[Bug 1695326] [NEW] Firefox loader hardening

monochromec monochromec at gmail.com
Fri Jun 2 16:45:44 UTC 2017


Public bug reported:

If the ld cache configuration is wrong, the correct shared objects
contained in the package are never found or wrong versions being picked
up.

Example:

libnss3 is defined by a quite a few packages including Thunderbird, libnss3 and Firefox.
Depending on the particular linker cache config, the wrong version may be picked up.

Mitigation: enhance /usr/bin/firefox to explicitely include the correct
path of its shared objects in the loader path (cf. attached patch).

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

** Patch added: "tmp"
   https://bugs.launchpad.net/bugs/1695326/+attachment/4887992/+files/tmp

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1695326

Title:
  Firefox loader hardening

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1695326/+subscriptions



More information about the Ubuntu-mozillateam-bugs mailing list