File _patchinfo of Package patchinfo.36798

<patchinfo incident="36798">
  <issue tracker="bnc" id="1234413">VUL-0: MozillaThunderbird: update to 128.5.2esr</issue>
  <issue tracker="cve" id="2024-50336"/>
  <packager>MSirringhaus</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for MozillaThunderbird</summary>
  <description>This update for MozillaThunderbird fixes the following issues:

- CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal (bsc#1234413)

Other fixes:
- Updated to Mozilla Thunderbird 128.5.2i (bsc#1234413): 
  * fixed: Large virtual folders could be very slow 
  * fixed: Message could disappear after moving from IMAP folder
    followed by Undo and Redo 
  * fixed: XMPP chat did not display messages sent inside a CDATA
    element 
  * fixed: Selected calendar day did not move forward at midnight 
  * fixed: Today pane agenda sometimes scrolled for no apparent
    reason
  * fixed: CalDAV calendars without offline support could degrade
    start-up performance 
  * fixed: Visual and UX improvements 
  * fixed: Security fixes

- Updated to Mozilla Thunderbird 128.5.1:
  * new: Add end of year donation appeal 
  * fixed: Total message count for favorite folders did not work
    consistently 
</description>
</patchinfo>