Your message dated Sun, 03 Dec 2017 21:32:11 +0000
with message-id <[email protected]>
and subject line Bug#882672: fixed in thunderbird 1:52.5.0-1
has caused the Debian Bug report #882672,
regarding thunderbird: Disable the AppArmor profile by default
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
882672: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882672
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: thunderbird
Version: 1:52.4.0-1
Severity: important
X-Debbugs-Cc: Simon Deziel <[email protected]>,
[email protected]
User: [email protected]
Usertags: modify-profile
Hi,
since AppArmor was enabled by default in sid 9 days ago, it's become
obvious that the AppArmor policy we ship for Thunderbird simply breaks
too many use cases, and there seems to be no way to fix that while
providing meaningful confinement: for example, see #882048 and
#882218. So let's make this AppArmor profile opt-in, i.e. disable it
by default and let users enable it themselves if they are fine with
dealing with the fallout. That's a bit sad, but it's a much better
output than seeing people burning themselves and getting used to
disabling AppArmor entirely on their system, i.e. losing the benefits
of the other, working profiles we ship.
I think we can implement this change by shipping a symlink to the
profile in /etc/apparmor.d/disable/. My understanding is that dpkg
will treat this removal of a conffile as a change worth preserving on
upgrades, i.e. it won't install the symlink again if it's
been deleted.
I'll prepare a branch in Vcs-Git right away.
FTR the two other people who've been actively working on this profile
recently agree with this proposal:
- Simon Deziel:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882218#25
- Vincas Dargis:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882048#50
Cheers,
--
intrigeri
--- End Message ---
--- Begin Message ---
Source: thunderbird
Source-Version: 1:52.5.0-1
We believe that the bug you reported is fixed in the latest version of
thunderbird, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <[email protected]> (supplier of updated thunderbird
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 03 Dec 2017 19:58:57 +0100
Source: thunderbird
Binary: thunderbird thunderbird-dev lightning calendar-google-provider
thunderbird-l10n-all thunderbird-l10n-ar thunderbird-l10n-ast
thunderbird-l10n-be thunderbird-l10n-bg thunderbird-l10n-bn-bd
thunderbird-l10n-br thunderbird-l10n-ca thunderbird-l10n-cs thunderbird-l10n-da
thunderbird-l10n-de thunderbird-l10n-dsb thunderbird-l10n-el
thunderbird-l10n-en-gb thunderbird-l10n-es-ar thunderbird-l10n-es-es
thunderbird-l10n-et thunderbird-l10n-eu thunderbird-l10n-fi thunderbird-l10n-fr
thunderbird-l10n-fy-nl thunderbird-l10n-ga-ie thunderbird-l10n-gd
thunderbird-l10n-gl thunderbird-l10n-he thunderbird-l10n-hr
thunderbird-l10n-hsb thunderbird-l10n-hu thunderbird-l10n-hy-am
thunderbird-l10n-id thunderbird-l10n-is thunderbird-l10n-it thunderbird-l10n-ja
thunderbird-l10n-kab thunderbird-l10n-ko thunderbird-l10n-lt
thunderbird-l10n-nb-no thunderbird-l10n-nl thunderbird-l10n-nn-no
thunderbird-l10n-pa-in thunderbird-l10n-pl thunderbird-l10n-pt-br
thunderbird-l10n-pt-pt
thunderbird-l10n-rm thunderbird-l10n-ro thunderbird-l10n-ru
thunderbird-l10n-si thunderbird-l10n-sk thunderbird-l10n-sl thunderbird-l10n-sq
thunderbird-l10n-sr thunderbird-l10n-sv-se thunderbird-l10n-ta-lk
thunderbird-l10n-tr thunderbird-l10n-uk thunderbird-l10n-vi
thunderbird-l10n-zh-cn thunderbird-l10n-zh-tw lightning-l10n-ar
lightning-l10n-ast lightning-l10n-be lightning-l10n-bg lightning-l10n-bn-bd
lightning-l10n-br lightning-l10n-ca lightning-l10n-cs lightning-l10n-cy
lightning-l10n-da lightning-l10n-de lightning-l10n-dsb lightning-l10n-el
lightning-l10n-es-ar lightning-l10n-es-es lightning-l10n-en-gb
lightning-l10n-et lightning-l10n-eu lightning-l10n-fi lightning-l10n-fr
lightning-l10n-fy-nl lightning-l10n-ga-ie lightning-l10n-gd lightning-l10n-gl
lightning-l10n-he lightning-l10n-hr lightning-l10n-hsb lightning-l10n-hu
lightning-l10n-hy-am lightning-l10n-id lightning-l10n-is lightning-l10n-it
lightning-l10n-ja lightning-l10n-kab lightning-l10n-ko
lightning-l10n-lt lightning-l10n-nb-no lightning-l10n-nl lightning-l10n-nn-no
lightning-l10n-pa-in lightning-l10n-pl lightning-l10n-pt-br
lightning-l10n-pt-pt lightning-l10n-rm lightning-l10n-ro lightning-l10n-ru
lightning-l10n-si lightning-l10n-sk lightning-l10n-sl lightning-l10n-sr
lightning-l10n-sq lightning-l10n-sv-se lightning-l10n-ta-lk lightning-l10n-tr
lightning-l10n-uk lightning-l10n-vi lightning-l10n-zh-cn
lightning-l10n-zh-tw
Architecture: source
Version: 1:52.5.0-1
Distribution: unstable
Urgency: high
Maintainer: Carsten Schoenert <[email protected]>
Changed-By: Carsten Schoenert <[email protected]>
Description:
calendar-google-provider - Google Calendar support for lightning
lightning - Calendar Extension for Thunderbird
lightning-l10n-ar - Arabic language package for lightning
lightning-l10n-ast - Asturian language package for lightning
lightning-l10n-be - Belarusian language package for lightning
lightning-l10n-bg - Bulgarian language package for lightning
lightning-l10n-bn-bd - Bengali (Bangladesh) language package for lightning
lightning-l10n-br - Breton language package for lightning
lightning-l10n-ca - Catalan/Valencian language package for lightning
lightning-l10n-cs - Czech language package for lightning
lightning-l10n-cy - Welsh language package for lightning
lightning-l10n-da - Danish language package for lightning
lightning-l10n-de - German language package for lightning
lightning-l10n-dsb - Lower Sorbian language package for lightning
lightning-l10n-el - Greek language package for lightning
lightning-l10n-en-gb - British English language package for lightning
lightning-l10n-es-ar - Spanish (Argentina) language package for lightning
lightning-l10n-es-es - Spanish (Spain) language package for lightning
lightning-l10n-et - Estonian language package for lightning
lightning-l10n-eu - Basque language package for lightning
lightning-l10n-fi - Finnish language package for lightning
lightning-l10n-fr - French language package for lightning
lightning-l10n-fy-nl - Western Frisian language package for lightning
lightning-l10n-ga-ie - Irish (Ireland) language package for lightning
lightning-l10n-gd - Scottish Gaelic language package for lightning
lightning-l10n-gl - Galician language package for lightning
lightning-l10n-he - Hebrew language package for lightning
lightning-l10n-hr - Croatian language package for lightning
lightning-l10n-hsb - Upper Sorbian language package for lightning
lightning-l10n-hu - Hungarian language package for lightning
lightning-l10n-hy-am - Armenian language package for lightning
lightning-l10n-id - Indonesian language package for lightning
lightning-l10n-is - Icelandic language package for lightning
lightning-l10n-it - Italian language package for lightning
lightning-l10n-ja - Japanese language package for lightning
lightning-l10n-kab - Kabyle language package for lightning
lightning-l10n-ko - Korean language package for lightning
lightning-l10n-lt - Lithuanian language package for lightning
lightning-l10n-nb-no - Bokmaal (Norway) language package for lightning
lightning-l10n-nl - Dutch language package for lightning
lightning-l10n-nn-no - Nynorsk (Norway) language package for lightning
lightning-l10n-pa-in - Punjabi language package for lightning
lightning-l10n-pl - Polish language package for lightning
lightning-l10n-pt-br - Portuguese (Brazil) language package for lightning
lightning-l10n-pt-pt - Portuguese (Portugal) language package for lightning
lightning-l10n-rm - Romansh language package for lightning
lightning-l10n-ro - Romanian language package for lightning
lightning-l10n-ru - Russian language package for lightning
lightning-l10n-si - Sinhala language package for lightning
lightning-l10n-sk - Slovak language package for lightning
lightning-l10n-sl - Slovenian language package for lightning
lightning-l10n-sq - Albanian language package for lightning
lightning-l10n-sr - Serbian language package for lightning
lightning-l10n-sv-se - Swedish language package for lightning
lightning-l10n-ta-lk - Tamil language package for lightning
lightning-l10n-tr - Turkish language package for lightning
lightning-l10n-uk - Ukrainian language package for lightning
lightning-l10n-vi - Vietnamese language package for lightning
lightning-l10n-zh-cn - Chinese (China) language package for lightning
lightning-l10n-zh-tw - Chinese (Taiwan) language package for lightning
thunderbird - mail/news client with RSS, chat and integrated spam filter suppor
thunderbird-dev - Development files for Thunderbird
thunderbird-l10n-all - All language packages for Thunderbird (meta)
thunderbird-l10n-ar - Arabic language package for Thunderbird
thunderbird-l10n-ast - Asturian language package for Thunderbird
thunderbird-l10n-be - Belarusian language package for Thunderbird
thunderbird-l10n-bg - Bulgarian language package for Thunderbird
thunderbird-l10n-bn-bd - Bengali language package for Thunderbird
thunderbird-l10n-br - Breton language package for Thunderbird
thunderbird-l10n-ca - Catalan/Valencian language package for Thunderbird
thunderbird-l10n-cs - Czech language package for Thunderbird
thunderbird-l10n-da - Danish language package for Thunderbird
thunderbird-l10n-de - German language package for Thunderbird
thunderbird-l10n-dsb - Lower Sorbian language package for Thunderbird
thunderbird-l10n-el - Greek language package for Thunderbird
thunderbird-l10n-en-gb - English (Great Britain) language package for
Thunderbird
thunderbird-l10n-es-ar - Spanish (Argentina) language package for Thunderbird
thunderbird-l10n-es-es - Spanish (Spain) language package for Thunderbird
thunderbird-l10n-et - Estonian language package for Thunderbird
thunderbird-l10n-eu - Basque language package for Thunderbird
thunderbird-l10n-fi - Finnish language package for Thunderbird
thunderbird-l10n-fr - French language package for Thunderbird
thunderbird-l10n-fy-nl - Frisian language package for Thunderbird
thunderbird-l10n-ga-ie - Irish (Ireland) language package for Thunderbird
thunderbird-l10n-gd - Gaelic (Scottish) language package for Thunderbird
thunderbird-l10n-gl - Galician language package for Thunderbird
thunderbird-l10n-he - Hebrew language package for Thunderbird
thunderbird-l10n-hr - Croatian language package for Thunderbird
thunderbird-l10n-hsb - Upper Sorbian language package for Thunderbird
thunderbird-l10n-hu - Hungarian language package for Thunderbird
thunderbird-l10n-hy-am - Armenian language package for Thunderbird
thunderbird-l10n-id - Indonesian language package for Thunderbird
thunderbird-l10n-is - Icelandic language package for Thunderbird
thunderbird-l10n-it - Italian language package for Thunderbird
thunderbird-l10n-ja - Japanese language package for Thunderbird
thunderbird-l10n-kab - Kabyle language package for Thunderbird
thunderbird-l10n-ko - Korean language package for Thunderbird
thunderbird-l10n-lt - Lithuanian language package for Thunderbird
thunderbird-l10n-nb-no - Bokmaal (Norway) language package for Thunderbird
thunderbird-l10n-nl - Dutch language package for Thunderbird
thunderbird-l10n-nn-no - Nynorsk (Norway) language package for Thunderbird
thunderbird-l10n-pa-in - Punjabi (India) language package for Thunderbird
thunderbird-l10n-pl - Polish language package for Thunderbird
thunderbird-l10n-pt-br - Portuguese (Brazil) language package for Thunderbird
thunderbird-l10n-pt-pt - Portuguese (Portugal) language package for Thunderbird
thunderbird-l10n-rm - Romansh language package for Thunderbird
thunderbird-l10n-ro - Romania language package for Thunderbird
thunderbird-l10n-ru - Russian language package for Thunderbird
thunderbird-l10n-si - Sinhala language package for Thunderbird
thunderbird-l10n-sk - Slovak language package for Thunderbird
thunderbird-l10n-sl - Slovenian language package for Thunderbird
thunderbird-l10n-sq - Albanian language package for Thunderbird
thunderbird-l10n-sr - Serbian language package for Thunderbird
thunderbird-l10n-sv-se - Swedish (Sweden) language package for Thunderbird
thunderbird-l10n-ta-lk - Tamil language package for Thunderbird
thunderbird-l10n-tr - Turkish language package for Thunderbird
thunderbird-l10n-uk - Ukrainian language package for Thunderbird
thunderbird-l10n-vi - Vietnamese language package for Thunderbird
thunderbird-l10n-zh-cn - Chinese (China) language package for Thunderbird
thunderbird-l10n-zh-tw - Chinese (Taiwan) language package for Thunderbird
Closes: 379304 856492 880532 880953 882672
Changes:
thunderbird (1:52.5.0-1) unstable; urgency=high
.
[ intrigeri ]
* [48e6b65] AppArmor: fix the Crash Reporter and avoid noisy denial logs
(Closes: #880953)
* [ad8b3b5] AppArmor: fix compatibility with NVIDIA hardware
(Closes: #880532)
* [d8ff6b6] Disable the AppArmor profile by default
Due the various side effects by the enabled AppArmor profile in
Thunderbird it's currently better for a user experience we
disabling the AppArmor profile for to not get people get mad with
to many broken things.
Users can always enable the profile by themselves again.
(Closes: #882672)
* [e50eac5] README.Debian: document how to opt-in for AppArmor confinement
* [860d325] README.Debian: document how one can debug the AppArmor profile
.
[Guido Günther]
* [50a8f60] Drop myself from maintainers
Thank you Guido for always helping out if we had some questions!
.
[ Carsten Schoenert ]
* [b64509b] New upstream version 52.5.0
Fixed CVE issues in upstream version 52.5 (MFSA 2017-26)
CVE-2017-7828: Use-after-free of PressShell while restyling layout
CVE-2017-7830: Cross-origin URL information leak through Resource Timing
API
CVE-2017-7826: Memory safety bugs fixed in Firefox 57, Firefox ESR 52.5,
and Thunderbird 52.5
* [3166018] thunderbird.links: let thunderbird pointing to thunderbird-bin
(Closes: #856492)
* [6fff70c] [buster] tb-wrapper: searching the correct dbgsym package
* [4763ca6] adding a NEWS file for thunderbird package
Giving a note about the now disabled AppArmor profile.
* [0b9d656] disabling crashreporter for now
Also don't build and ship the Crashreporter any more, it's
useless
until we can collect all symbols correctly.
* [a285647] move AppArmor specific things into own README file
Put all AppArmor related information into one dedicated file.
* [5d56439] d/thunderbird.js: prepare a line for extra X-Debbugs-Cc
A really old bug report ... building a compromise and put the
requested extra header config into the configuration file but
keep
it deactivated as default.
(Closes: #379304)
Checksums-Sha1:
92eee05cba946757b01deb960291b24fd3727c3c 12522 thunderbird_52.5.0-1.dsc
14d4dab4985be1508ae3f5f34e4d5f2d0d1c02a3 874388
thunderbird_52.5.0.orig-lightning-l10n.tar.xz
433e124fa5be638147fb77154038fc8b1ba5e0dd 8991524
thunderbird_52.5.0.orig-thunderbird-l10n.tar.xz
f65cda231cc9cd811d2ae8979c172da1c09061ec 237711008
thunderbird_52.5.0.orig.tar.xz
7acae5de4e0cbbf89f00951f3603047face30d5f 395748
thunderbird_52.5.0-1.debian.tar.xz
f8c2368e260e773749de7cc2fc25837c7cf67413 51312
thunderbird_52.5.0-1_amd64.buildinfo
Checksums-Sha256:
f05b2c0deb3cb9d18f125540fc05c597f16e67a01073c057f3f3f3091b7e538e 12522
thunderbird_52.5.0-1.dsc
2ce794122664b325b1455a0b5833bd1329ad7b953284509a0faf8d6c6bd1fbfa 874388
thunderbird_52.5.0.orig-lightning-l10n.tar.xz
33bc1ec1aa7804b6518f65765f0a11fbc62f4c72d2da3abc869e0b5bd2da6071 8991524
thunderbird_52.5.0.orig-thunderbird-l10n.tar.xz
c137ca765d643be5722cc8cc6c2ed14f33f64fd7009dd4823e9d8535294d2698 237711008
thunderbird_52.5.0.orig.tar.xz
61795473cbaaabe2ae4c4e91eb25fc34115976252dde3a3134805c244e728052 395748
thunderbird_52.5.0-1.debian.tar.xz
4c9f51802f7fe8fc13997e2bee02d2f0699da84e8d9a162a0906a20e6d4f1e6b 51312
thunderbird_52.5.0-1_amd64.buildinfo
Files:
84f3a16dae6ef075c0825019cd5099e1 12522 mail optional thunderbird_52.5.0-1.dsc
499d4e925a4b0dbab9ad3d6a2ef9b98d 874388 mail optional
thunderbird_52.5.0.orig-lightning-l10n.tar.xz
7245767d11880a0dde47efc10af90da4 8991524 mail optional
thunderbird_52.5.0.orig-thunderbird-l10n.tar.xz
16e7fa53a86c764ae2437000ea8e372b 237711008 mail optional
thunderbird_52.5.0.orig.tar.xz
1d6306b469b29a70d2b013d60c8b1f6a 395748 mail optional
thunderbird_52.5.0-1.debian.tar.xz
abf0400d9bb578df51f155b3bf2a1d08 51312 mail optional
thunderbird_52.5.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=80xo
-----END PGP SIGNATURE-----
--- End Message ---
