Bug 33633 - Thunderbird 128.3.2
Summary: Thunderbird 128.3.2
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
: 33608 (view as bug list)
Depends on: 33502
Blocks: 33608
  Show dependency treegraph
 
Reported: 2024-10-11 09:22 CEST by Nicolas Salguero
Modified: 2024-10-27 03:37 CET (History)
7 users (show)

See Also:
Source RPM: thunderbird, thunderbird-l10n
CVE: CVE-2024-9680
Status comment:


Attachments

Description Nicolas Salguero 2024-10-11 09:22:37 CEST
Mozilla has released Thunderbird 128.3.1 on October 10:
https://www.thunderbird.net/en-US/thunderbird/128.3.1esr/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-52/
Nicolas Salguero 2024-10-11 09:23:40 CEST

Assignee: bugsquad => nicolas.salguero
Source RPM: (none) => thunderbird, thunderbird-l10n
CVE: (none) => CVE-2024-9680
Whiteboard: (none) => MGA9TOO

Nicolas Salguero 2024-10-11 09:25:02 CEST

Blocks: (none) => 33608

Nicolas Salguero 2024-10-11 15:47:54 CEST

Depends on: (none) => 33502

Nicolas Salguero 2024-10-11 15:48:01 CEST

Version: Cauldron => 9

Comment 1 Nicolas Salguero 2024-10-21 16:26:45 CEST
Mozilla has released Thunderbird 128.3.2 on October 17:
https://www.thunderbird.net/en-US/thunderbird/128.3.2esr/releasenotes/

Summary: Thunderbird 128.3.1 => Thunderbird 128.3.2

Comment 2 Nicolas Salguero 2024-10-22 09:50:40 CEST
*** Bug 33608 has been marked as a duplicate of this bug. ***
Comment 3 Nicolas Salguero 2024-10-23 10:11:55 CEST
Suggested advisory:
========================

The updated packages provide Thunderbird 128 for all mandatory arches of Mageia (x86_64, i586 and aarch64) and fix several bugs, including a security vulnerability:

Use-after-free in Animation timeline. (CVE-2024-9680)

References:
https://www.thunderbird.net/en-US/thunderbird/128.3.1esr/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2024-52/
https://www.thunderbird.net/en-US/thunderbird/128.3.2esr/releasenotes/
https://bugs.mageia.org/show_bug.cgi?id=33608
========================

Updated packages in core/updates_testing:
========================
thunderbird-128.3.2-1.mga9
thunderbird-af-128.3.2-1.mga9
thunderbird-ar-128.3.2-1.mga9
thunderbird-ast-128.3.2-1.mga9
thunderbird-be-128.3.2-1.mga9
thunderbird-bg-128.3.2-1.mga9
thunderbird-br-128.3.2-1.mga9
thunderbird-ca-128.3.2-1.mga9
thunderbird-cs-128.3.2-1.mga9
thunderbird-cy-128.3.2-1.mga9
thunderbird-da-128.3.2-1.mga9
thunderbird-de-128.3.2-1.mga9
thunderbird-dsb-128.3.2-1.mga9
thunderbird-el-128.3.2-1.mga9
thunderbird-en_CA-128.3.2-1.mga9
thunderbird-en_GB-128.3.2-1.mga9
thunderbird-en_US-128.3.2-1.mga9
thunderbird-es_AR-128.3.2-1.mga9
thunderbird-es_ES-128.3.2-1.mga9
thunderbird-es_MX-128.3.2-1.mga9
thunderbird-et-128.3.2-1.mga9
thunderbird-eu-128.3.2-1.mga9
thunderbird-fi-128.3.2-1.mga9
thunderbird-fr-128.3.2-1.mga9
thunderbird-fy_NL-128.3.2-1.mga9
thunderbird-ga_IE-128.3.2-1.mga9
thunderbird-gd-128.3.2-1.mga9
thunderbird-gl-128.3.2-1.mga9
thunderbird-he-128.3.2-1.mga9
thunderbird-hr-128.3.2-1.mga9
thunderbird-hsb-128.3.2-1.mga9
thunderbird-hu-128.3.2-1.mga9
thunderbird-hy_AM-128.3.2-1.mga9
thunderbird-id-128.3.2-1.mga9
thunderbird-is-128.3.2-1.mga9
thunderbird-it-128.3.2-1.mga9
thunderbird-ja-128.3.2-1.mga9
thunderbird-ka-128.3.2-1.mga9
thunderbird-kab-128.3.2-1.mga9
thunderbird-kk-128.3.2-1.mga9
thunderbird-ko-128.3.2-1.mga9
thunderbird-lt-128.3.2-1.mga9
thunderbird-lv-128.3.2-1.mga9
thunderbird-ms-128.3.2-1.mga9
thunderbird-nb_NO-128.3.2-1.mga9
thunderbird-nl-128.3.2-1.mga9
thunderbird-nn_NO-128.3.2-1.mga9
thunderbird-pa_IN-128.3.2-1.mga9
thunderbird-pl-128.3.2-1.mga9
thunderbird-pt_BR-128.3.2-1.mga9
thunderbird-pt_PT-128.3.2-1.mga9
thunderbird-ro-128.3.2-1.mga9
thunderbird-ru-128.3.2-1.mga9
thunderbird-sk-128.3.2-1.mga9
thunderbird-sl-128.3.2-1.mga9
thunderbird-sq-128.3.2-1.mga9
thunderbird-sr-128.3.2-1.mga9
thunderbird-sv_SE-128.3.2-1.mga9
thunderbird-th-128.3.2-1.mga9
thunderbird-tr-128.3.2-1.mga9
thunderbird-uk-128.3.2-1.mga9
thunderbird-uz-128.3.2-1.mga9
thunderbird-vi-128.3.2-1.mga9
thunderbird-zh_CN-128.3.2-1.mga9
thunderbird-zh_TW-128.3.2-1.mga9

from SRPMS:
thunderbird-128.3.2-1.mga9.src.rpm
thunderbird-l10n-128.3.2-1.mga9.src.rpm

Assignee: nicolas.salguero => qa-bugs
Status: NEW => ASSIGNED
Whiteboard: MGA9TOO => (none)

katnatek 2024-10-23 19:55:40 CEST

Keywords: (none) => advisory

Comment 4 Thomas Andrews 2024-10-24 13:51:20 CEST
MGA9-64 Plasma on an HP Pavilion.

No installation issues on the US English version. Receive and send POP mail, and newsgroups. I do not use the calendar.

CC: (none) => andrewsfarm

Comment 5 Morgan Leijström 2024-10-24 14:27:35 CEST
mga9-64 OK here

Plasma X11
Intel I7-870, 6.6.52-server-1
GPU AMD Radeon RX 6400 radeonsi navi24

Closed Thunderbird, updated, started:
Thunderbird just keep working OK:
Settings and local mail kept
Swedish locale
IMAP (offline, IMAP to synk to server)
SMTP
Sent mail with inline jpg, and attached pdf
Received mail with inline jpg, and attached pdf, viewed and printed the pdf.

Also my wife is using it now (also mga9 Plasma)

We do not use calendar nor tasks or filters

CC: (none) => fri

Comment 6 Jose Manuel López 2024-10-24 14:44:10 CEST
Installed in mga9-64.

Ok at the moment. Send and receive, imap and pop3 accounts, task and calendar ok.
Spanish language ok.

Kernel: Linux 6.6.58-desktop-1.mga9
DE: KDE Plasma
CPU: AMD Ryzen 7 5700U (16) @ 4,37 GHz
GPU: AMD Lucienne [Integrated]

Run from terminal:

[jose@localhost ~]$ thunderbird
ATTENTION: default value of option mesa_glthread overridden by environment.
[Parent 20147, Main Thread] WARNING: /usr/share/applications/kde-mimeapps.list contains a [Added Associations] group, but it is not permitted here.  Only the non-desktop-specific mimeapps.list file may add or remove associations.: 'glib warning', file /home/iurt/rpmbuild/BUILD/thunderbird-128.3.2/thunderbird-128.3.2/toolkit/xre/nsSigHandlers.cpp:187

(thunderbird:20147): GLib-GIO-WARNING **: 14:38:36.157: /usr/share/applications/kde-mimeapps.list contains a [Added Associations] group, but it is not permitted here.  Only the non-desktop-specific mimeapps.list file may add or remove associations.

CC: (none) => joselpddj

Comment 7 papoteur 2024-10-25 10:38:01 CEST
mga9-64 OK here
Installed with thunderbird-fr
It solves a bug in getting the RSS feeds new messages.
https://bugzilla.mozilla.org/show_bug.cgi?id=1920339
All seems fine.

CC: (none) => yvesbrungard

Comment 8 Herman Viaene 2024-10-25 14:24:56 CEST
MGA9-64 MATE on HP-Pavillion
No installation issues.
Tested by sending and receiving e-mails without and with attachment, no problems seen.

CC: (none) => herman.viaene

Comment 9 Guillaume Royer 2024-10-25 20:49:18 CEST
MGA9-64 GNOME
Installed with RPMS:

thunderbird-128.3.2-1.mga9.x86_64.rpm
thunderbird-fr-128.3.2-1.mga9.noarch.rpm

All seems OK,
Contact Ok
Calendar Ok
Send and Receive mail SMTP Ok

CC: (none) => guillaume.royer

katnatek 2024-10-26 20:10:39 CEST

Whiteboard: (none) => MGA9-64-OK

Comment 10 Thomas Andrews 2024-10-27 00:54:49 CEST
Yes, I was going to give this the OK tonight.

Validating.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 11 Mageia Robot 2024-10-27 03:37:53 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2024-0336.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.