February 2006

Thunderbird 1.5.0.2 Released

Changelog for previous release (Thunderbird 1.5) | Changelogs for other releases

Make a donation to the upkeep of The Rumbling Edge.

Released on 21 Apr 06, and this changelog was last updated on 23 Apr 06.

Mozilla Thunderbird 1.5.0.2 has been released. Release notes are available. This post lists the improvements in Thunderbird 1.5.0.2 over the previous release 1.5. This list encompasses almost every single known fix that went into this release. There has been some additional work to improve Thunderbird’s performance on new Intel Macs as well, although there will not be a universal binary, scheduled for the next 1.5.0.3 release instead. In other words, there is no native support for users of Macintosh with Intel processors. Users may run Thunderbird 1.5.0.2 under Rosetta.

The Gecko 1.8.0.x branch (Thunderbird 1.5.0.x series) will only bring stability and security bug fixes. As such, no new features will be added. To synchronize the version numbering with Firefox, the 1.5.0.1 numbering was dropped in favour of 1.5.0.2.

Impact key for security issues listed on the Mozilla Foundation Security Advisories webpage:

  • Critical: Vulnerability can be used to run attacker code and install software, requiring no user interaction beyond normal browsing.
  • High: Vulnerability can be used to gather sensitive data from sites in other windows or inject data or code into those sites, requiring no more than normal browsing actions.
  • Moderate: Vulnerabilities that would otherwise be High or Critical except they only work in uncommon non-default configurations or require the user to perform complicated and/or unlikely steps.
  • Low: Minor security vulnerabilities such as Denial of Service attacks, minor data leaks, or spoofs. (Undetectable spoofs of SSL indicia would have “High” impact because those are generally used to steal sensitive data intended for other sites.)

Changes in 1.5.0.2: (77)

Security issues: (15)

  • Fixed: 319858 – JavaScript execution in mail when forwarding in-line (Critical)
  • Fixed: 325991, 328469 – Privilege escalation through Print Preview (Critical)
  • Fixed: 282105, 315254, 320459, 326615, 326834, 327941, 328509 – Crashes with evidence of memory corruption (rv:1.8.0.2) (Moderate)
  • Fixed: 316885, 322045 – JavaScript garbage-collection hazards (Moderate)
  • Fixed: 317934 – Changing postion:relative to static corrupts memory (Moderate)
  • Fixed: 319296 – Memory corruption via QueryInterface on Location, Navigator objects (Moderate)
  • Fixed: 319847 – Localstore.rdf XML injection through XULDocument.persist() (Moderate)
  • Fixed: 319872, 322215 – Integer overflows in E4X, SVG, and Canvas (Moderate)
  • Fixed: 323501 – Security check of js_ValueToFunctionObject() can be circumvented (Moderate)
  • Fixed: 325403, ZDI-06-010 – CSS Letter-Spacing Heap Overflow Vulnerability (Moderate)
  • Fixed: 327126 – Privilege escalation using crypto.generateCRMFRequest (Moderate)
  • Fixed: 328937, ZDI-06-011 – Table Rebuilding Code Execution Vulnerability (Moderate)
  • Fixed: 320375 – Read beyond buffer while parsing XML (Low)
  • Fixed: 322312 –  “AnyName” entrainment and access control hazard20459 (Low)
  • Fixed: 328917 – Mail Multiple Information Disclosure (Low)

Crashes: (8)

  • Fixed: 306067 – null pointer dereference crash
  • Fixed: 317420 – Firefox 1.5RC3 crashes when trying to print a page
  • Fixed: 319210 – crash [@ plc4.dll + (00001ae2)] on mail send (using SSL connection to SMTP)
  • Fixed: 321495 – Thunderbird 1.5rc1 and 1.5rc2 hangs with 945 messages in a POP account
  • Fixed: 323131 – crash after saving all attachments [@ nsMessenger::SaveAllAttachments]
  • Fixed: 328187 – crash at IMAP login with GSSAPI authentication using SSPI library
  • Fixed: 322273 – Crash at [@ nsMsgQuickSearchDBView::ListIdsInThread]
  • Fixed: 322283 – Crash after filter operation with a missing destination folder

Build configuration: (6)

  • Fixed: 307311 – Allow client.mk to build xulrunner + multiple apps in one sweep
  • Fixed: 316177 – command-line options for “-compose” broken
  • Fixed: 316674 – compare-locales should support reasonable numbers of ordered search
  • Fixed: 321791 – mailViews.dat should be in mail.xpi
  • Fixed: 323997 – TARGET_XPCOM_ABI not set in AIX builds
  • Fixed: 329047 – 1.5.0.2 nightlies ABI incompabilities with 1.5

Functionality: (9)

  • Fixed: 180849 – Mail loss in import of NC4 mail when 0x5C(\) is used as 2nd byte of muti-byte character in folder name.
  • Fixed: 307052 – Spellchecker doesn’t display suggestion list for misspelled words if Russian Spell dictionary is installed
  • Fixed: 307527 – Connection timeout with IMAP on dual core systems
  • Fixed: 315625 – When forwarding a message inline, Thunderbird strips inline-images
  • Fixed: 316812 – When address book name is Japanese character, address book is lost when new address book is created
  • Fixed: 317009 – Thunderbird incorrectly decodes =00 in quoted-printable attachments as 0x20, not NULL
  • Fixed: 323318 – When the attachment file name is separated, should append semi-colon(‘;’)
  • Fixed: 323608 – ldap schema’s use of displayName has changed since Thunderbird 1.0x
  • Fixed: 326280 – Suppression of append-domain autocompletion not working

RSS: (4)

  • Fixed: 312008 – RSS feeds stop loading after connection errors
  • Fixed: 315600 – Hangs while validating feed (rdf)
  • Fixed: 320818 – broken parsing on CDATA sections
  • Fixed: 320967 – ‘content:encoded’ field ignored in RSS2 feed parsing

Toolkit: (9)

  • Fixed: 298960 – -remote can no longer handle commas or quotes
  • Fixed: 302099 – How do embedders embed libxul?
  • Fixed: 315434 – Security error with remote <xul:tabbox>: can’t switch tabs if chrome has focus
  • Fixed: 317568 – Stub executable opens console window
  • Fixed: 319410 – textbox element loses content upon resize with direction:rtl and flex
  • Fixed: 320449 – Make properties of GRE_GetGREPathWithProperties useful
  • Fixed: 322354 – libxul always links against X11
  • Fixed: 326772 – compatibility.ini should include TARGET_OS_ABI
  • Fixed: 328505 – [Linux-only] –install-app fails on Linux for packages without a vendor

UI improvements: (6)

  • Fixed: 183394 – sometimes when you delete a message, the focus gets lost instead of going to the next message
  • Fixed: 184811 – addressingwidget appears as sunken, not as button
  • Fixed: 299343 – Can’t copy and paste into the beginning of a line
  • Fixed: 315057 – Display – Fonts tab: The pull-down menu of Character Encodings doesn’t work.
  • Fixed: 320185 – It’s impossible to delete or detach attachment via File Menu
  • Fixed: 326846 – read mail not marked as read

Miscellaneous fixes: (4)

  • Fixed: 320117 – Syntax Error in chrome://editor/content/EdInsertTOC.js
  • Fixed: 322172 – bump copyright year to 2006
  • Fixed: 322994 – Remove palm related files in the installer
  • Fixed: 326128 – Thunderbird 1.5.0.2 – Update build and branch values

Mac-specific: (4)

  • Fixed: 308294 – Thunderbird tinderbox (bg l10n) fails in “$(ZIP) -r9D $(LANGPACK_FILE) install.rdf chrome chrome.manifest”
  • Fixed: 309210 – makexpi.pl only looks for *.so when stripping
  • Fixed: 325410 – Mac builds not packaging .chk files
  • Fixed: 327108 – Cannot save copies to Sent folder. Selections in Copies & Folders are not retained(IMAP)

Intel Mac-related: (9)

  • Fixed: 302212 – Mac OS X x86 builds can’t target SDKs
  • Fixed: 322578 – Support ppc<->x86 cross builds for Mac OS X
  • Fixed: 324855 – Need a script to produce universal binary .app from cpu-specific bits
  • Fixed: 327823 – Support configurable preflight/postflight actions in client.mk
  • Fixed: 327848 – Drive the Mac universal build process entirely in-tree
  • Fixed: 328081 – Support unification of bdate for multi-project builds
  • Fixed: 328391 – .mar generation should package universal build when the build is universal
  • Fixed: 328596 – Difficult to “Open using Rosetta” due to self-relaunching
  • Fixed: 330890 – unify does not preserve the execute bit

Sun-specific: (2)

  • Fixed: 312154 – Start script does not take care of running instance
  • Fixed: 314018 – Error in configure(.in): Sun CXX (CC) compiler defiens __SUNPRO_CC and not __SUNPRO_C

AIX-specific: (1)

  • Fixed: 323997 – TARGET_XPCOM_ABI not set in AIX builds

Windows builds Official Windows installer

Linux builds Official Linux (i686)

Mac builds Official Mac

Thunderbird Releases

Comments (32)

Permalink

2006-02-26 Thunderbird 1.5.0.2 builds

Major bugfixes:

  • Fixed: 323608 – ldap schema’s use of displayName has changed since Thunderbird 1.0x
  • Fixed: 317420 – Firefox 1.5RC3 crashes when trying to print a page
  • Fixed: 327108 – [Mac] Cannot save copies to Sent folder. Selections in Copies & Folders are not retained(IMAP)

Outstanding bugs:

  • Since 06 Nov 05: 315285 – “View more information about this update” should link to the release notes for the specific release

Windows builds: Official Windows, Official Windows installer (discussion)

Linux builds: Official Linux (i686) (2006-02-25 build)

Mac builds: Official Mac

zz - Thunderbird 1.5 (Gecko 1.8.0.x)

Comments Off on 2006-02-26 Thunderbird 1.5.0.2 builds

Permalink

2006-02-26 Thunderbird 2.0 builds

Major bugfixes:

  • Fixed: 327039 – Macro names are not expanded causing Windows Add/Remove programs to fail.
  • Fixed: 327108 – Cannot save copies to Sent folder. Selections in Copies & Folders are not retained(IMAP)
  • Fixed: 327656 – Disconnections on some emails with attachments

Other fixes:

  • Fixed: 318650 – Empty thread pane rows when deleting quick search results in group mode
  • Fixed: 328219 – crash when reading an rss feed because gIOService is null
  • Fixed: 328593 – progess/status doesn’t work in folder views

Outstanding bugs:

  • Since 19 Jan 04: 231541 – “Leave messages on server” should be chosen by default (dataloss)
  • Since 22 Aug 04: 256510 – Return receipts don’t use Multiple identities
  • Since 01 Dec 04: 272729 – Import of mozilla profile reports success even though disk full and not all mails imported
  • Since 22 Dec 04: 275743 – [Extensions] Display EULA before user installs
  • Since 19 Aug 05: 305185 – gtk 2.8 builds are broken due to missing xft dependencies
  • Since 29 Oct 05: 314297 – deleting one attachment from a locally stored message deletes multiple attachments
  • Since 02 Jan 06: 322172 – bump copyright year to 2006
  • Since 23 Jan 06: 324474 – Revoked S/MIME certificate difficult to detect in received messages
  • Since 24 Jan 06: 324521 – Poor Inline Spell Checking Performance On Large Text Documents

Windows builds: Official Windows, Official Windows installer (discussion)

Linux builds: Official Linux (i686) (2006-02-25 build)

Mac builds: Official Mac

zz - Thunderbird 2.0 (Gecko 1.8.1.x)

Comments (2)

Permalink

Tabs in Thunderbird – Status Update

Recently, there has been some development work on bringing Firefox’s tabbed interface over to Thunderbird, hopefully by version 2.0. However, due to circumstances, the volunteer at the heart of this new feature is unable to carry on as of end of January. The advantages of using tabs over windows is applicable to both applications as using tabs have been shown to reduce memory usage, taskbar clutter and increased accessibility etc.

The bug listed is 297379. The stalling of this bug may – potentially – affect the future release features of 2.0 if nothing gets done. For those of you expecting this new feature, you may have to wait a little longer while this gets resolved.

Additionally, a new Thunderbird roadmap was released by Scott MacGregor on 14 Feb. It lists the potential release date of 2.0 to be around October 2006 (Late Fall). “Dates shown above are tentative and serve only to give you an idea of the relative position of one release from another.” The old 1.5 roadmap is still available here.

Some potential new features of 2.0, as listed in the roadmap:

  • Tools for organizing and managing e-mail
    • Custom Folder Pane Views such as favorites, unread and recently used.
    • Message Tagging
    • Tabbed Messages
  • Be Informative
    • New Mail Alert Improvements
    • Folder Summary Popups
  • Help Fight Junk Mail
    • Improve the current bayesian based algorithm
    • Token Store Pruning / Aging

Thunderbird Trunk

Comments (4)

Permalink

2006-02-18 Thunderbird 1.5.0.2 builds

To synchronize the version numbering with Firefox, the upcoming security release for Thunderbird 1.5 will most likely be released as 1.5.0.2.

Major bugfixes:

  • Fixed: 319210 – crash [@ plc4.dll + (00001ae2)] on mail send (using SSL connection to SMTP)
  • Fixed: 315057 – Display – Fonts tab: The pull-down menu of Character Encodings doesn’t work.
  • Fixed: 315625 – When forwarding a message inline, Thunderbird strips inline-images
  • Fixed: 316177 – command-line options for “-compose” broken

Miscellaneous fixes:

  • Fixed: 322172 – bump copyright year to 2006
  • Fixed: 322273 – Crash at [@ nsMsgQuickSearchDBView::ListIdsInThread]
  • Fixed: 326128 – Thunderbird 1.5.0.2 – Update build and branch values

Outstanding bugs (refreshed):

  • Since 06 Nov 05: 315285 – “View more information about this update” should link to the release notes for the specific release
  • Since 16 Jan 06: 323608 – ldap schema’s use of displayName has changed since Thunderbird 1.0x

Windows builds: Official Windows, Official Windows installer

Linux builds: Official Linux (i686)

Mac builds: Official Mac

zz - Thunderbird 1.5 (Gecko 1.8.0.x)

Comments (1)

Permalink

2006-02-18 Thunderbird 2.0 builds

Fixes:

  • Fixed: 326846 – read mail not marked as read
  • Fixed: 327039 – Macro names are not expanded causing Windows Add/Remove programs to fail.
  • Fixed: 327291 – rss feed folder db’s not getting closed after check for new messages

Outstanding bugs:

  • Since 19 Jan 04: 231541 – “Leave messages on server” should be chosen by default (dataloss)
  • Since 22 Aug 04: 256510 – Return receipts don’t use Multiple identities
  • Since 01 Dec 04: 272729 – Import of mozilla profile reports success even though disk full and not all mails imported
  • Since 22 Dec 04: 275743 – [Extensions] Display EULA before user installs
  • Since 19 Aug 05: 305185 – gtk 2.8 builds are broken due to missing xft dependencies
  • Since 29 Oct 05: 314297 – deleting one attachment from a locally stored message deletes multiple attachments
  • Since 02 Jan 06: 322172 – bump copyright year to 2006
  • Since 23 Jan 06: 324474 – Revoked S/MIME certificate difficult to detect in received messages
  • Since 24 Jan 06: 324521 – Poor Inline Spell Checking Performance On Large Text Documents

Windows builds: Official Windows, Official Windows installer

Linux builds: Official Linux (i686)

Mac builds: Official Mac

zz - Thunderbird 2.0 (Gecko 1.8.1.x)

Comments (1)

Permalink

2006-02-11 Thunderbird 2.0 builds

Fixed for both 1.5.0.x and 2.0:

  • Fixed: 316177 – command-line options for “-compose” broken

Major bugfix:

  • Fixed: 307527 – Connection timeout with IMAP on dual core systems

Outstanding bugs:

  • Since 19 Jan 04: 231541 – “Leave messages on server” should be chosen by default (dataloss)
  • Since 22 Aug 04: 256510 – Return receipts don’t use Multiple identities
  • Since 01 Dec 04: 272729 – Import of mozilla profile reports success even though disk full and not all mails imported
  • Since 22 Dec 04: 275743 – [Extensions] Display EULA before user installs
  • Since 19 Aug 05: 305185 – gtk 2.8 builds are broken due to missing xft dependencies
  • Since 02 Jan 06: 322172 – bump copyright year to 2006
  • Since 23 Jan 06: 324474 – Revoked S/MIME certificate difficult to detect in received messages

Windows builds: Official Windows, Official Windows installer

Linux builds: Official Linux (i686)

Mac builds: Official Mac

zz - Thunderbird 2.0 (Gecko 1.8.1.x)

Comments Off on 2006-02-11 Thunderbird 2.0 builds

Permalink

2006-02-04 Thunderbird 2.0 builds

Fixed for both 1.5.0.x and 2.0:

  • Fixed: 322994 – Remove palm related files in the installer

Major bugfixes:

  • Fixed: 315057 – Display – Fonts tab: The pull-down menu of Character Encodings doesn’t work.
  • Fixed: 319210 – crash [@ plc4.dll + (00001ae2)] on mail send (using SSL connection to SMTP)
  • Fixed: 315625 – When forwarding a message inline, Thunderbird strips inline-images
  • Fixed: 324179 – RSS2 and Atom parsers picking up elements at wrong nesting level

Miscellaneous:

  • Fixed: 314349 – Reply/Forward/Edit with .EML or message/rfc822: fails if no Message-Id
  • Fixed: 319248 – Don’t use navigator.properties
  • Fixed: 319700 – Location of start page doesn’t stay greyed out on restart
  • Fixed: 320677 – <item pubdate> ignored if RFC3339-format
  • Fixed: 322273 – Crash at [@ nsMsgQuickSearchDBView::ListIdsInThread]
  • Fixed: 324167 – feed parser should use nsIIOService instead of nsIURI
  • Fixed: 324172 – OPML export has wrong IO mode for writing
  • Fixed: 324194 – Remove the search bar, make quick search and mail views customizeable toolbar buttons

Outstanding bugs:

  • Since 19 Jan 04: 231541 – “Leave messages on server” should be chosen by default (dataloss)
  • Since 22 Aug 04: 256510 – Return receipts don’t use Multiple identities
  • Since 01 Dec 04: 272729 – Import of mozilla profile reports success even though disk full and not all mails imported
  • Since 22 Dec 04: 275743 – [Extensions] Display EULA before user installs
  • Since 19 Aug 05: 305185 – gtk 2.8 builds are broken due to missing xft dependencies
  • Since 08 Sep 05: 307527 – Connection timeout with IMAP on dual core systems
  • Since 02 Jan 06: 322172 – bump copyright year to 2006
  • Since 23 Jan 06: 324474 – Revoked S/MIME certificate difficult to detect in received messages

Windows builds: Official Windows, Official Windows installer (no discussion)

Linux builds: Official Linux (i686)

Mac builds: Official Mac

zz - Thunderbird 2.0 (Gecko 1.8.1.x)

Comments (2)

Permalink