NovaBird 1.4.2 (security update)

Security update of NovaBird-Extension (1.12.6) and NovaBird-Conversation (0.15.4.2) – please update.

All other packages are the same as in 1.4.1 – install the new files over the old ones (same add-on IDs); settings are kept.

Attachment preview (Extension 1.12.6)

A crafted mail could make Thunderbird load a web address while the mouse moved over the mail – also with remote content blocked, so the sender could see that and when the mail was read. The preview now only shows real attachments of mails (and local files), never web addresses or network shares. Real image and PDF attachments preview as before.

Conversation view (Conversation 0.15.4.2)

• A crafted mail could freeze the reading pane for up to a minute (very long style attributes). Fixed.
• Switching within a thread shows the selected message again (issue #6).

Found in the code review and security test for NovaBird 2.0. Tested on Thunderbird 153 ESR and 160.

Files

File
novabird-extension-1.12.6.xpi	new
novabird-conversation-0.15.4.2.xpi	new
NovaBird-1.4.2-all.zip	all packages of 1.4 (the others unchanged from 1.4.1)
SHA256SUMS.txt	Checksums

Unsigned builds. Unofficial, experimental, use at your own risk – see the disclaimer.