Package: release.debian.org
Severity: normal
User: release.debian....@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: thunderb...@packages.debian.org
Control: affects -1 + src:thunderbird
Please unblock package thunderbird
[ Reason ]
Due some planed traveling on my side I packaged the release candidate
for Thunderbird 102.7.1-1 before the real final release on Mozilla did
happen. I typically use the release candidate once it is available and
normally this works without problems, but not this time for 102.7.1.
Mozilla did encounter OAuth issues for user of O365 and did prepare a
new release candidate which I was not able to pick up directly.
This ended in an really delayed upload of the "fixed" Debian version
1:102.7.1+1-1 on 2023-02-07.
And shortly after my upload Mozilla released one more new version
102.7.2 which is now sitting unstable and due the date 12th February
migration time is extended to 10 days.
The next ESR version of Thunderbird (102.8.0) will get released today
but I wanted to see first the version 102.7.2-1 get migrated to tested
so users of testing do not need to wait even longer for a fixed version
of Thunderbird which is working again with O365 before I do a new upload
of the next ESR version.
[ Impact ]
Users in testing need to wait for a fixed Debian version for
CVE-2023-0430: Revocation status of S/Mime signature certificates was
not checked
(https://bugzilla.mozilla.org/show_bug.cgi?id=1810760)
[ Tests ]
I provided some testbuild for the real upstream version 102.7.1 before
started to upload the final version for the archive. Affected user
confirmed the fixed OAuth functionality.
[ Risks ]
There are no special risks as users confirmed the usability of the fixed
version in Debian.
[ Checklist ]
[x] all changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[ ] attach debdiff against the package in testing
[ Other info ]
Currently nothing to add here.
unblock thunderbird/102.7.2-1
