Bug 24041 - Thunderbird 60.4.0 and enigmail 2.0.9
Summary: Thunderbird 60.4.0 and enigmail 2.0.9
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA6-32-OK MGA6-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2018-12-21 16:33 CET by Nicolas Salguero
Modified: 2019-01-24 23:34 CET (History)
9 users (show)

See Also:
Source RPM: thunderbird
CVE:
Status comment:


Attachments

Description Nicolas Salguero 2018-12-21 16:33:15 CET
Hi,

Thunderbird 60.4.0 is out: https://www.thunderbird.net/en-US/thunderbird/60.4.0/releasenotes/

Enigmail 2.0.9 fixes a security bug and some regressions: https://enigmail.net/index.php/en/download/changelog

Best regards,

Nico.
Comment 1 Marja Van Waes 2018-12-22 13:09:07 CET
Assigning to the registered maintainer, but CC'ing all packagers collectively, in case the maintainer is unavailable.

CC: (none) => marja11, pkg-bugs
Source RPM: (none) => thunderbird
Assignee: bugsquad => doktor5000

Comment 2 David Walser 2018-12-22 13:41:33 CET
Nicolas has actually already packaged it.  We'll just need an advisory.

thunderbird-60.4.0-1.mga6
thunderbird-enigmail-60.4.0-1.mga6
thunderbird-ar-60.4.0-1.mga6
thunderbird-ast-60.4.0-1.mga6
thunderbird-be-60.4.0-1.mga6
thunderbird-bg-60.4.0-1.mga6
thunderbird-br-60.4.0-1.mga6
thunderbird-ca-60.4.0-1.mga6
thunderbird-cs-60.4.0-1.mga6
thunderbird-cy-60.4.0-1.mga6
thunderbird-da-60.4.0-1.mga6
thunderbird-de-60.4.0-1.mga6
thunderbird-el-60.4.0-1.mga6
thunderbird-en_GB-60.4.0-1.mga6
thunderbird-en_US-60.4.0-1.mga6
thunderbird-es_AR-60.4.0-1.mga6
thunderbird-es_ES-60.4.0-1.mga6
thunderbird-et-60.4.0-1.mga6
thunderbird-eu-60.4.0-1.mga6
thunderbird-fi-60.4.0-1.mga6
thunderbird-fr-60.4.0-1.mga6
thunderbird-fy_NL-60.4.0-1.mga6
thunderbird-ga_IE-60.4.0-1.mga6
thunderbird-gd-60.4.0-1.mga6
thunderbird-gl-60.4.0-1.mga6
thunderbird-he-60.4.0-1.mga6
thunderbird-hr-60.4.0-1.mga6
thunderbird-hsb-60.4.0-1.mga6
thunderbird-hu-60.4.0-1.mga6
thunderbird-hy_AM-60.4.0-1.mga6
thunderbird-id-60.4.0-1.mga6
thunderbird-is-60.4.0-1.mga6
thunderbird-it-60.4.0-1.mga6
thunderbird-ja-60.4.0-1.mga6
thunderbird-ko-60.4.0-1.mga6
thunderbird-lt-60.4.0-1.mga6
thunderbird-nb_NO-60.4.0-1.mga6
thunderbird-nl-60.4.0-1.mga6
thunderbird-nn_NO-60.4.0-1.mga6
thunderbird-pl-60.4.0-1.mga6
thunderbird-pt_BR-60.4.0-1.mga6
thunderbird-pt_PT-60.4.0-1.mga6
thunderbird-ro-60.4.0-1.mga6
thunderbird-ru-60.4.0-1.mga6
thunderbird-si-60.4.0-1.mga6
thunderbird-sk-60.4.0-1.mga6
thunderbird-sl-60.4.0-1.mga6
thunderbird-sq-60.4.0-1.mga6
thunderbird-sv_SE-60.4.0-1.mga6
thunderbird-tr-60.4.0-1.mga6
thunderbird-uk-60.4.0-1.mga6
thunderbird-vi-60.4.0-1.mga6
thunderbird-zh_CN-60.4.0-1.mga6
thunderbird-zh_TW-60.4.0-1.mga6

from SRPMS:
thunderbird-60.4.0-1.mga6.src.rpm
thunderbird-l10n-60.4.0-1.mga6.src.rpm

Assignee: doktor5000 => qa-bugs
Version: Cauldron => 6

Comment 3 José Jorge 2018-12-22 18:37:12 CET
Tested in 32 bit system, in french. Sent a crypted email, and the new option to crypt the subject came up. Good job!

Decryption was also ok, but no more calendar! Had to use this page again to get it back, so I suggest it goes in the advisory notes :

https://support.mozilla.org/en-US/kb/calendar-updates-issues-thunderbird#w_lightning-disappears-after-a-thunderbird-update-release-and-beta-versions

CC: (none) => lists.jjorge
Whiteboard: (none) => MGA6-32-OK
Status: NEW => ASSIGNED

Comment 4 James Kerr 2018-12-22 21:11:34 CET
on mga6-64  kernel-desktop  plasma

packages installed cleanly:
- thunderbird-60.4.0-1.mga6.x86_64
- thunderbird-en_GB-60.4.0-1.mga6.noarch

email (POP, SMTP):  OK
Calendar: OK
Address book: OK
Movemail: OK

I don't use enigmail or IMAP

CC: (none) => jim

Comment 5 Morgan Leijström 2018-12-22 21:47:46 CET
System: mga6 64 bit Plasma, Nvidia, kernel-desktop, updated to updates_testing yesterday (kernel is desktop 4.14.89)

Thunderbird 60.4.0-1.mga6.x86_64 and swedish works fine here, IMAP + SMTP, not using calendar. 

( An extra plus: While testing previous update while in testing state, on this system thunderbird lost localisation, but updating now it regained localisation automagically )

CC: (none) => fri

Comment 6 Thomas Andrews 2018-12-23 15:19:51 CET
MGA6 64-bit Plasma, Core2Duo, Intel graphics, kernel-desktop, US-English.

This has been working OK for me in Cauldron for a few days now. Trying it this morning in MGA6, and everything I use is working OK here, too. I do not use the calendar, or enigmail.

Giving this a 64-bit OK, and validating.

Whiteboard: MGA6-32-OK => MGA6-32-OK MGA6-64-OK
Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Comment 7 Nicolas Salguero 2018-12-26 15:00:26 CET
Suggested advisory:
========================

The updated packages fix several bugs and some security issues.

References:
========================
https://www.thunderbird.net/en-US/thunderbird/60.4.0/releasenotes/
https://enigmail.net/index.php/en/download/changelog
Comment 8 David Walser 2018-12-26 16:15:23 CET
Upstream still hasn't posted the security issues fixed in Thunderbird.  As for enigmail, it's listed in this SUSE advisory from December 21:
http://lists.suse.com/pipermail/sle-security-updates/2018-December/004995.html
Comment 9 Lewis Smith 2018-12-26 21:03:32 CET
Advisory from comments 7, 2, 8. But enigmail is not mentioned in comments 7 & 2; just 0 & 8.

Keywords: (none) => advisory
CC: (none) => lewyssmith

Comment 10 Mageia Robot 2018-12-27 00:09:43 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0488.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED

Comment 11 David Walser 2019-01-24 23:34:45 CET
RedHat has issued an advisory for this on January 24:
https://access.redhat.com/errata/RHSA-2019:0160

CC: (none) => luigiwalser


Note You need to log in before you can comment on or make changes to this bug.