Software Update: Mozilla Thunderbird 38.4.0

The Mozilla Foundation has released version 38.4.0 of Thunderbird. Mozilla Thunderbird is an open source email and newsgroup client, with features such as support for several mail and news accounts, a spam filter, spell checker, and a customizable look and feel. In version 38, oauth2 authentication for Gmail has been added, the calendar addon Lightning is now included as standard and can also be sent filters and archived messages. Version 38.4.0 is a so-called bugfix release that introduces no new features, but does fix several problems.

Fixed

• Fixed issue where messages moves of multiple messages from a maildir folder to an mbox folder failed.
• 2015-133 NSS and NSPR memory corruption issues
• 2015-132 Mixed content WebSocket policy bypass through workers
• 2015-131 Vulnerabilities found through code inspection
• 2015-130 JavaScript garbage collection crash with Java applet
• 2015-128 Memory corruption in libjar through zip files
• 2015-127 CORS preflight is bypassed when non-standard Content-Type headers are received
• 2015-123 Buffer overflow during image interactions in canvas
• 2015-122 Trailing whitespace in IP address hostnames can bypass same-origin policy
• 2015-116 Miscellaneous memory safety hazards (rv:42.0 / rv:38.4)

The following downloads are available:
Mozilla Thunderbird 38.4.0 for Windows (English)
Mozilla Thunderbird 38.4.0 for Linux (English)
Mozilla Thunderbird 38.4.0 for OS X (English)
Mozilla Thunderbird 38.4.0 for Windows (English)
Mozilla Thunderbird 38.4.0 for Linux (English)
Mozilla Thunderbird 38.4.0 for OS X (English)
Mozilla Thunderbird 38.4.0 for Windows (Frisian)
Mozilla Thunderbird 38.4.0 for Linux (Frisian)
Mozilla Thunderbird 38.4.0 for OS X (Frisian)