CVS commit: pkgsrc/mail/thunderbird

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sun May 18 00:54:58 UTC 2025

Modified Files:
        pkgsrc/mail/thunderbird: Makefile PLIST distinfo

Log Message:
mail/thunderbird: Update to 138.0.1

Changelog:
138.0.1:
What's Fixed

fixed
Thunderbird could crash when importing Outlook messages

fixed
Messages were permanently deleted if Trash folder had non-ASCII Unicode characters

fixed
Visual and UX improvements

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2025-35
#CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird
#CVE-2025-3877: Unsolicited File Download, Disk Space Exhaustion, and
 Credential Leakage via mailbox:/// Links
#CVE-2025-3909: JavaScript Execution via Spoofed PDF Attachment and file:///
 Link
#CVE-2025-3932: Tracking Links in Attachments Bypassed Remote Content Blocking

138.0:
What's New

new
New mail alert now includes message disposition buttons

new
New mail notification customization added to macOS Settings

What's Changed

changed
Changed color override defaults with high contrast mode on macOS and Linux

What's Fixed

fixed
macOS notifications displayed two logos

fixed
Message preview truncation in notifications improved

fixed
Wrong day of week displayed for some emails

fixed
In dark mode with light theme, message reader still displayed in dark mode

fixed
Message link and text colors were incorrect when using Dark Reader

fixed
Unchecking "Show all headers" in Message Header Settings closed dialog

fixed
Address book did not match users when case differed in some instances

fixed
Menu items to manage folders were not disabled in offline mode

fixed
Using Delete column in "Search Messages..." window could delete other messages

fixed
Ctrl or Shift selecting multiple messages reset when dragging across a message

fixed
Newsgroups could no longer be re-ordered in the folder tree via drag and drop

fixed
Windows users with non-ASCII folder names and profile paths could not view emails

fixed
OpenPGP key was not updated when accepted key was reimported with new identities

fixed
Dual signed (PGP and S/MIME) emails were not displayed

fixed
Notification duration preference enabled when system notifications were enabled

fixed
Thunderbird could crash when adaptive message filtering was enabled

fixed
CardDAV synchronization to Zimbra server failed

fixed
Keyboard navigation was not possible when first header button was disabled

fixed
Folders missing from view when "Show only subscribed folders" was not selected

fixed
Nickserv messages appeared during successful authentication

fixed
Global indexing failed when processing email with invalid calendar data

fixed
Clicking a mid: link in Calendar opened two copies of the message

fixed
Some calendar requests were blocked due to opaque response blocking

fixed
Visual and UX improvements

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2025-31
#CVE-2025-2817: Privilege escalation in Thunderbird Updater
#CVE-2025-4082: WebGL shader attribute memory corruption in Thunderbird for
 macOS
#CVE-2025-4083: Process isolation bypass using "javascript:" URI links in
 cross-origin frames
#CVE-2025-4085: Potential information leakage and privilege escalation in
 UITour actor
#CVE-2025-4086: Specially crafted filename could be used to obscure download
 type
#CVE-2025-4087: Unsafe attribute access during XPath parsing
#CVE-2025-4088: Cross-site request forgery via storage access API redirects
#CVE-2025-4089: Potential local code execution in "copy as cURL" command
#CVE-2025-4090: Leaked library paths in Thunderbird for Android
#CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138,
 Firefox ESR 128.10, and Thunderbird 128.10
#CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138


To generate a diff of this commit:
cvs rdiff -u -r1.343 -r1.344 pkgsrc/mail/thunderbird/Makefile
cvs rdiff -u -r1.97 -r1.98 pkgsrc/mail/thunderbird/PLIST
cvs rdiff -u -r1.282 -r1.283 pkgsrc/mail/thunderbird/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/thunderbird/Makefile
diff -u pkgsrc/mail/thunderbird/Makefile:1.343 pkgsrc/mail/thunderbird/Makefile:1.344
--- pkgsrc/mail/thunderbird/Makefile:1.343      Fri May  9 19:37:14 2025
+++ pkgsrc/mail/thunderbird/Makefile    Sun May 18 00:54:58 2025
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.343 2025/05/09 19:37:14 wiz Exp $
+# $NetBSD: Makefile,v 1.344 2025/05/18 00:54:58 ryoon Exp $
 
 DISTNAME=      thunderbird-${TB_VER}.source
 PKGNAME=       thunderbird-${TB_VER:S/esr//}
-PKGREVISION=   1
-TB_VER=                137.0.2
+TB_VER=                138.0.1
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_MOZILLA:=thunderbird/releases/${TB_VER}/source/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/mail/thunderbird/PLIST
diff -u pkgsrc/mail/thunderbird/PLIST:1.97 pkgsrc/mail/thunderbird/PLIST:1.98
--- pkgsrc/mail/thunderbird/PLIST:1.97  Wed Apr 30 03:47:13 2025
+++ pkgsrc/mail/thunderbird/PLIST       Sun May 18 00:54:58 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.97 2025/04/30 03:47:13 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.98 2025/05/18 00:54:58 ryoon Exp $
 bin/thunderbird
 lib/thunderbird/application.ini
 lib/thunderbird/chrome/icons/default/TB-symbolic.svg
@@ -20,6 +20,7 @@ lib/thunderbird/defaults/messenger/mailV
 lib/thunderbird/defaults/pref/channel-prefs.js
 lib/thunderbird/dependentlibs.list
 lib/thunderbird/glxtest
+lib/thunderbird/interesting_serverknobs.json
 lib/thunderbird/isp/Bogofilter.sfd
 lib/thunderbird/isp/DSPAM.sfd
 lib/thunderbird/isp/POPFile.sfd

Index: pkgsrc/mail/thunderbird/distinfo
diff -u pkgsrc/mail/thunderbird/distinfo:1.282 pkgsrc/mail/thunderbird/distinfo:1.283
--- pkgsrc/mail/thunderbird/distinfo:1.282      Wed Apr 30 03:47:13 2025
+++ pkgsrc/mail/thunderbird/distinfo    Sun May 18 00:54:58 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.282 2025/04/30 03:47:13 ryoon Exp $
+$NetBSD: distinfo,v 1.283 2025/05/18 00:54:58 ryoon Exp $
 
-BLAKE2s (thunderbird-137.0.2.source.tar.xz) = c34ed084bc88c0f515e34382ec9fdf0b29015f0ce43a4720aba3e2c5bc15231a
-SHA512 (thunderbird-137.0.2.source.tar.xz) = 6cc631d14780f1bf9224208881c14834cef078688ffa006f50dfdd3a4e81c95255fb455f530a09a0f296dc494af104aefe2414ac53c6b8c9956ca1a9d7a7e053
-Size (thunderbird-137.0.2.source.tar.xz) = 724560064 bytes
+BLAKE2s (thunderbird-138.0.1.source.tar.xz) = f7c611e3704cdb446685ca28dd10932333f32016d775c52cd4fc17b5daea4cce
+SHA512 (thunderbird-138.0.1.source.tar.xz) = 2e71ee537292ec1a49237e93c43ed4c1a9eae58becfc7fa9ca0daf1e982c38704cb6d44e92b1bf7b45c5b8c27b23eb3aa7f48b375580f49ee60884dadc5d85b5
+Size (thunderbird-138.0.1.source.tar.xz) = 758760604 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678