Subject: CVS commit: pkgsrc/mail/thunderbird
From: Ryo ONODERA
Date: 2024-11-28 20:32:40
Message id: 20241128193240.D59A0FC1B@cvs.NetBSD.org

Log Message:
mail/thunderbird: Update to 128.5.0

Changelog:
128.5.0:
What's Fixed

fixed
IMAP could crash when reading cached messages

fixed
Enabling "Show Folder Size" on Maildir profile could render Thunderbird
unusable

fixed
Messages corrupted by folder compaction were only fixed by user intervention

fixed
Reading a message from past the end of an mbox file did not cause an error

fixed
View -> Folders had duplicate F access keys

fixed
Add-ons adding columns to the message list could fail and cause display issue

fixed
"Empty trash on exit" and "Expunge inbox on exit" did not \ 
always work

fixed
Selecting a display option in View -> Tasks did not apply in the Task interface

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2024-68
#CVE-2024-11691: Out-of-bounds write in Apple GPU drivers via WebGL
#CVE-2024-11692: Select list elements could be shown over another site
#CVE-2024-11693: Download Protections were bypassed by .library-ms files on
 Windows
#CVE-2024-11694: CSP Bypass and XSS Exposure via Web Compatibility Shims
#CVE-2024-11695: URL Bar Spoofing via Manipulated Punycode and Whitespace
 Characters
#CVE-2024-11696: Unhandled Exception in Add-on Signature Verification
#CVE-2024-11697: Improper Keypress Handling in Executable File Confirmation
 Dialog
#CVE-2024-11698: Fullscreen Lock-Up When Modal Dialog Interrupts Transition on
 macOS
#CVE-2024-11699: Memory safety bugs fixed in Firefox 133, Thunderbird 133,
 Firefox ESR 128.5, and Thunderbird 128.5

128.4.4:
What's Fixed

fixed
QR codes were not scannable by Android app when using most high-contrast themes

fixed
Primary password prompt cancellation during mobile export was confusing

128.4.3:
What's Fixed

fixed
Folder corruption could cause Thunderbird to freeze and become unusable

fixed
Message corruption could be propagated when reading mbox

fixed
Folder compaction was not abandoned on shutdown

fixed
Folder compaction did not clean up on failure

fixed
Collapsed NNTP thread incorrectly indicated there were unread messages

fixed
Navigating to next unread message did not wait for all messages to be loaded

fixed
Applying column view to folder and children could break if folder error
occurred

fixed
Remote content notifications were broken with encrypted messages

fixed
Updating criteria of a saved search resulted in poor search performance

fixed
Drop-downs may not work in some places

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2024-61
#CVE-2024-11159: Potential disclosure of plaintext in OpenPGP encrypted message

128.4.2:
What's Changed

changed
Increased the auto-compaction threshold to reduce frequency of compaction

What's Fixed

fixed
New profile creation caused console errors

fixed
Repair folder could result in older messages showing wrong date and time

fixed
Recently deleted messages could become undeleted if message compaction failed

fixed
Visual and UX improvements

fixed
Clicking on an HTML button could cause Thunderbird to freeze

fixed
Messages could not be selected for dragging

fixed
Could not open attached file in a MIME encrypted message

fixed
Account creation "Setup Documentation" link was broken

fixed
Unable to generate QR codes when exporting to mobile in some cases

fixed
Operating system reauthentication was missing when exporting QR codes for
mobile

fixed
Could not drag all-day events from one day to another in week view

128.4.1:
What's New

new
Add the 20 year donation appeal

Files:
RevisionActionfile
1.333modifypkgsrc/mail/thunderbird/Makefile
1.278modifypkgsrc/mail/thunderbird/distinfo