| Git Clone URL: | https://aur.archlinux.org/mercury-browser-bin.git (read-only, click to copy) |
|---|---|
| Package Base: | mercury-browser-bin |
| Description: | CVE-2024-9680 - switch to extra/firefox |
| Upstream URL: | https://www.mozilla.org/en-US/security/advisories/mfsa2024-51 |
| Submitter: | sandboiii |
| Maintainer: | xiota |
| Last Packager: | xiota |
| Votes: | 16 |
| Popularity: | 0.21 |
| First Submitted: | 2023-03-22 12:59 (UTC) |
| Last Updated: | 2024-12-30 22:08 (UTC) |
After nearly three months, the aforementioned security vulnerability still has not been resolved. I strongly recommend anyone still using this browser switch to something else.
To protect any remaining users, this package has been disabled and redirects to extra/firefox.
Warning: At the time of this writing, Mercury browser has not been updated for CVE-2024-9680. There have been "reports of this vulnerability being exploited in the wild."
Users are strongly recommended to use a fork that has been updated.
@mmtech2012 The SSE4 version didn't exist before, so I didn't test it. However, if AVX/AVX2 don't improve performance over SSE3, I doubt SSE4 would. The result would be a package that doesn't work for some people (whose computers don't support SSE4) and don't work any better for everyone else.
Hi and thanks for the package. you say no performance benefit from using the AVX/AVX2 versions. why not SSE4?
I tried to build this today but, unfortunately, it's attempting to download mercury-browser_122.0.2_amd64.deb which is definitely not in Alex's Git repo. I wasn't sure which file it's supposed to get as I've never used Mercury before so I shall wait to see how this is fixed and get it later.
Linux builds are pulling 121.0.2 which does not exist
Btw, I copied the firefox-beta-bin package build script, but didn't credit the authors in this package. They are probably should be mentioned in PKGBUILD.
Pinned Comments
xiota commented on 2024-12-29 08:36 (UTC) (edited on 2024-12-30 22:09 (UTC) by xiota)
After nearly three months, the aforementioned security vulnerability still has not been resolved. I strongly recommend anyone still using this browser switch to something else.
To protect any remaining users, this package has been disabled and redirects to
extra/firefox.xiota commented on 2024-11-26 19:09 (UTC)
Warning: At the time of this writing, Mercury browser has not been updated for CVE-2024-9680. There have been "reports of this vulnerability being exploited in the wild."
Users are strongly recommended to use a fork that has been updated.