Port details

mail/thunderbird-esr153.5.1

Mozilla Thunderbird is standalone mail and news that stands above

unaddressed

VuXML only, still affected

fixed

Maintainer: gecko@FreeBSD.org
Packages: thunderbird-esr 153.5.1
Upstream: up to date
CPE: mozilla:thunderbird_esr from the port
WWW: https://www.thunderbird.net/
Links: cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (15)

VuXML entries whose affected range this version has left.

Mozilla -- Memory safety bugsentered 2026-04-17

CVE-2026-5731

Mozilla -- IonMonkey-JIT bad stack writeentered 2025-07-24

CVE-2025-8027

Mozilla -- Incorrect computation of branch addressentered 2025-07-24

CVE-2025-8028

Mozilla -- 'javascript:' URLs executionentered 2025-07-24

CVE-2025-8029

Mozilla -- Insufficient input escapingentered 2025-07-24

CVE-2025-8030

Mozilla -- HTTP Basic Authentication credentials leakentered 2025-07-24

CVE-2025-8031

Mozilla -- XSLT document CSP bypassentered 2025-07-24

CVE-2025-8032

Mozilla -- nullptr dereferenceentered 2025-07-24

CVE-2025-8033

Mozilla -- Memory safety bugsentered 2025-07-24

CVE-2025-8034

Mozilla -- Memory safety bugsentered 2025-07-24

CVE-2025-8035

Mozilla -- CORS circumventionentered 2025-07-24

CVE-2025-8036

Mozilla -- cookie shadowingentered 2025-07-24

CVE-2025-8037

Mozilla -- Ignored paths while checking navigationsentered 2025-07-24

CVE-2025-8038

Mozilla -- Persisted search terms in the URL barentered 2025-07-24

CVE-2025-8039

Mozilla -- Memory safety bugsentered 2025-07-24

CVE-2025-8040

Commits (265)

2012-06-06 23:54Beat Gaetzi (beat) · 10.0.5

- Update to 10.0.5

Security:	http://www.vuxml.org/freebsd/bfecf7c1-af47-11e1-9580-4061862b8c22.html

a0f15a8413

2012-06-01 07:26Dirk Meyer (dinoex) · 10.0.4_1

- update png to 1.5.10

2b74a89bc8

2012-04-24 22:53Beat Gaetzi (beat) · 10.0.4

- Update to 10.0.4

Security:	http://www.vuxml.org/freebsd/380e8c56-8e32-11e1-9580-4061862b8c22.html

b4318fd96a

2012-04-18 16:57Beat Gaetzi (beat) · 10.0.3

- Add LATEST_LINK - Add CONFLICTS with newer Thunderbird versions

b6f63fc8da

2012-03-14 10:49Beat Gaetzi (beat) · 10.0.3

- Update to 10.0.3

Approved by:	portmgr (bapt, implicit)
Security:	http://www.vuxml.org/freebsd/a1050b8b-6db3-11e1-8b37-0011856a6e37.html
Feature safe:	yes

ba59c9f890

2012-02-17 20:48Florian Smeets (flo) · 10.0.2

update to 10.0.2

Security:	http://www.vuxml.org/freebsd/d7dbd2db-599c-11e1-a2fb-14dae9ebcf89.html

564add05c1

2012-02-13 20:26Florian Smeets (flo) · 10.0.1

update to 10.0.1

Security:	http://www.vuxml.org/freebsd/eba9aa94-549c-11e1-b6b7-0011856a6e37.html

7730e87831

2012-02-02 10:01Florian Smeets (flo) · 10.0

Fix fetch by catching up to last minute directory changes

847077d433

2012-01-31 22:23Florian Smeets (flo) · 10.0

update to 10.0

In collaboration with:	beat

ade7c2a308

2012-01-30 18:01Florian Smeets (flo) · 9.0

fix build on sparc64

49118d3084

2011-12-22 08:17Beat Gaetzi (beat) · 9.0

- Update Thunderbird to 9.0

Approved by:	portmgr (erwin, implicit)
Security:	http://www.vuxml.org/freebsd/e3ff776b-2ba6-11e1-93c6-0011856a6e37.html

9bff2d2e5e

2011-11-08 18:35Beat Gaetzi (beat) · 8.0

- Update Thunderbird to 8.0

c09b41ad1a

2011-10-19 17:05Beat Gaetzi (beat) · 7.0.1

- Register lightning as a global extension and doesn't create the XPI to   be installed manually.

Discussed with:	flo@ at EuroBSDCon DevSummit
Obtained from:	mail/enigmail port by ale@

a63d15f6da

2011-10-01 16:27Beat Gaetzi (beat) · 7.0.1

- Update to 7.0.1

7c52fbc17c

2011-09-28 18:18Beat Gaetzi (beat) · 7.0

- Check for affected FreeBSD versions in   patch-mozilla__xpcom__threads__nsThreadManager.cpp.

Submitted by:	h h <aakuusta AT gmail.com>

8bd37a7745

2011-09-28 00:23Beat Gaetzi (beat) · 7.0

- Update to 7.0 - Fix whitspaces

Thanks to:	flo@ for preparing this update

3adb44bf27

2011-09-06 22:16Florian Smeets (flo) · 6.0.2

update to 6.0.2, remove trust exceptions for certificates issued by Staat der Nederlanden

Security:	http://www.vuxml.org/freebsd/aa5bc971-d635-11e0-b3cf-080027ef73ec.html

1a6da26631

2011-09-01 17:26Florian Smeets (flo) · 6.0.1

register build conflict with spidermonkey

PR:		ports/160348
Submitted by:	Sam Cassiba <sam@cassiba.com>

2dc88ebf4b

2011-08-31 23:17Florian Smeets (flo) · 6.0.1

update to 6.0.1, which disables the DigiNotar certificate authority

7e4bec8258

2011-08-25 10:35Alex Dupre (ale) · 6.0_2

Add a patch to fix enigmail and bump PORTREVISION.

Issue analysis:
fire_glxtest_process() forks a new process, but doesn't wait(2) for it.
So when wait(2) is invoked later it may return a pid of this child before any
other child.

Submitted by:	avg
Approved by:	flo

2c0f349438

2011-08-23 20:39Koop Mast (kwm) · 6.0_1

Chase libnotify, libproxy and webkit-gtk2 shlib changes, and fix build where needed.

fe61bf1eb4

2011-08-18 14:47Alex Dupre (ale) · 6.0

Remove empty patch.

bfe285a6fb

2011-08-18 14:40Alex Dupre (ale) · 6.0

Allow lightning xpi to be installed on current tb version.

Submitted by:	Jimmie James <jimmiejaz@gmail.com>

9e7c55e6c9

2011-08-18 12:01Alex Dupre (ale) · 6.0

Port generalization.

Approved by:	flo

87b5e43a92

2011-08-16 20:23Florian Smeets (flo) · 6.0

update to 6.0

Security:	http://www.vuxml.org/freebsd/834591a9-c82f-11e0-897d-6c626dd55a41.html

9e1fbd42bf

2011-07-16 00:20Florian Smeets (flo) · 5.0

- require cairo>=1.10.2_1,1 to catch build failuers early

The cairo dependancy is usually added by bsd.gecko.mk, but for thunderbird 5 we
need a spcific version.

9e722c55c6

2011-07-04 23:27Florian Smeets (flo) · 5.0

add an option to build the lightning (calendar) extension

Submitted by:	mi (original version)

3959fb2a1f

2011-06-30 20:19Florian Smeets (flo) · 5.0

update thunderbird to 5.0

d116b360dd

2011-06-21 22:38Florian Smeets (flo) · 3.1.11

- update to 3.1.11

Seccurity:	http://www.vuxml.org/freebsd/dfe40cff-9c3f-11e0-9bec-6c626dd55a41.html

9aa2347461

2011-04-29 08:37Florian Smeets (flo) · 3.1.10

- update to 3.1.10

Security:	http://www.vuxml.org/freebsd/04b7d46c-7226-11e0-813a-6c626dd55a41.html

daa3549b75

2011-03-15 15:12Bernhard Froehlich (decke) · 3.1.9

- Fix Thunderbird startscript when LOCALBASE is set

Submitted by:	Kris Moore <kris@pcbsd.org>

1448ec97e7

2011-03-05 00:26Beat Gaetzi (beat) · 3.1.9

- Update to 3.1.9

5514da84a7

2011-03-01 23:27Beat Gaetzi (beat) · 3.1.8

- Update to 3.1.8 - Add support for powerpc64 [1]

Submitted by:	andreast@ [1]

8f359d5133

2010-12-10 15:51Beat Gaetzi (beat) · 3.1.7

- Update to 3.1.7 - Drop MD5 checksum - Replace CONFLICTS with CONFLICTS_INSTALL

Security:	http://www.vuxml.org/freebsd/1d8ff4a2-0445-11e0-8e32-000f20797ede.html

5067484c50

2010-12-04 08:34Ade Lovett (ade) · 3.1.6

Sync to new bsd.autotools.mk

4a8684e352

2010-10-28 17:42Beat Gaetzi (beat) · 3.1.6

- Update to 3.1.6

Security:	http://www.vuxml.org/freebsd/c223b00d-e272-11df-8e32-000f20797ede.html

b83f584cce

2010-10-20 19:01Beat Gaetzi (beat) · 3.1.5

- Update to 3.1.5 - Unbreak with recent versions of GCC [1]

Submitted by:	Andriy Gapon <avg AT icyb.net.ua> [1]
Security:	http://www.vuxml.org/freebsd/c4f067b9-dc4a-11df-8e32-000f20797ede.html

742c7aa805

2010-09-17 12:18Beat Gaetzi (beat) · 3.1.4

- Update to 3.1.4

211e77ca58

2010-09-08 10:14Beat Gaetzi (beat) · 3.1.3

- Update to 3.1.3

Security:	http://www.vuxml.org/freebsd/4a21ce2c-bb13-11df-8e32-000f20797ede.html

a3aa8af16e

2010-08-06 11:11Beat Gaetzi (beat) · 3.1.2

- Update to 3.1.2

92bdbe781e

2010-08-03 22:55Beat Gaetzi (beat) · 3.1.1

- Update to 3.1.1

Thanks to:	Andreas Tobler <andreast-list AT fgznet.ch>

5dd0796d28

2010-06-23 10:13Beat Gaetzi (beat) · 2.0.0.24_1

- Mark DEPRECATED: Upstream support dropped. Please consider using   mail/thunderbird3 instead.

Feature safe:	yes

51f174da66

2010-03-28 15:19Dirk Meyer (dinoex) · 2.0.0.24_1

- fix build for png-1.4.1

d38a81ec79

2010-03-28 08:47Dirk Meyer (dinoex) · 2.0.0.24_1

- update to 1.4.1 Reviewed by:	exp8 run on pointyhat Supported by:	miwi

de78af3ac5

2010-03-19 10:32Beat Gaetzi (beat) · 2.0.0.24

- Update to 2.0.0.24

a5785558f6

2010-02-05 12:46Dirk Meyer (dinoex) · 2.0.0.23_2

- update to jpeg-8

ca9c60461c

2009-12-14 16:38Beat Gaetzi (beat) · 2.0.0.23_1

- Add CONFLICT with Thunderbird 3

1306043624

2009-11-26 09:30Beat Gaetzi (beat) · 2.0.0.23_1

- Add ftp to MOZ_PROTOCOLS. This allows to define a calendar file located   on a ftp server in xpi-lightning. - Bump PORTREVISION.

b17ec0000f

2009-09-28 23:10Beat Gaetzi (beat) · 2.0.0.23

- Add powerpc support

Submitted by:	Andreas Tobler <andreast-list AT fgznet.ch>
With hat:	gecko
Feature safe:	yes

081a643363

2009-08-22 13:52Beat Gaetzi (beat) · 2.0.0.23

- Update to 2.0.0.23

Security:	http://www.mozilla.org/security/announce/2009/mfsa2009-42.html
With hat:	gecko

31edcd7767

lang/php82 +57 12 CVEs · 9.2 fixed 8.2.35 VuXML	Oct 21
lang/php83 +57 12 CVEs · 9.2 fixed 8.3.36 VuXML	Oct 21
lang/php84 +55 13 CVEs · 9.2 fixed 8.4.27 VuXML	Oct 21
lang/php85 +54 13 CVEs · 9.2 fixed 8.5.12 VuXML	Oct 21
lang/php86 2 CVEs · 9.2 → 8.6.0.r4 VuXML	Oct 21
www/linux-chrome 1,436 CVEs · 9.8	Oct 20
graphics/py-pillow 2 CVEs · 8.2	Oct 19
textproc/antiword 2 CVEs · 6.8	Oct 16
databases/mariadb1011-client +1 14 CVEs · 9.9 fixed 10.11.19	Oct 16
databases/mariadb114-client +1 14 CVEs · 9.9 fixed 11.4.13	Oct 16
databases/mariadb118-client +1 14 CVEs · 9.9 fixed 11.8.9	Oct 16
databases/mariadb123-client +1 15 CVEs · 9.9 fixed 12.3.3	Oct 16
net/freerdp 53 CVEs · 9.4	Oct 16
net/freerdp3 33 CVEs · 8.7 fixed 3.32.2	Oct 16
astro/cfitsio 2 CVEs · 6.9	Oct 15

node	Oct 24
traefik	Oct 24
vifm	Oct 23
gitlab-ce	Oct 23
ca_root_nss	Oct 23
mailpit	Oct 23
keycloak	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
brotli	Oct 22
chromium	Oct 22