Bug 29794 - Thunderbird 91.4.1
Summary: Thunderbird 91.4.1
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2021-12-20 17:16 CET by David Walser
Modified: 2021-12-23 22:03 CET (History)
7 users (show)

See Also:
Source RPM: thunderbird, thunderbird-l10n
CVE:
Status comment:


Attachments

Description David Walser 2021-12-20 17:16:45 CET
Mozilla has released Thunderbird 91.4.1 on December 17:
https://www.thunderbird.net/en-US/thunderbird/91.4.1/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/
Comment 1 Nicolas Lécureuil 2021-12-20 21:50:09 CET
first rpm for mageia 8: thunderbird-91.4.1-1.mga8

CC: (none) => mageia

Comment 2 Nicolas Salguero 2021-12-21 09:11:07 CET
For Cauldron, see: https://bugs.gentoo.org/811840#c7
Comment 3 Nicolas Salguero 2021-12-21 13:55:27 CET
Suggested advisory:
========================

The updated packages fix security vulnerabilities:

OpenPGP signature status doesn't consider additional message content. (CVE-2021-4126)

Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. (CVE-2021-44538)

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538
https://www.thunderbird.net/en-US/thunderbird/91.4.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/
========================

Updated packages in core/updates_testing:
========================
thunderbird-91.4.1-1.mga8
thunderbird-ru-91.4.1-1.mga8
thunderbird-uk-91.4.1-1.mga8
thunderbird-ka-91.4.1-1.mga8
thunderbird-el-91.4.1-1.mga8
thunderbird-th-91.4.1-1.mga8
thunderbird-ja-91.4.1-1.mga8
thunderbird-kk-91.4.1-1.mga8
thunderbird-zh_TW-91.4.1-1.mga8
thunderbird-zh_CN-91.4.1-1.mga8
thunderbird-hy_AM-91.4.1-1.mga8
thunderbird-sk-91.4.1-1.mga8
thunderbird-hu-91.4.1-1.mga8
thunderbird-dsb-91.4.1-1.mga8
thunderbird-vi-91.4.1-1.mga8
thunderbird-hsb-91.4.1-1.mga8
thunderbird-sr-91.4.1-1.mga8
thunderbird-cs-91.4.1-1.mga8
thunderbird-fr-91.4.1-1.mga8
thunderbird-ko-91.4.1-1.mga8
thunderbird-sq-91.4.1-1.mga8
thunderbird-lt-91.4.1-1.mga8
thunderbird-be-91.4.1-1.mga8
thunderbird-bg-91.4.1-1.mga8
thunderbird-es_AR-91.4.1-1.mga8
thunderbird-de-91.4.1-1.mga8
thunderbird-tr-91.4.1-1.mga8
thunderbird-pl-91.4.1-1.mga8
thunderbird-pt_BR-91.4.1-1.mga8
thunderbird-fy_NL-91.4.1-1.mga8
thunderbird-sv_SE-91.4.1-1.mga8
thunderbird-kab-91.4.1-1.mga8
thunderbird-nl-91.4.1-1.mga8
thunderbird-cy-91.4.1-1.mga8
thunderbird-gl-91.4.1-1.mga8
thunderbird-eu-91.4.1-1.mga8
thunderbird-he-91.4.1-1.mga8
thunderbird-pt_PT-91.4.1-1.mga8
thunderbird-fi-91.4.1-1.mga8
thunderbird-ar-91.4.1-1.mga8
thunderbird-sl-91.4.1-1.mga8
thunderbird-ro-91.4.1-1.mga8
thunderbird-da-91.4.1-1.mga8
thunderbird-nn_NO-91.4.1-1.mga8
thunderbird-nb_NO-91.4.1-1.mga8
thunderbird-pa_IN-91.4.1-1.mga8
thunderbird-hr-91.4.1-1.mga8
thunderbird-ca-91.4.1-1.mga8
thunderbird-id-91.4.1-1.mga8
thunderbird-en_GB-91.4.1-1.mga8
thunderbird-gd-91.4.1-1.mga8
thunderbird-en_CA-91.4.1-1.mga8
thunderbird-en_US-91.4.1-1.mga8
thunderbird-br-91.4.1-1.mga8
thunderbird-lv-91.4.1-1.mga8
thunderbird-it-91.4.1-1.mga8
thunderbird-ga_IE-91.4.1-1.mga8
thunderbird-et-91.4.1-1.mga8
thunderbird-uz-91.4.1-1.mga8
thunderbird-ast-91.4.1-1.mga8
thunderbird-is-91.4.1-1.mga8
thunderbird-ms-91.4.1-1.mga8
thunderbird-es_ES-91.4.1-1.mga8
thunderbird-af-91.4.1-1.mga8

from SRPMS:
thunderbird-91.4.1-1.mga8.src.rpm
thunderbird-l10n-91.4.1-1.mga8.src.rpm

Assignee: nicolas.salguero => qa-bugs
Source RPM: thunderbird => thunderbird, thunderbird-l10n
Status: NEW => ASSIGNED

Comment 4 Herman Viaene 2021-12-21 14:27:19 CET
MGA8-64 Plasma on Lenovo B50 in Dutch
No installation issues, nl-packis drawn in.
Installation over existing accounts, sendind and receiving mails without and with atachament to and from other account on my ddesktop PC. All wprks OK.

CC: (none) => herman.viaene

Comment 5 Len Lawrence 2021-12-22 20:05:32 CET
mga8, x64
$ rpm -q thunderbird
thunderbird-91.4.1-1.mga8

Using en_GB, IMAP server.  Relaunched with all local folders intact.  List management OK.  Sent an email.  Hyperlinked from a Guardian article in email to a browser.

All good

CC: (none) => tarazed25

Comment 6 Thomas Andrews 2021-12-22 23:11:29 CET
Using US English version for POP3 mail and newsgroups on two 64-bit machines for two days now, with no issues.

CC: (none) => andrewsfarm

Comment 7 David Walser 2021-12-22 23:13:08 CET
Looks good here too.  I think we can validate this.
Comment 8 Morgan Leijström 2021-12-23 00:53:41 CET
Quick check mga8-64 plasma
OK: Swedish, settings and mail are still here, SMTP, IMAP

CC: (none) => fri

Comment 9 Thomas Andrews 2021-12-23 04:25:10 CET
Validating. Advisory in Comment 3.

CC: (none) => sysadmin-bugs
Whiteboard: (none) => MGA8-64-OK
Keywords: (none) => validated_update

Dave Hodgins 2021-12-23 20:03:10 CET

CC: (none) => davidwhodgins
Keywords: (none) => advisory

Comment 10 Mageia Robot 2021-12-23 22:03:11 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0584.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.