App Downloadfilesweb have DisabledAlgorithm and KnownVuln. What is this?

[ismo]

I’d like to know what that means. And how can I fix it?
Thank you

[mimi89999]

Many old, unmaintained apps have been archived

F-Droid relies on the standard tools for verifying the signatures of APKs, these are Oracle Java's jarsigner and Google Android's apksigner. Both of those tools recently disabled the MD5 algorithm used in the APK signatures which are an essential part of the security of the Android platform. That means that any APK signature that uses MD5 is now considered unsigned by jarsigner and apksigner, and unsigned APKs are considered uninstallable. That means that apps that were built a long time ago…

[k3b]

See also https://gitlab.com/fdroid/fdroiddata/issues/810.

According to https://f-droid.org/wiki/page/Category:Apps_with_DisabledAlgorithm_antifeature
currently there are more than 1300 apps with this antifeature including many that where recendly build.

I.e https://f-droid.org/wiki/page/de.k3b.android.toGoZip

• last version available in fdroid app store
• last build on 2017-07-25 has this antifeature.