#1032983 firefox-esr: TLS websites broken with libnss3 2:3.87.1-1 from Debian testing/bookworm

Package:
firefox-esr
Source:
firefox-esr
Description:
Mozilla Firefox web browser - Extended Support Release (ESR)
Submitter:
Paul Wise
Date:
2023-03-18 04:12:06 UTC
Severity:
normal
#1032983#5
Date:
2023-03-15 07:54:27 UTC
From:
To:
With firefox-esr 102.9.0esr-1 and libnss3 2:3.87.1-1 from Debian
bookworm, Firefox ESR cannot load any https based websites. When
I upgrade to libnss3 2:3.89-1 from Debian unstable they work again. 

Please adjust the firefox-esr dependencies to require the new libnss3,
otherwise users with partial upgrades will have a very broken browser.
#1032983#12
Date:
2023-03-17 07:25:21 UTC
From:
To:
The same thing applies to thunderbird 102.9.0 that reached the repo yesterday.
Broken tls support there means no email can be sent or received and rss feeds
do not work.
I also have an ms exchange calendar in tb, which I was too upset to check if it
works, but it probably won't.

So, can you please add libnss3>=2:3.89 as a version dependency for those
packages?
#1032983#17
Date:
2023-03-18 04:09:34 UTC
From:
To:
reassign 1032983 libnss3-dev
fixed 1032983 2:3.89-2
done

The problem was in libnss3-dev and was fixed there. Thunderbird has
received a binNMU to rebuild against it, and Firefox-esr got a new
upload that also ended up building against it.

Mike