Hello Jan, there's too little information here to really say what's going on.
I don't know what your university's firewall rules are telling us. It's certainly possible that Firefox's fix for CVE-2017-5446 has regressed in the last year and a half, but without further evidence that this is infact related to what your firewall system is trying to tell us, it's probably best to not go down this route too far. Can you test other browsers? Can you capture the network traffic? Thanks ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5446 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1804486 Title: firefox 63.0 out of bounds read/or wrong firewall rule Status in firefox package in Ubuntu: Incomplete Bug description: On using the application knime the download was intercepted by firewall rules of the university network with the following error: File-Text_Mozilla-Firefox-HTTP-Index-Format-File-Out-Of-Bounds-Read This may be associated by https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/#CVE-2017-5446 Was the mitigation ported/used in firefox 63.0 ? Are security updates for common used programs (firefox 63.3 is current version) not supported on LTS anymore? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1804486/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
