What's new in Portable Thunderbird Supernova 115.10.0

Apr 18, 2024
  • Fixes:
  • Creating a tag in General Settings with a number as the tag name did not work
  • Quick Filter button selections did not persist after restart
  • Collapsing and expanding message list headers sometimes caused header to scroll out of view
  • Single message with no children inside a parent thread sometimes displayed incorrectly as a thread with a duplicate of itself as its child
  • "Get selected messages" menu items did not work
  • "Download and Sync Messages" dialog was too short when using Russian locale, obscuring OK button
  • After changing password on an IMAP account, the account could become locked due to too many failed login attempts
  • Retrieving multiline POP3 message from server failed if message chunk ended in newline instead of carriage return and newline
  • IMAP, POP3, and SMTP Exchange autoconfiguration did not support encryption configuration
  • Non-empty address book search bar interfered with displaying/editing contacts
  • Deleting attendees from "Invite Attendees" view removed attendees from view, but not from invite
  • Splitter arrow between task list and task description did not behave as expected
  • Performance improvements and code cleanup
  • Security fixes

New in Portable Thunderbird Supernova 115.9.0 (Mar 20, 2024)

  • Fixes:
  • Opened ignored messages in a message thread/subthread were not marked as read in IMAP folders
  • Multi-language spellcheck sometimes skipped languages
  • Thread tree did not update when live language switching
  • Visual improvements to "Reorder Attachments" popup
  • Sort order was sometimes incorrect in Grouped By views
  • Selecting "Match all messages" in Filter Rules dialog did not disable all search criteria
  • S/MIME-only signed messages sometimes incorrectly displayed signature as invalid
  • OpenPGP keys uploaded to an HKP keyserver were sent with the wrong Content-Type header
  • Keyboard navigation within search toolbar did not work
  • Flatpak builds only had the en-US spell check dictionary available
  • Security fixes

New in Portable Thunderbird Supernova 115.8.1 (Mar 6, 2024)

  • Fixes:
  • Settings: Updating tags failed if Automatic Updates were disabled
  • Size of collapsed folders in folder pane did not include size of subfolders
  • Reversing sort order of Grouped By views in quick search did not reverse
  • Removing threaded messages in a unified folder sometimes resulted in an incorrect number of levels in the thread
  • Thread collapsing did not behave correctly when copying thread messages in multi-folder view
  • S/MIME encryption failed to encrypt if unsupported certificate type was encountered
  • Decrypting a copy of an S/MIME encrypted, opaque-signed message created an unreadable message
  • Thunderbird sometimes changed the subject of messages selected while simultaneously decrypting a large PGP-encrypted message
  • "Quote message" menu item in compose window did not work when replying to message opened in separate tab
  • Toolbar customization window contents overflowed the window width
  • Security fixes

New in Portable Thunderbird Supernova 115.8.0 (Feb 23, 2024)

  • What’s New:
  • Added option to show packet dump when OpenPGP fails to decrypt
  • Fixes:
  • Thunderbird slowed down significantly when opening email files (.eml)
  • Inbox view intermittently reverted to default view after moving or deleting messages
  • Size of collapsed folders in folder pane did not include size of subfolders
  • Hovering over folder does not always expand subfolders
  • Switching to thread pane of a folder using keyboard navigation did not focus top message
  • Clicking "Sent unsent messages" in Outbox context menu while in offline mode did not prompt user to go online
  • Mail tab-specific Unified Toolbar buttons received focus incorrectly
  • Quick Filter settings did not persist when Quick Filter bar was turned off
  • Quick Filters were unusually slow
  • OpenPGP Key Manager filtering did not work
  • OpenPGP sometimes attempted to decrypt message with incorrect key
  • Autoconfig failed on servers that did not support OAuth2
  • Opening different attachments with the same name in different messages could cause attachment files to become conflated
  • Overflowed attachment list could not be scrolled
  • Passwords disappeared from password manager list after applying and clearing filters
  • Cookies in cookie manager list disappeared after applying and then clearing filters
  • Security fixes

New in Portable Thunderbird Supernova 115.7.0 (Jan 25, 2024)

  • What’s New:
  • MailExtensions: Added browser.windows.openDefaultBrowser()
  • Changes:
  • Thunderbird now only shows quota exceeded indications on the main window
  • MailExtensions: menus API enabled in messages being composed
  • MailExtensions: Honor allowScriptsToClose argument in windows.create API function
  • MailExtensions: APIs that returned an accountId will reflect the account the message belongs to, not what is stored in message headers
  • Fixes:
  • Keyboard shortcut for toggling message "read" status not shown in menus
  • OpenPGP: After importing a secret key, Key Manager displayed properties of the wrong key
  • OpenPGP: Inline PGP parsing improvements
  • OpenPGP: Discovering keys online via Key Manager sometimes failed on Linux
  • OpenPGP: Encrypted attachment "Decrypt and Open/Save As" did not work
  • OpenPGP: Importing keys failed on macOS
  • OpenPGP: Verification of clear signed UTF-8 text failed
  • Address book: Some columns incorrectly displayed no data
  • Address book: The address book view did not update after changing the name format in the menu
  • Calendar: Could not import an ICS file into a CalDAV calendar
  • Calendar: Two "Home" calendars were visible on a new profile
  • Calendar: Dark theme was incomplete on Linux
  • Dark theme did not apply to new mail notification popups
  • Folder icon, message list, and contact side bar visual improvements
  • MailExtensions: HTTP refresh in browser content tabs did not work
  • MailExtensions: messageDisplayScripts failed to run in main window
  • Various security fixes

New in Portable Thunderbird Supernova 115.6.1 (Jan 10, 2024)

  • What’s New:
  • OAuth2 now supported for comcast.net
  • Fixes:
  • High CPU usage sometimes occurred with IMAP CONDSTORE (conditional STORE) enabled
  • Replying to a collapsed thread via keyboard shortcut (Ctrl+R/Cmd+R) opened a reply for every message in the thread
  • Enabling Grouped By view after reversing sort order of column header caused messages to be grouped incorrectly
  • Opening thread pane context menu via keyboard did not always scroll view to selection
  • New mail indicator for POP3 accounts did not indicate new messages ready to be downloaded
  • Messages could not be moved to folders using Message > Move To if text or a link in the message had been clicked on first
  • MIME part boundaries were not properly terminated

New in Portable Thunderbird Supernova 115.6.0 (Dec 20, 2023)

  • Fixes:
  • Message selection misbehaved after selecting a sub-message in an expanded thread, collapsing the thread, then pressing up/down to move selection
  • Thunderbird now attempts to reconnect on a new connection after SMTP 4xx errors
  • HTML FileLink attachments used the wrong encoding
  • Security fixes

New in Portable Thunderbird Supernova 115.5.2 (Dec 13, 2023)

  • Fixes:
  • "Compact" option was missing from folder context menu for IMAP accounts using maildir
  • Message list could not be properly read by screen readers in table view
  • Messages with slow-loading images were delayed being marked as read
  • Messages opened in background tab were incorrectly marked as read
  • Mark All Read did not work for virtual folders
  • Delete (trash icon) in message display did not work in Unified folders
  • Unified folders were missing "Mark Folder Read" option in context menu
  • "Reply to List" was incorrectly disabled in Unified Toolbar since Thunderbird 115.4.1
  • Sorting by column with "Grouped By" enabled then performing a quick filter search caused blank message pane
  • Attachment list did not always appear if remote message content loaded slowly
  • Messages in outbox were not shown as unread by default
  • "Apply columns to" sometimes failed to apply columns to a root folder and its descendants
  • Global search results displayed as a list did not allow threads to be collapsed
  • "Quick Filter" button on toolbar was disabled when viewing search results as a list
  • Folder open hover delay was too short when using drag-and-drop
  • Parent folders with collapsed subfolders did not consistently display new mail indicator or message count for subfolders
  • Message list scroll position could move randomly when switching folders
  • Undoing deletion of local messages required using "Undo" (Ctrl-Z) twice
  • IMAP messages deleted in Thunderbird still appeared in other email clients that don't respect messages marked "deleted"
  • IMAP folder discovery was slowed by status bar message updates
  • Servers with non-LDH (letters-digits-hyphens) hostnames, such as those containing non-ASCII Unicode characters, could not be found
  • Images could not be copied and pasted from one message into another
  • Troubleshooting page (about:support) did not work on profiles with no outgoing email server, such as news-only profiles
  • Minimize/maximize button order was incorrect when placing window titlebar buttons on left-hand side
  • OpenPGP integraton with smartcard using latest version of Gpg4Win failed
  • Various accessibility improvements
  • Various UX and visual improvements

New in Portable Thunderbird Supernova 115.5.1 (Nov 30, 2023)

  • Fixes:
  • Advanced GnuPG keys may be protected with an unexpected passphrase
  • OpenPGP signatures rejected due to mismatched signature timestamp now display signature timestamp and clarifying message
  • Advanced address book search did not return results if display name was left blank
  • Clicking on attendee when inviting attendees added the attendee twice

New in Portable Thunderbird Supernova 115.5.0 (Nov 23, 2023)

  • Fixes:
  • Initial message was not automatically selected when opened in conversation
  • Newsgroup users using FQDN identity generated message ID headers with incorrect domain name
  • Link previews had poor legibility in dark mode
  • Plasma's task switcher displayed the default icon when running the Thunderbird Flatpak on Wayland
  • Link to Flatpak manifest was incorrect
  • Security fixes

New in Portable Thunderbird Supernova 115.4.3 (Nov 16, 2023)

  • Fixes:
  • Forwarding multiple messages as attachments failed
  • Message list scrolling fixes
  • Some text remained incorrectly visible in the message list when using "Grouped By" sorting
  • Subject lines were excessively indented in "Grouped by" views
  • "Open Message in Conversation" was incorrectly enabled for selections of multiple messages
  • States of collapsed and expanded threads were not maintained when switching folders
  • Pressing "n" to move to the next unread message on an unread, collapsed thread opened the thread and selected the second message instead of the first
  • Search Folders dialog improvements
  • "Read Messages" button in Account Central did not retrieve mail from POP accounts
  • Events canceled by the organizer were incorrectly sent cancelation message

New in Portable Thunderbird Supernova 115.4.1 (Oct 26, 2023)

  • What’s New:
  • "Manage Newsgroups Subscription" now displayed on Account Central when using newsgroups
  • Fixes:
  • Manually configured authentication methods on accounts did no always persist
  • "Send Autocrypt key in header" preference was available on accounts with no encryption key
  • SHA-1 certificates were not accepted in Thunderbird 115; acceptance of SHA-1 messages can now be enabled via optional preference
  • Various Flatpak enhancements
  • Opening folder in new tab by clicking scroll wheel/middle mouse button did not work in Folder Pane
  • Message list did not automatically scroll to new messages when switching folders
  • "Move/Copy to again" was sometimes displayed in the folder context menu when it should not have been
  • Multiple message drafts or message templates could not be opened simultaneously for editing
  • Tools > Filters dialog did not open in Unified Folder view if no messages were selected
  • Printing dialog could be opened, even with no messages selected
  • "From" address was editable when creating a new message from a template if the account identity contained Unicode characters
  • Opening a saved .eml file in compose window did not preserve message subject from file
  • Replying to some plaintext messages with desired quote selected in original message did not preserve formatting of quote
  • "Edit as New", "Reply", and "Redirect" could not be used on multiple messages simultaneously
  • "Reply to List" option was always enabled, even with no list to reply to
  • "Archive" button in message pane was enabled on messages that could not be archived
  • "Followup-To" label was incorrectly labeled as "Newsgroups"
  • "Save image as" option did not work for RSS feed items displayed as a webpage
  • OTR verification dialog was blank, preventing verification of OTR chat sessions
  • Calendar ICS parser improvements for more reliable event import
  • Permission description strings were missing from Add-Ons Manager
  • Various visual fixes
  • Security fixes

New in Portable Thunderbird Supernova 115.3.3 (Oct 19, 2023)

  • FIXES:
  • "Folder Location" toolbar button did not work for local folders
  • "Copy to again" option disappeared from context menu after copying to Gmail folder with non-ASCII name
  • Default reply identity did not use "Delivered-To" address when catch-all was active
  • "View Headers All" did not work when selected in standalone message window
  • Viewing the mail filter log displayed an error if no log file was present

New in Portable Thunderbird Supernova 115.2.2 (Sep 14, 2023)

  • Security fixes:
  • CVE-2023-4863: Heap buffer overflow in libwebp

New in Portable Thunderbird Supernova 102.14.0 (Aug 14, 2023)

  • Security fixes:
  • CVE-2023-4045: Offscreen Canvas could have bypassed cross-origin restrictions
  • CVE-2023-4046: Incorrect value used during WASM compilation
  • CVE-2023-4047: Potential permissions request bypass via clickjacking
  • CVE-2023-4048: Crash in DOMParser due to out-of-memory conditions
  • CVE-2023-4049: Fix potential race conditions when releasing platform objects
  • CVE-2023-4050: Stack buffer overflow in StorageManager
  • CVE-2023-4054: Lack of warning when opening appref-ms files
  • CVE-2023-4055: Cookie jar overflow caused unexpected cookie jar state
  • CVE-2023-4056: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14

New in Portable Thunderbird Supernova 102.13.1 (Aug 14, 2023)

  • Security fixes:
  • CVE-2023-3417: File Extension Spoofing using the Text Direction Override Character

New in Portable Thunderbird Supernova 102.12.0 (Jun 12, 2023)

  • Fixed:
  • "Searching the directory for recipients certificates" popup could block compose window when "S/MIME reminder" was enabled and using an LDAP address book
  • Some elements still used animations with "prefers-reduced-motion" set
  • Visual and theme improvements
  • Security fixes:
  • CVE-2023-34414: Click-jacking certificate exceptions through rendering lag
  • CVE-2023-34416: Memory safety bugs fixed in Thunderbird 102.12

New in Portable Thunderbird Supernova 102.11.2 (May 29, 2023)

  • Fixes:
  • Thunderbird 102.11.1 contained POP3 client regressions with offline mode and TLS certificate overrides

New in Portable Thunderbird Supernova 102.11.0 (May 15, 2023)

  • Fixes:
  • During Account Setup, the "Checking password..." message was not removed after a failure
  • Miscellaneous UI fixes
  • Security fixes:
  • CVE-2023-32205: Browser prompts could have been obscured by popups
  • CVE-2023-32206: Crash in RLBox Expat driver
  • CVE-2023-32207: Potential permissions request bypass via clickjacking
  • CVE-2023-32211: Content process crash due to invalid wasm code
  • CVE-2023-32212: Potential spoof due to obscured address bar
  • CVE-2023-32213: Potential memory corruption in FileReader::DoReadData()
  • CVE-2023-32214: Potential DoS via exposed protocol handlers
  • CVE-2023-32215: Memory safety bugs fixed in Thunderbird 102.11

New in Portable Thunderbird Supernova 102.10.1 (Apr 26, 2023)

  • Messages with missing or corrupt "From:" header did not display message header buttons
  • Composer repeatedly prompted for S/MIME smartcard signing/encryption password
  • Address Book integration did not work with macOS 11.4 Bug Sur
  • Mexico City DST fix in Thunderbird 102.10.0 (bug 1826146) was incomplete

New in Portable Thunderbird Supernova 102.10.0 (Apr 12, 2023)

  • Changes:
  • New messages will automatically select S/MIME if configured and OpenPGP is not
  • Fixes:
  • Calendar events with timezone America/Mexico_City incorrectly applied Daylight Savings Time
  • Security fixes:
  • CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass
  • CVE-2023-29533: Fullscreen notification obscured
  • MFSA-TMP-2023-0001: Double-free in libwebp
  • CVE-2023-29535: Potential Memory Corruption following Garbage Collector compaction
  • CVE-2023-29536: Invalid free from JavaScript code
  • CVE-2023-0547: Revocation status of S/Mime recipient certificates was not checked
  • CVE-2023-29479: Hang when processing certain OpenPGP messages
  • CVE-2023-29539: Content-Disposition filename truncation leads to Reflected File Download
  • CVE-2023-29542: Bypass of file download extension restrictions
  • CVE-2023-29545: Windows Save As dialog resolved environment variables
  • CVE-2023-1945: Memory Corruption in Safe Browsing Code
  • CVE-2023-29548: Incorrect optimization result on ARM64
  • CVE-2023-29550: Memory safety bugs fixed in Thunderbird 102.10

New in Portable Thunderbird Supernova 102.9.1 (Mar 30, 2023)

  • Fixes:
  • Thunderbird was unable to open file URLs from command line (URLs beginning with "file://")
  • Source strings for localized builds not uploaded to FTP as expected
  • Visual and theme improvements
  • Security fixes

New in Portable Thunderbird Supernova 102.8.0 (Feb 17, 2023)

  • New:
  • Added option to build RNP library with OpenSSL backend (use "--with-librnp-backend=openssl" configure option)
  • Source strings for localized builds now uploaded with source code to Mozilla FTP
  • Changed:
  • Thunderbird now warns user that OpenPGP is disabled if RNP library is outdated or missing
  • Fixed:
  • "Get Messages" did not retrieve messages from Gmail accounts using a local folder as a deferred inbox
  • Various visual and UX improvements

New in Portable Thunderbird Supernova 102.7.2 (Feb 10, 2023)

  • Various crash fixes

New in Portable Thunderbird Supernova 102.6.1 (Dec 21, 2022)

  • Fixes:
  • Remote content did not load in user-defined signatures
  • Addons that added new action buttons were not shown for addon upgrades, requiring removal and reinstall
  • Various stability improvements
  • Security fix

New in Portable Thunderbird Supernova 102.6.0 (Dec 14, 2022)

  • Fixed:
  • Importing secret OpenPGP keys failed when public key with public subkey was already present
  • Message index files were incorrectly deleted when too many folders were opened
  • Thunderbird sometimes incorrectly formatted synced vCards
  • Recurring events did not display past a certain number of repetitions
  • Cookies deleted from the "Show Cookies" dialog were not actually deleted
  • Paused RSS feeds did not actually pause updates
  • Various visual and UX improvements
  • Various security fixes

New in Portable Thunderbird Supernova 102.5.1 (Dec 2, 2022)

  • Changes:
  • Mail extension API updates. See Mail Extension API Docs.
  • Fixes:
  • "Copy to again" menu item was not present after copying message to folder with Unicode name on Unicode-enabled IMAP server
  • Calendar date picker was displayed behind "Send Later" window
  • Various security fixes

New in Portable Thunderbird Supernova 102.4.2 (Nov 4, 2022)

  • Changes:
  • "Address Book" button in Account Central will now create a CardDAV address book instead of a local address book
  • Fixes:
  • Messages fetched from POP server in Fetch headers only mode disappeared when moved to different folder by filter action
  • Thunderbird re-downloaded locally deleted messages from a POP server when "Leave messages on server" and "Until I delete them" were enabled
  • Multiple password prompts for the same POP account could be displayed
  • IMAP authentication failed on next startup if ImapMail folder was deleted by user
  • Retrieving passwords for authenticated NNTP accounts could fail due to obsolete preferences in a users profile on every startup
  • Get Next n Messages did not consistently fetch all messages requested from NNTP server
  • Get Messages button unable to fetch messages from NNTP server if root folder not selected
  • Thunderbird text branding did not always match locale of localized build
  • Thunderbird installer and Thunderbird updater created Windows shortcuts with different names
  • LDAP search filters unable to work with non-ASCII characters
  • "Today" highlighting in Calendar Month view did not update after date change at midnight

New in Portable Thunderbird Supernova 102.4.1 (Oct 30, 2022)

  • What’s New:
  • Thunderbird will now catch and report errors parsing vCards that contain incorrectly formatted dates
  • Fixes:
  • Dynamic language switching did not update interface when switched to right-to-left languages
  • Custom header data was discarded after messages were saved as draft and reopened
  • -remote command line argument did not work, affecting integration with various applications such as LibreOffice
  • Messages received via some SMS-to-email services could not display images
  • VCards with nickname field set could not be edited
  • Some recurring events were missing from Agenda on first load
  • Download requests for remote ICS calendars incorrectly set "Accept" header to text/xml
  • Monthly events created on the 31st of a month with <30 days placed first occurrence 1-2 days after the beginning of the following month
  • Various visual and UX improvements

New in Portable Thunderbird Supernova 102.4.0 (Oct 21, 2022)

  • Changes:
  • Thunderbird will automatically detect and repair OpenPGP key storage corruption caused by using the profile import tool in Thunderbird 102
  • Fixes:
  • POP message download into a large folder (~13000 messages) caused Thunderbird to temporarily freeze
  • Forwarding messages with special characters in Subject failed on Windows
  • Links for FileLink attachments were not added when attachment filename contained Unicode characters
  • Address Book display pane continued to show contacts after deletion
  • Printing address book did not include all contact details
  • CardDAV contacts without a Name property did not save to Google Contacts
  • "Publish Calendar" did not work
  • Calendar database storage improvements
  • Incorrectly handled error responses from CalDAV servers sometimes caused events to disappear from calendar
  • Various visual and UX improvements

New in Portable Thunderbird Supernova 102.3.3 (Oct 13, 2022)

  • What’s New:
  • Option added to show containing address book for a contact when using All Address Books in vertical mode
  • Changes:
  • Thunderbird will try to use POP NTLM authentication even if not advertised by server
  • Task List and Today Pane sidebars will no longer load when not visible
  • Fixes:
  • Sending a message while a recipient pill was being modified did not save changes
  • Nickname column was not available in horizontal view of Address Book
  • Multiline organization values were displayed across two columns in horizontal view of Address Book
  • Contact vCard fields with multiple values such as Categories were truncated when saved
  • ICS calendar files with a FREEBUSY property could not be imported
  • Thunderbird would hang if calendar event exceeded the year 2035

New in Portable Thunderbird Supernova 102.3.2 (Oct 9, 2022)

  • Changes:
  • Thunderbird will try to use POP CRAM-MD5 authentication even if not advertised by server
  • Fixes:
  • Checking messages on POP3 accounts caused POP folder to lock if mail server was slow or non-responsive
  • Newsgroups named with consecutive dots would not appear when refreshing list of newsgroups
  • Sending news articles containing lines starting with dot were sometimes clipped
  • CardDAV server sync silently failed if sync token expired
  • Contacts from LDAP on macOS address books were not displayed
  • Chat account input now accepts URIs for supported chat protocols
  • Chat ScreenName field was not migrated to new address book
  • Creating a New Event from the Today Pane used the currently selected day from the main calendar instead of from the Today Pane
  • New Event button in Today Pane was incorrectly disabled sometimes
  • Event reminder windows did not close after being dismissed or snoozed
  • Improved performance of recurring event date calculation
  • Quarterly calendar events on the last day of the month repeated one month early
  • Thunderbird would hang if calendar event exceeded the year 2035
  • Whitespace in calendar events was incorrectly handled when upgrading from Thunderbird 91 to 102
  • Various visual and UX improvements

New in Portable Thunderbird Supernova 102.3.1 (Oct 9, 2022)

  • Changes:
  • Compose window encryption options now only appear for encryption technologies that have already been configured
  • Number of contacts in currently selected address book now displayed at bottom of Address Book list column
  • Fixes:
  • Password prompt did not include server hostname for POP servers
  • Edit Contact was missing from Contacts sidebar context menus
  • Address Book contact lists cut off display of some characters, the result being unreadable
  • Menu items for dark-themed alarm dialog were invisible on Windows 7
  • Various security fixes

New in Portable Thunderbird Supernova 102.3.0 (Sep 21, 2022)

  • Changes:
  • Thunderbird will no longer attempt to import account passwords when importing from another Thunderbird profile in order to prevent profile corruption and permanent data loss.
  • Devtools performance profile will use Thunderbird presets instead of Web Developer presets
  • Fixes:
  • Thunderbird startup performance improvements
  • Saving email source and images failed
  • Error message was shown repeatedly when temporary disk space was full
  • Attaching OpenPGP keys without a set size to non-encrypted messages briefly displayed a size of zero bytes
  • Global Search entry box initially contained "undefined"
  • Delete from POP Server mail filter rule intermittently failed to trigger
  • Connections to POP3 servers without UIDL support failed
  • Pop accounts with "Fetch headers only" set downloaded complete messages if server did not advertise TOP capability
  • "File -> New -> Address Book Contact" from Compose window did not work
  • Attach "My vCard" option in compose window was not available
  • Improved performance of matching a contact to an email address
  • Address book only recognized a contact's first two email addresses
  • Address book search and autocomplete failed if a contact vCard could not be parsed
  • Downloading NNTP messages for offline use failed
  • NNTP client became stuck when connecting to Public-Inbox servers
  • Various visual and UX improvements
  • Various security fixes

New in Portable Thunderbird Supernova 102.2.1 (Sep 2, 2022)

  • What’s New:
  • Commandline argument to open Calendar at startup added (-calendar)
  • Changes:
  • Buttons to connect automatically discovered Address Books and Calendar during Account Setup now displayed
  • Fixes:
  • Compacting IMAP folders failed when "Just mark as deleted" was set
  • Message threading status and sort order was not transferred when applying column layout to other folders
  • Folder names with half-width Kana characters were displayed incorrectly
  • Digital signing of messages was not disabled after switching to an identity that could not sign
  • POP message retrieval stopped after a network error occurred and connectivity was restored
  • Activity Manager didn't show "Get Messages" activity when "Leave messages on server" was turned off and no new messages were found
  • Mail quota color did not update properly for multiple accounts
  • Profile export failed if an expected file did not exist
  • Check Spelling dialog could exceed screen size when many dictionaries were available
  • Dragging a news message to the Desktop caused Thunderbird to hang when synchronized for offline use
  • Remove All Expired Articles was not displayed on expired NNTP messages
  • Sending messages to encrypted Matrix rooms failed in some cases
  • Adding a CalDAV calendar on BSD-based OS's failed due to DNS errors
  • Various visual and UX improvements
  • Various security fixes
  • Known Issues:
  • "Get Map" feature missing from address book for physical addresses
  • No dedicated "Department" field in address book

New in Portable Thunderbird Supernova 102.2.0 (Aug 25, 2022)

  • What’s New:
  • Config setting added to disable OpenPGP "encryption is possible" reminder: mail.openpgp.remind_encryption_possible
  • Changes:
  • Thunderbird will no longer offer to import OpenPGP keys that are incomplete
  • Selecting or unselecting a dictionary in the Spelling compose toolbar button will no longer immediately close the menu; Making dictionary changes via the editor context menu will continue to close the context menu
  • Contact address lines are now adjusted to appear in the expected order
  • Custom1-4 fields restored to Address Book UI; existing data is preserved from pre-102 profiles
  • Fixes:
  • Thunderbird startup performance improvements
  • ALT+<numpad digits> keypress events were intercepted by the Spaces Toolbar, preventing special character entry on Windows
  • fixed
  • Searching on attachment status did not work in Message Search dialog
  • Repairing IMAP folders in Offline mode removed local copy of the folders
  • POP3 message download progress bar was not displayed
  • POP Fetch headers only mode did not work for some server configurations
  • POP accounts using GSSAPI or NTLM authentication were not able to log into the server
  • A TLS certificate override dialog for self-signed certificates was not shown for IMAP accounts
  • Saving attachments from newsgroups did not work
  • Setting contact type to "None" was not possible if a type was previously set
  • Editing a contact without Name fields populated filled in the email address into the name fields
  • Address book toolbar buttons were not keyboard accessible
  • Auto-detection of CalDAV and CardDAV via DNS records used server domain leading to failures
  • Various visual and theme improvements
  • Various security fixes

New in Portable Thunderbird Supernova 102.1.2 (Aug 10, 2022)

  • Fixes:
  • The fix for bug 1777765 (no POP download progress bar) was backed out from this release to address broken POP message download with Fetch headers only selected in Account Settings (bug 1783552).

New in Portable Thunderbird Supernova 102.1.1 (Aug 9, 2022)

  • Changes:
  • OpenPGP Key Manager will clear selected keys after a deletion is performed
  • Fixes:
  • Update notification popups were still displayed after switching to another desktop workspace on Linux
  • OpenPGP public key was not automatically attached after enabling encryption from reminder and default setting is "Do not encrypt"
  • Importing OpenPGP keys stored in binary format failed
  • Exporting an OpenPGP public key from Account Settings failed
  • Saving encrypted OpenPGP attachments created corrupt files
  • Receiving many OpenPGP keys in a single email caused Thunderbird to hang
  • POP3 message download progress bar was not displayed
  • OAuth2 authentication was not available when the mail domain did not match the OAuth provider domain
  • OAuth did not work with some POP servers
  • RSS feed URL links in headers panel could not be activated by keyboard
  • Self-signed TLS certificates did not work with POP3 connections
  • Non-ascii characters in passwords did not work with POP3 connections
  • An error was not displayed when an incorrect password was entered for a POP3 account
  • NNTP articles were not displayed in preview pane when a Primary Password was set
  • NNTP articles did not download when the hostname of the server was not all in lower-case
  • Saving NNTP messages to local disk failed
  • Drag and Drop from Address Book into Compose window sometimes added unexpected contacts to the target
  • "Default" label not shown for emails when editing a contact
  • Contact Title, Role, and Organization fields could be displayed in the wrong order
  • Contact birthdays on February 29 were displayed incorrectly in non-leap years
  • Detection of photos in vCards improved
  • Drag and drop contacts to another address book was not available
  • Contacts stored in a Google CardDAV address book contained extra backslashes in text fields
  • Contacts without First/Last/Display Names appeared blank in contact list
  • Auto-attaching vCard and OpenPGP keys did not always work as expected
  • Settings page used caused excessive CPU usage
  • Calendar did not respect Date and Time Formatting in Settings
  • OpenPGP Key Import wizard did not adapt to dark theme
  • Various visual and theme improvements
  • Various accessibility improvements

New in Portable Thunderbird Supernova 102.1.0 (Jul 29, 2022)

  • Fixes:
  • Activity Manager did not display POP message downloads
  • Mail Folder Properties dialog was not sized correctly, cutting off contents
  • Expired news messages did not display an error
  • Calendar Column Picker closed prematurely after selecting/deselecting a single column
  • Various UI improvements
  • Various security fixes

New in Portable Thunderbird Supernova 102.0.1 (Jul 7, 2022)

  • Fixes:
  • Mailbox MSF files could become corrupt in some circumstances
  • OpenPGP Key Assistant did not show status for addresses handled by aliases
  • Attaching an external OpenPGP public key failed if configured with a subkey ID
  • Thunderbird continued using an old password after changing it
  • New mail notifications were only shown for one mail account when multiple accounts were configured
  • LDAP Address Books could not be configured using IPv6 address literals
  • CardDAV contacts (notably Google-hosted) with more than one email address were not always editable
  • Address Book accessibility improvements
  • Various UI improvements
  • Icons converted to new style

New in Portable Thunderbird Supernova 102.0 (Jun 30, 2022)

  • What’s new:
  • Thunderbird will now display a message when an upgrade migration task is taking a long time to complete
  • es-MX localized build now available
  • What's link displayed in About: dialog
  • Profile Import/Export UI refreshed and moved to a tab
  • Commandline tools now included for OpenPGP debugging
  • Thunderbird may now be built with OpenPGP support and a system librnp
  • Added menu option to permanently decrypt OpenPGP encrypted messages to a folder
  • OpenPGP: Public keys from email attachments and autocrypt headers now cached for future use
  • Expired OpenPGP recipient keys now indicated in compose window
  • OpenPGP Key Assistant enabled by default
  • OpenPGP Key Properties now supports refreshing keys from key server
  • Spaces vertical toolbar for easier in-app navigation
  • Compose toolbar button for OpenPGP & S/MIME signing available via "Customize Toolbar"
  • "Select all addresses" now supported from composer pill context menu
  • Multiple active spelling dictionaries now supported in compose window
  • Add dictionaries item added to Spelling button in compose window
  • Added config option to more aggressively warn sender about having many public recipients to an email (mail.compose.warn_public_recipients.aggressive)
  • Exporting current profile now supported on importing tab
  • Back/Forward keyboard shortcuts added to Addon Manager
  • Address Book UI and significant backend overhaul
  • Importing sqlite address books now supported
  • Importing addressbooks via CSV file now supports semi-colon (;) delimited files
  • Opening a s:// URL now works if an account is not configured for that s server
  • Google Talk chat accounts now support logging in with OAuth2
  • Matrix chat support enabled by default. This is a beta feature.
  • Printing using the system dialog without preview now supported; Set print.prefer_system_dialog to true
  • Removing events from a calendar now prompts for confirmation
  • Upcoming events in the Today Pane show how far away they are
  • Icons now displayed on recurring events and modified events within a recurring series
  • Changes:
  • SMTP client will now ignore socket errors after QUIT command is sen
  • Javascript POP implementation enabled by default
  • Buttons on "Update Failed" popup now open Beta and Release specific pages on Thunderbird website
  • Replace "About Junk Mail" dialog with a link to the support page
  • macOS] Account settings moved to application menu
  • profiles will default to using "Threaded" message view
  • "Discover OpenPGP Key" context menu item is no longer displayed when a key is already available
  • Duplicated OpenPGP encrypted attachments were shown when display-attachments-inline was enabled
  • Replaced Security compose toolbar button with Encryption toggle and Encryption options buttons
  • OpenPGP dialog for key "acceptance per email" now displayed in more circumstances
  • OpenPGP Key Manager dialog layout improvements
  • Writing OpenPGP keyring data will block Thunderbird shutdown to prevent data loss
  • When automatically attaching OpenPGP keys to emails, Thunderbird will strip key certificates
  • A notification bar in the compose window will be displayed if encryption is possible but not enabled
  • Inline attachment filenames now sent without data-uri encoding
  • Per-recipient and per-domain email format preferences removed; Sending options moved to Compose Settings
  • Thunderbird can now be used without setting up a mail account
  • NNTP account set up moved to its own wizard; "Other accounts" wizard removed
  • Account Manager UI updated
  • Email account provisioner moved to a tab
  • Link to create a email address in Account Setup now hidden if "Email address" contains a value
  • Addon Search will no longer display addons that are incompatible
  • Searching from the Themes page of Addon Manager will now limit search results to only include themes
  • Additional fields for download limits, expiration, and password protection added to FileLink template
  • FileLink will check the provider for sufficient space before uploading
  • "PreferMailFormat" property removed from addressbook
  • Address book contact data is now stored in the vCard format. The change isn't backwards-compatible; backups are stored in the profile directory.
  • Default install directory for Thunderbird Beta to not conflict with release versions
  • Tab icons updated
  • Message Header toolbar buttons will not display a border when set to show icons only
  • message detection for non-INBOX IMAP folders improved
  • Javascript NNTP implementation enabled by default; Set mails.nntp.jsmodule to false to disable
  • Preference for OTR encrypted conversation logging moved to Protocol settings
  • Thunderbird will not try to use OTR Chat encryption if the protocol supports native encryption
  • Invitations to IRC and XMPP chat rooms will now prompt the user if they would like to join
  • Today Pane UI refreshed
  • Thunderbird will not support "Secondly" or "Minutely" recurring calendar events
  • Default action of Edit button in recurring event dialog to display submenu
  • Support for importing and exporting calendars from Outlook CSV format was removed
  • Thunderbird will now delay refreshing cached calendars at start-up
  • Javascript Ical parser (ical.js) enabled by default
  • Fixes:
  • Opening "cid:" links failed
  • Message download progress was calculated incorrectly
  • Ctrl+mouse wheel did not zoom in the message source window
  • Open message in containing folder did not work for standalone windows
  • Multi-message view was not fully scrollable
  • Messages did not reload in all open windows after Junk status was
  • Detached attachments were opened from a temporary copy instead of the selected save location
  • IMAP folder subscription changes on servers using OAuth2 authentication were not reflected in folder pane until Thunderbird was restarted
  • Improved error reporting for external GnuPG configurations
  • Incorrect OpenPGP preferences were used for secondary identities
  • Adding an expiry date to an OpenPGP key that did not have one was not possible
  • UI showed old OpenPGP key expiry date after changing it
  • Importing large OpenPGP key files failed
  • OpenPGP "Repair Message" button did not work with some emails
  • Importing OpenPGP public keys without a blank line following the header failed
  • Dragging and dropping multiple email attachments between windows did not always copy all attachments
  • Attachment bar in message compose window was not keyboard accessible
  • Triggering recipient pill creation in the compose window incorrectly used the entire field as input
  • Compose notification bars were not easily accessible via keyboard
  • "Save message" confirmation dialog buttons were not navigable using arrow keys
  • Focus jumped in compose window when closing the contacts sidebar
  • Save dialog was incorrectly shown when closing empty composer windows
  • Incorrect access key used for File->->Message menu item
  • Changing focus in the compose window with multiple recipient pills selected did not always deselect the pills
  • Sending a message with non-ascii characters in recipient local parts failed unexpectedly when the server did not support SMTPUTF8
  • LDAP Autoconfig could block Thunderbird startup
  • Improvements to the Import/Export feature
  • Configuring multiple SMTP accounts using the same server was not possible
  • Empty Trash on Exit did not work with IMAP accounts using OAuth2 authentication
  • IMAP server hostname changes were not reflected in Folder Properties dialog
  • Addons automatically updated when Thunderbird updated despite Addon updates being turned off
  • Message size calculations incorrectly included FileLink attachments
  • After converting a FileLink attachment back to an e-mail attachment, the privacy notification persisted
  • A failed FileLink provider change removed the attachment completely
  • Subscribing to CardDAV address books from Account Setup tab did not subscribe to all selected address books
  • Adding CardDAV address books failed if an addon-provided address book was present
  • Messages with Message-Id headers longer than 332 characters could not be forwarded
  • SMTP send progress bar could trigger high CPU usage when the server connection failed
  • Improved POP server authentication detection during Account Setup
  • s folders did not display biff indicator
  • IMAP flag changes from another client were not seen after some inactivity
  • Recipients were not de-duplicated before sending, leading to sending errors
  • Chat conversations' context menu did not recognize links
  • Chat username splitting in the account wizard did not work after changing protocols
  • Removing obsolete proprietary chat accounts did not work
  • OTR encrypted chat did not work on FreeBSD
  • Event edit toolbar button was not disabled when an invitation was selected
  • Event view headers and content were not lined up consistently for RTL locales
  • Mini-month views did not properly update at midnight
  • Some labels in Calendar were displayed in multiple languages
  • Thunderbird permitted inline editing of read-only event titles
  • Calendar view reloaded when switching tabs
  • It was possible to create annual calendar events with invalid days
  • Detection of attached vCalendar files improved
  • Reminders for events created by another user could not be closed
  • MS Teams meeting event descriptions were unreadable when stored on Google Calendar
  • Adding a Google calendar with a non-gmail or googlemail e-mail address failed
  • Accepting a recurrence exception to an event accepted event associated with the original recurring event rather than the exception
  • Various security fixes

New in Portable Thunderbird Supernova 91.9.1 (May 31, 2022)

  • Various security fixes

New in Portable Thunderbird Supernova 91.9.0 (May 5, 2022)

  • Changes:
  • A warning is now displayed if an OpenPGP key has unsafe attributes that are ignored; See support article.
  • Fixes:
  • OpenPGP integration in Thunderbird 91.8.0 and 91.8.1 did not allow SHA-1 key signatures
  • CalDAV calendars were marked read-only on startup
  • Various security fixes

New in Portable Thunderbird Supernova 91.8.1 (Apr 22, 2022)

  • Fixes:
  • CLIENTID extension to SMTP was not supported by smtp-js
  • Additional SMTP errors now propagated to user
  • OpenPGP was not able to use some previously supported key types
  • OpenPGP Key Manager did not always display correct information after importing additional IDs
  • Duplicate new mail notifications could be displayed when server-side filters were in use
  • Cancelling an SMTP password entry resulted in multiple failure dialogs being displayed

New in Portable Thunderbird Supernova 91.8.0 (Apr 8, 2022)

  • Changes:
  • Google accounts using password authentication will be migrated to OAuth2. See KB Article.
  • Fixes:
  • OpenPGP ECC keys created by Thunderbird could not be imported into GnuPG
  • Exporting multiple public PGP keys from Thunderbird was not possible
  • Replying to a newsgroup message erroneously displayed a "No-reply" popup warning
  • Opening mid: URLs on macOS failed
  • Address books stored in older formats were loaded as SQLite files, causing a crash
  • Replicated LDAP directories were lost after switching Thunderbird to "Offline"`mode
  • Importing webcals from the commandline failed if the URI ended with an .ics file extension
  • Various security fixes

New in Portable Thunderbird Supernova 91.7.0 (Mar 9, 2022)

  • Changes:
  • Thunderbird will use the first occurrence of headers that should only appear once
  • Fixes:
  • Auto-complete incorrectly changed a pasted email address to the primary address of a contact
  • Attachments with filename extensions that were not registered in MIME types could not be opened
  • Copy/Cut/Paste actions not working in Thunderbird Preferences
  • Improved screen reader support of displayed message headers
  • Various security fixes

New in Portable Thunderbird Supernova 91.6.2 (Mar 6, 2022)

  • Fixes:
  • Temporary files from opened attachments were saved with world-readable permission
  • Various security fixes

New in Portable Thunderbird Supernova 91.6.1 (Feb 17, 2022)

  • Changes:
  • Thunderbird generated views of meeting invitations are now expanded by default
  • Fixes:
  • Emails were not downloading at startup under some conditions
  • Port numbers were not shown in "Confirm Security Exception" dialog for CalDAV connections
  • Various security fixes

New in Portable Thunderbird Supernova 91.6.0 (Feb 17, 2022)

  • What’s New:
  • Thunderbird will now offer to send large forwarded attachments via FileLink
  • Fixes:
  • Partially signed unencrypted messages displayed an incorrect "partially encrypted" notification
  • Attachments filenames were not sanitized before saving to disk
  • In the attachment bar, the "Import OpenPGP Key" item displayed for public keys displayed an error and did not import the key
  • "Open with" attachment dialog did not have a selected radio button option
  • Various security fixes

New in Portable Thunderbird Supernova 78.13.0 (Aug 11, 2021)

  • Changes:
  • WeTransfer FileLink provider removed
  • The fix for bug 1707360, from Thunderbird 78.12.0, was removed for causing regressions
  • Fixes:
  • OpenPGP: Homebrew's GPG Smartcard libraries not found on M1 Macs
  • Various security fixes

New in Portable Thunderbird Supernova 78.12.0 (Jul 14, 2021)

  • Fixes:
  • Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links
  • Chat account settings did not always save as expected
  • RSS feed subscriptions sometimes lost
  • Calendar: A parsing error for alarm triggers of type "DURATION" caused sync problems for some users
  • Various security fixes:
  • CVE-2021-29969: IMAP server responses sent by a MITM prior to STARTTLS could be processed
  • CVE-2021-29970: Use-after-free in accessibility features of a document
  • CVE-2021-30547: Out of bounds write in ANGLE
  • CVE-2021-29976: Memory safety bugs fixed in Thunderbird 78.12

New in Portable Thunderbird Supernova 78.11.0 (Jun 4, 2021)

  • Fixes:
  • OpenPGP could not be disabled for an account if a key was previously configured
  • Recipients were unable to decrypt some messages when the sender had changed the message encryption from OpenPGP to S/MIME
  • Contacts moved between CardDAV address books were not synced to the new server
  • CardDAV compatibility fixes for Google Contacts
  • Windows theme improvements
  • Various security fixes

New in Portable Thunderbird Supernova 78.10.2 (May 18, 2021)

  • What’s New:
  • Added support for importing OpenPGP keys without a primary secret key
  • Add-ons manager displays a preferences icon for mail extensions that include an options page
  • Fixes:
  • OpenPGP messages with a high compression ratio (over 10x) could not be decrypted
  • Selected OpenPGP key was lost after opening the Key Properties dialog in Account Settings
  • Parsing some OpenPGP user IDs failed
  • Various improvements to OpenPGP partial encryption reminders
  • Troubleshooting information page did not display row labels on macOS
  • Mail toolbar buttons were too big when displaying both icons and text
  • Various security fixes

New in Portable Thunderbird Supernova 78.10.1 (May 5, 2021)

  • Changes:
  • Removed the fix for bug 1689804 introduced in Thunderbird 78.9.0, restoring the previous behavior
  • Various security fixes:
  • CVE-2021-29951: Thunderbird Maintenance Service could have been started or stopped by domain users

New in Portable Thunderbird Supernova 78.10.0 (Apr 20, 2021)

  • Fixes:
  • Usability & theme improvements on Windows
  • Various security fixes:
  • CVE-2021-23994: Out of bound write due to lazy initialization
  • CVE-2021-23995: Use-after-free in Responsive Design Mode
  • CVE-2021-23998: Secure Lock icon could have been spoofed
  • CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage
  • CVE-2021-23999: Blob URLs may have been granted additional privileges
  • CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL
  • CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads
  • CVE-2021-29946: Port blocking could be bypassed
  • CVE-2021-29948: Race condition when reading from disk while verifying signatures

New in Portable Thunderbird Supernova 78.9.1 (Apr 9, 2021)

  • What’s New:
  • Support recipient aliases for OpenPGP encryption. Documentation can be found here.
  • Fixes:
  • The key and signature parts of the message security popup on a received message could not be selected for copy/paste.
  • Various UX and theme improvements
  • Various security fixes

New in Portable Thunderbird Supernova 78.9.0 (Mar 25, 2021)

  • Fixes:
  • New mail notification displayed old messages that were unread
  • Spaces following soft line breaks in messages using quoted-printable and format=flowed were incorrectly encoded; existing messages which were previously incorrectly encoded may now display with some words not separated by a space
  • Some fields were unreadable in the Dark theme in the General preferences panel
  • Sending a message containing an anchor tag with an invalid data URI failed
  • When switching tabs, input focus was not moved to the new tab
  • Address Book: Syncing a read-only Google address book via CardDAV failed
  • Address Book: Importing VCards with non-ascii characters would fail
  • Address Book: Some values may not have been parsed when syncing from Google address books.
  • Add-ons Manager did not show if an addon used experiment APIs
  • Calendar: Removing a recurring task was not possible
  • Various security fixes
  • Known Issues:
  • The fix for bug 210148 included in Thunderbird 78.8.1 was removed. New mail notifications not showing if there were unread messages from previous notifications.

New in Portable Thunderbird Supernova 78.8.1 (Mar 9, 2021)

  • Fixes:
  • New mail notification did not occur for newly arrived messages if previously received mail was unread
  • Directory for saving multiple attachments was not remembered between saves
  • Opening a message from the command-line using "-mail <URL>" failed
  • Automatic account setup did not use the provider email and display name
  • Newly-added identities were not listed in the account manager until it was closed and reopened
  • Account provisioner did not properly handle UTF-8 data
  • Copying a large message to an IMAP server would sometimes prematurely display a time-out error
  • OpenPGP: Various errors when importing keys
  • OpenPGP: Public keys attached to an outgoing email did not have "Content-Description" set
  • Address Book: CardDAV sync errors did not retry until Thunderbird was restarted
  • Calendar: Changing the cache mode of a CalDAV calendar connection would lose the username of the account
  • Calendar: Add-on calendars were sometimes not visible after restarting
  • Calendar: The preview for a recurring task did not use all available space in the dialog window
  • Installer: Option to keep distribution directory on upgrade did not work

New in Portable Thunderbird Supernova 78.8.0 (Feb 25, 2021)

  • Fixes:
  • Importing an address book from a CSV file always reported an error
  • Security information for S/MIME messages was not displayed correctly prior to a draft being saved
  • Calendar: FileLink UI fixes for Caldav calendars
  • Recurring tasks were always marked incomplete; unable to use filters
  • Various UI widgets not working
  • Dark theme improvements
  • Extension manager was missing link to addon support web page
  • Various security fixes

New in Portable Thunderbird Supernova 78.7.1 (Feb 8, 2021)

  • What’s New:
  • CardDAV address books now support OAuth2 and Google Contacts.
  • Changes:
  • Thunderbird will no longer allow installation of addons that use legacy APIs
  • Fixes:
  • Send message button sometimes remained enabled when it should be disabled
  • Pressing command+enter to send a message on macOS did not work
  • OpenPGP: Failed to save attachments that contained binary data after decryption
  • Global search UI fixes
  • Various theme and color fixes to improve ease of use

New in Portable Thunderbird Supernova 78.7.0 (Jan 28, 2021)

  • What’s New:
  • Extension API: Compose API now supports editing messages and templates as new messages
  • Extension API: composeHtml is now exposed in MailIdentity
  • Extension API: windows.update and windows.create now support titlePreface
  • Extension API: new Accounts API functions: accounts.getDefault() and accounts.getDefaultIdentity(accountId)
  • Changes:
  • Extension API: body and plainTextBody are now used as compose mode selectors in setComposeDetails and begin* functions in Compose API
  • Theme: removed the double border around the task description field on the Tasks tab
  • Fixes:
  • Account Manager: When deleting the last remaining account, the default account was not getting cleared and still pointed to the no-longer-existing account
  • OpenPGP: Verification of an inline signed message would fail if it contained leading whitespace
  • OpenPGP: Various other minor bug and stability fixes
  • Mail Window: Quickfilter bar buttons disappear when hovered on Windows 10 High Contrast Black theme
  • Theme: folder properties dialog contained black text on a black background in dark mode
  • Theme: recipient pills in compose window were not visible in high contrast dark theme on Windows 10
  • Extension API: browserAction buttons were not restored after restart if they were moved outside the default toolbar
  • Extension API: browser.compose.beginNew could not override identity plaintext setting
  • Extension API: browser.compose.beginForward was ignoring ComposeDetails
  • Extension API: browser.compose.setComposeDetails did not properly handle Windows-style line endings
  • Various security fixes

New in Portable Thunderbird Supernova 78.6.1 (Jan 25, 2021)

  • Changes:
  • MailExtensions: browserAction, composeAction, and messageDisplayAction toolbar buttons now support label and default_label properties
  • Fixes:
  • Running a quicksearch that returned no results did not offer to re-run as a global search
  • Message search toolbar fixes
  • Very long subject lines distorted the message compose and display windows, making them unusable
  • Compose window: Recipient addresses that had not yet been autocompleted were lost when clicking Send button
  • Compose window: New message is no longer marked as "changed" just from tabbing out of the recipient field without editing anything
  • Account autodiscover fixes when using MS Exchange servers
  • LDAP address book stability fix
  • Messages with invalid vcard attachments were not marked as read when viewed in the preview window
  • Chat: Could not add TLS certificate exceptions for XMPP connections
  • Calendar: System timezone was not always properly detected
  • Calendar: Descriptions were sometimes blank when editing a single occurrence of a repeating event
  • Various printing bugfixes
  • Visual consistency and theme improvements
  • Various security fixes

New in Portable Thunderbird Supernova 78.5.1 (Dec 12, 2020)

  • What’s New:
  • OpenPGP: Added option to disable email subject encryption
  • Changes:
  • OpenPGP public key import now supports multi-file selection and bulk accepting imported keys
  • MailExtensions: getComposeDetails will wait for "compose-editor-ready" event
  • Fixes:
  • New mail icon was not removed from the system tray at shutdown
  • "Place replies in the folder of the message being replied to" did not work when using "Reply to List"
  • Thunderbird did not honor the "Run search on server" option when searching messages
  • Highlight color for folders with unread messages wasn't visible in dark theme
  • OpenPGP: Key were missing from Key Manager
  • OpenPGP: Option to import keys from clipboard always disabled
  • The "Link" button on the large attachments info bar failed to open up Filelink section in Options if the user had not yet configured Filelink
  • Address book: Printing members of a mailing list resulted in incorrect output
  • Unable to connect to LDAP servers configured with a self-signed SSL certificate
  • Autoconfig via LDAP did not work as expected
  • Calendar: Pressing Ctrl-Enter in the new event dialog would create duplicate events
  • Various security fixes

New in Portable Thunderbird Supernova 78.4.0 (Oct 22, 2020)

  • What’s New:
  • MailExtensions: browser.tabs.sendMessage API added
  • MailExtensions: messageDisplayScripts API added
  • Changes:
  • Yahoo and AOL mail users using password authentication will be migrated to OAuth2
  • MailExtensions: messageDisplay APIs extended to support multiple selected messages
  • MailExtensions: compose.begin functions now support creating a message with attachments
  • Fixes:
  • Thunderbird could freeze when updating global search index
  • Multiple issues with handling of self-signed SSL certificates addressed
  • Recipient address fields in compose window could expand to fill all available space
  • Inserting emoji characters in message compose window caused unexpected behavior
  • Button to restore default folder icon color was not keyboard accessible
  • Various keyboard navigation fixes
  • Various color-related theme fixes
  • MailExtensions: Updating attachments with onBeforeSend.addListener() did not work

New in Portable Thunderbird Supernova 78.3.3 (Oct 17, 2020)

  • Fixes:
  • OpenPGP: Improved support for encrypting with subkeys
  • OpenPGP message status icons were not visible in message header pane
  • OpenPGP Key Manager was missing from Tools menu on macOS
  • Creating a new calendar event did not require an event title
  • Known Issues:
  • Message list is not focused at startup

New in Portable Thunderbird Supernova 78.3.2 (Oct 7, 2020)

  • Changed:
  • Thunderbird will no longer automatically install updates when Preferences tab is opened
  • Fixed:
  • OpenPGP: Improved support for encrypting with subkeys
  • OpenPGP: Encrypted messages with international characters were sometimes displayed incorrectly
  • Single-click deletion of recipient pills with middle mouse button restored
  • Searching an address book list did not display results
  • Windows installer was unreadable with Windows in high contrast mode
  • Dark mode, high contrast, and Windows theming fixes
  • Known Issues:
  • Message list is not focused at startup

New in Portable Thunderbird Supernova 78.3.1 (Sep 27, 2020)

  • Thunderbird 78.3.1 includes a fix for crashes reported in Thunderbird 78.3.0

New in Portable Thunderbird Supernova 78.3.0 (Sep 27, 2020)

  • Changes:
  • OpenPGP: Improved decryption performance with large messages
  • OpenPGP: Do not show external key UI when disabled by preference
  • Account setup wizard will now open a popup when connecting to a server with a self-signed SSL/TLS certificate
  • Installation of "legacy" MailExtensions now disabled
  • Reply-To header moved in compose window; now appears under From header
  • Calendar: Sidebar UI improvements
  • Fixes:
  • Selecting "Cancel" on the Master Password prompt at startup incorrectly reported corrupted OpenPGP data
  • OpenPGP: Creating a new key pair did not automatically select it for use
  • Dragging & Dropping recipient pills resulted in lost pills when an error was present
  • Spellcheck suggestions were unreadable in dark theme
  • Calendar: Multiple password prompts opened
  • Linux Distributions: UI was not rendered completely when built without updater
  • MailExtensions: browser.folders.delete failed on IMAP folders
  • Various security fixes
  • Known Issues:
  • Message list is not focused at startup

New in Portable Thunderbird Supernova 60.9.1 (Nov 9, 2019)

  • Fixed:
  • Problem with Google authentication (OAuth2)

New in Portable Thunderbird Supernova 60.9.0 (Sep 12, 2019)

  • new:
  • Offer to configure Exchange accounts for Office365. A third-party add-on is required for this account type. IMAP still exists as alternative.
  • fixed:
  • Various security fixes

New in Portable Thunderbird Supernova 60.8.0 (Jul 10, 2019)

  • Changed:
  • Calendar: Problems when editing event times, some related to AM/PM setting in non-English locales
  • Known Issues:
  • Due to changes in the Mozilla platform profiles stored on Windows network shares addressed via drive letters are now addressed via UNC
  • Chat: Twitter not working due to API changes at Twitter.com

New in Portable Thunderbird Supernova 60.7.2 (Jun 21, 2019)

  • Various security fixes

New in Portable Thunderbird Supernova 60.7.1 (Jun 14, 2019)

  • What’s New:
  • Fixed:
  • No prompt for smartcard PIN when S/MIME signing is used
  • Fixed:
  • Various security fixes
  • Known Issues:
  • Unresolved:
  • Due to changes in the Mozilla platform profiles stored on Windows network shares addressed via drive letters are now addressed via UNC
  • Unresolved:
  • Chat: Twitter not working due to API changes at Twitter.com

New in Portable Thunderbird Supernova 60.7.0 (May 22, 2019)

  • Changed:
  • Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut
  • Fixed:
  • Various security fixes

New in Portable Thunderbird Supernova 60.5.3 (Mar 6, 2019)

  • Fixed:
  • Problem when using "Send to > Mail recipient" on Windows introduced in version 60.5.2

New in Portable Thunderbird Supernova 60.5.2 (Feb 27, 2019)

  • Fixed:
  • Crash when using "Send to > Mail recipient" on Windows under some circumstances (MAPI interface)
  • UTF-8 support for MAPISendMail
  • Problem with S/MIME certificate verification when receiving email from Outlook (issue introduced in version 60.5.1)

New in Portable Thunderbird Supernova 60.5.0 (Jan 30, 2019)

  • What's new:
  • FileLink provider WeTransfer to upload large attachments
  • Thunderbird now allows the addition of OpenSearch search engines from a local XML file using a minimal user inferface: [+] button to select a file an add, [-] to remove.
  • More search engines: Google and DuckDuckGo available by default in some locales
  • During account creation, Thunderbird will now detect servers using the Microsoft Exchange protocol. It will offer the installation of a 3rd party add-on (Owl) which supports that protocol.
  • What's fixed:
  • Thunderbird now compatible with other WebExtension-based FileLink add-ons like the Dropbox add-on
  • Crash when using custom sound for new email notification
  • Various security fixes
  • Known Issues:
  • Due to changes in the Mozilla platform profiles stored on Windows network shares addressed via drive letters are now addressed via UNC
  • CalDav access to some servers not working. Workaround: Set preference network.cookie.same-site.enabled to false.
  • Chat: Twitter not working due to API changes at Twitter.com

New in Portable Thunderbird Supernova 60.4.0 (Dec 27, 2018)

  • New:
  • WebExtensions FileLink API to facilitate FileLink add-ons for WeTransfer and Dropbox (forthcoming)
  • Fixed:
  • Decoding problems for messages with less common charsets (cp932, cp936)
  • New messages in the drafts folder (and other special or virtual folders) will no longer be included in the new messages notification
  • Known issues:
  • Crash when using custom sound for new email notification. Workaround: Use system sound.
  • Due to changes in the Mozilla platform profiles stored on Windows network shares addressed via drive letters are now addressed via UNC
  • CalDav access to some servers not working. Workaround: Set preference network.cookie.same-site.enabled to false.
  • Chat: Twitter not working due to API changes at Twitter.com

New in Portable Thunderbird Supernova 60.3.3 (Dec 10, 2018)

  • Mitigated:
  • Thunderbird 60 will migrate security databases (key3.db, cert8.db to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a fault that potentially deleted saved passwords and private certificate keys for users using a master password. Version 60.3.3 will prevent the loss of data; affected users who have already upgraded to version 60.3.2 or earlier can restore the deleted key3.db file from backup to complete the migration.
  • Fixed:
  • Address book search and auto-complete slowness introduced in Thunderbird 60.3.2
  • Plain text markup with * for bold, / for italics, _ for underline and | for code did not work when the enclosed text contained non-ASCII characters
  • While composing a message, a link not removed when link location was removed in the link properties panel
  • Known Issues:
  • Decoding problems for messages with less common charsets (cp932, cp936). This will be fixed in version 60.4.0.
  • CalDav access to some servers not working. Workaround: Set preference network.cookie.same-site.enabled to false.
  • Chat: Twitter not working due to API changes at Twitter.com

New in Portable Thunderbird Supernova 60.3.1 (Nov 16, 2018)

  • FIXED:
  • Double-clicking on a word in the Write window sometimes launched the Advanced Property Editor or Link Properties dialog
  • Cookie removal (not working since Thunderbird version 52)
  • "Download rest of message" not working if global inbox was used
  • Encoding problems for users (especially in Poland) when a file was sent via a folder using "Sent to > Mail recipient" due to a problem in the Thunderbird MAPI interface
  • According to RFC 4616 and RFC 5721, passwords containing non-ASCII characters are encoded using UTF-8 which can lead to problems with non-compliant providers, for example office365.com. The SMTP LOGIN and POP3 USER/PASS authentication methods are now using a Latin-1 encoding again to work around this issue.
  • Shutdown crash/hang after entering an empty IMAP password
  • KNOWN ISSUES:
  • Under some circumstances Thunderbird on Mac will send attachments using the so-called AppleDouble format which can lead to problems with mail servers and recipients
  • CalDav access to some servers not working. Workaround: Set preference network.cookie.same-site.enabled to false.
  • Chat: Twitter not working due to API changes at Twitter.com (solution forthcoming)

New in Portable Thunderbird Supernova 60.3.0 (Nov 2, 2018)

  • Fixed:
  • Various Theme fixes where incorrect colors, backgrounds, etc. were displayed
  • Add-on Options menu not working on Mac
  • Shift+PageUp/PageDown in Write window
  • Saving content of Write windows didn't overwrite existing file
  • Issues related to "Edit Template" command
  • Gloda attachment filtering
  • Mailing list address auto-complete enter/return handling
  • Thunderbird hung if HTML signature references non-existent image
  • Filters not working for headers that appear more than once
  • Known issues:
  • Double-clicking on a word in the Write window sometimes launches the Advanced Property Editor or Link Properties dialog
  • CalDav access to some servers not working. Workaround: Set preference network.cookie.same-site.enabled to false.
  • Chat: Twitter not working due to API changes at Twitter.com (solution forthcoming)

New in Portable Thunderbird Supernova 60.0 (Aug 7, 2018)

  • New:
  • When writing a message, a delete button now allows the removal of a recipient. This delete button is displayed when hovering the To/Cc/Bcc selector.
  • Many improvements to attachments handling during compose: Attachments can now be reordered using a dialog, keyboard shortcuts, or drag and drop. The "Attach" button moved to the right to be above the attachment pane. The access key of the attachment pane (e.g. Alt+M, may vary depending on localization, Ctrl+M on Mac) now also works to show or hide the pane. The attachment pane can also be shown initially when composing a new message. Right-click on the header to enable this option. Hiding a non-empty attachment pane will now show a placeholder paperclip to indicate the presence of attachments and avoid sending them accidentally.
  • "Edit Template" command. This also solves various problems when saving as template (duplicates created, message ID lost).
  • "New Message from Template" command
  • Allow changing the Spellcheck Language from status bar
  • Light and Dark themes
  • WebExtension themes are now enabled in Thunderbird
  • A default startup directory in the address book window can now be configured
  • Individual feed update interval
  • An option under "Tools > Options, Advanced, General" now allows to select whether date/time display will follow the application locale (adjusted by operating system's format settings for that locale) or the locale selected in the operating system's regional settings. In other words, an US English Thunderbird can use, for example, German formats.
  • OAuth2 authentication for Yahoo and AOL
  • FIDO U2F support
  • Thunderbird now allows the conversion of folders from mbox to maildir format and vice versa. This is an experimental feature that needs to be enabled by setting the preference mail.store_conversion_enabled. Note that this functionality does not not work if the option "Allow Windows Search/Spotlight to search messages" is selected.
  • Calendar: Allow copying, cutting or deleting of a selected occurrence or the entire series for recurring events
  • Calendar: Provide an option to display locations for events in calendar day and week views
  • Calendar: Provide the ability for sending/not sending meeting notifications directly instead of showing a popup
  • Calendar: Option to select the target calendar when pasting an event or task
  • Calendar: Allow email scheduling for CalDAV servers supporting server-side scheduling
  • Thunderbird Chat now contains multiple built-in message themes
  • Changed:
  • IMPORTANT: Add-ons not marked as compatible with Thunderbird 60 by their authors will be disabled (this can be reverted via preference extensions.strictCompatibility)
  • IMAP: When after sending a message storing that sent message fails, the message can now be stored in a local folder
  • Add-on options can no longer be configured from the Add-on Manager page. A new menu item "Add-on Options" is now available on the Tools menu.
  • When messages are composed in paragraph format, "body text" and split mail quotes are converted to paragraphs when pressing the enter key
  • "Edit As New Message" will now use the account's default compose format, either HTML or plain text ignoring the format of the message. Plain text messages will be converted to HTML and vice versa. Then using the modifier, the format choice will be reverted.
  • The "Edit Draft" command now also honors the use of the shift key to convert HTML to plain text or vice versa when editing a draft
  • The plain text to HTML conversion has been improved where such a conversion is necessary for "Edit As New Message" or when the shift modifier is used for "Edit Draft" or "New Message from Template".
  • During address entry, the matching part of the address is now shown in bold. Preference mail.autoComplete.commentColumn allows to display the address book where the address is stored.
  • When attaching a message via drag and drop, the subject of the message is now used as attachment name instead of "Attached Message"
  • Better address book photo handling: Photos can be added by drag and drop and a copy of all photos will be stored in the Thunderbird profile
  • On first start, Thunderbird now shows the account setup dialog, no longer the account provisioner dialog
  • Thunderbird follows Firefox' Photon design with rectangular tabs and many other theme improvements
  • When customizing the From: address, Thunderbird will now use this address for the SMTP "MAIL FROM" command. Previously the address configured in the identity was used. The preference mail.smtp.useSenderForSmtpMailFrom allows return to the previous behavior.
  • Native notifications on Linux are now re-enabled
  • Thunderbird now uses Mozilla's latest proxy technology (add-on FoxyProxy now supported)
  • Thunderbird now uses the latest Rust-based Mozilla technology, including Quantum's CSS engine (based on Servo) and encoding_rs, for displaying and encoding messages
  • Calendar: Removal of capability to send email invitations compatible to Outlook 2002 and earlier
  • Calendar: Reminders on read-only calendars can now be dismissed, while reminders for missed events will now only be displayed for writable calendars if option "Show missed reminders for writable calendars" is selected
  • Thunderbird Chat: Nicknames inside of messages are colored to match the participants list
  • Fixed:
  • When many Thunderbird clients or other email clients accessed the same IMAP draft folder, messages were sometimes sent with the wrong identity. This has been corrected and the user will be notified if none of their identities matches the draft.
  • Various problems related to handling the IMAP trash folder: Under certain circumstances the selection of the trash folder didn't persist, for example when the name contained non-ASCII characters, or in localized versions of Thunderbird. At times unwanted additional trash folders were created. Selection of a trash folder didn't give immediate visual feedback.
  • Shared IMAP folders not shown in subscribe dialog under some circumstances
  • Messages moved between IMAP accounts were missing parts (embedded content or attachments) under some circumstances
  • Improvements encoding/decoding message headers
  • Text in the address book card view wasn't selectable
  • Passwords can now contain non-ASCII characters, like international characters, for example áäß, and symbols, for example €§
  • Outlook import. Note: Mail, address book and settings need to be imported individually as "Import Everything" currently does not work.
  • Localised versions of Thunderbird didn't show a localised name for Hotmail's "Deleted" folder
  • Contacts sidebar: Selection and context menu behavior
  • Better error handling for Gmail authentication to avoid re-downloading of folders
  • Thunderbird used a stale cached password after user edited a saved password
  • Calendar: Wrong time formatting for some time zones
  • Calendar: Can't copy information from event dialog for received invitations
  • Known issues:
  • CalDav access to some servers not working. Workaround: Set preference network.cookie.same-site.enabled to false.

New in Portable Thunderbird Supernova 60.0 RC1 (Jul 16, 2018)

  • NEW: When writing a message, a delete button now allows the removal of a recipient. This delete button is displayed when hovering the To/Cc/Bcc selector.
  • NEW: Further improvements to attachments handling during compose: "Attach" button moved to the right to be above the attachment pane. Alt+M now allows to show the attachment pane. The attachment pane can also be shown initially when composing a new message. Right-click on the header to enable this option. It is now also impossible to completely collapse a non-empty attachment pane. That protects against attachments accidentally being sent.
  • NEW: Thunderbird now allows the conversion of folders from mbox to maildir format and vice versa. This is an experimental feature that needs to be enabled by setting the preference mail.store_conversion_enabled. Note that this functionality does not not work if the option "Allow Windows Search/Spotlight to search messages" is selected.
  • NEW: Light and Dark themes
  • NEW: WebExtension themes are now enabled in Thunderbird
  • NEW: FIDO U2F support
  • NEW: Calendar: Allow copying, cutting or deleting of a selected occurrence or the entire series for recurring events
  • NEW: Calendar: Provide an option to display locations for events in calendar day and week views
  • NEW: Calendar: Provide the ability for sending/not sending meeting notifications directly instead of showing a popup
  • CHANGED: IMPORTANT: Add-ons not marked as compatible with Thunderbird 60 by their authors will be disabled (this can be reverted via preference extensions.strictCompatibility)
  • CHANGED: Thunderbird will now prompt to compact IMAP folders even if the account is online. Note: Under certain circumstances an incorrect estimate of the expected gain is shown.
  • CHANGED: Better address book photo handling: Photos can be added by drag and drop and a copy of all photos will be stored in the Thunderbird profile
  • CHANGED: Native notifications on Linux are now re-enabled
  • CHANGED: During address entry, the matching part of the address is now shown in bold. Preference mail.autoComplete.commentColumn allows to display the address book where the address is stored.
  • CHANGED: Calendar: Removal of capability to send email invitations compatible to Outlook 2002 and earlier
  • FIXED: Various problems when forwarding messages inline: Some introduced in Thunderbird 60 beta 7, some dating back to 2005 when using "simple" HTML view.
  • FIXED: The IMAP and News subscribe dialog did not present a folder tree (not working since Thunderbird version 59)
  • FIXED: Messages moved between IMAP accounts were missing parts (embedded content or attachments) under some circumstances
  • FIXED: Better error handling for Gmail authentication to avoid re-downloading of folders
  • FIXED: Text in the address book card view wasn't selectable
  • FIXED: UTF-7 support (not working since Thunderbird version 56)
  • FIXED: Complete fix of the EFAIL vulnerability: 1) Removing some HTML crafted to carry out an attack. 2) Not decrypting subordinate message parts that otherwise might reveal decrypted content to the attacker. Preference mailnews.p7m_subparts_external controls this.
  • FIXED: Thunderbird used a stale cached password after user edited a saved password
  • FIXED: The new menu item "Add-on Options" introduced in Thunderbird 59 beta is now also working on Mac
  • FIXED: Source view not working for JS, XML, CSS, etc. source files via 'Developer Tools > Error Console'. Other options: 1) Set preference view_source.editor.external and view_source.editor.path to view the source in the editor of your choice. 2) Use 'Developer Tools > Developer Toolbox, Console'. (not working in earlier versions of Thunderbird 60 beta)
  • FIXED: Deleting or detaching attachments corrupted messages under certain circumstances (not working in earlier versions of Thunderbird 60 beta)
  • FIXED: Calendar: Google account credentials not retained by Lightning

New in Portable Thunderbird Supernova 52.9.1 (Jul 11, 2018)

  • Changed:
  • Thunderbird will now prompt to compact IMAP folders even if the account is online
  • Fixed:
  • Complete fix of the EFAIL vulnerability: 1) Removing some HTML crafted to carry out an attack. 2) Optionally: Not decrypting subordinate message parts that otherwise might reveal decrypted content to the attacker. Preference mailnews.p7m_subparts_external needs to be set to true for added security.
  • Various problems when forwarding messages inline when using "simple" HTML view
  • Deleting or detaching attachments corrupted messages under certain circumstances (not working only in Thunderbird version 52.9.0)
  • Various security fixes

New in Portable Thunderbird Supernova 52.9.0 (Jul 7, 2018)

  • What’s New:
  • Thunderbird will now prompt to compact IMAP folders even if the account is online
  • Fixed:
  • Complete fix of the EFAIL vulnerability: 1) Removing some HTML crafted to carry out an attack. 2) Optionally: Not decrypting subordinate message parts that otherwise might reveal decrypted content to the attacker. Preference mailnews.p7m_subparts_external needs to be set to true for added security.
  • Various problems when forwarding messages inline when using "simple" HTML view
  • Various security fixes

New in Portable Thunderbird Supernova 52.8.0 (May 23, 2018)

  • Various security fixes:
  • CVE-2018-5183: Backport critical security fixes in Skia
  • CVE-2018-5184: Full plaintext recovery in S/MIME via chosen-ciphertext attack
  • CVE-2018-5154: Use-after-free with SVG animations and clip paths
  • CVE-2018-5155: Use-after-free with SVG animations and text paths
  • CVE-2018-5159: Integer overflow and out-of-bounds write in Skia
  • CVE-2018-5161: Hang via malformed headers
  • CVE-2018-5162: Encrypted mail leaks plaintext through src attribute
  • CVE-2018-5170: Filename spoofing for external attachments
  • CVE-2018-5168: Lightweight themes can be installed without user interaction
  • CVE-2018-5174: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update
  • CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension
  • CVE-2018-5185: Leaking plaintext through HTML forms
  • CVE-2018-5150: Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8, and Thunderbird 52.8

New in Portable Thunderbird Supernova 52.7.0 (Mar 24, 2018)

  • Fixed:
  • Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments
  • Fixed:
  • Better error handling for Yahoo accounts
  • Fixed:
  • Various security fixes

New in Portable Thunderbird Supernova 52.6.0 (Jan 26, 2018)

  • Fixed:
  • Searching message bodies of messages in local folders, including filter and quick filter operations, not working reliably: Content not found in base64-encode message parts, non-ASCII text not found and false positives found.
  • Defective messages (without at least one expected header) not shown in IMAP folders but shown on mobile devices
  • Calendar: Unintended task deletion if numlock is enabled
  • Various security fixes

New in Portable Thunderbird Supernova 52.5.2 (Dec 24, 2017)

  • This releases fixes the "Mailsploit" vulnerability and other vulnerabilities detected by the "Cure53" audit.

New in Portable Thunderbird Supernova 57.0 Beta (Nov 14, 2017)

  • New:
  • Allow changing the Spellcheck Language from status bar display
  • "New Message from Template" command
  • Changed:
  • "Edit As New Message" will now use the account's default compose format, either HTML or plain text ignoring the format of the message. Plain text messages will be converted to HTML and vice versa. Then using the modifier, the format choice will be reverted.
  • The plain text to HTML conversion has been improved where such a conversion is necessary for "Edit As New Message" or when the shift modifier is used for "Edit Draft" or "New Message from Template".
  • The "Edit Draft" command now also honors the use of the shift key to convert HTML to plain text or vice versa when editing a draft
  • When attaching a message via drag and drop, the subject of the message is now used as attachment name instead of "Attached Message"
  • On first start, Thunderbird now shows the account setup dialog, no longer the account provisioner dialog
  • Thunderbird follows Firefox' Photon design with rectangular tabs and many other theme improvements
  • In Thunderbird 54 beta a better support for Charter users was introduced. As a side effect, messages moved to a different IMAP folder were immediately removed from the source folder, even when the delete model "Just mark it as deleted" was in effect. This has now been restored to its pre-version 54 state, so moved IMAP messages are only crossed out in the source folder when this delete model is used.
  • Fixed:
  • When many Thunderbird clients or other email clients accessed the same IMAP draft folder, messages were sometimes sent with the wrong identity. This has been corrected and the user will be notified if none of their identities matches the draft.
  • Passwords can now contain non-ASCII characters, like international characters, for example áäß, and symbols, for example €§

New in Portable Thunderbird Supernova 52.4.0 / 56.0 Beta 4 (Oct 8, 2017)

  • New:
  • In Thunderbird 52 a new behavior was introduced for replies to mailing list posts: "When replying to a mailing list, reply will be sent to address in From header ignoring Reply-to header". A new preference mail.override_list_reply_to allows to restore the previous behavior.
  • Fixed:
  • Under certain circumstances (image attachment and non-image attachment), attached images were shown truncated in messages stored in IMAP folders not synchronised for offline use.
  • IMAP UIDs > 0x7FFFFFFF not handled properly
  • Various security fixes

New in Portable Thunderbird Supernova 52.3.0 (Aug 28, 2017)

  • Various security fixes
  • Large attachments taking a long time to open under some circumstances
  • No authorisation prompt displayed when inserting image into email body although image URL requires authentication
  • Selected text from another message sometimes included in a reply
  • Inline images not scaled to fit when printing
  • Message disposition flag (replied / forwarded) lost when reply or forwarded message was stored as draft and draft was sent later
  • Deleting message from the POP3 server not working when maildir storage was used
  • Unwanted inline images shown in rogue SPAM messages

New in Portable Thunderbird Supernova 52.2.1 (Jun 26, 2017)

  • Fixed:
  • Problems with Gmail (folders not showing, repeated email download, etc.) introduced in version 52.2.0.

New in Portable Thunderbird Supernova 52.2.0 (Jun 15, 2017)

  • WHAT'S NEW:
  • New:
  • Embedded images not shown in email received from Hotmail/Outlook webmailer
  • Detection of non-ASCII font names in font selector
  • Attachment not forwarded correctly under certain circumstances
  • Multiple requests for master password when GMail OAuth2 is enabled
  • Large number of blank pages being printed under certain circumstances when invalid preferences were present
  • Messages sent via the Simple MAPI interface are forced to HTML
  • Calendar: Invitations can't be printed
  • Mailing list (group) not accessible from macOS or Outlook address book
  • Clicking on links with references/anchors where target doesn't exist in the message not opening in external browser
  • Various security fixes

New in Portable Thunderbird Supernova 52.1.1 (May 17, 2017)

  • FIXED:
  • Crash when compacting IMAP folder
  • Some attachments can't be opened or saved if the message body is empty
  • Unable to load full message via POP if message was downloaded partially (or only headers) before
  • Large attachments may not be shown or saved correctly if the message is stored in an IMAP folder which is not synchronized for offline use
  • Known Issues UNRESOLVED:
  • Crash due to incompatibility with McAfee Anti-SPAM add-on. Workaround: Start in safe mode and disable McAfee Anti-Spam Extension
  • Large number of blank pages being printed under certain circumstances

New in Portable Thunderbird Supernova 52.1.0 (May 2, 2017)

  • Fixed:
  • Background images not working and other issues related to embedded images when composing email
  • Google Oauth setup can sometimes not progress to the next step

New in Portable Thunderbird Supernova 52.0.1 (Apr 18, 2017)

  • Fixed:
  • Clicking on a link in an email may not open this link in the external browser.
  • Crash due to incompatibility with McAfee Anti-SPAM add-on. Add-on is blocked in 52.0.1

New in Portable Thunderbird Supernova 52.0 (Apr 8, 2017)

  • New:
  • Folder pane toolbar and folder view selector (replacement for folder view arrows)
  • Optionally remove corresponding data files when removing an account from Thunderbird
  • Import settings from Becky! Internet Mail
  • Possibility to copy message filter
  • Dictionary setting is restored when editing a draft. Content-Language header (RFC 3282) transmitted with message
  • Calendar: Event can now be created and edited in a tab
  • Calendar: Processing of received invitation counter proposals
  • Chat: Support Twitter Direct Messages
  • Chat: Liking and favoriting in Twitter
  • Chat: XMPP: Support SASL SCRAM authentication mechanism
  • Chat: Support Jabber/XMPP Message Carbons (XEP-280)
  • Changed:
  • IMPORTANT: The way images are included in a compose window has changed. Images are now included as data URIs and not as references to parts of other messages or operating system files. This allows better interoperability with office packages such as MS Office or LibreOffice. Images linked from locations on the internet will no longer be downloaded and attached to the message automatically. This can be changed for each image individually via the Image Properties dialog or globally by setting the preference mail.compose.attach_http_images.
  • Correspondents column now default for all new folders, can be switched off with preference mail.threadpane.use_correspondents
  • When replying to a mailing list, reply will be sent to address in From header ignoring Reply-to header
  • Formatting toolbar is now left in place when delivery format is switched to plain text only
  • Messages in IMAP folders read on external device are now filtered by default
  • Folders backed by mbox storage larger than 4GB are supported without warning (unless preference mailnews.allowMboxOver4GB is set to false)
  • IMAP caching now uses Mozilla's latest caching technology
  • Chat: Removed Yahoo! Messenger support (since Yahoo removed support)
  • Fixed:
  • Message preview pane non-functional after IMAP folder was renamed or moved
  • Editing in paragraph format: Pressing Shift+Enter sometimes doesn't move the cursor to the next line
  • Various corrections when composing messages in paragraph format
  • Paste as quotation doesn't always work
  • Long lines in plain text replies not properly wrapped
  • Undesired white-space before signature in paragraph mode
  • When attachment unavailable, compose shows endless "Attaching..." message instead of error
  • Text encoding of reply sometimes incorrect (uses encoding of last viewed message)
  • Text encoding of message display, reply or forwarded message sometimes incorrect (uses encoding of attachment)
  • Delivery Format not preserved for saved drafts (Auto-Detect|Plaintext|HTML|Both)
  • Reply to own e-mail does not reply with the correct identity
  • IMAP message part caching
  • Links with escaped non-ASCII (international) characters can't be clicked
  • Calendar: Events specified in timezone "local time" generate alerts in UTC time
  • Chat: XMPP Resource collisions

New in Portable Thunderbird Supernova 45.8.0 (Mar 10, 2017)

  • Various security fixes:
  • In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.
  • CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP:
  • JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks.
  • CVE-2017-5401: Memory Corruption when handling ErrorResult:
  • A crash triggerable by web content in which an ErrorResult references unassigned memory due to a logic error. The resulting crash may be exploitable.
  • CVE-2017-5402: Use-after-free working with events in FontFace objects:
  • A use-after-free can occur when events are fired for a FontFace object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash.
  • CVE-2017-5404: Use-after-free working with ranges in selections:
  • A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash.
  • CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters:
  • Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure.
  • CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping:
  • Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup.
  • CVE-2017-5408: Cross-origin reading of video captions in violation of CORS:
  • Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions.
  • CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports:
  • Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations.
  • CVE-2017-5398: Memory safety bugs fixed in Thunderbird 45.8:
  • Mozilla developers and community members Boris Zbarsky, Christian Holler, Honza Bambas, Jon Coppeard, Randell Jesup, André Bargull, Kan-Ru Chen, and Nathan Froyd reported memory safety bugs present in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.

New in Portable Thunderbird Supernova 45.7.1 (Feb 9, 2017)

  • Fixed:
  • Crash when viewing certain IMAP messages (introduced in 45.7.0)

New in Portable Thunderbird Supernova 45.7.0 (Jan 31, 2017)

  • FIXED:
  • Message preview pane non-functional after IMAP folder was renamed or moved
  • "Move To" button on "Search Messages" panel not working
  • Message sent to "undisclosed recipients" shows no recipient (non-functional since Thunderbird version 38)
  • Calendar: No way to accept/decline email invitations when sent and received messages are stored in the same folder
  • Various security fixes

New in Portable Thunderbird Supernova 45.5.1 (Dec 2, 2016)

  • Various security fixes

New in Portable Thunderbird Supernova 45.5.0 (Nov 20, 2016)

  • CHANGED:
  • IMPORTANT: Changed recipient address entry: Arrow-keys now copy the pop-up value to the input field. Mouse-hovered pop-up value can no longer be confirmed with tab or enter key. This restores the behavior of Thunderbird 24.
  • Support changes to character limit in Twitter
  • FIXED:
  • Reply with selected text containing quote resulted in wrong quoting level indication
  • Email invitation might not be displayed when description contains non-ASCII characters
  • Attempting to sort messages on the Date field whilst a quick filter is applied got stuck on sort descending
  • Mail address display at header pane displayed incorrectly if the address contains UTF-8 according to RFC 6532

New in Portable Thunderbird Supernova 45.4.0 (Oct 17, 2016)

  • Fixed:
  • "Apply columns to..." did not honor special folders
  • Threading broken when editing message draft, due to loss of Message-ID
  • Mail saved as template copied In-Reply-To and References from original email.
  • Additional spaces were inserted when drafts were edited.
  • Recipient addresses were shown in red despite being inserted from the address book in some circumstances.
  • Display name was truncated if no separating space before email address.

New in Portable Thunderbird Supernova 45.3.0 (Aug 31, 2016)

  • Fixed:
  • Certain messages caused corruption of the drafts summary database.
  • "edit as new message" on a received message pre-filled the sender as the composing identity.
  • Disposition-Notification-To could not be used in mail.compose.other.header
  • Various security fixes

New in Portable Thunderbird Supernova 45.2.0 (Jul 6, 2016)

  • Fixed:
  • Invitations to events could not be printed.
  • Dragging and dropping of contacts from the contact list onto an addressbook while All Addressbooks is selected moved only one contact
  • Falsely reported not enough disk space during compacting
  • Links were not always detected properly in the message body (terminated early on "|", some long links not detected at all)

New in Portable Thunderbird Supernova 45.1.1 (Jun 1, 2016)

  • Fixed:
  • When entering members into a mailing list, the enter key dismissed the panel instead of just moving onto the next line
  • Email without HTML elements was sent as HTML, despite "Delivery Format: Auto-detect" option
  • Options applied to a template were lost when the template was used.
  • Contacts could not be deleted when they were found through a search
  • Views from global searches did not respect "mail.threadpane.use_correspondents"

New in Portable Thunderbird Supernova 45.1.0 (May 13, 2016)

  • Fixed: Drag & Drop a contact name from Thunderbird address book (list view) to address box in a new message “compose” window failed.
  • Fixed: Automatic correspondents column upgrade disabled
  • Fixed: DIGEST-MD5 authentication in JS-XMPP failed for some users (now disabled).
  • Fixed: Font indicator in compose falsely claimed certain fonts were not installed.
  • Fixed: Printing failed in composition window.
  • Fixed: Various security fixes
  • Fixed: Various improvements in handling of message compose in paragraph mode.

New in Portable Thunderbird Supernova 45.0 (Apr 14, 2016)

  • New: Add a Correspondents column combining Sender and Recipient
  • New: Much better support for XMPP chatrooms and commands.
  • New: Remote content exceptions: Improved options to add exceptions.
  • New: Implement option to always use HTML formatting to prevent unexpected format loss when converting messages to plain text.
  • New: Use OpenStreetmap for maps (even allow the user to choose from list of map services)
  • New: Allow spell checking and dictionary selection in the subject line
  • New: Allow editing of From when composing a message.
  • New: Add dropdown in compose to allow specific setting of font size.
  • New: Return/Enter in composer will now insert a new paragraph by default (shift-Enter will insert a line break)
  • New: Allow copying of name and email address from the message header of an email
  • New: Mail.ru supports OAuth authentication.
  • Fixed: When sending e-mail which was composed using Chinese, Japanese or Korean characters, unwanted extra spaces were inserted within the text.
  • Fixed: Spell checker checked spelling in invisible HTML parts of the message.
  • Fixed: When saving a draft that is edited as new message, original draft was overwritten.
  • Fixed: External images not displayed in reply/forward
  • Fixed: Crashed in some cases while parsing IMAP messages.
  • Fixed: Properly preserve pre-formatted blocks in message replies.
  • Fixed: Copy/paste from a plain text editor lost white-space (multiple spaces/blanks, tabs, newlines)
  • Fixed: "Open Draft"/"Forward"/"Edit As New"/"Reply" created message composition with incorrect character encoding.
  • Fixed: Grouped By view sort direction change was broken, plus enabled custom column grouping.
  • Fixed: New emails into a mailbox did not adhere to sort order by received.
  • Fixed: Box.com attachments failed to upload.
  • Fixed: Drag and drop of multiple attachments failed to OS file folder.
  • Fixed: XMPP had connection problems for users with large rosters

New in Portable Thunderbird Supernova 38.7.2 (Apr 6, 2016)

  • Changed: Disabled Graphite font shaping library

New in Portable Thunderbird Supernova 38.7.1 (Mar 25, 2016)

  • Various security fixes:
  • 2016-37 Font vulnerabilities in the Graphite 2 library
  • 2016-35 Buffer overflow during ASN.1 decoding in NSS
  • 2016-34 Out-of-bounds read in HTML parser following a failed allocation
  • 2016-31 Memory corruption with malicious NPAPI plugin
  • 2016-27 Use-after-free during XML transformations
  • 2016-24 Use-after-free in SetBody
  • 2016-23 Use-after-free in HTML5 string parser
  • 2016-20 Memory leak in libstagefright when deleting an array during MP4 processing
  • 2016-17 Local file overwriting and potential privilege escalation through CSP reports
  • 2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)

New in Portable Thunderbird Supernova 38.6.0 (Feb 15, 2016)

  • Check out what's new and known issues for this version of Thunderbird below. As always, you’re encouraged to tell us what you think, or file a bug in Bugzilla.

New in Portable Thunderbird Supernova 38.5.1 (Jan 7, 2016)

  • Changed:
  • Use a SHA-256 signing certificate for Windows builds, to meet new signing requirements

New in Portable Thunderbird Supernova 38.5.0 (Dec 27, 2015)

  • FIXED:
  • Prepare to use SHA-256 signing certificate for Windows builds, to meet new signing requirement (1079858)
  • In the address book manager, make the contacts sidebar remember the last selected address book (1142705)
  • Various security fixes:
  • Cross-site reading attack through data and view-source URIs
  • Integer overflow in MP4 playback in 64-bit versions
  • Underflow through code inspection
  • Integer overflow allocating extremely large textures
  • Miscellaneous memory safety hazards (rv:43.0 / rv:38.5)

New in Portable Thunderbird Supernova 38.3.0 (Sep 30, 2015)

  • New:
  • Saved files tab now implements Search field and Clear button.
  • Fixed:
  • (Right-)Clicking on a newsgroup now allows directly composing a message again
  • Importing to the address book from CSV now works with international characters
  • Thunderbird no longer crashes when executing filter rules when using maildir
  • When using the maildir storage format, the INBOX folder is no longer deleted
  • Emails with long References headers are now decoded correctly
  • Checking for new messages correctly works after hibernation again
  • Chat entries are no longer sometimes lost in global database at shutdown.

New in Portable Thunderbird Supernova 38.2.0 (Aug 20, 2015)

  • Changed:
  • Hardware acceleration is now disabled by default to avoid crashing Thunderbird
  • Fixed:
  • A few bugs have been fixed to avoid crashing Thunderbird

New in Portable Thunderbird Supernova 38.1.0 (Jul 13, 2015)

  • Bug Fixes:
  • Copy/Paste into plain text editor deletes newlines from quoted text (bug 1143570)
  • Cross-posts won't send because Newsgroups: groups are separated with comma+space, not just comma (bug 1151448)
  • Cannot send email through exchange server (NTLM) (bug 1174159)
  • Doesn't display GB2312 encoded texts correctly for Chinese Characters (bug 1174580)
  • OAuth2 authentication for GMail does not work when specified server is imap.gmail.com or smtp.gmail.com. (bug 1176773)
  • Security fixes:
  • 2015-71 NSS incorrectly permits skipping of ServerKeyExchange
  • 2015-70 NSS accepts export-length DHE keys with regular DHE cipher suites
  • 2015-67 Key pinning is ignored when overridable errors are encountered
  • 2015-66 Vulnerabilities found through code inspection
  • 2015-63 Use-after-free in Content Policy due to microtask execution error
  • 2015-59 Miscellaneous memory safety hazards (rv:39.0 / rv:31.8 / rv:38.1)

New in Portable Thunderbird Supernova 38.0.1 (Jun 12, 2015)

  • GMail supports OAuth2 authentication, removing the need to manually select "allow less secure applications" in Google options for the account. (bug 849540)
  • Ship Lightning calendar addon with Thunderbird and enable with an opt-out dialog (bug 1113183)
  • Filter sent messages (bug 11039)
  • Filter messages when archived (bug 479823)
  • Enable search in multiple/all address books (bug 170270)
  • Add support for Yahoo Messenger in Chat (bug 955574)
  • Support Internationalized domain name URLs for RSS feeds (Bug 1018589)
  • Show expanded columns in folder pane (bug 464973)
  • Allow file-per-message (maildir) local message storage (bug 845952)
  • Add a Learn more link to the support page in feeds subscribe dialog (bug 1053782)
  • Add reading position marker line to conversations (bug 760762)
  • The editor for twitter should show inputtable character count (bug 736002)
  • Thunderbird will no longer use SHA-1 to sign messages (bug 1018259)
  • Removed rarely used character sets: T.61-8bit, non-encoding Mac encoders, VISCII, x-viet-tcvn5712, x-viet-vps x-johab, ARMSCII8 , map us-ascii to windows-1252, ISO-8859-6-I and -E and ISO-8859-8-E, (bug 1068505 and others.)
  • Disable CONDSTORE support for IMAP to prevent discrepancies in IMAP message status (deleted, unread) on some servers (bug 912216)
  • Make OpenSearch queries open in the user's default browser (bug 1120777)
  • Default to using SSL for XMPP and IRC. This might cause issues for self-signed certificates (bug 1122567, bug 1122666)
  • Replied/forwarded icons disappear after folder repair, detach/delete (bug 840418)
  • Attachment "Save As" files are displayed in Tools/Saved Files (bug 914517)
  • Adding unknown email addresses to Mailing list, then deleting ghost duplicate entries from contacts pane, caused dataloss in mailing list (bug 628035)
  • Web site from RSS feed was not rendered correctly (bug 662907)
  • Email address with leading/trailing whitespace displayed wrongly with added quotes when composing ["foo"@bar.com] (bug 286760)
  • Force display of Sender header if S/MIME sender is the signer (bug 332639)
  • Addressing autocomplete widget: Typed text in red despite results/matches found if suggestions change by last input (bug 1042561)
  • Status bar not accessible (bug 934875)
  • Wrong folder may be deleted when requesting junk delete (bug 1018960)
  • Severe UI stutter or freezes getting new mail for very large folders (bug 870556)
  • Automatically rejoin multi-user conversations on reconnect for XMPP (bug 1014472)
  • Various improvements when using IRC on moznet (bug 1083768 and others)
  • Significantly improve XMPP support (bug 1085022 and others)
  • Fixes for connecting to non-standard IRC networks (bug 870556 and others)
  • Automatically reclaim IRC nicks during a reconnect (bug 1087566)
  • Changing location in editor doesn't preserve the font when returning to end of text/line (bug 756984)
  • Inline spell checker loses red underlines after a backspace is used (bug 1100966

New in Portable Thunderbird Supernova 31.7.0 (May 18, 2015)

  • Security fixes:
  • 2015-57: Privilege escalation through IPC channel messages
  • 2015-54: Buffer overflow when parsing compressed XML
  • 2015-51: Use-after-free during text processing with vertical text enabled
  • 2015-48: Buffer overflow with SVG content and CSS
  • 2015-47: Buffer overflow parsing H.264 video with Linux Gstreamer
  • 2015-46: Miscellaneous memory safety hazards (rv:38.0 / rv:31.7)

New in Portable Thunderbird Supernova 31.6.0 (Apr 7, 2015)

  • Security fixes:
  • 2015-40 Same-origin bypass through anchor navigation
  • 2015-37 CORS requests should not follow 30x redirections after preflight
  • 2015-33 resource:// documents can load privileged pages
  • 2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin
  • 2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6)

New in Portable Thunderbird Supernova 31.4.0 (Jan 14, 2015)

  • Fixed:
  • The previous issues with jp mac builds have now been fixed, and Thunderbird will no longer need to be run in 32-bit mode.
  • Installing extensions within Thunderbird no longer requires download and installing as a file
  • Security fixes:
  • 2015-04 Cookie injection through Proxy Authenticate responses
  • 2015-03 sendBeacon requests lack an Origin header
  • 2015-01 Miscellaneous memory safety hazards (rv:35.0 / rv:31.4)

New in Portable Thunderbird Supernova 31.3.0 (Dec 3, 2014)

  • FIXED:
  • Fixes an issue where using LDAP autocomplete could end up with blank entries in the compose addressing list (Bug 1045753)
  • Fixes an issue where IRC participants were not removed from the display on leaving a channel.
  • Fixes a regression where Thunderbird wasn't respecting the skip integration option on the default client dialog.
  • SECURITY FIXES:
  • 2014-89 Bad casting from the BasicThebesLayer to BasicContainerLayer
  • 2014-88 Buffer overflow while parsing media content
  • 2014-87 Use-after-free during HTML5 parsing
  • 2014-85 XMLHttpRequest crashes with some input streams
  • 2014-83 Miscellaneous memory safety hazards (rv:34.0 / rv:31.3)

New in Portable Thunderbird Supernova 31.2.0 (Oct 15, 2014)

  • Fixed:
  • Fixed a case where having a contact and card in an address book with the same name could send to the mailing list (Bug 1008718)
  • Security fixes:
  • Critical: Vulnerability can be used to run attacker code and install software, requiring no user interaction beyond normal browsing.
  • High: Vulnerability can be used to gather sensitive data from sites in other windows or inject data or code into those sites, requiring no more than normal browsing actions.
  • Moderate: Vulnerabilities that would otherwise be High or Critical except they only work in uncommon non-default configurations or require the user to perform complicated and/or unlikely steps.
  • Low: Minor security vulnerabilities such as Denial of Service attacks, minor data leaks, or spoofs. (Undetectable spoofs of SSL indicia would have "High" impact because those are generally used to steal sensitive data intended for other sites.)

New in Portable Thunderbird Supernova 31.1.2 (Sep 25, 2014)

  • Fixed an issue where anchor links would not work in HTML emails

New in Portable Thunderbird Supernova 31.1.1 (Sep 11, 2014)

  • Fixed an issue where mailing lists with spaces in their names couldn't be autocompleted (Bug 1060901)
  • Fixed an occasional startup crash (Bug 1005336)

New in Portable Thunderbird Supernova 31.1.0 (Sep 3, 2014)

  • What’s New:
  • Improved performance of autocomplete for large address books
  • Fixed an issue with IMAP being slow when looking for folders on certain server types
  • Fixed various theme issues relating to titlebars and toolbars

New in Portable Thunderbird Supernova 31.0 (Jul 23, 2014)

  • NEW: Autocompleting email addresses now matches against any part of the name or email (bug 529584)
  • NEW: Composing a mail to a newsgroup will now autocomplete newsgroup names (bug 61491)
  • FIXED: Insecure NTLM (pre-NTLMv2) authentication disabled (see 828183)

New in Portable Thunderbird Supernova 24.6.0 (Jun 11, 2014)

  • Security fixes:
  • MFSA 2014-52 Use-after-free with SMIL Animation Controller
  • MFSA 2014-49 Use-after-free and out of bounds issues found using Address Sanitizer
  • MFSA 2014-48 Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)

New in Portable Thunderbird Supernova 24.5.0 (Apr 30, 2014)

  • Security fixes:
  • MFSA 2014-46 Use-after-free in nsHostResolve
  • MFSA 2014-44 Use-after-free in imgLoader while resizing images
  • MFSA 2014-43 Cross-site scripting (XSS) using history navigations
  • MFSA 2014-42 Privilege escalation through Web Notification API
  • MFSA 2014-38 Buffer overflow when using non-XBL object as XBL
  • MFSA 2014-37 Out of bounds read while decoding JPG images
  • MFSA 2014-35 Privilege escalation through Mozilla Maintenance Service Installer
  • MFSA 2014-34 Miscellaneous memory safety hazards (rv:29.0 / rv:24.5)

New in Portable Thunderbird Supernova 24.4.0 (Mar 19, 2014)

  • FIXED:
  • MFSA 2014-32 Out-of-bounds write through TypedArrayObject after neutering
  • MFSA 2014-31 Out-of-bounds read/write through neutering ArrayBuffer objects
  • MFSA 2014-30 Use-after-free in TypeObject
  • MFSA 2014-29 Privilege escalation using WebIDL-implemented APIs
  • MFSA 2014-28 SVG filters information disclosure through feDisplacementMap
  • MFSA 2014-27 Memory corruption in Cairo during PDF font rendering
  • MFSA 2014-26 Information disclosure through polygon rendering in MathML
  • MFSA 2014-17 Out of bounds read during WAV file decoding
  • MFSA 2014-16 Files extracted during updates are not always read only
  • MFSA 2014-15 Miscellaneous memory safety hazards (rv:28.0 / rv:24.4)
  • Several fixes to improve handling of BCC when replying to messages (bug 968270, Bug 969358)

New in Portable Thunderbird Supernova 28.0b1 Beta (Mar 8, 2014)

  • NEW:
  • Composing a mail to a newsgroup will now autocomplete newsgroup names
  • FIXED:
  • 562048 notification bar needs to look slicker
  • 945024 Some icons in folderPane are showing the folder icon instead the special icon
  • 938759 When activating "Remind Me Later" from menus, current attachment reminder notification bar should be…
  • 928008 Make inspector and style editor work for remote chrome windows
  • 941740 How Am I supose to move the window on my screen ?
  • 939031 Unable to drag window by empty space in tab bar.
  • 947725 enable-xterm-updates no longer works in comm-central parts of the build
  • 969358 Reply-All on an email I previously sent To:myself with Bcc:others has no recipients
  • 946669 "trust junk mail headers set by" dropdown is accumulating items when switching between junk settings…
  • 943632 TEST-UNEXPECTED-FAIL | /builds/slave/test/build/mozmill/content-policy/test-view-source.js | test-vi…
  • 699922 Address book change in "Edit contact" lost after "Edit Details"
  • 932035 Use slicker buttons for the mail reader header.
  • 782868 nsIMsgFolderCompactor.compact should notify errors to listener.
  • 933270 Allow some xpcshell-tests to run in parallel
  • 912151 Call to xpconnect wrapped JSObject produced this error: * [Exception... "'[JavaScript Error: "nBox.…
  • 271257 d'n'd of a feed into another RSS account copies it, but doesn't refresh or appear in Manage Subscrip…
  • 938783 Missing attachment notification/reminder does not go away even after adding attachment
  • 926961 The Work offline toggle menu item in the new app menu does not show the real state of the offline mo…
  • 264482 RSS protocol (not Atom) feeds with no only, and identical or no and identical

New in Portable Thunderbird Supernova 24.3.0 (Feb 5, 2014)

  • FIXED:
  • Security fixes can be found here
  • Improved handling of reply-to

New in Portable Thunderbird Supernova 24.2.0 (Dec 11, 2013)

  • FIXED:
  • Security fixes:
  • MFSA 2013-117 Mis-issued ANSSI/DCSSI certificate
  • MFSA 2013-116 JPEG information leak
  • MFSA 2013-115 GetElementIC typed array stubs can be generated outside observed typesets
  • MFSA 2013-114 Use-after-free in synthetic mouse movement
  • MFSA 2013-113 Trust settings for built-in roots ignored during EV certificate validation
  • MFSA 2013-111 Segmentation violation when replacing ordered list elements
  • MFSA 2013-109 Use-after-free during Table Editing
  • MFSA 2013-108 Use-after-free in event listeners
  • MFSA 2013-104 Miscellaneous memory safety hazards (rv:26.0 / rv:24.2)
  • Fixed an issue where long messages with multiple signatures could end up unreadable (bug 929006)
  • Fixed an issue where editing account settings was not possible in some non-standard configurations of local folder set-ups (bug 921371)

New in Portable Thunderbird Supernova 24.1.1 (Nov 20, 2013)

  • FIXED: Security fixes

New in Portable Thunderbird Supernova 24.0.1 (Oct 14, 2013)

  • FIXED: Fixed an issue where inline spell check in the compose window could stop working
  • FIXED: Fixed an occasional crash in the subscribe dialog for newsgroups
  • FIXED: Fixed some color contrast issues

New in Portable Thunderbird Supernova 24.0 (Sep 19, 2013)

  • NEW: Message threads can now be ignored or watched
  • NEW: Emails can now be sent to IDN based email addresses
  • NEW: Zoom functionality is now available in the compose window
  • CHANGED: In the Compose window, ctrl/cmd + and ctrl/cmd - now change the zoom setting rather than the font size
  • CHANGED: In Twitter, replying to a tweet now replies to all users, just like on the Twitter website
  • FIXED: Interactions in the filter list dialogs have been improved
  • FIXED: In Chat user nicknames are now highlighted when mentioned
  • FIXED: In IRC, long messages will now be sent in multiple parts instead of being cut off
  • Various security fixes:
  • MFSA 2013-92 GC hazard with default compartments and frame chain restoration
  • MFSA 2013-91 User-defined properties on DOM proxies get the wrong "this" object
  • MFSA 2013-90 Memory corruption involving scrolling
  • MFSA 2013-89 Buffer overflow with multi-column, lists, and floats
  • MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes
  • MFSA 2013-85 Uninitialized data in IonMonkey
  • MFSA 2013-83 Mozilla Updater does not lock MAR file after signature verification
  • MFSA 2013-82 Calling scope for new Javascript objects can lead to memory corruption
  • MFSA 2013-81 Use-after-free with select element
  • MFSA 2013-80 NativeKey continues handling key messages after widget is destroyed
  • MFSA 2013-79 Use-after-free in Animation Manager during stylesheet cloning
  • MFSA 2013-77 Improper state in HTML5 Tree Builder with templates
  • MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 / rv:17.0.9)

New in Portable Thunderbird Supernova 17.0.8 (Aug 8, 2013)

  • Security fixes:
  • MFSA 2013-75 Local Java applets may read contents of local file system
  • MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest
  • MFSA 2013-72 Wrong principal used for validating URI for some Javascript components
  • MFSA 2013-71 Further Privilege escalation through Mozilla Updater
  • MFSA 2013-69 CRMF requests allow for code execution and XSS attacks
  • MFSA 2013-68 Document URI misrepresentation and masquerading
  • MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater
  • MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)

New in Portable Thunderbird Supernova 17.0.7 (Jun 28, 2013)

  • XrayWrappers can be bypassed to run user defined methods in a privileged context
  • PreserveWrapper has inconsistent behavior
  • SVG filters can lead to information disclosure
  • Data in the body of XHR HEAD requests leads to CSRF attacks
  • Execution of unmapped memory through onreadystatechange event
  • Privileged content access and execution via XBL
  • Memory corruption found using Address Sanitizer
  • Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)

New in Portable Thunderbird Supernova 17.0.6 (May 16, 2013)

  • FIXED: Security fixes can be found here
  • FIXED: Thunderbird now supports the Twitter API version 1.1 ahead of Twitter closing the 1.0 version

New in Portable Thunderbird Supernova 17.0.5 (Apr 3, 2013)

  • FIXED: Security fixes can be found here
  • FIXED: Adjusting font size when composing emails should be easier

New in Portable Thunderbird Supernova 17.0.4 (Mar 12, 2013)

  • Security Fixes

New in Portable Thunderbird Supernova 17.0.3 (Feb 20, 2013)

  • FIXED: Security fixes can be found here
  • FIXED: Attachments sometimes could not be removed from the composition window using the keyboard, this is now fixed.

New in Portable Thunderbird Supernova 17.0.2 (Jan 10, 2013)

  • What's new:
  • FIXED: Pressing the 'x' button on Windows now closes only one window rather than the whole application (805185)
  • FIXED: An issue that caused occasional corruption in local folders after filtering is now fixed (815012)
  • FIXED: An issue that caused deletion of drafts saved in IMAP folders whilst in offline mode is now fixed (805626)
  • Security fixes:
  • MFSA 2013-20 Mis-issued TURKTRUST certificates
  • MFSA 2013-19 Use-after-free in Javascript Proxy objects
  • MFSA 2013-18 Use-after-free in Vibrate
  • MFSA 2013-17 Use-after-free in ListenerManager
  • MFSA 2013-16 Use-after-free in serializeToStream
  • MFSA 2013-15 Privilege escalation through plugin objects
  • MFSA 2013-14 Chrome Object Wrapper (COW) bypass through changing prototype
  • MFSA 2013-13 Memory corruption in XBL with XML bindings containing SVG
  • MFSA 2013-12 Buffer overflow in Javascript string concatenation
  • MFSA 2013-11 Address space layout leaked in XBL objects
  • MFSA 2013-10 Event manipulation in plugin handler to bypass same-origin policy
  • MFSA 2013-09 Compartment mismatch with quickstubs returned values
  • MFSA 2013-08 AutoWrapperChanger fails to keep objects alive during garbage collection
  • MFSA 2013-07 Crash due to handling of SSL on threads
  • MFSA 2013-05 Use-after-free when displaying table with many columns and column groups
  • MFSA 2013-04 URL spoofing in addressbar during page loads
  • MFSA 2013-03 Buffer Overflow in Canvas
  • MFSA 2013-02 Use-after-free and buffer overflow issues found using Address Sanitizer
  • MFSA 2013-01 Miscellaneous memory safety hazards (rv:18.0/ rv:10.0.12 / rv:17.0.2)

New in Portable Thunderbird Supernova 17.0 (Nov 21, 2012)

  • NEW: A Menu Button is now shown to new users by default
  • NEW: Tabs are now drawn in the title bar on Windows
  • FIXED: An issue causing spell-checking only parts of words in Thunderbird 16 is now fixed
  • FIXED: An issue causing Thunderbird 16 to repeatedly download emails is now fixed
  • FIXED: RSS feeds can now be viewed in the Wide View Layout
  • FIXED: Various fixes and performance improvements
  • FIXED: Various security fixes

New in Portable Thunderbird Supernova 16.0.2 (Oct 30, 2012)

  • Security Fixes
  • Fixed an issue where IMAP based accounts could sometimes continuously download emails

New in Portable Thunderbird Supernova 16.0 (Oct 11, 2012)

  • Added box.com to the list of online storage services that are available for use with Thunderbird Filelink
  • Silent, background updates. Thunderbird will now download and apply updates in the background allowing you to start quickly the next time Thunderbird starts up.
  • Various fixes and performance improvements
  • Various security fixes

New in Portable Thunderbird Supernova 15.0 (Aug 29, 2012)

  • Multi-Channel Chat: You now can enjoy real time conversation with your contacts, right from your favorite messaging application.
  • Do Not Track: This option has been implemented as an addition to Search the Web.
  • Ubuntu One is now supported in Filelink - the option to upload large attachments to online storage services.
  • New User Interface: Thunderbird is replicating the new look and feel of Mozilla Firefox in an effort to provide a similar user experience across all Mozilla software desktop or mobile and all platforms.
  • Various fixes and performance improvements
  • Various security fixes

New in Portable Thunderbird Supernova 14.0 (Jul 18, 2012)

  • Various fixes and performance improvements
  • Various security fixes

New in Portable Thunderbird Supernova 13.0.1 (Jun 18, 2012)

  • FIXED: YouSendIt no longer expires Filelinks after 1 week
  • FIXED: The prompt given when a password had changed sometimes referred to a network error rather than a change of password
  • FIXED: Miscellaneous other stability and display updates

New in Portable Thunderbird Supernova 13.0 (Jun 6, 2012)

  • Filelink: Upload your files to an online storage service and send links to your friends, avoiding bounce back due to large attachments. We have partnered with YouSendIt to bring this feature, but additional partners will be added in the near future.
  • In partnership with Gandi and Hover, you can now sign up for a personalized email address from within Thunderbird. Along with your new email address, Thunderbird will be automatically set up and ready to send and receive messages. We are working with additional suppliers to cover more areas of the world and to provide more options in the future.
  • Various security fixes
  • The minimum system requirements for Windows are now Windows XP Service Pack 2 or later.

New in Portable Thunderbird Supernova 12.0.1 (May 2, 2012)

  • Fix various issues relating to new mail notifications and filtering on POP3 based accounts
  • Fixes an occasional startup crash seen in TB 12.0
  • Fixes an issue with corrupted message bodies when using movemail

New in Portable Thunderbird Supernova 12.0 (Apr 25, 2012)

  • Global Search results now include message extracts in the results
  • Various security fixes
  • Various improvements to RSS feed subscription and general feed handling
  • Thunderbird now supports add-ons that provide different types of local mail storage

New in Portable Thunderbird Supernova 11.0.1 (Apr 12, 2012)

  • Fixes an issue that may cause hangs when handling IMAP mail
  • Fixes an issue that may cause filters that move mail to specific folders to be erroneously changed

New in Portable Thunderbird Supernova 11.0 (Mar 15, 2012)

  • New user interface with Tabs above the main menu bar to facilitate navigation and make it more contextual
  • Various security fixes
  • Thunderbird notifications may not work properly with Growl 1.3 or later
  • Fixes a crash seen during importing of Microsoft Outlook profiles

New in Portable Thunderbird Supernova 10.0.2 (Feb 18, 2012)

  • Bug fix:
  • MFSA 2012-11 libpng integer overflow

New in Portable Thunderbird Supernova 10.0.1 (Feb 13, 2012)

  • Several fixes to improve stability.
  • Fix a security issue, see the Security Advisory.

New in Portable Thunderbird Supernova 8.0 (Nov 9, 2011)

  • Thunderbird is based on the new Mozilla Gecko 8 engine
  • Add-ons installed by third party programs are now disabled by default
  • New Search and Find Shortcuts
  • Improved accessibility of the attachment list
  • Folder switching pane widget removed
  • Numerous platform fixes to stability
  • Fixed several security issues