Ubuntu
thunderbird package

  1. Bug #810939
  2. Comment #7

Comment 7 for bug 810939

Revision history for this message
Chelmite (steve-kelem) wrote :

This bug, one of file permissions is NOT a duplicate of 472865, "WARNING: at /build/buildd/linux-2.6.31/kernel/power/suspend_test.c:52 suspend_test_finish+0x80/0x90()" .

In Thunderbird 17.0.2, even with a umask of 022, TB creates directories with permissions 0775 instead of 0755 and files with 0664 instead of 0644. This leaves directories and files open to tampering by anyone in the same group, and so is a security vulnerability!