Subject: CVS commit: pkgsrc/mail/thunderbird
From: Ryo ONODERA
Date: 2020-11-19 15:29:55
Message id: 20201119142955.59036FA9D@cvs.NetBSD.org

Log Message:
thunderbird: Update to 78.5.0

* Fix build with lang/rust-1.47.0.

Changelog:
78.5.0
What's New
OpenPGP: Added option to disable attaching the public key to a signed message
MailExtensions: "compose_attachments" context added to Menus API
MailExtensions: Menus API now available on displayed messages

Changes
MailExtensions: browser.tabs.create will now wait for \ 
"mail-delayed-startup-finished" event

Fixes
OpenPGP: Support for inline PGP messages improved
OpenPGP: Message security dialog showed unverified keys as unavailable
Chat: New chat contact menu item did not function
Various theme and usability improvements
Various security fixes

#CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer \ 
for chrome privileged code
#CVE-2020-16012: Variable time processing of cross-origin images during \ 
drawImage calls
#CVE-2020-26953: Fullscreen could be enabled without displaying the security UI
#CVE-2020-26956: XSS through paste (manual and clipboard API)
#CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME type \ 
restrictions
#CVE-2020-26959: Use-after-free in WebRequestService
#CVE-2020-26960: Potential use-after-free in uses of nsTArray
#CVE-2020-15999: Heap buffer overflow in freetype
#CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses
#CVE-2020-26965: Software keyboards may have remembered typed passwords
#CVE-2020-26966: Single-word search queries were also broadcast to local network
#CVE-2020-26968: Memory safety bugs fixed in Thunderbird 78.5

78.4.3
Fixes
User interface was inconsistent when switching from the default theme to the \ 
dark theme and back to the default theme
Email subject would disappear when hovering over it with the mouse when using \ 
Windows 7 Classic theme

78.4.2
Fixes
Security fix
#CVE-2020-26950: Write side effects in MCallGetProperty opcode not accounted for

78.4.1
What's New
Thunderbird prompts for an address to use when starting an email from an address \ 
book entry with multiple addresses

Fixes
Searching global search results did not work
Link location was not focused by default when adding a hyperlink in message composer
Advanced address book search dialog was unusable
Encrypted draft reply emails lost "Re:" prefix
Replying to a newsgroup message did not open the compose window
Unable to delete multiple newsgroup messages
Appmenu displayed visual glitches
Visual glitches when selecting multiple messages in the message pane and using \ 
Ctrl+click
Switching between dark and light mode could lead to unreadable text on macOS

78.4.0
What's New
MailExtensions: browser.tabs.sendMessage API added
MailExtensions: messageDisplayScripts API added

Changes
Yahoo and AOL mail users using password authentication will be migrated to OAuth2
MailExtensions: messageDisplay APIs extended to support multiple selected messages
MailExtensions: compose.begin functions now support creating a message with \ 
attachments

Fixes
Thunderbird could freeze when updating global search index
Multiple issues with handling of self-signed SSL certificates addressed
Recipient address fields in compose window could expand to fill all available space
Inserting emoji characters in message compose window caused unexpected behavior
Button to restore default folder icon color was not keyboard accessible
Various keyboard navigation fixes
Various color-related theme fixes
MailExtensions: Updating attachments with onBeforeSend.addListener() did not work
Various security fixes

Security fixes:
#CVE-2020-15969: Use-after-free in usersctp
#CVE-2020-15683: Memory safety bugs fixed in Thunderbird 78.4

78.3.3
Fixes
OpenPGP: Improved support for encrypting with subkeys
OpenPGP message status icons were not visible in message header pane
OpenPGP Key Manager was missing from Tools menu on macOS
Creating a new calendar event did not require an event title

78.3.2
Changes
Thunderbird will no longer automatically install updates when Preferences tab is \ 
opened

Fixed
OpenPGP: Improved support for encrypting with subkeys
OpenPGP: Encrypted messages with international characters were sometimes \ 
displayed incorrectly
Single-click deletion of recipient pills with middle mouse button restored
Searching an address book list did not display results
Windows installer was unreadable with Windows in high contrast mode
Dark mode, high contrast, and Windows theming fixes

Files:
RevisionActionfile
1.261modifypkgsrc/mail/thunderbird/Makefile
1.81modifypkgsrc/mail/thunderbird/PLIST
1.237modifypkgsrc/mail/thunderbird/distinfo