| Summary: | Thunderbird 45.4.0 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | critical | ||
| Priority: | Normal | CC: | ghibomgx, jim, lewyssmith, magnux77, rene, sysadmin-bugs, wrw105 |
| Version: | 5 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | has_procedure mga5-64-ok mga5-32-ok | ||
| Source RPM: | thunderbird | CVE: | |
| Status comment: | |||
|
Description
David Walser
2016-09-29 18:05:36 CEST
Language packs are still in 45.3.0. So, during update it's causing an error message and update, thunderbird interface is in english. CC:
(none) =>
magnux77 magnux77: You shouldn't install packages from updates_testing that have not yet been assigned to QA. You can check http://madb.mageia.org/tools/updates for a listing of the ones that have been. Updated packages uploaded for Mageia 5 and Cauldron by Giuseppe. Thanks! Package list below. Advisory to come later. Updated packages in core/updates_testing: ================ thunderbird-45.4.0-1.mga5 thunderbird-enigmail-45.4.0-1.mga5 thunderbird-ar-45.4.0-1.mga5 thunderbird-ast-45.4.0-1.mga5 thunderbird-be-45.4.0-1.mga5 thunderbird-bg-45.4.0-1.mga5 thunderbird-bn_BD-45.4.0-1.mga5 thunderbird-br-45.4.0-1.mga5 thunderbird-ca-45.4.0-1.mga5 thunderbird-cs-45.4.0-1.mga5 thunderbird-cy-45.4.0-1.mga5 thunderbird-da-45.4.0-1.mga5 thunderbird-de-45.4.0-1.mga5 thunderbird-el-45.4.0-1.mga5 thunderbird-en_GB-45.4.0-1.mga5 thunderbird-en_US-45.4.0-1.mga5 thunderbird-es_AR-45.4.0-1.mga5 thunderbird-es_ES-45.4.0-1.mga5 thunderbird-et-45.4.0-1.mga5 thunderbird-eu-45.4.0-1.mga5 thunderbird-fi-45.4.0-1.mga5 thunderbird-fr-45.4.0-1.mga5 thunderbird-fy_NL-45.4.0-1.mga5 thunderbird-ga_IE-45.4.0-1.mga5 thunderbird-gd-45.4.0-1.mga5 thunderbird-gl-45.4.0-1.mga5 thunderbird-he-45.4.0-1.mga5 thunderbird-hr-45.4.0-1.mga5 thunderbird-hsb-45.4.0-1.mga5 thunderbird-hu-45.4.0-1.mga5 thunderbird-hy_AM-45.4.0-1.mga5 thunderbird-id-45.4.0-1.mga5 thunderbird-is-45.4.0-1.mga5 thunderbird-it-45.4.0-1.mga5 thunderbird-ja-45.4.0-1.mga5 thunderbird-ko-45.4.0-1.mga5 thunderbird-lt-45.4.0-1.mga5 thunderbird-nb_NO-45.4.0-1.mga5 thunderbird-nl-45.4.0-1.mga5 thunderbird-nn_NO-45.4.0-1.mga5 thunderbird-pa_IN-45.4.0-1.mga5 thunderbird-pl-45.4.0-1.mga5 thunderbird-pt_BR-45.4.0-1.mga5 thunderbird-pt_PT-45.4.0-1.mga5 thunderbird-ro-45.4.0-1.mga5 thunderbird-ru-45.4.0-1.mga5 thunderbird-si-45.4.0-1.mga5 thunderbird-sk-45.4.0-1.mga5 thunderbird-sl-45.4.0-1.mga5 thunderbird-sq-45.4.0-1.mga5 thunderbird-sv_SE-45.4.0-1.mga5 thunderbird-ta_LK-45.4.0-1.mga5 thunderbird-tr-45.4.0-1.mga5 thunderbird-uk-45.4.0-1.mga5 thunderbird-vi-45.4.0-1.mga5 thunderbird-zh_CN-45.4.0-1.mga5 thunderbird-zh_TW-45.4.0-1.mga5 from SRPMS: thunderbird-45.4.0-1.mga5.src.rpm thunderbird-l10n-45.4.0-1.mga5.src.rpm CC:
(none) =>
ghibomgx
David Walser
2016-10-03 18:24:39 CEST
Version:
Cauldron =>
5 Tested mga5-64 Send/receive/move/delete under IMAP/SMTP all OK. Calendar entry added and updated as normal. I don't use enigmail, but we seem to be passing without it as it depends on another bug anyway. CC:
(none) =>
wrw105 Xcuze me. It happens to me on Cauldron, not on Mageia 5. But it's the second time the problem occurs on Cauldron. (In reply to magnux77 from comment #5) > Xcuze me. It happens to me on Cauldron, not on Mageia 5. But it's the second > time the problem occurs on Cauldron. That's normal on Cauldron. thunderbird has to be built first, and thunderbird-l10n only makes sense if the former build succeeded. Since thunderbird takes a long time to build, it's very likely that your mirror will sync in between, and if you run your updates very often, you'll run into a transient issue. Best follow the dev@ mailing list when using cauldron, to be aware of the updates that will land and if you should wait before updating. RedHat has issued an advisory for this on October 3: https://rhn.redhat.com/errata/RHSA-2016-1985.html Advisory: ================ Updated thunderbird packages fix security vulnerability: Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2016-5257). References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5257 https://www.mozilla.org/en-US/security/advisories/mfsa2016-86/ https://rhn.redhat.com/errata/RHSA-2016-1985.html Severity:
normal =>
critical Testing on mga5-64 thunderbird-en_GB-45.4.0-1.mga5.noarch thunderbird-45.4.0-1.mga5.x86_64 Packages installed cleanly Email (POP and SMTP through ISP's server) - OK Calendar - OK Unix Movemail - OK Usenet - OK This update is OK on mga5-64 for me CC:
(none) =>
jim Testing on mga5-32 thunderbird-en_GB-45.4.0-1.mga5.noarch thunderbird-45.4.0-1.mga5.i586 Packages installed cleanly Email - OK Calendar - Unix Movemail - OK This update is OK for me on mga5-32 Whiteboard:
has_procedure mga5-64-ok =>
has_procedure mga5-64-ok mga5-32-ok Validated, Advisory to be uploaded. Keywords:
(none) =>
validated_update An update for this issue has been pushed to the Mageia Updates repository. http://advisories.mageia.org/MGASA-2016-0336.html Status:
NEW =>
RESOLVED I just upgraded TB from the repo - and it doesn't run properly now: bash-4.3$ thunderbird & [1] 5461 bash-4.3$ [5461] ###!!! ABORT: JS_SetICUMemoryFunctions failed.: file /home/iurt/rpmbuild/BUILD/thunderbird-45.4.0/thunderbird-45.4.0/mozilla/xpcom/build/XPCOMInit.cpp, line 816 [5461] ###!!! ABORT: JS_SetICUMemoryFunctions failed.: file /home/iurt/rpmbuild/BUILD/thunderbird-45.4.0/thunderbird-45.4.0/mozilla/xpcom/build/XPCOMInit.cpp, line 816 [1]+ Segmentfejl thunderbird What could be wrong ? /René Status:
RESOLVED =>
REOPENED Please do not reopen bugs for updates that have been pushed. Please open a new bug if there's a problem. Status:
REOPENED =>
RESOLVED |