thunderbird-140.0esr

[zeckma]

New ESR

[zeckma]

New features:

• Implemented enterprise policy to allow granular in-app notification control
• New mail alert now includes message disposition buttons
• Added 'Mark as Read' and 'Delete' actions to mail notifications
• Added 'Mark as Spam' and 'Mark as Starred' actions to mail notifications
• Support dark reader for the message pane
• Messages are automatically adapted to dark mode with a quick toggle in the header
• Message filters are now available in the Folder Pane context menu
• Added horizontal threadpane scrolling mail.threadpane.table.horizontal_scroll
• Implemented customizable row count for Cards View in 'Appearance' settings
• Implemented ability to manually sort folders in the folder pane
• New "Appearance" Settings UI to globally control message threading/sorting order
• Added checkbox to select/unselect all calendars in the calendar setup wizard
• Account Hub enabled by default for second email setup
• Add-ons: Added support for specifying a cookieStoreId when creating a space
• Added Thunderbird-specific loading symbol

Changes:

• Removed obsolete preference extensions.overlayloader.loglevel
• CardDAV address books and calendars now use the same OAuth2 code as mail
• Display junk state and allow toggling it from top of message context menu
• Subscribe/Unsubscribe buttons were removed from the IMAP subscribe dialog
• Ignore unsupported subkeys/signatures when importing compliant OpenPGP keys
• Some generic appearance settings were moved from General to Appearance section
• Add-ons: browser.messages.listAttachments() now returns attachment headers
• Set calendar.alarms.showmissed preference to false by default
• Exporting a calendar to .ics did not include the calendar name

Full fixes are at ​https://www.thunderbird.net/en-US/thunderbird/140.0esr/releasenotes/index.html#fixes. Not listing them here as there are a lot.

Surprisingly, I don't see any security fixes. Anyhow, that makes things a bit easier!

[zeckma]

Seems the source isn't available yet. The release notes are there but the source code isn't. Gonna have to put this in waiting.

[zeckma]

Source code is now out.

[zeckma]

There are security fixes too but they have not been made public yet. As such, raising to elevated but I don't have more information.

[zeckma]

Fixed at 04ebfac664821315196cb0799e04149545832d61. Leaving open until security information comes out and SA filed.

[zeckma]

Security fixes are the same as the ones mentioned in #21766 besides the Android specific fixes. Thus, the SA for Thunderbird won't differ from Firefox that much at all. It should just be mentioned that the fixes matter most in a browser/browser-like context, and we're dealing with an email client. But as it has browser features, it still matters a good bit.

[zeckma]

SA-12.3-067 issued.

Watch out for shadow updates. MD5sum may get a mismatch in the future.