Your message dated Tue, 26 Dec 2017 15:12:37 +0000
with message-id <e1etqud-0005dm...@fasolo.debian.org>
and subject line Bug#885157: fixed in thunderbird 1:52.5.2-2
has caused the Debian Bug report #885157,
regarding thunderbird: Upgrading from 1:52.5.0-1 to 1:52.5.2-1 enforces the
AppArmor profile
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
885157: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=885157
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: thunderbird
Version: 1:52.5.2-1
Severity: serious
X-Debbugs-Cc: Simon Deziel <si...@sdeziel.info>, Guido Günther <a...@debian.org>
Hi,
I've upgraded thunderbird from 1:52.5.0-1 to 1:52.5.2-1 in my test sid
VM after double-checking that
/etc/apparmor.d/disable/usr.bin.thunderbird existed and the profile
was not loaded.
The upgrade removed /etc/apparmor.d/disable/usr.bin.thunderbird
(because it's not shipped as a file owned by the package anymore) and
thus loaded the profile in enforced mode. I think this is not what was
intended with commit 8c57218.
I'm setting RC severity because enabling the AppArmor profile breaks
too much functionality, which is why we've decided to disable it
by default.
postinst got this added in 1:52.5.2-1:
# Disable apparmor on new installations and when we're
upgrading from
# a version that had it enabled by default
if test -z "$2" || dpkg --compare-versions "$2" le "1:52.5.0-1~"; then
mkdir -p /etc/apparmor.d/disable
ln -s /etc/apparmor.d/usr.bin.thunderbird
/etc/apparmor.d/disable/usr.bin.thunderbird
fi
The buggy behavior I'm reporting is caused by:
$ dpkg --compare-versions "1:52.5.0-1" le "1:52.5.0-1~"
$ echo $?
1
… which might be surprising but it does make sense.
While of course:
$ dpkg --compare-versions "1:52.5.0-1" le "1:52.5.0-1"
$ echo $?
0
… which is what the comparison should instead have been in the first
place, in the 1:52.5.2-1 upload.
But now that we got this wrong once, I think it'll be very hard to
recover and provide the intended behavior in _all_ cases. I think
we'll have to disable the profile on next upgrade again in many cases,
in order to revert the buggy change applied by this upgrade on sid
systems. I believe this could be achieved by replacing the test quoted
above with:
test -z "$2" || dpkg --compare-versions "$2" le "1:52.5.2-1"
… which is hopefully equivalent to "the package version we're
upgrading from did forcibly enable the AppArmor profile in at least
some cases when it should not have".
Sadly, in some cases this will disable the profile even though the
administrator had opted-in and manually enabled it (i.e.
we reintroduce a one-time instance of #884191). I don't know how to
fix this, and IMO we should not block on it before we address the bug
I'm reporting here, but perhaps it's worth a NEWS.Debian entry?
Cheers,
--
intrigeri
--- End Message ---
--- Begin Message ---
Source: thunderbird
Source-Version: 1:52.5.2-2
We believe that the bug you reported is fixed in the latest version of
thunderbird, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 885...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <c.schoen...@t-online.de> (supplier of updated thunderbird
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 26 Dec 2017 14:56:40 +0100
Source: thunderbird
Binary: thunderbird thunderbird-dev lightning calendar-google-provider
thunderbird-l10n-all thunderbird-l10n-ar thunderbird-l10n-ast
thunderbird-l10n-be thunderbird-l10n-bg thunderbird-l10n-bn-bd
thunderbird-l10n-br thunderbird-l10n-ca thunderbird-l10n-cs thunderbird-l10n-da
thunderbird-l10n-de thunderbird-l10n-dsb thunderbird-l10n-el
thunderbird-l10n-en-gb thunderbird-l10n-es-ar thunderbird-l10n-es-es
thunderbird-l10n-et thunderbird-l10n-eu thunderbird-l10n-fi thunderbird-l10n-fr
thunderbird-l10n-fy-nl thunderbird-l10n-ga-ie thunderbird-l10n-gd
thunderbird-l10n-gl thunderbird-l10n-he thunderbird-l10n-hr
thunderbird-l10n-hsb thunderbird-l10n-hu thunderbird-l10n-hy-am
thunderbird-l10n-id thunderbird-l10n-is thunderbird-l10n-it thunderbird-l10n-ja
thunderbird-l10n-kab thunderbird-l10n-ko thunderbird-l10n-lt
thunderbird-l10n-nb-no thunderbird-l10n-nl thunderbird-l10n-nn-no
thunderbird-l10n-pa-in thunderbird-l10n-pl thunderbird-l10n-pt-br
thunderbird-l10n-pt-pt
thunderbird-l10n-rm thunderbird-l10n-ro thunderbird-l10n-ru
thunderbird-l10n-si thunderbird-l10n-sk thunderbird-l10n-sl thunderbird-l10n-sq
thunderbird-l10n-sr thunderbird-l10n-sv-se thunderbird-l10n-ta-lk
thunderbird-l10n-tr thunderbird-l10n-uk thunderbird-l10n-vi
thunderbird-l10n-zh-cn thunderbird-l10n-zh-tw lightning-l10n-ar
lightning-l10n-ast lightning-l10n-be lightning-l10n-bg lightning-l10n-bn-bd
lightning-l10n-br lightning-l10n-ca lightning-l10n-cs lightning-l10n-cy
lightning-l10n-da lightning-l10n-de lightning-l10n-dsb lightning-l10n-el
lightning-l10n-es-ar lightning-l10n-es-es lightning-l10n-en-gb
lightning-l10n-et lightning-l10n-eu lightning-l10n-fi lightning-l10n-fr
lightning-l10n-fy-nl lightning-l10n-ga-ie lightning-l10n-gd lightning-l10n-gl
lightning-l10n-he lightning-l10n-hr lightning-l10n-hsb lightning-l10n-hu
lightning-l10n-hy-am lightning-l10n-id lightning-l10n-is lightning-l10n-it
lightning-l10n-ja lightning-l10n-kab lightning-l10n-ko
lightning-l10n-lt lightning-l10n-nb-no lightning-l10n-nl lightning-l10n-nn-no
lightning-l10n-pa-in lightning-l10n-pl lightning-l10n-pt-br
lightning-l10n-pt-pt lightning-l10n-rm lightning-l10n-ro lightning-l10n-ru
lightning-l10n-si lightning-l10n-sk lightning-l10n-sl lightning-l10n-sr
lightning-l10n-sq lightning-l10n-sv-se lightning-l10n-ta-lk lightning-l10n-tr
lightning-l10n-uk lightning-l10n-vi lightning-l10n-zh-cn
lightning-l10n-zh-tw
Architecture: source
Version: 1:52.5.2-2
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoen...@t-online.de>
Changed-By: Carsten Schoenert <c.schoen...@t-online.de>
Description:
calendar-google-provider - Google Calendar support for lightning
lightning - Calendar Extension for Thunderbird
lightning-l10n-ar - Arabic language package for lightning
lightning-l10n-ast - Asturian language package for lightning
lightning-l10n-be - Belarusian language package for lightning
lightning-l10n-bg - Bulgarian language package for lightning
lightning-l10n-bn-bd - Bengali (Bangladesh) language package for lightning
lightning-l10n-br - Breton language package for lightning
lightning-l10n-ca - Catalan/Valencian language package for lightning
lightning-l10n-cs - Czech language package for lightning
lightning-l10n-cy - Welsh language package for lightning
lightning-l10n-da - Danish language package for lightning
lightning-l10n-de - German language package for lightning
lightning-l10n-dsb - Lower Sorbian language package for lightning
lightning-l10n-el - Greek language package for lightning
lightning-l10n-en-gb - British English language package for lightning
lightning-l10n-es-ar - Spanish (Argentina) language package for lightning
lightning-l10n-es-es - Spanish (Spain) language package for lightning
lightning-l10n-et - Estonian language package for lightning
lightning-l10n-eu - Basque language package for lightning
lightning-l10n-fi - Finnish language package for lightning
lightning-l10n-fr - French language package for lightning
lightning-l10n-fy-nl - Western Frisian language package for lightning
lightning-l10n-ga-ie - Irish (Ireland) language package for lightning
lightning-l10n-gd - Scottish Gaelic language package for lightning
lightning-l10n-gl - Galician language package for lightning
lightning-l10n-he - Hebrew language package for lightning
lightning-l10n-hr - Croatian language package for lightning
lightning-l10n-hsb - Upper Sorbian language package for lightning
lightning-l10n-hu - Hungarian language package for lightning
lightning-l10n-hy-am - Armenian language package for lightning
lightning-l10n-id - Indonesian language package for lightning
lightning-l10n-is - Icelandic language package for lightning
lightning-l10n-it - Italian language package for lightning
lightning-l10n-ja - Japanese language package for lightning
lightning-l10n-kab - Kabyle language package for lightning
lightning-l10n-ko - Korean language package for lightning
lightning-l10n-lt - Lithuanian language package for lightning
lightning-l10n-nb-no - Bokmaal (Norway) language package for lightning
lightning-l10n-nl - Dutch language package for lightning
lightning-l10n-nn-no - Nynorsk (Norway) language package for lightning
lightning-l10n-pa-in - Punjabi language package for lightning
lightning-l10n-pl - Polish language package for lightning
lightning-l10n-pt-br - Portuguese (Brazil) language package for lightning
lightning-l10n-pt-pt - Portuguese (Portugal) language package for lightning
lightning-l10n-rm - Romansh language package for lightning
lightning-l10n-ro - Romanian language package for lightning
lightning-l10n-ru - Russian language package for lightning
lightning-l10n-si - Sinhala language package for lightning
lightning-l10n-sk - Slovak language package for lightning
lightning-l10n-sl - Slovenian language package for lightning
lightning-l10n-sq - Albanian language package for lightning
lightning-l10n-sr - Serbian language package for lightning
lightning-l10n-sv-se - Swedish language package for lightning
lightning-l10n-ta-lk - Tamil language package for lightning
lightning-l10n-tr - Turkish language package for lightning
lightning-l10n-uk - Ukrainian language package for lightning
lightning-l10n-vi - Vietnamese language package for lightning
lightning-l10n-zh-cn - Chinese (China) language package for lightning
lightning-l10n-zh-tw - Chinese (Taiwan) language package for lightning
thunderbird - mail/news client with RSS, chat and integrated spam filter suppor
thunderbird-dev - Development files for Thunderbird
thunderbird-l10n-all - All language packages for Thunderbird (meta)
thunderbird-l10n-ar - Arabic language package for Thunderbird
thunderbird-l10n-ast - Asturian language package for Thunderbird
thunderbird-l10n-be - Belarusian language package for Thunderbird
thunderbird-l10n-bg - Bulgarian language package for Thunderbird
thunderbird-l10n-bn-bd - Bengali language package for Thunderbird
thunderbird-l10n-br - Breton language package for Thunderbird
thunderbird-l10n-ca - Catalan/Valencian language package for Thunderbird
thunderbird-l10n-cs - Czech language package for Thunderbird
thunderbird-l10n-da - Danish language package for Thunderbird
thunderbird-l10n-de - German language package for Thunderbird
thunderbird-l10n-dsb - Lower Sorbian language package for Thunderbird
thunderbird-l10n-el - Greek language package for Thunderbird
thunderbird-l10n-en-gb - English (Great Britain) language package for
Thunderbird
thunderbird-l10n-es-ar - Spanish (Argentina) language package for Thunderbird
thunderbird-l10n-es-es - Spanish (Spain) language package for Thunderbird
thunderbird-l10n-et - Estonian language package for Thunderbird
thunderbird-l10n-eu - Basque language package for Thunderbird
thunderbird-l10n-fi - Finnish language package for Thunderbird
thunderbird-l10n-fr - French language package for Thunderbird
thunderbird-l10n-fy-nl - Frisian language package for Thunderbird
thunderbird-l10n-ga-ie - Irish (Ireland) language package for Thunderbird
thunderbird-l10n-gd - Gaelic (Scottish) language package for Thunderbird
thunderbird-l10n-gl - Galician language package for Thunderbird
thunderbird-l10n-he - Hebrew language package for Thunderbird
thunderbird-l10n-hr - Croatian language package for Thunderbird
thunderbird-l10n-hsb - Upper Sorbian language package for Thunderbird
thunderbird-l10n-hu - Hungarian language package for Thunderbird
thunderbird-l10n-hy-am - Armenian language package for Thunderbird
thunderbird-l10n-id - Indonesian language package for Thunderbird
thunderbird-l10n-is - Icelandic language package for Thunderbird
thunderbird-l10n-it - Italian language package for Thunderbird
thunderbird-l10n-ja - Japanese language package for Thunderbird
thunderbird-l10n-kab - Kabyle language package for Thunderbird
thunderbird-l10n-ko - Korean language package for Thunderbird
thunderbird-l10n-lt - Lithuanian language package for Thunderbird
thunderbird-l10n-nb-no - Bokmaal (Norway) language package for Thunderbird
thunderbird-l10n-nl - Dutch language package for Thunderbird
thunderbird-l10n-nn-no - Nynorsk (Norway) language package for Thunderbird
thunderbird-l10n-pa-in - Punjabi (India) language package for Thunderbird
thunderbird-l10n-pl - Polish language package for Thunderbird
thunderbird-l10n-pt-br - Portuguese (Brazil) language package for Thunderbird
thunderbird-l10n-pt-pt - Portuguese (Portugal) language package for Thunderbird
thunderbird-l10n-rm - Romansh language package for Thunderbird
thunderbird-l10n-ro - Romania language package for Thunderbird
thunderbird-l10n-ru - Russian language package for Thunderbird
thunderbird-l10n-si - Sinhala language package for Thunderbird
thunderbird-l10n-sk - Slovak language package for Thunderbird
thunderbird-l10n-sl - Slovenian language package for Thunderbird
thunderbird-l10n-sq - Albanian language package for Thunderbird
thunderbird-l10n-sr - Serbian language package for Thunderbird
thunderbird-l10n-sv-se - Swedish (Sweden) language package for Thunderbird
thunderbird-l10n-ta-lk - Tamil language package for Thunderbird
thunderbird-l10n-tr - Turkish language package for Thunderbird
thunderbird-l10n-uk - Ukrainian language package for Thunderbird
thunderbird-l10n-vi - Vietnamese language package for Thunderbird
thunderbird-l10n-zh-cn - Chinese (China) language package for Thunderbird
thunderbird-l10n-zh-tw - Chinese (Taiwan) language package for Thunderbird
Closes: 885157 885158
Changes:
thunderbird (1:52.5.2-2) unstable; urgency=medium
.
[ Carsten Schoenert ]
* [f597157] Revert "d/thunderbird.postinst: reload AA profile on updates"
The trigger automatics for appamor already is handling the
needed reload on profile updates for the applications.
(Closes: #885158)
* [8ebdb96] debian/control: increase Standards-Version to 4.1.2
No further changes needed.
* [81a8c00] use inverse logic on version for AA profile status check
By this change we don't enforce the disabled profile from the
previous version in some cases and can also handle possible
version strings from -security and -backports.
(Closes: #885157)
Checksums-Sha1:
40ead9d342bbc160d5550ada70a14f7bdb7f894e 12522 thunderbird_52.5.2-2.dsc
a9a4089162bf648733891cfbd25d7252737f95d5 396428
thunderbird_52.5.2-2.debian.tar.xz
ee47e9386f84bd0012ed7e3828b86e01908a99a5 51398
thunderbird_52.5.2-2_amd64.buildinfo
Checksums-Sha256:
1a62e39c09f529bf53256bee10f199c55845f5f625942ae3462991ac52066fba 12522
thunderbird_52.5.2-2.dsc
55d15c5c5f9d22c2e974bf74ef8b18cea96ba1e98d69d072865eb63ae451c410 396428
thunderbird_52.5.2-2.debian.tar.xz
954cf2a6d5b438aa183709d93508bd7f3093223ed931c6a92b675ab60c89a9d1 51398
thunderbird_52.5.2-2_amd64.buildinfo
Files:
1f041141df2d37ebb0dc8c3dbaab40dd 12522 mail optional thunderbird_52.5.2-2.dsc
de6103b022d28ece93f933765e54c83b 396428 mail optional
thunderbird_52.5.2-2.debian.tar.xz
2481e40bff3715ba8d255933b8cf05b7 51398 mail optional
thunderbird_52.5.2-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=77b/
-----END PGP SIGNATURE-----
--- End Message ---