| Summary: | Thunderbird 60.4.0 and enigmail 2.0.9 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Nicolas Salguero <nicolas.salguero> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, fri, jim, lewyssmith, lists.jjorge, luigiwalser, marja11, pkg-bugs, sysadmin-bugs |
| Version: | 6 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA6-32-OK MGA6-64-OK | ||
| Source RPM: | thunderbird | CVE: | |
| Status comment: | |||
|
Description
Nicolas Salguero
2018-12-21 16:33:15 CET
Assigning to the registered maintainer, but CC'ing all packagers collectively, in case the maintainer is unavailable. CC:
(none) =>
marja11, pkg-bugs Nicolas has actually already packaged it. We'll just need an advisory. thunderbird-60.4.0-1.mga6 thunderbird-enigmail-60.4.0-1.mga6 thunderbird-ar-60.4.0-1.mga6 thunderbird-ast-60.4.0-1.mga6 thunderbird-be-60.4.0-1.mga6 thunderbird-bg-60.4.0-1.mga6 thunderbird-br-60.4.0-1.mga6 thunderbird-ca-60.4.0-1.mga6 thunderbird-cs-60.4.0-1.mga6 thunderbird-cy-60.4.0-1.mga6 thunderbird-da-60.4.0-1.mga6 thunderbird-de-60.4.0-1.mga6 thunderbird-el-60.4.0-1.mga6 thunderbird-en_GB-60.4.0-1.mga6 thunderbird-en_US-60.4.0-1.mga6 thunderbird-es_AR-60.4.0-1.mga6 thunderbird-es_ES-60.4.0-1.mga6 thunderbird-et-60.4.0-1.mga6 thunderbird-eu-60.4.0-1.mga6 thunderbird-fi-60.4.0-1.mga6 thunderbird-fr-60.4.0-1.mga6 thunderbird-fy_NL-60.4.0-1.mga6 thunderbird-ga_IE-60.4.0-1.mga6 thunderbird-gd-60.4.0-1.mga6 thunderbird-gl-60.4.0-1.mga6 thunderbird-he-60.4.0-1.mga6 thunderbird-hr-60.4.0-1.mga6 thunderbird-hsb-60.4.0-1.mga6 thunderbird-hu-60.4.0-1.mga6 thunderbird-hy_AM-60.4.0-1.mga6 thunderbird-id-60.4.0-1.mga6 thunderbird-is-60.4.0-1.mga6 thunderbird-it-60.4.0-1.mga6 thunderbird-ja-60.4.0-1.mga6 thunderbird-ko-60.4.0-1.mga6 thunderbird-lt-60.4.0-1.mga6 thunderbird-nb_NO-60.4.0-1.mga6 thunderbird-nl-60.4.0-1.mga6 thunderbird-nn_NO-60.4.0-1.mga6 thunderbird-pl-60.4.0-1.mga6 thunderbird-pt_BR-60.4.0-1.mga6 thunderbird-pt_PT-60.4.0-1.mga6 thunderbird-ro-60.4.0-1.mga6 thunderbird-ru-60.4.0-1.mga6 thunderbird-si-60.4.0-1.mga6 thunderbird-sk-60.4.0-1.mga6 thunderbird-sl-60.4.0-1.mga6 thunderbird-sq-60.4.0-1.mga6 thunderbird-sv_SE-60.4.0-1.mga6 thunderbird-tr-60.4.0-1.mga6 thunderbird-uk-60.4.0-1.mga6 thunderbird-vi-60.4.0-1.mga6 thunderbird-zh_CN-60.4.0-1.mga6 thunderbird-zh_TW-60.4.0-1.mga6 from SRPMS: thunderbird-60.4.0-1.mga6.src.rpm thunderbird-l10n-60.4.0-1.mga6.src.rpm Assignee:
doktor5000 =>
qa-bugs Tested in 32 bit system, in french. Sent a crypted email, and the new option to crypt the subject came up. Good job! Decryption was also ok, but no more calendar! Had to use this page again to get it back, so I suggest it goes in the advisory notes : https://support.mozilla.org/en-US/kb/calendar-updates-issues-thunderbird#w_lightning-disappears-after-a-thunderbird-update-release-and-beta-versions CC:
(none) =>
lists.jjorge on mga6-64 kernel-desktop plasma packages installed cleanly: - thunderbird-60.4.0-1.mga6.x86_64 - thunderbird-en_GB-60.4.0-1.mga6.noarch email (POP, SMTP): OK Calendar: OK Address book: OK Movemail: OK I don't use enigmail or IMAP CC:
(none) =>
jim System: mga6 64 bit Plasma, Nvidia, kernel-desktop, updated to updates_testing yesterday (kernel is desktop 4.14.89) Thunderbird 60.4.0-1.mga6.x86_64 and swedish works fine here, IMAP + SMTP, not using calendar. ( An extra plus: While testing previous update while in testing state, on this system thunderbird lost localisation, but updating now it regained localisation automagically ) CC:
(none) =>
fri MGA6 64-bit Plasma, Core2Duo, Intel graphics, kernel-desktop, US-English. This has been working OK for me in Cauldron for a few days now. Trying it this morning in MGA6, and everything I use is working OK here, too. I do not use the calendar, or enigmail. Giving this a 64-bit OK, and validating. Whiteboard:
MGA6-32-OK =>
MGA6-32-OK MGA6-64-OK Suggested advisory: ======================== The updated packages fix several bugs and some security issues. References: ======================== https://www.thunderbird.net/en-US/thunderbird/60.4.0/releasenotes/ https://enigmail.net/index.php/en/download/changelog Upstream still hasn't posted the security issues fixed in Thunderbird. As for enigmail, it's listed in this SUSE advisory from December 21: http://lists.suse.com/pipermail/sle-security-updates/2018-December/004995.html Advisory from comments 7, 2, 8. But enigmail is not mentioned in comments 7 & 2; just 0 & 8. Keywords:
(none) =>
advisory An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2018-0488.html Resolution:
(none) =>
FIXED RedHat has issued an advisory for this on January 24: https://access.redhat.com/errata/RHSA-2019:0160 CC:
(none) =>
luigiwalser |