Hello Monochromec
Thank you for submitting this bug and reporting a problem with Firefox loader 
hardening.  You made this bug report some time ago and Ubuntu and Firefox have 
been updated since then. 

Could you confirm that this is no longer a problem and that we can close the 
ticket? 
If it is still a problem, are you still interested in finding a solution to 
this bug? 
If you are, could you let us know and, run the following (only once):
apport-collect 1695326
and upload the updated logs and and any other logs that are relevant for this 
particular issue. 

Thank you again for helping make Ubuntu and Firefox better. 
G

** Changed in: firefox (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1695326

Title:
  Firefox loader hardening

Status in firefox package in Ubuntu:
  Incomplete

Bug description:
  If the ld cache configuration is wrong, the correct shared objects
  contained in the package are never found or wrong versions being
  picked up.

  Example:

  libnss3 is defined by a quite a few packages including Thunderbird, libnss3 
and Firefox.
  Depending on the particular linker cache config, the wrong version may be 
picked up.

  Mitigation: enhance /usr/bin/firefox to explicitely include the
  correct path of its shared objects in the loader path (cf. attached
  patch).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to