CVS commit: pkgsrc/mail/thunderbird

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Tue Feb 11 11:05:05 UTC 2025

Modified Files:
        pkgsrc/mail/thunderbird: Makefile distinfo

Log Message:
mail/thunderbird: Update to 128.7.0

Changelog:
128.7.0:
What's Fixed

fixed
Images inside links could zoom when clicked instead of opening the link

fixed
Compacting an empty folder failed with write error

fixed
Compacting of IMAP folder with corrupted local storage failed with write error

fixed
After restart, all restored tabs with opened PDFs showed the same attachment

fixed
Exceptions during CalDAV item processing would halt subsequent item handling

fixed
Context menu was unable to move email address to a different field

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2025-10
#CVE-2025-1009: Use-after-free in XSLT
#CVE-2025-1010: Use-after-free in Custom Highlight
#CVE-2025-1011: A bug in WebAssembly code generation could result in a crash
#CVE-2025-1012: Use-after-free during concurrent delazification
#CVE-2024-11704: Potential double-free vulnerability in PKCS#7 decryption
 handling
#CVE-2025-1013: Potential opening of private browsing tabs in normal browsing
 windows
#CVE-2025-1014: Certificate length was not properly checked
#CVE-2025-1015: Unsanitized address book fields
#CVE-2025-0510: Address of e-mail sender can be spoofed by malicious email
#CVE-2025-1016: Memory safety bugs fixed in Firefox 135, Thunderbird 135,
 Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird
 128.7
#CVE-2025-1017: Memory safety bugs fixed in Firefox 135, Thunderbird 135,
 Firefox ESR 128.7, and Thunderbird 128.7

128.6.0:
What's Fixed

fixed
New mail notification was not hidden after reading the new message

fixed
New mail notification could show for the wrong folder, causing repeated alerts

fixed
macOS shortcut CMD+1 did not restore the main window when it was minimized

fixed
Clicking the context menu "Reply" button resulted in "Reply-All"

fixed
Switching from "All", "Unread", and "Threads with unread" did not work

fixed
Downloading message headers from a newsgroup could cause a hang

fixed
Message list performance slow when many updates happened at once

fixed
"mailto:"; links did not apply the compose format of the current identity

fixed
Authentication failure of AUTH PLAIN or AUTH LOGIN did not fall back to
USERPASS

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2025-05
#CVE-2025-0237: WebChannel APIs susceptible to confused deputy attack
#CVE-2025-0238: Use-after-free when breaking lines in text
#CVE-2025-0239: Alt-Svc ALPN validation failure when redirected
#CVE-2025-0240: Compartment mismatch when parsing JavaScript JSON module
#CVE-2025-0241: Memory corruption when using JavaScript Text Segmentation
#CVE-2025-0242: Memory safety bugs fixed in Firefox 134, Thunderbird 134,
 Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird
 128.6
#CVE-2025-0243: Memory safety bugs fixed in Firefox 134, Thunderbird 134,
 Firefox ESR 128.6, and Thunderbird 128.6


To generate a diff of this commit:
cvs rdiff -u -r1.336 -r1.337 pkgsrc/mail/thunderbird/Makefile
cvs rdiff -u -r1.280 -r1.281 pkgsrc/mail/thunderbird/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/thunderbird/Makefile
diff -u pkgsrc/mail/thunderbird/Makefile:1.336 pkgsrc/mail/thunderbird/Makefile:1.337
--- pkgsrc/mail/thunderbird/Makefile:1.336      Wed Jan  1 10:16:53 2025
+++ pkgsrc/mail/thunderbird/Makefile    Tue Feb 11 11:05:04 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.336 2025/01/01 10:16:53 ryoon Exp $
+# $NetBSD: Makefile,v 1.337 2025/02/11 11:05:04 ryoon Exp $
 
 DISTNAME=      thunderbird-${TB_VER}.source
 PKGNAME=       thunderbird-${TB_VER:S/esr//}
-TB_VER=                128.5.2esr
+TB_VER=                128.7.0esr
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_MOZILLA:=thunderbird/releases/${TB_VER}/source/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/mail/thunderbird/distinfo
diff -u pkgsrc/mail/thunderbird/distinfo:1.280 pkgsrc/mail/thunderbird/distinfo:1.281
--- pkgsrc/mail/thunderbird/distinfo:1.280      Wed Jan  1 10:16:53 2025
+++ pkgsrc/mail/thunderbird/distinfo    Tue Feb 11 11:05:04 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.280 2025/01/01 10:16:53 ryoon Exp $
+$NetBSD: distinfo,v 1.281 2025/02/11 11:05:04 ryoon Exp $
 
-BLAKE2s (thunderbird-128.5.2esr.source.tar.xz) = 7ac6ded3451cbb2a2707a86b269613a4d7bfe68b460e985767d0679fae0e7275
-SHA512 (thunderbird-128.5.2esr.source.tar.xz) = cbfd4b1a7245c2a2f6ef9b2cf69d95a8095eba855755d00fd397351b21ad504733084d6f41801f4114be7015332b8db65e5290bec45f5321efc753412b9acecc
-Size (thunderbird-128.5.2esr.source.tar.xz) = 674696420 bytes
+BLAKE2s (thunderbird-128.7.0esr.source.tar.xz) = 29ab6371392875eed8f93a80b221aa552b5a38aac940ca48c997e76a83a3cd94
+SHA512 (thunderbird-128.7.0esr.source.tar.xz) = 13c09644183a10bdaf9a7f7691063cda571bdc8dcdd3882f72dd3b176372ce42fb83fe510270018c467027e9b3af3b01bacf199534878781251a0fe668606f0b
+Size (thunderbird-128.7.0esr.source.tar.xz) = 674370672 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678