Closed Bug 1790605 Opened 2 years ago Closed 2 years ago

Disable copying of key4.db in Profile import to avoid corruption

Categories

(Thunderbird :: Mail Window Front End, defect, P1)

Tracking

(thunderbird_esr102+ fixed, thunderbird104 affected, thunderbird105 affected)

RESOLVED FIXED
106 Branch
Tracking Status
thunderbird_esr102 + fixed
thunderbird104 --- affected
thunderbird105 --- affected

People

(Reporter: KaiE, Assigned: KaiE)

References

(Regression)

Details

(Keywords: dataloss, regression)

Attachments

(1 file)

Bug 1720042 (profile import) introduced the possibility to corrupt the OpenPGP key storage, in a way that isn't handled by the application, and which breaks the use of the OpenPGP feature, and which can cause a complete loss of all the user's secret OpenPGP keys.

At this time only some scenarios have been identified that cause the corruption. Work is ongoing to better understand all scenarios and to identify was to help affected users.

Until we're ready to handle this kind of import in a better way, we need to immediately disable the code that can trigger this kind of corruption.

https://hg.mozilla.org/releases/comm-esr102/rev/3df21dced1a4bcdcf908d6315e1381910b56b25e

Severity: S1 → S2
Priority: P1 → --
Priority: -- → P1
Status: NEW → ASSIGNED
Target Milestone: --- → 106 Branch

Pushed by mkmelin@iki.fi:
https://hg.mozilla.org/comm-central/rev/e0b8d9270be3
Disable copying of key4.db in Profile import to avoid corruption. r=mkmelin

Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED

Comment on attachment 9294435 [details]
Bug 1790605 - Disable copying of key4.db in Profile import to avoid corruption. r=mkmelin

[Approval Request Comment]
Regression caused by (bug #): 1720042
User impact if declined: possible dataloss, profile corruption, email encryption unusable
Testing completed (on c-c, etc.):
Risk to taking this patch (and alternatives if risky): low, but deliberately breaking the import of passwords from other profiles (because we must urgently disable the profile corruption, prior to working on a better implementation, which will take more time)

Attachment #9294435 - Flags: approval-comm-esr102?
Attachment #9294435 - Flags: approval-comm-beta?

Comment on attachment 9294435 [details]
Bug 1790605 - Disable copying of key4.db in Profile import to avoid corruption. r=mkmelin

Next beta is 106.0b1, this will get picked up automatically with the c-central -> c-beta merge.

[Triage Comment]
Approved for 102 by wsmwk via Matrix.

Attachment #9294435 - Flags: approval-comm-esr102?
Attachment #9294435 - Flags: approval-comm-esr102+
Attachment #9294435 - Flags: approval-comm-beta?
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: