Bug 34065 - Thunderbird 128.8
Summary: Thunderbird 128.8
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on: 34064
Blocks:
  Show dependency tree / graph
 
Reported: 2025-03-05 10:03 CET by Nicolas Salguero
Modified: 2025-03-12 08:00 CET (History)
6 users (show)

See Also:
Source RPM: thunderbird, thunderbird-l10n
CVE: CVE-2024-43097, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2025-03-05 10:03:03 CET 
Mozilla has released Thunderbird 128.8 on March 4:
https://www.thunderbird.net/en-US/thunderbird/128.8.0esr/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/
Nicolas Salguero 2025-03-05 10:03:24 CET

Whiteboard: (none) => MGA9TOO
Source RPM: (none) => thunderbird, thunderbird-l10n
CVE: (none) => CVE-2024-43097, CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938
Depends on: (none) => 34064

Nicolas Salguero 2025-03-05 17:08:01 CET

Assignee: bugsquad => nicolas.salguero

Comment 1 Morgan Leijström 2025-03-07 14:10:36 CET 
As per the Fiefox bug;

Being security updates, I think we should not delay testing. 

When built for Cauldron please change this bug to mga9.

CC: (none) => fri, nicolas.salguero
Assignee: nicolas.salguero => qa-bugs

Comment 2 Jose Manuel López 2025-03-07 15:34:14 CET 
Hi.

Installed on mga-x64. Slimbook ProX15 amd 4800H

Works fine for me.

Send and receive ok.
Pop3 and Imap accounts ok.
Calendar and task ok.
Spanish translation ok.
Settings and addons ok.
Signatures ok.

From terminal: 

[jose@localhost ~]$ thunderbird
ATTENTION: default value of option mesa_glthread overridden by environment.
[Parent 12028, Main Thread] WARNING: /usr/share/applications/kde-mimeapps.list contains a [Added Associations] group, but it is not permitted here.  Only the non-desktop-specific mimeapps.list file may add or remove associations.: 'glib warning', file /home/iurt/rpmbuild/BUILD/thunderbird-128.8.0/thunderbird-128.8.0/toolkit/xre/nsSigHandlers.cpp:187

(thunderbird:12028): GLib-GIO-WARNING **: 15:30:36.817: /usr/share/applications/kde-mimeapps.list contains a [Added Associations] group, but it is not permitted here.  Only the non-desktop-specific mimeapps.list file may add or remove associations.
[libprotobuf ERROR /home/iurt/rpmbuild/BUILD/thunderbird-128.8.0/thunderbird-128.8.0/toolkit/components/protobuf/src/google/protobuf/message_lite.cc:134] Can't parse message of type "mozilla.cookieBanner.GoogleSOCSCookie" because it is missing required fields: (cannot determine missing fields for lite message)

CC: (none) => Joselp

Comment 3 katnatek 2025-03-07 17:27:32 CET 
List of packages

thunderbird-128.8.0-1.mga9
thunderbird-af-128.8.0-1.mga9
thunderbird-ar-128.8.0-1.mga9
thunderbird-ast-128.8.0-1.mga9
thunderbird-be-128.8.0-1.mga9
thunderbird-bg-128.8.0-1.mga9
thunderbird-br-128.8.0-1.mga9
thunderbird-ca-128.8.0-1.mga9
thunderbird-cs-128.8.0-1.mga9
thunderbird-cy-128.8.0-1.mga9
thunderbird-da-128.8.0-1.mga9
thunderbird-de-128.8.0-1.mga9
thunderbird-dsb-128.8.0-1.mga9
thunderbird-el-128.8.0-1.mga9
thunderbird-en_CA-128.8.0-1.mga9
thunderbird-en_GB-128.8.0-1.mga9
thunderbird-en_US-128.8.0-1.mga9
thunderbird-es_AR-128.8.0-1.mga9
thunderbird-es_ES-128.8.0-1.mga9
thunderbird-es_MX-128.8.0-1.mga9
thunderbird-et-128.8.0-1.mga9
thunderbird-eu-128.8.0-1.mga9
thunderbird-fi-128.8.0-1.mga9
thunderbird-fr-128.8.0-1.mga9
thunderbird-fy_NL-128.8.0-1.mga9
thunderbird-ga_IE-128.8.0-1.mga9
thunderbird-gd-128.8.0-1.mga9
thunderbird-gl-128.8.0-1.mga9
thunderbird-he-128.8.0-1.mga9
thunderbird-hr-128.8.0-1.mga9
thunderbird-hsb-128.8.0-1.mga9
thunderbird-hu-128.8.0-1.mga9
thunderbird-hy_AM-128.8.0-1.mga9
thunderbird-id-128.8.0-1.mga9
thunderbird-is-128.8.0-1.mga9
thunderbird-it-128.8.0-1.mga9
thunderbird-ja-128.8.0-1.mga9
thunderbird-ka-128.8.0-1.mga9
thunderbird-kab-128.8.0-1.mga9
thunderbird-kk-128.8.0-1.mga9
thunderbird-ko-128.8.0-1.mga9
thunderbird-lt-128.8.0-1.mga9
thunderbird-lv-128.8.0-1.mga9
thunderbird-ms-128.8.0-1.mga9
thunderbird-nb_NO-128.8.0-1.mga9
thunderbird-nl-128.8.0-1.mga9
thunderbird-nn_NO-128.8.0-1.mga9
thunderbird-pa_IN-128.8.0-1.mga9
thunderbird-pl-128.8.0-1.mga9
thunderbird-pt_BR-128.8.0-1.mga9
thunderbird-pt_PT-128.8.0-1.mga9
thunderbird-ro-128.8.0-1.mga9
thunderbird-ru-128.8.0-1.mga9
thunderbird-sk-128.8.0-1.mga9
thunderbird-sl-128.8.0-1.mga9
thunderbird-sq-128.8.0-1.mga9
thunderbird-sr-128.8.0-1.mga9
thunderbird-sv_SE-128.8.0-1.mga9
thunderbird-th-128.8.0-1.mga9
thunderbird-tr-128.8.0-1.mga9
thunderbird-uk-128.8.0-1.mga9
thunderbird-uz-128.8.0-1.mga9
thunderbird-vi-128.8.0-1.mga9
thunderbird-zh_CN-128.8.0-1.mga9
thunderbird-zh_TW-128.8.0-1.mga9


SRPM:
thunderbird-128.8.0-1.mga9.src.rpm
thunderbird-l10n-128.8.0-1.mga9.src.rpm
katnatek 2025-03-07 17:35:18 CET

Keywords: (none) => advisory

Comment 4 Herman Viaene 2025-03-08 12:10:09 CET 
MGA9-64 Plasma Wayland on Compaq H000SB
No installation issues.
Sending and receiving mails without and with attachment, display of my google calendar, all OK.

CC: (none) => herman.viaene

Comment 5 Thomas Andrews 2025-03-09 18:51:50 CET 
MGA9-64 Plasma, on two very different machines. US English version, no installation issues.

Used for a day and a half with no issues so far. Used with POP mail and newsgroups. I do not use the calendar.

CC: (none) => andrewsfarm

Nicolas Salguero 2025-03-10 14:06:29 CET

Version: Cauldron => 9
Whiteboard: MGA9TOO => (none)

Comment 6 Morgan Leijström 2025-03-10 21:18:07 CET 
mag9-64 OK here
Offline IMAP, and SMTP
Local mail and settings preserved
Swedish localisation

Not using POP, filters, calendar, chat
Comment 7 Thomas Andrews 2025-03-11 23:29:10 CET 
No reason to hold this back. Validating.

Keywords: (none) => validated_update
Whiteboard: (none) => MGA9-64-OK
CC: (none) => sysadmin-bugs

Comment 8 Mageia Robot 2025-03-12 08:00:58 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0093.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.