Package: firefox-esr
Version: 115.9.1esr-1~deb12u1
Severity: normal
File: /usr/bin/firefox
X-Debbugs-Cc: antti.pekka.kans...@iki.fi

Dear Maintainer, please consider

https://lists.debian.org/debian-user/2024/03/msg00721.html

I am worried Gmail in a Firefox tab is able to break out of Firefox
somehow, gaining unauthorized access to 128 files on a mounted USB stick.

The desired behavior is that stick can be unmounted cleanly right after
a single attached file is uploaded in Gmail.  (In my test case an
encrypted binary of no importance to the issue.)

Clinging problem persists with full Debian reinstalls of recent stable
minor versions.


-- Package-specific info:


-- Addons package information

-- System Information:
Debian Release: 12.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-18-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages firefox-esr depends on:
ii  debianutils          5.7-0.5~deb12u1
ii  fontconfig           2.14.1-4
ii  libasound2           1.2.8-1+b1
ii  libatk1.0-0          2.46.0-5
ii  libc6                2.36-9+deb12u4
ii  libcairo-gobject2    1.16.0-7
ii  libcairo2            1.16.0-7
ii  libdbus-1-3          1.14.10-1~deb12u1
ii  libdbus-glib-1-2     0.112-3
ii  libevent-2.1-7       2.1.12-stable-8
ii  libffi8              3.4.4-1
ii  libfontconfig1       2.14.1-4
ii  libfreetype6         2.12.1+dfsg-5
ii  libgcc-s1            12.2.0-14
ii  libgdk-pixbuf-2.0-0  2.42.10+dfsg-1+b1
ii  libglib2.0-0         2.74.6-2
ii  libgtk-3-0           3.24.38-2~deb12u1
ii  libnspr4             2:4.35-1
ii  libnss3              2:3.87.1-1
ii  libpango-1.0-0       1.50.12+ds-1
ii  libstdc++6           12.2.0-14
ii  libvpx7              1.12.0-1+deb12u2
ii  libx11-6             2:1.8.4-2+deb12u2
ii  libx11-xcb1          2:1.8.4-2+deb12u2
ii  libxcb-shm0          1.15-1
ii  libxcb1              1.15-1
ii  libxcomposite1       1:0.4.5-1
ii  libxdamage1          1:1.1.6-1
ii  libxext6             2:1.3.4-1+b1
ii  libxfixes3           1:6.0.0-2
ii  libxrandr2           2:1.5.2-2+b1
ii  libxtst6             2:1.2.3-1.1
ii  procps               2:4.0.2-3
ii  zlib1g               1:1.2.13.dfsg-1

Versions of packages firefox-esr recommends:
ii  libavcodec59  7:5.1.4-0+deb12u1

Versions of packages firefox-esr suggests:
pn  fonts-lmodern          <none>
pn  fonts-stix | otf-stix  <none>
ii  libcanberra0           0.30-10
ii  libgssapi-krb5-2       1.20.1-2+deb12u1
ii  pulseaudio             16.1+dfsg1-2+b1

-- no debconf information

Reply via email to