CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/firefox158.0.1,2

Web browser based on the browser portion of Mozilla

0
unaddressed
0
VuXML only, still affected
361
fixed
Maintainer
gecko@FreeBSD.org
Packages
firefox 158.0.1,2
Upstream
up to date
CPE
mozilla:firefox from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (361)

VuXML entries whose affected range this version has left.
mozilla -- multiple vulnerabilitiesentered 2018-01-23

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

mozilla -- multiple vulnerabilitiesentered 2017-04-19

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

mozilla -- multiple vulnerabilitiesentered 2012-08-30

CVE-2012-1956, CVE-2012-1970, CVE-2012-1971, CVE-2012-1972, CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976, CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960, CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964, CVE-2012-3965, CVE-2012-3966, CVE-2012-3967, CVE-2012-3968, CVE-2012-3969, CVE-2012-3970, CVE-2012-3971, CVE-2012-3972, CVE-2012-3973, CVE-2012-3974, CVE-2012-3975, CVE-2012-3976, CVE-2012-3978, CVE-2012-3979, CVE-2012-3980

mozilla -- multiple vulnerabilitiesentered 2012-04-24

CVE-2011-1187, CVE-2011-3062, CVE-2012-0467, CVE-2012-0468, CVE-2012-0469, CVE-2012-0470, CVE-2012-0471, CVE-2012-0472, CVE-2012-0473, CVE-2012-0474, CVE-2012-0475, CVE-2012-0477, CVE-2012-0478, CVE-2012-0479, CVE-2012-1126, CVE-2012-1127, CVE-2012-1128, CVE-2012-1129, CVE-2012-1130, CVE-2012-1131, CVE-2012-1132, CVE-2012-1133, CVE-2012-1134, CVE-2012-1135, CVE-2012-1136, CVE-2012-1137, CVE-2012-1138, CVE-2012-1139, CVE-2012-1140, CVE-2012-1141, CVE-2012-1142, CVE-2012-1143, CVE-2012-1144

Commits (1,360)

Christoph Moench-Tegeder (cmt) · 150.0.2,2
www/firefox: update to 150.0.2 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/150.0.2/releasenotes/
1b4b514a63
Christoph Moench-Tegeder (cmt) · 150.0.1,2
www/firefox: update to 150.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/150.0.1/releasenotes/
43e4f83b53
Mikael Urankar (mikael) · 150.0_1,2
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 150.0,2
www/firefox: Fix build with rust 1.95.0

Import part of upstream patch [1] to fix the following error,
upstream PR at [2]:

error[E0599]: no method named `select` found for struct `Mask<T, N>` in the current scope
  --> third_party/rust/encoding_rs/src/x_user_defined.rs:23:56

[1] https://hg-edge.mozilla.org/mozilla-central/rev/ec1dd05fd578
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=2033279

PR:		294615
Approved by:	portmgr (build fix blanket)
6c3286b18e
Christoph Moench-Tegeder (cmt) · 150.0,2
www/firefox: update to 150.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/150.0/releasenotes/
b96a271bbc
Christoph Moench-Tegeder (cmt) · 149.0.2,2
www/firefox: update to 149.0.2

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/149.0.2/releasenotes/
3b4ee97550
Mikael Urankar (mikael) · 149.0_1,2
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Charlie Li (vishwin) · 149.0,2
wasi: consistently use the wasm32-wasip1 triple

The WebAssembly community have reclaimed wasm32-wasi, without suffix,
for a future WASI 1.0 standard. The first version of WASI, 0.1, is
now wasm32-wasip1 in triple form, WASI 0.2 is wasm32-wasip2, etc.
Starting LLVM 22 the non-suffixed form is deprecated, aligning with
Rust and Go:

https://github.com/llvm/llvm-project/issues/165344
https://blog.rust-lang.org/2024/04/09/updates-to-rusts-wasi-targets/

The Mozilla build system's WASI checks always pass -Werror so
configure fails when the non-suffixed target/triple is passed using
LLVM 22:

Using wasi sysroot in /usr/local/share/wasi-sysroot
checking for the wasm C compiler... /usr/local/bin/clang22
checking whether the wasm C compiler can be used... yes
checking the wasm C compiler version... 22.1.0
checking the wasm C compiler works... yes
checking the wasm C compiler can find wasi headers... yes
checking the wasm C linker can find wasi libraries... yes
checking for the wasm C++ compiler... /usr/local/bin/clang++22
checking whether the wasm C++ compiler can be used... yes
checking the wasm C++ compiler version... 22.1.0
checking the wasm C++ compiler works... yes
checking the wasm C++ compiler can find wasi headers... yes
checking the wasm C++ linker can find wasi libraries... yes
checking for clock() in wasi sysroot... no
checking for emulated clock() in wasi sysroot...
DEBUG: Creating `/tmp/conftest0vk5p554.c` with content:
DEBUG: | #include <time.h>
DEBUG: | int
DEBUG: | main(void)
DEBUG: | {
DEBUG: | clock();
DEBUG: |   ;
DEBUG: |   return 0;
DEBUG: | }
DEBUG: Executing: `/usr/local/bin/clang22 --target=wasm32-wasi /tmp/conftest0vk5p554.c -Werror -D_WASI_EMULATED_PROCESS_CLOCKS -lwasi-emulated-process-clocks --sysroot=/usr/local/share/wasi-sysroot`
DEBUG: The command returned non-zero exit status 1.
DEBUG: Its error output was:
DEBUG: | clang: error: argument '--target=wasm32-wasi' is deprecated, use --target=wasm32-wasip1 instead [-Werror,-Wdeprecated]
ERROR: Can't find clock() in wasi sysroot.

Mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=2023597

Bump all WASI ports for the new triple. Adjust consumers accordingly
but do not bump, since non-suffixed and p1 are identical as a
transition measure.
7c5b2039a4
Christoph Moench-Tegeder (cmt) · 149.0,2
www/firefox: update to 149.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/149.0/releasenotes/
34d550f711
Charlie Li (vishwin) · 148.0.2_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
cec47c79e8
Christoph Moench-Tegeder (cmt) · 148.0.2,2
www/firefox: update to 148.0.2 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/148.0.2/releasenotes/
38ab619b63
Christoph Moench-Tegeder (cmt) · 148.0,2
www/firefox: update to 148.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/148.0/releasenotes/
92a8828858
Christoph Moench-Tegeder (cmt) · 147.0.4,2
www/firefox: update to 147.0.4 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/147.0.4/releasenotes/
b742d70630
Christoph Moench-Tegeder (cmt) · 147.0.3,2
www/firefox: update to 147.0.3

Release Notes:
  https://www.firefox.com/en-US/firefox/147.0.3/releasenotes/
0ea50cc1be
Jan Beich (jbeich) · 147.0.2_2,2
multimedia/libvpx: update 1.16.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.2..v1.16.0
Reported by:	Repology
939d8775e7
Mikael Urankar (mikael) · 147.0.2_1,2
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Christoph Moench-Tegeder (cmt) · 147.0.2,2
www/firefox: update to 147.0.2 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/147.0.2/releasenotes/
fbeeb31310
Christoph Moench-Tegeder (cmt) · 147.0.1,2
www/firefox: update to 147.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/147.0.1/releasenotes/
c0dc9a1450
Charlie Li (vishwin) · 147.0_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
c67a1a28d3
Christoph Moench-Tegeder (cmt) · 147.0,2
www/firefox: update to 147.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/147.0/releasenotes/
2aa0398f0d
Christoph Moench-Tegeder (cmt) · 146.0.1,2
www/firefox: update to 146.0.1 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/146.0.1/releasenotes/
789895e9b8
Mikael Urankar (mikael) · 146.0_2,2
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Christoph Moench-Tegeder (cmt) · 146.0_1,2
www/firefox: update to 146.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/146.0/releasenotes/
70f48e4454
Christoph Moench-Tegeder (cmt) · 146.0,2
www/firefox: update to 146.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/146.0/releasenotes/
98af7a1cfd
Christoph Moench-Tegeder (cmt) · 145.0.2,2
www/firefox: update to 145.0.2 (rc1)
df3bd1e3c5
Charlie Li (vishwin) · 145.0.1_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
4f2fef9a0a
Piotr Kubaj (pkubaj) · 145.0.1,2
www/firefox: fix build on powerpc64*

Currently x_error_trap.cc is added twice to sources on powerpc64*, which
causes an error.
ba6e4050b7
Christoph Moench-Tegeder (cmt) · 145.0.1,2
www/firefox: update to 145.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/145.0.1/releasenotes/
d9499e8738
Mikael Urankar (mikael) · 145.0_2,2
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Christoph Moench-Tegeder (cmt) · 145.0_1,2
www/firefox: update to 145.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/145.0/releasenotes/
09baee4c35
Christoph Moench-Tegeder (cmt) · 145.0,2
www/firefox: update to 145.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/145.0/releasenotes/
6597d89ee8
Christoph Moench-Tegeder (cmt) · 144.0.2,2
www/firefox: update to 144.0.2 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/144.0.2/releasenotes/
6e3e555659
Christoph Moench-Tegeder (cmt) · 144.0_2,2
www/firefox: update to 144.0 (rc2)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/144.0/releasenotes/
42e07ddabd
Christoph Moench-Tegeder (cmt) · 144.0,2
www/firefox: update to 144.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/144.0/releasenotes/
fa36a22e6b
Christoph Moench-Tegeder (cmt) · 143.0.4,2
www/firefox: update to 143.0.4

Release Notes:
  https://www.firefox.com/en-US/firefox/143.0.4/releasenotes/
53c51b8869
Mikael Urankar (mikael) · 143.0.3_1,2
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Christoph Moench-Tegeder (cmt) · 143.0.3,2
www/firefox: update to 143.0.3 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/143.0.3/releasenotes/
4aea75ddb7
Christoph Moench-Tegeder (cmt) · 143.0.1,2
www/firefox: update to 143.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/143.0.1/releasenotes/
47f9e8bed3
Christoph Moench-Tegeder (cmt) · 143.0,2
www/firefox: update to 143.0 (rc1)

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/143.0/releasenotes/
3c208fe067
Mikael Urankar (mikael) · 142.0.1_2,2
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Charlie Li (vishwin) · 142.0.1_1,2
devel/wasi-libc: bump consumer PORTREVISIONs after update
c669bf1c7a
Christoph Moench-Tegeder (cmt) · 142.0.1,2
www/firefox: update to 142.0.1

Release Notes:
  https://www.firefox.com/en-US/firefox/142.0.1/releasenotes/
d0cafeefa8
Christoph Moench-Tegeder (cmt) · 142.0,2
www/firefox: update to 142.0 (rc1)

While here, chase WWW location move as advertised by upstream.

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/142.0/releasenotes/
17fcfdecf1
Christoph Moench-Tegeder (cmt) · 141.0.3,2
www/firefox: update to 141.0.3 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/141.0.3/releasenotes/
c234213996
Christoph Moench-Tegeder (cmt) · 141.0.2,2
www/firefox: update to 141.0.2 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/141.0.2/releasenotes/
325887fafb
Christoph Moench-Tegeder (cmt) · 141.0_2,2
www/firefox{,-esr} mail/thunderbird{-esr}: fix runtime on arm64

reports of crashes on arm64 with aslr enabled.

PR:		271081
Reported by: markj@
c0f77d931c
Christoph Moench-Tegeder (cmt) · 141.0_1,2
www/firefox: update to 141.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/141.0/releasenotes/
4c191c8d4b
Christoph Moench-Tegeder (cmt) · 141.0,2
www/firefox: update to 141.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/141.0/releasenotes/
5c60310083
Christoph Moench-Tegeder (cmt) · 140.0.4,2
www/firefox: update to 140.0.4 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/140.0.4/releasenotes/
66608f3662
Mikael Urankar (mikael) · 140.0.2_1,2
lang/rust: Bump revisions after 1.88.0

PR:		287766
f3f7e555b0
« newest← newerpage 2 of 28older →oldest »