❗️ PSA: Update your Tor browser as soon as possible; fixes a security vulnerability Mozilla has had reports of being exploited in the wild

Mozilla Firefox itself and all Mozilla Firefox forks should be updated accordingly once a new build is released.

9 Likes

I shipped this for Mull hours ago fwiw.

Mullvad Browser is also available: Release Mullvad Browser 13.5.7 · mullvad/mullvad-browser · GitHub

Librewolf has not yet updated.

edit: Librewolf is now updated too.

7 Likes

I am glad you replied to this thread because F-Droid for some reason had made F-Droid repository the preferred one to fetch updates and I had not gotten Mull’s update yet. Thanks for the quick update.

LibreWolf build is work in progress, as far as I know.

1 Like

LibreWolf, Floorp have pushed updates as well

1 Like

Tails v6.8.1 is out, shipping Tor Browser v13.5.7 with the hotfix. Second release under Tor project, no less.

2 Likes

Do I need to compile it myself to get it updated? I still don’t see it on F-Droid.

edit: Thank you for your time and efforts in keeping the browser up to date! mull is awesome

2 Likes

You can use DivestOS’s F-Droid repository in your F-Droid client if you want faster updates for Mull or any other app available in there, it is even recommended by Privacy Guides as the installation source for Mull.

Quoting Privacy Guides:

Enable DivestOS’s F-Droid repository to receive updates directly from the developer. Downloading Mull from the default F-Droid repo will mean your updates could be delayed by a few days or longer

3 Likes

i used Obtainim to download it
thank you

2 Likes

@batman
please use F-Droid or F-Droid Basic instead
Obtainium has no support for mirrors and puts unnecessary load on primary servers.
F-Droid.org has over 20 mirrors and DivestOS.org has 7, but using other clients only uses the primary and doesn’t distribute the load across the other mirrors.

here are stats from the past few days of requests to the DivestOS F-Droid repo

3 Likes

Just noticed the official fdroid repo still has version 129.

@Dkama
yes, please see the news: News - DivestOS Mobile

Updated Mull to 131.0.0, has 14+1+25 security fixes from the previous 129.0.2 release. In order to resolve the compilation issue introduced in 130, Mull is now compiled using Mozilla’s prebuilt clang toolchain. This however is incompatible with the F-Droid.org inclusion criteria, so these updates (for now at least) will only be available via the DivestOS.org F-Droid repository. Please note, while this adds a prebuilt dependency, the result does still remain FOSS.

1 Like

Thanks!

Have you considered making Mull available through Accrescent?

Another question, is there a reason that Mulch didn’t get the content blocking from Vanadium? Or you just didn’t have the time to do it yet?

Thanks again…

no

it doesn’t load if the config package isn’t installed into the system due to query issues, not sure why, it should work

1 Like

Not sure we’re talking about the same thing here. I didn’t try the content blocker in Mulch and had it fail to work, in case that’s what you took from my previous post. I’m making a reference to the table in DivestOS.org that says “no” for Mulch and “basic” for Vanadium under Content Blocker.

yes, it is correct, I’m not shipping it because of that bug.

oh, ok, thanks for the clarification

FYI, Guardian Project F-Droid repository CI is fixed so Tor Browser and Tor Browser Alpha both are shipping v14.0 finally.

2 Likes

That’ll explain why F-Droid started flagging Mull up yesterday as having vulnerabilities and recommending to uninstall it?

Don’t install Mull from the normal F-Droid repository

You need add the Official DivestOS repository to F-Droid.

3 Likes

One more question if I may. Why do you say Brave and Cromite have “strong” per-site data isolation and Vanadium and Mulch are at “enhanced”?

Do they not fully enable state partitioning or is it something else?