Bug#888831: NS_ERROR_NET_INADEQUATE_SECURITY error on armhf/arm64 at least

2021-07-07 Thread Mike Hommey
On Wed, Jul 07, 2021 at 03:35:48PM +0200, Raphael Hertzog wrote:
> The simplest fix is thus to let nss migrate into bullseye.

The simplest fix is a binNMU of firefox-esr because the issue was fixed
in NSS, but since there's going to be a security update for firefox-esr
next week, I didn't ask for a binNMU. See bug 990699.

Mike



Bug#888831: NS_ERROR_NET_INADEQUATE_SECURITY error on armhf/arm64 at least

2021-07-07 Thread Pekka Sarnila
On Wed, 7 Jul 2021 15:35:48 +0200 Raphael Hertzog  
wrote:

Control: severity -1 serious
Control: found -1 firefox-esr/78.11.0esr-1
Control: tag -1 + bullseye

Hello,

it looks like this issue resurfaced again and it happens in bullseye
right now (with firefox-esr 78.11.0esr-1 and libnss3 2:3.61-1).
If you upgrade to the version of libnss3 in unstable (2:3.67-2)
then the issue goes away.

This has been reproduced in Kali on an rpi (armhf) and on the Lenovo Yoga
C630 (arm64).

The simplest fix is thus to let nss migrate into bullseye.

Cheers,
--
Raphaël Hertzog


This is kind of odd. I updated firefox-esr 78.3.0esr-2 -> 78.11.0esr-1. 
I had libnss3 2:3.58-1. https stopped working. Updating libnss3 -> 
2:3.61-1 solved the problem.


Pekka Sarnila



Bug#888831: NS_ERROR_NET_INADEQUATE_SECURITY error on armhf/arm64 at least

2021-07-07 Thread Raphael Hertzog
Control: severity -1 serious
Control: found -1 firefox-esr/78.11.0esr-1
Control: tag -1 + bullseye

Hello,

it looks like this issue resurfaced again and it happens in bullseye
right now (with firefox-esr 78.11.0esr-1 and libnss3 2:3.61-1).
If you upgrade to the version of libnss3 in unstable (2:3.67-2)
then the issue goes away.

This has been reproduced in Kali on an rpi (armhf) and on the Lenovo Yoga
C630 (arm64).

The simplest fix is thus to let nss migrate into bullseye.

Cheers,
-- 
Raphaël Hertzog