F-Droid

8100 readers

75 users here now

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

Website | GitLab | Mastodon

Matrix space | forum | IRC

founded 3 years ago

MODERATORS

[email protected]

Vulnerability in Fennec (lemmy.world)

submitted 1 week ago* (last edited 1 week ago) by [email protected] to c/[email protected]

22 comments fedilink hide all child comments

any info on this?

edit: I just saw there's already a post
https://lemmy.sdf.org/post/24219041

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 1 week ago (1 children)

I use mull from f-droid, and f-droid started showing that when upgrading Today to version 1.21.1. No idea why until this f-droid app upgrade.

I guess the mull issue is the same. Both fennec and mull are at the same version on f-droid, 129.0.2, and both show in their anti-features that the app contains a known security vulnerability, indicating firefox has fixed several security vulnerabilities since 130.

Is it right to hope that once fennec can get distributed on f-droid, then mull will follow? I'm not planning to move away from mull.

Thanks !

[–] [email protected] 3 points 1 week ago* (last edited 1 week ago) (1 children)

I use mull from f-droid, and f-droid started showing that when upgrading Today to version 1.21.1. No idea why until this f-droid app upgrade.

I guess the mull issue is the same. Both fennec and mull are at the same version on f-droid, 129.0.2, and both show in their anti-features that the app contains a known security vulnerability, indicating firefox has fixed several security vulnerabilities since 130.

divestOS repo is on 131.0.3 for mull

[–] [email protected] 4 points 1 week ago (1 children)

Oh, you mean using divestos-fdroid-repo? Well, before it became part of official f-droid I used to do that. I'm not sure how long it'll take to fix the official f-droid.org builds though, since I'd like to go back to it. The sad thing is that to move from one repo to another one loses all configurations/settings, :( But perhaps it's truly unsafe to wait until the build on f-droid.org gets fixed, if it ever does it.

Anyone aware if there are efforts to get it back building for f-droid.org? Does it depend on the Fennec issue getting resolved?

[–] [email protected] 1 points 1 week ago* (last edited 1 week ago) (1 children)

Yes, there are efforts to build these two and more apps affected by the issue preventing updates to be built

The issue preventing updates should be resolved soon thanks to @linsui fixing it!

Source: https://forum.f-droid.org/t/fennec-vulnerability-recommended-to-uninstall/28826/2

[–] [email protected] 1 points 1 week ago (1 children)

Cool, many thanks ! I'll just wait a littloe longer then...

[–] [email protected] 1 points 1 week ago* (last edited 1 week ago) (1 children)

I'm not sure that's a great idea. I understand wanting to avoid the hassle of reinstalling Mull and having to go through all the Settings again (I just did that a couple of days ago), so if you want to keep your current F-Droid Mull install I'd recommend installing another updated flavour of Firefox, like Fennec or Iceraven, using FFUpdater (https://f-droid.org/packages/de.marmaro.krt.ffupdater/) and using that one until the updated Mull is pushed to the F-Droid official repository.

[–] [email protected] 1 points 1 week ago

good idea, thanks !