Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

RIP is irrelevant. Spoofing is futile. Your routes will be aggregated. -- Alex Yuriev


computers / alt.comp.software.seamonkey / Re: Off-topic: Firefox vulnerability allowing linux binary corruption?

SubjectAuthor
* Off-topic: Firefox vulnerability allowing linux binary corruption?David H Durgee
`* Off-topic: Firefox vulnerability allowing linux binaryDon Vito Martinelli
 `* Off-topic: Firefox vulnerability allowing linux binaryDavid H Durgee
  `* Off-topic: Firefox vulnerability allowing linux binaryDon Vito Martinelli
   `- Off-topic: Firefox vulnerability allowing linux binaryDavid H Durgee

1
Off-topic: Firefox vulnerability allowing linux binary corruption?

<kib049FkjlmU1@mid.individual.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=779&group=alt.comp.software.seamonkey#779

  copy link   Newsgroups: alt.comp.software.seamonkey
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: dhdurgee@privacy.net (David H Durgee)
Newsgroups: alt.comp.software.seamonkey
Subject: Off-topic: Firefox vulnerability allowing linux binary corruption?
Date: Tue, 25 Jul 2023 16:19:51 -0600
Lines: 20
Message-ID: <kib049FkjlmU1@mid.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net s69SUAwGvpA66gPo37MUSAlXpiFRQZFRqonzrBzAKM0kTLZbeR
Cancel-Lock: sha1:Fkepu2x/CAVhuu7/lWZGZ/mNweQ= sha256:6BlqsCL73tFRamkX8FU85dTma0xUEMiGoTAMBay/U6M=
X-Mozilla-News-Host: snews://news.individual.net:563
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Firefox/91.0 SeaMonkey/2.53.16
 by: David H Durgee - Tue, 25 Jul 2023 22:19 UTC

I just experienced something I had never seen before with Firefox. I am
running Firefox 115.0.2+linuxmint1+una here on linux mint 20.3 with all
current updates applied.

Earlier today I started getting messages in Firefox about a part of the
tab crashing and asking to file an error report. After encountering a
few of these messages I closed Firefox to restart it in hopes of
correcting the problem. Instead I found I could not restart Firefox as
I was getting segfaults. I finally used synaptic to reinstall Firefox.
After this Firefox is now working properly.

Any idea what happened and how to avoid it in the future? I seem to
recall seeing some content on one of the websites I use Firefox for
being gone when I reinstalled and reloaded. Is it possible that a hack
against Firefox was embedded in the content that is now gone?

I use Firefox to deal with websites that refuse to work with SeaMonkey
and use Chromium to address those few that will not work with either.

Dave

Re: Off-topic: Firefox vulnerability allowing linux binary corruption?

<u9rvgp$1j7gg$1@dont-email.me>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=781&group=alt.comp.software.seamonkey#781

  copy link   Newsgroups: alt.comp.software.seamonkey
Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: hyperspace.flyover@vogon.gov.invalid (Don Vito Martinelli)
Newsgroups: alt.comp.software.seamonkey
Subject: Re: Off-topic: Firefox vulnerability allowing linux binary
corruption?
Date: Wed, 26 Jul 2023 22:26:00 +0200
Organization: A noiseless patient Spider
Lines: 33
Message-ID: <u9rvgp$1j7gg$1@dont-email.me>
References: <kib049FkjlmU1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 26 Jul 2023 20:26:01 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="8ce21b09896d39a3dbc1c33fbbbe9b5b";
logging-data="1678864"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/dM59arFsRzKYtNalvXbwzrcBMn6ZHPdM="
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
SeaMonkey/2.53.16
Cancel-Lock: sha1:w2Pj9vGeyf3GQ2mpWZhrJBWByIo=
In-Reply-To: <kib049FkjlmU1@mid.individual.net>
 by: Don Vito Martinelli - Wed, 26 Jul 2023 20:26 UTC

David H Durgee wrote:
> I just experienced something I had never seen before with Firefox.  I am
> running Firefox 115.0.2+linuxmint1+una here on linux mint 20.3 with all
> current updates applied.
>
> Earlier today I started getting messages in Firefox about a part of the
> tab crashing and asking to file an error report.  After encountering a
> few of these messages I closed Firefox to restart it in hopes of
> correcting the problem.  Instead I found I could not restart Firefox as
> I was getting segfaults.  I finally used synaptic to reinstall Firefox.
> After this Firefox is now working properly.
>
> Any idea what happened and how to avoid it in the future?  I seem to
> recall seeing some content on one of the websites I use Firefox for
> being gone when I reinstalled and reloaded.  Is it possible that a hack
> against Firefox was embedded in the content that is now gone?
>
> I use Firefox to deal with websites that refuse to work with SeaMonkey
> and use Chromium to address those few that will not work with either.
>
> Dave

An alternative hypothesis would be something along the lines of a
hardware error corrupting your Firefox executable.
Whatever it is, it's ugly. A Firefox hack would have to be tailored to
(your distribution of) Linux along with some privilege escalation.

Not strictly relevant, but I have an /etc/firefox/policies/policies.json
which allows me to set various options for all profiles, one of those is
"DisableAppUpdate": true
The point of that one is that the Package manager for the distribution
is the only process I permit to update Firefox. about:policies lists
the options, and it's probably about time I checked for new ones.

Re: Off-topic: Firefox vulnerability allowing linux binary corruption?

<kidg5cF49dmU1@mid.individual.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=782&group=alt.comp.software.seamonkey#782

  copy link   Newsgroups: alt.comp.software.seamonkey
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: dhdurgee@privacy.net (David H Durgee)
Newsgroups: alt.comp.software.seamonkey
Subject: Re: Off-topic: Firefox vulnerability allowing linux binary
corruption?
Date: Wed, 26 Jul 2023 15:05:48 -0600
Lines: 48
Message-ID: <kidg5cF49dmU1@mid.individual.net>
References: <kib049FkjlmU1@mid.individual.net> <u9rvgp$1j7gg$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: individual.net B8PI43p10J796WT3/sj35QElzvae1lcboLrNQY9KhrkMUyFR7j
Cancel-Lock: sha1:G0UJfPt11tVEjq0P1hBPLYqe7aw= sha256:fZNievoJmyT9FfUUsdFHNPS0u4BiGvStGKe3r7LLiPQ=
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Firefox/91.0 SeaMonkey/2.53.16
In-Reply-To: <u9rvgp$1j7gg$1@dont-email.me>
 by: David H Durgee - Wed, 26 Jul 2023 21:05 UTC

Don Vito Martinelli wrote:
> David H Durgee wrote:
>> I just experienced something I had never seen before with Firefox.  I
>> am running Firefox 115.0.2+linuxmint1+una here on linux mint 20.3 with
>> all current updates applied.
>>
>> Earlier today I started getting messages in Firefox about a part of
>> the tab crashing and asking to file an error report.  After
>> encountering a few of these messages I closed Firefox to restart it in
>> hopes of correcting the problem.  Instead I found I could not restart
>> Firefox as I was getting segfaults.  I finally used synaptic to
>> reinstall Firefox. After this Firefox is now working properly.
>>
>> Any idea what happened and how to avoid it in the future?  I seem to
>> recall seeing some content on one of the websites I use Firefox for
>> being gone when I reinstalled and reloaded.  Is it possible that a
>> hack against Firefox was embedded in the content that is now gone?
>>
>> I use Firefox to deal with websites that refuse to work with SeaMonkey
>> and use Chromium to address those few that will not work with either.
>>
>> Dave
>
> An alternative hypothesis would be something along the lines of a
> hardware error corrupting your Firefox executable.
> Whatever it is, it's ugly.  A Firefox hack would have to be tailored to
> (your distribution of) Linux along with some privilege escalation.
>
> Not strictly relevant, but I have an /etc/firefox/policies/policies.json
> which allows me to set various options for all profiles, one of those is
> "DisableAppUpdate": true
> The point of that one is that the Package manager for the distribution
> is the only process I permit to update Firefox.  about:policies lists
> the options, and it's probably about time I checked for new ones.

The Firefox executable files are owned by root and only have r-x
permission for anyone else, so unless I am mistaken corruption would
have to have involved privilege escalation.

I update Firefox via mint's update manager, so it isn't be handled by
Firefox here either.

Linux mint is based on Ubuntu and in many cases if it impacts Ubuntu it
impacts mint as well.

It is definitely ugly and I hope to avoid a repetition if possible.

Dave

Re: Off-topic: Firefox vulnerability allowing linux binary corruption?

<u9t032$1q6gp$1@dont-email.me>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=783&group=alt.comp.software.seamonkey#783

  copy link   Newsgroups: alt.comp.software.seamonkey
Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: hyperspace.flyover@vogon.gov.invalid (Don Vito Martinelli)
Newsgroups: alt.comp.software.seamonkey
Subject: Re: Off-topic: Firefox vulnerability allowing linux binary
corruption?
Date: Thu, 27 Jul 2023 07:41:53 +0200
Organization: A noiseless patient Spider
Lines: 56
Message-ID: <u9t032$1q6gp$1@dont-email.me>
References: <kib049FkjlmU1@mid.individual.net> <u9rvgp$1j7gg$1@dont-email.me>
<kidg5cF49dmU1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 27 Jul 2023 05:41:54 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="1804d20813b545110c33500fd370be3e";
logging-data="1907225"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19fuXpIJ7fs7d7mCgjN9gFqHJ+vmLcXK9Y="
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
SeaMonkey/2.53.16
Cancel-Lock: sha1:GBv5UcEBHt4xCjr358Z2s6bkXtA=
In-Reply-To: <kidg5cF49dmU1@mid.individual.net>
 by: Don Vito Martinelli - Thu, 27 Jul 2023 05:41 UTC

David H Durgee wrote:
> Don Vito Martinelli wrote:
>> David H Durgee wrote:
>>> I just experienced something I had never seen before with Firefox.  I
>>> am running Firefox 115.0.2+linuxmint1+una here on linux mint 20.3
>>> with all current updates applied.
>>>
>>> Earlier today I started getting messages in Firefox about a part of
>>> the tab crashing and asking to file an error report.  After
>>> encountering a few of these messages I closed Firefox to restart it
>>> in hopes of correcting the problem.  Instead I found I could not
>>> restart Firefox as I was getting segfaults.  I finally used synaptic
>>> to reinstall Firefox. After this Firefox is now working properly.
>>>
>>> Any idea what happened and how to avoid it in the future?  I seem to
>>> recall seeing some content on one of the websites I use Firefox for
>>> being gone when I reinstalled and reloaded.  Is it possible that a
>>> hack against Firefox was embedded in the content that is now gone?
>>>
>>> I use Firefox to deal with websites that refuse to work with
>>> SeaMonkey and use Chromium to address those few that will not work
>>> with either.
>>>
>>> Dave
>>
>> An alternative hypothesis would be something along the lines of a
>> hardware error corrupting your Firefox executable.
>> Whatever it is, it's ugly.  A Firefox hack would have to be tailored
>> to (your distribution of) Linux along with some privilege escalation.
>>
>> Not strictly relevant, but I have an
>> /etc/firefox/policies/policies.json which allows me to set various
>> options for all profiles, one of those is
>> "DisableAppUpdate": true
>> The point of that one is that the Package manager for the distribution
>> is the only process I permit to update Firefox.  about:policies lists
>> the options, and it's probably about time I checked for new ones.
>
> The Firefox executable files are owned by root and only have r-x
> permission for anyone else, so unless I am mistaken corruption would
> have to have involved privilege escalation.
>
> I update Firefox via mint's update manager, so it isn't be handled by
> Firefox here either.
>
> Linux mint is based on Ubuntu and in many cases if it impacts Ubuntu it
> impacts mint as well.
>
> It is definitely ugly and I hope to avoid a repetition if possible.
>
> Dave

Yes, and privilege escalation was something I mentioned.
The only time I've ever had a problem like this (that I remember), it
was bum memory. A full memtest made it clear that I had a problem, and
where the problem was.

Re: Off-topic: Firefox vulnerability allowing linux binary corruption?

<kiiqt6FugdpU1@mid.individual.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=794&group=alt.comp.software.seamonkey#794

  copy link   Newsgroups: alt.comp.software.seamonkey
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: dhdurgee@privacy.net (David H Durgee)
Newsgroups: alt.comp.software.seamonkey
Subject: Re: Off-topic: Firefox vulnerability allowing linux binary
corruption?
Date: Fri, 28 Jul 2023 15:39:49 -0600
Lines: 107
Message-ID: <kiiqt6FugdpU1@mid.individual.net>
References: <kib049FkjlmU1@mid.individual.net> <u9rvgp$1j7gg$1@dont-email.me>
<kidg5cF49dmU1@mid.individual.net> <u9t032$1q6gp$1@dont-email.me>
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------1E2AC4439C2AA988371A87D1"
X-Trace: individual.net VPhjUCajB7ZUGapY+yCY/QwOF8mia/lNfQBUp3ZW9+b9EJnra9
Cancel-Lock: sha1:MVUujvHZoFyTXsBGYkFRHkrHmj8= sha256:E48BRhwJuJNDxC39EBG3c63cainMz2/PgCrdhJ+6p1I=
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Firefox/91.0 SeaMonkey/2.53.16
In-Reply-To: <u9t032$1q6gp$1@dont-email.me>
 by: David H Durgee - Fri, 28 Jul 2023 21:39 UTC
Attachments: "firefox-gpf.zip" (application/zip)

Don Vito Martinelli wrote:
> David H Durgee wrote:
>> Don Vito Martinelli wrote:
>>> David H Durgee wrote:
>>>> I just experienced something I had never seen before with Firefox.
>>>> I am running Firefox 115.0.2+linuxmint1+una here on linux mint 20.3
>>>> with all current updates applied.
>>>>
>>>> Earlier today I started getting messages in Firefox about a part of
>>>> the tab crashing and asking to file an error report.  After
>>>> encountering a few of these messages I closed Firefox to restart it
>>>> in hopes of correcting the problem.  Instead I found I could not
>>>> restart Firefox as I was getting segfaults.  I finally used synaptic
>>>> to reinstall Firefox. After this Firefox is now working properly.
>>>>
>>>> Any idea what happened and how to avoid it in the future?  I seem to
>>>> recall seeing some content on one of the websites I use Firefox for
>>>> being gone when I reinstalled and reloaded.  Is it possible that a
>>>> hack against Firefox was embedded in the content that is now gone?
>>>>
>>>> I use Firefox to deal with websites that refuse to work with
>>>> SeaMonkey and use Chromium to address those few that will not work
>>>> with either.
>>>>
>>>> Dave
>>>
>>> An alternative hypothesis would be something along the lines of a
>>> hardware error corrupting your Firefox executable.
>>> Whatever it is, it's ugly.  A Firefox hack would have to be tailored
>>> to (your distribution of) Linux along with some privilege escalation.
>>>
>>> Not strictly relevant, but I have an
>>> /etc/firefox/policies/policies.json which allows me to set various
>>> options for all profiles, one of those is
>>> "DisableAppUpdate": true
>>> The point of that one is that the Package manager for the
>>> distribution is the only process I permit to update Firefox.
>>> about:policies lists the options, and it's probably about time I
>>> checked for new ones.
>>
>> The Firefox executable files are owned by root and only have r-x
>> permission for anyone else, so unless I am mistaken corruption would
>> have to have involved privilege escalation.
>>
>> I update Firefox via mint's update manager, so it isn't be handled by
>> Firefox here either.
>>
>> Linux mint is based on Ubuntu and in many cases if it impacts Ubuntu
>> it impacts mint as well.
>>
>> It is definitely ugly and I hope to avoid a repetition if possible.
>>
>> Dave
>
> Yes, and privilege escalation was something I mentioned.
> The only time I've ever had a problem like this (that I remember), it
> was bum memory.  A full memtest made it clear that I had a problem, and
> where the problem was.

I might do a memtest later, but I would have to locate it first and
install it. I did check and confirm that smartd completes its
self-tests without any errors.

I have attached a zip of the first tab crash in case it helps.

Dave

Attachments: "firefox-gpf.zip" (application/zip)
1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor