#1152139 thunderbird: OpenPGP broken after ESR upgrade (TypeError: RNPLib.prepare_ffi is not a function)

Package:
thunderbird
Source:
thunderbird
Description:
mail/news client with RSS, chat and integrated spam filter support
Submitter:
Andrew Savchenko
Date:
2026-10-26 10:53:02 UTC
Severity:
normal
#1152139#5
Date:
2026-10-26 03:26:54 UTC
From:
To:
Dear Maintainer,

After upgrading Thunderbird to the latest ESR release, the GPG
integration is FUBAR.

* OpenPGP Key Manager is empty, and attempting to import keys fails with:

```
Importing the keys failed

TypeError: RNPLib.prepare_ffi is not a function
```

Steps to reproduce:

1. Open Thunderbird.
2. Navigate to Tools -> OpenPGP Key Manager.
3. Notice existing keys fail to display.
4. Attempt to import an *.asc: File -> Import Public Key(s) from File.

Potentially relevant stderr:

```
Missing chrome or resource URL:
resource://gre/modules/media/PeerConnection.sys.mjs
```

Expected behavior:

* Everything works as it was working before the upgrade from 140.17 ESR
* OpenPGP keys should load in the Key Manager, and key import should
succeed.

System information:

* Debian release     13.7
* Architecture       amd64
* Kernel             6.12.113
* librnp0            0.17.1-1+b1
* librpm-sequoia-1   1.8.0-2

#1152139#10
Date:
2026-10-26 03:44:28 UTC
From:
To:
Further information:

* With 153.5.1 all GPG-encrypted messaged in the inbox display blank
* Downgrading to 140.17.0esr-1~deb13u1 recovers the GPG functionality
* After the `thunderbird --allow-downgrade` key manager lists keys again

#1152139#15
Date:
2026-10-26 10:50:40 UTC
From:
To:
Hi everyone,

I've got the same problem on my two Debian-13 systems.
Seems librnp (and possibly libbotan) may need an update.

$ dpkg -l librnp0
[...]
ii  librnp0:amd64  0.17.1-1+b1 [...]

Upstream Thunderbird-153.5.1esr build:
$ strings librnp.so | grep -m1 -E '^0\.[0-9]+\.[0-9]+'
0.18.1.MZLA.153.5.1esr.botan.3.11.1


More details:

$ thunderbird 2>&1 | grep -E '(rnp|botan).*\.so'
[...]
[pid 1413337] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/librnp.so.0",
O_RDONLY|O_CLOEXEC) = 79
[pid 1413337] openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libbotan-2.so.19",
O_RDONLY|O_CLOEXEC) = 79

Thunderbird error console:
Error: RNP/OpenPGP library failed to load    BondOpenPGP.sys.mjs:43:13

Works then using upstream Thunderbird-153.5.1esr build instead.



Thanks!

Regards,
kolAflash