Bug 18126 - Thunderbird 38.7.2
Summary: Thunderbird 38.7.2
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: advisory MGA5-32-OK MGA5-64-OK
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2016-04-05 00:03 CEST by David Walser
Modified: 2016-04-17 18:06 CEST (History)
4 users (show)

See Also:
Source RPM: thunderbird-38.7.1-1.mga5.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2016-04-05 00:03:47 CEST
Thunderbird 38.7.2 has been released today (April 4):
https://www.mozilla.org/en-US/thunderbird/38.7.2/releasenotes/

The release notes say the same thing as did 38.7.1.  I don't know if they're incorrect/incomplete or if the change wasn't fully done correctly in the last update.
Florian Hubold 2016-04-05 00:34:57 CEST

Status: NEW => ASSIGNED
CC: (none) => doktor5000

Comment 1 Florian Hubold 2016-04-05 07:10:58 CEST
Pushed thunderbird-38.7.2-1.mga6 to cauldron, will push later today for mga5.
Comment 2 Florian Hubold 2016-04-05 23:53:27 CEST
@David: Would be appreciated if you could help out with the advisory part as usual, thanks in advance :)


Pushed thunderbird-38.7.2-1.mga5 and the -l10n packages to core/updates_testing, please test the following packages.

i586
================
thunderbird-38.7.2-1.mga5.i586
thunderbird-enigmail-38.7.2-1.mga5.i586

noarch
================
thunderbird-ar-38.7.2-1.mga5.noarch
thunderbird-ast-38.7.2-1.mga5.noarch
thunderbird-be-38.7.2-1.mga5.noarch
thunderbird-bg-38.7.2-1.mga5.noarch
thunderbird-bn_BD-38.7.2-1.mga5.noarch
thunderbird-br-38.7.2-1.mga5.noarch
thunderbird-ca-38.7.2-1.mga5.noarch
thunderbird-cs-38.7.2-1.mga5.noarch
thunderbird-cy-38.7.2-1.mga5.noarch
thunderbird-da-38.7.2-1.mga5.noarch
thunderbird-de-38.7.2-1.mga5.noarch
thunderbird-el-38.7.2-1.mga5.noarch
thunderbird-en_GB-38.7.2-1.mga5.noarch
thunderbird-en_US-38.7.2-1.mga5.noarch
thunderbird-es_AR-38.7.2-1.mga5.noarch
thunderbird-es_ES-38.7.2-1.mga5.noarch
thunderbird-et-38.7.2-1.mga5.noarch
thunderbird-eu-38.7.2-1.mga5.noarch
thunderbird-fi-38.7.2-1.mga5.noarch
thunderbird-fr-38.7.2-1.mga5.noarch
thunderbird-fy_NL-38.7.2-1.mga5.noarch
thunderbird-ga_IE-38.7.2-1.mga5.noarch
thunderbird-gd-38.7.2-1.mga5.noarch
thunderbird-gl-38.7.2-1.mga5.noarch
thunderbird-he-38.7.2-1.mga5.noarch
thunderbird-hr-38.7.2-1.mga5.noarch
thunderbird-hsb-38.7.2-1.mga5.noarch
thunderbird-hu-38.7.2-1.mga5.noarch
thunderbird-hy_AM-38.7.2-1.mga5.noarch
thunderbird-id-38.7.2-1.mga5.noarch
thunderbird-is-38.7.2-1.mga5.noarch
thunderbird-it-38.7.2-1.mga5.noarch
thunderbird-ja-38.7.2-1.mga5.noarch
thunderbird-ko-38.7.2-1.mga5.noarch
thunderbird-lt-38.7.2-1.mga5.noarch
thunderbird-nb_NO-38.7.2-1.mga5.noarch
thunderbird-nl-38.7.2-1.mga5.noarch
thunderbird-nn_NO-38.7.2-1.mga5.noarch
thunderbird-pa_IN-38.7.2-1.mga5.noarch
thunderbird-pl-38.7.2-1.mga5.noarch
thunderbird-pt_BR-38.7.2-1.mga5.noarch
thunderbird-pt_PT-38.7.2-1.mga5.noarch
thunderbird-ro-38.7.2-1.mga5.noarch
thunderbird-ru-38.7.2-1.mga5.noarch
thunderbird-si-38.7.2-1.mga5.noarch
thunderbird-sk-38.7.2-1.mga5.noarch
thunderbird-sl-38.7.2-1.mga5.noarch
thunderbird-sq-38.7.2-1.mga5.noarch
thunderbird-sv_SE-38.7.2-1.mga5.noarch
thunderbird-ta_LK-38.7.2-1.mga5.noarch
thunderbird-tr-38.7.2-1.mga5.noarch
thunderbird-uk-38.7.2-1.mga5.noarch
thunderbird-vi-38.7.2-1.mga5.noarch
thunderbird-zh_CN-38.7.2-1.mga5.noarch
thunderbird-zh_TW-38.7.2-1.mga5.noarch

x86_64
================
thunderbird-38.7.2-1.mga5.x86_64
thunderbird-enigmail-38.7.2-1.mga5.x86_64

src
================
thunderbird-38.7.2-1.mga5.src

Assignee: doktor5000 => qa-bugs

Comment 3 David Walser 2016-04-06 03:40:54 CEST
Advisory:
================

The thunderbird package has been updated to version 38.7.2, which fixes several
bugs, including a potential crash in the handling of SSL certificates.

References:
https://www.mozilla.org/en-US/thunderbird/38.7.2/releasenotes/
Comment 4 David Walser 2016-04-06 04:56:39 CEST
Working fine on Mageia 5 i586.

Whiteboard: (none) => MGA5-32-OK

Comment 5 Thomas Andrews 2016-04-08 00:31:59 CEST
English version appears to work fine on Mageia 5 x86_64.

CC: (none) => andrewsfarm
Whiteboard: MGA5-32-OK => MGA5-32-OK MGA5-64-OK

Comment 6 claire robinson 2016-04-13 17:49:56 CEST
Validating. Advisory uploaded.

Keywords: (none) => validated_update
Whiteboard: MGA5-32-OK MGA5-64-OK => advisory MGA5-32-OK MGA5-64-OK
CC: (none) => sysadmin-bugs

Comment 7 Mageia Robot 2016-04-13 19:40:06 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2016-0139.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED

Comment 8 claire robinson 2016-04-13 21:31:21 CEST
thunderbird-l10n srpm not listed so was missed from the advisory.

Added now, please push as soon as possible. Thanks
Comment 9 Thomas Backlund 2016-04-13 21:46:13 CEST
thunderbird-l10n pushed

CC: (none) => tmb

Comment 10 claire robinson 2016-04-13 21:47:03 CEST
Thanks Thomas :)
Comment 11 Florian Hubold 2016-04-13 23:28:41 CEST
(In reply to claire robinson from comment #8)
> thunderbird-l10n srpm not listed so was missed from the advisory.

sorry :/

Need to check my scriptlet why it didn't list the other src.rpm, or I simply missed to copy the dang last line, didn't know that prevents to push the binary packages ... 

@Thomas: Is is intended like this, if only the src.rpm is not listed here or in the advisory, resulting in the respective binary packages not getting pushed?
Comment 12 David Walser 2016-04-13 23:32:31 CEST
It's a matter of what's listed in the advisory in SVN.  Those are usually committed by QA team members based on what we packagers list here in the bug report.  Packagers also have access to commit the advisory to SVN themselves.
Comment 13 Florian Hubold 2016-04-17 15:05:10 CEST
Yes I'm aware, but what is the relation between listing the src.rpm and the binary packages? Binaries were listed, src.rpm forgotten, so there must be some automated check that does not upload binaries when their src.rpm is not listed?

I'd just like to understand the relation.
Comment 14 David Walser 2016-04-17 15:07:37 CEST
Binaries are not listed in the SVN advisory, so there's nothing to check there.  Those are only listed by packagers in the bug reports so that the QA team knows what actual packages to test.
Comment 15 Thomas Backlund 2016-04-17 18:06:09 CEST
(In reply to Florian Hubold from comment #13)
> Yes I'm aware, but what is the relation between listing the src.rpm and the
> binary packages? Binaries were listed, src.rpm forgotten, so there must be
> some automated check that does not upload binaries when their src.rpm is not
> listed?
> 
> I'd just like to understand the relation.

The upload / package move process only tracks srpms, and moves all packages built from the listed srpm(s)

(that way we get all the packages including the debuginfo packages moved)

Note You need to log in before you can comment on or make changes to this bug.