This is hitting apt-listbugs in stable releases.... nearly woke me up :-)
Jessie shows;- $ apt-cache policy firefox-esr firefox-esr: Installed: 52.7.3esr-1~deb8u1 Candidate: 52.7.3esr-1~deb8u1 Version table: *** 52.7.3esr-1~deb8u1 0 500 http://security.debian.org/ jessie/updates/main amd64 Packages 100 /var/lib/dpkg/status 52.5.0esr-1~deb8u1 0 500 http://ftp.uk.debian.org/debian/ jessie/main amd64 Packages $ apt-cache policy libnss3 libnss3: Installed: 2:3.26-1+debu8u3 Candidate: 2:3.26-1+debu8u3 Version table: *** 2:3.26-1+debu8u3 0 500 http://ftp.uk.debian.org/debian/ jessie/main amd64 Packages 500 http://security.debian.org/ jessie/updates/main amd64 Packages 100 /var/lib/dpkg/status Wheezy $ apt-cache policy firefox-esr firefox-esr: Installed: 52.7.3esr-1~deb7u1 Candidate: 52.7.3esr-1~deb7u1 Version table: *** 52.7.3esr-1~deb7u1 0 500 http://security.debian.org/ wheezy/updates/main amd64 Packages 100 /var/lib/dpkg/status $ apt-cache policy libnss3 libnss3: Installed: 2:3.26-1+debu7u5 Candidate: 2:3.26-1+debu7u5 Version table: *** 2:3.26-1+debu7u5 0 500 http://security.debian.org/ wheezy/updates/main amd64 Packages 100 /var/lib/dpkg/status 2:3.14.5-1+deb7u5 0 500 http://ftp.uk.debian.org/debian/ wheezy/main amd64 Packages This combo seems ok. I can open debign bugs, facebook, google ok.

