#1149537 Home page is no longer owned by Dillo team

Package:
dillo
Source:
dillo
Description:
Small and fast web browser
Submitter:
Date:
2026-09-30 13:39:02 UTC
Severity:
normal
#1149537#5
Date:
2026-09-30 13:32:13 UTC
From:
To:
Version: 3.0.5-7.1

Severity: important

Tags: security

Hello,

Currently, the Dillo browser open "https://dillo[.]org/" when clicking on the Home button. However, this website is no longer under Dillo developers control and distribute unofficial (malicious?) versions of Dillo. The new Dillo homepage is "https://dillo-browser.org/".

I suggest to:

- Stop checking for new version of Dillo in "https://www.dillo[.]org/download/" and use their new git url "https://git.dillo-browser.org/dillo/refs/"

- Replace "https://web.archive.org/web/20221006082222/https://www.dillo.org/" by "https://dillo-browser.org/" as the homepage of the package (as proposed here: https://salsa.debian.org/debian/dillo/-/merge_requests/2/diffs)

- Add the option home="about:splash" in /etc/dillo/dillorc so clicking on the Home button open the welcome page instead of dillo[.]org (I tried home="http://dillo-browser.org/" but it doesn't work)

There are also a lot of links to old website inside Dillo documentation and source code so another option would be to patch Dillo source for stable (but with which link? as official website doesn't work on this version) and to upgrade to the latest version that already changed all the links.

Dillo development active again since 2024 and there are also a few new releases.

Thank you

Antoine "Impromptux"