Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[🐛 Bug]: selenium-manager.exe being blocked as malware #13130

Closed
HernJer opened this issue Nov 9, 2023 · 11 comments
Closed

[🐛 Bug]: selenium-manager.exe being blocked as malware #13130

HernJer opened this issue Nov 9, 2023 · 11 comments
Labels
C-build Build related issues (bazel and CI) C-rust I-defect

Comments

@HernJer
Copy link

HernJer commented Nov 9, 2023

What happened?

After upgrading from 4.14.1 to 4.15.0, selenium-manager.exe gets blocked by software like Carbon Black.

How can we reproduce the issue?

.

Relevant log output

![image](https://github.com/SeleniumHQ/selenium/assets/87041628/67b84785-e10f-469b-a611-29404df718ea)

Operating System

Windows Server 2012 R2

Selenium version

4.15.0

What are the browser(s) and version(s) where you see this issue?

na

What are the browser driver(s) and version(s) where you see this issue?

na

Are you using Selenium Grid?

na

Copy link

github-actions bot commented Nov 9, 2023

@HernJer, thank you for creating this issue. We will troubleshoot it as soon as we can.


Info for maintainers

Triage this issue by using labels.

If information is missing, add a helpful comment and then I-issue-template label.

If the issue is a question, add the I-question label.

If the issue is valid but there is no time to troubleshoot it, consider adding the help wanted label.

If the issue requires changes or fixes from an external project (e.g., ChromeDriver, GeckoDriver, MSEdgeDriver, W3C), add the applicable G-* label, and it will provide the correct link and auto-close the issue.

After troubleshooting the issue, please add the R-awaiting answer label.

Thank you!

@bonigarcia
Copy link
Member

Sorry for the inconvenience. I suppose this issue is caused by using the stable-i686-pc-windows-gnu target to build Selenium Manager for Windows in Selenium 4.15.0. But since this target is only required for the debug version of Selenium Manager in Windows, I think we can revert to stable-i686-pc-windows-msvc for the release version (which seems safer than the gnu one in the eyes of antivirus, for some reason). We can use stable-i686-pc-windows-gnu only for the debug version (this will include the debug symbols used for troubleshooting).

I created a PR to change how Selenium Manager is built in CI: #13134

@HernJer Can you please have a try with the new binary?

  1. Download the new binary from here: selenium-manager_windows-x32
  2. Uncompress it and replace it with your local Selenium Manager at C:\agent\runner\selenium.webdriver\4.15.0\manager\selenium-manager.exe
  3. Test again and share the results here.

Thanks

@HernJer
Copy link
Author

HernJer commented Nov 11, 2023

@bonigarcia - that seem to have done the trick. thanks! i am also sending the file to my IT Sec team to fully vet.

will this be packaged on a new version so i can update my references?

@bonigarcia
Copy link
Member

Great to know, thanks @HernJer. Yes, this new Selenium Manager Windows binary will be shipped with next Selenium release.

@vikramtechforall
Copy link

@bonigarcia was this change incorporated in 4.16? because i am still observing the issue with selenium-manager.exe

@titusfortner
Copy link
Member

We're still working to get the binaries signed which should fix the issue.

@vikramtechforall
Copy link

Thanks @titusfortner! Is there an ETA on the same? is there a temporary file which we could try to make sure that's going to work fine with our firewall/proxy settings?

@titusfortner
Copy link
Member

I'm not sure what you mean by a temporary file. What we have isn't signed and might flag security checks if they are stringent. I'm not sure the current status of it as it is our fiscal sponsor who is running down the requirements for us, and we haven't had a chance to follow up in a while.

@HernJer
Copy link
Author

HernJer commented Dec 15, 2023

Any change this can this be reopened until it's actually resolved? Don't want this to fall down the cracks.

@titusfortner
Copy link
Member

It's being tracked here — #12935

Copy link

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked and limited conversation to collaborators Jan 15, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
C-build Build related issues (bazel and CI) C-rust I-defect
Projects
None yet
Development

No branches or pull requests

4 participants