_BOOL_VSX_REGISTER(double, long);
      |                                                      ^
5 warnings and 3 errors generated.
a6ef6614d7
Christoph Moench-Tegeder (cmt) · 152.0.4,2
www/firefox: update to 152.0.4 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/152.0.4/releasenotes/
44713ce369
Christoph Moench-Tegeder (cmt) · 152.0.3,2
www/firefox: update to 152.0.3

Release Notes:
  https://www.firefox.com/en-US/firefox/152.0.3/releasenotes/
d29f36a8f9
Christoph Moench-Tegeder (cmt) · 152.0.2,2
www/firefox: update to 152.0.2 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/152.0.2/releasenotes/
3631dc0018
Christoph Moench-Tegeder (cmt) · 152.0.1,2
www/firefox: update to 152.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/152.0.1/releasenotes/
66f99305b4
Christoph Moench-Tegeder (cmt) · 152.0,2
www/firefox: update to 152.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/152.0/releasenotes/
0426aaa805
Christoph Moench-Tegeder (cmt) · 151.0.4,2
www/firefox: update to 151.0.4 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/151.0.4/releasenotes/
5ab9635a37
Mikael Urankar (mikael) · 151.0.3_1,2
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Christoph Moench-Tegeder (cmt) · 151.0.3,2
www/firefox: update to 151.0.3

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/151.0.3/releasenotes/
c1b9d44961
Christoph Moench-Tegeder (cmt) · 151.0.2,2
www/firefox: update to 151.0.2 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/151.0.2/releasenotes/
62b655e5e2
Christoph Moench-Tegeder (cmt) · 151.0.1,2
wasi/gecko: fix wasi target triple for FreeBSD

Our wasi target triple on "older" LLVM versions (<22) deviates from
the respective LLVM's defaults, so we need to align ports with that.

PR:		295332
e84b0b8772
Charlie Li (vishwin) · 151.0.1,2
wasi/gecko: remove ${REINPLACE_CMD} for unconditional wasm32-wasip1

No longer needed after toolchain.configure was restructured for
gecko 151, with upstream commit backported to the ESR branches in
the linked PR

PR: 295332
5cb777e21f
Christoph Moench-Tegeder (cmt) · 151.0.1,2
www/firefox: update to 151.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/151.0.1/releasenotes/
e92636d5b1
Christoph Moench-Tegeder (cmt) · 151.0_2,2
www/firefox: update to 151.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/151.0/releasenotes/
c66266a9c3
Christoph Moench-Tegeder (cmt) · 151.0_1,2
www/firefox: fix patch format from last commit

Reported by:	vvd
4fbe83904b
Christoph Moench-Tegeder (cmt) · 151.0_1,2
www/firefox: fix runtime with LIBPROXY

see https://bugzilla.mozilla.org/show_bug.cgi?id=2040125

a recent change in the proxy resolving code missed the libproxy-
enabled codepath

Reported by:	vvd
a4f52179dd
Christoph Moench-Tegeder (cmt) · 151.0,2
www/firefox: update to 151.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/151.0/releasenotes/
843ae19777
Christoph Moench-Tegeder (cmt) · 150.0.3,2
www/firefox: update to 150.0.3

Release Notes:
  https://www.firefox.com/en-US/firefox/150.0.3/releasenotes/
dc25efccc4
Christoph Moench-Tegeder (cmt) · 150.0.2_2,2
www/firefox{,-esr} mail/thunderbird{,-esr}: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:		294981
Submitted by:	Andre Albsmeier
c839877b69
Christoph Moench-Tegeder (cmt) · 150.0.2_1,2
www/firefox: update to 150.0.2 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/150.0.2/releasenotes/
5f469675f3
page 1 of 28older →oldest »