Debian Bug report logs - #497491
icedove: Icedove inappropriately sets file-/MIME-type associations in .desktop database

version graph

Package: icedove; Maintainer for icedove is Carsten Schoenert <c.schoenert@t-online.de>; Source for icedove is src:thunderbird (PTS, buildd, popcon).

Reported by: Joshua Judson Rosen <rozzin@geekspace.com>

Date: Tue, 2 Sep 2008 03:48:01 UTC

Severity: serious

Found in version icedove/2.0.0.16-1

Fixed in version icedove/2.0.0.17-1

Done: Michael Casadevall <sonicmctails@gmail.com>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Joshua Judson Rosen <rozzin@geekspace.com>, Alexander Sack <asac@debian.org>:
Bug#497491; Package icedove. (full text, mbox, link).


Acknowledgement sent to Joshua Judson Rosen <rozzin@geekspace.com>:
New Bug report received and forwarded. Copy sent to Joshua Judson Rosen <rozzin@geekspace.com>, Alexander Sack <asac@debian.org>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Joshua Judson Rosen <rozzin@geekspace.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: icedove: Icedove inappropriately sets file-/MIME-type associations in .desktop database
Date: Mon, 01 Sep 2008 23:47:09 -0400
Package: icedove
Version: 2.0.0.16-1
Severity: critical
Justification: breaks unrelated software
File: /usr/share/applications/icedove.desktop

Icedove lists several MIME-types in 
/usr/share/applications/icedove.desktop, which ends up associating files 
of those types (e.g.: HTML, GIF, JPEG, PNG) with Icedove when the 
"update-desktop-database" command is run. This doesn't seem appropriate, 
since icedove is not actually able to open these files: when I 
double-click on a JPEG file in Nautilus, for example, Icedove launches 
and shows me my e-mail and *not* the image that I selected.

It also looks like icedove specifying MIME-handlers is accidental, 
rather than being intentional, because icedove's installation-scripts 
do not run "update-desktop-database"--this means that installing icedove 
will not immediately update the file-associations, but they'll instead 
change when another (unrelated) package-installation/-upgrade does run 
"update-desktop-database".

If I remove the `MimeType=' declaration from
/usr/share/applications/icedove.desktop and run
"update-desktop-database", my desktop operates sanely again.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.24-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages icedove depends on:
ii  debianutils            2.30              Miscellaneous utilities specific t
ii  fontconfig             2.6.0-1           generic font configuration library
ii  libatk1.0-0            1.22.0-1          The ATK accessibility toolkit
ii  libc6                  2.7-13            GNU C Library: Shared libraries
ii  libcairo2              1.6.4-6           The Cairo 2D vector graphics libra
ii  libfontconfig1         2.6.0-1           generic font configuration library
ii  libfreetype6           2.3.7-2           FreeType 2 font engine, shared lib
ii  libgcc1                1:4.3.1-9         GCC support library
ii  libglib2.0-0           2.16.4-2          The GLib library of C routines
ii  libgtk2.0-0            2.12.11-3         The GTK+ graphical user interface 
ii  libhunspell-1.2-0      1.2.6-1           spell checker and morphological an
ii  libjpeg62              6b-14             The Independent JPEG Group's JPEG 
ii  libnspr4-0d            4.7.1-3           NetScape Portable Runtime Library
ii  libnss3-1d             3.12.0-5          Network Security Service libraries
ii  libpango1.0-0          1.20.5-1          Layout and rendering of internatio
ii  libpng12-0             1.2.27-1          PNG library - runtime
ii  libstdc++6             4.3.1-9           The GNU Standard C++ Library v3
ii  libx11-6               2:1.1.4-2         X11 client-side library
ii  libxft2                2.1.12-3          FreeType-based font drawing librar
ii  libxinerama1           2:1.0.3-2         X11 Xinerama extension library
ii  libxrender1            1:0.9.4-2         X Rendering Extension client libra
ii  libxt6                 1:1.0.5-3         X11 toolkit intrinsics library
ii  psmisc                 22.6-1            Utilities that use the proc filesy
ii  zlib1g                 1:1.2.3.3.dfsg-12 compression library - runtime

icedove recommends no packages.

Versions of packages icedove suggests:
pn  icedove-gnome-support         <none>     (no description available)
pn  latex-xft-fonts               <none>     (no description available)
ii  libthai0                      0.1.9-4    Thai language support library

-- debconf information:
* icedove/browser: GNOME




Information forwarded to debian-bugs-dist@lists.debian.org, Alexander Sack <asac@debian.org>:
Bug#497491; Package icedove. (full text, mbox, link).


Acknowledgement sent to Marc 'HE' Brockschmidt <he@debian.org>:
Extra info received and forwarded to list. Copy sent to Alexander Sack <asac@debian.org>. (full text, mbox, link).


Message #10 received at 497491@bugs.debian.org (full text, mbox, reply):

From: Marc 'HE' Brockschmidt <he@debian.org>
To: control@bugs.debian.org
Cc: 497491@bugs.debian.org
Subject: severity of 497491 is grave
Date: Tue, 09 Sep 2008 22:22:21 +0200
# Automatically generated email from bts, devscripts version 2.10.28
#please remove image/g
severity 497491 grave





Severity set to `important' from `critical' Request was from Marc 'HE' Brockschmidt <he@debian.org> to control@bugs.debian.org. (Tue, 09 Sep 2008 21:03:11 GMT) (full text, mbox, link).


Severity set to `grave' from `important' Request was from Marc 'HE' Brockschmidt <he@debian.org> to control@bugs.debian.org. (Tue, 09 Sep 2008 21:03:13 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Alexander Sack <asac@debian.org>:
Bug#497491; Package icedove. (full text, mbox, link).


Acknowledgement sent to Alexander Sack <asac@jwsdot.com>:
Extra info received and forwarded to list. Copy sent to Alexander Sack <asac@debian.org>. (full text, mbox, link).


Message #19 received at 497491@bugs.debian.org (full text, mbox, reply):

From: Alexander Sack <asac@jwsdot.com>
To: Marc 'HE' Brockschmidt <he@debian.org>, 497491@bugs.debian.org
Cc: control@bugs.debian.org
Subject: Re: Bug#497491: severity of 497491 is grave
Date: Thu, 11 Sep 2008 12:04:16 +0200
severity normal
thanks

On Tue, Sep 09, 2008 at 10:22:21PM +0200, Marc 'HE' Brockschmidt wrote:
> # Automatically generated email from bts, devscripts version 2.10.28
> #please remove image/g
> severity 497491 grave
> 

how can this be grave?


 - Alexander





Severity set to `serious' from `grave' Request was from Marc 'HE' Brockschmidt <marc@marcbrockschmidt.de> to control@bugs.debian.org. (Thu, 11 Sep 2008 17:45:09 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#497491; Package icedove. (full text, mbox, link).


Acknowledgement sent to Alexander Sack <asac@debian.org>:
Extra info received and forwarded to list. (full text, mbox, link).


Message #26 received at 497491@bugs.debian.org (full text, mbox, reply):

From: Alexander Sack <asac@debian.org>
To: Marc 'HE' Brockschmidt <marc@marcbrockschmidt.de>
Cc: 497491@bugs.debian.org, control@bugs.debian.org
Subject: Re: Bug#497491: severity of 497491 is grave
Date: Mon, 15 Sep 2008 18:11:28 +0200
tag 497491 + pending
thanks

fixed in rev 88 on packaging branch:
  https://code.edge.launchpad.net/~mozillateam/thunderbird/icedove-2.0.0.x/


On Thu, Sep 11, 2008 at 07:33:21PM +0200, Marc 'HE' Brockschmidt wrote:
> severity 497491 serious
> thanks
> 
> Alexander Sack <asac@jwsdot.com> writes:
> > On Tue, Sep 09, 2008 at 10:22:21PM +0200, Marc 'HE' Brockschmidt wrote:
> >> # Automatically generated email from bts, devscripts version 2.10.28
> >> #please remove image/g
> >> severity 497491 grave
> > how can this be grave?
> 
> It breaks the mime/application links when installing. Losing "just click
> in nautilus and get my photo displayed" after installing icedove is 
> <RM hat>a release critical bug</RM hat>
> 
> Marc



 - Alexander





Tags added: pending Request was from Alexander Sack <asac@debian.org> to control@bugs.debian.org. (Mon, 15 Sep 2008 19:00:21 GMT) (full text, mbox, link).


Reply sent to Michael Casadevall <sonicmctails@gmail.com>:
You have taken responsibility. (Sat, 18 Oct 2008 15:30:03 GMT) (full text, mbox, link).


Notification sent to Joshua Judson Rosen <rozzin@geekspace.com>:
Bug acknowledged by developer. (Sat, 18 Oct 2008 15:30:03 GMT) (full text, mbox, link).


Message #33 received at 497491-close@bugs.debian.org (full text, mbox, reply):

From: Michael Casadevall <sonicmctails@gmail.com>
To: 497491-close@bugs.debian.org
Subject: Bug#497491: fixed in icedove 2.0.0.17-1
Date: Sat, 18 Oct 2008 15:17:10 +0000
Source: icedove
Source-Version: 2.0.0.17-1

We believe that the bug you reported is fixed in the latest version of
icedove, which is due to be installed in the Debian FTP archive:

icedove-dbg_2.0.0.17-1_amd64.deb
  to pool/main/i/icedove/icedove-dbg_2.0.0.17-1_amd64.deb
icedove-dev_2.0.0.17-1_amd64.deb
  to pool/main/i/icedove/icedove-dev_2.0.0.17-1_amd64.deb
icedove-gnome-support_2.0.0.17-1_amd64.deb
  to pool/main/i/icedove/icedove-gnome-support_2.0.0.17-1_amd64.deb
icedove_2.0.0.17-1.diff.gz
  to pool/main/i/icedove/icedove_2.0.0.17-1.diff.gz
icedove_2.0.0.17-1.dsc
  to pool/main/i/icedove/icedove_2.0.0.17-1.dsc
icedove_2.0.0.17-1_amd64.deb
  to pool/main/i/icedove/icedove_2.0.0.17-1_amd64.deb
icedove_2.0.0.17.orig.tar.gz
  to pool/main/i/icedove/icedove_2.0.0.17.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 497491@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Casadevall <sonicmctails@gmail.com> (supplier of updated icedove package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 18 Oct 2008 09:07:20 -0400
Source: icedove
Binary: icedove icedove-gnome-support icedove-dbg icedove-dev
Architecture: source amd64
Version: 2.0.0.17-1
Distribution: unstable
Urgency: low
Maintainer: Alexander Sack <asac@debian.org>
Changed-By: Michael Casadevall <sonicmctails@gmail.com>
Description: 
 icedove    - free/unbranded thunderbird mail/news/rss clone
 icedove-dbg - Debug Symbols for Icedove
 icedove-dev - Development files for Icedove
 icedove-gnome-support - Support for Gnome in Icedove
Closes: 497491 500721
Changes: 
 icedove (2.0.0.17-1) unstable; urgency=low
 .
   * New upstream security/stability update (v.2.0.0.17), Closes: #500721
     * MFSA 2008-37 aka CVE-2008-0016 - UTF-8 URL stack buffer overflow
     * MFSA 2008-38 aka CVE-2008-3835 - nsXMLDocument::OnChannelRedirect()
       same-origin violation
     * MFSA 2008-41 aka CVE-2008-4058, CVE-2008-4059, CVE-2008-4060 - Privilege
       escalation via XPCnativeWrapper pollution
     * MFSA 2008-42 aka CVE-2008-4061, CVE-2008-4062, CVE-2008-4063,
       CVE-2008-4064 - Crashes with evidence of memory corruption
       (rv:1.9.0.2/1.8.1.17)
     * MFSA 2008-43 aka CVE-2008-4065, CVE-2008-4066 - BOM characters, low
       surrogates stripped from JavaScript before execution
     * MFSA 2008-44 aka CVE-2008-4067, CVE-2008-4068 - resource: traversal
       vulnerabilities
     * MFSA 2008-46 aka CVE-2008-4070 -  Heap overflow when canceling newsgroup
       message
 .
   [ Michael Casadevall <sonicmctails@gmail.com> ]
   * debian/control:
     - Changed maintainer to Ubuntu Mozillateam
     - Added Uploaders to the team
     - Set DM-Upload-Allowed
     - Bumped standards version to 3.8.0
 .
   [ Alexander Sack <asac@debian.org> ]
   * Closes: #497491 - Icedove inappropriately sets file-/MIME-type
     associations in .desktop database; we drop the Mime-Type= entry
     from debian/icedove.desktop
     - update debian/icedove.desktop
Checksums-Sha1: 
 08935598f5148b6dc09c113e59f5478a5cd1b4a9 1556 icedove_2.0.0.17-1.dsc
 cde67225d4dca3a7fd4a2ed7a5620fb03aff058b 37390541 icedove_2.0.0.17.orig.tar.gz
 cc9ab0140fe8994b670fa34074f66e9434cec7c5 118736 icedove_2.0.0.17-1.diff.gz
 87e4173fc160b6d7e8f73364d56facd075825bf7 12355886 icedove_2.0.0.17-1_amd64.deb
 2a87ee761f7c4110837b049d3ceb7a0425a542f0 57666 icedove-gnome-support_2.0.0.17-1_amd64.deb
 1d58ce7139cbaeb0fd7e290df86421edc919a50c 57516260 icedove-dbg_2.0.0.17-1_amd64.deb
 1ba8c56263cf8ee50fdbd12e0fa0e61b308b9a60 3939452 icedove-dev_2.0.0.17-1_amd64.deb
Checksums-Sha256: 
 10deb186a1b1be41105c40e778a2e35708f661879b872cde8ba95bc8343f9345 1556 icedove_2.0.0.17-1.dsc
 5ff22666a4bee91d1a76be964c50497b38099dfc429891a92e892e459ae079ba 37390541 icedove_2.0.0.17.orig.tar.gz
 90341312d06b109ff18316f1e587579bced9a62225eb0b637849afcab1e380b1 118736 icedove_2.0.0.17-1.diff.gz
 24c60a68fecacd971a1b8995747c39f51a0d0912899d49c30468aacb1629f2c1 12355886 icedove_2.0.0.17-1_amd64.deb
 0faefed029520fdb8b1509e7d25e6621fcb84be756487b01e680f4e1304cb53a 57666 icedove-gnome-support_2.0.0.17-1_amd64.deb
 94213aa84d0bb3ad37e2381be24bc9f92c687805809979267f764e7dce2793d2 57516260 icedove-dbg_2.0.0.17-1_amd64.deb
 7ed2ac659ff1bab5e9f2795b2b46562dfba61493e5e8911e45ff1f88cfc769f1 3939452 icedove-dev_2.0.0.17-1_amd64.deb
Files: 
 6dff111dff6599fe2fa59d3e10576b8b 1556 mail optional icedove_2.0.0.17-1.dsc
 976fd729b90e68ac638f4f19c2311177 37390541 mail optional icedove_2.0.0.17.orig.tar.gz
 1314088185dab91083d3356dc16db13f 118736 mail optional icedove_2.0.0.17-1.diff.gz
 4057e17dbc1d390f7c8d89013942da55 12355886 mail optional icedove_2.0.0.17-1_amd64.deb
 414f25323c019e4b82adce227ca47fad 57666 mail optional icedove-gnome-support_2.0.0.17-1_amd64.deb
 7df4d6803472f295213393adbe640731 57516260 mail optional icedove-dbg_2.0.0.17-1_amd64.deb
 e8381a747bc8995a453750d5b8c19947 3939452 mail optional icedove-dev_2.0.0.17-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkj59z0ACgkQriZpaaIa1PkfpgCaAhydJ1xgLuHyWhuWhgkP9YjX
zxEAoIq1pn8Gx91Rfj9WseLJWwyIWC6v
=GWDb
-----END PGP SIGNATURE-----





Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 30 Nov 2008 08:39:59 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Jan 11 06:36:18 2018; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.