firefox 63.0 out of bounds read/or wrong firewall rule

[Jan Hafer]

On using the application knime the download was intercepted by firewall rules of the university network with the following error:
File-Text_Mozilla-Firefox-HTTP-Index-Format-File-Out-Of-Bounds-Read

This may be associated by
https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/#CVE-2017-5446

Was the mitigation ported/used in firefox 63.0 ?
Are security updates for common used programs (firefox 63.3 is current version) not supported on LTS anymore?

[Seth Arnold (seth-arnold)]

Hello Jan, there's too little information here to really say what's going on.

I don't know what your university's firewall rules are telling us.

It's certainly possible that Firefox's fix for CVE-2017-5446 has regressed in the last year and a half, but without further evidence that this is infact related to what your firewall system is trying to tell us, it's probably best to not go down this route too far.

Can you test other browsers? Can you capture the network traffic?

Thanks

[Jan Hafer (matu3ba)]

I got the reply that the signature relates to a CVE from 2017,
in this case CBE-2017-5444
[I guess that is a spelling error meaning CVE-2017-5444]

More precise notes to the signature they do not have.
They suspected it has no more relevance, so they deactivated it (after my request).

Shall I ask them to give me the rule affected?
I am currently in the process of getting information from the other affected persons.

[Launchpad Janitor (janitor)]

[Expired for firefox (Ubuntu) because there has been no activity for 60 days.]