CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

www/waterfox6.7.6,1

Distilled fork of Firefox

Maintainer
freebsd@sysctl.cz
Packages
waterfox 6.7.6,1
Upstream
up to date
CPE
mozilla:waterfox from the port
WWW
https://www.waterfox.net/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (21)

Show 21 fixed
VuXML entries whose affected range this version has left.

CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107, CVE-2018-5108, CVE-2018-5109, CVE-2018-5110, CVE-2018-5111, CVE-2018-5112, CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116, CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5121, CVE-2018-5122

Commits (200)

Vladimir Druzenko (vvd) · 6.7.6,1
www/waterfox: Update 6.7.5 => 6.7.6

Release Notes:
https://www.waterfox.com/releases/6.7.6/

PR:		299492
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q4
ea3ff13d8c
Mikael Urankar (mikael) · 6.7.5_1,1
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Vladimir Druzenko (vvd) · 6.7.5,1
www/waterfox: Update 6.7.4 => 6.7.5

Release Notes:
https://www.waterfox.com/releases/6.7.5/

PR:		299081
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q4
d05159827a
Vladimir Druzenko (vvd) · 6.7.4,1
www/waterfox: Update 6.7.3 => 6.7.4

Release Notes:
https://www.waterfox.com/releases/6.7.4/

PR:		298816
Sponsored by:	UNIS Labs (vvd, commit patch)
MFH:		2026Q3
dbde4e02b6
Vladimir Druzenko (vvd) · 6.7.3,1
www/waterfox: Update 6.7.1.1 => 6.7.3

Release Notes:
https://www.waterfox.com/releases/6.7.2/
https://www.waterfox.com/releases/6.7.3/

Changelog:
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.2
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.3

PR:		298443
Approved by:	Martin Filla <freebsd@sysctl.cz> (maintainer)
MFH:		2026Q3
a06489e807
Mikael Urankar (mikael) · 6.7.1.1_2,1
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Charlie Li (vishwin) · 6.7.1.1_1,1
devel/wasi-libc: bump consumer PORTREVISIONs after update
b25213c075
Vladimir Druzenko (vvd) · 6.7.1.1,1
www/waterfox: Update 6.7.0-beta.3 => 6.7.1.1

Changelog:
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.0
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.1.1

PR:		298018
Sponsored by:	UNIS Labs
MFH:		2026Q3
c15851b5d6
Vladimir Druzenko (vvd) · 6.7.0.b.3,1
www/waterfox: Update 6.6.16.1 => 6.7.0-beta.3

First 6.7.0 beta moving Waterfox to the ESR 153 platform.

Release Notes:
https://www.waterfox.com/releases/6.7.0-beta.1/
https://www.waterfox.com/releases/6.7.0-beta.2/
https://www.waterfox.com/releases/6.7.0-beta.3/

PR:		297209
Sponsored by:	UNIS Labs
MFH:		2026Q3
66176a33ac
Mikael Urankar (mikael) · 6.6.16.1_1,1
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Vladimir Druzenko (vvd) · 6.6.16.1,1
www/waterfox: Update 6.6.16 => 6.6.16.1

Waterfox 6.6.16.1 is a hotfix for the search rollout:
- Corrects Qwant being selected as the default in unsupported regions.
- Attempts to force Qwant AI answers/summaries to disabled by default.
- Fixes unsupported locale-country query values such as es_US, which
  would result in Qwant refusing to return results.
https://www.waterfox.com/releases/6.6.16/

PR:		296677
Approved by:	Martin Filla <freebsd@sysctl.cz> (maintainer, implicit)
Sponsored by:	UNIS Labs
MFH:		2026Q3
fcb87a5c44
Vladimir Druzenko (vvd) · 6.6.16,1
www/waterfox: Update 6.6.15 => 6.6.16

Release Notes:
https://www.waterfox.com/releases/6.6.16/

PR:		296677
Sponsored by:	UNIS Labs
MFH:		2026Q3
7174383856
Vladimir Druzenko (vvd) · 6.6.15,1
www/waterfox: Update 6.6.14 => 6.6.15

Changelog:
https://www.waterfox.com/releases/6.6.15/

PR:		296124
Sponsored by:	UNIS Labs
MFH:		2026Q2
e0ee4ee4d4
Vladimir Druzenko (vvd) · 6.6.14,1
www/waterfox: Fix build with newer rust-cbindgen 0.29.4

https://github.com/mozilla/cbindgen/issues/1165

PR:		296065
Fixes:		625b0ffb538d (devel/rust-cbindgen: update to 0.29.4)
Sponsored by:	UNIS Labs
6309773cf3
Vladimir Druzenko (vvd) · 6.6.14,1
www/waterfox: Update 6.6.13 => 6.6.14

Changelog:
https://www.waterfox.com/releases/6.6.14/

PR:		296030
Sponsored by:	UNIS Labs
MFH:		2026Q2
850a3d0532
Mikael Urankar (mikael) · 6.6.13_1,1
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Vladimir Druzenko (vvd) · 6.6.13,1
www/waterfox: Update 6.6.12 => 6.6.13

Release Notes:
https://www.waterfox.com/releases/6.6.13/

PR:		295436
Sponsored by:	UNIS Labs
MFH:		2026Q2
ca8fb53dcf
Vladimir Druzenko (vvd) · 6.6.12_2,1
www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:		295188
Sponsored by:	UNIS Labs
MFH:		2026Q2
c43948c764
Vladimir Druzenko (vvd) · 6.6.12_1,1
www/waterfox: Move patch for fix build with rust 1.95.0 to correct place

PR:		294615
Approved by:	portmgr (build fix blanket)
Fixes:		980ffbc257a6 (Fix build with rust 1.95.0)
Sponsored by:	UNIS Labs
34cbb67b98
Mikael Urankar (mikael) · 6.6.12_1,1
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 6.6.12,1
www/waterfox: Fix build with rust 1.95.0

Import part of upstream patch [1] to fix the following error,
upstream PR at [2]:

error[E0599]: no method named `select` found for struct `Mask<T, N>` in the current scope
  --> third_party/rust/encoding_rs/src/x_user_defined.rs:23:56

[1] https://hg-edge.mozilla.org/mozilla-central/rev/ec1dd05fd578
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=2033279

PR:		294615
Approved by:	portmgr (build fix blanket)
980ffbc257
Vladimir Druzenko (vvd) · 6.6.12,1
www/waterfox: Update 6.6.11 => 6.6.12

Release Notes:
https://www.waterfox.com/releases/6.6.12/

PR:		294734
Sponsored by:	UNIS Labs
MFH:		2026Q2
bd414cbdd0
Vladimir Druzenko (vvd) · 6.6.11,1
www/waterfox: Update 6.6.10 => 6.6.11

Changelog:
https://www.waterfox.com/releases/6.6.11/

PR:		294352
Sponsored by:	UNIS Labs
MFH:		2026Q2
fcf59f4d3a
Vladimir Druzenko (vvd) · 6.6.10,1
www/waterfox: Update 6.6.9 => 6.6.10

Release Notes:
https://www.waterfox.com/releases/6.6.10/

PR:	294042
MFH:	2026Q1
ebfa3e94d4
Mikael Urankar (mikael) · 6.6.9_2,1
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Charlie Li (vishwin) · 6.6.9_1,1
wasi: consistently use the wasm32-wasip1 triple

The WebAssembly community have reclaimed wasm32-wasi, without suffix,
for a future WASI 1.0 standard. The first version of WASI, 0.1, is
now wasm32-wasip1 in triple form, WASI 0.2 is wasm32-wasip2, etc.
Starting LLVM 22 the non-suffixed form is deprecated, aligning with
Rust and Go:

https://github.com/llvm/llvm-project/issues/165344
https://blog.rust-lang.org/2024/04/09/updates-to-rusts-wasi-targets/

The Mozilla build system's WASI checks always pass -Werror so
configure fails when the non-suffixed target/triple is passed using
LLVM 22:

Using wasi sysroot in /usr/local/share/wasi-sysroot
checking for the wasm C compiler... /usr/local/bin/clang22
checking whether the wasm C compiler can be used... yes
checking the wasm C compiler version... 22.1.0
checking the wasm C compiler works... yes
checking the wasm C compiler can find wasi headers... yes
checking the wasm C linker can find wasi libraries... yes
checking for the wasm C++ compiler... /usr/local/bin/clang++22
checking whether the wasm C++ compiler can be used... yes
checking the wasm C++ compiler version... 22.1.0
checking the wasm C++ compiler works... yes
checking the wasm C++ compiler can find wasi headers... yes
checking the wasm C++ linker can find wasi libraries... yes
checking for clock() in wasi sysroot... no
checking for emulated clock() in wasi sysroot...
DEBUG: Creating `/tmp/conftest0vk5p554.c` with content:
DEBUG: | #include <time.h>
DEBUG: | int
DEBUG: | main(void)
DEBUG: | {
DEBUG: | clock();
DEBUG: |   ;
DEBUG: |   return 0;
DEBUG: | }
DEBUG: Executing: `/usr/local/bin/clang22 --target=wasm32-wasi /tmp/conftest0vk5p554.c -Werror -D_WASI_EMULATED_PROCESS_CLOCKS -lwasi-emulated-process-clocks --sysroot=/usr/local/share/wasi-sysroot`
DEBUG: The command returned non-zero exit status 1.
DEBUG: Its error output was:
DEBUG: | clang: error: argument '--target=wasm32-wasi' is deprecated, use --target=wasm32-wasip1 instead [-Werror,-Wdeprecated]
ERROR: Can't find clock() in wasi sysroot.

Mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=2023597

Bump all WASI ports for the new triple. Adjust consumers accordingly
but do not bump, since non-suffixed and p1 are identical as a
transition measure.
7c5b2039a4
Charlie Li (vishwin) · 6.6.9_1,1
devel/wasi-libc: bump consumer PORTREVISIONs after update
cec47c79e8
Vladimir Druzenko (vvd) · 6.6.9,1
www/waterfox: Update 6.6.8 => 6.6.9

Release Notes:
https://www.waterfox.com/releases/6.6.9/

PR:	293442
MFH:	2026Q1
87221e708f
Jan Beich (jbeich) · 6.6.8_2,1
multimedia/libvpx: update 1.16.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.15.2..v1.16.0
Reported by:	Repology
939d8775e7
Mikael Urankar (mikael) · 6.6.8_1,1
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Vladimir Druzenko (vvd) · 6.6.8,1
www/waterfox: Update 6.6.7 => 6.6.8

Release Notes:
https://www.waterfox.com/releases/6.6.8/

PR:	292422
MFH:	2025Q4
aa0518eb59
Vladimir Druzenko (vvd) · 6.6.7_2,1
www/waterfox: Add ffmpeg8 support

Also a new distinfo file because upstream silently replaced the
distfiles.

PR:	292413
MFH:	2025Q4
c0976b7347
Charlie Li (vishwin) · 6.6.7_1,1
devel/wasi-libc: bump consumer PORTREVISIONs after update
c67a1a28d3
Vladimir Druzenko (vvd) · 6.6.7,1
www/waterfox: Update 6.6.6 => 6.6.7

Release Notes:
https://www.waterfox.com/releases/6.6.7/

PR:	291857
MFH:	2025Q4
a7cd7755a3
Mikael Urankar (mikael) · 6.6.6_1,1
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Vladimir Druzenko (vvd) · 6.6.6,1
www/waterfox: Update 6.6.5.1 => 6.6.6

Release Notes:
https://www.waterfox.net/docs/releases/6.6.6/

PR:	291547
MFH:	2025Q4
c1497f65df
Vladimir Druzenko (vvd) · 6.6.5.1,1
www/waterfox: Update 6.6.5 => 6.6.5.1

Changelog:
https://www.waterfox.net/docs/releases/6.6.5.1/

PR:	291226
MFH:	2025Q4
030b6f5460
Charlie Li (vishwin) · 6.6.5_1,1
devel/wasi-libc: bump consumer PORTREVISIONs after update
4f2fef9a0a
Vladimir Druzenko (vvd) · 6.6.5,1
www/waterfox: Update 6.6.4 => 6.6.5

Changelog:
https://www.waterfox.net/docs/releases/6.6.5/

PR:	290947
MFH:	2025Q4
73e55e2a9d
Mikael Urankar (mikael) · 6.6.4_1,1
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Vladimir Druzenko (vvd) · 6.6.4,1
www/waterfox: Update 6.6.3 => 6.6.4

Release Notes:
https://www.waterfox.net/docs/releases/6.6.4/

PR:	290123
MFH:	2025Q4
e98096e083
Mikael Urankar (mikael) · 6.6.3_1,1
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Vladimir Druzenko (vvd) · 6.6.3,1
www/waterfox: Update 6.6.2 => 6.6.3

Changelog:
https://www.waterfox.net/docs/releases/6.6.3/

PR:	289164
MFH:	2025Q3
b18bd76e53
Mikael Urankar (mikael) · 6.6.2_1,1
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Vladimir Druzenko (vvd) · 6.6.2,1
www/waterfox: Update 6.6.1 => 6.6.2

Changelog:
https://www.waterfox.net/docs/releases/6.6.2/

PR:	289164
MFH:	2025Q3
90edfceb91
Charlie Li (vishwin) · 6.6.1_1,1
devel/wasi-libc: bump consumer PORTREVISIONs after update
c669bf1c7a
Vladimir Druzenko (vvd) · 6.6.1,1
www/waterfox: Update 6.6.0-beta-6 => 6.6.1

Changelogs:
https://www.waterfox.net/docs/releases/6.6.0/
https://www.waterfox.net/docs/releases/6.6.1/

PR:	288981
MFH:	2025Q3
2507471e94
Vladimir Druzenko (vvd) · 6.6.0.b.6,1
www/waterfox: Update 6.6.0-beta-5 => 6.6.0-beta-6

Changelog:
https://www.waterfox.net/docs/releases/6.6.0-beta-6/

PR:	288870
MFH:	2025Q3
752d3f3e2f
Vladimir Druzenko (vvd) · 6.6.0.b.5,1
www/waterfox: Update 6.6.0-beta-3 => 6.6.0-beta-5

Changelogs:
https://www.waterfox.net/docs/releases/6.6.0-beta-4/
https://www.waterfox.net/docs/releases/6.6.0-beta-5/

PR:	288769
MFH:	2025Q3
abd83a6b10
Vladimir Druzenko (vvd) · 6.6.0.b.3_1,1
www/{librewolf,tor-browser,waterfox}: Fix runtime on arm64 (gecko-based ports)

Reports of crashes on arm64 with aslr enabled.

PR:	271081 288512 288516 288504
MFH:	2025Q3
9add38eb0b