mail/thunderbird in 2016Q2 is vulnerable: https://vuxml.freebsd.org/freebsd/92d44f83-a7bf-41cf-91ee-3d1b8ecf579f.html
mail/thunderbird is vulnerable even in /head. Awaiting 45.1 release, junovitch@ already approved 45.0 (MFH ports r413157). Landing 38.8 directly will complicate future merges as there won't be 38.9. http://download.cdn.mozilla.net/pub/thunderbird/candidates/
A commit references this bug: Author: jbeich Date: Wed May 4 09:13:22 UTC 2016 New revision: 414593 URL: https://svnweb.freebsd.org/changeset/ports/414593 Log: MFH: r413157 mail/thunderbird: update to 45.0 Changes: https://www.mozilla.org/thunderbird/45.0/releasenotes/ PR: 209258 Approved by: ports-secteam (junovitch) Changes: _U branches/2016Q2/ branches/2016Q2/Mk/Uses/gecko.mk branches/2016Q2/mail/linux-thunderbird/Makefile branches/2016Q2/mail/linux-thunderbird/distinfo branches/2016Q2/mail/linux-thunderbird/pkg-plist branches/2016Q2/mail/thunderbird/Makefile branches/2016Q2/mail/thunderbird/distinfo branches/2016Q2/mail/thunderbird/files/extra-patch-bug1125514 branches/2016Q2/mail/thunderbird/files/patch-bug1021761 branches/2016Q2/mail/thunderbird/files/patch-bug1026499 branches/2016Q2/mail/thunderbird/files/patch-bug1073117 branches/2016Q2/mail/thunderbird/files/patch-bug1112904 branches/2016Q2/mail/thunderbird/files/patch-bug1138845 branches/2016Q2/mail/thunderbird/files/patch-bug1143686 branches/2016Q2/mail/thunderbird/files/patch-bug1144643 branches/2016Q2/mail/thunderbird/files/patch-bug1148203 branches/2016Q2/mail/thunderbird/files/patch-bug1233275 branches/2016Q2/mail/thunderbird/files/patch-bug1242132 branches/2016Q2/mail/thunderbird/files/patch-bug1252246 branches/2016Q2/mail/thunderbird/files/patch-bug292127 branches/2016Q2/mail/thunderbird/files/patch-bug702179 branches/2016Q2/mail/thunderbird/files/patch-bug779713 branches/2016Q2/mail/thunderbird/files/patch-bug826985 branches/2016Q2/mail/thunderbird/files/patch-bug847568 branches/2016Q2/mail/thunderbird/files/patch-bug962345 branches/2016Q2/mail/thunderbird/files/patch-bug981348 branches/2016Q2/mail/thunderbird/files/patch-bug991253 branches/2016Q2/mail/thunderbird/files/patch-config-baseconfig.mk branches/2016Q2/mail/thunderbird/files/patch-ijg-libjpeg branches/2016Q2/mail/thunderbird/files/patch-memory-jemalloc-Makefile.in branches/2016Q2/mail/thunderbird/files/patch-modules-libpref-init-all.js branches/2016Q2/mail/thunderbird/files/patch-mozilla-dom-events-MessageEvent.h branches/2016Q2/mail/thunderbird/files/patch-toolkit_mozapps_installer_packager_mk branches/2016Q2/mail/thunderbird/files/patch-z-bug517422 branches/2016Q2/mail/thunderbird-i18n/Makefile branches/2016Q2/mail/thunderbird-i18n/distinfo