F-Droid

8145 readers

14 users here now

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

Website | GitLab | Mastodon

Matrix space | forum | IRC

founded 3 years ago

MODERATORS

[email protected]

Vulnerability in Fennec (lemmy.world)

submitted 3 weeks ago* (last edited 3 weeks ago) by [email protected] to c/[email protected]

22 comments fedilink hide all child comments

any info on this?

edit: I just saw there's already a post
https://lemmy.sdf.org/post/24219041

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 6 points 3 weeks ago (2 children)

Wasn't Fennec a couple of major revisions behind due to build issues, and one of said major revisions was a zero-day fix, so yeah, Fennec would be vulnerable.

(I dumped it about two weeks ago once I noticed that it was behind the security patch curve.)

[–] possiblylinux127 5 points 3 weeks ago (1 children)

Next time make a post 2 weeks ago. Best to voice concern over things you notice. The person who discovered the XZ backdoor did that and it caught a disaster.

[–] [email protected] 1 points 2 weeks ago

Fennec being a delayed build has been a thing for years at this point: it's a pain in the ass to get built and in f-droid. I mean, just google 'fennec f-droid out of date' and you'll see people talking about this going back to 2020.

I didn't exactly find a stunning shocking unknown thing: Fennec is slow on builds, it got outdated, there was a zero-day in older Firefox versions, and so bam: there's a security issue in Fennec.

Might be worth adding the Firefox security RSS feed for anyone using Firefox or a derivative browser so that you've got the best information about issues like this.

[–] [email protected] 1 points 3 weeks ago (1 children)

So what do you use instead?

[–] [email protected] 7 points 3 weeks ago (1 children)

I just installed standard Firefox until they've sorted out their build issues.

[–] [email protected] 2 points 3 weeks ago (3 children)

From the Play store/Aurora, or is there another way? I remember an app on fdroid that would install different mozilla browsers but I can't find it

[–] [email protected] 5 points 3 weeks ago (1 children)

I'm not deGoogled, so I just did the play store version, so I'm not sure where else you might grab it.

[–] [email protected] 2 points 2 weeks ago

APK Mirror?

[–] [email protected] 5 points 3 weeks ago (1 children)

You're thinking of FFUpdater

[–] [email protected] 3 points 3 weeks ago

That's the one. It doesn't come up when I search either firefox or mozilla

[–] [email protected] 3 points 3 weeks ago

Iceraven is one alternative worth considering.