• kbal@fedia.io
    link
    fedilink
    arrow-up
    19
    ·
    1 month ago

    It’s probably related to this: https://gitlab.com/relan/fennecbuild/-/merge_requests/63

    F-droid Fennec had build problems lately due to google removing big dependencies from its android package repo or whatever, so it’s well out of date for now. The latest version there has at least that one well-known security problem that was in the news a few weeks ago. I don’t know why you’re getting notified about it now, I have it installed and didn’t see that. But if you’re risk-averse then you probably shouldn’t currently be using it to visit websites that might be malicious.

    Recent comments over there suggest that progress is being made at last.

    • kixik@lemmy.ml
      link
      fedilink
      arrow-up
      3
      ·
      1 month ago

      I use mull from f-droid, and f-droid started showing that when upgrading Today to version 1.21.1. No idea why until this f-droid app upgrade.

      I guess the mull issue is the same. Both fennec and mull are at the same version on f-droid, 129.0.2, and both show in their anti-features that the app contains a known security vulnerability, indicating firefox has fixed several security vulnerabilities since 130.

      Is it right to hope that once fennec can get distributed on f-droid, then mull will follow? I’m not planning to move away from mull.

      Thanks !

      • merde alors@sh.itjust.works
        link
        fedilink
        arrow-up
        3
        ·
        edit-2
        1 month ago

        I use mull from f-droid, and f-droid started showing that when upgrading Today to version 1.21.1. No idea why until this f-droid app upgrade.

        I guess the mull issue is the same. Both fennec and mull are at the same version on f-droid, 129.0.2, and both show in their anti-features that the app contains a known security vulnerability, indicating firefox has fixed several security vulnerabilities since 130.

        divestOS repo is on 131.0.3 for mull

        • kixik@lemmy.ml
          link
          fedilink
          arrow-up
          4
          ·
          1 month ago

          Oh, you mean using divestos-fdroid-repo? Well, before it became part of official f-droid I used to do that. I’m not sure how long it’ll take to fix the official f-droid.org builds though, since I’d like to go back to it. The sad thing is that to move from one repo to another one loses all configurations/settings, :( But perhaps it’s truly unsafe to wait until the build on f-droid.org gets fixed, if it ever does it.

          Anyone aware if there are efforts to get it back building for f-droid.org? Does it depend on the Fennec issue getting resolved?