[pkg-apparmor] thunderbird: apparmor profile prevents launching thunderbird with gdk-pixbuf >= 2.44.5

[Jeremy Bícha]

Control: severity -1 important

On Sat, Feb 14, 2026 at 2:26 PM Debian Tester <frchuck278 at yahoo.com> wrote:
> FYI, after setting thunderbird back to enforce mode and causing Thunderbird to fail to launch,
> here are the related apparmor messages related to thunderbird (note there is no mention of
> glycin in these messages but there are mentions of bwrap):

I figured out why Frederic & I could not reproduce this from a clean
Debian Testing install. Thunderbird includes an apparmor profile but
it has been disabled by default for many years. See this file:

/usr/share/doc/thunderbird/README.apparmor
https://salsa.debian.org/mozilla-team/thunderbird/-/blob/debian/sid/debian/README.apparmor

It appears like you previously enabled the Thunderbird apparmor
profile. Therefore, although this is clearly a regression, I don't
consider it to be RC since this is a non-default configuration.

Assistance is requested in fixing Thunderbird's apparmor profile.
Recent versions of Ubuntu only provide Thunderbird as a Snap, so this
issue doesn't currently affect Ubuntu.

Thank you,
Jeremy Bícha