Your message dated Tue, 14 May 2024 21:12:08 +0000
with message-id <[email protected]>
and subject line Bug#1070871: fixed in thunderbird 1:115.11.0-1
has caused the Debian Bug report #1070871,
regarding thunderbird: please use system librnp
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1070871: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070871
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: thunderbird
Version: 1:115.10.1-1
Severity: normal
X-Debbugs-Cc: Daniel Kahn Gillmor <[email protected]>
Thunderbird was (understandably) using an internal copy of librnp
because upstream hadn't releasd a version with
`rnp_signature_get_features`
Now that 0.17.1-1 is in debian/unstable, please rebuild thunderbird to
use the system version of librnp.
thanks!
--dkg
-- System Information:
Debian Release: trixie/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'stable'), (500,
'oldstable'), (200, 'unstable-debug'), (200, 'unstable'), (1,
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.6.15-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages thunderbird depends on:
ii debianutils 5.17
ii fontconfig 2.15.0-1.1
ii libasound2t64 1.2.11-1+b1
ii libatk1.0-0t64 2.52.0-1
ii libc6 2.38-7
ii libcairo-gobject2 1.18.0-3+b1
ii libcairo2 1.18.0-3+b1
ii libdbus-1-3 1.14.10-4+b1
ii libdbus-glib-1-2 0.112-3+b2
ii libevent-2.1-7t64 2.1.12-stable-8.1+b3
ii libffi8 3.4.6-1
ii libfontconfig1 2.15.0-1.1
ii libfreetype6 2.13.2+dfsg-1+b4
ii libgcc-s1 14-20240330-1
ii libgdk-pixbuf-2.0-0 2.42.10+dfsg-3+b3
ii libglib2.0-0t64 2.80.1-1
ii libgtk-3-0t64 3.24.41-4
ii libnspr4 2:4.35-1.1+b1
ii libnss3 2:3.99-1
ii libotr5t64 4.1.1-5.1
ii libpango-1.0-0 1.52.2+ds-1
ii libstdc++6 14-20240330-1
ii libvpx8 1.13.1-2+b1
ii libx11-6 2:1.8.7-1+b1
ii libx11-xcb1 2:1.8.7-1+b1
ii libxcb-shm0 1.15-1
ii libxcb1 1.15-1
ii libxext6 2:1.3.4-1+b1
ii libxrandr2 2:1.5.4-1
ii psmisc 23.7-1
ii x11-utils 7.7+6+b1
ii zenity 4.0.1-1+b1
ii zlib1g 1:1.3.dfsg-3.1
Versions of packages thunderbird recommends:
pn myspell-en-us | hunspell-dictionary | myspell-dictionary <none>
Versions of packages thunderbird suggests:
pn apparmor <none>
ii fonts-lyx 2.4.0~RC4-1
ii libgssapi-krb5-2 1.20.1-6+b1
-- no debconf information
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: thunderbird
Source-Version: 1:115.11.0-1
Done: Carsten Schoenert <[email protected]>
We believe that the bug you reported is fixed in the latest version of
thunderbird, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <[email protected]> (supplier of updated thunderbird
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 May 2024 21:28:37 +0200
Source: thunderbird
Architecture: source
Version: 1:115.11.0-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <[email protected]>
Changed-By: Carsten Schoenert <[email protected]>
Closes: 1070871
Changes:
thunderbird (1:115.11.0-1) unstable; urgency=medium
.
* [47bb447] d/c-u-t.py: Ignore potentially non ESR versions
* [f008566] New upstream version 115.11.0
Fixed CVE issues in upstream version 115.11 (MFSA 2024-23):
CVE-2024-4367: Arbitrary JavaScript execution in PDF.js
CVE-2024-4767: IndexedDB files retained in private browsing mode
CVE-2024-4768: Potential permissions request bypass via clickjacking
CVE-2024-4769: Cross-origin responses could be distinguished between
script and non-script content-types
CVE-2024-4770: Use-after-free could occur when printing to PDF
CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
and Thunderbird 115.11
* [b029857] d/control: Re-add build and binary dep on rnp library
(Closes: #1070871)
Checksums-Sha1:
1d57bfbe3c9f4d01b38e74993ab5134431e7c16e 8473 thunderbird_115.11.0-1.dsc
7559362de1c20df4cdc1593517086861585e0991 12678260
thunderbird_115.11.0.orig-thunderbird-l10n.tar.xz
75843d7e6adb322c6e3d9418f32232385e705068 556586996
thunderbird_115.11.0.orig.tar.xz
371f70be10eb4ae217348df6367dff6f0aa8e5e0 545340
thunderbird_115.11.0-1.debian.tar.xz
b18e433d2a93768d32dc5fcaf9bd0d8daefd5b5b 41131
thunderbird_115.11.0-1_amd64.buildinfo
Checksums-Sha256:
a8bd5b2661e23615bf33a0ce463352fa0c247773ec143fa92b625cd0804c8dfa 8473
thunderbird_115.11.0-1.dsc
c86fe8e407fe213056ce701b335bd033481a072e27a0d12bb252f03a1707031d 12678260
thunderbird_115.11.0.orig-thunderbird-l10n.tar.xz
977e2c29ef3e64bd09811668af84bd2ffd46d62182ef0d1391361e10e1aaebb3 556586996
thunderbird_115.11.0.orig.tar.xz
079c543e43d77ea44796c5d43362da5e5e2af92830a1fb16ffe15a1f95c1d0f4 545340
thunderbird_115.11.0-1.debian.tar.xz
5addff7055d44afbe6c00933ac1c98c25d8f1c2764ba32a102518a3ba6040a1e 41131
thunderbird_115.11.0-1_amd64.buildinfo
Files:
22e8b0ae0a4939c3eeeefcc2fc865852 8473 mail optional thunderbird_115.11.0-1.dsc
62b0ee22406a7b4bd2ced8c8fd09fb51 12678260 mail optional
thunderbird_115.11.0.orig-thunderbird-l10n.tar.xz
ec7c3a07f1051babc8621000fd88d299 556586996 mail optional
thunderbird_115.11.0.orig.tar.xz
a470cf5d32f2fe290b3bb06c2e3bfde2 545340 mail optional
thunderbird_115.11.0-1.debian.tar.xz
6b9a50ce25cd357504538842e8aa7c69 41131 mail optional
thunderbird_115.11.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmZDxfIACgkQgwFgFCUd
HbAcdw/+KTtMnsluXnd5eBuWIyYwjtIbZwOkBEyszWzo5JLEp0S7NIz45GF62iOb
czg6i/7FzrdOyu4y1/hnojTK6KpLS9zHGk3RGeVz3xzJpw8z+LW+tL4CDVxdwvN5
c+9gw78zbuiZPZfIAkNJ1SpWSMryGRTiXjnyEQQ+XPjLQ2GAXpSGUjPYmdjg3Xi0
wsdB14greqyQimDbmSXBouP0LzFkZuYdPULf/LvmCjq53ej0BNxp+JsemFFUaUDV
65iGJW/RDrGDxbe/RD3SXE6fvbY7PN88Q+hhNyRehXQgLQtPhRDJmspJ5UAwUj4U
vACflMLhjN21h9RB3yoydj0xWBgBwdf1TrIJ2aAB84E9KlrRCfnh2h4cXL6Whk1B
FOHeLqJZXWzR1mHhd1SbdHh5QNKs2sEQGCda1rmc+vwn9A+vC68ktdJxtcW1bNwz
H73wLZKWrSV2shx/y2oGNPo/2ScN25Cj4SH3CcQRYH3II5zNQ7awdgVch0yi3f10
niu9PqYNk6WzROeBJzk/MWQITPhxv9o21HiD+pop4mtdyjrxL+cCptdtto4B+cRU
kpDBgUgHgmJ42zUT1UJOTeWVM8ZP+joYmoZHAY5PRe8dctMrCgEw+CCkLdmHWFzF
xDy5m4Cs4fFyO0C6eWGhXq/CRlPAHsxYX7lS15qunfdHNEAem3M=
=i78A
-----END PGP SIGNATURE-----
pgp0beH6D10YM.pgp
Description: PGP signature
--- End Message ---
