thunderbird: maintenance update, including security