Bug 31996

Summary: Thunderbird 102.12
Product: Mageia Reporter: Nicolas Salguero <nicolas.salguero>
Component: SecurityAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact: Sec team <security>
Severity: critical    
Priority: Normal CC: andrewsfarm, davidwhodgins, fri, herman.viaene, nicolas.salguero, sysadmin-bugs
Version: 8Keywords: advisory, validated_update
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA8-64-OK
Source RPM: thunderbird, thunderbird-l10n CVE:
Status comment:
Bug Depends on: 31995    
Bug Blocks:    

Description Nicolas Salguero 2023-06-08 15:59:01 CEST 
Mozilla has released Thunderbird 102.12.0 on June 7:
https://www.thunderbird.net/en-US/thunderbird/102.12.0/releasenotes/

Some security issues are fixed but the advisory is not available.
Nicolas Salguero 2023-06-08 15:59:20 CEST

Whiteboard: (none) => MGA8TOO
CC: (none) => nicolas.salguero
Source RPM: (none) => thunderbird, thunderbird-l10n

Comment 1 Lewis Smith 2023-06-08 21:01:31 CEST 
Nicolas, as you are the packager who now updates Thunderbird, no choice but to assign this bug to you!

CC: nicolas.salguero => (none)
Assignee: bugsquad => nicolas.salguero

David Walser 2023-06-08 22:21:02 CEST

Depends on: (none) => 31995

Comment 2 Nicolas Salguero 2023-06-09 14:49:39 CEST 
Suggested advisory:
========================

The updated packages fix a security vulnerabilities and other bugs.

References:
https://www.thunderbird.net/en-US/thunderbird/102.12.0/releasenotes/
========================

Updated packages in core/updates_testing:
========================
thunderbird-102.12.0-1.mga8
thunderbird-ka-102.12.0-1.mga8
thunderbird-ru-102.12.0-1.mga8
thunderbird-uk-102.12.0-1.mga8
thunderbird-el-102.12.0-1.mga8
thunderbird-ja-102.12.0-1.mga8
thunderbird-zh_TW-102.12.0-1.mga8
thunderbird-kk-102.12.0-1.mga8
thunderbird-th-102.12.0-1.mga8
thunderbird-sk-102.12.0-1.mga8
thunderbird-vi-102.12.0-1.mga8
thunderbird-hu-102.12.0-1.mga8
thunderbird-zh_CN-102.12.0-1.mga8
thunderbird-cs-102.12.0-1.mga8
thunderbird-hsb-102.12.0-1.mga8
thunderbird-dsb-102.12.0-1.mga8
thunderbird-hy_AM-102.12.0-1.mga8
thunderbird-sr-102.12.0-1.mga8
thunderbird-es_MX-102.12.0-1.mga8
thunderbird-fr-102.12.0-1.mga8
thunderbird-de-102.12.0-1.mga8
thunderbird-tr-102.12.0-1.mga8
thunderbird-es_AR-102.12.0-1.mga8
thunderbird-pl-102.12.0-1.mga8
thunderbird-ko-102.12.0-1.mga8
thunderbird-kab-102.12.0-1.mga8
thunderbird-fy_NL-102.12.0-1.mga8
thunderbird-sq-102.12.0-1.mga8
thunderbird-pt_BR-102.12.0-1.mga8
thunderbird-cy-102.12.0-1.mga8
thunderbird-bg-102.12.0-1.mga8
thunderbird-sv_SE-102.12.0-1.mga8
thunderbird-be-102.12.0-1.mga8
thunderbird-sl-102.12.0-1.mga8
thunderbird-is-102.12.0-1.mga8
thunderbird-nl-102.12.0-1.mga8
thunderbird-lt-102.12.0-1.mga8
thunderbird-eu-102.12.0-1.mga8
thunderbird-et-102.12.0-1.mga8
thunderbird-da-102.12.0-1.mga8
thunderbird-fi-102.12.0-1.mga8
thunderbird-gl-102.12.0-1.mga8
thunderbird-pt_PT-102.12.0-1.mga8
thunderbird-he-102.12.0-1.mga8
thunderbird-hr-102.12.0-1.mga8
thunderbird-ro-102.12.0-1.mga8
thunderbird-ar-102.12.0-1.mga8
thunderbird-nn_NO-102.12.0-1.mga8
thunderbird-es_ES-102.12.0-1.mga8
thunderbird-en_GB-102.12.0-1.mga8
thunderbird-nb_NO-102.12.0-1.mga8
thunderbird-en_CA-102.12.0-1.mga8
thunderbird-pa_IN-102.12.0-1.mga8
thunderbird-en_US-102.12.0-1.mga8
thunderbird-ca-102.12.0-1.mga8
thunderbird-id-102.12.0-1.mga8
thunderbird-gd-102.12.0-1.mga8
thunderbird-it-102.12.0-1.mga8
thunderbird-lv-102.12.0-1.mga8
thunderbird-br-102.12.0-1.mga8
thunderbird-ga_IE-102.12.0-1.mga8
thunderbird-af-102.12.0-1.mga8
thunderbird-ms-102.12.0-1.mga8
thunderbird-ast-102.12.0-1.mga8
thunderbird-uz-102.12.0-1.mga8

from SRPMS:
thunderbird-102.12.0-1.mga8.src.rpm
thunderbird-l10n-102.12.0-1.mga8.src.rpm

Assignee: nicolas.salguero => qa-bugs
Status: NEW => ASSIGNED
Whiteboard: MGA8TOO => (none)
CC: (none) => nicolas.salguero
Version: Cauldron => 8

Comment 3 Morgan Leijström 2023-06-09 21:39:20 CEST 
Initial testing on mga9:  seem to work but there is a WARNING

$ thunderbird
ATTENTION: default value of option mesa_glthread overridden by environment.
ATTENTION: default value of option mesa_glthread overridden by environment.
ATTENTION: default value of option mesa_glthread overridden by environment.
[Parent 1449903, Main Thread] WARNING: /usr/share/applications/kde-mimeapps.list contains a [Added Associations] group, but it is not permitted here.  Only the non-desktop-specific mimeapps.list file may add or remove associations.: 'glib warning', file /home/iurt/rpmbuild/BUILD/thunderbird-102.12.0/thunderbird-102.12.0/toolkit/xre/nsSigHandlers.cpp:167

I will keep using it, on mga9 (I do not run TB on any mga8)

CC: (none) => fri

Morgan Leijström 2023-06-09 21:39:40 CEST

Keywords: (none) => feedback

Comment 4 Thomas Andrews 2023-06-10 14:48:40 CEST 
These messages are not new, though they do change. From my mga9 Plasma install, currently still using Thunderbird 102.11.2:

$ thunderbird
ATTENTION: default value of option mesa_glthread overridden by environment.
[Parent 8035, Main Thread] WARNING: /usr/share/applications/kde-mimeapps.list contains a [Added Associations] group, but it is not permitted here.  Only the non-desktop-specific mimeapps.list file may add or remove associations.: 'glib warning', file /home/iurt/rpmbuild/BUILD/thunderbird-102.11.2/thunderbird-102.11.2/toolkit/xre/nsSigHandlers.cpp:167

(thunderbird:8035): GLib-GIO-WARNING **: 08:33:54.944: /usr/share/applications/kde-mimeapps.list contains a [Added Associations] group, but it is not permitted here.  Only the non-desktop-specific mimeapps.list file may add or remove associations.

There are no warnings when not launched from the command line, and I rarely run it that way, so I have no idea how long they have been there. I will say that particular Thunderbird seems to be working perfectly in Cauldron despite them.

CC: (none) => andrewsfarm

Comment 5 Thomas Andrews 2023-06-11 14:59:29 CEST 
On my HP Pavilion 15, MGA8-64 Plasma: 

No installation issues with the US English version. Launching from the command line:

$ thunderbird

(thunderbird:30920): Gtk-WARNING **: 08:45:42.114: Theme parsing error: gtk.css:2:33: Failed to import: Error opening file /home/tom/.config/gtk-3.0/window_decorations.css: No such file or directory
ATTENTION: default value of option mesa_glthread overridden by environment.
ATTENTION: default value of option mesa_glthread overridden by environment.
ATTENTION: default value of option mesa_glthread overridden by environment.
ATTENTION: default value of option mesa_glthread overridden by environment.

The above messages seem harmless, more for information than anything else. Thunderbird performed flawlessly, receiving and replying to POP3 mail from a gmail address.
Thomas Backlund 2023-06-12 21:42:44 CEST

Keywords: feedback => (none)

Comment 6 David Walser 2023-06-12 22:02:35 CEST 
RedHat has issued an advisory for this today (June 12):
https://access.redhat.com/errata/RHSA-2023:3563
Comment 7 Herman Viaene 2023-06-13 11:41:12 CEST 
MGA8-64 MATE on Acer Aspire 5253
No installation issues.
Launching from CLI gives same feedback as in Comment 5, but no further problems.
Sending and receiving mail without and with attachments all work OK.

CC: (none) => herman.viaene

Comment 8 Thomas Andrews 2023-06-13 14:44:47 CEST 
MGA8-64 Plasma on an HP Probook 6550b, after updating to the proposed 5.15.116-1 kernel. No installation issues, and no issues with operation. On this machine, launching from the command line produces but one "ATTENTION"message.

Looks OK here. Since the CLI warnings have not generated any alarm from the developers watching this bug, and with no other issues reported, I think this is good to go. 

Validating. Advisory in Comment 2.

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update
Whiteboard: (none) => MGA8-64-OK

Dave Hodgins 2023-06-15 00:13:48 CEST

Keywords: (none) => advisory
CC: (none) => davidwhodgins

Comment 9 Mageia Robot 2023-06-15 09:28:45 CEST 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2023-0200.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED