Package: dillo

Version: 3.0.5-7.1

Severity: important

Tags: security

Hello,

Currently, the Dillo browser open "https://dillo[.]org/"; when clicking on the 
Home button. However, this website is no longer under Dillo developers control 
and distribute unofficial (malicious?) versions of Dillo. The new Dillo 
homepage is "https://dillo-browser.org/";.

I suggest to:

- Stop checking for new version of Dillo in "https://www.dillo[.]org/download/"; 
and use their new git url "https://git.dillo-browser.org/dillo/refs/";

- Replace "https://web.archive.org/web/20221006082222/https://www.dillo.org/"; 
by "https://dillo-browser.org/"; as the homepage of the package (as proposed 
here: https://salsa.debian.org/debian/dillo/-/merge_requests/2/diffs)

- Add the option home="about:splash" in /etc/dillo/dillorc so clicking on the 
Home button open the welcome page instead of dillo[.]org (I tried 
home="http://dillo-browser.org/"; but it doesn't work)

There are also a lot of links to old website inside Dillo documentation and 
source code so another option would be to patch Dillo source for stable (but 
with which link? as official website doesn't work on this version) and to 
upgrade to the latest version that already changed all the links.

Dillo development active again since 2024 and there are also a few new releases.

Thank you

Antoine "Impromptux"

Reply via email to