LO unable to find a working email configuration

Bug #1748895 reported by cement_head on 2018-02-12
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
libreoffice (Ubuntu)
Medium
Olivier Tilloy

Bug Description

Installed from PPA: ppa:libreoffice/ppa

$ lsb_release -a
LSB Version: core-9.20160110ubuntu0.2-amd64:core-9.20160110ubuntu0.2-noarch:printing-9.20160110ubuntu0.2-amd64:printing-9.20160110ubuntu0.2-noarch:security-9.20160110ubuntu0.2-amd64:security-9.20160110ubuntu0.2-noarch
Distributor ID: Ubuntu
Description: Ubuntu 16.04.3 LTS
Release: 16.04
Codename: xenial

$ apt-cache policy libreoffice
libreoffice:
  Installed: 1:6.0.1~rc1-0ubuntu0.16.04.1~lo1
  Candidate: 1:6.0.1~rc1-0ubuntu0.16.04.1~lo1
  Version table:
 *** 1:6.0.1~rc1-0ubuntu0.16.04.1~lo1 500
        500 http://ppa.launchpad.net/libreoffice/ppa/ubuntu xenial/main amd64 Packages
        100 /var/lib/dpkg/status
     1:5.1.6~rc2-0ubuntu1~xenial2 500
        500 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 Packages
        500 http://archive.ubuntu.com/ubuntu xenial-security/universe amd64 Packages
     1:5.1.2-0ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu xenial/universe amd64 Packages

WHAT YOU EXPECT TO HAPPEN:

  Should spawn an new Evolution eMAIL with attached ODF document

WHAT HAPPENED INSTEAD:

  Error Dialogue: LibreOffice is unable to find a working email configuration. Please save your document locally and attached from within your eMAIL client.

CVE References

Olivier Tilloy (osomon) wrote :

Confirmed. This appears to be a regression. I can observe the issue in xenial and bionic, where the functionality used to work as expected in previous versions (5.1.6 and 5.4.3, respectively).

Changed in libreoffice (Ubuntu):
status: New → Confirmed
Olivier Tilloy (osomon) wrote :

And the following error is most likely related:

    sh: 1: /usr/lib/libreoffice/program/senddoc: Permission denied

Olivier Tilloy (osomon) wrote :

Indeed, if I unload the apparmor profile for soffice.bin, sending the current document as e-mail attachment works again.

Olivier Tilloy (osomon) wrote :

Corresponding apparmor entry in journalctl:

audit[1608]: AVC apparmor="ALLOWED" operation="exec" info="profile transition not found" error=-13 profile="libreoffice-soffice" name="/usr/lib/libreoffice/progrm/senddoc" pid=1608 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/lib/libreoffice/program/senddoc"

Bryan Quigley (bryanquigley) wrote :

The senddoc profile is wrong like the other one was too -
profile libreoffice-senddoc /usr/lib/libreoffice//usr/lib{,32,64}/libreoffice/program/senddoc {
  #include <abstractions/base>

It still seems like the profile is missing xdg-email, which might be needed too.

Olivier Tilloy (osomon) wrote :

The path to the senddoc executable is incorrect in the apparmor profile:

  $ grep profile /etc/apparmor.d/usr.lib.libreoffice.program.senddoc
  profile libreoffice-senddoc /usr/lib/libreoffice//usr/lib{,32,64}/libreoffice/program/senddoc {

After fixing it and reloading the profile though, I'm seeing another issue:

  /usr/lib/libreoffice/program/senddoc: 442: /usr/lib/libreoffice/program/senddoc: /usr/bin/xdg-email: Permission denied

Olivier Tilloy (osomon) on 2018-02-12
Changed in libreoffice (Ubuntu):
assignee: nobody → Olivier Tilloy (osomon)
importance: Undecided → Medium
Olivier Tilloy (osomon) wrote :
Changed in libreoffice (Ubuntu):
status: Confirmed → In Progress
Olivier Tilloy (osomon) wrote :
Changed in libreoffice (Ubuntu):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libreoffice - 1:5.4.5-0ubuntu0.17.10.1

---------------
libreoffice (1:5.4.5-0ubuntu0.17.10.1) artful; urgency=medium

  * New upstream release (LP: #1748999)
    - fixes CVE-2018-6871: Remote arbitrary file disclosure vulnerability via
      WEBSERVICE formula
  * debian/patches/apparmor-senddoc-fixes.patch: apparmor fixes for the
    senddoc profile (LP: #1748895)

 -- Olivier Tilloy <email address hidden> Tue, 13 Feb 2018 11:25:01 +0100

Changed in libreoffice (Ubuntu):
status: Fix Committed → Fix Released
cement_head (andor-udel) wrote :

Still in LO 6.0.x

David van der Wal (statitica) wrote :

Still present with LO6 and Thunderbird on Ubuntu 16.04.03

Olivier Tilloy (osomon) wrote :

Which version exactly? Can you please share the output of:

    apt policy libreoffice-common

David van der Wal (statitica) wrote :

apt policy libreoffice-common
libreoffice-common:
  Installed: 1:6.0.1~rc1-0ubuntu0.16.04.1~lo1
  Candidate: 1:6.0.1~rc1-0ubuntu0.16.04.1~lo1
  Version table:
 *** 1:6.0.1~rc1-0ubuntu0.16.04.1~lo1 500
        500 http://ppa.launchpad.net/libreoffice/ppa/ubuntu xenial/main amd64 Packages
        500 http://ppa.launchpad.net/libreoffice/ppa/ubuntu xenial/main i386 Packages
        100 /var/lib/dpkg/status
     1:5.1.6~rc2-0ubuntu1~xenial3 500
        500 http://au.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
        500 http://au.archive.ubuntu.com/ubuntu xenial-updates/main i386 Packages
        500 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu xenial-security/main i386 Packages
     1:5.1.2-0ubuntu1 500
        500 http://au.archive.ubuntu.com/ubuntu xenial/main amd64 Packages
        500 http://au.archive.ubuntu.com/ubuntu xenial/main i386 Packages

Olivier Tilloy (osomon) wrote :

This is fixed in libreoffice 6.0.1 in ubuntu 18.04, and will be fixed in the next update in the PPA for 16.04 (6.0.2).

cement_head (andor-udel) wrote :

Nope. Still broken.

$ soffice
/usr/lib/libreoffice/program/senddoc: 277: /usr/lib/libreoffice/program/senddoc: /usr/bin/evolution: Permission denied

Rico Tzschichholz (ricotz) wrote :

Please try to unset your email-client inside of libreoffice settings, and rely on the system-wide setting which can be made in e.g. gnome-control-center

cement_head (andor-udel) wrote :

Okay, works now if </usr/bin/evolution> is deleted and client is left <blank>

David van der Wal (statitica) wrote :

Confirm fixed under latest libreOffice update, and Ubuntu MATE 16.04
Thanks

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.