Package: firefox
Version: 114.0-1
Severity: grave
X-Debbugs-Cc: phil...@marek.priv.at

Websites that need randomness ([1]) are broken,
on both Debian FF 113.0.2 and 114.0 (114.0.2 not yet available for amd64).

Reproduced with a new profile without any plugins.

strace shows FF being able to use getrandom(),
so it seems to be a userspace problem.


114.0.2 from upstream works as expected;
Mozilla chat recommended asking the packaging team.


Ad 1:
- banking.bank99.at uses crypto.getRandomValues() even before login
- RedHat support webpage uses getRandomUUID after login
Both fail with "OperationError: The operation failed for an 
operation-specific reason"


-- Package-specific info:


-- Addons package information

-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.3.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=de_AT.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_AT:de
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages firefox depends on:
ii  debianutils          5.7-0.4
ii  fontconfig           2.14.1-4
ii  libasound2           1.2.9-1
ii  libatk1.0-0          2.48.3-1
ii  libc6                2.36-9
ii  libcairo-gobject2    1.16.0-7
ii  libcairo2            1.16.0-7
ii  libdbus-1-3          1.14.8-1
ii  libdbus-glib-1-2     0.112-3
ii  libevent-2.1-7       2.1.12-stable-8
ii  libffi8              3.4.4-1
ii  libfontconfig1       2.14.1-4
ii  libfreetype6         2.12.1+dfsg-5
ii  libgcc-s1            13.1.0-6
ii  libgdk-pixbuf-2.0-0  2.42.10+dfsg-1+b1
ii  libglib2.0-0         2.74.6-2
ii  libgtk-3-0           3.24.37-2
ii  libnspr4             2:4.35-1.1
ii  libnss3              2:3.90-3
ii  libpango-1.0-0       1.50.14+ds-1
ii  libstdc++6           13.1.0-6
ii  libvpx7              1.12.0-1
ii  libx11-6             2:1.8.6-1
ii  libx11-xcb1          2:1.8.6-1
ii  libxcb-shm0          1.15-1
ii  libxcb1              1.15-1
ii  libxcomposite1       1:0.4.5-1
ii  libxdamage1          1:1.1.6-1
ii  libxext6             2:1.3.4-1+b1
ii  libxfixes3           1:6.0.0-2
ii  libxrandr2           2:1.5.2-2+b1
ii  libxtst6             2:1.2.3-1.1
ii  procps               2:4.0.3-1
ii  zlib1g               1:1.2.13.dfsg-1

Versions of packages firefox recommends:
ii  libavcodec58  7:4.4.2-1+b3
ii  libavcodec59  7:5.1.3-1

Versions of packages firefox suggests:
ii  fonts-lmodern          2.005-1
ii  fonts-stix [otf-stix]  1.1.1-4.1
ii  libcanberra0           0.30-10
ii  libgssapi-krb5-2       1.20.1-2
ii  pulseaudio             16.1+dfsg1-2+b1

-- no debconf information

-- debsums errors found:
debsums: can't check firefox file /usr/share/doc/firefox/NEWS.Debian.gz (Wide 
character in subroutine entry)
debsums: can't check firefox file /usr/share/doc/firefox/changelog.Debian.gz 
(Wide character in subroutine entry)
debsums: can't check firefox file 
/usr/share/firefox/browser/chrome/icons/default/default128.png (Wide character 
in subroutine entry)
debsums: can't check firefox file 
/usr/share/firefox/browser/chrome/icons/default/default16.png (Wide character 
in subroutine entry)
debsums: can't check firefox file 
/usr/share/firefox/browser/chrome/icons/default/default32.png (Wide character 
in subroutine entry)
debsums: can't check firefox file 
/usr/share/firefox/browser/chrome/icons/default/default48.png (Wide character 
in subroutine entry)
debsums: can't check firefox file 
/usr/share/firefox/browser/chrome/icons/default/default64.png (Wide character 
in subroutine entry)
debsums: can't check firefox file /usr/share/man/man1/firefox.1.gz (Wide 
character in subroutine entry)

Reply via email to