CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/firefox158.0.1,2

Web browser based on the browser portion of Mozilla

Maintainer
gecko@FreeBSD.org
Packages
firefox 158.0.1,2
Upstream
up to date
CPE
mozilla:firefox from the port
WWW
https://www.firefox.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (361)

VuXML entries whose affected range this version has left.

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448, CVE-2017-5449, CVE-2017-5450, CVE-2017-5451, CVE-2017-5452, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5463, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5468, CVE-2017-5469

CVE-2012-1956, CVE-2012-1970, CVE-2012-1971, CVE-2012-1972, CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976, CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960, CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964, CVE-2012-3965, CVE-2012-3966, CVE-2012-3967, CVE-2012-3968, CVE-2012-3969, CVE-2012-3970, CVE-2012-3971, CVE-2012-3972, CVE-2012-3973, CVE-2012-3974, CVE-2012-3975, CVE-2012-3976, CVE-2012-3978, CVE-2012-3979, CVE-2012-3980

CVE-2011-1187, CVE-2011-3062, CVE-2012-0467, CVE-2012-0468, CVE-2012-0469, CVE-2012-0470, CVE-2012-0471, CVE-2012-0472, CVE-2012-0473, CVE-2012-0474, CVE-2012-0475, CVE-2012-0477, CVE-2012-0478, CVE-2012-0479, CVE-2012-1126, CVE-2012-1127, CVE-2012-1128, CVE-2012-1129, CVE-2012-1130, CVE-2012-1131, CVE-2012-1132, CVE-2012-1133, CVE-2012-1134, CVE-2012-1135, CVE-2012-1136, CVE-2012-1137, CVE-2012-1138, CVE-2012-1139, CVE-2012-1140, CVE-2012-1141, CVE-2012-1142, CVE-2012-1143, CVE-2012-1144

Commits (1,360)

Christoph Moench-Tegeder (cmt) · 140.0.2,2
www/firefox: update to 140.0.2

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/140.0.2/releasenotes/
83c4b6ea6b
Christoph Moench-Tegeder (cmt) · 140.0.1,2
www/firefox: update to 140.0.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/140.0.1/releasenotes/
f97caf7f19
Christoph Moench-Tegeder (cmt) · 140.0,2
www/firefox: update to 140.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/140.0/releasenotes/
e607df67c1
Christoph Moench-Tegeder (cmt) · 139.0.4,2
www/firefox: update to 139.0.4 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/139.0.4/releasenotes/
79450a091a
Mikael Urankar (mikael) · 139.0.1_1,2
lang/rust: Bump revisions after 1.87.0

PR:		286829
3ed29b8185
Christoph Moench-Tegeder (cmt) · 139.0.1,2
www/firefox: update to 139.0.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/139.0.1/releasenotes/
a1de95cb87
Christoph Moench-Tegeder (cmt) · 139.0_1,2
www/firefox: update to 139.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/139.0/releasenotes/
bbed43952e
Christoph Moench-Tegeder (cmt) · 139.0,2
www/firefox: update to 139.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/139.0/releasenotes/
e4fc57bb5b
Christoph Moench-Tegeder (cmt) · 138.0.4,2
www/firefox: update to 138.0.4 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/138.0.4/releasenotes/
2c1c0166f2
Christoph Moench-Tegeder (cmt) · 138.0.3,2
www/firefox: update to 138.0.3 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/138.0.3/releasenotes/
70cafb6caf
Christoph Moench-Tegeder (cmt) · 138.0.1,2
www/firefox: update to 138.0.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/138.0.1/releasenotes/
3745d3d7c1
Christoph Moench-Tegeder (cmt) · 138.0,2
www/firefox: update to 138.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/138.0/releasenotes/
0223499bfd
Christoph Moench-Tegeder (cmt) · 137.0.2,2
www/firefox: update to 137.0.2 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/137.0.2/releasenotes/
e8c95d38ac
Jan Beich (jbeich) · 137.0.1_2,2
multimedia/libvpx: update 1.15.1

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.0..v1.15.1
Reported by:	portscout
64f3a6bf7e
Mikael Urankar (mikael) · 137.0.1_1,2
lang/rust: Bump revisions after 1.86.0

PR:		285840
2a5976aebe
Christoph Moench-Tegeder (cmt) · 137.0.1,2
www/firefox: update to 137.0.1 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/137.0.1/releasenotes/
21de3e1d21
Christoph Moench-Tegeder (cmt) · 137.0_2,2
www/firefox: switch to system icu again

now that 2025Q1 is gone, we don't have to use the bundled icu
anymore
04391abc49
Christoph Moench-Tegeder (cmt) · 137.0_1,2
www/firefox: update to 137.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/137.0/releasenotes/
50ae2c8097
Christoph Moench-Tegeder (cmt) · 137.0,2
www/firefox: update to 137.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/137.0/releasenotes/
90a57ac9f2
Christoph Moench-Tegeder (cmt) · 136.0.3,2
www/firefox: update to 136.0.3 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/136.0.3/releasenotes/
2c40d02466
Christoph Moench-Tegeder (cmt) · 136.0.2,2
www/firefox: update to 136.0.2 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/136.0.2/releasenotes/
b77838a90e
Christoph Moench-Tegeder (cmt) · 136.0.1,2
www/firefox: update to 136.0.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/136.0.1/releasenotes/
9b96b9c565
Christoph Moench-Tegeder (cmt) · 136.0_2,2
www/firefox: update to 136.0 (rc3)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/136.0/releasenotes/
5527e93049
Christoph Moench-Tegeder (cmt) · 136.0_1,2
www/firefox: update to 136.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/136.0/releasenotes/
392e8059de
Christoph Moench-Tegeder (cmt) · 136.0,2
www/firefox: update to 136.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/136.0/releasenotes/

Switches to bundles ICU, because the one in 2025Q1 is too old and
the uplift would be too messy.
c1a1b28d9f
Mikael Urankar (mikael) · 135.0.1_1,2
lang/rust: Bump revisions after 1.85.0

PR:		284884
cf7c4b037d
Christoph Moench-Tegeder (cmt) · 135.0.1,2
www/firefox: update to 135.0.1 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/135.0.1/releasenotes/
52ed7aee93
Daniel Engberg (diizzy) · 135.0_3,2
*/*: Bump consumers of devel/icu

...to avoid library mismatches
ff33dd4700
Christoph Moench-Tegeder (cmt) · 135.0_2,2
www/firefox: update to 135.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/135.0/releasenotes/
9e8e6c6120
Piotr Kubaj (pkubaj) · 135.0_1,2
www/firefox: enable wasi on powerpc64
2f145fff0c
Piotr Kubaj (pkubaj) · 135.0,2
www/firefox: drop unnecesary powerpc64le knob
bf57fa9303
Christoph Moench-Tegeder (cmt) · 135.0,2
www/firefox: update to 135.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/135.0/releasenotes/
ca17226d49
Christoph Moench-Tegeder (cmt) · 134.0.2,2
www/firefox: update to 134.0.2 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/134.0.2/releasenotes/
a15e70b536
Mikael Urankar (mikael) · 134.0.1_1,2
lang/rust: Bump revisions after 1.84.0

PR:		283962
fccaa1b326
Christoph Moench-Tegeder (cmt) · 134.0.1,2
www/firefox: update to 134.0.1

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/134.0.1/releasenotes/
c355e815cf
Christoph Moench-Tegeder (cmt) · 134.0,2
www/firefox: update to 134.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/134.0/releasenotes/
2829059424
Christoph Moench-Tegeder (cmt) · 133.0.3,2
www/firefox: update to 133.0.3 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/133.0.3/releasenotes/
607b6a619c
Mikael Urankar (mikael) · 133.0_2,2
lang/rust: Bump revisions after 1.83.0

PR:		283000
1d1fd15a3e
Vladimir Druzenko (vvd) · 133.0_1,2
Reapply "devel/wasi-libc: chase missed _DEPENDS line changes after flavourisation"

Incorrect branch.

This reverts commit 85b72a5454c5bdcc850e153b66fdaa4e83e84f3d.
d36b71b2d0
Vladimir Druzenko (vvd) · 133.0_1,2
Revert "devel/wasi-libc: chase missed _DEPENDS line changes after flavourisation"

Flavorization of the devel/wasi-libc was not MFH.

This reverts commit 0c538aad8a8708a074157b767459360aa09398f0.
85b72a5454
Christoph Moench-Tegeder (cmt) · 133.0_1,2
www/firefox: update to 133.0 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/133.0/releasenotes/
b298d97ea4
Christoph Moench-Tegeder (cmt) · 133.0,2
www/firefox: update to 133.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/133.0/releasenotes/
e5025b5100
Christoph Moench-Tegeder (cmt) · 132.0.2_1,2
www/firefox: update to 132.0.2 (rc2)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/132.0.2/releasenotes/
8a54841ed8
Christoph Moench-Tegeder (cmt) · 132.0.2,2
www/firefox: update to 132.0.2 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/132.0.2/releasenotes/
0eb37cf24f
Mikael Urankar (mikael) · 132.0.1_3,2
lang/rust: Bump revisions after 1.82.0

PR:		282516
ca048c2884
Christoph Moench-Tegeder (cmt) · 132.0.1_2,2
www/firefox: update to 132.0.1

Release Notes:
  https://www.mozilla.org/en-US/firefox/132.0.1/releasenotes/
9c6b8ec494
Jan Beich (jbeich) · 132.0.1_1,2
multimedia/libvpx: update 1.15.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.14.1..v1.15.0
Reported by:	Repology
888cea7dee
Christoph Moench-Tegeder (cmt) · 132.0.1,2
www/firefox: update to 132.0.1 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/132.0.1/releasenotes/
b6e8e62ff2
Christoph Moench-Tegeder (cmt) · 132.0,2
www/firefox: update to 132.0 (rc1)

Release Notes (soon):
  https://www.mozilla.org/en-US/firefox/132.0beta/releasenotes/
605106a763
Charlie Li (vishwin) · 131.0.3_1,2
devel/wasi-libc: chase missed _DEPENDS line changes after flavourisation
1c5ebef22a