Package: firefox-esr
Version: 78.7.0esr-1
Severity: important

Dear Maintainer,

firefox-esr (both the latest version 78.8.0esr-1 and the latest testing
version 78.7.0esr-1) depends on libnss3 (>= 2:3.53.1~), but that is not
sufficient. https fails completely with libnss3 2:3.58-1.  It works with
2:3.61-1 (the current testing version).  I didn't try any other versions
of libnss3.

Evidence:

When I updated firefox-esr from 78.3.0esr-2 to 78.7.0esr-1, https
stopped working.  The firefox developer console showed that it was
making the TCP connection but not getting past the TLS setup.  I tried
several versions of firefox-esr:

78.8.0esr-1 broken
78.7.0esr-1 broken
78.6.1esr-1 broken
78.5.0esr-1 worked
78.3.0esr-2 worked

Eventually I suspected libnss3, which was at version 2:3.58-1 this whole
time.  I updated it to 2:3.61-1 (the current testing version), then
retried firefox-esr 78.7.0esr-1 (the current testing version), and that
worked.

-- Package-specific info:


-- Addons package information

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'stable'), (600, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.16.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages firefox-esr depends on:
ii  debianutils          4.8.6
ii  fontconfig           2.13.0-5
ii  libatk1.0-0          2.36.0-2
ii  libc6                2.30-8
ii  libcairo-gobject2    1.15.10-3
ii  libcairo2            1.15.10-3
ii  libdbus-1-3          1.12.8-2
ii  libdbus-glib-1-2     0.110-2
ii  libevent-2.1-7       2.1.11-stable-1
ii  libffi7              3.3-4
ii  libfontconfig1       2.13.1-4.2
ii  libfreetype6         2.10.2+dfsg-2
ii  libgcc-s1            10-20200304-1
ii  libgdk-pixbuf-2.0-0  2.42.2+dfsg-1
ii  libglib2.0-0         2.64.3-2
ii  libgtk-3-0           3.24.20-1
ii  libnspr4             2:4.29-1
ii  libnss3              2:3.61-1
ii  libpango-1.0-0       1.44.7-4
ii  libstdc++6           10-20200304-1
ii  libvpx6              1.8.0-dmo2
ii  libx11-6             2:1.7.0-2
ii  libx11-xcb1          2:1.7.0-2
ii  libxcb-shm0          1.13-1
ii  libxcb1              1.13.1-2
ii  libxcomposite1       1:0.4.5-1
ii  libxdamage1          1:1.1.4-3
ii  libxext6             2:1.3.3-1+b2
ii  libxfixes3           1:5.0.3-1
ii  libxrender1          1:0.9.10-1
ii  procps               2:3.3.15-1
ii  zlib1g               1:1.2.11.dfsg-2

Versions of packages firefox-esr recommends:
ii  libavcodec57  10:3.4.2-dmo3
ii  libavcodec58  10:4.1.3-dmo4

Versions of packages firefox-esr suggests:
pn  fonts-lmodern          <none>
pn  fonts-stix | otf-stix  <none>
pn  libcanberra0           <none>
ii  libgssapi-krb5-2       1.17-10
ii  libgtk2.0-0            2.24.32-1
pn  pulseaudio             <none>

-- no debconf information

Reply via email to