this post was submitted on 27 Oct 2024
357 points (97.9% liked)

Technology

60007 readers
3315 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago
MODERATORS
L3s
[email protected]
[email protected]
L4s
enu
357
The Fennec Android browser is currently behind on Firefox security updates, deemed unsafe by F-droid (leminal.space)
submitted 1 month ago by [email protected] to c/technology
54 comments fedilink hide all child comments
 

If, like me, you've relied on Fennec as a more tolerable version of Firefox for Android, you may have gotten some bad news in the latest F-droid update cycle.

Fennec has fallen so far behind on updates that serious security patches implemented by Mozilla in Firefox haven't been applied to the fork, and Fennec is therefore still breachable.

The developer responded two weeks ago that they were "short on time", and there still isn't a new, secure version available. This appears to be due to that recurring weak link in open source development: small teams, confronted by real life demands like time and money?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 1 month ago* (last edited 1 month ago) (3 children)

I have Mull installed 129.0.2 https://f-droid.org/repo/us.spotco.fennec_dos_21290220.apk

Should I uninstall?

Is there any way to export bookmarks from mull, so that I can uninstall it?

[–] allan 10 points 1 month ago

There are newer builds sooner in the divestos repository https://divestos.org/pages/our_apps#repos

[–] [email protected] 5 points 1 month ago

Honestly, just wait a little bit, both Fennec and Mull will get it sorted soon and you'll see an update. If the vulnerability is worrying you that much, I'd honestly just download the standard Firefox APK for the time being and use it while waiting on Mull to update on fdroid. It likely won't be more than a couple days.

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago)

I used the Mozilla account sync thing that's built in but it didn't restore the extensions.

bookmarks and passwords seem to have copied over to the DivestOS one though.