Your message dated Sun, 12 Nov 2017 17:39:27 +0000
with message-id <e1edweb-000euq...@fasolo.debian.org>
and subject line Bug#876333: fixed in thunderbird 1:52.4.0-2~exp1
has caused the Debian Bug report #876333,
regarding thunderbird: AppArmor profile allows mmap executables from user
writable directories
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
876333: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876333
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: thunderbird
Version: 1:52.3.0-4~deb8u2
Severity: normal
Tags: upstream
Dear Maintainer,
/etc/apparmor.d/usr.bin.thunderbird has these lines:
owner /tmp/** m,
owner /var/tmp/** m,
Is this really necesarry? If Thunderbir actually tries to mmap files with
executable flags, I believe it should be reported as a bug upstream.
>From AppArmor wiki [0]:
```
Short form permissions map to
m - mmap_x, mprot_wx
mmap_x - mmap a file executable
mprot_wx - allow transitioning an mmap from w to x, (this sticks for the
lifetime of the mmap even if w is removed before trying to apply x
```
I will try to use Thunderbird profile with these lines commented out, I'll see
if DENIES appear.
By the way, I see same lines on usr.lib.firefox.firefox, maybe it's just old
bug and blind copy-paste?
[0]http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#File_access_rules
-- System Information:
Debian Release: 8.9
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages thunderbird depends on:
ii debianutils 4.4+b1
ii fontconfig 2.11.0-6.3+deb8u1
ii libatk1.0-0 2.14.0-1
ii libc6 2.19-18+deb8u10
ii libcairo2 1.14.0-2.1+deb8u2
ii libdbus-1-3 1.8.22-0+deb8u1
ii libdbus-glib-1-2 0.102-1
ii libevent-2.0-5 2.0.21-stable-2+deb8u1
ii libffi6 3.1-2+deb8u1
ii libfontconfig1 2.11.0-6.3+deb8u1
ii libfreetype6 2.5.2-3+deb8u2
ii libgcc1 1:4.9.2-10
ii libgdk-pixbuf2.0-0 2.31.1-2+deb8u6
ii libglib2.0-0 2.42.1-1+b1
ii libgtk2.0-0 2.24.25-3+deb8u2
ii libhunspell-1.3-0 1.3.3-3
ii libpango-1.0-0 1.36.8-3
ii libpangocairo-1.0-0 1.36.8-3
ii libpangoft2-1.0-0 1.36.8-3
ii libpixman-1-0 0.32.6-3
ii libstartup-notification0 0.12-4
ii libstdc++6 4.9.2-10
ii libx11-6 2:1.6.2-3
ii libx11-xcb1 2:1.6.2-3
ii libxcb-shm0 1.10-3+b1
ii libxcb1 1.10-3+b1
ii libxcomposite1 1:0.4.4-1
ii libxdamage1 1:1.1.4-2+b1
ii libxext6 2:1.3.3-1
ii libxfixes3 1:5.0.1-2+b2
ii libxrender1 1:0.9.8-1+b1
ii libxt6 1:1.1.4-1+b1
ii psmisc 22.21-2
ii x11-utils 7.7+2
ii zlib1g 1:1.2.8.dfsg-2+b1
Versions of packages thunderbird recommends:
ii hunspell-en-us [hunspell-dictionary] 20070829-6+deb8u1
ii lightning 1:52.3.0-4~deb8u2
Versions of packages thunderbird suggests:
ii apparmor 2.9.0-3
ii fonts-lyx 2.1.2-2
ii libgssapi-krb5-2 1.12.1+dfsg-19+deb8u2
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: thunderbird
Source-Version: 1:52.4.0-2~exp1
We believe that the bug you reported is fixed in the latest version of
thunderbird, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 876...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <c.schoen...@t-online.de> (supplier of updated thunderbird
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 12 Nov 2017 16:01:07 +0100
Source: thunderbird
Binary: thunderbird thunderbird-dev lightning calendar-google-provider
thunderbird-l10n-all thunderbird-l10n-ar thunderbird-l10n-ast
thunderbird-l10n-be thunderbird-l10n-bg thunderbird-l10n-bn-bd
thunderbird-l10n-br thunderbird-l10n-ca thunderbird-l10n-cs thunderbird-l10n-da
thunderbird-l10n-de thunderbird-l10n-dsb thunderbird-l10n-el
thunderbird-l10n-en-gb thunderbird-l10n-es-ar thunderbird-l10n-es-es
thunderbird-l10n-et thunderbird-l10n-eu thunderbird-l10n-fi thunderbird-l10n-fr
thunderbird-l10n-fy-nl thunderbird-l10n-ga-ie thunderbird-l10n-gd
thunderbird-l10n-gl thunderbird-l10n-he thunderbird-l10n-hr
thunderbird-l10n-hsb thunderbird-l10n-hu thunderbird-l10n-hy-am
thunderbird-l10n-id thunderbird-l10n-is thunderbird-l10n-it thunderbird-l10n-ja
thunderbird-l10n-kab thunderbird-l10n-ko thunderbird-l10n-lt
thunderbird-l10n-nb-no thunderbird-l10n-nl thunderbird-l10n-nn-no
thunderbird-l10n-pa-in thunderbird-l10n-pl thunderbird-l10n-pt-br
thunderbird-l10n-pt-pt
thunderbird-l10n-rm thunderbird-l10n-ro thunderbird-l10n-ru
thunderbird-l10n-si thunderbird-l10n-sk thunderbird-l10n-sl thunderbird-l10n-sq
thunderbird-l10n-sr thunderbird-l10n-sv-se thunderbird-l10n-ta-lk
thunderbird-l10n-tr thunderbird-l10n-uk thunderbird-l10n-vi
thunderbird-l10n-zh-cn thunderbird-l10n-zh-tw lightning-l10n-ar
lightning-l10n-ast lightning-l10n-be lightning-l10n-bg lightning-l10n-bn-bd
lightning-l10n-br lightning-l10n-ca lightning-l10n-cs lightning-l10n-cy
lightning-l10n-da lightning-l10n-de lightning-l10n-dsb lightning-l10n-el
lightning-l10n-es-ar lightning-l10n-es-es lightning-l10n-en-gb
lightning-l10n-et lightning-l10n-eu lightning-l10n-fi lightning-l10n-fr
lightning-l10n-fy-nl lightning-l10n-ga-ie lightning-l10n-gd lightning-l10n-gl
lightning-l10n-he lightning-l10n-hr lightning-l10n-hsb lightning-l10n-hu
lightning-l10n-hy-am lightning-l10n-id lightning-l10n-is lightning-l10n-it
lightning-l10n-ja lightning-l10n-kab lightning-l10n-ko
lightning-l10n-lt lightning-l10n-nb-no lightning-l10n-nl lightning-l10n-nn-no
lightning-l10n-pa-in lightning-l10n-pl lightning-l10n-pt-br
lightning-l10n-pt-pt lightning-l10n-rm lightning-l10n-ro lightning-l10n-ru
lightning-l10n-si lightning-l10n-sk lightning-l10n-sl lightning-l10n-sr
lightning-l10n-sq lightning-l10n-sv-se lightning-l10n-ta-lk lightning-l10n-tr
lightning-l10n-uk lightning-l10n-vi lightning-l10n-zh-cn
lightning-l10n-zh-tw
Architecture: source
Version: 1:52.4.0-2~exp1
Distribution: experimental
Urgency: medium
Maintainer: Carsten Schoenert <c.schoen...@t-online.de>
Changed-By: Carsten Schoenert <c.schoen...@t-online.de>
Description:
calendar-google-provider - Google Calendar support for lightning
lightning - Calendar Extension for Thunderbird
lightning-l10n-ar - Arabic language package for lightning
lightning-l10n-ast - Asturian language package for lightning
lightning-l10n-be - Belarusian language package for lightning
lightning-l10n-bg - Bulgarian language package for lightning
lightning-l10n-bn-bd - Bengali (Bangladesh) language package for lightning
lightning-l10n-br - Breton language package for lightning
lightning-l10n-ca - Catalan/Valencian language package for lightning
lightning-l10n-cs - Czech language package for lightning
lightning-l10n-cy - Welsh language package for lightning
lightning-l10n-da - Danish language package for lightning
lightning-l10n-de - German language package for lightning
lightning-l10n-dsb - Lower Sorbian language package for lightning
lightning-l10n-el - Greek language package for lightning
lightning-l10n-en-gb - British English language package for lightning
lightning-l10n-es-ar - Spanish (Argentina) language package for lightning
lightning-l10n-es-es - Spanish (Spain) language package for lightning
lightning-l10n-et - Estonian language package for lightning
lightning-l10n-eu - Basque language package for lightning
lightning-l10n-fi - Finnish language package for lightning
lightning-l10n-fr - French language package for lightning
lightning-l10n-fy-nl - Western Frisian language package for lightning
lightning-l10n-ga-ie - Irish (Ireland) language package for lightning
lightning-l10n-gd - Scottish Gaelic language package for lightning
lightning-l10n-gl - Galician language package for lightning
lightning-l10n-he - Hebrew language package for lightning
lightning-l10n-hr - Croatian language package for lightning
lightning-l10n-hsb - Upper Sorbian language package for lightning
lightning-l10n-hu - Hungarian language package for lightning
lightning-l10n-hy-am - Armenian language package for lightning
lightning-l10n-id - Indonesian language package for lightning
lightning-l10n-is - Icelandic language package for lightning
lightning-l10n-it - Italian language package for lightning
lightning-l10n-ja - Japanese language package for lightning
lightning-l10n-kab - Kabyle language package for lightning
lightning-l10n-ko - Korean language package for lightning
lightning-l10n-lt - Lithuanian language package for lightning
lightning-l10n-nb-no - Bokmaal (Norway) language package for lightning
lightning-l10n-nl - Dutch language package for lightning
lightning-l10n-nn-no - Nynorsk (Norway) language package for lightning
lightning-l10n-pa-in - Punjabi language package for lightning
lightning-l10n-pl - Polish language package for lightning
lightning-l10n-pt-br - Portuguese (Brazil) language package for lightning
lightning-l10n-pt-pt - Portuguese (Portugal) language package for lightning
lightning-l10n-rm - Romansh language package for lightning
lightning-l10n-ro - Romanian language package for lightning
lightning-l10n-ru - Russian language package for lightning
lightning-l10n-si - Sinhala language package for lightning
lightning-l10n-sk - Slovak language package for lightning
lightning-l10n-sl - Slovenian language package for lightning
lightning-l10n-sq - Albanian language package for lightning
lightning-l10n-sr - Serbian language package for lightning
lightning-l10n-sv-se - Swedish language package for lightning
lightning-l10n-ta-lk - Tamil language package for lightning
lightning-l10n-tr - Turkish language package for lightning
lightning-l10n-uk - Ukrainian language package for lightning
lightning-l10n-vi - Vietnamese language package for lightning
lightning-l10n-zh-cn - Chinese (China) language package for lightning
lightning-l10n-zh-tw - Chinese (Taiwan) language package for lightning
thunderbird - mail/news client with RSS, chat and integrated spam filter suppor
thunderbird-dev - Development files for Thunderbird
thunderbird-l10n-all - All language packages for Thunderbird (meta)
thunderbird-l10n-ar - Arabic language package for Thunderbird
thunderbird-l10n-ast - Asturian language package for Thunderbird
thunderbird-l10n-be - Belarusian language package for Thunderbird
thunderbird-l10n-bg - Bulgarian language package for Thunderbird
thunderbird-l10n-bn-bd - Bengali language package for Thunderbird
thunderbird-l10n-br - Breton language package for Thunderbird
thunderbird-l10n-ca - Catalan/Valencian language package for Thunderbird
thunderbird-l10n-cs - Czech language package for Thunderbird
thunderbird-l10n-da - Danish language package for Thunderbird
thunderbird-l10n-de - German language package for Thunderbird
thunderbird-l10n-dsb - Lower Sorbian language package for Thunderbird
thunderbird-l10n-el - Greek language package for Thunderbird
thunderbird-l10n-en-gb - English (Great Britain) language package for
Thunderbird
thunderbird-l10n-es-ar - Spanish (Argentina) language package for Thunderbird
thunderbird-l10n-es-es - Spanish (Spain) language package for Thunderbird
thunderbird-l10n-et - Estonian language package for Thunderbird
thunderbird-l10n-eu - Basque language package for Thunderbird
thunderbird-l10n-fi - Finnish language package for Thunderbird
thunderbird-l10n-fr - French language package for Thunderbird
thunderbird-l10n-fy-nl - Frisian language package for Thunderbird
thunderbird-l10n-ga-ie - Irish (Ireland) language package for Thunderbird
thunderbird-l10n-gd - Gaelic (Scottish) language package for Thunderbird
thunderbird-l10n-gl - Galician language package for Thunderbird
thunderbird-l10n-he - Hebrew language package for Thunderbird
thunderbird-l10n-hr - Croatian language package for Thunderbird
thunderbird-l10n-hsb - Upper Sorbian language package for Thunderbird
thunderbird-l10n-hu - Hungarian language package for Thunderbird
thunderbird-l10n-hy-am - Armenian language package for Thunderbird
thunderbird-l10n-id - Indonesian language package for Thunderbird
thunderbird-l10n-is - Icelandic language package for Thunderbird
thunderbird-l10n-it - Italian language package for Thunderbird
thunderbird-l10n-ja - Japanese language package for Thunderbird
thunderbird-l10n-kab - Kabyle language package for Thunderbird
thunderbird-l10n-ko - Korean language package for Thunderbird
thunderbird-l10n-lt - Lithuanian language package for Thunderbird
thunderbird-l10n-nb-no - Bokmaal (Norway) language package for Thunderbird
thunderbird-l10n-nl - Dutch language package for Thunderbird
thunderbird-l10n-nn-no - Nynorsk (Norway) language package for Thunderbird
thunderbird-l10n-pa-in - Punjabi (India) language package for Thunderbird
thunderbird-l10n-pl - Polish language package for Thunderbird
thunderbird-l10n-pt-br - Portuguese (Brazil) language package for Thunderbird
thunderbird-l10n-pt-pt - Portuguese (Portugal) language package for Thunderbird
thunderbird-l10n-rm - Romansh language package for Thunderbird
thunderbird-l10n-ro - Romania language package for Thunderbird
thunderbird-l10n-ru - Russian language package for Thunderbird
thunderbird-l10n-si - Sinhala language package for Thunderbird
thunderbird-l10n-sk - Slovak language package for Thunderbird
thunderbird-l10n-sl - Slovenian language package for Thunderbird
thunderbird-l10n-sq - Albanian language package for Thunderbird
thunderbird-l10n-sr - Serbian language package for Thunderbird
thunderbird-l10n-sv-se - Swedish (Sweden) language package for Thunderbird
thunderbird-l10n-ta-lk - Tamil language package for Thunderbird
thunderbird-l10n-tr - Turkish language package for Thunderbird
thunderbird-l10n-uk - Ukrainian language package for Thunderbird
thunderbird-l10n-vi - Vietnamese language package for Thunderbird
thunderbird-l10n-zh-cn - Chinese (China) language package for Thunderbird
thunderbird-l10n-zh-tw - Chinese (Taiwan) language package for Thunderbird
Closes: 855346 876333 877324 879270 880425 880715 881299
Changes:
thunderbird (1:52.4.0-2~exp1) experimental; urgency=medium
.
[ Carsten Schoenert ]
* [a3e73e9] disable usage of libgnomeui parts
The libgnomeui stuff (only relevant for GTK+2) is deprecated
for a long time and will be removed in buster, and we don't need
this at all.
See https://lists.debian.org/debian-devel/2017/10/msg00299.html
* [9efc5c9] debian/watch: switch to https
* [bd5a635] rebuild patch queue from patch-queue branch
Fixup for [da3c5cc], add ppc64 to the list of BE architectures.
Thanks Adrian Glaubitz for pointing the issue. (Closes: #879270)
* [42f5ab5] apparmor: update profile from upstream (Closes: #876333, #855346)
.
[ intrigeri ]
* [d7febc8, b026d28] AppArmor: update profile from upstream
(Closes: #880425, #877324)
* [377e7b5] README.Debian: fixing small typo
* [3b0a63a] AppArmor: fix importing public OpenPGP keys from file
(Closes: #880715)
.
[ Carsten Schoenert ]
* [241690e] d/control: s/Icedove/Thunderbird in desc's for lightning-l10n-*
The lightning-l10n package were still using the name 'Icdeove'
instead of 'Thunderbird'.
* [f17f735] debian/control: moving transitional packages at bottom
* [91f9897] autopkg: adjust icedove to thunderbird depends
Now move over to depend in favor of thunderbird for some of
the autopkg tests.
* [8ae2ad7] autopkg: adjust icedove-dev to thunderbird-dev depends
Doing the same as before for thunderbird-dev as the native
replacement for icedove-dev.
* [fa0134c] bump debhelper >= 10.2.5
* [8752789] debian/rules: try to build extensions reproducible
The two extensions (lightning and calendar-google-provider)
don't build reproducible right now. Trying to fix this by using
the timestamp from the changelog entry for the files. May not
work correctly and we need to tune more.
* [1496368] d/thunderbird.install: also install the fonts folder
Recent versions of Thunderbird needing the font EmojiOne which
isn't provided by any other package.
(Closes: #881299)
.
The following changes are take effect in removing all transitional packages
related to the old icedove packaging only for buster. We still need all the
transitional packages in wheezy, jessie and stretch!
* [54c8a9b] [buster] remove transitional iceowl-l10n-* packages
* [c338630] [buster] remove Replace, Breaks and Provides for iceowl-l10n-*
* [4311683] [buster] remove transitional icedove-l10n-* packages
* [f6e3a01] [buster] remove Replace, Breaks and Provides for icedove-l10n-*
* [a9117e4] [buster] remove transitional iceowl-extension package
* [5aed012] [buster] remove Replace, Breaks and Provides for iceowl-extension
* [27fc04b] [buster] remove transitional icedove-dbg package
* [53b4825] [buster] remove transitional icedove-dev package
* [e2d808f] [buster] remove Replace, Breaks and Provides for icedove-dev
* [97edfbe] [buster] remove transitional icedove package
* [3748054] [buster] remove Replace and Breaks for icedove
* [611a704] [buster] move thunderbird-dbg into *-dbgsym package
Checksums-Sha1:
6125e4873888d0eb1ff5eb668997132c32407dba 12543 thunderbird_52.4.0-2~exp1.dsc
45fc6a1ec42a912ee4578f2f202782c32cae1d4f 394732
thunderbird_52.4.0-2~exp1.debian.tar.xz
22784eef8bdcb0bfd584b5d8c3626c9a7c51c390 53145
thunderbird_52.4.0-2~exp1_amd64.buildinfo
Checksums-Sha256:
017e5c7d099d9b1abe1b28512a9d2556b28c207793f4b742c17e0811a0f464ab 12543
thunderbird_52.4.0-2~exp1.dsc
603108fbf9d61ffc48ad92fe8e316794c1c7e78e5b093048f367a104d963b9ce 394732
thunderbird_52.4.0-2~exp1.debian.tar.xz
2a113556acabd4f018b8737f108db6e675988f2f4dd91e9d20fc2ce739a6f288 53145
thunderbird_52.4.0-2~exp1_amd64.buildinfo
Files:
7d0e17f3b788eb4b417d13c629fe6046 12543 mail optional
thunderbird_52.4.0-2~exp1.dsc
94f9af2f4bd97f0243d21a5079d4e9d5 394732 mail optional
thunderbird_52.4.0-2~exp1.debian.tar.xz
e33fb4fe6b2679a0067cdf15dea122fd 53145 mail optional
thunderbird_52.4.0-2~exp1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=9pVb
-----END PGP SIGNATURE-----
--- End Message ---