this post was submitted on 27 Oct 2024
351 points (97.8% liked)

Technology

58970 readers
4429 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

If, like me, you've relied on Fennec as a more tolerable version of Firefox for Android, you may have gotten some bad news in the latest F-droid update cycle.

Fennec has fallen so far behind on updates that serious security patches implemented by Mozilla in Firefox haven't been applied to the fork, and Fennec is therefore still breachable.

The developer responded two weeks ago that they were "short on time", and there still isn't a new, secure version available. This appears to be due to that recurring weak link in open source development: small teams, confronted by real life demands like time and money?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 2 days ago* (last edited 2 days ago) (3 children)

I have Mull installed 129.0.2 https://f-droid.org/repo/us.spotco.fennec_dos_21290220.apk

Should I uninstall?

Is there any way to export bookmarks from mull, so that I can uninstall it?

[–] [email protected] 10 points 2 days ago

There are newer builds sooner in the divestos repository https://divestos.org/pages/our_apps#repos

[–] [email protected] 5 points 2 days ago

Honestly, just wait a little bit, both Fennec and Mull will get it sorted soon and you'll see an update. If the vulnerability is worrying you that much, I'd honestly just download the standard Firefox APK for the time being and use it while waiting on Mull to update on fdroid. It likely won't be more than a couple days.

[–] [email protected] 2 points 2 days ago* (last edited 2 days ago)

I used the Mozilla account sync thing that's built in but it didn't restore the extensions.

bookmarks and passwords seem to have copied over to the DivestOS one though.