CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/librewolf158.0_1

Custom version of Firefox, focused on privacy, security and freedom

Maintainer
freebsd@sysctl.cz
Packages
librewolf 158.0_1
Upstream
Higher version available: 158.0.1_2
CPE
mozilla:librewolf from the port
WWW
https://librewolf.net/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (21)

VuXML entries whose affected range this version has left.

Commits (167)

Vladimir Druzenko (vvd) · 158.0.1
www/librewolf: Update 158.0-1 => 158.0.1-2

Release Notes:
https://www.firefox.com/en-US/firefox/158.0.1/releasenotes/

Changelogs:
https://librewolf.dev/librewolf/bsys6/releases/tag/158.0.1-1
https://librewolf.dev/librewolf/bsys6/releases/tag/158.0.1-2

PR:		299870
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q4
847c77f97b
Vladimir Druzenko (vvd) · 158.0_1
www/librewolf: Update 157.0.1-1 => 158.0-1

Release Notes:
https://www.firefox.com/en-US/firefox/158.0/releasenotes/
Changelog:
https://librewolf.dev/librewolf/bsys6/releases/tag/158.0-1

PR:		299555
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q4
7087d50199
Mikael Urankar (mikael) · 157.0.1_1
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Vladimir Druzenko (vvd) · 157.0.1
www/librewolf: Update 157.0-1 => 157.0.1-1

Release Notes:
https://www.firefox.com/en-US/firefox/157.0.1/releasenotes/

Changelog:
https://librewolf.dev/librewolf/bsys6/releases/tag/157.0.1-1

- Fix build on i386.

PR:		299295
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q4
71645b54e7
Vladimir Druzenko (vvd) · 157.0
www/librewolf: Update 156.0-1 => 157.0-1

Release Notes:
https://www.mozilla.org/en-US/firefox/156.0.1/releasenotes/
https://www.mozilla.org/en-US/firefox/157.0/releasenotes/

Changelogs:
https://librewolf.dev/librewolf/bsys6/releases/tag/156.0.1-1
https://librewolf.dev/librewolf/bsys6/releases/tag/157.0-1

PR:		299107
Sponsored by:	UNIS Labs (vvd)
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q4
e37d21392f
Vladimir Druzenko (vvd) · 156.0
www/librewolf: Update 155.0.1-1 => 156.0-1

Release Notes:
https://www.firefox.com/en-US/firefox/156.0/releasenotes/

- Add LOCAL/vvd to MASTER_SITES - can't direct download distfile.

PR:		298583
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q3
96a89ac57a
Vladimir Druzenko (vvd) · 155.0.1
www/librewolf: Update 154.0.1-3 => 155.0.1-1

Release Notes:
https://www.firefox.com/en-US/firefox/155.0.1/releasenotes/

PR:		298478
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q3
17e40b092b
Mikael Urankar (mikael) · 154.0.1_2
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Charlie Li (vishwin) · 154.0.1_1
devel/wasi-libc: bump consumer PORTREVISIONs after update
b25213c075
Vladimir Druzenko (vvd) · 154.0.1
www/librewolf: Update 153.0.4-1 => 154.0.1-3

Release Notes:
https://www.firefox.com/en-US/firefox/154.0.1/releasenotes/

PR:
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q3
90c68d45bb
Vladimir Druzenko (vvd) · 153.0.4
www/librewolf: Update 153.0.3-1 => 153.0.4-1

Release Notes:
https://www.firefox.com/en-US/firefox/153.0.4/releasenotes/

PR:		297532
Sponsored by:	UNIS Labs
MFH:		2026Q3
1b9363321d
Vladimir Druzenko (vvd) · 153.0.3
www/librewolf: Update 153.0.1-1 => 153.0.3-1

Release Notes:
https://www.firefox.com/en-US/firefox/153.0.3/releasenotes/

PR:		297271
Sponsored by:	UNIS Labs
MFH:		2026Q3
2f15c0c0b1
Vladimir Druzenko (vvd) · 153.0.1
www/librewolf: Update 153.0-3 => 153.0.1-1

Release Notes:
https://www.firefox.com/en-US/firefox/153.0.1/releasenotes/

PR:		297133
Sponsored by:	UNIS Labs
MFH:		2026Q3
fb77337ebe
Vladimir Druzenko (vvd) · 153.0
www/librewolf: Update 152.0.6-1 => 153.0-3

Release Notes:
https://www.firefox.com/en-US/firefox/153.0/releasenotes/

- Fix runtime if build with CPUTYPE=native - required link with -lm.

PR:		296966 296884
Sponsored by:	UNIS Labs
MFH:		2026Q3
9b133df412
Mikael Urankar (mikael) · 152.0.6_1
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Vladimir Druzenko (vvd) · 152.0.6
www/librewolf: Update 152.0.5-1 => 152.0.6-1

Release Notes:
https://www.firefox.com/en-US/firefox/152.0.6/releasenotes/

PR:		296845
Sponsored by:	UNIS Labs
MFH:		2026Q3
b70f457b83
Vladimir Druzenko (vvd) · 152.0.5
www/librewolf: Update 152.0.4-1 => 152.0.5-1

Release Notes:
https://www.firefox.com/en-US/firefox/152.0.5/releasenotes/

PR:		296619
Sponsored by:	UNIS Labs
MFH:		2026Q3
aed73c0084
Vladimir Druzenko (vvd) · 152.0.4
www/librewolf: Update 152.0.2-1 => 152.0.4-1

Changelog:
https://www.firefox.com/en-US/firefox/152.0.3/releasenotes/
https://www.firefox.com/en-US/firefox/152.0.4/releasenotes/

- Remove unnecessary patches and add new patches from www/firefox.

PR:		296456
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q2
f88f2d39ba
Vladimir Druzenko (vvd) · 152.0.2
www/librewolf: Update 152.0.1-1 => 152.0.2-1

Release Notes:
https://www.firefox.com/en-US/firefox/152.0.2/releasenotes/

PR:		296265
Sponsored by:	UNIS Labs
MFH:		2026Q2
9411dbbc0e
Vladimir Druzenko (vvd) · 152.0.1
www/librewolf: Update 152.0-1 => 152.0.1-1

Release Notes:
https://www.firefox.com/en-US/firefox/152.0.1/releasenotes/

PR:		296141
Sponsored by:	UNIS Labs
MFH:		2026Q2
8fd7c8051a
Vladimir Druzenko (vvd) · 152.0
www/librewolf: Update 151.0.3-1 => 152.0-1

Changelog:
https://www.firefox.com/en-US/firefox/152.0/releasenotes/

PR:		296108
Sponsored by:	UNIS Labs
MFH:		2026Q2
78b90543cf
Mikael Urankar (mikael) · 151.0.3_1
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Vladimir Druzenko (vvd) · 151.0.3
www/librewolf: Update 151.0.1-2 => 151.0.3-1

Relese Notes:
https://www.firefox.com/en-US/firefox/151.0.3/releasenotes/

PR:		295808
Sponsored by:	UNIS Labs
MFH:		2026Q2
22b0897547
Kenneth Raplee (kenrap) · 151.0.1
www/librewolf: Unbreak configure build

PR:		295570
Approved by:	blanket (fix build)
Approved by:	arrowd (co-mentor)
Obtained from:	https://cgit.freebsd.org/ports/commit/?id=e84b0b8772c7f4a005121d141ccde2cea2a7a646
b8257e1e15
Vladimir Druzenko (vvd) · 151.0.1
www/librewolf: Update 151.0.1-1 => 151.0.1-2

Commit log:
https://codeberg.org/librewolf/source/compare/151.0.1-1...151.0.1-2

PR:		295514
Sponsored by:	UNIS Labs
MFH:		2026Q2
1bbf174167
Charlie Li (vishwin) · 151.0.1
wasi/gecko: remove ${REINPLACE_CMD} for unconditional wasm32-wasip1

No longer needed after toolchain.configure was restructured for
gecko 151, with upstream commit backported to the ESR branches in
the linked PR

PR: 295332
5cb777e21f
Vladimir Druzenko (vvd) · 151.0.1
www/librewolf: Update 151.0 => 151.0.1

Release Notes:
https://www.firefox.com/en-US/firefox/151.0.1/releasenotes/

PR:		295507
Sponsored by:	UNIS Labs
MFH:		2026Q2
5c219cbe19
Vladimir Druzenko (vvd) · 151.0
www/librewolf: Update 150.0.3-1 => 151.0-1

Release Notes:
https://www.firefox.com/en-US/firefox/151.0/releasenotes/

PR:		295437
Sponsored by:	UNIS Labs
MFH:		2026Q2
39a96cc33e
Vladimir Druzenko (vvd) · 150.0.3
www/librewolf: Update 150.0.2-1 => 150.0.3-1

Release Notes:
https://www.firefox.com/en-US/firefox/150.0.3/releasenotes/

PR:		295252
Sponsored by:	UNIS Labs
MFH:		2026Q2
0151b66513
Vladimir Druzenko (vvd) · 150.0.2_1
www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:		295187
Sponsored by:	UNIS Labs
MFH:		2026Q2
5328dc34be
Vladimir Druzenko (vvd) · 150.0.2
www/librewolf: Update 150.0.1-1 => 150.0.2-1

Release Notes:
https://www.firefox.com/en-US/firefox/150.0.2/releasenotes/

PR:		295095
Security:	CVE-2026-8090
Security:	CVE-2026-8092
Security:	CVE-2026-8093
Sponsored by:	UNIS Labs
MFH:		2026Q2
02ede796b2
Vladimir Druzenko (vvd) · 150.0.1
www/librewolf: Update 149.0.2-2 => 150.0.1-1

Changelog:
https://www.firefox.com/en-US/firefox/150.0/releasenotes/
https://www.firefox.com/en-US/firefox/150.0.1/releasenotes/

While here add part of fix for support locales.

PR:		294872 294372
Sponsored by:	UNIS Labs
MFH:		2026Q2
b77bf3e957
Mikael Urankar (mikael) · 149.0.2_1
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 149.0.2
www/librewolf: Fix build with rust 1.95.0

Import part of upstream patch [1] to fix the following error,
upstream PR at [2]:

error[E0599]: no method named `select` found for struct `Mask<T, N>` in the current scope
  --> third_party/rust/encoding_rs/src/x_user_defined.rs:23:56

[1] https://hg-edge.mozilla.org/mozilla-central/rev/ec1dd05fd578
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=2033279

PR:		294615
Approved by:	portmgr (build fix blanket)
8579a27389
Vladimir Druzenko (vvd) · 149.0.2
www/librewolf: Update 149.0-1 => 149.0.2-2

Changelog:
https://codeberg.org/librewolf/source/releases/tag/149.0.2-1
https://codeberg.org/librewolf/source/releases/tag/149.0.2-2
https://www.firefox.com/en-US/firefox/149.0.2/releasenotes/

PR:		294341
Sponsored by:	UNIS Labs
MFH:		2026Q2
5927d2da25
Vladimir Druzenko (vvd) · 149.0
www/librewolf: Update 148.0.2-3 => 149.0-1

Release Notes:
https://www.firefox.com/en-US/firefox/149.0/releasenotes/

PR:	294044
MFH:	2026Q1
874596a5d4
Mikael Urankar (mikael) · 148.0.2_3
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Charlie Li (vishwin) · 148.0.2_2
wasi: consistently use the wasm32-wasip1 triple

The WebAssembly community have reclaimed wasm32-wasi, without suffix,
for a future WASI 1.0 standard. The first version of WASI, 0.1, is
now wasm32-wasip1 in triple form, WASI 0.2 is wasm32-wasip2, etc.
Starting LLVM 22 the non-suffixed form is deprecated, aligning with
Rust and Go:

https://github.com/llvm/llvm-project/issues/165344
https://blog.rust-lang.org/2024/04/09/updates-to-rusts-wasi-targets/

The Mozilla build system's WASI checks always pass -Werror so
configure fails when the non-suffixed target/triple is passed using
LLVM 22:

Using wasi sysroot in /usr/local/share/wasi-sysroot
checking for the wasm C compiler... /usr/local/bin/clang22
checking whether the wasm C compiler can be used... yes
checking the wasm C compiler version... 22.1.0
checking the wasm C compiler works... yes
checking the wasm C compiler can find wasi headers... yes
checking the wasm C linker can find wasi libraries... yes
checking for the wasm C++ compiler... /usr/local/bin/clang++22
checking whether the wasm C++ compiler can be used... yes
checking the wasm C++ compiler version... 22.1.0
checking the wasm C++ compiler works... yes
checking the wasm C++ compiler can find wasi headers... yes
checking the wasm C++ linker can find wasi libraries... yes
checking for clock() in wasi sysroot... no
checking for emulated clock() in wasi sysroot...
DEBUG: Creating `/tmp/conftest0vk5p554.c` with content:
DEBUG: | #include <time.h>
DEBUG: | int
DEBUG: | main(void)
DEBUG: | {
DEBUG: | clock();
DEBUG: |   ;
DEBUG: |   return 0;
DEBUG: | }
DEBUG: Executing: `/usr/local/bin/clang22 --target=wasm32-wasi /tmp/conftest0vk5p554.c -Werror -D_WASI_EMULATED_PROCESS_CLOCKS -lwasi-emulated-process-clocks --sysroot=/usr/local/share/wasi-sysroot`
DEBUG: The command returned non-zero exit status 1.
DEBUG: Its error output was:
DEBUG: | clang: error: argument '--target=wasm32-wasi' is deprecated, use --target=wasm32-wasip1 instead [-Werror,-Wdeprecated]
ERROR: Can't find clock() in wasi sysroot.

Mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=2023597

Bump all WASI ports for the new triple. Adjust consumers accordingly
but do not bump, since non-suffixed and p1 are identical as a
transition measure.
7c5b2039a4
Vladimir Druzenko (vvd) · 148.0.2_2
www/librewolf: Return PORTREVISION - was deleted by mistake instead of bump

PR:		293914
Reported by:	Ale <discipline@tiscali.it>
MFH:		2026Q1
6be64dd4d5
Vladimir Druzenko (vvd) · 148.0.2
www/librewolf: Update 148.0.2-1 => 148.0.2-3

Commit log:
https://codeberg.org/librewolf/source/compare/148.0.2-1...148.0.2-3

PR:	293914
MFH:	2026Q1
ae8d220393
Charlie Li (vishwin) · 148.0.2_1
devel/wasi-libc: bump consumer PORTREVISIONs after update
cec47c79e8
Vladimir Druzenko (vvd) · 148.0.2
www/librewolf: Update 147.0.4-1 => 148.0.2-1

Release Notes:
https://www.firefox.com/firefox/148.0/releasenotes/
https://www.firefox.com/firefox/148.0.2/releasenotes/

PR:	293729
MFH:	2026Q1
f32d9c6c6a
Vladimir Druzenko (vvd) · 147.0.4
www/librewolf: Update 147.0.3-2 => 147.0.4-1

Release Notes:
https://www.firefox.com/en-US/firefox/147.0.4/releasenotes/

PR:	293223
MFH:	2026Q1
287a24643c
Vladimir Druzenko (vvd) · 147.0.3_1
www/librewolf: Update 147.0.3-1 => 147.0.3-2

Changelog:
- Fix newtab.

Commit log:
https://codeberg.org/librewolf/source/compare/147.0.3-1...147.0.3-2

PR:	292948
MFH:	2026Q1
47256b5bc2
Vladimir Druzenko (vvd) · 147.0.3
www/librewolf: Update 147.0.2-1 => 147.0.3-1

Release Notes:
https://www.firefox.com/en-US/firefox/147.0.3/releasenotes/

PR:	292948
MFH:	2026Q1
e4cee8fccc
Jan Beich (jbeich) · 147.0.2_2
multimedia/libvpx: update 1.16.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.2..v1.16.0
Reported by:	Repology
939d8775e7
Mikael Urankar (mikael) · 147.0.2_1
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Vladimir Druzenko (vvd) · 147.0.2
www/librewolf: Update 147.0.1-3 => 147.0.2-1

Release Notes:
https://www.firefox.com/en-US/firefox/147.0.2/releasenotes/

PR:	292766
MFH:	2026Q1
5872096a62
Vladimir Druzenko (vvd) · 147.0.1_1
www/librewolf: Update 147.0.1-1 => 147.0.1-3

Changelogs:
https://codeberg.org/librewolf/source/releases/tag/147.0.1-2
https://codeberg.org/librewolf/source/releases/tag/147.0.1-3

PR:	292550
MFH:	2026Q1
bba30da415
Vladimir Druzenko (vvd) · 147.0.1
www/librewolf: Update 146.0.1-1 => 147.0.1-1

Release Notes:
https://www.firefox.com/en-US/firefox/147.0/releasenotes/
https://www.firefox.com/en-US/firefox/147.0.1/releasenotes/

PR:	292525
MFH:	2026Q1
4120999e59