Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1020221

Bug#966538: firefox-esr: Firefox accuses debian-9.13.0-amd64-netinst.iso of containing malware

Show all headers | View raw

Hi,

the counterpart of this bug, which is assigned to debian-cd is
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966608
  "debian-cd: Daily iso flagged as virus/malware by Firefox"
where the maintainer of the ISOs affirms
  "It *is* a false positive - we are happy
   that we do not have a problem with malware."
and reports
  "We've had a slew of similar complaints this week, all apparently
   triggered by Google's "safe browsing" service. We're trying to get it
   fixed at their end."

> This appears to be a bug with Firefox and possibly
> something about the Debian ISOs for some reason,

If the warning would only tell something about the location of the
suspicious bytes inside the ISOs.
Or if the warning would be repeatable. (Thanks for the screenshot)
I'll try with your ISO URL tomorrow in the hope to get the warning
again and to find some button ...

A Debian ISO consists of hard to fake .deb packages embedded in a jelly
of ISO 9660 metadata. This jelly further embraces data files (some executable
like vmlinuz) and a Master Boot Record with x86 machine code, which stems
from the SYSLINUX project.
The jelly is generated by my program xorriso. So i wonder whether its about
a particular Debian package, a file of other kind, the Master Boot Record,
or about some metadata.


Have a nice day :)

Thomas

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#966538: firefox-esr: Firefox accuses debian-9.13.0-amd64-netinst.iso of containing malware Thomas Schmitt <scdbackup@gmx.net> - 2020-07-30 13:10 +0200
  Bug#966538: firefox-esr: Firefox accuses debian-9.13.0-amd64-netinst.iso of containing malware "Thomas Schmitt" <scdbackup@gmx.net> - 2020-08-03 00:00 +0200

csiph-web