Firefox Klar - "This app contains a known security vulnerability"

Apps
1

Regarding
https://f-droid.org/en/packages/org.mozilla.klar/ (latest as of posting: 8.4.0 (241) - Added on 2020-06-15)
it says below: “This app contains a known security vulnerability”.
Is this because it’s not the latest version, or why does it say that?

1 Like
2

Also strange/inconsistent: From the Klar page given above, following the “Known Vulnerability” link, then following the link to “list of apps with known vulnerability”, only muPdf (2 versions) is on the list; Klar is not.

https://f-droid.org/wiki/page/Category:Apps_with_KnownVuln_antifeature

1 Like
3

No, the metadata does not have KnownVuln for 8.4.0, must be some other error… report this to fdroid-website

4

For the record: it doesn’t happen just on the website: my F-Droid app list the KnownVul antifeature for Firefox Klar in the official repo for a while.

5

Indeed, @webdev thoughts?

6

Is it a leftover from the January vulnerability? I remember it took F-Droid a long time to publish a new version b/c of Mozilla’s crappy code or smth. I ended up switching to Mozilla’s own APK’s. I’ve noticed F-Droid’s Klar was eventually updated.

FWIW 8.4.0 is not the most recent version, but definitely newer than the fix for January’s vulnerability that affected all FF versions, desktop & mobile.

7

Yes and we had the updated AntiFeatures icons added in the meantime

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.