Package Details: mercury-browser-bin 999-1

Git Clone URL: https://aur.archlinux.org/mercury-browser-bin.git (read-only, click to copy)
Package Base: mercury-browser-bin
Description: CVE-2024-9680 - switch to extra/firefox
Upstream URL: https://www.mozilla.org/en-US/security/advisories/mfsa2024-51
Submitter: sandboiii
Maintainer: xiota
Last Packager: xiota
Votes: 16
Popularity: 0.025002
First Submitted: 2023-03-22 12:59 (UTC)
Last Updated: 2024-12-30 22:08 (UTC)

Pinned Comments

xiota commented on 2024-12-29 08:36 (UTC) (edited on 2024-12-30 22:09 (UTC) by xiota)

After nearly three months, the aforementioned security vulnerability still has not been resolved. I strongly recommend anyone still using this browser switch to something else.

To protect any remaining users, this package has been disabled and redirects to extra/firefox.

xiota commented on 2024-11-26 19:09 (UTC)

Warning: At the time of this writing, Mercury browser has not been updated for CVE-2024-9680. There have been "reports of this vulnerability being exploited in the wild."

Users are strongly recommended to use a fork that has been updated.

Latest Comments

« First ‹ Previous 1 2 3 Next › Last »

sandboiii commented on 2023-11-17 09:48 (UTC)

Hello, I'm not interested in this package anymore. I'm disowning it now. Feel free to adopt it.

sandboiii commented on 2023-10-11 13:38 (UTC)

Ok, I've made a dumb fix and hopefully will remove it in the next release if there are no more problems

takase commented on 2023-10-11 11:05 (UTC) (edited on 2023-10-11 11:08 (UTC) by takase)

This package seems to be broken again, the newly updated linux ZIP file seems to have nested directories, and I need to modify the PKGBUILD, replacing this line:

cp -r mercury_${pkgver}_linux_x64/mercury/ "$pkgdir"/opt/$_pkgname

with:

cp -r mercury_${pkgver}_linux_x64/mercury_${pkgver}_linux_x64/mercury/ "$pkgdir"/opt/$_pkgname

Other than that, a bunch of executables don't have the executable bit set anymore, so I have to go in and set them manually (mercury, mercury-bin, glxtest, vaapitest).

sandboiii commented on 2023-10-09 09:03 (UTC)

@andrew7 fixed

andrew7 commented on 2023-10-09 05:04 (UTC)

symbolic links in /usr/bin/ are broken in v115.4.0 update. package build in pkg folder extracts to mercury_115.3.0_linux_x64 folder

sandboiii commented on 2023-10-08 18:41 (UTC)

@digital_mystik I guess you should ask the developer to provide checksums. Because I don't see much sense adding checksums myself, since file downloaded on my machine can be corrupted or compromised. Also it's easier to bump versions without checksums for me.

digital_mystik commented on 2023-10-07 02:22 (UTC)

hello, any chance of adding the archive checksum to the PKGBUILD? thanks

Aftermath commented on 2023-09-16 11:20 (UTC)

@sandboiii Thanks for maintenance.