On Tue, Jun 27, 2023 at 11:39:12AM +0200, Philipp Marek wrote:
> Package: firefox
> Version: 114.0-1
> Severity: grave
> X-Debbugs-Cc: phil...@marek.priv.at
> 
> Websites that need randomness ([1]) are broken,
> on both Debian FF 113.0.2 and 114.0 (114.0.2 not yet available for amd64).
> 
> Reproduced with a new profile without any plugins.
> 
> strace shows FF being able to use getrandom(),
> so it seems to be a userspace problem.
> 
> 
> 114.0.2 from upstream works as expected;
> Mozilla chat recommended asking the packaging team.
> 
> 
> Ad 1:
> - banking.bank99.at uses crypto.getRandomValues() even before login

"The server at banking.bank99.at is taking too long to respond."

> - RedHat support webpage uses getRandomUUID after login
> Both fail with "OperationError: The operation failed for an 
> operation-specific reason"

Obviously, I can't reproduce with this since I can't login...

I also can't reproduce calling the crypto.randomUUID and
crypto.getRandomValues functions from the devtools console...

Try downgrading libnss3.

Mike

Reply via email to