[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
On Thu, Jul 27, 2017 at 09:59:46AM -0400, Daniel Kahn Gillmor wrote: > Control: affects 869774 + thunderbird > Control: retitle 869774 thunderbird 52 needs enigmail 1.9.8.1 or later > Control: forwarded 869774 https://sourceforge.net/p/enigmail/bugs/687/ > > Hi there-- > > On Thu 2017-07-27 12:42:26 +0300, Adrian Bunk wrote: > > After a short look at [1] there seem to be problems with Thunderbird 52 > > left in the enigmail 1.9.7 in Debian 9, that are either fixed in 1.9.8.1 > > in Debian unstable or might even require further upstream fixes. > > > > Is your problem fixed when you install the 2:1.9.8.1-1 package from > > unstable? > > I can confirm that enigmail 2:1.9.8.1-1 (from debian testing) installs > successfully on jessie and that it appears to fix the underlying > problem. The enigmail update has just been released. Cheers, Moritz ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
On Thu, 27 Jul 2017 at 15:00:28 -0400, Daniel Kahn Gillmor wrote: > At any rate, i think it's working now (modulo a follow up on Paul van > der Vlis's experience of sending out cleartext mail as a separate > issue, which i'm unable to reproduce). Please follow up if the updated > packages haven't resolved your issues, Shevek. First of all, thanks a lot for your efforts here and your work to provide the new packages to jessie as well, dkg! At work, we have decided to switch to using the add-on from addons.mozilla.org until we can be sure that the discussion around supporting enigmail as a package in debian is resolved in such a way that the thunderbird and enigmail packages of one distribution will remain compatible during future upgrades. We would prefer to be using enigmail as a debian package rather than relying on 3rd party sources, and we do believe that it is a plugin of particular importance since it's the only means (afaik) that provides thunderbird with OpenPGP capabilities, but we can't risk having colleagues that do not have command line knowledge losing access to secure communication for a whole day like we just have, so until this issue is resolved, that's what we'll be doing. Anyway, on my personal machine, I have just tried to update to the new package, but it seems I'm still on 2:1.8.2-4~deb8u1 : $ sudo apt-get update [...] $ sudo apt-cache policy apt-cache policy enigmail enigmail: Installed: (none) Candidate: 2:1.8.2-4~deb8u1 Version table: 2:1.8.2-4~deb8u1 0 500 http://ftp.se.debian.org/debian/ jessie/main i386 Packages 500 http://security.debian.org/ jessie/updates/main i386 Packages I assume that's because I'm using an i368 arch? (At work we have 64bit machines.) Cheers, Shevek ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
On Thu 2017-07-27 21:41:18 +0200, Salvatore Bonaccorso wrote: > On Thu, Jul 27, 2017 at 03:00:28PM -0400, Daniel Kahn Gillmor wrote: >> On Thu 2017-07-27 16:21:21 +0200, Moritz Muehlenhoff wrote: >> > We can provide a fixed 1.9.8.1-1 via jessie-security/stretch-security, >> >> I've uploaded 1.9.8.1-1~deb8u1 for jessie-security and 1.9.8.1-1~deb9u1 >> for stretch-security, thanks! They're also available on the "jessie" >> and "stretch" branches at >> >>https://anonscm.debian.org/git/pkg-mozext/enigmail.git > > Assuming Moritz's reply was an explicit ack to upload, I think the > upload went to the wrong host ;-) It is now on ftp-master as dang, i thought that dupload would notice that the changelog suite is *-security and pick the right host for it. > enigmail | 2:1.9.8.1-1~deb9u1 | stable-new | source > > I do not see the jessie one yet there, This is apparently because source-only uploads aren't supported on jessie (no arch=all autobuilder). I've re-generated the upload and sent it to ftp.security.upload.debian.org instead. > but > > Jul 27 14:24:48 processing /enigmail_1.9.8.1-1~deb8u1_amd64.changes > Jul 27 14:24:48 enigmail_1.9.8.1-1~deb8u1_amd64.changes processed > successfully (uploader pkg-mozext-maintainers@lists.alioth.debian.org) > [...] > Jul 27 18:46:16 processing /enigmail_1.9.8.1-1~deb9u1_amd64.changes > Jul 27 18:46:16 enigmail_1.9.8.1-1~deb9u1_amd64.changes processed > successfully (uploader pkg-mozext-maintainers@lists.alioth.debian.org) > > OTOH I do not see any trace of it on security-master. and, i've gone ahead and re-uploaded the stretch version to ftp.security.upload.debian.org as well. hopefully i've got them all in the right place this time... --dkg ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
Hi Daniel On Thu, Jul 27, 2017 at 03:00:28PM -0400, Daniel Kahn Gillmor wrote: > On Thu 2017-07-27 16:21:21 +0200, Moritz Muehlenhoff wrote: > > We can provide a fixed 1.9.8.1-1 via jessie-security/stretch-security, > > I've uploaded 1.9.8.1-1~deb8u1 for jessie-security and 1.9.8.1-1~deb9u1 > for stretch-security, thanks! They're also available on the "jessie" > and "stretch" branches at > >https://anonscm.debian.org/git/pkg-mozext/enigmail.git Assuming Moritz's reply was an explicit ack to upload, I think the upload went to the wrong host ;-) It is now on ftp-master as enigmail | 2:1.9.8.1-1~deb9u1 | stable-new | source I do not see the jessie one yet there, but Jul 27 14:24:48 processing /enigmail_1.9.8.1-1~deb8u1_amd64.changes Jul 27 14:24:48 enigmail_1.9.8.1-1~deb8u1_amd64.changes processed successfully (uploader pkg-mozext-maintainers@lists.alioth.debian.org) [...] Jul 27 18:46:16 processing /enigmail_1.9.8.1-1~deb9u1_amd64.changes Jul 27 18:46:16 enigmail_1.9.8.1-1~deb9u1_amd64.changes processed successfully (uploader pkg-mozext-maintainers@lists.alioth.debian.org) OTOH I do not see any trace of it on security-master. Hope this helps, Regards, Salvatore ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
On Thu 2017-07-27 16:21:21 +0200, Moritz Muehlenhoff wrote: > We can provide a fixed 1.9.8.1-1 via jessie-security/stretch-security, I've uploaded 1.9.8.1-1~deb8u1 for jessie-security and 1.9.8.1-1~deb9u1 for stretch-security, thanks! They're also available on the "jessie" and "stretch" branches at https://anonscm.debian.org/git/pkg-mozext/enigmail.git > but the current approach of providing Firefox/Thunderbird extensions in a > stable release is madness and really needs to stop for buster. Neither > the Firefox, Thunderbird maintainers or the security team can look after > all these extensions. I'm less concerned with "all these extensions" than i am with enigmail, which i think is an important one, until we manage to get it embedded in thunderbird directly :/ I understand that the release team has a larger scope, but dropping enigmail from debian stable would be a pretty bad outcome. >> I think this could have been avoided if the newer version of thunderbird >> had been marked as "Breaks: enigmail < 1.9.8" or something similar, >> though it's not clear how the t-bird maintainers are supposed to know >> that sort of information about every possible extension. Perhaps >> enigmail needs to be special cased since it seems to have more of a >> history of this kind of problem? > > Every maintainer of a Firefox/Thunderbird extension needs to test older > releases against the latest ESR once that reaches unstable. There's > an overlap of several months during which we provide the old ESR in > stable while the new ESR is available, this could've all been caught > before release time. i'm not sure which release time you're talking about. Thunderbird 52 has not been part of any release, afaict. i think it was pulled into jessie and stretch by way of security updates. We have known that thunderbird 52 is incompatible with prior versions of enigmail from earlier this year (~2 months ago, see the upstream bug report). We just failed to coordinate it properly for the security update of thunderbird in debian stable and oldstable. Sorry about that! At any rate, i think it's working now (modulo a follow up on Paul van der Vlis's experience of sending out cleartext mail as a separate issue, which i'm unable to reproduce). Please follow up if the updated packages haven't resolved your issues, Shevek. --dkg signature.asc Description: PGP signature ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
On Thu, 27 Jul 2017 09:59:46 -0400 Daniel Kahn Gillmor wrote: > I can confirm that enigmail 2:1.9.8.1-1 (from debian testing) installs > successfully on jessie and that it appears to fix the underlying > problem. My experience is different: it installs without a problem, it gives warnings while decrypting. And it looks-like it encrypts, but it sent plain text. When I install it from Mozilla, it has the same problem on my machine, I am now back to Thunderbird 45 as a work-arround, what works fine. With regards, Paul van der Vlis -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/ ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
On Thu, Jul 27, 2017 at 09:59:46AM -0400, Daniel Kahn Gillmor wrote: > Control: affects 869774 + thunderbird > Control: retitle 869774 thunderbird 52 needs enigmail 1.9.8.1 or later > Control: forwarded 869774 https://sourceforge.net/p/enigmail/bugs/687/ > > Hi there-- > > On Thu 2017-07-27 12:42:26 +0300, Adrian Bunk wrote: > > After a short look at [1] there seem to be problems with Thunderbird 52 > > left in the enigmail 1.9.7 in Debian 9, that are either fixed in 1.9.8.1 > > in Debian unstable or might even require further upstream fixes. > > > > Is your problem fixed when you install the 2:1.9.8.1-1 package from > > unstable? > > I can confirm that enigmail 2:1.9.8.1-1 (from debian testing) installs > successfully on jessie and that it appears to fix the underlying > problem. > > I can also confirm that upstream doesn't expect enigmail 1.8.x to work > with thunderbird 52. > > I'm looking into creating a patch for enigmail 1.9.8.1-1 on jessie, and > will also look into such an update for stretch. We can provide a fixed 1.9.8.1-1 via jessie-security/stretch-security, but the current approach of providing Firefox/Thunderbird extensions in a stable release is madness and really needs to stop for buster. Neither the Firefox, Thunderbird maintainers or the security team can look after all these extensions. > I think this could have been avoided if the newer version of thunderbird > had been marked as "Breaks: enigmail < 1.9.8" or something similar, > though it's not clear how the t-bird maintainers are supposed to know > that sort of information about every possible extension. Perhaps > enigmail needs to be special cased since it seems to have more of a > history of this kind of problem? Every maintainer of a Firefox/Thunderbird extension needs to test older releases against the latest ESR once that reaches unstable. There's an overlap of several months during which we provide the old ESR in stable while the new ESR is available, this could've all been caught before release time. Cheers, Moritz ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
[Pkg-mozext-maintainers] Bug#869774: thunderbird 52 needs enigmail 1.9.8 or later [was: Re: Bug#869774: Corrections - propably wrong cause]
Control: affects 869774 + thunderbird Control: retitle 869774 thunderbird 52 needs enigmail 1.9.8.1 or later Control: forwarded 869774 https://sourceforge.net/p/enigmail/bugs/687/ Hi there-- On Thu 2017-07-27 12:42:26 +0300, Adrian Bunk wrote: > After a short look at [1] there seem to be problems with Thunderbird 52 > left in the enigmail 1.9.7 in Debian 9, that are either fixed in 1.9.8.1 > in Debian unstable or might even require further upstream fixes. > > Is your problem fixed when you install the 2:1.9.8.1-1 package from unstable? I can confirm that enigmail 2:1.9.8.1-1 (from debian testing) installs successfully on jessie and that it appears to fix the underlying problem. I can also confirm that upstream doesn't expect enigmail 1.8.x to work with thunderbird 52. I'm looking into creating a patch for enigmail 1.9.8.1-1 on jessie, and will also look into such an update for stretch. I think this could have been avoided if the newer version of thunderbird had been marked as "Breaks: enigmail < 1.9.8" or something similar, though it's not clear how the t-bird maintainers are supposed to know that sort of information about every possible extension. Perhaps enigmail needs to be special cased since it seems to have more of a history of this kind of problem? --dkg ___ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
