Hello Jan, there's too little information here to really say what's
going on.

I don't know what your university's firewall rules are telling us.

It's certainly possible that Firefox's fix for CVE-2017-5446 has
regressed in the last year and a half, but without further evidence that
this is infact related to what your firewall system is trying to tell
us, it's probably best to not go down this route too far.

Can you test other browsers? Can you capture the network traffic?

Thanks

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5446

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1804486

Title:
  firefox 63.0 out of bounds read/or wrong firewall rule

Status in firefox package in Ubuntu:
  Incomplete

Bug description:
  On using the application knime the download was intercepted by firewall rules 
of the university network with the following error:
  File-Text_Mozilla-Firefox-HTTP-Index-Format-File-Out-Of-Bounds-Read

  This may be associated by
  https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/#CVE-2017-5446

  Was the mitigation ported/used in firefox 63.0 ?
  Are security updates for common used programs (firefox 63.3 is current 
version) not supported on LTS anymore?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1804486/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to