BrowserWorks / Waterfox-Classic

The Waterfox Classic repository, for legacy systems and customisation.
https://classic.waterfox.net
Mozilla Public License 2.0
175 stars 34 forks source link

CVE-2023-5217 CVE-2023-4863 any chance to get security updates for waterfox classic? #209

Open c33s opened 9 months ago

c33s commented 9 months ago

https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/

High CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx. Reported by Clément Lecigne of Google's Threat Analysis Group on 2023-09-25

what about a general dependency update as far as possible?

hawkeye116477 commented 5 months ago

See the last date of update for Classic. To summarize, it's no longer developed. I think that MrAlex should rather archive project to make it clear.