New Update Mozilla Thunderbird (updates and discussion)

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.3.3, first offered to channel users on October 12, 2022​


What’s New​

  • Option added to show containing address book for a contact when using All Address Books in vertical mode

Changed​

  • Thunderbird will try to use POP NTLM authentication even if not advertised by server
  • Task List and Today Pane sidebars will no longer load when not visible

Fixed​

  • Sending a message while a recipient pill was being modified did not save changes
  • Nickname column was not available in horizontal view of Address Book
  • Multiline organization values were displayed across two columns in horizontal view of Address Book
  • Contact vCard fields with multiple values such as Categories were truncated when saved
  • ICS calendar files with a FREEBUSY property could not be imported
  • Thunderbird would hang if calendar event exceeded the year 2035
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.4.0, first offered to channel users on October 19, 2022​


Changed​

  • Thunderbird will automatically detect and repair OpenPGP key storage corruption caused by using the profile import tool in Thunderbird 102

Fixed​

  • POP message download into a large folder (~13000 messages) caused Thunderbird to temporarily freeze
  • Forwarding messages with special characters in Subject failed on Windows
  • Links for FileLink attachments were not added when attachment filename contained Unicode characters
  • Address Book display pane continued to show contacts after deletion
  • Printing address book did not include all contact details
  • CardDAV contacts without a Name property did not save to Google Contacts
  • "Publish Calendar" did not work
  • Calendar database storage improvements
  • Incorrectly handled error responses from CalDAV servers sometimes caused events to disappear from calendar
  • Various visual and UX improvements
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.4.1, first offered to channel users on October 26, 2022​


New​

  • Thunderbird will now catch and report errors parsing vCards that contain incorrectly formatted dates

Fixed​

  • Dynamic language switching did not update interface when switched to right-to-left languages
  • Custom header data was discarded after messages were saved as draft and reopened
  • -remote command line argument did not work, affecting integration with various applications such as LibreOffice
  • Messages received via some SMS-to-email services could not display images
  • VCards with nickname field set could not be edited
  • Some recurring events were missing from Agenda on first load
  • Download requests for remote ICS calendars incorrectly set "Accept" header to text/xml
  • Monthly events created on the 31st of a month with <30 days placed first occurrence 1-2 days after the beginning of the following month
  • Various visual and UX improvements


 
Last edited:

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.4.2, first offered to channel users on November 4, 2022​


Changed​

  • "Address Book" button in Account Central will now create a CardDAV address book instead of a local address book

Fixed​

  • Messages fetched from POP server in Fetch headers only mode disappeared when moved to different folder by filter action
  • Thunderbird re-downloaded locally deleted messages from a POP server when "Leave messages on server" and "Until I delete them" were enabled
  • Multiple password prompts for the same POP account could be displayed
  • IMAP authentication failed on next startup if ImapMail folder was deleted by user
  • Retrieving passwords for authenticated NNTP accounts could fail due to obsolete preferences in a users profile on every startup
  • Get Next n Messages did not consistently fetch all messages requested from NNTP server
  • Get Messages button unable to fetch messages from NNTP server if root folder not selected
  • Thunderbird text branding did not always match locale of localized build
  • Thunderbird installer and Thunderbird updater created Windows shortcuts with different names
  • LDAP search filters unable to work with non-ASCII characters
  • "Today" highlighting in Calendar Month view did not update after date change at midnight


 
Last edited:

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113
Work on the next major release of the open source email client Thunderbird is in full swing. The developers have now published a preview of the planned Calendar changes in the new major release.

Thunderbird Supernova, that is the name of the next major version of the email client, will reinvent the email client according to the development team. While that is often cause for concern for long-standing users of a software, it appears that this should be less of a concern for Thunderbird users.

The new version features a modernized interface, but also features that many existing users found missing in the current version. Besides the ability to sync data between different Thunderbird installations, courtesy of Firefox Sync, it is the Android version that needs to be mentioned specifically. Thunderbird is a desktop only email client at the time, which means that users need to use a different app on their mobile devices.

The built-in calendar is getting a new design as well. The team highlighted some of the changes scheduled for the Supernova release in a new blog post on the official Thunderbird website.

The team notes that the highlighted design has been made to look busy on purpose, that there will be options to change the density, that many visual changes will be customizable, and that everything should be considered in development at this point.

thunderbird weekly view
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.5.0, first offered to channel users on November 15, 2022​


Changed​

  • Ctrl+N shortcut to create new contacts from address book restored

Fixed​

  • Account Settings UI did not update to reflect default identity changes
  • New POP mail notifications were incorrectly shown for messages marked by filters as read or junk
  • Connecting to an IMAP server configured to use PREAUTH caused Thunderbird to hang
  • Error responses received in greeting header from NNTP servers did not display error message
  • News messages sent using "Send Later" failed to send after going back online
  • "Download/Sync Now..." did not completely sync all newsgroups before going offline
  • Username was missing from error dialog on failed login to news server
  • Thunderbird can now fetch RSS channel feeds with incomplete channel URL
  • Add-on "Contribute" button in Add-ons Manager did not work
  • Help text for /part Matrix command was incorrect
  • Invite Attendees dialog did not fetch free/busy info for attendees with encoded characters in their name
  • Various security fixes


 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113
The open source Thunderbird email client includes powerful email filtering functionality. Thunderbird users have the following options at their disposal in regards to highlighting important emails in the email client:
  • Star messages -- this adds a yellow star icon in email listings.
  • Set high priorities for emails -- highlights emails with the selected priority, e.g., high or highest. The priority column is not displayed by default.
  • Add tags to emails -- Tags color code emails in the email listings and are displayed in the email header.
  • Move messages to a specific folder -- moves emails to a selected folder automatically.
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.6.0, first offered to channel users on December 13, 2022​


Fixed​

  • Importing secret OpenPGP keys failed when public key with public subkey was already present
  • Message index files were incorrectly deleted when too many folders were opened
  • Thunderbird sometimes incorrectly formatted synced vCards
  • Recurring events did not display past a certain number of repetitions
  • Cookies deleted from the "Show Cookies" dialog were not actually deleted
  • Paused RSS feeds did not actually pause updates
  • Various visual and UX improvements
  • Various security fixes


 
Last edited:

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.6.1, first offered to channel users on December 20, 2022​


Fixed​

  • Remote content did not load in user-defined signatures
  • Addons that added new action buttons were not shown for addon upgrades, requiring removal and reinstall
  • Various stability improvements
  • Security fix

 
Last edited:

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.7.0, first offered to channel users on January 19, 2023​


What’s New​

  • Enterprise policies now support Thunderbird-specific preferences

Fixes​

  • Localized builds and langpacks now use "comm-l10n" repository; downstream builds using official langpacks should not need to make changes
  • Having too many folders open at startup caused loss of MSF files
  • Copying an email from one local folder to another local folder sometimes caused "Another Operation is using the folder" error on Windows 7
  • Email address pill allowed for incorrectly formatted email addresses
  • Creating security exceptions for messages sent using a self-signed certificate failed if hostname contained uppercase letters
  • S/MIME certificate verification was prohibitively slow
  • OpenPGP key import failed for key blocks with comments that contain Unicode characters
  • #Chat conversation sidebar was too wide under certain circumstances, making scrollbar unusable
  • On Mac, deleting events from Today Pane with "Backspace" key deleted selected messages instead
  • Various security fixes

Unresolved​

  • OAuth2 authentication not working for Microsoft 365 Enterprise accounts. See the Blog post for additional information. Bug 1810760

 

Gandalf_The_Grey

Level 83
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
7,262
Thunderbird 102.7.0 – no auto-release due to issues with Microsoft 365
OAuth2 issues with MS 365

Unresolved is the bug that OAuth2 authentication does not work for Microsoft 365 Enterprise accounts (see also). Therefore, Thunderbird will not automatically update to 102.7.0 as this is a critical authentication issue with Microsoft 365 Business accounts. Affected users should not update until Thunderbird 102.7.1 is released with a fix. Opening the "About Mozilla Thunderbird" dialogue allows an update to 102.7.0.
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.7.1, first offered to channel users on February 1, 2023​


Fixed​

  • Microsoft Office 365 accounts were unable to authenticate
  • Switching identities caused remote images in HTML signatures to not be shown
  • Thunderbird failed to import vCards that contained "\r\r\n" line endings
  • Contribution button for add-ons opened Contribution page in a Thunderbird tab, instead of the external browser
  • XMPP did not respond to unrecognized IQ queries, causing some servers to close the connection
  • Window titlebar buttons (minimize/maximize/close) were not displayed in Windows 10 "Dark" color mode
  • Various security fixes
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113
The Thunderbird email client from Firefox developer Mozilla continues to have a strong fan following. However, the software hasn't received a UI refresh for some time. That will change later this summer, according to a post today on the official Thunderbird blog.

Since early 2020, development of Thunderbird has been conducted by MZLA Technologies, which is a subsidary of Mozilla. A small but growing number of paid developers has been maintaining and updating the email client for the past three years. The donations from users have helped keep the lights on. Now it looks like the team is ready to make a major leap forward in Thunderbird's development.

One of the team's big goals is to refresh the email client's user interface so it looks as good as modern email software. The blog post stated:
A UI that looks and feels modern is getting initially implemented with version 115 in July, aiming at offering a simple and clean interface for “new” users, as well as the implementation of more customizable options with a flexible and adaptable interface to allow veteran users to maintain that familiarity they love.
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113

Version 102.9.0, first offered to channel users on March 14, 2023​


Fixed​

  • Notification about a sender's changed OpenPGP key was not immediately visible
  • TLS Certificate Override dialog did not appear when retrieving messages via IMAP using "Get Messages" context menu
  • Spellcheck dictionaries were missing from localized Thunderbird builds that should have included them
  • Tooltips for "Show/Hide" calendar toggle did not display
  • Various security fixes
 

Berny

Level 5
Verified
Well-known
Oct 14, 2016
202
Thank you !

tb_102_9.jpg
 

silversurfer

Super Moderator
Thread author
Verified
Top Poster
Staff Member
Malware Hunter
Aug 17, 2014
11,113
Thunderbird 102.9.0 addresses 6 different security issues in the email program. The security issues have severity ratings of high and moderate, the aggregated rating is high.

Thunderbird's development team notes that many of the security issues "cannot be exploited through email in the Thunderbird product" because scripting is disabled when reading email. Thunderbird is based on Firefox code, and it inherits some of the vulnerabilities affecting Firefox because of that.
  • CVE-2023-25751: Incorrect code generation during JIT compilation
  • CVE-2023-28164: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation
  • CVE-2023-28162: Invalid downcast in Worklets
  • CVE-2023-25752: Potential out-of-bounds when accessing throttled streams
  • CVE-2023-28163: Windows Save As dialog resolved environment variables
  • CVE-2023-28176: Memory safety bugs fixed in Thunderbird 102.9
Information about each of the vulnerabilities is provided on the Security Advisories website.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top