Upstream has not had any updates since 2025-08. It is based in Firefox ESR 128, which was deprecated by Mozilla 2025-09 and is by now affected by dozens of unfixed CVEs, some of which exploited in wild.
Considered flagging this package but technically it is still up to date with the out-of-date browser.
Maybe maintainer wants to pin an advisory or reconsider the package.
Pinned Comments
konvix commented on 2026-02-17 13:22 (UTC) (edited on 2026-02-17 23:12 (UTC) by konvix)
Upstream has not had any updates since 2025-08. It is based in Firefox ESR 128, which was deprecated by Mozilla 2025-09 and is by now affected by dozens of unfixed CVEs, some of which exploited in wild.
Considered flagging this package but technically it is still up to date with the out-of-date browser.
Maybe maintainer wants to pin an advisory or reconsider the package.
FabioLolix commented on 2023-10-30 16:25 (UTC)
Same as firefox-bin, telegram-desktop-bin these are upstream static binaries https://aur.archlinux.org/packages/firefox-bin#comment-858695