Skip to content

Known security vulnerability

image

image

Fennec_F-Droid___F-Droid_-_Free_and_Open_Source_Android_App_Repository.pdf

Source: F-Droid: org.mozilla.fennec_fdroid

https://f-droid.org/en/docs/Anti-Features/#KnownVuln

https://monitor.f-droid.org/anti-feature/KnownVuln

I verified that do not have other apps having a known security vulnerability.

Firefox has fixed several security vulnerabilities since 130.

Source: fdroid/fdroiddata/commit/b51d9a874a05f89772c891a5a6e0bff1913433b0#b36e47572c79b41fbbb87ec303dd8f47a956e0b8_6_6

has been added on October 21, 2024.

mozilla-mobile/firefox-android

mozilla-mobile/firefox-android/wiki/Home/6dada9a55e4381e00e2876c28575b0eaf13ae093#upcoming-migration-to-mozilla-central

About this app:

  • Version: 131.0.3
  • Updated on: Oct 21, 2024

Source: Play Store: org.mozilla.firefox

https://hg.mozilla.org/mozilla-central

relan/fennecbuild/merge_requests/63

Merge request is opened since September 3, 2024 for 130.0.0 it seems.

131.0.3 (October 14, 2024; 8 days ago)

Source: Wikipedia: Firefox for Android (1251195076)

Last Wikipedia page edit was on 14 October 2024 (source: https://en.wikipedia.org/w/index.php?title=Firefox_for_Android&action=history), so how to get previous wikidata edit?

WikiData: Q550315 (2262213558) > software version identifier 130.0:

  • version type: stable version
  • publication date: 3 September 2024

So it matches merge request date.

What does:

FIREFOX_132_0_0_RELEASE is tagged

precisely technically mean?

Source: fdroid/fdroiddata/merge_requests/16135.

Maybe fdroid/fdroiddata/merge_requests/16135#note_2183538438.

It correctly removes the warning concerning the known security vulnerabity, see fdroid/fdroiddata/merge_requests/16135/diffs#b36e47572c79b41fbbb87ec303dd8f47a956e0b8_7_6. It also adds a new version 132 as expected, see fdroid/fdroiddata/merge_requests/16135/diffs#b36e47572c79b41fbbb87ec303dd8f47a956e0b8_15568_15566.

What about:

The upstream app source code repo contains the app metadata (summary/description/images/changelog/etc) in a Fastlane or Triple-T folder structure

?

Edited by Benjamin Loison