SUSE-SU-2024:4326-1

Description of the patch:

This update for MozillaThunderbird fixes the following issues:

• CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal (bsc#1234413)

Other fixes:

• Updated to Mozilla Thunderbird 128.5.2i (bsc#1234413):

  • fixed: Large virtual folders could be very slow
  • fixed: Message could disappear after moving from IMAP folder followed by Undo and Redo
  • fixed: XMPP chat did not display messages sent inside a CDATA element
  • fixed: Selected calendar day did not move forward at midnight
  • fixed: Today pane agenda sometimes scrolled for no apparent reason
  • fixed: CalDAV calendars without offline support could degrade start-up performance
  • fixed: Visual and UX improvements
  • fixed: Security fixes

• Updated to Mozilla Thunderbird 128.5.1:

  • new: Add end of year donation appeal
  • fixed: Total message count for favorite folders did not work consistently