CVS commit: pkgsrc/mail/thunderbird

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sun May 19 11:33:17 UTC 2024

Modified Files:
        pkgsrc/mail/thunderbird: Makefile PLIST distinfo

Log Message:
mail/thunderbird: Update to 115.11.0

Changelog:
115.11.0:
What's Fixed
fixed
Splitter arrow between task list and task description did not behave as
expected

fixed
Calendar Event Attendees dialog had incorrectly sized rows

fixed
Security fixes
Mozilla Foundation Security Advisory 2024-23
#CVE-2024-4367: Arbitrary JavaScript execution in PDF.js
#CVE-2024-4767: IndexedDB files retained in private browsing mode
#CVE-2024-4768: Potential permissions request bypass via clickjacking
#CVE-2024-4769: Cross-origin responses could be distinguished between script
 and non-script content-types
#CVE-2024-4770: Use-after-free could occur when printing to PDF
#CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
 and Thunderbird 115.11

115.10.2:
What's Changed
changed
Update channel for Thunderbird 115 is now esr.

115.10.1:
What's Fixed
fixed
Thunderbird processes did not exit cleanly; user intervention was required via
task manager

115.9.0:
What's Fixed
fixed
Opened ignored messages in a message thread/subthread were not marked as read
in IMAP folders

fixed
Multi-language spellcheck sometimes skipped languages

fixed
Thread tree did not update when live language switching

fixed
Visual improvements to "Reorder Attachments" popup

fixed
Sort order was sometimes incorrect in Grouped By views

fixed
Selecting "Match all messages" in Filter Rules dialog did not disable all
search criteria

fixed
S/MIME-only signed messages sometimes incorrectly displayed signature as
invalid

fixed
OpenPGP keys uploaded to an HKP keyserver were sent with the wrong Content-Type
header

fixed
Keyboard navigation within search toolbar did not work

fixed
Flatpak builds only had the en-US spell check dictionary available

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2024-14
#CVE-2024-0743: Crash in NSS TLS method
#CVE-2024-2605: Windows Error Reporter could be used as a Sandbox escape vector
#CVE-2024-2607: JIT code failed to save return registers on Armv7-A
#CVE-2024-2608: Integer overflow could have led to out of bounds write
#CVE-2024-2616: Improve handling of out-of-memory conditions in ICU
#CVE-2023-5388: NSS susceptible to timing attack against RSA decryption
#CVE-2024-2610: Improper handling of html and body tags enabled CSP nonce
 leakage
#CVE-2024-2611: Clickjacking vulnerability could have led to a user
 accidentally granting permissions
#CVE-2024-2612: Self referencing object could have potentially led to a
 use-after-free
#CVE-2024-2614: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and
 Thunderbird 115.9

115.8.1:
What's Fixed
fixed
Settings: Updating tags failed if Automatic Updates were disabled

fixed
Size of collapsed folders in folder pane did not include size of subfolders

fixed
Reversing sort order of Grouped By views in quick search did not reverse

fixed
Removing threaded messages in a unified folder sometimes resulted in an
incorrect number of levels in the thread

fixed
Thread collapsing did not behave correctly when copying thread messages in
multi-folder view

fixed
S/MIME encryption failed to encrypt if unsupported certificate type was
encountered

fixed
Decrypting a copy of an S/MIME encrypted, opaque-signed message created an
unreadable message

fixed
Thunderbird sometimes changed the subject of messages selected while
simultaneously decrypting a large PGP-encrypted message

fixed
"Quote message" menu item in compose window did not work when replying to
message opened in separate tab

fixed
Toolbar customization window contents overflowed the window width

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2024-11
#CVE-2024-1936: Leaking of encrypted email subjects to other conversations

115.8.0:
What's New

new
Added option to show packet dump when OpenPGP fails to decrypt

What's Fixed

fixed
Thunderbird slowed down significantly when opening email files (.eml)

fixed
Inbox view intermittently reverted to default view after moving or deleting
messages

fixed
Size of collapsed folders in folder pane did not include size of subfolders

fixed
Hovering over folder does not always expand subfolders

fixed
Switching to thread pane of a folder using keyboard navigation did not focus
top message

fixed
Clicking "Sent unsent messages" in Outbox context menu while in offline mode
did not prompt user to go online

fixed
Mail tab-specific Unified Toolbar buttons received focus incorrectly

fixed
Quick Filter settings did not persist when Quick Filter bar was turned off

fixed
Quick Filters were unusually slow

fixed
OpenPGP Key Manager filtering did not work

fixed
OpenPGP sometimes attempted to decrypt message with incorrect key

fixed
Autoconfig failed on servers that did not support OAuth2

fixed
Opening different attachments with the same name in different messages could
cause attachment files to become conflated

fixed
Overflowed attachment list could not be scrolled

fixed
Passwords disappeared from password manager list after applying and clearing
filters

fixed
Cookies in cookie manager list disappeared after applying and then clearing
filters

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2024-07
#CVE-2024-1546: Out-of-bounds memory read in networking channels
#CVE-2024-1547: Alert dialog could have been spoofed on another site
#CVE-2024-1548: Fullscreen Notification could have been hidden by select
 element
#CVE-2024-1549: Custom cursor could obscure the permission dialog
#CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to
 unintended permission grants
#CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in
 response parts
#CVE-2024-1552: Incorrect code generation on 32-bit ARM devices
#CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and
 Thunderbird 115.8


To generate a diff of this commit:
cvs rdiff -u -r1.313 -r1.314 pkgsrc/mail/thunderbird/Makefile
cvs rdiff -u -r1.93 -r1.94 pkgsrc/mail/thunderbird/PLIST
cvs rdiff -u -r1.264 -r1.265 pkgsrc/mail/thunderbird/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/thunderbird/Makefile
diff -u pkgsrc/mail/thunderbird/Makefile:1.313 pkgsrc/mail/thunderbird/Makefile:1.314
--- pkgsrc/mail/thunderbird/Makefile:1.313      Sun Apr  7 07:34:33 2024
+++ pkgsrc/mail/thunderbird/Makefile    Sun May 19 11:33:17 2024
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.313 2024/04/07 07:34:33 wiz Exp $
+# $NetBSD: Makefile,v 1.314 2024/05/19 11:33:17 ryoon Exp $
 
 DISTNAME=      thunderbird-${TB_VER}.source
 PKGNAME=       thunderbird-${TB_VER}
-PKGREVISION=   2
-TB_VER=                115.7.0
+TB_VER=                115.11.0
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_MOZILLA:=thunderbird/releases/${TB_VER}/source/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/mail/thunderbird/PLIST
diff -u pkgsrc/mail/thunderbird/PLIST:1.93 pkgsrc/mail/thunderbird/PLIST:1.94
--- pkgsrc/mail/thunderbird/PLIST:1.93  Sun Feb 11 15:12:45 2024
+++ pkgsrc/mail/thunderbird/PLIST       Sun May 19 11:33:17 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.93 2024/02/11 15:12:45 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.94 2024/05/19 11:33:17 ryoon Exp $
 bin/thunderbird
 lib/thunderbird/actors/AboutHttpsOnlyErrorChild.sys.mjs
 lib/thunderbird/actors/AboutHttpsOnlyErrorParent.sys.mjs
@@ -7004,7 +7004,6 @@ lib/thunderbird/modules/sessionstore/Pri
 lib/thunderbird/modules/sessionstore/SessionHistory.sys.mjs
 lib/thunderbird/modules/sessionstore/SessionStore.jsm
 lib/thunderbird/modules/sessionstore/TabStateFlusher.jsm
-lib/thunderbird/modules/sessionstore/Utils.sys.mjs
 lib/thunderbird/modules/shared/AddressComponent.sys.mjs
 lib/thunderbird/modules/shared/AddressParser.sys.mjs
 lib/thunderbird/modules/shared/CreditCardRuleset.sys.mjs

Index: pkgsrc/mail/thunderbird/distinfo
diff -u pkgsrc/mail/thunderbird/distinfo:1.264 pkgsrc/mail/thunderbird/distinfo:1.265
--- pkgsrc/mail/thunderbird/distinfo:1.264      Fri May 10 09:14:06 2024
+++ pkgsrc/mail/thunderbird/distinfo    Sun May 19 11:33:17 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.264 2024/05/10 09:14:06 jperkin Exp $
+$NetBSD: distinfo,v 1.265 2024/05/19 11:33:17 ryoon Exp $
 
-BLAKE2s (thunderbird-115.7.0.source.tar.xz) = c12e9ad84157466e74a003980d2ccf517d2f84ea1653f145628ac2dad4c90055
-SHA512 (thunderbird-115.7.0.source.tar.xz) = de9edb81cf5da494101bf927a5b963ccdec0cc9bff87ebd72d896c6e25102c1113b326f67302a81abd237048aa1e6150c4a97fe4b1892bc80030cbab9099e2d8
-Size (thunderbird-115.7.0.source.tar.xz) = 532459912 bytes
+BLAKE2s (thunderbird-115.11.0.source.tar.xz) = 24b910062ec54f34853f8d4574575efdd02543a0a97d99de27c14870f4a92186
+SHA512 (thunderbird-115.11.0.source.tar.xz) = 002f783cff7f2b50d9a29f20061fe55a1f64487b38a18dcb49217c3d7b99c2852af842decbd0347939aaf4c4c73ae66a8b04527ccd1b6db7f87aab402cb84ca1
+Size (thunderbird-115.11.0.source.tar.xz) = 530402016 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = d53fae5544563888d030af7483f00283a712235c
 SHA1 (patch-build_moz.configure_init.configure) = 07cb75fad7c2f354b3d1e02e3f6e49cca119f20a
 SHA1 (patch-build_moz.configure_rust.configure) = 72c5fa2e9d1022325d038832cca2e35f7213116d