Thunderbird Stable Releases

Thunderbird 38.0.1 has been QA'd for release: ftp://ftp.mozilla.org/pub/thunderbird/releases/38.0.1/

As I understand it, this should now become ESR. I have to look into release notes and info on Lightning 4.0 as well.

https://www.mozilla.org/en-US/thunderbird/38.0.1/releasenotes/

 

It's not allowing me to Edit that post anymore.

Lightning 4.0.0.1 is automatically installed once upgraded.

Lightning is now fully integrated within the install at: C:\Program Files (x86)\Mozilla Thunderbird\distribution\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}

 

The long-awaited Thunderbird 38 is out, now with Lightning fully integrated.

I've been using TB and Lightning for years. I haven't loaded up 38.0.1 yet, but I can report that when working with TB 38.0b6, my 31.7 profile migrated without issue and no mail or calendar data was lost. Ditto for years of XNote (sticky note) data.

As was TB 31, 38 is ESR.

 

That's good to know thanks

 

Funny you should mention that... I just got it running in a 1GB VeraCrypt container (my TB profile is ~700MB) on my Windows 7 x64 desktop and laptop. The latter serves as a backup; I copy the container file to it (and a NAS) weekly or upon an important email thread.

I've used Haller's TB Portable since day one, don't remember how long ago that was, and in TrueCrypt for almost seven years, so this move was a double "fingers crossed" move. With all the TB EOL rumors a while back and the TrueCrypt "demise," this has been a seamless operation with a positive outlook for years to come. Get it? Outlook.

Also, like posted in #3 above, no loss of any data. Fast and secure.

 

@ronjor Thank you for the heads up.

 

Looks like the security fixes are no longer mentioned in the release notes.

• 2015-71 NSS incorrectly permits skipping of ServerKeyExchange
• 2015-70 NSS accepts export-length DHE keys with regular DHE cipher suites
• 2015-67 Key pinning is ignored when overridable errors are encountered
• 2015-66 Vulnerabilities found through code inspection
• 2015-63 Use-after-free in Content Policy due to microtask execution error
• 2015-59 Miscellaneous memory safety hazards (rv:39.0 / rv:31.8 / rv:38.1)

https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/

 

Fixed vulnerabilities information finally posted:

• 2015-90 Vulnerabilities found through code inspection
• 2015-88 Heap overflow in gdk-pixbuf when scaling bitmap images
• 2015-85 Out-of-bounds write with Updater and malicious MAR file
• 2015-84 Arbitrary file overwriting through Mozilla Maintenance Service with hard links
• 2015-79 Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)

Again, not even mentioned in the release notes.
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.2

 

Thunderbird and end-to-end email encryption – should this be a priority?

https://blog.mozilla.org/thunderbir...d-email-encryption-should-this-be-a-priority/

 

Mozilla Thunderbird 38.4.0 (https://www.mozilla.org/en-US/thunderbird/38.4.0/releasenotes/) is coming down the update pipe right now.

 

Version 38.5.0, first offered to Release channel users on December 23, 2015
Release notes: https://www.mozilla.org/en-US/thunderbird/38.5.0/releasenotes/
Security fixes: https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.5

 

In the vein of still trying to find an imap and/or pop3 client for W10, I'm willing to give Thunderbird another try with this new release. The thing I'm confused about is in changing a client, must the old client be uninstalled first? Thank you!

 

I switched to eM Client. You can have several clients installed simultaneously.

 

38.5.1 should be coming down the pipe shortly
https://www.mozilla.org/en-US/thunderbird/38.5.1/releasenotes/