Debian Bug report logs -
#497491
icedove: Icedove inappropriately sets file-/MIME-type associations in .desktop database
Reported by: Joshua Judson Rosen <rozzin@geekspace.com>
Date: Tue, 2 Sep 2008 03:48:01 UTC
Severity: serious
Found in version icedove/2.0.0.16-1
Fixed in version icedove/2.0.0.17-1
Done: Michael Casadevall <sonicmctails@gmail.com>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded to debian-bugs-dist@lists.debian.org, Joshua Judson Rosen <rozzin@geekspace.com>, Alexander Sack <asac@debian.org>:
Bug#497491; Package icedove.
(full text, mbox, link).
Acknowledgement sent to Joshua Judson Rosen <rozzin@geekspace.com>:
New Bug report received and forwarded. Copy sent to Joshua Judson Rosen <rozzin@geekspace.com>, Alexander Sack <asac@debian.org>.
(full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: icedove
Version: 2.0.0.16-1
Severity: critical
Justification: breaks unrelated software
File: /usr/share/applications/icedove.desktop
Icedove lists several MIME-types in
/usr/share/applications/icedove.desktop, which ends up associating files
of those types (e.g.: HTML, GIF, JPEG, PNG) with Icedove when the
"update-desktop-database" command is run. This doesn't seem appropriate,
since icedove is not actually able to open these files: when I
double-click on a JPEG file in Nautilus, for example, Icedove launches
and shows me my e-mail and *not* the image that I selected.
It also looks like icedove specifying MIME-handlers is accidental,
rather than being intentional, because icedove's installation-scripts
do not run "update-desktop-database"--this means that installing icedove
will not immediately update the file-associations, but they'll instead
change when another (unrelated) package-installation/-upgrade does run
"update-desktop-database".
If I remove the `MimeType=' declaration from
/usr/share/applications/icedove.desktop and run
"update-desktop-database", my desktop operates sanely again.
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.24-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages icedove depends on:
ii debianutils 2.30 Miscellaneous utilities specific t
ii fontconfig 2.6.0-1 generic font configuration library
ii libatk1.0-0 1.22.0-1 The ATK accessibility toolkit
ii libc6 2.7-13 GNU C Library: Shared libraries
ii libcairo2 1.6.4-6 The Cairo 2D vector graphics libra
ii libfontconfig1 2.6.0-1 generic font configuration library
ii libfreetype6 2.3.7-2 FreeType 2 font engine, shared lib
ii libgcc1 1:4.3.1-9 GCC support library
ii libglib2.0-0 2.16.4-2 The GLib library of C routines
ii libgtk2.0-0 2.12.11-3 The GTK+ graphical user interface
ii libhunspell-1.2-0 1.2.6-1 spell checker and morphological an
ii libjpeg62 6b-14 The Independent JPEG Group's JPEG
ii libnspr4-0d 4.7.1-3 NetScape Portable Runtime Library
ii libnss3-1d 3.12.0-5 Network Security Service libraries
ii libpango1.0-0 1.20.5-1 Layout and rendering of internatio
ii libpng12-0 1.2.27-1 PNG library - runtime
ii libstdc++6 4.3.1-9 The GNU Standard C++ Library v3
ii libx11-6 2:1.1.4-2 X11 client-side library
ii libxft2 2.1.12-3 FreeType-based font drawing librar
ii libxinerama1 2:1.0.3-2 X11 Xinerama extension library
ii libxrender1 1:0.9.4-2 X Rendering Extension client libra
ii libxt6 1:1.0.5-3 X11 toolkit intrinsics library
ii psmisc 22.6-1 Utilities that use the proc filesy
ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime
icedove recommends no packages.
Versions of packages icedove suggests:
pn icedove-gnome-support <none> (no description available)
pn latex-xft-fonts <none> (no description available)
ii libthai0 0.1.9-4 Thai language support library
-- debconf information:
* icedove/browser: GNOME
Information forwarded to debian-bugs-dist@lists.debian.org, Alexander Sack <asac@debian.org>:
Bug#497491; Package icedove.
(full text, mbox, link).
Acknowledgement sent to Marc 'HE' Brockschmidt <he@debian.org>:
Extra info received and forwarded to list. Copy sent to Alexander Sack <asac@debian.org>.
(full text, mbox, link).
Message #10 received at 497491@bugs.debian.org (full text, mbox, reply):
# Automatically generated email from bts, devscripts version 2.10.28
#please remove image/g
severity 497491 grave
Severity set to `important' from `critical'
Request was from Marc 'HE' Brockschmidt <he@debian.org>
to control@bugs.debian.org.
(Tue, 09 Sep 2008 21:03:11 GMT) (full text, mbox, link).
Severity set to `grave' from `important'
Request was from Marc 'HE' Brockschmidt <he@debian.org>
to control@bugs.debian.org.
(Tue, 09 Sep 2008 21:03:13 GMT) (full text, mbox, link).
Information forwarded to debian-bugs-dist@lists.debian.org, Alexander Sack <asac@debian.org>:
Bug#497491; Package icedove.
(full text, mbox, link).
Acknowledgement sent to Alexander Sack <asac@jwsdot.com>:
Extra info received and forwarded to list. Copy sent to Alexander Sack <asac@debian.org>.
(full text, mbox, link).
Message #19 received at 497491@bugs.debian.org (full text, mbox, reply):
severity normal
thanks
On Tue, Sep 09, 2008 at 10:22:21PM +0200, Marc 'HE' Brockschmidt wrote:
> # Automatically generated email from bts, devscripts version 2.10.28
> #please remove image/g
> severity 497491 grave
>
how can this be grave?
- Alexander
Severity set to `serious' from `grave'
Request was from Marc 'HE' Brockschmidt <marc@marcbrockschmidt.de>
to control@bugs.debian.org.
(Thu, 11 Sep 2008 17:45:09 GMT) (full text, mbox, link).
Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#497491; Package icedove.
(full text, mbox, link).
Acknowledgement sent to Alexander Sack <asac@debian.org>:
Extra info received and forwarded to list.
(full text, mbox, link).
Message #26 received at 497491@bugs.debian.org (full text, mbox, reply):
tag 497491 + pending
thanks
fixed in rev 88 on packaging branch:
https://code.edge.launchpad.net/~mozillateam/thunderbird/icedove-2.0.0.x/
On Thu, Sep 11, 2008 at 07:33:21PM +0200, Marc 'HE' Brockschmidt wrote:
> severity 497491 serious
> thanks
>
> Alexander Sack <asac@jwsdot.com> writes:
> > On Tue, Sep 09, 2008 at 10:22:21PM +0200, Marc 'HE' Brockschmidt wrote:
> >> # Automatically generated email from bts, devscripts version 2.10.28
> >> #please remove image/g
> >> severity 497491 grave
> > how can this be grave?
>
> It breaks the mime/application links when installing. Losing "just click
> in nautilus and get my photo displayed" after installing icedove is
> <RM hat>a release critical bug</RM hat>
>
> Marc
- Alexander
Tags added: pending
Request was from Alexander Sack <asac@debian.org>
to control@bugs.debian.org.
(Mon, 15 Sep 2008 19:00:21 GMT) (full text, mbox, link).
Reply sent
to Michael Casadevall <sonicmctails@gmail.com>:
You have taken responsibility.
(Sat, 18 Oct 2008 15:30:03 GMT) (full text, mbox, link).
Notification sent
to Joshua Judson Rosen <rozzin@geekspace.com>:
Bug acknowledged by developer.
(Sat, 18 Oct 2008 15:30:03 GMT) (full text, mbox, link).
Message #33 received at 497491-close@bugs.debian.org (full text, mbox, reply):
Source: icedove
Source-Version: 2.0.0.17-1
We believe that the bug you reported is fixed in the latest version of
icedove, which is due to be installed in the Debian FTP archive:
icedove-dbg_2.0.0.17-1_amd64.deb
to pool/main/i/icedove/icedove-dbg_2.0.0.17-1_amd64.deb
icedove-dev_2.0.0.17-1_amd64.deb
to pool/main/i/icedove/icedove-dev_2.0.0.17-1_amd64.deb
icedove-gnome-support_2.0.0.17-1_amd64.deb
to pool/main/i/icedove/icedove-gnome-support_2.0.0.17-1_amd64.deb
icedove_2.0.0.17-1.diff.gz
to pool/main/i/icedove/icedove_2.0.0.17-1.diff.gz
icedove_2.0.0.17-1.dsc
to pool/main/i/icedove/icedove_2.0.0.17-1.dsc
icedove_2.0.0.17-1_amd64.deb
to pool/main/i/icedove/icedove_2.0.0.17-1_amd64.deb
icedove_2.0.0.17.orig.tar.gz
to pool/main/i/icedove/icedove_2.0.0.17.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 497491@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Casadevall <sonicmctails@gmail.com> (supplier of updated icedove package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 18 Oct 2008 09:07:20 -0400
Source: icedove
Binary: icedove icedove-gnome-support icedove-dbg icedove-dev
Architecture: source amd64
Version: 2.0.0.17-1
Distribution: unstable
Urgency: low
Maintainer: Alexander Sack <asac@debian.org>
Changed-By: Michael Casadevall <sonicmctails@gmail.com>
Description:
icedove - free/unbranded thunderbird mail/news/rss clone
icedove-dbg - Debug Symbols for Icedove
icedove-dev - Development files for Icedove
icedove-gnome-support - Support for Gnome in Icedove
Closes: 497491 500721
Changes:
icedove (2.0.0.17-1) unstable; urgency=low
.
* New upstream security/stability update (v.2.0.0.17), Closes: #500721
* MFSA 2008-37 aka CVE-2008-0016 - UTF-8 URL stack buffer overflow
* MFSA 2008-38 aka CVE-2008-3835 - nsXMLDocument::OnChannelRedirect()
same-origin violation
* MFSA 2008-41 aka CVE-2008-4058, CVE-2008-4059, CVE-2008-4060 - Privilege
escalation via XPCnativeWrapper pollution
* MFSA 2008-42 aka CVE-2008-4061, CVE-2008-4062, CVE-2008-4063,
CVE-2008-4064 - Crashes with evidence of memory corruption
(rv:1.9.0.2/1.8.1.17)
* MFSA 2008-43 aka CVE-2008-4065, CVE-2008-4066 - BOM characters, low
surrogates stripped from JavaScript before execution
* MFSA 2008-44 aka CVE-2008-4067, CVE-2008-4068 - resource: traversal
vulnerabilities
* MFSA 2008-46 aka CVE-2008-4070 - Heap overflow when canceling newsgroup
message
.
[ Michael Casadevall <sonicmctails@gmail.com> ]
* debian/control:
- Changed maintainer to Ubuntu Mozillateam
- Added Uploaders to the team
- Set DM-Upload-Allowed
- Bumped standards version to 3.8.0
.
[ Alexander Sack <asac@debian.org> ]
* Closes: #497491 - Icedove inappropriately sets file-/MIME-type
associations in .desktop database; we drop the Mime-Type= entry
from debian/icedove.desktop
- update debian/icedove.desktop
Checksums-Sha1:
08935598f5148b6dc09c113e59f5478a5cd1b4a9 1556 icedove_2.0.0.17-1.dsc
cde67225d4dca3a7fd4a2ed7a5620fb03aff058b 37390541 icedove_2.0.0.17.orig.tar.gz
cc9ab0140fe8994b670fa34074f66e9434cec7c5 118736 icedove_2.0.0.17-1.diff.gz
87e4173fc160b6d7e8f73364d56facd075825bf7 12355886 icedove_2.0.0.17-1_amd64.deb
2a87ee761f7c4110837b049d3ceb7a0425a542f0 57666 icedove-gnome-support_2.0.0.17-1_amd64.deb
1d58ce7139cbaeb0fd7e290df86421edc919a50c 57516260 icedove-dbg_2.0.0.17-1_amd64.deb
1ba8c56263cf8ee50fdbd12e0fa0e61b308b9a60 3939452 icedove-dev_2.0.0.17-1_amd64.deb
Checksums-Sha256:
10deb186a1b1be41105c40e778a2e35708f661879b872cde8ba95bc8343f9345 1556 icedove_2.0.0.17-1.dsc
5ff22666a4bee91d1a76be964c50497b38099dfc429891a92e892e459ae079ba 37390541 icedove_2.0.0.17.orig.tar.gz
90341312d06b109ff18316f1e587579bced9a62225eb0b637849afcab1e380b1 118736 icedove_2.0.0.17-1.diff.gz
24c60a68fecacd971a1b8995747c39f51a0d0912899d49c30468aacb1629f2c1 12355886 icedove_2.0.0.17-1_amd64.deb
0faefed029520fdb8b1509e7d25e6621fcb84be756487b01e680f4e1304cb53a 57666 icedove-gnome-support_2.0.0.17-1_amd64.deb
94213aa84d0bb3ad37e2381be24bc9f92c687805809979267f764e7dce2793d2 57516260 icedove-dbg_2.0.0.17-1_amd64.deb
7ed2ac659ff1bab5e9f2795b2b46562dfba61493e5e8911e45ff1f88cfc769f1 3939452 icedove-dev_2.0.0.17-1_amd64.deb
Files:
6dff111dff6599fe2fa59d3e10576b8b 1556 mail optional icedove_2.0.0.17-1.dsc
976fd729b90e68ac638f4f19c2311177 37390541 mail optional icedove_2.0.0.17.orig.tar.gz
1314088185dab91083d3356dc16db13f 118736 mail optional icedove_2.0.0.17-1.diff.gz
4057e17dbc1d390f7c8d89013942da55 12355886 mail optional icedove_2.0.0.17-1_amd64.deb
414f25323c019e4b82adce227ca47fad 57666 mail optional icedove-gnome-support_2.0.0.17-1_amd64.deb
7df4d6803472f295213393adbe640731 57516260 mail optional icedove-dbg_2.0.0.17-1_amd64.deb
e8381a747bc8995a453750d5b8c19947 3939452 mail optional icedove-dev_2.0.0.17-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkj59z0ACgkQriZpaaIa1PkfpgCaAhydJ1xgLuHyWhuWhgkP9YjX
zxEAoIq1pn8Gx91Rfj9WseLJWwyIWC6v
=GWDb
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Sun, 30 Nov 2008 08:39:59 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Thu Jan 11 06:36:18 2018;
Machine Name:
beach
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.