Software updater - invalud signature - Foxit Reader

Options
ez_seereal
ez_seereal W/ Alumni Posts: 4 Security Scout
in WithSecure Business Suite

Update of Foxit Reader not possible due to invalid signature. We had similar trouble in the past which was then solved by a bug fix.

 

Line from PM:

 

Kritische Sicherheit Foxit Reader 9 Gold Foxit Reader 9.5.0.20723 CVE-2018-20311 FI19-9502 FI95020723 Update konnte nicht installiert werden: Signatur ungültig (07.05.2019 13:55)

 

Some info from log:

2019-05-07 13:55:28.626 UTC+02:00 17E4:142C #1 Checking signature of "C:\ProgramData\F-Secure\FSOFTUPD\deploy\FoxitReader95020723_L10N_Setup.exe".
2019-05-07 13:55:29.438 UTC+02:00 17E4:142C #1 bAllowUnsigned: 1, bNoSignatureError: 0, bSignatureSubjectUnknown: 0
2019-05-07 13:55:29.469 UTC+02:00 17E4:142C #2 Exception occurred. Type: fs:Smiley FrustratedignatureException, Reason: Certificate does not match required rules., Function: `anonymous-namespace'::checkCertificate, File: "..\\..\\..\\..\\..\\src\\fssua_common\\FileSignatureChecker.cpp", Line: 94, COM Error: Das Zertifikat hat einen ungültigen Namen. Der Name ist nicht in der Liste der zulässigen Namen enthalten, oder er ist explizit ausgeschlossen., HRESULT: -2146762476, COM Source:
2019-05-07 13:55:29.500 UTC+02:00 17E4:142C #1 Event type: 10, ErrorCode: 1, Status: Certificate does not match required rules.
2019-05-07 13:55:29.500 UTC+02:00 17E4:142C #1 Product: Foxit Reader 9, SP: Gold, BulletinID: FI19-9502, PatchName: FoxitReader95020723_L10N_Setup.exe
2019-05-07 13:55:29.500 UTC+02:00 17E4:142C #1 PatchName: FoxitReader95020723_L10N_Setup.exe, Patch file size: 254081008 bytes

 

Thanks, Enrico

Comments

  • ez_seereal
    ez_seereal W/ Alumni Posts: 4 Security Scout
    Options
    Additional Info: Clients are on 13.11, PM is 14.01.
  • Vad
    Vad W/ Alumni Posts: 1,069 Cybercrime Crusader
    Options

    Hello Enrico,

     

    We are testing the fix now. It will be published in the channel in the second half of May.

    If you want to try the fix already now, please, contact support.

     

    Best regards,

    Vad

  • ez_seereal
    ez_seereal W/ Alumni Posts: 4 Security Scout
    Options

    Hi Vad,

     

    any news? Updating still does not work with same signature error.

     

    br Enrico

  • Vad
    Vad W/ Alumni Posts: 1,069 Cybercrime Crusader
    Options

    Hello Enrico,

     

    The fix was published in the fsoftupd channel 20.05.2019.

    If you'd started the installation before your machine received this update, please, contact support. We will need diagnostic information from affected machine for investigation.

     

    Best regards,

    Vad

This discussion has been closed.

Categories