[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SECURITY] [DLA 2880-1] firefox-esr security update

On 1/17/22 11:44 AM, Emilio Pozuelo Monfort wrote:
On 16/01/2022 23:49, Miroslav Skoric wrote:
On 1/16/22 11:55 AM, Emilio Pozuelo Monfort wrote:

Hash: SHA256

- ------------------------------------------------------------------------- Debian LTS Advisory DLA-2880-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/              ; Emilio Pozuelo Monfort January 16, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------

Package        : firefox-esr
Version        : 91.5.0esr-1~deb9u1
CVE ID         : CVE-2021-4140 CVE-2022-22737 CVE-2022-22738 CVE-2022-22739                   CVE-2022-22740 CVE-2022-22741 CVE-2022-22742 CVE-2022-22743                   CVE-2022-22745 CVE-2022-22747 CVE-2022-22748 CVE-2022-22751

Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary code,
information disclosure, denial of service or spoofing.

For Debian 9 stretch, these problems have been fixed in version

We recommend that you upgrade your firefox-esr packages.

Hi all,

After a recent upgrade of Firefox and Thunderbird (before this one 91.5) in oldoldstable (running Mate desktop), Firefox keeps asking me to be default browser, even though I have set it as default in Mate's default applications, and respond to that asking by click on 'don't ask me again'.

What is the result of:

$ xdg-settings get default-web-browser


Also, if you go to Firefox > Settings, is 'Always check if Firefox is your default browser' checked?

It is checked but greyed (not possible to uncheck).

Furthermore, Thunderbird was also set as a default email client. However, if I click on a weblink in Thunderbird mail, another Thunderbird session opens (instead opening Firefox). And when I close both software, and check again for default Mate applications ... voila ... Thunderbird seems as magically selected itself for both mail client and web browser!

I'm not sure why it would do that, but perhaps set the default browser and mail client yourself and in Thunderbird > Preferences unmark 'Check if Thunderbird is the default mail client'.

It was checked (marked), so I unmarked it.

btw I have been testing on Cinnamon, not Mate.


The issue started after upgrading to Firefox 91.4.1esr (32-bit) on Debian 9 stretch. Earlier today I upgraded to 91.5.0esr and the symptom is persistent.



Reply to: