CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

mail/thunderbird-esr153.5.1

Mozilla Thunderbird is standalone mail and news that stands above

Maintainer
gecko@FreeBSD.org
Packages
thunderbird-esr 153.5.1
Upstream
up to date
CPE
mozilla:thunderbird_esr from the port
WWW
https://www.thunderbird.net/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (15)

VuXML entries whose affected range this version has left.

Commits (265)

Joe Marcus Clarke (marcus) · 1.0.7_5
* Re-enable movemail and RSS support [1] * Remove a line that is no longer needed

PR:		89871 [1]
7327110b07
Jeremy Messenger (mezz) · 1.0.7_4
Fix all those ports to find libnssckbi.so in the correct place to allow those SSL certificates work again. Somehow, this patch was lost in the big change, so bring it back. Bump PORTREVISION on all of those ports.

PR:		ports/89796
Reported by:	Christoph Moench-Tegeder <cmt@burggraben.net>
64a923ea98
Michael Johnson (ahze) · 1.0.7_3
- Fix typo in CONFLICTS

Submitted by:	yattaran@gmail.com
1bb60423d3
Michael Johnson (ahze) · 1.0.7_3
- Update WWW
2fb776f04b
Michael Johnson (ahze) · 1.0.7_3
- Update firefox to 1.5 - Add Makefile.common   o A new build/install system for gecko ports, Makefile.common     includes many generic routines and common tasks.   o Fix ld-run-path in all gecko's by using -Wl,-rpath,${moz_libdir}     thus removing the need to have a startup script for ports that     depend on gecko. [2]   o Use system libm, nss, nspr in all gecko ports

- Add bsd.gecko.mk
  o This is the predecessor to WITH_MOZILLA=[mozilla|firefox|...]
    with a more robust way of detecting a gecko a end user wishs to
    use.
  o bsd.gecko.mk abstracts the selection of gecko-based backends. It
    allows users and porters to support any available gecko backend
    without needing to build many conditional tests. ${USE_GECKO} is the
    list of backends that your port can handle, and ${GECKO} is set by
    bsd.gecko.mk to be the chosen backend. Users set ${WITH_GECKO} to the
    list of gecko backends they want on their system.

  Port Makefile example:

  USE_GECKO=firefox mozilla seamonkey thunderbird
  .include <bsd.port.pre.mk>
  .include "${.CURDIR}/../../www/mozilla/bsd.gecko.mk"

  End user example:
  WITH_GECKO=seamonkey firefox

  We highly recommend moving away from using WITH_MOZILLA and switching to
  USE/WITH_GECKO.

PR:		89052 [2]
Submitted by:	vs [2]
Obtained from:	www/firefox
Thanks to:	adamw, marcus, and mezz for ideas, bug squashing, and more
		sajd from irc.freenode.org/#FreeBSD-Gnome for
		 pointing out many bugs
36353c589f
Pav Lucistnik (pav) · 1.0.7_1
- Add SHA256 checksums
e05544d7ba
Joe Marcus Clarke (marcus) · 1.0.7_1
Bump PORTREVISION to chase the glib20 shared library update.
235c907ae5
Joe Marcus Clarke (marcus) · 1.0.7
Update to 1.0.7.

Security:	See http://www.mozilla.org/projects/security/known-vulnerabilities.html for security bugs fixed in this release.
afdbc09578
Jeremy Messenger (mezz) · 1.0.6_3
- Fix the sed for libesd and kill the major version of library   (libesd.so.2 -> libesd.so). [1] - Update Java plugins by remove old and correct Java 1.5 plugin path. [2] - Bump the PORTREVISION.

PR:		ports/86430 [1]
Submitted by:	Mark Hobden <markhobden@gmail.com> [1]
		glewis [2]
f0120ed0a2
Jeremy Messenger (mezz) · 1.0.6_2
- Fix the plist. [1] - Fix the build to actually enable iconv, without it caused locale garbled in   some places. I accidented remove iconv hack in the big change. Oops! - Bump the PORTREVISION.

Reported by:	krismail [1], Junji Nakanishi <nakanishi@daemonfreaks.com>
Sharp eye:	marcus (he found that I lost iconv hack)
f446e728b4
Jeremy Messenger (mezz) · 1.0.6_1
- Repo copy a lot of changes from www/firefox/Makefile. The best part is that   before it would install in the strange place like this.

${X11BASE}/lib/thunderbird/include/thunderbird-1.0.6

  Now it will install in the correct place like firefox:

	${X11BASE}/include/thunderbird

  Also, get *.pc and idl files install.
- Didn't copy following from www/firefox/Makefile:
	* plugins stuff, because it's known cause the stability problem like
  	  crash.
	* EXTRA_SCRIPTS=${PORTNAME}.rb, thunderbird doesn't need it.
- Make portlint happier.
- Add Java 5 plugins support. [1]
- Use system's libm (/usr/src/lib/msun), nss, nspr and etc. Also, do
  not extract those. Better explain, use external dependencies. [1]
- Teach firefox-config and *.pc files for nspr that will making other
  third apps to buildable like epiphany, vlc-devel's mozilla plugins
  and etc. Have been tested with full GNOME 2.11.x build too.
- Add four patches: [1]

	patch-bugzilla243151:
		https://bugzilla.mozilla.org/show_bug.cgi?id=243151

	patch-jsosdep:
		Fix the FreeBSD define

	patch-oji-threads:
		64-bit wide pthread_t

	patch-xptcinvoke_x86_64_linux:
		Setting a possibly uninitialized variable (value).

- Fix a crash that can occur using gtk+-2.7 and possibly 2.6.10 when closing
  windows. https://bugzilla.mozilla.org/show_bug.cgi?id=3002 [2]
- Get rid of FIREFOX and FF_VER, best to use PORTNAME and PORTVERSION
  varibles that are arleady exist and lesser complicate.
- Change all hardcore of 'thunderbird' to PORTNAME.
- Change a manual loop for patch all.js to find(1), so we can sleep
  on it.

Submitted by:	mi [1], marcus [2]
Reviewed by:	my team, FreeBSD GNOME Team.
48c35e710c
Michael Johnson (ahze) · 1.0.6
- Update to 1.0.6
5f3c71b232
Joe Marcus Clarke (marcus) · 1.0.5
Update to 1.0.5.  This is primarily a security and stability fix release.

Security:	See http://www.mozilla.org/projects/security/known-vulnerabilities.html for a list of vulnerabilities fixed in 1.0.5
3829f4fdff
Joe Marcus Clarke (marcus) · 1.0.2_1
Correct the GNOME menu icon location.  I'm not bumping PORTREVISION as this only affects GNOME users, and is a small change for such a long compilation.

PR:		80937
Submitted by:	NIIMI Satoshi <sa2c@sa2c.net>
6133806e4b
Michael Johnson (ahze) · 1.0.2_1
- Add missing quite to fix install

Reported by:	verm@darkbeer.org
31f660eb35
Michael Johnson (ahze) · 1.0.2_1
- Install .desktop file in share/applications instead of   share/gnome/applications so we can remove the gnomehier   dependency so non-gnome users don't have to install a bunch   of un-needed gnome directories. - Remove WITH_MENU option from mozilla[-devel], .desktop file   will always be installed now.
5baac38237
Michael Johnson (ahze) · 1.0.2_1
- Remove mng support, it has never worked
c45a0ef4b2
Joe Marcus Clarke (marcus) · 1.0.2_1
* Update to 1.0.2 to fix security issues (see   http://www.vuxml.org/freebsd/7d2aac52-9c6b-11d9-99a7-000a95bc6fae.html for   more details) * Cleanup home directories to make migration easier [1] * Add an improved startup script [1] * Support GConf for external protocol handlers

PR:		75837 [1]
Submitted by:	Jose M Rodriguez (freebsd) <josemi@freebsd.jazztel.es> [1]
Approved by:	portmgr (implicit)
d3dea5711e
Joe Marcus Clarke (marcus) · 1.0_2
Bump PORTREVISION to chase the glib20 shared lib version change.
b3458f652e
Joe Marcus Clarke (marcus) · 1.0_1
Update freetype2 to 2.1.9, and patch Mozilla and friends accordingly. Note: since 2.1.9 is ABI compatible with 2.1.7, no recompilation is necessary.

PR:		78385
Submitted by:	lesi
08545d0dfd
Michael Johnson (ahze) · 1.0_1
- Fix expr usage for 4.x since expr on 4.x   is not POSIX compliant. [1]

Submitted by:	girgen [1]
6d3f2a711b
Michael Johnson (ahze) · 1.0_1
- Remove WITH_NEW_ICON knob - Mozilla license team has approved the FreeBSD Gnome team to   use official branding for firefox and thunderbird [1]   o Add  --enable-official-branding to mozconfig   o Install official thunderbird/firefox icon as default.xpm icon - Fix error when running firefox/thunderbird -v [2] - Bump PORTREVISION

References:
	http://www.mozilla.org/foundation/licensing.html [1]
	http://people.freebsd.org/~ahze/firefox_thunderbird-approved.txt [1]
PR:		ports/75262 [2]
Submitted by:	girgen [2]
b18bfe2076
Michael Johnson (ahze) · 1.0
Add Encoding type to desktop file to validate via desktop-file-validate
894f4f9282
Joe Marcus Clarke (marcus) · 1.0
Correct the MASTER_SITE_SUBDIR in order to fix fetching.

Submitted by:	daichi
f8f367632a
Joe Marcus Clarke (marcus) · 1.0
Complete a more extensive upgrade to 1.0 that ensures the isp directory is created, plus disables CUPS support until a better solution can be found for the NSS/OpenSSL symbol conflict crash.
9dc4198237
Adam Weinberger (adamw) · 1.0
Update to 1.0.
99eb2a1689
Adam Weinberger (adamw) · 1.0.rc
Update to 1.0rc.
f37445a85e
Joe Marcus Clarke (marcus) · 0.9_3
* Instead of using Xvfb, and evil black magic to create the extensions   repository, use the hidden "-register" option instead.  This has the   advantage of not requiring an X DISPLAY and not modifying any   preferences. * Add i18n support to the Thunderbird startup script [1] * Link nss with -Bsymbolic to avoid symbol conflicts with OpenSSL.  This   should help alleviate the CUPS printing problem

PR:		73839 [1]
Submitted by:	Jose M Rodriguez <josemi@freebsd.jazztel.es> [1]
abbdc87752
Joe Marcus Clarke (marcus) · 0.9_2
* Fix Movemail and RSS support * Install a GNOME desktop icon [1] * Correct installation when root's shell is non-standard (e.g.   /usr/local/bin/bash) [2]

Submitted by:	ahze [1]
		Clemens Fischer <ino-qc@spotteswoode.de.eu.org> [2]
67b5465482
Joe Marcus Clarke (marcus) · 0.9_1
Bump PORTREVISIONS for all ports that depend on atk or pango to ease in the big upgrade.
46a4d69571
Joe Marcus Clarke (marcus) · 0.9
Update to 0.9.  See http://www.mozilla.org/products/thunderbird/releases/ for all the wonderful new features.
5d1f4c0b5e
Joe Marcus Clarke (marcus) · 0.8_3
* Remove a patch that is no longer needed * Change an instance of Firefox to Thunderbird [1] * Workaround a potential crash with JavaScript pop-ups [2] * Use Xvfb to initialize the extensions datastore as root

[2] https://bugzilla.mozilla.org/show_bug.cgi?id=264557

Sbumitted by:	Radek Kozlowski <radek@raadradd.com> [1]
3bffe907e1
Joe Marcus Clarke (marcus) · 0.8_2
Fix build with Perl < 5.6.1.
6b605d422b
Joe Marcus Clarke (marcus) · 0.8_2
Fix build when PORTSDIR is read-only.

PR:		72629
1db758c390
Joe Marcus Clarke (marcus) · 0.8_2
* Update to 0.8 * Now that the fake installation code from Firefox has stabilized, adapt it   here to eliminate the need for a static plist

See http://www.mozilla.org/products/thunderbird/releases/ for all the juicy
goodies in 0.8.
92569e4264
Joe Marcus Clarke (marcus) · 0.7.3_1
Patch the various recently reported security vulnerabilities in Mozilla. This is being done instead of the update to 0.8 since we're in a ports freeze, and too many big changes is not a good idea.

This update covers the following Mozilla bugs:

245066
226669
250862
255067
256316
257317
258005

Thanks to nectar for scraping all of these patches together.

Obtained from:	Mozilla CVS
Approved by:	portmgr (implicit)
d4b6b688df
Joe Marcus Clarke (marcus) · 0.7.3
Update to 0.7.3 which fixes numerous possible security issues.  See http://bugzilla.mozilla.org/buglist.cgi?bug_id=251381,249004,250906,253121 for more details.
d06d89d9ec
Pav Lucistnik (pav) · 0.7.2_1
- Fix build with gcc-3.4

PR:		ports/69833
Submitted by:	Jake Hamby <jhamby@anobject.com>
42717d2b33
Joe Marcus Clarke (marcus) · 0.7.2_1
Fix global extension and theme installation by making sure the path to the XPI file does no contain a leading "file://" when passed to the extension manager.

See http://bugzilla.mozilla.org/show_bug.cgi?id=250847 for more details.

Reported by:	ale
9e94e6497f
Joe Marcus Clarke (marcus) · 0.7.2
Fix DEBUG builds by checking for all error states from pthread_mutex_trylock(). See http://bugzilla.mozilla.org/show_bug.cgi?id=253080 for more details.

Submitted by:	green
08576a11f4
Adam Weinberger (adamw) · 0.7.2
Update to 0.7.2. Use a PLIST_SUB for the plist. The port defines NO_MTREE, so mkdir ${PREFIX}/bin to make sure it exists. (Necessary for installations into prefixes [prefices?] that don't yet exist.)
61088c5833
Joe Marcus Clarke (marcus) · 0.7.1
Update to 0.7.1.
0be8477e93
Joe Marcus Clarke (marcus) · 0.7
Update to 0.7.  A list of what's new can be found at http://www.mozilla.org/products/thunderbird/releases.

This has the same limitation that Firefox 0.9 had where it needs to be run as
root first. I applied the same hacks to workaround that; however, some users
may need to run thunderbird twice before it starts correctly.
583b43a085
Alex Dupre (ale) · 0.6_1
The checksum is not changed, but the distfile yes :)
a9539469a0
Joe Marcus Clarke (marcus) · 0.6_1
The distfile was renamed on the server.  The checksum has not changed, however.
ad26255b44
Joe Marcus Clarke (marcus) · 0.6_1
Fix a potential crash if thunderbird tries to load browser plug-ins.

PR:		66450
Submitted by:	Franz Klammer <klammer@webonaut.com>
40926f0931
Joe Marcus Clarke (marcus) · 0.6
Update to 0.6.  The list of all that is good in this release can be found at:

http://www.mozilla.org/products/thunderbird/releases/
152ab6f7af
Joe Marcus Clarke (marcus) · 0.5_1
Chase the glib20 update, and bump all affected ports' PORTREVISIONs.
731798cdcf
Joe Marcus Clarke (marcus) · 0.5
Borrow from  the OpenLDAP ports, and refuse to build if bind has been installed with PORT_REPLACES_BASE_BIND defined.

PR:		61756
Obtained from:	OpenLDAP ports
2e2a921591
Joe Marcus Clarke (marcus) · 0.5
Fix build with freetype2-2.1.7.
dbe1712ce3