[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
OK, thanks for the feedback. I will close the ticket now. Have a great day! :) G Closed per reporter's feedback. ** Changed in: firefox (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: Invalid Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
It worked on the release which I flagged it for. As this doesn't surface now, I see little point in verifying this with a working environment which I would have to heavily tweak in order to reproduce this now. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: Incomplete Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
Hi Monochromec, I am new to bug triaging and have no idea how to confirm for the above patch. Could you please confirm the above patch so we can close this ticket? Thanks G -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: Incomplete Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
Hasn't surfaces in recent releases but I haven't checked the presence of my suggested patch in the distribution. I would recommend confirming the above patch before closing this ticket. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: Incomplete Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
Forgive me, Monochromec, I am just trying to clear up the old tickets. I just started triaging bugs two weeks ago. With the older tickets, we put the status to "Incomplete" since people's email addresses may have changed. Incomplete status automatically closes the ticket after 60 days of inactivity. Is this still a problem in the latest Firefox version or can we close this ticket? Again, sorry that this ticket did not get addressed. Take care G -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: Incomplete Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
Amazing that it only took slightly more than a year to move this from New to Incomplete. That's the spirit for such an important project such as FF. :-) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: Incomplete Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
Hello Monochromec Thank you for submitting this bug and reporting a problem with Firefox loader hardening. You made this bug report some time ago and Ubuntu and Firefox have been updated since then. Could you confirm that this is no longer a problem and that we can close the ticket? If it is still a problem, are you still interested in finding a solution to this bug? If you are, could you let us know and, run the following (only once): apport-collect 1695326 and upload the updated logs and and any other logs that are relevant for this particular issue. Thank you again for helping make Ubuntu and Firefox better. G ** Changed in: firefox (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: Incomplete Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1695326] Re: Firefox loader hardening
The attachment "tmp" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1695326 Title: Firefox loader hardening Status in firefox package in Ubuntu: New Bug description: If the ld cache configuration is wrong, the correct shared objects contained in the package are never found or wrong versions being picked up. Example: libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox. Depending on the particular linker cache config, the wrong version may be picked up. Mitigation: enhance /usr/bin/firefox to explicitely include the correct path of its shared objects in the loader path (cf. attached patch). To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
