Your message dated Tue, 11 Jan 2022 19:35:38 +0000
with message-id <[email protected]>
and subject line Bug#1003280: fixed in thunderbird 1:91.5.0-1
has caused the Debian Bug report #1003280,
regarding thunderbird: TB 91 won't read/apply configuration files in
/etc/thunderbird/pref/
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1003280: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003280
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: thunderbird
Version: 1:91.4.1-1~deb9u1
Severity: normal
Dear Maintainer,
Since the upgrade to Thunderbird 91, custom configuration in
"/etc/thunderbird/pref/" such as the attached file won't be read/applied.
Earlier versions did apply this configration.
I believe the patch
"Add-another-preferences-directory-for-applications-p.patch" to be faulty: the
addtional directory is added inside an if-clause as well as inside an ifedf.
In my believe it should be added unconditionally (i.e. after the "#endif"
instead of inside).
Thank you very much.
-- System Information:
Debian Release: 9.13
APT prefers oldoldstable-debug
APT policy: (500, 'oldoldstable-debug'), (500, 'oldoldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.221.wap (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages thunderbird depends on:
ii debianutils 4.8.1.1
ii fontconfig 2.11.0-6.7+b1
ii libatk1.0-0 2.22.0-1
ii libbz2-1.0 1.0.6-8.1
ii libc6 2.24-11+deb9u4-mi
ii libcairo-gobject2 1.14.8-1+deb9u1
ii libcairo2 1.14.8-1+deb9u1
ii libdbus-1-3 1.10.32-0+deb9u1
ii libdbus-glib-1-2 0.108-2
ii libevent-2.0-5 2.0.21-stable-3
ii libffi6 3.2.1-6
ii libfontconfig1 2.11.0-6.7+b1
ii libfreetype6 2.6.3-3.2+deb9u2
ii libgcc1 1:6.3.0-18+deb9u1
ii libgdk-pixbuf2.0-0 2.36.5-2+deb9u2
ii libglib2.0-0 2.50.3-2+deb9u2
ii libgtk-3-0 3.22.11-1
ii libjson-c3 0.12.1-1.1+deb9u1
ii libpango-1.0-0 1.40.5-1
ii libx11-6 2:1.6.4-3+deb9u4
ii libx11-xcb1 2:1.6.4-3+deb9u4
ii libxcb-shm0 1.12-1
ii libxcb1 1.12-1
ii libxext6 2:1.3.3-1+b2
ii libxrender1 1:0.9.10-1
ii psmisc 22.21-2.1+b2
ii x11-utils 7.7+3+b1
ii zenity 3.22.0-1+b1
ii zlib1g 1:1.2.8.dfsg-5
Versions of packages thunderbird recommends:
ii hunspell-de-de [hunspell-dictionary] 20161207-1
ii hunspell-en-gb [hunspell-dictionary] 1:5.2.5-1
ii hunspell-en-us [hunspell-dictionary] 20070829-7
ii hunspell-fr-classical [hunspell-dictionary] 1:5.7-1
Versions of packages thunderbird suggests:
pn apparmor <none>
ii fonts-lyx 2.2.2-1
ii libgssapi-krb5-2 1.15-1+deb9u3
-- Configuration Files:
/etc/thunderbird/pref/thunderbird.js changed:
// This is the Debian specific preferences file for Mozilla Thunderbird
// You can make any change in here, it is the purpose of this file.
// You can, with this file and all files present in the directory
//
// /etc/thunderbird/pref directory
//
// override any preference that is present in the directory
//
// /usr/lib/thunderbird/defaults/pref
//
// While your changes will be kept on upgrade if you modify files in
// /etc/thunderbird/pref, please note that they won't be kept if you
// do them in /usr/lib/thunderbird/defaults/pref.
/*
use this if you have no access to gnome configuration
as described on http://www.jwsdot.com/debian/faq.html#q9
and don't care about debian default settings.
*/
// pref("network.protocol-handler.app.http","mozilla-firefox");
// pref("network.protocol-handler.app.https","mozilla-firefox");
// Use LANG environment variable to choose locale from system
// The old environment setting 'pref("intl.locale.matchOS", true);' is
// currently not working anymore. The new introduced setting
// 'intl.locale.requested' is now used for this. Setting an empty string is
// pulling the system locale into Thunderbird.
pref("intl.locale.requested", "");
/*
uncomment this if you want your browser configured as
your default by means of the debian alternatives mechanism
*/
// pref("network.protocol-handler.app.http","x-www-browser");
// pref("network.protocol-handler.app.https","x-www-browser");
// This setting is a workaround for some crashes inside the JS engine.
// By this Thunderbird will use more memory and acting slower as the sharing
// memory between interacting JS files is disabled.
pref ("javascript.options.baselinejit", false);
// Uncomment the follwing setting if you want to have a extra mail header field
// for X-Debbugs-Cc, only needed in case you have to work with the Debian
// Bug Tracking System more deeply
//pref("mail.compose.other.header", "X-Debbugs-Cc");
/*
use this to tune your gtk2 mouse feeling
*/
// pref("widget.gtk2.dnd.threshold",25);
// pref("widget.gtk2.double_click_timeout", 300);
pref("intl.locale.requested", "");
//Auswahl, welche Addons zu aktivieren sind beim Start nicht zeigen
pref("extensions.shownSelectionUI", true);
//Mailprovider Auswahl abstellen
pref("mail.provider.enabled", false);
//Spamfilter-Deaktivieren
pref("mail.spam.logging.enabled", false);
// Disable default mail client check
pref("mail.shell.checkDefaultClient", false);
//HTML-Mail (default) ausgeschaltet
pref("mail.html_compose", false);
pref("mail.identity.default.html_compose", false);
//Automatische Proxy-Konfiguration
pref("network.proxy.type", 4);
//Drucker-Konfiguration
pref("print.postscript.enabled", true);
pref("print.postscript.cups.enabled", true);
pref("print.postscript.paper_size", "A4");
//Beim Drucken Standard-Skalierung auf 100 % gesetzt
pref("print.print_shrink_to_fit", false);
//UTF-8-Mails senden
pref("mailnews.send_default_charset", "UTF-8");
//Lernen Sie ihre Rechte kennen auf gelesen
pref("mail.rights.version", 1);
//Inline-Forward als default
pref("mail.forward_message_mode", 2);
//Auto Komprimieren aktiviert
pref("mail.prompt_purge_threshhold", true);
//Keine Performace Daten an Mozilla senden
pref("toolkit.telemetry.prompted", 2);
pref("toolkit.telemetry.rejected", true);
//Diese optionen fuer enigmail und mail redirect gibt es wohl nicht mehr, mit
obiger option behoben.
//Enigmail
//pref("extensions.{847b3a00-7ab1-11d4-8f02-006008948af5}.update.enabled",
false};
//Mail redirect
//pref("extensions.{CC3C233D-6668-41bc-AAEB-F3A1D1D594F5}.update.enabled",
false};
//Menu per Alt-Tastendruck anzeigen koennen (wie bei Iceweasel)
pref("ui.key.menuAccessKeyFocuses", true);
//Beim Verfassen soll "Enter" eine neue Zeile und keinen neuen Paragraphen
herstellen. Anders: Es soll "Choose a paragraph format" (direkt unter Subject
beim Verfassen) auf "Body Text" und nicht "Paragraph" stehen.
pref("editor.CR_creates_new_p", false);
// eine externe Datei einlesen, wo man wieder lockPref setzen kann, ohne alles
kaputt zu machen (in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827722
wurde das gefixt, aber bei uns wurde das in der besagten Version kaputt gemacht)
pref("general.config.filename", "mozilla.cfg");
// obscure_value ist normalerweise auf 13 gesetzt, um extern geladene Dateien
mit ROT13 zu verschleiern
pref("general.config.obscure_value", 0);
// neue nervige News-Seite abstellen
pref("mailnews.start_page.url", "");
// Rechtschreibeprüfung Workaround für
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944295
pref("spellchecker.dictionary_path", "/usr/share/hunspell");
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: thunderbird
Source-Version: 1:91.5.0-1
Done: Carsten Schoenert <[email protected]>
We believe that the bug you reported is fixed in the latest version of
thunderbird, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <[email protected]> (supplier of updated thunderbird
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 11 Jan 2022 19:12:50 +0100
Source: thunderbird
Architecture: source
Version: 1:91.5.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <[email protected]>
Changed-By: Carsten Schoenert <[email protected]>
Closes: 997841 1002570 1003280
Changes:
thunderbird (1:91.5.0-1) unstable; urgency=medium
.
[ Carsten Schoenert ]
* [8d4e5f8] New upstream version 91.5.0
Fixed CVE issues in upstream version 91.5 (MFSA 2022-03):
CVE-2022-22743: Browser window spoof using fullscreen mode
CVE-2022-22742: Out-of-bounds memory access when inserting text in edit
mode
CVE-2022-22741: Browser window spoof using fullscreen mode
CVE-2022-22740: Use-after-free of ChannelEventQueue::mOwner
CVE-2022-22738: Heap-buffer-overflow in blendGaussianBlur
CVE-2022-22737: Race condition when playing audio files
CVE-2021-4140: Iframe sandbox bypass with XSLT
CVE-2022-22748: Spoofed origin on external protocol launch dialog
CVE-2022-22745: Leaking cross-origin URLs through securitypolicyviolation
event
CVE-2022-22744: The 'Copy as curl' feature in DevTools did not fully
escape website-controlled data, potentially leading to
command injection
CVE-2022-22747: Crash when handling empty pkcs7 sequence
CVE-2022-22739: Missing throttling on external protocol launch dialog
CVE-2022-22751: Memory safety bugs fixed in Thunderbird 91.5
* [a86c0b4] Rebuild patch queue from patch-queue branch
Modified patch:
debian-hacks/Add-another-preferences-directory-for-applications-p.patch
Reworking the patch so LoadDirIntoArray is working again that is adding
an additional syspref folder for global settings to use.
(Closes: #997841, #1003280)
* [442988b] autopkgtest: Adding check for accessing syspref folder
.
[ Jochen Sprickerhof ]
* [5b5d508] d/thunderbird-wrapper.sh: Use 'command -v'
(Closes:#1002570 )
Checksums-Sha1:
8a9393d4c4f72ce5109cc10699be6ebb0e302231 8430 thunderbird_91.5.0-1.dsc
972792b86fb55a90d45d268a3ccdbdf2ee503de8 12014504
thunderbird_91.5.0.orig-thunderbird-l10n.tar.xz
f8975543e11cc0f9c32ce5a589ac771173a68476 427588784
thunderbird_91.5.0.orig.tar.xz
994f83ad2ff32005c003f296bcaf1609c18ee278 543456
thunderbird_91.5.0-1.debian.tar.xz
b696ba12b80bd69733d0bdb1d3053d3babe65741 36602
thunderbird_91.5.0-1_amd64.buildinfo
Checksums-Sha256:
46f949a95ef8e0ef3d605fb64375af69b6f5b4031815b332fc9e8ec545c17dc2 8430
thunderbird_91.5.0-1.dsc
fd289bdda7e01030b91628cbbef0ca6339b16df29f4d0cdc3d0aefdd2e3abe79 12014504
thunderbird_91.5.0.orig-thunderbird-l10n.tar.xz
8a86d2c6c1114bb4c2dd82586f45c39a24addb470b789176e34a7ea00f2ab4b2 427588784
thunderbird_91.5.0.orig.tar.xz
6735b3b9e880ecfdcfb94ace5be69bf7cc1c48c44236c4f50f36007eb3016c8a 543456
thunderbird_91.5.0-1.debian.tar.xz
47884dfc05f3165941991c847a8512e3b2c3f9ac92a39762cc374833e5c637b3 36602
thunderbird_91.5.0-1_amd64.buildinfo
Files:
fdab056198dd66eaa21bb101f43011bd 8430 mail optional thunderbird_91.5.0-1.dsc
46ad33a3d6597a54c6d6ceb4e24f88c5 12014504 mail optional
thunderbird_91.5.0.orig-thunderbird-l10n.tar.xz
5ffbe3d52101096f33b29fb729daccbc 427588784 mail optional
thunderbird_91.5.0.orig.tar.xz
8ebeecc9d114de0ac8754c802e80949f 543456 mail optional
thunderbird_91.5.0-1.debian.tar.xz
6ade50cfba9d8adc86a0a1b40221ef97 36602 mail optional
thunderbird_91.5.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=7ER1
-----END PGP SIGNATURE-----
--- End Message ---
