On Thu, 2021-12-09 at 14:18 +0000, piorunz wrote:
> On 09/12/2021 12:47, Georgi Naplatanov wrote:
>
> > Hey Piotr,
> >
> > a new release of Firefox ESR was uploaded to Sid two days ago and
> > probably will be uploaded to stable soon.
> >
> > https://buildd.debian.org/status/package.php?p=firefox-esr&suite=sid
>
> ESR 91 was first uploaded to sid in November. It didn't migrated to
> Testing, or Stable, due to problems. Package tracker show some details:
> https://tracker.debian.org/pkg/firefox-esr
>
> There is a bug here:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001234
>
> Rust compiler for Stable is not available? It means we have to continue
> to use outdated, vulnerable Firefox ESR until this is resolved? When it
> will be?
Think it's more complicated than just a compiler [1]
Thanks for bringing this to our attention. I've just installed ESR 91
direct from Firefox, as it seems Debian are likely to leave us with an
insecure browser for a long time. Considering this was known about
before the last release, you would have thought we would have been
warned about it in the release notes, or through some other means.
Thanks, Tixy. I will, also, install Firefox 91 directly from Firefox [into my Bookworm test environments].
Kenneth Parker