CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/firefox158.0.1,2

Web browser based on the browser portion of Mozilla

Maintainer
gecko@FreeBSD.org
Packages
firefox 158.0.1,2
Upstream
up to date
CPE
mozilla:firefox from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (361)

VuXML entries whose affected range this version has left.

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

CVE-2012-1956, CVE-2012-1970, CVE-2012-1971, CVE-2012-1972, CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976, CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960, CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964, CVE-2012-3965, CVE-2012-3966, CVE-2012-3967, CVE-2012-3968, CVE-2012-3969, CVE-2012-3970, CVE-2012-3971, CVE-2012-3972, CVE-2012-3973, CVE-2012-3974, CVE-2012-3975, CVE-2012-3976, CVE-2012-3978, CVE-2012-3979, CVE-2012-3980

CVE-2011-1187, CVE-2011-3062, CVE-2012-0467, CVE-2012-0468, CVE-2012-0469, CVE-2012-0470, CVE-2012-0471, CVE-2012-0472, CVE-2012-0473, CVE-2012-0474, CVE-2012-0475, CVE-2012-0477, CVE-2012-0478, CVE-2012-0479, CVE-2012-1126, CVE-2012-1127, CVE-2012-1128, CVE-2012-1129, CVE-2012-1130, CVE-2012-1131, CVE-2012-1132, CVE-2012-1133, CVE-2012-1134, CVE-2012-1135, CVE-2012-1136, CVE-2012-1137, CVE-2012-1138, CVE-2012-1139, CVE-2012-1140, CVE-2012-1141, CVE-2012-1142, CVE-2012-1143, CVE-2012-1144

Commits (1,360)

Trevor Johnson (trevor) · 0.7
Correct the packing list.
0c4a4c6924
Trevor Johnson (trevor) · 0.7
Update to 0.7 with patch-config_preprocess.pl updated by obraun. De-support GTK+ 1.2 (requested by marcus).  Trim COMMENT.
7feccd9870
Joe Marcus Clarke (marcus) · 0.6.1_1
Mark as IGNORE on -STABLE Alpha.
7dddab53c3
Joe Marcus Clarke (marcus) · 0.6.1_1
Use ${PTHREAD_LIBS} instead of hardcoded -pthread and -lc_r in a few places. This should help the KSE and libthr people use these applications (plus it lets them build on -CURRENT).
23dad2b555
Joe Marcus Clarke (marcus) · 0.6.1_1
Add back the PKGNAMEPREFIX was the accidentally removed in my previous commit.
c962223045
Joe Marcus Clarke (marcus) · 0.6.1_1
Change the MASTER_SITE back to the official Mozilla FTP servers.  Note, people reinstalling this port will have to do a make distclean first, or simply ignore the MD5 checksum.
718fe1846c
Alexander Kabaev (kan) · 0.6.1_1
Restore the patch to stop mozilla from crashing on some russian sites.
55fc6b08a7
Joe Marcus Clarke (marcus) · 0.6.1_1
Fix the PLIST link.

PR:		55310
Submitted by:	Morten Rodal <morten@rodal.no>
Pointy hat to:	me
a4c693ac35
Joe Marcus Clarke (marcus) · 0.6.1_1
Fix the GTK+-1.2 plist.  To do this, we create one plist for GTK1 and one for GTK2.  This is easier to maintain using the cons-plist target.

Reported by:	kris via bento
1b4dbed476
Joe Marcus Clarke (marcus) · 0.6.1
Update to 0.6.1.  This is mainly a bug fix release according to the release notes at http://www.mozilla.org/projects/firebird/release-notes.html, but it went from being based on Mozilla 1.4b to 1.5a.

Note, the master site may be temporary.  The source tarball at
${MASTER_SITE_MOZILLA} was missing some key bits that prevented compilation.
84361df012
Joe Marcus Clarke (marcus) · 0.6
Create a static plist file to fix the package building problem with the new install mk code.  However, keep Alan's plist generating code around since it's cool, and it helps maintainers quickly generate a new plist.

PR:		54795
		54799
f37483ee74
Joe Marcus Clarke (marcus) · 0.6
Try my hand at removing the Perl 5.6.1 dependency.  This port now builds and seems to work just fine out-of-the-box on -STABLE with the built-in Perl 5.00503.
f70740038e
Joe Marcus Clarke (marcus) · 0.6
Use ${PERL5} to properly locate perl.

Submitted by:	perky
337ddf44a0
Joe Marcus Clarke (marcus) · 0.6
Add mozilla-firebird after a repo move from phoenix.

Mozilla Firebird is the browser reborn from the ashes of the Phoenix.

* Update to 0.6 [1]
* Add optional GTK+-2 support [2]
* Add [untested] Sparc64 support [3]
* Add [untested] Alpha support [4]
* Do not compile with -O2 by default.  Instead specify -DWITH_OPTIMIZED_CFLAGS
  to get extra optimizations
* Link the Java Plug-in again

Submitted by:	Stijn Hoop <stijn@win.tue.nl> [1]
		Christopher Nehren <apeiron@comcast.net> [2] (based on)
		tmm and kris [3]
		Bernd Walter <ticso@cicely.de> [4]
Minor fixes by:	obraun
ed564c5560
Alan Eldridge (alane) · 0.5_4
transfer to gnome@
c54cf098a4
Joe Marcus Clarke (marcus) · 0.5_4
Remove USE_GNOMENG.
b33eaf3276
Ade Lovett (ade) · 0.5_4
Clear moonlight beckons. Requiem mors pacem pkg-comment, And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.
7e52725f2a
Eric Anholt (anholt) · 0.5_4
Remove the renaming of Xft headers and library from the Xft (Xft2) port. Remove installing of Xft1 from XFree86-4-libraries, and add dependencies to the Xft port by all the ports that use it along with whatever patches are necessary.

Approved by:	portmgr (kris), marcus
38805e871a
Alan Eldridge (alane) · 0.5_4
remove ignore setting based on lfp fonts
66ddabe840
Alan Eldridge (alane) · 0.5_4
add missing dependency
0e9c05b83d
Alan Eldridge (alane) · 0.5_4
Patch by Greg Rumple & JMC to hopefully fix end-of-download crash. I'll submit this fix back to the Mozilla team, since it will affect Mozilla 1.3a as well.

Approved by:	kris before departure (one of these days this update will end)
05c21b9963
Alan Eldridge (alane) · 0.5_3
Fix really messed up BROKEN= blocks that happened with 0.5.

Approved by:	kris (all port of moving to 0.5)
32861cab29
Alan Eldridge (alane) · 0.5_3
Put back link to java now that fonts have been identified as cause of crashes or start failures.

Reviewed by:j
Approved by:	kris (last phase of phoenix 0.5 update)
3eaf8044e2
Alan Eldridge (alane) · 0.5_2
The problem wasn't the patch, it was third party font ports. The patch has been restored, extra knobs have added, and extensive diagnostics have been added. PLEASE upgrade to this version.

Approved by:	kris (part of phoenix upgrade)
ce7094e451
Alan Eldridge (alane) · 0.5_1
Finally, a release Phoenix that works and does not crash all the time.

Approved by:	kris (a long time ago)
fdfcd30ddc
Alan Eldridge (alane) · 0.4_10
Backed down to 0.4_10 because 0.5 was borked.
763b461efc
Alan Eldridge (alane) · 0.5.20021209
Update Phoenix to 0.5, the last release named Phoenix. Fixes a lot a bugs, adds some features, there is at least one crasher I've hit so far but I don't know if it is anomoly or not yet.

Approved by:	kris
052c9b9ee5
Alan Eldridge (alane) · 0.4_9
1. Add a link to support the java plugin. Thanks to Khairil Yusof <kaeru@pd.jaring.my> for this tip.

2. Build the plist automagically in a post-install target.

Approved by:	kris
5526661e03
Alan Eldridge (alane) · 0.4_8
Updated PORTREVISION to 8. Added patch from mozilla-devel to fix -CURRENT problem with accessing network sites.

Submitted by:	Hajimu UMEMOTO <ume@mahoroba.org>
Approved by:	kris
ecc5f6b3f2
Alan Eldridge (alane) · 0.4_7
Update maintainer utility for making distfiles from cvs checkouts. No significance to users of this port, unless you are making your own distfiles.
d582a2294c
Alan Eldridge (alane) · 0.4_7
* PORTREVISION ==> 7. * Allow building under -CURRENT. * Changes in LDFLAGS and CPPFLAGS passed to configure. * Removed stale javascript dirs (venkman) from plist. * Updated mkdistfile to remove more unneeded dirs. Used to make a   new distfile from a cvs checkout. For maintainers only, really. * Disable bi-directional text in config. * Remove dupes from mozconfig.in.

The problem with the martian file selection dialogs is gone. I am not sure of
the cause, but apparently it had to do with either which version of the NSPR
libs phoenix runs with or the link order of libraries. I don't care, as long as
it doesn't do it, 'cause I do not read Martian.

Should be running against its own set of NSPR libs now. (Note: you can't just
use ldd to check this since the startup scripts play all kinds of fun games.)

You are advised to remove $HOME/.phoenix before running the new version.
c7685d56b9
Alan Eldridge (alane) · 0.4_6
Accidentally forgot a dependency on libiconv.
0c860fb85c
Alan Eldridge (alane) · 0.4_6
1. PORTREVISION ==> 6. 2. Remove components (4) of javascript debugger from plist.
56fd26fcea
Alan Eldridge (alane) · 0.4_5
1. Broken for system perl. Sorry but we don't know yet how to make it work. 2. Disable javascript debugger (like we're at a stage where we want to do 	that .... hahaha). 3. Remove dupes from files/mozconfig.in. 4. Whack the share and include dirs in a post-install target (I know it's 	slower that way, but I'm gonna let Trevor work out how to do it 	otherwise, since he so kindly volunteered.) 5. We

Thanks to Adam Weinberger for his valuable info about perl versions,
and his continuing research. Thanks to everybody else who's tested, even
if y'all did report the same thing. 8-) Finally, thanks to Warren Zevon,
whose song My ****'s ****ed Up certainly applies to the early stages
of this port.
c842552dbf
Alan Eldridge (alane) · 0.4_4
Upped to PORTREVISION 4. Added pkg-message file. Put XP_UNIX in MAKE_ENV just to be safe. Show pkg-message at start and end. I think it's stabilized now.
b57da78d89
Alan Eldridge (alane) · 0.4_3
OK, I just need to step back and take a deep breath.

Changed -DXP_UNIX to XP_UNIX=1 in MAKE_ARGS. Why can't the damned makes
agree on what they want? #$##@#!
2ef4b5d7db
Alan Eldridge (alane) · 0.4_3
Changed MAKE_FLAGS to MAKE_ARGS. Stupid mistake. I was in a hurry and not in the best of moods ... sorry.
52fe9bf1fd
Alan Eldridge (alane) · 0.4_3
This is a TEST version - if it works I'll force a Makefile commit stating otherwise. I'm trying to get the perl version and File::Spec(imen) problems ironed out.

Please try this with whatever version of perl you are using and report
back to phoenix@geeksrus.net. Thank you. Don't forget to tell us if you
are doing "use.perl port" or "use.perl system" if you have one of the
ports.

-- AlanE, who's ready to propose a virtual category called "pita".
628ac689a5
Alan Eldridge (alane) · 0.4_2
1. Bump PORTREVISION because of plist changes. 2. Fix plist to catch the missing files/dirs. It should now deinstall    cleanly (it does here, anyway). 2a.The dirs that were created with @exec /bin/mkdir are now removed using    @unexec /bin/rmdir blah/blah || true. 3. Added CONFIG_SH=/bin/sh to mozconfig.in so that we'd all use the same    shell for configuration.

Note: you can use Perl < 5.8, but you need File::Spec for whatever perl
you've got /usr/bin/perl pointing to (or /usr/local/bin/perl, if there is
no /usr/bin/perl [-CURRENT?].

If there were PRs on this, I've forgotten which ones and will close them
out separately. I can do a forced commit on Makefile to relate the PRs,
if any, to the changes.
b5921bf2ff
Alan Eldridge (alane) · 0.4_1
Fixed another dumb idiot thing to do without reverting to system perl and checking it. I think I must have left my brain asleep in bed this morning.
dad54dfcff
Alan Eldridge (alane) · 0.4_1
Fixed a stoopid mistake I made by not using -f with ${RM}. Caught, gutted, And filleted by Douglas Berry  <doug@cnd.dundas.on.ca>, who then served it with a delightful lemon and basil butter, garnished with lark's vomit.

Thanks, Doug!

Submitted by:	Douglas Barry <doug@cnd.dundas.on.ca>
ae4b96c7ef
Alan Eldridge (alane) · 0.4_1
Remove the StUdLyCaPs from maintainer name, 'cause some folks won't realize mail's case insensitive and will try to type that. Sorry folks, purely a cosmetic change here, nothing to see, move along, move along....
61028157db
Alan Eldridge (alane) · 0.4_1
1. PORTREVISION -> 1. 2. Incorporated my uncommited mods with Trevor's changes. 3. Remade pkg-plist accordingly. 4. Use /usr/bin/perl if present, then /usr/local/bin/perl. 5. Add File::Spec to BUILD_DEPENDS if perl < 5.8.0.
482fb23b62
Alan Eldridge (alane) · 0.4
Changed MAINTAINER to my FreeBSD address.
7df6fabb8f
Trevor Johnson (trevor) · 0.4
We don't need all those mtree directories.
a3ce01445a
Trevor Johnson (trevor) · 0.4
Add dependency on GTK+ 1.2.X.  Tidy whitespace (portlint -t).
b135ba72a1
Trevor Johnson (trevor) · 0.4
This is broken when OSVERSION = 500039, but works on 4.7-PRERELEASE/i386.
9270597f14
Trevor Johnson (trevor) · 0.4
Update to 0.4.
15c8654c0b
Kris Kennaway (kris) · 0.3_2
Fix typo in BUILD_DEPENDS
eef501a886
Alan Eldridge (alane) · 0.3_2
1. Change MAINTAINER to phoenix@geeksrus, which is an alias to both    alane@ and trevor@. 2. Expand the BROKEN message to include instruction to run 'use.perl port'. 3. .undef NO_IGNORE.
183d476288