Log message:
Update to 68.2.0

Changelog:
    new
    Message Display WebExtension API

    new
    Message Search WebExtension API

    fixed
    Better visual feedback for unread messages when using the dark theme

    fixed
    Various issues when editing mailing lists

    fixed
    Integration with macOS addressbook and notifications not working after \ 
introduction of notarization

    fixed
    Application windows not maintaining their size after restart

    fixed
    Issues when upgrading from a 32bit version of Thunderbird to a 64bit
    version. Note: If your profile is still not recognised, selected it
    by visiting about:profiles in the Troubleshooting Information.

    fixed
    Various security fixes

Security fixes:
#CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber
#CVE-2019-11757: Use-after-free when creating index updates in IndexedDB
#CVE-2019-11758: Potentially exploitable crash due to 360 Total Security
#CVE-2019-11759: Stack buffer overflow in HKDF output
#CVE-2019-11760: Stack buffer overflow in WebRTC networking
#CVE-2019-11761: Unintended access to a privileged JSONView object
#CVE-2019-11762: document.domain-based origin isolation has same-origin-property \ 
violation
#CVE-2019-11763: Incorrect HTML parsing results in XSS bypass technique
#CVE-2019-11764: Memory safety bugs fixed in Thunderbird 68.2

Log message:
thunderbird: Upgrade to 68.1.2

Local changes
=============

Cherry-pick a pending patch to fix build with the recent rust version (1.38.0).

esr68 branch fails to build with rust 1.38
https://bugzilla.mozilla.org/show_bug.cgi?id=1585099

Cherry-pick patch from:
https://marc.info/?l=openbsd-ports&m=156984549605237&w=2

Upstream changelog
==================

What's New

    fixed Visual glitches: Missing context menu in filter, downloads, password \ 
manager and Config Editor search boxes, unwanted scrollbars and cut-off text in \ 
Account Manager, incorrect colors in Calendar agenda scrollbars, theme issues on \ 
Windows 7
    fixed Some attachments couldn't be opened in messages originating from MS \ 
Outlook 2016
    fixed Address book import form CSV
    fixed Performance problem in message body search
    fixed Ctrl+Enter to send a message would open an attachment if the \ 
attachment pane had focus
    fixed Calendar: Issues with "Today Pane" start-up
    fixed Calendar: Glitches with custom repeat and reminder number input
    fixed Calendar: Problems with WCAP provider

https://www.thunderbird.net/en-US/thunderbird/68.1.2/releasenotes/

Log message:
Update to 68.1.1

Changelog:
    fixed Issues with attachments in IMAP messages

    fixed Gmail accounts ignored a non-standard trash folder
    selection. Note: If non-standard trash folder was selected
    previously in the account settings, this setting will now take
    effect which may be unexpected.

    fixed Entering/pasting lists of recipients into the addressing
    widget or mailing list not working reliably, especially when
    lists contained multiple commas or semicolons

    fixed Edit mailing list not working

    fixed Various theme fixes, especially dark theme improvements
    for Calendar

    fixed Contrast between tag label and background not optimal

    fixed Account Central pane always loaded at start-up

    fixed "Config Editor" button not removed if blocked by policy

    fixed Calendar: Free/busy information in attendees dialog not
    scrolled correctly. Note: Scroll arrows still not behaving
    correctly.

    fixed Various security fixes

#CVE-2019-11755: Spoofing a message author via a crafted S/MIME
message

Log message:
Update to 68.1.0

Changelog:
    new
    Offer to configure Exchange accounts for Office365. A third-party add-on is \ 
required for this account type. IMAP still exists as alternative.

    fixed
    Edit tag not working

    fixed
    Write window: "Insert > Characters and Symbols" not working

    fixed
    Moving/dragging messages from "Search Messages" result dialog not \ 
working

    fixed
    Command line -compose "attachment=" not working

    fixed
    Custom views not working

    fixed
    Issues with list of content types/actions for incoming attachments

    fixed
    "Learn More" links in Error Console not working

    fixed
    Visual glitches: Quick Filter Bar tag buttons too tall, missing scroll
      bar on Connection Setting subdialog, LDAP server selection after \ 
"New",
      "Edit" and "Delete"

    fixed
    Calendar: Parts of CalDAV dialog not working

    fixed
    Various security fixes

Security fixes:
CVE-2019-11739: Covert Content Attack on S/MIME encryption using a crafted \ 
multipart/alternative message
#CVE-2019-11746: Use-after-free while manipulating video
#CVE-2019-11744: XSS by breaking out of title and textarea elements using innerHTML
#CVE-2019-11742: Same-origin policy violation with SVG filters and canvas to \ 
steal cross-origin images
#CVE-2019-11752: Use-after-free while extracting a key value in IndexedDB
#CVE-2019-11743: Cross-origin access to unload event attributes
#CVE-2019-11740: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, \ 
Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9

Log message:
Recursive revbump from audio/pulseaudio

Log message:
Update to 60.8.0

Changelog:
changed
    Calendar: Problems when editing event times, some related to AM/PM setting \ 
in non-English locales

Log message:
Update to 60.7.1

Changelog:
Fixed
No prompt for smartcard PIN when S/MIME signing is used

Security fixes:
#CVE-2019-11703: Heap buffer overflow in icalparser.c
#CVE-2019-11704: Heap buffer overflow in icalvalue.c
#CVE-2019-11705: Stack buffer overflow in icalrecur.c
#CVE-2019-11706: Type confusion in icalproperty.c

Log message:
thunderbird: Pick libGL.so for NetBSD in GLContextProviderGLX.cpp

NetBSD ships with libGL.so.3 as of NetBSD-8.99.42 and the libGL.so form
is more portable.

Log message:
Update to 60.7.0

Changelog:
changed
    Attachment pane of Write window no longer focussed when attaching files \ 
using a keyboard shortcut

fixed
    Various security fixes

#CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
#CVE-2019-9816: Type confusion with object groups and UnboxedObjects
#CVE-2019-9817: Stealing of cross-domain images using canvas
#CVE-2019-9818: Use-after-free in crash generation server
#CVE-2019-9819: Compartment mismatch with fetch API
#CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
#CVE-2019-11691: Use-after-free in XMLHttpRequest
#CVE-2019-11692: Use-after-free removing listeners in the event listener manager
#CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
#CVE-2019-7317: Use-after-free in png_image_free of libpng library
#CVE-2019-9797: Cross-origin theft of images with createImageBitmap
#CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
#CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
#CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks \ 
to and from bookmarks
#CVE-2019-5798: Out-of-bounds read in Skia
#CVE-2019-9800: Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and \ 
Thunderbird 60.7

Log message:
Update to 60.6.1

Changelog:
#CVE-2019-9810: IonMonkey MArraySlice has incorrect alias information
#CVE-2019-9813: Ionmonkey type confusion with __proto__ mutations