Thunderbird 148.0 and 140.8.0 ESR released

It's time again for Mozilla's monthly update for Thunderbird. The updates include Thunderbird 148.0 and Thunderbird 140.8.0. The latter, as an ESR (Extended Support Release), only contains security fixes. In addition to the new features, there were also changes and numerous bug fixes.

Overview of new features

• Accessibility has been improved in various folder views.

• "Favorites" has been added as a destination for the "Move To" and "File" buttons.

• mail.openpgp.load_untested_gpgme_version has been added to load an untested GPGME version.

• NTLM is now displayed as an available authentication method for EWS accounts.

Overview of fixes

• Read folders are now removed from the Unread Folders view.

• Yahoo, AT&T, and AOL accounts are being migrated to PKCE (Proof Key for Code Exchange), a more secure authentication protocol for OAuth 2.0.

• The regular check for new emails was silently stopped after sleep mode or network outages.

• The donation banner was displayed in the foreground when Thunderbird was running in the background.

• Unlocalized folder names or IMAP mailbox names were displayed in status bar messages.

• Invalid folders could be created in the New Folder dialog box without a selected parent folder.

• New/unread messages in a collapsed thread were not clearly visible.

• Invalidly signed, unencrypted emails were displayed as less secure than unsigned emails.

• Untagged messages did not work correctly with the Quick Filter.

• Calendar/address book panes were displayed in the Account Hub even though none existed.

• In the Account Hub, shortcuts could be executed in the background window for emails.

• When adding a Gmail account, an OAuth request was displayed during automatic configuration.

• Passwords for new password-based Exchange accounts could not be saved in the login manager.

• The "Move message to" filter action was not logged.

• Unknown OAuth providers were not allowed during manual EWS configuration in the Account Hub.

• Saved searches in the unified folder resulted in a server error.

The EWS password prompt ran indefinitely in a loop if the password was empty.

The manual configuration flow for Exchange accounts in the Account Hub was faulty.

Google Calendars had faulty RSVP logic and an incorrect organizer for new events.

CalDAV calendars inviting calendar aliases did not offer all response options.

CalDAV calendars with multiple addresses could crash when inviting multiple participants.

iCal imports incorrectly interpreted unknown time zones as GMT and created events at the wrong times.

Visual and UX improvements

Security fixes

Find the complete release notes here.