https://bugs.winehq.org/show_bug.cgi?id=54259
Bug ID: 54259 Summary: Firefox displays virus for wine-8.0-rc2.tar.xz Product: WineHQ Bugzilla Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: bugzilla-unknown Assignee: wine-bugs@winehq.org Reporter: juergen@luers-net.de CC: austinenglish@gmail.com Distribution: ---
Downloaded at https://www.winehq.org/news/ from "The source is available now." Firefox shows that the file contains a virus or malware. Downloading from https://dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz does not display that message. Both files differ. Firefox is version 108.0.1 (64-Bit) under Ubuntu 22.04 64bit.
https://bugs.winehq.org/show_bug.cgi?id=54259
Olivier F. R. Dierick o.dierick@piezo-forte.be changed:
What |Removed |Added ---------------------------------------------------------------------------- Component|bugzilla-unknown |www-unknown Product|WineHQ Bugzilla |WineHQ.org CC| |o.dierick@piezo-forte.be
--- Comment #1 from Olivier F. R. Dierick o.dierick@piezo-forte.be --- Hello,
For me the link at https://www.winehq.org/news/ points to the exact same URL and the downloaded files are identical.
I don't get a virus or malware message using either Firefox 68.9.0esr (debian 8 64 bits) or 102.6.0esr (debian 11 64 bits)
Please make sure that the link at https://www.winehq.org/news/ and the direct URL are the same.
Did you scan your computer for CSS injecting or virus in your Firefox plugins/extensions?
Can you check what the differences between the two files are? It could be a bad handling of the charset by Firefox.
This is not a bugzilla or a packaging bug → Changing the Product field to 'Winehq.org'.
Regards.
https://bugs.winehq.org/show_bug.cgi?id=54259
--- Comment #2 from Jürgen Luers juergen@luers-net.de --- I fully uninstalled and reinstalled Firefox. I also retested it on a different user. The problem still exists. Please check, if winehq website really has no problem.
When hoovering over the problematic link, it displays to be "https://dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz", but in real it is pointing to "//dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz" (I have inspected the link object with Firefox debugger).
md5sum of wine-8.0-rc2.tar.xz downloaded from https://www.winehq.org/news/ (i.e. the bad one) is d41d8cd98f00b204e9800998ecf8427e.
md5sum of https://dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz (i.e. the good one) is 5a265fcfac8f93fde4f096e8508423cd.
https://bugs.winehq.org/show_bug.cgi?id=54259
--- Comment #3 from Olivier F. R. Dierick o.dierick@piezo-forte.be --- Hello,
(In reply to Jürgen Luers from comment #2)
I fully uninstalled and reinstalled Firefox. I also retested it on a different user. The problem still exists. Please check, if winehq website really has no problem.
I already tested it on two different browsers on two independent systems and had no issue. This doesn't point to an issue with the website.
When hoovering over the problematic link, it displays to be "https://dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz", but in real it is pointing to "//dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz" (I have inspected the link object with Firefox debugger).
The relative link is correct.
md5sum of wine-8.0-rc2.tar.xz downloaded from https://www.winehq.org/news/ (i.e. the bad one) is d41d8cd98f00b204e9800998ecf8427e.
md5sum of https://dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz (i.e. the good one) is 5a265fcfac8f93fde4f096e8508423cd.
Have you tried to unpack both archives and compare contents? Is the bad archive corrupt?
I get the good md5sum in all cases (left-click link, right-click link 'save as' or copy-paste URL in an empty tab).
This may be a bug in Firefox version 108.0.1. Can you check with another Firefox version?
Regards.
https://bugs.winehq.org/show_bug.cgi?id=54259
--- Comment #4 from Austin English austinenglish@gmail.com --- I get 5a265fcfac8f93fde4f096e8508423cd for both links with Firefox 102.6.0esr / Chrome 108.0.5359.124 on debian.
https://bugs.winehq.org/show_bug.cgi?id=54259
--- Comment #5 from Jürgen Luers juergen@luers-net.de --- I retested it today. The problem is gone. Now I get identical files without a warning from Firefox. I haven't changed anything and wanted to search for the problem.
Firefox debugger still shows, that the link points to //dl.winehq.org/wine/source/8.0/wine-8.0-rc2.tar.xz, but it results in the same file. md5sum is correct.
My Firefox version still is 108.0.1. Something must have changed on winehq website. From my perspective, the problem is solved.
https://bugs.winehq.org/show_bug.cgi?id=54259
Jürgen Luers juergen@luers-net.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|UNCONFIRMED |RESOLVED
--- Comment #6 from Jürgen Luers juergen@luers-net.de --- Problem not reproducible anymore.
https://bugs.winehq.org/show_bug.cgi?id=54259
Olivier F. R. Dierick o.dierick@piezo-forte.be changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|FIXED |WORKSFORME
--- Comment #7 from Olivier F. R. Dierick o.dierick@piezo-forte.be --- Hello,
The source of the website can be found there: https://source.winehq.org/git/website.git/
As you can see, nothing was changed since 2022-12-21 when Wine 8.0-rc2 was released.
'FIXED' would mean that the issue was found and will not happen anymore.
Since we don't know what happened and can't reproduce it, it would be better to mark the bug WORKSFORME.
Here is the description of WORKSFORME: "All attempts at reproducing this bug were futile, and reading the code produces no clues as to why the described behavior would occur. If more information appears later, the bug can be reopened."
Regards.
https://bugs.winehq.org/show_bug.cgi?id=54259
Gijs Vermeulen gijsvrm@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #8 from Gijs Vermeulen gijsvrm@gmail.com --- Closing WORKSFORME.
-
WineHQ Bugzilla