From f8c225c771feeb4abf8d0f09fc6eb9eeb7ce0857 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 11 Mar 2025 14:27:09 +0100
Subject: [PATCH 1/2] thunderbird-latest-unwrapped: 133.0 -> 136.0

https://www.thunderbird.net/en-US/thunderbird/134.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-04/

Fixes: CVE-2024-50336, CVE-2025-0237, CVE-2025-0238, CVE-2025-0239,
       CVE-2025-0240, CVE-2025-0241, CVE-2025-0242, CVE-2025-0243,
       CVE-2025-0247

https://www.thunderbird.net/en-US/thunderbird/135.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-11/

Fixes: CVE-2025-1009, CVE-2025-1010, CVE-2025-1018, CVE-2025-1011,
       CVE-2205-1012, CVE-2025-1019, CVE-2025-1013, CVE-2025-1014,
       CVE-2025-0510, CVE-2025-1015, CVE-2025-1016, CVE-2025-1017,
       CVE-2025-1020,

https://www.thunderbird.net/en-US/thunderbird/136.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-17/

Fixes: CVE-2025-26696, CVE-2025-26695, CVE-2025-1930, CVE-2025-1931,
       CVE-2025-1932, CVE-2025-1933, CVE-2025-1934, CVE-2025-1942,
       CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938,
       CVE-2025-1943
---
 .../networking/mailreaders/thunderbird/packages.nix           | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/mailreaders/thunderbird/packages.nix b/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
index 47fa89ee9c88..8162e7e220e6 100644
--- a/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
+++ b/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
@@ -86,8 +86,8 @@ rec {
   thunderbird = thunderbird-esr;
 
   thunderbird-latest = common {
-    version = "133.0";
-    sha512 = "8cf8973964cabdc7fafe83d1dfd4f9fbfd340638b1f3d396a98059c00650549b0f4a7bfc486a294b2966136266d4524d6c825a6ee344cd753ac2f7ab412cbc96";
+    version = "136.0";
+    sha512 = "37c94258b49a7e87b24b4cffaa6eae81698356ddc3f0f49ea675b885dea2c56a3ca758dac2ddb2720beaf2f34faa15a9ab9b5eda0b352c0c8f14167c01838714";
 
     updateScript = callPackage ./update.nix {
       attrPath = "thunderbirdPackages.thunderbird-latest";

From ae1677955849e980ec75126b95befd36737a50de Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 11 Mar 2025 14:46:15 +0100
Subject: [PATCH 2/2] thunderbird-128-unwrapped: 128.7.1esr -> 128.8.0esr

https://www.thunderbird.net/en-US/thunderbird/128.8.0esr/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/

Fixes: CVE-2025-26696, CVE-2025-26695, CVE-2024-43097, CVE-2025-1930,
       CVE-2025-1931, CVE-2025-1932, CVE-2025-1933, CVE-2025-1934,
       CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1938
---
 .../networking/mailreaders/thunderbird/packages.nix           | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/mailreaders/thunderbird/packages.nix b/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
index 8162e7e220e6..ab4f0041d465 100644
--- a/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
+++ b/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
@@ -100,8 +100,8 @@ rec {
   thunderbird-128 = common {
     applicationName = "Thunderbird ESR";
 
-    version = "128.7.1esr";
-    sha512 = "3f84e1f1a83379da1f154b66dbb5f941d04548ad017aab32aa9520f4315edb524e3754ac1fe9a7ae27f7aa33e2881c6783f11ccc53cda713f107760b7d880667";
+    version = "128.8.0esr";
+    sha512 = "a6ccdf5a067a1f908246885b22a1dadc66f4667d4ac74d1c1867c88a70b194c508e8d9e139f357ebc1d344f032fdc9b75c365fe49937d2463d7bd61b85ef86d1";
 
     updateScript = callPackage ./update.nix {
       attrPath = "thunderbirdPackages.thunderbird-128";