Bug#1121054: marked as done (thunderbird cannot sign/(de)crypt mails using external_gnupg anymore)

Debian Bug Tracking System Thu, 15 Jan 2026 10:36:22 -0800

Your message dated Thu, 15 Jan 2026 18:34:36 +0000
with message-id <[email protected]>
and subject line Bug#1121054: fixed in thunderbird 1:140.7.0esr-1
has caused the Debian Bug report #1121054,
regarding thunderbird cannot sign/(de)crypt mails using external_gnupg anymore
to be marked as done.


This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1121054: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121054
Debian Bug Tracking System
Contact [email protected] with problems

--- Begin Message ---

Package: thunderbird
Version: 1:140.5.0esr-1
Severity: normal
X-Debbugs-Cc: [email protected]

Dear Maintainer,


Since yesterday, I cannot sign or (de)crypt mails anymore in thunderbird.

I am using mail.openpgp.allow_external_gnupg set to true and my local gpg key.

Everything looks fine if I use it alone but sending a signed mail give me this 
in thunderbird console (crtl+shift+j):

EnigmailFuncs.sync() failed result:  Error: invalid configuration, request to 
use external GnuPG key, but GPGME isn't working
    encryptAndOrSign chrome://openpgp/content/modules/RNP.sys.mjs:3777
    encryptMessageStart chrome://openpgp/content/modules/encryption.sys.mjs:403
    finishCryptoEncapsulation 
chrome://openpgp/content/modules/mimeEncrypt.sys.mjs:442
    createMessageFile resource:///modules/MimeMessage.sys.mjs:83
funcs.sys.mjs:492:17
Error: encryptMessageStart FAILED: undefined mimeEncrypt.sys.mjs:455:15
mailnews.send: NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS: [JavaScript Error: 
"encryptMessageStart FAILED: undefined" {file: 
"chrome://openpgp/content/modules/mimeEncrypt.sys.mjs" line: 455}]'[JavaScript 
Error: "encryptMessageStart FAILED: undefined" {file: 
"chrome://openpgp/content/modules/mimeEncrypt.sys.mjs" line: 455}]' when 
calling method: [nsIMsgComposeSecure::finishCryptoEncapsulation]
    createMessageFile resource:///modules/MimeMessage.sys.mjs:83
MessageSend.sys.mjs:149:32
mailnews.send: Sending failed; , exitCode=2153185313, originalMsgURI= 
MessageSend.sys.mjs:343:32
Error: invalid configuration, request to use external GnuPG key, but GPGME 
isn't working

Two days ago, I updated my debian sid (see below for list of changes) including 
some libgpgme.

So, most probably, something broke the thunderbird gnupg interface.

Thank you so much for taking care of this.

Regards,

Jean-Marc

P.S. to make a simple test, I re-installed libgpgme11t64 and libgpgmepp6t64 but 
it did not solve the issue.


===== list of changes :
Start-Date: 2025-11-18  10:18:22
Commandline: apt upgrade
Requested-By: xxx (1000)
Install: libgpgmepp7:amd64 (2.0.0-2, automatic), libgpgme45:amd64 (2.0.1-2, 
automatic), linux-image-6.17.8+deb14-amd64:amd64 (6.17.8-1, automatic)
Upgrade: libembree4-4:amd64 (4.3.3+dfsg-1, 4.4.0+dfsg-1), 
libkirigamidelegates6:amd64 (6.18.0-2, 6.20.0-1), 
qml6-module-org-kde-newstuff:amd64 (6.18.0-1, 6.20.0-1), libperl5.40:amd64 
(5.40.1-6, 5.40.1-7), libkf6wallet-data:amd64 (6.18.0-2, 6.20.0-1), 
libhivex0:amd64 (1.3.24-1+b12, 1.3.24-2), libxtables12:amd64 (1.8.11-2, 
1.8.11-3), libreoffice-calc:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), 
libkf6authcore6:amd64 (6.18.0-1, 6.20.0-1), libreoffice-sdbc-postgresql:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libkf6widgetsaddons6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6coreaddons6:amd64 (6.18.0-2, 6.20.0-1), udev:amd64 (258.1-2, 259~rc1-1), 
systemd-oomd:amd64 (258.1-2, 259~rc1-1), qml6-module-org-kde-prison:amd64 
(6.18.0-1, 6.20.0-1), libreoffice-gnome:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), 
libkf6solid-data:amd64 (6.18.0-1, 6.20.0-1), uno-libs-private:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libreoffice-base-core:amd64 (4:25.8.3-1, 
4:25.8.3-1+b1), libkf6package6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6newstuffwidgets6:amd64 (6.18.0-1, 6.20.0-1), iptables:amd64 (1.8.11-2, 
1.8.11-3), libkf6service6:amd64 (6.18.0-1, 6.20.0-1), libglx-mesa0:amd64 
(25.2.6-1, 25.2.7-1), sylpheed:amd64 (3.8.0~beta1-3, 3.8.0~beta1-3+b1), 
libkf6textwidgets-data:amd64 (6.18.0-1, 6.20.0-1), libkf6purposewidgets6:amd64 
(6.18.0-1, 6.20.0-1), libkf6kcmutils6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6bookmarkswidgets6:amd64 (6.18.0-1, 6.20.0-1), python3-brlapi:amd64 
(6.8-3, 6.8-4), libkf6itemviews6:amd64 (6.18.0-1, 6.20.0-1), 
systemd-container:amd64 (258.1-2, 259~rc1-1), libreoffice-core:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libnss-myhostname:amd64 (258.1-2, 259~rc1-1), 
ruby-unf:amd64 (0.1.4-3, 0.2.0-1), libkf6sonnetcore6:amd64 (6.18.0-1, 
6.20.0-1), libkf6svg6:amd64 (6.18.0-1, 6.20.0-1), libkf6contacts-data:amd64 
(6.18.0-1, 6.20.0-1), libkf6notifyconfig6:amd64 (6.18.0-1, 6.20.0-1), 
systemd-timesyncd:amd64 (258.1-2, 259~rc1-1), perl:amd64 (5.40.1-6, 5.40.1-7), 
xbrlapi:amd64 (6.8-3, 6.8-4), libkf6dbusaddons6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6wallet6:amd64 (6.18.0-2, 6.20.0-1), libldb2:amd64 
(2:2.11.0+samba4.23.3+dfsg-1, 2:2.11.0+samba4.23.3+dfsg-1+b1), yt-dlp:amd64 
(2025.10.22-1, 2025.11.12-1), libkirigamitemplates6:amd64 (6.18.0-2, 6.20.0-1), 
libkirigamilayouts6:amd64 (6.18.0-2, 6.20.0-1), libkf6prisonscanner6:amd64 
(6.18.0-1, 6.20.0-1), libpam-systemd:amd64 (258.1-2, 259~rc1-1), 
libkf6i18n-data:amd64 (6.18.0-1, 6.20.0-1), gir1.2-lokdocview-0.1:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), qml6-module-org-kde-config:amd64 (6.18.0-1, 
6.20.0-1), libbrlapi0.8:amd64 (6.8-3, 6.8-4), libkf6kiogui6:amd64 (6.18.0-1, 
6.20.0-1), libkf6kcmutils-data:amd64 (6.18.0-1, 6.20.0-1), 
libkirigamiprivate6:amd64 (6.18.0-2, 6.20.0-1), libkf6configwidgets-data:amd64 
(6.18.0-1, 6.20.0-1), libuno-sal3t64:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), 
libkf6filemetadata-bin:amd64 (6.18.0-1, 6.20.0-1), libfilezilla-common:amd64 
(0.52.0-1, 0.52.0-2), libkf6windowsystem-data:amd64 (6.18.0-1, 6.20.0-1), 
libkf6kiowidgets6:amd64 (6.18.0-1, 6.20.0-1), 
libreoffice-report-builder-bin:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), ure:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libkf6kcmutils-bin:amd64 (6.18.0-1, 6.20.0-1), 
libkf6configwidgets6:amd64 (6.18.0-1, 6.20.0-1), libkf6doctools6:amd64 
(6.18.0-1, 6.20.0-1), tasksel-data:amd64 (3.83, 3.84), libkf6auth-data:amd64 
(6.18.0-1, 6.20.0-1), kwallet6:amd64 (6.18.0-2, 6.20.0-1), 
libkf6config-bin:amd64 (6.18.0-1, 6.20.0-1), libgbm1:amd64 (25.2.6-1, 
25.2.7-1), libkf6colorscheme6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6codecs-data:amd64 (6.18.0-1, 6.20.0-1), libkf6guiaddons-data:amd64 
(6.18.0-1, 6.20.0-1), libp11-kit0:amd64 (0.25.9-2, 0.25.10-1), kio6:amd64 
(6.18.0-1, 6.20.0-1), qml6-module-org-kde-kitemmodels:amd64 (6.18.0-1, 
6.20.0-1), automake:amd64 (1:1.18.1-2, 1:1.18.1-3), liblibreofficekitgtk:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libostree-1-1:amd64 (2025.6-1, 2025.7-1), 
tasksel:amd64 (3.83, 3.84), libkf6coreaddons-data:amd64 (6.18.0-2, 6.20.0-1), 
mesa-libgallium:amd64 (25.2.6-1, 25.2.7-1), libkf6colorscheme-data:amd64 
(6.18.0-1, 6.20.0-1), ruby-httpclient:amd64 (2.8.3+git20211122.4658227-1, 
2.9.0-1), libkf6sonnet-data:amd64 (6.18.0-1, 6.20.0-1), libfilezilla50:amd64 
(0.52.0-1, 0.52.0-2), libreoffice-draw:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), 
libkf6statusnotifieritem-data:amd64 (6.18.0-1, 6.20.0-1), libip4tc2:amd64 
(1.8.11-2, 1.8.11-3), libkf6windowsystem6:amd64 (6.18.0-1, 6.20.0-1), 
libsystemd0:amd64 (258.1-2, 259~rc1-1), libkf6parts-data:amd64 (6.18.0-1, 
6.20.0-1), libnss-systemd:amd64 (258.1-2, 259~rc1-1), libwbclient0:amd64 
(2:4.23.3+dfsg-1, 2:4.23.3+dfsg-1+b1), task-french-desktop:amd64 (3.83, 3.84), 
libkf6completion-data:amd64 (6.18.0-1, 6.20.0-1), libkf6package-data:amd64 
(6.18.0-1, 6.20.0-1), libkf6i18n6:amd64 (6.18.0-1, 6.20.0-1), 
libkirigami6:amd64 (6.18.0-2, 6.20.0-1), libkf6codecs6:amd64 (6.18.0-1, 
6.20.0-1), libkf6bluezqt6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6iconthemes-bin:amd64 (6.18.0-1, 6.20.0-1), libkf6bluezqt-data:amd64 
(6.18.0-1, 6.20.0-1), libkf6modemmanagerqt6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6jobwidgets6:amd64 (6.18.0-1, 6.20.0-1), libpoppler-cpp2:amd64 
(25.03.0-11.1, 25.03.0-11.1+b1), libreoffice-impress:amd64 (4:25.8.3-1, 
4:25.8.3-1+b1), gir1.2-libvirt-glib-1.0:amd64 (5.0.0-2+b5, 5.0.0-3), 
libkf6solid6:amd64 (6.18.0-1, 6.20.0-1), libreoffice-evolution:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libkf6bookmarks-data:amd64 (6.18.0-1, 6.20.0-1), 
libkf6kcmutilsquick6:amd64 (6.18.0-1, 6.20.0-1), 
qml6-module-org-kde-kcmutils:amd64 (6.18.0-1, 6.20.0-1), libkf6runner6:amd64 
(6.18.0-1, 6.20.0-1), systemd:amd64 (258.1-2, 259~rc1-1), libdmtx0t64:amd64 
(0.7.7-1.2+b1, 0.7.8-1), libudev1:amd64 (258.1-2, 259~rc1-1), 
mesa-va-drivers:amd64 (25.2.6-1, 25.2.7-1), p11-kit-modules:amd64 (0.25.9-2, 
0.25.10-1), libcfitsio10t64:amd64 (4.6.2-2, 4.6.3-1), poppler-utils:amd64 
(25.03.0-11.1, 25.03.0-11.1+b1), libkf6globalaccel6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6purpose-data:amd64 (6.18.0-1, 6.20.0-1), libgl1-mesa-dri:amd64 (25.2.6-1, 
25.2.7-1), libkf6dbusaddons-bin:amd64 (6.18.0-1, 6.20.0-1), 
libvolume-key1:amd64 (0.3.12-10, 0.3.12-10+b1), sonnet6-plugins:amd64 
(6.18.0-1, 6.20.0-1), libkf6syndication6:amd64 (6.18.0-1, 6.20.0-1), 
usbutils:amd64 (1:018-2, 1:019-1), systemd-cryptsetup:amd64 (258.1-2, 
259~rc1-1), libkf6purpose6:amd64 (6.18.0-1, 6.20.0-1), 
libkirigamidialogs6:amd64 (6.18.0-2, 6.20.0-1), libkf6iconwidgets6:amd64 
(6.18.0-1, 6.20.0-1), libkirigamiprimitives6:amd64 (6.18.0-2, 6.20.0-1), 
libnss-mymachines:amd64 (258.1-2, 259~rc1-1), gir1.2-nm-1.0:amd64 (1.54.1-1, 
1.54.2-1), libkf6notifications6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6notifyconfig-data:amd64 (6.18.0-1, 6.20.0-1), debootstrap:amd64 (1.0.141, 
1.0.142), lynx:amd64 (2.9.2-1, 2.9.2-2), libkf6itemmodels6:amd64 (6.18.0-1, 
6.20.0-1), seahorse:amd64 (47.0.1-3, 47.0.1-3+b1), libkf6service-data:amd64 
(6.18.0-1, 6.20.0-1), libkf6notifications-data:amd64 (6.18.0-1, 6.20.0-1), 
linux-image-amd64:amd64 (6.17.7-2, 6.17.8-1), libkirigamiplatform6:amd64 
(6.18.0-2, 6.20.0-1), libreoffice-writer:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), 
libkf6configcore6:amd64 (6.18.0-1, 6.20.0-1), libsmbclient0:amd64 
(2:4.23.3+dfsg-1, 2:4.23.3+dfsg-1+b1), libkirigamilayoutsprivate6:amd64 
(6.18.0-2, 6.20.0-1), kded6:amd64 (6.18.0-1, 6.20.0-1), libkf6sonnetui6:amd64 
(6.18.0-1, 6.20.0-1), libpoppler147:amd64 (25.03.0-11.1, 25.03.0-11.1+b1), 
network-manager:amd64 (1.54.1-1, 1.54.2-1), mesa-vulkan-drivers:amd64 
(25.2.6-1, 25.2.7-1), libkf6xmlgui-data:amd64 (6.18.0-1, 6.20.0-1), 
libreoffice-base-drivers:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), 
network-manager-l10n:amd64 (1.54.1-1, 1.54.2-1), kpackagetool6:amd64 (6.18.0-1, 
6.20.0-1), libkf6jobwidgets-data:amd64 (6.18.0-1, 6.20.0-1), 
libkf6breezeicons6:amd64 (6.18.0-1, 6.20.0-1), libtdb1:amd64 
(2:1.4.14+samba4.23.3+dfsg-1, 2:1.4.14+samba4.23.3+dfsg-1+b1), 
task-desktop:amd64 (3.83, 3.84), reprepro:amd64 (5.4.6+really5.3.2-1, 
5.4.6+really5.3.2-1+b1), libreoffice-sdbc-firebird:amd64 (4:25.8.3-1, 
4:25.8.3-1+b1), libkf6service-bin:amd64 (6.18.0-1, 6.20.0-1), 
libkirigamipolyfill6:amd64 (6.18.0-2, 6.20.0-1), task-french:amd64 (3.83, 
3.84), python3-gpg:amd64 (1.24.2-3, 2.0.0-2), task-ssh-server:amd64 (3.83, 
3.84), kf6-breeze-icon-theme:amd64 (6.18.0-1, 6.20.0-1), 
libkf6filemetadata3:amd64 (6.18.0-1, 6.20.0-1), libip6tc2:amd64 (1.8.11-2, 
1.8.11-3), mutt:amd64 (2.2.13-1, 2.2.13-1+b1), libkf6attica6:amd64 (6.18.0-1, 
6.20.0-1), qml6-module-org-kde-bluezqt:amd64 (6.18.0-1, 6.20.0-1), 
libkf6iconthemes-data:amd64 (6.18.0-1, 6.20.0-1), libkf6xmlgui6:amd64 
(6.18.0-1, 6.20.0-1), libreoffice-sdbc-hsqldb:amd64 (4:25.8.3-1, 
4:25.8.3-1+b1), libkf6bookmarks6:amd64 (6.18.0-1, 6.20.0-1), 
libtevent0t64:amd64 (2:0.17.1+samba4.23.3+dfsg-1, 
2:0.17.1+samba4.23.3+dfsg-1+b1), libkf6prison6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6people6:amd64 (6.18.0-1, 6.20.0-1), task-gnome-desktop:amd64 (3.83, 
3.84), libkf6kiocore6:amd64 (6.18.0-1, 6.20.0-1), libkf6configqml6:amd64 
(6.18.0-1, 6.20.0-1), libkf6filemetadata-data:amd64 (6.18.0-1, 6.20.0-1), 
qml6-module-org-kde-people:amd64 (6.18.0-1, 6.20.0-1), libkf6guiaddons6:amd64 
(6.18.0-1, 6.20.0-1), libkf6dbusaddons-data:amd64 (6.18.0-1, 6.20.0-1), 
qml6-module-org-kde-coreaddons:amd64 (6.18.0-2, 6.20.0-1), 
libkf6config-data:amd64 (6.18.0-1, 6.20.0-1), qml6-module-org-kde-desktop:amd64 
(6.18.0-1, 6.20.0-1), libzix-0-0:amd64 (0.6.2-1, 0.8.0-1), 
libkf6newstuffcore6:amd64 (6.18.0-1, 6.20.0-1), libkf6walletbackend6:amd64 
(6.18.0-2, 6.20.0-1), libgmime-3.0-0t64:amd64 (3.2.15+dfsg-1, 
3.2.15+dfsg-1+b1), perl-base:amd64 (5.40.1-6, 5.40.1-7), ruby-unf-ext:amd64 
(0.0.7.7-1+b7, 0.0.9.1-1), lynx-common:amd64 (2.9.2-1, 2.9.2-2), 
libkf6contacts6:amd64 (6.18.0-1, 6.20.0-1), qml6-module-org-kde-ksvg:amd64 
(6.18.0-1, 6.20.0-1), qml6-module-org-kde-kirigami:amd64 (6.18.0-2, 6.20.0-1), 
libkf6qqc2desktopstyle-data:amd64 (6.18.0-1, 6.20.0-1), samba-libs:amd64 
(2:4.23.3+dfsg-1, 2:4.23.3+dfsg-1+b1), libkf6archive-data:amd64 (6.18.0-1, 
6.20.0-1), libkf6crash6:amd64 (6.18.0-1, 6.20.0-1), libsystemd-shared:amd64 
(258.1-2, 259~rc1-1), libwin-hivex-perl:amd64 (1.3.24-1+b12, 1.3.24-2), 
libkf6guiaddons-bin:amd64 (6.18.0-1, 6.20.0-1), libflatpak0:amd64 (1.16.1-3, 
1.16.1-3+b1), pv:amd64 (1.10.0-1, 1.10.1-1), systemd-sysv:amd64 (258.1-2, 
259~rc1-1), libkf6globalaccel-data:amd64 (6.18.0-1, 6.20.0-1), 
libkf6kiofilewidgets6:amd64 (6.18.0-1, 6.20.0-1), libreoffice-base:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libegl-mesa0:amd64 (25.2.6-1, 25.2.7-1), 
libpoppler-glib8t64:amd64 (25.03.0-11.1, 25.03.0-11.1+b1), sysvinit-utils:amd64 
(3.15-5, 3.15-6), libkf6people-data:amd64 (6.18.0-1, 6.20.0-1), 
libreoffice-math:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), libreoffice-gtk3:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libjcat1:amd64 (0.2.3-2, 0.2.5-1), 
libkf6textwidgets6:amd64 (6.18.0-1, 6.20.0-1), libpoppler-qt6-3t64:amd64 
(25.03.0-11.1, 25.03.0-11.1+b1), qml6-module-org-kde-kquickcontrolsaddons:amd64 
(6.18.0-1, 6.20.0-1), perl-modules-5.40:amd64 (5.40.1-6, 5.40.1-7), 
libuno-cppu3t64:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), ure-java:amd64 (4:25.8.3-1, 
4:25.8.3-1+b1), libkf6widgetsaddons-data:amd64 (6.18.0-1, 6.20.0-1), 
libjs-sphinxdoc:amd64 (8.2.3-8, 8.2.3-9), libkf6purpose-bin:amd64 (6.18.0-1, 
6.20.0-1), libkf6iconthemes6:amd64 (6.18.0-1, 6.20.0-1), libkf6archive6:amd64 
(6.18.0-1, 6.20.0-1), libkf6statusnotifieritem6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6i18nlocaledata6:amd64 (6.18.0-1, 6.20.0-1), libvirt-glib-1.0-data:amd64 
(5.0.0-2, 5.0.0-3), libvirt-glib-1.0-0:amd64 (5.0.0-2+b5, 5.0.0-3), 
mesa-vdpau-drivers:amd64 (25.2.6-1, 25.2.7-1), libkf6completion6:amd64 
(6.18.0-1, 6.20.0-1), libkf6newstuff-data:amd64 (6.18.0-1, 6.20.0-1), 
libnm0:amd64 (1.54.1-1, 1.54.2-1), libuno-cppuhelpergcc3-3t64:amd64 
(4:25.8.3-1, 4:25.8.3-1+b1), libtalloc2:amd64 (2:2.4.3+samba4.23.3+dfsg-1, 
2:2.4.3+samba4.23.3+dfsg-1+b1), libkf6configgui6:amd64 (6.18.0-1, 6.20.0-1), 
libkf6peoplebackend6:amd64 (6.18.0-1, 6.20.0-1), libkf6i18nqml6:amd64 
(6.18.0-1, 6.20.0-1), libuno-purpenvhelpergcc3-3t64:amd64 (4:25.8.3-1, 
4:25.8.3-1+b1), libkf6style6:amd64 (6.18.0-1+b1, 6.20.0-1), 
libuno-salhelpergcc3-3t64:amd64 (4:25.8.3-1, 4:25.8.3-1+b1), 
qml6-module-org-kde-purpose:amd64 (6.18.0-1, 6.20.0-1), python3-libevdev:amd64 
(0.12-1, 0.13.1-1), libkf6parts6:amd64 (6.18.0-1, 6.20.0-1), p11-kit:amd64 
(0.25.9-2, 0.25.10-1), libkirigami-data:amd64 (6.18.0-2, 6.20.0-1), 
libkf6itemviews-data:amd64 (6.18.0-1, 6.20.0-1), 
qml6-module-org-kde-sonnet:amd64 (6.18.0-1, 6.20.0-1), 
mobile-broadband-provider-info:amd64 (20250613-2, 20251101-1), 
linux-libc-dev:amd64 (6.17.7-2, 6.17.8-1), libkf6kcmutilscore6:amd64 (6.18.0-1, 
6.20.0-1)
End-Date: 2025-11-18  10:20:47

Start-Date: 2025-11-18  10:21:00
Commandline: apt autoremove --purge
Requested-By: xxx (1000)
Purge: linux-image-6.17.6+deb14-amd64:amd64 (6.17.6-1), ruby-unf-ext:amd64 
(0.0.9.1-1), libgpgme11t64:amd64 (1.24.2-3), libgpgmepp6t64:amd64 (1.24.2-3)



-- System Information:
Debian Release: forky/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.17.8+deb14-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_BE:fr
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages thunderbird depends on:
ii  debianutils          5.23.2
ii  fontconfig           2.15.0-2.4
ii  libasound2t64        1.2.14-2
ii  libatk1.0-0t64       2.58.1-1
ii  libc6                2.41-12
ii  libcairo-gobject2    1.18.4-1+b1
ii  libcairo2            1.18.4-1+b1
ii  libdbus-1-3          1.16.2-2
ii  libevent-2.1-7t64    2.1.12-stable-10+b1
ii  libffi8              3.5.2-2
ii  libfontconfig1       2.15.0-2.4
ii  libfreetype6         2.13.3+dfsg-1
ii  libgcc-s1            15.2.0-8
ii  libgdk-pixbuf-2.0-0  2.44.4+dfsg-1
ii  libglib2.0-0t64      2.86.1-2
ii  libgtk-3-0t64        3.24.51-1
ii  libnspr4             2:4.38.2-1
ii  libnss3              2:3.117-1
ii  libotr5t64           4.1.1-6
ii  libpango-1.0-0       1.56.3-2
ii  librnp0              0.18.0-4
ii  libstdc++6           15.2.0-8
ii  libvpx11             1.15.2-2
ii  libx11-6             2:1.8.12-1
ii  libx11-xcb1          2:1.8.12-1
ii  libxcb-shm0          1.17.0-2+b1
ii  libxcb1              1.17.0-2+b1
ii  libxext6             2:1.3.4-1+b3
ii  libxrandr2           2:1.5.4-1+b3
ii  psmisc               23.7-2
ii  x11-utils            7.7+7
ii  zenity               4.1.99-1
ii  zlib1g               1:1.3.dfsg+really1.3.1-1+b1

Versions of packages thunderbird recommends:
ii  hunspell-en-us [hunspell-dictionary]         1:2020.12.07-4
ii  hunspell-fr-classical [hunspell-dictionary]  1:7.0-3

Versions of packages thunderbird suggests:
ii  apparmor          4.1.0-1
ii  fonts-lyx         2.4.4-2
ii  libgssapi-krb5-2  1.22.1-2

-- no debconf information

--- End Message ---

--- Begin Message ---

Source: thunderbird
Source-Version: 1:140.7.0esr-1
Done: Christoph Goehre <[email protected]>

We believe that the bug you reported is fixed in the latest version of
thunderbird, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christoph Goehre <[email protected]> (supplier of updated thunderbird package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 15 Jan 2026 14:09:58 +0100
Source: thunderbird
Architecture: source
Version: 1:140.7.0esr-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <[email protected]>
Changed-By: Christoph Goehre <[email protected]>
Closes: 1121054 1121117
Changes:
 thunderbird (1:140.7.0esr-1) unstable; urgency=medium
 .
   * [9dd500b] New upstream version 140.7.0esr
     Fixed CVE issues in upstream version 140.7 (MFSA 2026-05):
     CVE-2026-0877: Mitigation bypass in the DOM: Security component
     CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the
                    Graphics: CanvasWebGL component
     CVE-2026-0879: Sandbox escape due to incorrect boundary conditions in the
                    Graphics component
     CVE-2026-0880: Sandbox escape due to integer overflow in the Graphics
                    component
     CVE-2026-0882: Use-after-free in the IPC component
     CVE-2025-14327: Spoofing issue in the Downloads Panel component
     CVE-2026-0883: Information disclosure in the Networking component
     CVE-2026-0884: Use-after-free in the JavaScript Engine component
     CVE-2026-0885: Use-after-free in the JavaScript: GC component
     CVE-2026-0886: Incorrect boundary conditions in the Graphics component
     CVE-2026-0887: Clickjacking issue, information disclosure in the PDF
                    Viewer component
     CVE-2026-0890: Spoofing issue in the DOM: Copy & Paste and Drag & Drop
                    component
     CVE-2026-0891: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
                    ESR 140.7, Firefox 147 and Thunderbird 147
   * [6da09ab] rebuild patch queue from patch-queue branch
     added patches:
     fixes/enable-use-of-gpgme-greater-equal-two-dot-zero.patch
     (Closes: #1121054)
   * [9adc353] d/control: add libgpgme to Depends
     dpkg-shlibdeps doesn't detect the need to add the library libgpgme to
     ${misc:Depends} so adding that package manually to the list.
     (Closes: #1121117)
Checksums-Sha1:
 7a7b2c6e3f9710e4e72b45626b3be356dea2683d 8437 thunderbird_140.7.0esr-1.dsc
 539b844bfeba51b700a13abc9b61eb36cf4079c1 12258068 
thunderbird_140.7.0esr.orig-thunderbird-l10n.tar.xz
 f1f1c11f7c71706e00b55f37ab1197c672397416 793863620 
thunderbird_140.7.0esr.orig.tar.xz
 428020d37f211ae93796d7712b77c8683f49ba40 553140 
thunderbird_140.7.0esr-1.debian.tar.xz
 4627efda52b0f3af53f157f69f08682858516c42 8322 
thunderbird_140.7.0esr-1_source.buildinfo
Checksums-Sha256:
 58fc90bc7cbdc5e6e09b9b7c7235bb89a32e5e91e7f76d8f6486f42aabee924b 8437 
thunderbird_140.7.0esr-1.dsc
 d6bd5c4a61a2eba4ab14e0fd719d95befa966354113109f09a7268e05bebedf4 12258068 
thunderbird_140.7.0esr.orig-thunderbird-l10n.tar.xz
 ef6c1c8e04402578f33e7f0f2d07e3cb48c9931f9802a03635062fbc4a4a0ce2 793863620 
thunderbird_140.7.0esr.orig.tar.xz
 e31ef859358eb745c33d02f10837057774df40549ad8234ca200abca6fe7cf70 553140 
thunderbird_140.7.0esr-1.debian.tar.xz
 bf2f97003d41e9c4243268c861280ecd1d203f209a4d7a608236718a6a26a2bd 8322 
thunderbird_140.7.0esr-1_source.buildinfo
Files:
 e7a728ae378e726c50381c00fc21c921 8437 mail optional 
thunderbird_140.7.0esr-1.dsc
 6a52ec54c21ab833da135e574f8e8c65 12258068 mail optional 
thunderbird_140.7.0esr.orig-thunderbird-l10n.tar.xz
 ee2b9f62ff1cf2cae289627376b1be36 793863620 mail optional 
thunderbird_140.7.0esr.orig.tar.xz
 02ff731ae1f7c3b85580537a1f762baf 553140 mail optional 
thunderbird_140.7.0esr-1.debian.tar.xz
 4043b57558d8c0d6d6c43b457d69ed49 8322 mail optional 
thunderbird_140.7.0esr-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=dhns
-----END PGP SIGNATURE-----

pgpzRAOxv3BYD.pgp
Description: PGP signature

--- End Message ---

Bug#1121054: marked as done (thunderbird cannot sign/(de)crypt mails using external_gnupg anymore)

Reply via email to