CVS commit: pkgsrc/mail/thunderbird

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Jul 23 20:58:30 UTC 2025

Modified Files:
        pkgsrc/mail/thunderbird: Makefile distinfo
        pkgsrc/mail/thunderbird/patches:
            patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc
            patch-toolkit_mozapps_installer_packager.mk

Log Message:
mail/thunderbird: Update to 141.0

Changelog:
141.0:
What's New
new
Added 'Archive' action to mail notifications

new
Composer now shows a warning if user's configured OpenPGP key expires soon

What's Fixed
fixed
Thunderbird could crash when parsing message state

fixed
The English string for the Angry emoji was incorrectly named as the Yell emoji

fixed
Incorrect roaming data directory caused regression on Windows and macOS

fixed
Message archive folder creation could silently stop during async folder creation

fixed
Folder compaction could fail to complete due to folder write errors

fixed
Status bar showed previously detached attachment when hovering over a new one

fixed
URLs for hovered links in status bar could be immediately overwritten

fixed
'Search Messages...' dialog could not be opened outside the email tab

fixed
Creating an event or task from mail failed if the mail was opened in a tab

fixed
NNTP message pane did not show network error page when network was lost

fixed
Delete button could remove attachment instead of message

fixed
Folders sorted incorrectly when manually ordering them

fixed
New folders were not added alphabetically if folders manually reordered beforehand

fixed
'Any Number' was unavailable in address book search with 'Match all of the following'

fixed
Contact was not found in Advanced Address Book Search if phone number had a period

fixed
Thunderbird could crash on startup for POP3

fixed
'news:' URIs without specific server had incorrect format displayed in status bar

fixed
Enterprise policy use was not indicated in about:preferences with a link to about:policies

fixed
Visual and UX improvements

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2025-61
#CVE-2025-8027: JavaScript engine only wrote partial return value to stack
#CVE-2025-8028: Large branch table could lead to truncated instruction
#CVE-2025-8029: javascript: URLs executed on object and embed tags
#CVE-2025-8036: DNS rebinding circumvents CORS
#CVE-2025-8037: Nameless cookies shadow secure cookies
#CVE-2025-8030: Potential user-assisted code execution in "Copy as cURL" command
#CVE-2025-8043: Incorrect URL truncation
#CVE-2025-8031: Incorrect URL stripping in CSP reports
#CVE-2025-8032: XSLT documents could bypass CSP
#CVE-2025-8038: CSP frame-src was not correctly enforced for paths
#CVE-2025-8039: Search terms persisted in URL bar
#CVE-2025-8033: Incorrect JavaScript state machine for generators
#CVE-2025-8044: Memory safety bugs fixed in Firefox 141 and Thunderbird 141
#CVE-2025-8034: Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
#CVE-2025-8040: Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
#CVE-2025-8035: Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141


To generate a diff of this commit:
cvs rdiff -u -r1.345 -r1.346 pkgsrc/mail/thunderbird/Makefile
cvs rdiff -u -r1.284 -r1.285 pkgsrc/mail/thunderbird/distinfo
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc
cvs rdiff -u -r1.5 -r1.6 \
    pkgsrc/mail/thunderbird/patches/patch-toolkit_mozapps_installer_packager.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/thunderbird/Makefile
diff -u pkgsrc/mail/thunderbird/Makefile:1.345 pkgsrc/mail/thunderbird/Makefile:1.346
--- pkgsrc/mail/thunderbird/Makefile:1.345      Wed Jul 23 19:18:45 2025
+++ pkgsrc/mail/thunderbird/Makefile    Wed Jul 23 20:58:30 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.345 2025/07/23 19:18:45 ryoon Exp $
+# $NetBSD: Makefile,v 1.346 2025/07/23 20:58:30 ryoon Exp $
 
 DISTNAME=      thunderbird-${TB_VER}.source
 PKGNAME=       thunderbird-${TB_VER:S/esr//}
-TB_VER=                140.0.1
+TB_VER=                141.0
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_MOZILLA:=thunderbird/releases/${TB_VER}/source/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/mail/thunderbird/distinfo
diff -u pkgsrc/mail/thunderbird/distinfo:1.284 pkgsrc/mail/thunderbird/distinfo:1.285
--- pkgsrc/mail/thunderbird/distinfo:1.284      Wed Jul 23 19:18:45 2025
+++ pkgsrc/mail/thunderbird/distinfo    Wed Jul 23 20:58:30 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.284 2025/07/23 19:18:45 ryoon Exp $
+$NetBSD: distinfo,v 1.285 2025/07/23 20:58:30 ryoon Exp $
 
-BLAKE2s (thunderbird-140.0.1.source.tar.xz) = 0bc683bc0878780bc5dec5e029d03f5f6a61b5a0bab7570f35ba7c57b6d93c34
-SHA512 (thunderbird-140.0.1.source.tar.xz) = fbef1d0228c49fc9c11425b6be03bb7e44e6abc6f2027ee23317270ca2c6b0a935bb41b38667acf014bd9e1166cbe62754f1e919e04f2355dc4c833e015c78b8
-Size (thunderbird-140.0.1.source.tar.xz) = 760372872 bytes
+BLAKE2s (thunderbird-141.0.source.tar.xz) = 11ce5a8329afb215e4a7e02dc3eaed94e31d3460fd80aac1bce99f2fd9be8062
+SHA512 (thunderbird-141.0.source.tar.xz) = cd747c0831532f90685975567102d1bdb90a780e21209fe4b7bddf2d84ac88576766706e95e22043a30a8a89b6d3daffb56a68c3ccc4a300b8236b20d4fca675
+Size (thunderbird-141.0.source.tar.xz) = 756973792 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
@@ -35,7 +35,7 @@ SHA1 (patch-third__party_abseil-cpp_absl
 SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_vdso__support.cc) = f9c44d0d6fd952296f23c24f56053958b30d8e5c
 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = d0454784eb72be49162f619579e060a0de3c480f
-SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 455be625b5de2f6f1f4b2dbb6c8cb33ca16c2583
+SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = fc203b7a8c1557303e61cc598dc94c5cccf6f0a4
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 4cb0e1c88dc83370024ed1aac7f75445b9f98df8
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
 SHA1 (patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc) = 6909c4da9e7b3785252e5bce9be0ff47ebb87e01
@@ -46,6 +46,6 @@ SHA1 (patch-third__party_sqlite3_src_moz
 SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b
 SHA1 (patch-toolkit_moz.configure) = 1306e7ac3c3939886aff38a58dd3162e6517409b
-SHA1 (patch-toolkit_mozapps_installer_packager.mk) = 706635b76a7b525794aba95e95544f09e18bb662
+SHA1 (patch-toolkit_mozapps_installer_packager.mk) = c77481a1f8fe1e237b7fe87e3e586ca886ac1d3d
 SHA1 (patch-xpcom_base_nscore.h) = 1ac4d34d3c9e80bc1ac966c6c84cb320bc0fa1ec
 SHA1 (patch-xpcom_reflect_xptcall_md_unix_moz.build) = 8980398051fa16c7283acb6d323419993cce1420

Index: pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc
diff -u pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc:1.2 
pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc:1.3
--- pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc:1.2      Wed Apr 30 03:47:13 2025
+++ pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc  Wed Jul 23 20:58:30 2025
@@ -1,11 +1,11 @@
-$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc,v 1.2 2025/04/30 03:47:13 ryoon Exp $
+$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc,v 1.3 2025/07/23 20:58:30 ryoon Exp $
 
---- third_party/libwebrtc/modules/desktop_capture/linux/wayland/egl_dmabuf.cc.orig     2023-03-30 21:16:09.000000000 +0000
+--- third_party/libwebrtc/modules/desktop_capture/linux/wayland/egl_dmabuf.cc.orig     2025-07-17 18:03:34.000000000 +0000
 +++ third_party/libwebrtc/modules/desktop_capture/linux/wayland/egl_dmabuf.cc
-@@ -10,12 +10,16 @@
- 
+@@ -11,12 +11,16 @@
  #include "modules/desktop_capture/linux/wayland/egl_dmabuf.h"
  
+ #include <EGL/eglext.h>
 +#if defined(__linux__)
  #include <asm/ioctl.h>
 +#endif

Index: pkgsrc/mail/thunderbird/patches/patch-toolkit_mozapps_installer_packager.mk
diff -u pkgsrc/mail/thunderbird/patches/patch-toolkit_mozapps_installer_packager.mk:1.5 pkgsrc/mail/thunderbird/patches/patch-toolkit_mozapps_installer_packager.mk:1.6
--- pkgsrc/mail/thunderbird/patches/patch-toolkit_mozapps_installer_packager.mk:1.5     Wed Apr 30 03:47:13 2025
+++ pkgsrc/mail/thunderbird/patches/patch-toolkit_mozapps_installer_packager.mk Wed Jul 23 20:58:30 2025
@@ -1,10 +1,10 @@
-$NetBSD: patch-toolkit_mozapps_installer_packager.mk,v 1.5 2025/04/30 03:47:13 ryoon Exp $
+$NetBSD: patch-toolkit_mozapps_installer_packager.mk,v 1.6 2025/07/23 20:58:30 ryoon Exp $
 
 * Symbolic link to lib/firefox/firefox causes 'Couldn't load XPCOM.' error.
 
---- toolkit/mozapps/installer/packager.mk.orig 2020-01-29 07:05:13.000000000 +0000
+--- toolkit/mozapps/installer/packager.mk.orig 2025-07-17 18:03:38.000000000 +0000
 +++ toolkit/mozapps/installer/packager.mk
-@@ -145,7 +145,7 @@ endif
+@@ -169,7 +169,7 @@ endif
          (cd $(DESTDIR)$(installdir) && tar -xf -)
        $(NSINSTALL) -D $(DESTDIR)$(bindir)
        $(RM) -f $(DESTDIR)$(bindir)/$(MOZ_APP_NAME)
@@ -12,4 +12,4 @@ $NetBSD: patch-toolkit_mozapps_installer
 +      #ln -s $(installdir)/$(MOZ_APP_NAME) $(DESTDIR)$(bindir)
  
  upload:
-       $(PYTHON3) -u $(MOZILLA_DIR)/build/upload.py --base-path $(DIST) $(UPLOAD_FILES)
+       $(PYTHON3) -u $(MOZILLA_DIR)/build/upload.py --base-path $(ABS_DIST) $(UPLOAD_FILES)