Please upgrade it to 68.x on Ubuntu 18.04 LTS

Thanks for the report, that update is currently being worked on

Thank you for the status update! :)

Firefox ESR also needs to be upgraded to Version 68.

Note that the firefox snap is already available in version 68.2.0 in the esr/stable channel.

Snaps waste too damned much space and take forever to launch.

We always prefer a repository package over Snap.
Snap takes more storage space and forces us to run an application with deprecated and security breaking libraries just because a developer doesn't want to test his application with the newest dependencies.

Would be great to get the latest Thunderbird 68 (68.2.1) made available as it resolves the following bug that prevents OAuth authentication for Google accounts from working with correct credentials:

https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1850651

@Martin, please keep statement like 'just because a developer doesn't want to' outside of the bug tracker, launchpad is a work place not an user forum.

The statement is also not respectul of the people working on those snaps, thunderbird is still available as a deb, is going to be updated and you are free to keep using the deb.

And to reply to your point, debs are more likely to get a deprecated version of a library in use than snaps since they have no real choice than to follow what the distribution provides. Typically Bionic wouldn't get a new gtk serie but snaps could easily bundle the current gtk stable version or use the corresponding platform.

Okay, I will stop and just answer your message.
And it is just my opinion about the disadvantages of snaps.

And I don't address developers who maintain everything.
But I address the developers who think they can throw a snap into the snap store and doesn't put in updated dependencies. These developers exist.

And deprecated? Since a LTS distribution must ship updated versions with bug and security fixes?
I don't speak about the shiny new and maybe buggy major version updates, I speak about the bug and security fixing patches.
You install a deb and used third party libraries standard shipped in the distribution get maintained by the distribution maintainer. And the developer is forced to update his application to remain compatibility.
You install a snap and you can hope that the snap guy puts effort in updating third party in his snap.

And again, I don't address every developer.

Hello Martin, or anyone else affected,

Accepted thunderbird into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/thunderbird/1:68.2.1+build1-0ubuntu0.18.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

The proposed package is unusable, the GUI is broken:
lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.3 LTS
Release: 18.04
Codename: bionic

Here is an output when run from terminal
<truncated>
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[7719, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-KZo8Q1/thunderbird-68.2.1+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
<truncated>

Bug #1852097 Google Calendar provider is missing in Thunderbird 68.2.1 in bionic-proposed

As a part of the Stable Release Updates quality process a search for Launchpad bug reports using the version of thunderbird from bionic-proposed was performed and bug 1852097 was found. Please investigate this bug report to ensure that a regression will not be created by this SRU. In the event that this is not a regression remove the "verification-failed-bionic" tag from this bug report and add the tag "bot-stop-nagging" to bug 1852097 (not this bug). Thanks!

@GrzesiekC, can you check for apparmor denials when running thunderbird? I.e. have a terminal running "journalctl -f | grep DEN", and share the output here.

Do you have an apparmor profile being enforced for thunderbird? I.e. what is the output of:

    sudo apparmor_status | grep thunderbird

I marked bug #1852097 invalid (see there for details). This is not a regression.

Hi Olivier,

First of all, thank you for your support.

I also forgot to mention that my current setup is an upgrade of 16.04.x. On the other hand, I've got a secondary laptop (working a semi server ATM) where I did a fresh 18.04.x a while ago. No issues with TB 68.2.1 there.

Nevertheless, here are diag commands:

$ apparmor_status | grep thunderbird
   thunderbird
   thunderbird//browser_java
   thunderbird//browser_openjdk
   thunderbird//gpg
   thunderbird//sanitized_helper
   thunderbird (12077)

$ journalctl -f | grep DEN
Nov 19 09:11:25 E7470 audit[22153]: AVC apparmor="DENIED" operation="open" profile="thunderbird" <email address hidden>/styles/buttons-left.css" pid=22153 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Nov 19 09:11:25 E7470 kernel: audit: type=1400 audit(1574115085.859:2241): apparmor="DENIED" operation="open" profile="thunderbird" <email address hidden>/styles/buttons-left.css" pid=22153 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/cmap/.uuid.TMP-ojQMUg" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/poppler/cMap/Adobe-CNS1/.uuid.TMP-x9EMyH" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/ancient-scripts/.uuid.TMP-6E8Sc8" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/droid/.uuid.TMP-ZDY0Qy" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/kacst/.uuid.TMP-0SzdvZ" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/lao/.uuid.TMP-L0lr9p" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/liberation2/.uuid.TMP-AWQGNQ" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/lohit-gujarati/.uuid.TMP-JBmYrh" pid=22153 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Nov 19 09:11:26 E7470 audit[22153]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/usr/share/fonts/truetype/lohit...

I've check the other laptop, no Apparmor profile there.

$ sudo apparmor_status | grep thunderbird
$

Strange, I cannot recall enabling it on my current laptop.

@GrzesiekC: I couldn't find any trace of a thunderbird apparmor profile in official Ubuntu packages (apart from the ubuntu-email abstraction). So I'm not sure where this profile you have enabled on your machine comes from, but not from the archive, that's for sure. I'd suggest disabling it:

    sudo apparmor_parser -R thunderbird

and create a symlink to the overly strict profile in /etc/apparmor.d/disable.

I tested the following packages (and their dependencies) from bionic-proposed:

  thunderbird 1:68.2.1+build1-0ubuntu0.18.04.1
  xul-ext-lightning 1:68.2.1+build1-0ubuntu0.18.04.1
  enigmail 2:2.1.2-0ubuntu1~18.04.2

Tested in virtual machines, amd64 and i386. I set up thunderbird with an existing gmail account and smoke tested various functionalities for a while (including enigmail, calendar, and linking large attachments with WeTransfer), and everything appeared to work as expected.

Than you Olivier,

I removed the apparmor profile by following this guide:
https://help.ubuntu.com/community/AppArmor

For the last couple of days no major issues.

Cheers

@GrzesiekC: thanks for the feedback. If other issues/regressions pop up, please report them here.

This bug was fixed in the package thunderbird - 1:68.2.1+build1-0ubuntu0.18.04.1

---------------
thunderbird (1:68.2.1+build1-0ubuntu0.18.04.1) bionic; urgency=medium

  * New upstream stable release (68.2.1build1) (LP: #1850064)

  * Vendor cbindgen and its dependencies in the source tarball, because it's
    not available in Debian/Ubuntu yet
    - update debian/build/create-tarball.py
    - update debian/build/rules.mk
    - update debian/config/mozconfig.in
    - update debian/config/tarball.conf
  * Bump build dependency on rustc >= 1.34.0 and cargo >= 0.35
    - update debian/control{,.in}
  * Add a build dependency on Node.js 8.11
    - update debian/config/mozconfig.in
    - update debian/control{,.in}
  * Add a build dependency on nasm 2.13.02
    - update debian/control{,.in}
  * Update exclusion patterns to remove outdated entries and to trim down the
    final size of the source tarball
    - update debian/config/tarball.conf
  * Do not install obsolete extension
    - update debian/thunderbird.install.in
  * Update patches
    - update debian/patches/reduce-rust-debuginfo-on-32bit-architectures.patch
    - update debian/patches/rust-drop-dll-checksums.patch
    - update debian/patches/support-coinstallable-trunk-build.patch
    - update debian/patches/unity-menubar.patch
  * Remove obsolete patches
    - remove debian/patches/dont-treat-tilde-as-special.patch
    - remove debian/patches/fix-missing-docs-error.patch
    - remove debian/patches/skia-big-endian.patch
  * Stop building and remove thunderbird-globalmenu (LP: #1834866)
  * Fix build on armhf by disabling unaligned FP accesses emulation
    - add debian/patches/armhf-disable-unaligned-fp-access-emulation.patch
  * Reduce the memory used by the linking process on armhf, to work around
    build failures on launchpad
    - add debian/patches/armhf-reduce-linker-memory-use.patch
  * Update shipped locales (adding cak, ka, uz)
    - update debian/config/locales.{all,shipped}
    - update debian/control
  * Build with clang
    - update debian/config/mozconfig.in
    - update debian/control{,.in}
    - add debian/patches/armhf-clang-no-integrated-as-for-neon.patch
    - add debian/patches/ppc64el-workaround-bug-1555531.patch
    - add debian/patches/s390x-fix-hidden-symbol.patch
  * Ensure that external dictionaries are still loaded (LP: #1847247)
    - debian/thunderbird.sh.in
  * Export MOZ_SOURCE_REPO and MOZ_SOURCE_CHANGESET during the configure step
    as this is now mandatory for the build system to determine and expose the
    comm repository and revision used to generate the source tarball
    (see https://bugzilla.mozilla.org/show_bug.cgi?id=1507754)
    - debian/build/create-tarball.py
    - debian/build/rules.mk
  * Fix the repacking of lightning with all locales (the artifact was renamed
    to lightning.xpi, see https://bugzilla.mozilla.org/show_bug.cgi?id=1588659)
    - debian/build/rules.mk

 -- Olivier Tilloy <email address hidden> Thu, 31 Oct 2019 19:23:11 +0100

But 68.2.2 contains an important fix. :S

"Then upgrading a 64bit version of Thunderbird version 60 to version 68, the existing profile wasn't recognized and a new profile was created.
Note: If your profile is still not recognized, select it by visiting about:profiles in the Troubleshooting Information."

I still encounter this error with version 68.2.2 on Ubuntu 18.04.3. I also have an upgraded system from 16.04 like @grzesiekc. I removed thunderbird and xul-ext-lightning and then reinstalled.

$ lsb_release -a
LSB Version: core-9.20170808ubuntu1-noarch:security-9.20170808ubuntu1-noarch
Distributor ID: Ubuntu
Description: Ubuntu 18.04.3 LTS
Release: 18.04
Codename: bionic

$ apt-show-versions thunderbird
thunderbird:amd64/bionic-security 1:68.2.2+build1-0ubuntu0.18.04.1 uptodate

$ sudo apparmor_status | grep thunderbird
   thunderbird
   thunderbird//browser_java
   thunderbird//browser_openjdk
   thunderbird//gpg
   thunderbird//sanitized_helper

$ sudo apparmor_parser -R thunderbird
File thunderbird not found, skipping...

$ journalctl -f | grep DEN
Dec 13 20:23:39 MSPC2011 audit[28379]: AVC apparmor="DENIED" operation="capable" profile="thunderbird" pid=28379 comm="thunderbird" capability=21 capname="sys_admin"
Dec 13 20:23:39 MSPC2011 kernel: audit: type=1400 audit(1576265019.934:721): apparmor="DENIED" operation="capable" profile="thunderbird" pid=28379 comm="thunderbird" capability=21 capname="sys_admin"
Dec 13 20:23:41 MSPC2011 audit[28379]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird" name="/dev/shm/org.mozilla.ipc.28379.0" pid=28379 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Dec 13 20:23:41 MSPC2011 kernel: audit: type=1400 audit(1576265021.878:722): apparmor="DENIED" operation="mknod" profile="thunderbird" name="/dev/shm/org.mozilla.ipc.28379.0" pid=28379 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

$ thunderbird
1576265020207 addons.xpi WARN Not converting unknown addon type undefined
[28379, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-qepI16/thunderbird-68.2.2+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[28379, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-qepI16/thunderbird-68.2.2+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142
[GFX1-]: Failed to lock new back buffer.
[28379, Main Thread] WARNING: failed to open shm: Permission denied: file /build/thunderbird-qepI16/thunderbird-68.2.2+build1/ipc/chromium/src/base/shared_memory_posix.cc, line 142

I already tried settings the permissions on /dev/shm as suggested here:
https://www.linuxquestions.org/questions/slackware-14/thunderbird-60-black-windows-running-as-user-4175637823/

Is this the same bug or a different one and can I add additional diagnosis to clarify this?

Try:

    sudo apparmor_parser -R usr.bin.thunderbird

If it doesn't work, replace "usr.bin.thunderbird" with the output of this command:

    ls /etc/apparmor.d | grep thunderbird

Thanks, using "usr.bin.thunderbird" did it. Before, I also did
sudo systemctl stop apparmor.service
sudo update-rc.d -f apparmor remove
sudo systemctl start apparmor.service
sudo update-rc.d apparmor defaults
but I am not sure, if this is related.
Should this be included in the installation process somehow? This may effect other users as well, since I do not think my configuration is very special. However, I do not understand the technical details here. This is the second time, that an automatic update in Ubuntu destroyed my working environment (after the update to 60 that broke all addons, including calendar).

I'm very sorry for the trouble you had to go through to restore a working thunderbird.

As I wrote in comment #18, I don't know where that apparmor profile for thunderbird comes from, not from the archive it seems. So I'm reluctant to taking action until I understand better where this comes from, and how many users are potentially affected. But I'll keep an eye on the issue, for sure.

Do these problems make Thunderbird 68 out of scope for Ubuntu 16.04 LTS ?

It's still 60.9.0 there.

Not a big deal unless TB profiles are shared between OS or computers…

Since a few days ago Thunderbird is also updated to 68.7 on Ubuntu 16.04 LTS.
I first encountered the bug with the black screen again. After rebooting it works again now.
I also entered the apparmor-commands from above, but presumably they were not necessary.