Your message dated Fri, 19 Sep 2025 23:22:00 +0200
with message-id <[email protected]>
and subject line iceweasel has been superseded by firefox-esr
has caused the Debian Bug report #752278,
regarding iceweasel shouldn't advertise for external programs
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
752278: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752278
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: iceweasel
Version: 30.0-2
Severity: normal
Tags: security


Hi.

Apparently there are cases where Iceweasel automatically
suggests users an external program or plugin, like when
you click an URI:
irc://irc.freenode.net:6667/btrfs
it suggests Mibbit.

I think this is really a bad idea, especially security wise, as
the user may click on this perhaps already downloading/starting
something as local user (I didn't try it out, since it didn't tell
me what will happen).

If at all, iceweasel should rather suggest any packages in the
Debian main archive, which are capable of handling the requrested
file type / URI schema are whatever.


Cheers,
Chris.

--- End Message ---
--- Begin Message ---
Version: 115.12.0esr-1+rm

src:iceweasel has been superseded by src:firefox-esr in version 45.0esr-1 in March 2016. Transitional packages to ease upgrades were provided in the wheezy, jessie, stretch and buster releases. The transitional packages have been removed finally before the bullseye release in August 2021. After regular security support for buster ended in August 2022 and LTS support ended in June 2024, I'm closing the remaining bug reports now.

Andreas

--- End Message ---

Reply via email to