head 1.1; access; symbols pkgsrc-2026Q1:1.1.0.6 pkgsrc-2026Q1-base:1.1 pkgsrc-2025Q4:1.1.0.4 pkgsrc-2025Q4-base:1.1 pkgsrc-2025Q3:1.1.0.2 pkgsrc-2025Q3-base:1.1; locks; strict; comment @// @; 1.1 date 2025.09.03.14.17.01; author ryoon; state Exp; branches; next ; commitid N1k8ZFNmz2jm8h9G; desc @@ 1.1 log @mail/thunderbird: Update to 142.0 * Fix some EAI related runtime erros. isalpha(3)s fail. Changelog: 142.0: What's New new Visual signatures can be added to PDF attachments opened in Thunderbird new 'Copy Message Link' and 'Copy News Link' added to header pane 'More actions' new Folder copy enabled within mail server accounts and local folders new 'Reset Folder Order' option added to folder pane to reset custom folder sorting What's Changed changed 'Copy Message Location' removed from mail context menu What's Fixed fixed Users with attachments open in tabs saw an error on Thunderbird restart fixed Notification sounds did not respect operating system's do-not-disturb mode fixed Non-English localized Thunderbird created English special folders on first start fixed Users were unable to use Fastmail calendars due to missing OAuth settings fixed Sending from unified or local folder failed if no default account was set fixed Right-clicking 'List-ID' -> 'Unsubscribe' created double encoded draft subject fixed On Linux, the close caption button was inactive when mouse was in screen corner fixed Toggling dark message mode did not restore focus and scroll position fixed Message list scrolled back when returning to mail tab after opening a message fixed Deleting a single message in folder using 'Group by Sort' failed after CTRL+A fixed New newsgroups were not added in alphabetical order by default fixed After updating to version 142, all newsgroup folders were sorted alphabetically fixed With Thunderbird closed, clicking a 'mailto:' link to send signed message failed fixed Replying could fail with mailnews.reply_quoting_selection.multi_word set false fixed Multiple saves while using 'Options' -> 'Send a Copy' resulted in multiple copies fixed Thunderbird did not display contact photos in WebP format from CardDAV servers fixed Installations from Microsoft Store did not open when clicking 'mailto:' links fixed Clicking the backspace icon in the quick filter field cleared the input field fixed Initial launch had long load times and UI lag while messages downloaded fixed 'Mark' -> 'All Read' affected newsgroup messages that had not been fetched yet fixed Thunderbird could not reconnect to newsgroups after connection loss until restarted fixed Sending a newsgroup post appeared successful when it had actually failed fixed Archived RSS feed messages were sent to the archive folder of default identity fixed Opening Website header link in RSS feed incorrectly re-encoded URL parameters fixed Visual and UX improvements fixed Security fixes Security fixes: Mozilla Foundation Security Advisory 2025-70 #CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component #CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component #CVE-2025-9181: Uninitialized memory in the JavaScript Engine component #CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component #CVE-2025-9187: Memory safety bugs fixed in Firefox 142 and Thunderbird 142 #CVE-2025-9184: Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 #CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 @ text @$NetBSD$ * Fix runtime segfault when sending EAI email. --- comm/mailnews/compose/src/nsMsgCompUtils.cpp.orig 2025-09-02 06:17:25.620880973 +0000 +++ comm/mailnews/compose/src/nsMsgCompUtils.cpp @@@@ -159,7 +159,7 @@@@ static bool isValidHost(const nsCString& const auto* cur = host.BeginReading(); const auto* end = host.EndReading(); for (; cur < end; ++cur) { - if (!isalpha(*cur) && !isdigit(*cur) && *cur != '-' && *cur != '_' && + if (!isalpha((unsigned char)(*cur)) && !isdigit((unsigned char)(*cur)) && *cur != '-' && *cur != '_' && *cur != '.') { return false; } @