Bug#1009321: thunderbird: OpenPGP integration refusing BrainpoolP512r1 ECC key after 91.8 upgrade

2022-04-12 Thread Peter Gerber

Hi Carsten,

sorry about that. Correct URL:

https://bugzilla.mozilla.org/show_bug.cgi?id=1764242

Regards,

Peter

On 4/12/22 18:13, Carsten Schoenert wrote:

Hello Peter,

the URL you've posted is pointing to the bug report within the Debian 
BTS. :-)


Can you please add the bug report from the Bugzilla here so we can link 
the issues together.


Am 12.04.22 um 08:20 schrieb Peter Gerber:

Hello Carsten,

On 4/12/22 07:03, Carsten Schoenert wrote:

Could you please submit an upstream bug report and give back the URL to
the bug report so we can link the issues together.
In my opinion it's not helpful if I would work as man in the middle,
especially once upstream will ask some questions I can't really 
answering.


Bug filed upstream as
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009321.






Bug#1009321: thunderbird: OpenPGP integration refusing BrainpoolP512r1 ECC key after 91.8 upgrade

2022-04-12 Thread Carsten Schoenert

Hello Peter,

the URL you've posted is pointing to the bug report within the Debian 
BTS. :-)


Can you please add the bug report from the Bugzilla here so we can link 
the issues together.


Am 12.04.22 um 08:20 schrieb Peter Gerber:

Hello Carsten,

On 4/12/22 07:03, Carsten Schoenert wrote:

Could you please submit an upstream bug report and give back the URL to
the bug report so we can link the issues together.
In my opinion it's not helpful if I would work as man in the middle,
especially once upstream will ask some questions I can't really answering.


Bug filed upstream as
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009321.


--
Regards
Carsten



Bug#1009321: thunderbird: OpenPGP integration refusing BrainpoolP512r1 ECC key after 91.8 upgrade

2022-04-12 Thread Peter Gerber

Hello Carsten,

On 4/12/22 07:03, Carsten Schoenert wrote:
Could you please submit an upstream bug report and give back the URL to 
the bug report so we can link the issues together.
In my opinion it's not helpful if I would work as man in the middle, 
especially once upstream will ask some questions I can't really answering.


Bug filed upstream as 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009321.


Thanks for the quick response.

Regards,

Peter



Bug#1009321: thunderbird: OpenPGP integration refusing BrainpoolP512r1 ECC key after 91.8 upgrade

2022-04-11 Thread Carsten Schoenert

Hello Peter,

Am 11.04.22 um 20:31 schrieb Peter Gerber:


Dear Maintainer,

After updating from 1:91.7.0-2~deb11u1 to 1:91.8.0-1~deb11u1 my PGP key
disappeared from the OpenPGP Key Manager and can no longer be imported.
I verified this on a second machine and the key was still there before
the upgrade and could also be imported properly. This changed after
upgrading.

Steps to reproduce:

1. In menu, select "Tools" → "OpenPGP Key Manager"
2. "edit" → "Import Key from URL" [1]
3. An error is shown

[1]: 
https://keyserver.ubuntu.com/pks/lookup?op=get=0xe6bfd964aa7cebd360537ddb4a72372baf48dade

I suspect it's related to it being an BrainpoolP512r1 ECC key which
happens to be rather uncommon. I've not checked if any other keys are
affected.


this seems to be clearly an upstream issue and not by a Debian change 
related introduced problem. In fact the packaging of Thunderbird hasn't 
changed at all since 91.7.0.


The modifications since 91.7.0 done by MZLNA can be found here in this URL:

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1634524%2C1753887%2C1713621%2C1739498%2C1752069%2C1753214%2C1750969%2C1753984%2C1754682%2C1754985%2C1761099%2C1750966%2C1758399%2C1757185%2C1751086%2C1754423%2C1754186%2C1752059%2C1753824%2C1757713%2C1752741

Could you please submit an upstream bug report and give back the URL to 
the bug report so we can link the issues together.
In my opinion it's not helpful if I would work as man in the middle, 
especially once upstream will ask some questions I can't really answering.


The issue tracker from Mozilla can be found here

https://bugzilla.mozilla.org/home

Thanks.

--
Regards
Carsten



Bug#1009321: thunderbird: OpenPGP integration refusing BrainpoolP512r1 ECC key after 91.8 upgrade

2022-04-11 Thread Peter Gerber
Package: thunderbird
Version: 1:91.8.0-1~deb11u1
Severity: important
X-Debbugs-Cc: pe...@arbitrary.ch, t...@security.debian.org

Dear Maintainer,

After updating from 1:91.7.0-2~deb11u1 to 1:91.8.0-1~deb11u1 my PGP key
disappeared from the OpenPGP Key Manager and can no longer be imported.
I verified this on a second machine and the key was still there before
the upgrade and could also be imported properly. This changed after
upgrading.

Steps to reproduce:

1. In menu, select "Tools" → "OpenPGP Key Manager"
2. "edit" → "Import Key from URL" [1]
3. An error is shown

[1]: 
https://keyserver.ubuntu.com/pks/lookup?op=get=0xe6bfd964aa7cebd360537ddb4a72372baf48dade

I suspect it's related to it being an BrainpoolP512r1 ECC key which
happens to be rather uncommon. I've not checked if any other keys are
affected.

Regards,

Peter


-- System Information:
Debian Release: 11.3
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.16.18-2.fc32.qubes.x86_64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages thunderbird depends on:
ii  debianutils  4.11.2
ii  fontconfig   2.13.1-4.2
ii  libatk1.0-0  2.36.0-2
ii  libbotan-2-172.17.3+dfsg-2
ii  libbz2-1.0   1.0.8-4
ii  libc62.31-13+deb11u3
ii  libcairo-gobject21.16.0-5
ii  libcairo21.16.0-5
ii  libdbus-1-3  1.12.20-2
ii  libdbus-glib-1-2 0.110-6
ii  libevent-2.1-7   2.1.12-stable-1
ii  libffi7  3.3-6
ii  libfontconfig1   2.13.1-4.2
ii  libfreetype6 2.10.4+dfsg-1
ii  libgcc-s110.2.1-6
ii  libgdk-pixbuf-2.0-0  2.42.2+dfsg-1
ii  libglib2.0-0 2.66.8-1
ii  libgtk-3-0   3.24.24-4+deb11u2
ii  libjson-c5   0.15-2
ii  libpango-1.0-0   1.46.2-3
ii  libstdc++6   10.2.1-6
ii  libvpx6  1.9.0-1
ii  libx11-6 2:1.7.2-1
ii  libx11-xcb1  2:1.7.2-1
ii  libxcb-shm0  1.14-3
ii  libxcb1  1.14-3
ii  libxext6 2:1.3.3-1.1
ii  libxrender1  1:0.9.10-1
ii  psmisc   23.4-2
ii  x11-utils7.7+5
ii  zenity   3.32.0-6
ii  zlib1g   1:1.2.11.dfsg-2+deb11u1

Versions of packages thunderbird recommends:
ii  hunspell-en-us [hunspell-dictionary]  1:2019.10.06-1

Versions of packages thunderbird suggests:
ii  apparmor  2.13.6-10
pn  fonts-lyx 
ii  libgssapi-krb5-2  1.18.3-6+deb11u1

-- no debconf information