[Pkg-mozext-maintainers] Bug#869774: Enigmail update broke ppc support

[Stiepan Aurélien Kovac]

P.S.:

Quite weirdly, I was prompted for pinentry when looking at this message
I had just sent in the Sent folder, despite the fact that it was not
encrypted. Other than that, the self-compiled version of Enigmail works
wonders. If it has no security implications, I suggest that for powerpc,
we fall back to that version (I am referring to
https://www.enigmail.net/download/source/enigmail-1.9.7.tar.gz, for the
record). Since DSA https://www.debian.org/security/2017/dsa-3921 is
about "restoring compatibility" I think that it misses its goal and
hence, it's not wanted on PPC. If there are other (security)
implications, what are they?

Stiepan


On 08/10/17 19:40, Stiepan Aurélien Kovac wrote:
> Hi Daniel,
>
> Thank you for your reply.
>
> I have checked my Thunderbird version and I have the latest available
> one on my platform:
>
> "apt-cache policy thunderbird
> thunderbird:
>   Installed: 1:45.8.0-3~deb8u1
>   Candidate: 1:45.8.0-3~deb8u1"
>
> (also according to https://tracker.debian.org/pkg/icedove)
>
> I have checked bug
>
> https://bugs.debian.org/870073
>
> but I do not think that we have the same issue:
>
> I didn't have to restart gpg-agent when installing the version I have
> compiled of enigmail...
>
> (and I don't use gnome, nor its keyring, at least not that I am, nor ps
> aux | grep's aware of)
>
> So I still think that this bug should be reopened for the specific
> architecture that I am using.
>
> (in clear, that Bug #869774 should be reopened for PPC)
>
> Regards,
>
> Stiepan
>
>
> On 08/10/17 15:12, Daniel Kahn Gillmor wrote:
>> Hi there Stiepan--
>>
>> On Wed 2017-08-09 01:21:38 +0200, Stiepan Aurélien Kovac wrote:
>>> seems to have broken enigmail support, at least on the ppc (powerpc64) arch.
>> I don't think this is a ppc-specific issue -- nothing in the current
>> version of enigmail is debian-specific.  I also think your issue has
>> more to do with enigmail and thunderbird on jessie itself.  Your
>> situation i think has more to do with https://bugs.debian.org/870073
>> than with https://bugs.debian.org/869774.
>>
>>> "enigmail is incompatible with thunderbird 45.8.0" (shows up in add-ons 
>>> manager)
>> This makes it look like you haven't upgraded thunderbird on your jessie
>> installation.  the version of thunderbird available from
>> security.debian.org is 1:52.2.1-4~deb8u1. (see:
>> https://packages.debian.org/source/oldstable/icedove)
>>
>>
>> If you are running jessie, please:
>>
>>  * upgrade to the supported version of thunderbird that has security
>>    fixes
>>
>>  * ensure that you have "use-agent" in your ~/.gnupg/gpg.conf
>>
>>  * ensure that gnome-keyring is not presenting a gpg-agent interface
>>    (see https://bugs.debian.org/870073 for more discussion about
>>    thunderbird and enigmail on debian jessie)
>>
>> Regards,
>>
>>         --dkg


-- 
Stiepan A. Kovac
M Sc ICT Security
IT+Tech. Tel. Eng.