Bug 34338 - Thunderbird 128.11.1
Summary: Thunderbird 128.11.1
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK MGA9-32-OK
Keywords: advisory, validated_update
Depends on: 34337 34384
Blocks:
  Show dependency tree / graph
 
Reported: 2025-06-02 11:12 CEST by Nicolas Salguero
Modified: 2025-06-27 04:12 CEST (History)
7 users (show)

See Also:
Source RPM: thunderbird, thunderbird-l10n
CVE: CVE-2025-5262, CVE-2025-5263, CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268, CVE-2025-5269, CVE-2025-5986
Status comment: Do not ship any thunderbird (i10n) packages for armv7hl

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2025-06-02 11:12:44 CEST 
Mozilla has released Thunderbird 128.11 on May 27:
https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/
Nicolas Salguero 2025-06-02 11:13:21 CEST

Source RPM: (none) => thunderbird, thunderbird-l10n
Depends on: (none) => 34337

Nicolas Salguero 2025-06-02 11:14:07 CEST

CVE: (none) => CVE-2025-5262, CVE-2025-5263, CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268, CVE-2025-5269

Nicolas Salguero 2025-06-02 11:14:12 CEST

Whiteboard: (none) => MGA9TOO

Comment 1 Marja Van Waes 2025-06-05 21:15:05 CEST 
Assigning to ns80 because he is the de facto maintainer and he already pushed thunderbird-l10n-128.11.0-1.mga9

@ doktor5000
Can you please give this package to "nobody" so that ns80 can take it, if he wants to?

CC: (none) => doktor5000, marja11
Assignee: bugsquad => nicolas.salguero

Comment 2 Nicolas Salguero 2025-06-10 09:39:00 CEST 
Version 128.11.0 fails to build for i586 for Mageia 9, probably because of the timeout, and I have no idea why it takes so long.

Assignee: nicolas.salguero => pkg-bugs

Comment 3 Nicolas Salguero 2025-06-11 10:03:18 CEST 
Mozilla has released Thunderbird 128.11.1 on June 10:
https://www.thunderbird.net/en-US/thunderbird/128.11.1esr/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/

CVE: CVE-2025-5262, CVE-2025-5263, CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268, CVE-2025-5269 => CVE-2025-5262, CVE-2025-5263, CVE-2025-5264, CVE-2025-5266, CVE-2025-5267, CVE-2025-5268, CVE-2025-5269, CVE-2025-5986
Summary: Thunderbird 128.11 => Thunderbird 128.11.1

katnatek 2025-06-19 18:59:57 CEST

Depends on: (none) => 34384

Comment 4 katnatek 2025-06-20 00:07:50 CEST Comment hidden (obsolete)

Assignee: pkg-bugs => qa-bugs
Version: Cauldron => 9
Hardware: All => x86_64
Whiteboard: MGA9TOO => (none)

Comment 5 Herman Viaene 2025-06-20 11:26:02 CEST 
MGA9-64 server Xfce on Compaq H000SB
No installation issues.
Sending and receiving email without and with attachement: all OK
Connection with Google calendar also OK.

CC: (none) => herman.viaene

Comment 6 Jose Manuel López 2025-06-20 11:34:03 CEST 
Hi.

Installed in real Mga x86_64 Plasma Kde. I'm using it right now without issues.

Send and receive ok.
Settings and spanish language ok.
Addons ok.
Signatures ok.
Calendar and task ok.

Greetings!

CC: (none) => Joselp

Comment 7 Morgan Leijström 2025-06-21 23:10:14 CEST 
OK mga9-64 on my workstation svarten

Plasma X11, Swedish locale
Intel Core i7 870, GPU: AMD Navi 24 Radeon RX 6400

$ thunderbird --version
Thunderbird 128.11.1esr


Repeated tests like I use to perform:

Closed Thunderbird, data backup, updated, started:
Thunderbird just keep working OK:
Opened tabs restored
Settings and local mail kept
IMAP (offline, IMAP to synk to server)
SMTP
Sent and received mail with inline jpeg and attached pdf
Viewed attached pdf in Thunderbird, and printed to network printer.

I do not use calendar nor tasks or filters.

CC: (none) => fri

Comment 8 Morgan Leijström 2025-06-22 19:14:44 CEST 
Note:

We must avoid to ship the i586 thunderbird 128.11 internationalisation packages currently in i586 updates testing repo !

Status comment: (none) => Do not ship any thunderbird (i10n) packages for i586

Comment 9 Thomas Andrews 2025-06-23 13:48:52 CEST 
MGA9-64 Plasma, US English version. No installation issues, and working OK for two days.

CC: (none) => andrewsfarm

Comment 10 katnatek 2025-06-24 06:56:25 CEST 
Send build of thunderbird-128.11.1-1.1.mga9
Comment 11 katnatek 2025-06-24 18:33:44 CEST 
RPMS:

x86_64:
thunderbird-af-128.11.1-1.mga9.noarch.rpm
thunderbird-ar-128.11.1-1.mga9.noarch.rpm
thunderbird-ast-128.11.1-1.mga9.noarch.rpm
thunderbird-be-128.11.1-1.mga9.noarch.rpm
thunderbird-bg-128.11.1-1.mga9.noarch.rpm
thunderbird-br-128.11.1-1.mga9.noarch.rpm
thunderbird-ca-128.11.1-1.mga9.noarch.rpm
thunderbird-cs-128.11.1-1.mga9.noarch.rpm
thunderbird-cy-128.11.1-1.mga9.noarch.rpm
thunderbird-da-128.11.1-1.mga9.noarch.rpm
thunderbird-de-128.11.1-1.mga9.noarch.rpm
thunderbird-dsb-128.11.1-1.mga9.noarch.rpm
thunderbird-el-128.11.1-1.mga9.noarch.rpm
thunderbird-en_CA-128.11.1-1.mga9.noarch.rpm
thunderbird-en_GB-128.11.1-1.mga9.noarch.rpm
thunderbird-en_US-128.11.1-1.mga9.noarch.rpm
thunderbird-es_AR-128.11.1-1.mga9.noarch.rpm
thunderbird-es_ES-128.11.1-1.mga9.noarch.rpm
thunderbird-es_MX-128.11.1-1.mga9.noarch.rpm
thunderbird-et-128.11.1-1.mga9.noarch.rpm
thunderbird-eu-128.11.1-1.mga9.noarch.rpm
thunderbird-fi-128.11.1-1.mga9.noarch.rpm
thunderbird-fr-128.11.1-1.mga9.noarch.rpm
thunderbird-fy_NL-128.11.1-1.mga9.noarch.rpm
thunderbird-ga_IE-128.11.1-1.mga9.noarch.rpm
thunderbird-gd-128.11.1-1.mga9.noarch.rpm
thunderbird-gl-128.11.1-1.mga9.noarch.rpm
thunderbird-he-128.11.1-1.mga9.noarch.rpm
thunderbird-hr-128.11.1-1.mga9.noarch.rpm
thunderbird-hsb-128.11.1-1.mga9.noarch.rpm
thunderbird-hu-128.11.1-1.mga9.noarch.rpm
thunderbird-hy_AM-128.11.1-1.mga9.noarch.rpm
thunderbird-id-128.11.1-1.mga9.noarch.rpm
thunderbird-is-128.11.1-1.mga9.noarch.rpm
thunderbird-it-128.11.1-1.mga9.noarch.rpm
thunderbird-ja-128.11.1-1.mga9.noarch.rpm
thunderbird-ka-128.11.1-1.mga9.noarch.rpm
thunderbird-kab-128.11.1-1.mga9.noarch.rpm
thunderbird-kk-128.11.1-1.mga9.noarch.rpm
thunderbird-ko-128.11.1-1.mga9.noarch.rpm
thunderbird-lt-128.11.1-1.mga9.noarch.rpm
thunderbird-lv-128.11.1-1.mga9.noarch.rpm
thunderbird-ms-128.11.1-1.mga9.noarch.rpm
thunderbird-nb_NO-128.11.1-1.mga9.noarch.rpm
thunderbird-nl-128.11.1-1.mga9.noarch.rpm
thunderbird-nn_NO-128.11.1-1.mga9.noarch.rpm
thunderbird-pa_IN-128.11.1-1.mga9.noarch.rpm
thunderbird-pl-128.11.1-1.mga9.noarch.rpm
thunderbird-pt_BR-128.11.1-1.mga9.noarch.rpm
thunderbird-pt_PT-128.11.1-1.mga9.noarch.rpm
thunderbird-ro-128.11.1-1.mga9.noarch.rpm
thunderbird-ru-128.11.1-1.mga9.noarch.rpm
thunderbird-sk-128.11.1-1.mga9.noarch.rpm
thunderbird-sl-128.11.1-1.mga9.noarch.rpm
thunderbird-sq-128.11.1-1.mga9.noarch.rpm
thunderbird-sr-128.11.1-1.mga9.noarch.rpm
thunderbird-sv_SE-128.11.1-1.mga9.noarch.rpm
thunderbird-th-128.11.1-1.mga9.noarch.rpm
thunderbird-tr-128.11.1-1.mga9.noarch.rpm
thunderbird-uk-128.11.1-1.mga9.noarch.rpm
thunderbird-uz-128.11.1-1.mga9.noarch.rpm
thunderbird-vi-128.11.1-1.mga9.noarch.rpm
thunderbird-zh_CN-128.11.1-1.mga9.noarch.rpm
thunderbird-zh_TW-128.11.1-1.mga9.noarch.rpm
thunderbird-128.11.1-1.1.mga9

SRPMS:
thunderbird-128.11.1-1.1.mga9
thunderbird-l10n-128.11.1-1.mga

Hardware: x86_64 => All
Status comment: Do not ship any thunderbird (i10n) packages for i586 => Do not ship any thunderbird (i10n) packages for armv7hl

katnatek 2025-06-24 19:47:31 CEST

Keywords: (none) => advisory

Comment 12 Thomas Andrews 2025-06-25 14:33:45 CEST 
Updated MGA9-64 thunderbird-only (and Firefox) on the same hardware as comment 9, still working OK.

Really should have i586 tests before validating this time. And more 64-bit tests wouldn't hurt, either.
Comment 13 Morgan Leijström 2025-06-25 14:42:09 CEST 
I too, and my wife on similar system use the new version on x86_64 full OK.
But we only use it for mail in simple ways, not calendar etc.

I agree with TJ on we should have i586 test of TB (i repoerted OK for FF)
Comment 14 Thomas Andrews 2025-06-26 22:18:46 CEST 
MGA9-32 Xfce on a HP Probook 6550b, using the server kernel.

Copied a .thunderbird folder from a 64-bit install on this hardware, then installed the 32-bit thunderbird US English version plus dependencies from this bug. Ran it using "thunderbird -p" so that I could select to use the copied profile.

Checked usegroups, sent and received email to myself. No issues to report. As with my other tests, I do not use the calendar.

This should be enough to test for the i586 arch. Giving it OKs and validating.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs
Whiteboard: (none) => MGA9-64-OK MGA9-32-OK

Comment 15 Mageia Robot 2025-06-27 04:12:25 CEST 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0197.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.