222
"We found a vulnerability..." (lemmy.sdf.org)
submitted 2 years ago by to c/fdroid@lemmy.ml
61 comments fedilink hide all child comments
 

Can I get more info on why these are showing up? I've never seen such a thing on F-Droid before.

you are viewing a single comment's thread
view the rest of the comments
[–] 21 points 2 years ago (6 children)

Are these two from the same maintainer? If not, considering that they both use Firefox Android as their base, does this mean there is a vulnerability in Firefox Android?

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 36 points 2 years ago (1 child)

    There was and it was fixed by the looks of it. Guessing these apps have not urgently pulled the fixes in and released an update, so F-droid is urging people not to use the apps until so

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 21 points 2 years ago* (last edited 2 years ago) (3 children)

    Yes, there was a remote code execution vulnerability in the CSS engine of firefox a little while ago. If you're on desktop version 131 or lower, update to 131.0.3 when possible. I don't know how the versioning works for the Android versions here...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 11 points 2 years ago (2 children)

    173? What happened to firefox versions? We just started the 130s

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 13 points 2 years ago* (1 child)

    shit, woops. I've got memory issues, my bad. Let me fix that rq. Thanks for catching it.

    https://nvd.nist.gov/vuln/detail/CVE-2024-9680

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 9 points 2 years ago

    Yeah that seems about right.

    I don't know how the versioning works for the Android versions here...

    Android has the same versions as desktop here, which is why there is no differentiation. The main chunk of firefox is platform independent (and even used in thunderbird too).

    So any firefox android app and fork thereof needs that version 131.0.3+ too (unless it is esr which is 128 currently).

  • permalink
  • fedilink
  • source
  • parent