logging into metnors.debian.net crashes iceweasel ..

[Norbert Preining]

Dear all, 

it seems there is a serious problem with iceweasel crashing on
https sites even from Debian, like mentors.debian.org
(interestingly *not* https://www.debian.org/)

I have contacted the Debian Mentors Team, and Paul Wise
advised me to contact both security and icewease packaging team.

I have reproduced this with iceweasel --safe-mode, it crashes
(segfaults) repeatetly when accessing any 
	https://mentors.debian.org/
I guess this must be a but in Iceweasel, but follow the advise
of Paul to contact security, too.

Thanks

Norbert

On Sun, 17 May 2015, Paul Wise wrote:
> On Sat, 2015-05-16 at 17:13 +0900, Norbert Preining wrote:
> 
> > thanks for the good service. I was goint to do some sponsoring
> > and when I tried to log into mentors.debian.org iceweasel crashed
> > with segfault.
> 
> That sounds like a bug in iceweasel, possibly a security one. I can
> reproduce it with iceweasel 38 from unstable. Please contact the
> security team and CC the iceweasel maintainer about it.
> 
> -- 
> bye,
> pabs
> 
> https://wiki.debian.org/PaulWise
> 


------------------------------------------------------------------------
PREINING, Norbert                               http://www.preining.info
JAIST, Japan                                 TeX Live & Debian Developer
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0  ACF0 6CAC A448 860C DC13
------------------------------------------------------------------------