[pkgsrc/trunk]: pkgsrc/mail/thunderbird thunderbird: Update to 68.6.0

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/9e65949752e3
branches:  trunk
changeset: 413035:9e65949752e3
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Sun Mar 15 13:28:51 2020 +0000

description:
thunderbird: Update to 68.6.0

CVhangelog:
68.6.0
new
Thunderbird now displays a popup window when starting up on a new
profile

changed
Thunderbird now provides partial updates resulting in smaller
downloads

fixed
Searching in message bodies led to false negatives under some
circumstances in quoted-printable encoded HTML bodies

"Get New Messages for All Accounts" not working for OAuth2-authenticated
IMAP accounts

Various security fixes
#CVE-2020-6805: Use-after-free when removing data about origins
#CVE-2020-6806: BodyStream::OnInputStreamReady was missing protections against state confusion
#CVE-2020-6807: Use-after-free in cubeb during stream destruction
#CVE-2020-6811: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection
#CVE-2019-20503: Out of bounds reads in sctp_load_addresses_from_init
#CVE-2020-6812: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission
#CVE-2020-6814: Memory safety bugs fixed in Thunderbird 68.6


68.0.5
new
Support for Client Identity IMAP/SMTP Service Extension

Support for OAuth 2.0 authentication for POP3 accounts

fixed
Status area goes blank during account setup

Calendar: Could not remove color for default categories

Calendar: Prevent calendar component loading multiple times

Calendar: Today pane did not retain width between sessions

Various security fixes
#CVE-2020-6793: Out-of-bounds read when processing certain email messages
#CVE-2020-6794: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords
#CVE-2020-6795: Crash processing S/MIME messages with multiple signatures
#CVE-2020-6797: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX
#CVE-2020-6798: Incorrect parsing of template tag could result in JavaScript injection
#CVE-2020-6792: Message ID calculcation was based on uninitialized data
#CVE-2020-6800: Memory safety bugs fixed in Thunderbird 68.5

diffstat:

 mail/thunderbird/Makefile |   5 ++---
 mail/thunderbird/PLIST    |   8 +++++++-
 mail/thunderbird/distinfo |  10 +++++-----
 3 files changed, 14 insertions(+), 9 deletions(-)

diffs (69 lines):

diff -r e33ca7420c03 -r 9e65949752e3 mail/thunderbird/Makefile
--- a/mail/thunderbird/Makefile Sun Mar 15 12:52:26 2020 +0000
+++ b/mail/thunderbird/Makefile Sun Mar 15 13:28:51 2020 +0000
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.241 2020/03/08 16:50:25 wiz Exp $
+# $NetBSD: Makefile,v 1.242 2020/03/15 13:28:51 ryoon Exp $
 
 DISTNAME=      thunderbird-${TB_VER}.source
 PKGNAME=       thunderbird-${TB_VER}
-PKGREVISION=   2
-TB_VER=                68.4.2
+TB_VER=                68.6.0
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_MOZILLA:=thunderbird/releases/${TB_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
diff -r e33ca7420c03 -r 9e65949752e3 mail/thunderbird/PLIST
--- a/mail/thunderbird/PLIST    Sun Mar 15 12:52:26 2020 +0000
+++ b/mail/thunderbird/PLIST    Sun Mar 15 13:28:51 2020 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.75 2020/01/07 15:41:22 wiz Exp $
+@comment $NetBSD: PLIST,v 1.76 2020/03/15 13:28:51 ryoon Exp $
 bin/thunderbird
 lib/thunderbird/actors/AudioPlaybackChild.jsm
 lib/thunderbird/actors/AutoplayChild.jsm
@@ -261,6 +261,7 @@
 lib/thunderbird/chrome/classic/skin/classic/messenger/icons/increase.svg
 lib/thunderbird/chrome/classic/skin/classic/messenger/icons/indent.svg
 lib/thunderbird/chrome/classic/skin/classic/messenger/icons/info.svg
+lib/thunderbird/chrome/classic/skin/classic/messenger/icons/information.svg
 lib/thunderbird/chrome/classic/skin/classic/messenger/icons/insecure.png
 lib/thunderbird/chrome/classic/skin/classic/messenger/icons/italics.svg
 lib/thunderbird/chrome/classic/skin/classic/messenger/icons/join.svg
@@ -409,6 +410,8 @@
 lib/thunderbird/chrome/classic/skin/classic/messenger/shared/messageHeader.css
 lib/thunderbird/chrome/classic/skin/classic/messenger/shared/messenger.css
 lib/thunderbird/chrome/classic/skin/classic/messenger/shared/messengercompose.css
+lib/thunderbird/chrome/classic/skin/classic/messenger/shared/newInstall.css
+lib/thunderbird/chrome/classic/skin/classic/messenger/shared/newInstallPage.css
 lib/thunderbird/chrome/classic/skin/classic/messenger/shared/newmailalert.css
 lib/thunderbird/chrome/classic/skin/classic/messenger/shared/searchBox.css
 lib/thunderbird/chrome/classic/skin/classic/messenger/shared/smime/smime-compose.css
@@ -3173,6 +3176,9 @@
 lib/thunderbird/chrome/messenger/content/messenger/multimessageview_print.css
 lib/thunderbird/chrome/messenger/content/messenger/newFolderDialog.js
 lib/thunderbird/chrome/messenger/content/messenger/newFolderDialog.xul
+lib/thunderbird/chrome/messenger/content/messenger/newInstall.js
+lib/thunderbird/chrome/messenger/content/messenger/newInstall.xul
+lib/thunderbird/chrome/messenger/content/messenger/newInstallPage.xhtml
 lib/thunderbird/chrome/messenger/content/messenger/newTagDialog.js
 lib/thunderbird/chrome/messenger/content/messenger/newTagDialog.xul
 lib/thunderbird/chrome/messenger/content/messenger/newmailaccount/accountProvisioner.js
diff -r e33ca7420c03 -r 9e65949752e3 mail/thunderbird/distinfo
--- a/mail/thunderbird/distinfo Sun Mar 15 12:52:26 2020 +0000
+++ b/mail/thunderbird/distinfo Sun Mar 15 13:28:51 2020 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.222 2020/02/08 22:36:24 kamil Exp $
+$NetBSD: distinfo,v 1.223 2020/03/15 13:28:51 ryoon Exp $
 
-SHA1 (thunderbird-68.4.2.source.tar.xz) = 699b9b7d9d02542e4a7eca2a145e300ad316223d
-RMD160 (thunderbird-68.4.2.source.tar.xz) = c26a9f61932dc8d596944b4aacb65e10782c7d00
-SHA512 (thunderbird-68.4.2.source.tar.xz) = 3dae593bfa328a64c05bbb6b84a80fb492876cd11bede4969f25ca74cd4051592aa600087c9df9e11e36d6e02c7299f629d8c3a214d84412c967d6468f6330c1
-Size (thunderbird-68.4.2.source.tar.xz) = 330801416 bytes
+SHA1 (thunderbird-68.6.0.source.tar.xz) = a84c078e4f100fe7d8bd6703e4db6654d6dcd896
+RMD160 (thunderbird-68.6.0.source.tar.xz) = 5d1176f0068c8ade239e3043f505dabc7354661b
+SHA512 (thunderbird-68.6.0.source.tar.xz) = 3502cc42b594eebf3511219ae8e7fb8a13594534abfe7a40ec32e5a3f60343cfab7c652b161a5f33af46bd5e6f096e3abd4a407c8b307ce4693089b471a42c3e
+Size (thunderbird-68.6.0.source.tar.xz) = 339643212 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = d3ade5620370965e397ba494ff0495aeef5af0d0
 SHA1 (patch-build_moz.configure_old.configure) = edd810f8d607697898ae315453719fe6c8c09bcc
 SHA1 (patch-comm_mail_installer_package-manifest.in) = 14e8977f690e579a8caf73326248323615e04803