Thanks for the info, Carsten
OK, it is normal to meet end of life with security updates. I think it
has not yet been reported on the Debian security announce mailing list
that support for 32-bit has been dropped. On Tue, 5 Nov 2024 it was
only mentioned that "This version is not yet available for the i386
architecture."
(https://lists.debian.org/debian-security-announce/2024/msg00217.html).
Observed that quickly looking at
https://security-tracker.debian.org/tracker/source-package/thunderbird
would indicate that all is good for Thunderbird in Bookworm, but if
you go deeper
(https://security-tracker.debian.org/tracker/CVE-2024-11699) you can
see the actual version in the i386 is vulnerable.
For me it was easy to upgrade to the patched 64-bit version:
(1:128.5.0esr-1~deb12u1)
# apt install thunderbird:amd64
For some reason the language package is not compatible:
# apt install thunderbird-l10n-fi
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:
The following packages have unmet dependencies:
thunderbird-l10n-fi : Depends: thunderbird (<
1:128.5.0esr-1~deb12u1.1~) but it is not going to be installed
Depends: thunderbird (>=
1:128.5.0esr-1~deb12u1) but it is not going to be installed
E: Unable to correct problems, you have held broken packages.
------
Regards,
Harri
*From:* Carsten Schoenert <[email protected]>
*Sent:* Thursday, November 28, 2024 at 6:18 PM UTC+2
*To:* Harri Suutari <[email protected]>
*Cc:* [email protected]
*Subject:* RE: Bug#1088615: thunderbird: 32-bit version in Bookworm
doesn't get security updates
Hello Harri,
Am 28.11.24 um 15:52 schrieb Harri Suutari:
Dear Maintainer,
Thunderbird in Debian Bookworm i386 (32-bit):
Have: 1:115.16.0esr-1~deb12u1
Should have: 1:128.5.0esr-1~deb12u1 (or newer to have latest security
updates)
Maybe a mistake?
no, not by mistake. We are simply not able to build packages for
i386 on bookworm. We are low on free time to look deeper into the
root for the issue. It takes a lot of time and energy to fix such
issues for a rather small user base.
Currently nearly every system that is running as a i386 system is
able to also run an amd64 based system.
We dropped all other 32bit architectures (armel, amrhf, mips, pcc)
already in the past as the build problems are mostly not solvable,
at one day in the near future we will also drop i386 because it
takes to much effort to get this build able.
-- System Information:
Debian Release: 12.8
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'),
(500, 'stable'), (100, 'bookworm-fasttrack')
Architecture: i386 (x86_64)
Foreign Architectures: amd64
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
So also your system is able to use amd64 as main system.
I don't know then we can provide also i386 packages of Thunderbird
for bookworm/bullseye. In your case I think it make sense to think
about moving over to amd64.
You can do a so called cross-grade to do this without a new
installation.
https://tracker.debian.org/pkg/debian-crossgrader
https://wiki.debian.org/CrossGrading
Or of course by a new installation.
