• priapus@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    It does, but less than Firefox does. Their lack of manpower means delayed updates to fix zero days compared to Firefox. It also means less eyes on any patches introduced, so I’d be more concerned about malicious code being introduced.

    • michaelmrose@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 days ago

      Their lack of manpower means delayed updates to fix zero days compared to Firefox

      From their site:

      LibreWolf is always built from the latest Firefox stable source, for up-to-date security and features along with stability.

      As soon as firefox pushes a release, for instance to fix a security vulnerability, librewolf can immediately rebuild It is literally just firefox with different setting. Delay between firefox release and librewolf release should be negligible. You can verify this by noting that 136.0 was offered on the same day.

      https://codeberg.org/librewolf/source/commit/2b90daeb5aa5a80443f4f7655393f610fb16418a

      https://www.mozilla.org/en-US/firefox/136.0/releasenotes/

      The difference in time between firefox and librewolf security updates is less than the variance between users updating their machines.