Please upgrade it to 68.x on Ubuntu 18.04 LTS

Bug #1850064 reported by Martin Dünkelmann on 2019-10-27
34
This bug affects 5 people
Affects Status Importance Assigned to Milestone
thunderbird (Ubuntu)
High
Olivier Tilloy
Bionic
High
Unassigned

Bug Description

Now the official upgrade way from 60 to 68 got open by mozilla.

Plus there are security fixes and performance enhancements.
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird68.2

NOTE TO SRU TEAM: Please do not release this package without consulting first. This is a security update pushed via -proposed to get a bit more testing. Will be released via it's own processes.

Packages that are part of this security update: thunderbird, mozilla-devscripts, jsunit and enigmail.

description: updated
Sebastien Bacher (seb128) wrote :

Thanks for the report, that update is currently being worked on

Changed in thunderbird (Ubuntu):
status: New → In Progress
importance: Undecided → High
assignee: nobody → Olivier Tilloy (osomon)

Thank you for the status update! :)

Jaime Cruz (jaime-cruz) wrote :

Firefox ESR also needs to be upgraded to Version 68.

Olivier Tilloy (osomon) wrote :

Note that the firefox snap is already available in version 68.2.0 in the esr/stable channel.

Jaime Cruz (jaime-cruz) wrote :

Snaps waste too damned much space and take forever to launch.

We always prefer a repository package over Snap.
Snap takes more storage space and forces us to run an application with deprecated and security breaking libraries just because a developer doesn't want to test his application with the newest dependencies.

Steven Maude (stevenmaude) wrote :

Would be great to get the latest Thunderbird 68 (68.2.1) made available as it resolves the following bug that prevents OAuth authentication for Google accounts from working with correct credentials:

https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1850651

Sebastien Bacher (seb128) wrote :

@Martin, please keep statement like 'just because a developer doesn't want to' outside of the bug tracker, launchpad is a work place not an user forum.

The statement is also not respectul of the people working on those snaps, thunderbird is still available as a deb, is going to be updated and you are free to keep using the deb.

And to reply to your point, debs are more likely to get a deprecated version of a library in use than snaps since they have no real choice than to follow what the distribution provides. Typically Bionic wouldn't get a new gtk serie but snaps could easily bundle the current gtk stable version or use the corresponding platform.

Okay, I will stop and just answer your message.
And it is just my opinion about the disadvantages of snaps.

And I don't address developers who maintain everything.
But I address the developers who think they can throw a snap into the snap store and doesn't put in updated dependencies. These developers exist.

And deprecated? Since a LTS distribution must ship updated versions with bug and security fixes?
I don't speak about the shiny new and maybe buggy major version updates, I speak about the bug and security fixing patches.
You install a deb and used third party libraries standard shipped in the distribution get maintained by the distribution maintainer. And the developer is forced to update his application to remain compatibility.
You install a snap and you can hope that the snap guy puts effort in updating third party in his snap.

And again, I don't address every developer.

description: updated
description: updated

Hello Martin, or anyone else affected,

Accepted thunderbird into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/thunderbird/1:68.2.1+build1-0ubuntu0.18.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in thunderbird (Ubuntu Bionic):
status: New → Fix Committed
tags: added: verification-needed verification-needed-bionic
GrzesiekC (grzesiekc) wrote :

The proposed package is unusable, the GUI is broken:
lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.3 LTS
Release: 18.04
Codename: bionic

Here is an output when run from terminal
<truncated>
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
<truncated>

Amr Ibrahim (amribrahim1987) wrote :

Bug #1852097 Google Calendar provider is missing in Thunderbird 68.2.1 in bionic-proposed

Changed in thunderbird (Ubuntu):
status: In Progress → Fix Released

As a part of the Stable Release Updates quality process a search for Launchpad bug reports using the version of thunderbird from bionic-proposed was performed and bug 1852097 was found. Please investigate this bug report to ensure that a regression will not be created by this SRU. In the event that this is not a regression remove the "verification-failed-bionic" tag from this bug report and add the tag "bot-stop-nagging" to bug 1852097 (not this bug). Thanks!

tags: added: verification-failed-bionic
Changed in thunderbird (Ubuntu Bionic):
importance: Undecided → High
Olivier Tilloy (osomon) wrote :

@GrzesiekC, can you check for apparmor denials when running thunderbird? I.e. have a terminal running "journalctl -f | grep DEN", and share the output here.

Do you have an apparmor profile being enforced for thunderbird? I.e. what is the output of:

    sudo apparmor_status | grep thunderbird

Olivier Tilloy (osomon) wrote :

I marked bug #1852097 invalid (see there for details). This is not a regression.

tags: removed: verification-failed-bionic
GrzesiekC (grzesiekc) wrote :
Download full text (29.6 KiB)

Hi Olivier,

First of all, thank you for your support.

I also forgot to mention that my current setup is an upgrade of 16.04.x. On the other hand, I've got a secondary laptop (working a semi server ATM) where I did a fresh 18.04.x a while ago. No issues with TB 68.2.1 there.

Nevertheless, here are diag commands:

$ apparmor_status | grep thunderbird
   thunderbird
   thunderbird//browser_java
   thunderbird//browser_openjdk
   thunderbird//gpg
   thunderbird//sanitized_helper
   thunderbird (12077)

$ journalctl -f | grep DEN
Nov 19 09:11:25 E7470 audit[22153]: AVC apparmor="DENIED" operation="open" profile="thunderbird" <email address hidden>/styles/buttons-left.css" pid=22153 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Nov 19 09:11:25 E7470 kernel: audit: type=1400 audit(1574115085.859:2241): apparmor="DENIED" operation="open" profile="thunderbird" <email address hidden>/styles/buttons-left.css" pid=22153 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/cmap/.uuid.TMP-ojQMUg" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/poppler/cMap/Adobe-CNS1/.uuid.TMP-x9EMyH" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/ancient-scripts/.uuid.TMP-6E8Sc8" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/droid/.uuid.TMP-ZDY0Qy" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/kacst/.uuid.TMP-0SzdvZ" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/lao/.uuid.TMP-L0lr9p" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/liberation2/.uuid.TMP-AWQGNQ" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/lohit-gujarati/.uuid.TMP-JBmYrh" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/lohit...

GrzesiekC (grzesiekc) wrote :

I've check the other laptop, no Apparmor profile there.

$ sudo apparmor_status | grep thunderbird
$

Strange, I cannot recall enabling it on my current laptop.

Olivier Tilloy (osomon) wrote :

@GrzesiekC: I couldn't find any trace of a thunderbird apparmor profile in official Ubuntu packages (apart from the ubuntu-email abstraction). So I'm not sure where this profile you have enabled on your machine comes from, but not from the archive, that's for sure. I'd suggest disabling it:

    sudo apparmor_parser -R thunderbird

and create a symlink to the overly strict profile in /etc/apparmor.d/disable.

Olivier Tilloy (osomon) wrote :

I tested the following packages (and their dependencies) from bionic-proposed:

  thunderbird 1:68.2.1+build1-0ubuntu0.18.04.1
  xul-ext-lightning 1:68.2.1+build1-0ubuntu0.18.04.1
  enigmail 2:2.1.2-0ubuntu1~18.04.2

Tested in virtual machines, amd64 and i386. I set up thunderbird with an existing gmail account and smoke tested various functionalities for a while (including enigmail, calendar, and linking large attachments with WeTransfer), and everything appeared to work as expected.

tags: added: verification-done-bionic
removed: verification-needed-bionic
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers