[Solved] Opera Internet Browser - Unknown Status after Update to 54.0.2952.64

OLLI_S

Today I installed on my PC an update for Opera Internet Browser (new version 54.0.2952.64) and VulnDetect detects the installed version correctly.
But the status is Unknown!

Here the information extracted from the EXE file:

File name and path:     D:\PortableApps\PortableApps\OperaPortable\App\Opera\54.0.2952.64\opera.exe
Product Name:           Opera Internet Browser
Internal Name:          Opera
Original Filename:      

File Description:       Opera Internet Browser
Company:                Opera Software
Legal Copyright:        Copyright Opera Software 2018
Legal Trademarks:       
Comments:               

File Version String:    54.0.2952.64
File Version:           54.0.2952.64
Product Version String: 54.0.2952.64
Product Version:        54.0.2952.64

Tom

Yes, Opera are so kind as to leave out information about what version of Chromium they use and they also leave out information about whether it fixes the vulns, that are reported in Chrome.

So right now we have no way of knowing if the latest vulns in Chrome are fixed in Opera, the same goes for Vivaldi. They both only provide sporadic information about this.

Sad really, I kind of like both browsers, but I don't want to use them much personally, if that information isn't reliable.

OLLI_S

So what should we do with this topic?
Mark as solved?

Tom

@olli_s Yes. With the upcoming changes to the rules we will be handling this slightly different, so the communication to the user is more clear.
However, we will always have to display something along the lines of "Unknown", if the vendor isn't clear about security fixes - I know that will be frustrating, but unfortunately, we don't live in a perfect world when it comes to this (that is why VulnDB and VulnDetect is needed)

OLLI_S

I looked up the domains http://vulndb.com and http://vulndb.org
http://vulndb.com seems to be available.
http://vulndb.org is a competitor (so try to get http://vulndb.com)

Tom

@olli_s In fact, right now we are resellers for Risk Based Security (RBS), who owns vulndb.org, so this is not our own product.
We just cooperate with these awesome guys from RBS, two of the guys in the team are my former colleagues from Secunia, so I know that you won't find them better. Thus, we have no desire to start competing with them

OLLI_S

Then tell them to own http://vulndb.com, it seems to be available.

OLLI_S

@Tom I think this issue can be closed?

Tom

@OLLI_S Yes

OLLI_S

OK, I close it