[bluewhite64-security] mozilla-thunderbird (BW64SA:20080508-02)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[bluewhite64-security] mozilla-thunderbird (BW64SA:20080508-02)

New mozilla-thunderbird packages are available for Bluewhite64 11.0, 12.0,
12.1, and -current to fix security issues, including crashes that can corrupt
memory, as well as a JavaScript privilege escalation and arbitrary code
execution flaw.

More details about these issues may be found here:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#thunderbird
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1233
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1234
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1235
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1236
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1237


Here are the details from the Bluewhite64 12.1 ChangeLog:
+--------------------------+
PATCHES/packages/mozilla-thunderbird-2.0.0.14-x86_64-1.tgz:
Upgraded to thunderbird-2.0.0.14.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#thunderbird
[*** Security fix ***]
+--------------------------+



Where to find the new packages:
+-----------------------------+
See the "Get Bluewhite64" section on http://bluewhite64.com for additional
mirror sites near you.

Updated package for Bluewhite64 11.0:
http://data.bluewhite64.com/bluewhite64-11.0/patches/packages/mozilla-thunderbird-2.0.0.14-x86_64-1.tgz

Updated package for Bluewhite64 12.0:
http://data.bluewhite64.com/bluewhite64-12.0/patches/packages/mozilla-thunderbird-2.0.0.14-x86_64-1.tgz

Updated package for Bluewhite64 12.1:
http://data.bluewhite64.com/bluewhite64-12.1/patches/packages/mozilla-thunderbird-2.0.0.14-x86_64-1.tgz

Updated package for Bluewhite64 -current:
http://data.bluewhite64.com/bluewhite64-current/bluewhite64/xap/mozilla-thunderbird-2.0.0.14-x86_64-1.tgz



MD5 signatures:
+-------------+
Bluewhite64 11.0 package:
a98e98f02a7bac3e8769bc3811e410b7 mozilla-thunderbird-2.0.0.14-x86_64-1.tgz

Bluewhite64 12.0 package:
b4459c674ed0356e08095127cba4a9c6 mozilla-thunderbird-2.0.0.14-x86_64-1.tgz

Bluewhite64 12.1 package:
f5c39b181e0f6d9e5107ccf3fbbe7d6e mozilla-thunderbird-2.0.0.14-x86_64-1.tgz

Bluewhite64 -current package:
f5c39b181e0f6d9e5107ccf3fbbe7d6e mozilla-thunderbird-2.0.0.14-x86_64-1.tgz



Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg mozilla-thunderbird-2.0.0.14-x86_64-1.tgz



+-----+
Bluewhite64 Linux Security Team
http://bluewhite64.com/gpg-key
-email-


+-------------------------------------------------------+
| To leave the bluewhite64-security mailing list:
+-------------------------------------------------------+
| Send a blank email to
|
| -email-
|
| You will get a confirmation message back containing
| instructions to complete the process.
|
| Please do not reply to this email address.
+--------------------------------------------------------+



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkgjZfkACgkQpTOsxuDdlY67MwCdFrFLmJJ/xGV8KcgkGDIHC5wj
Ej8Ani3du/4rcPDp9aZihXEQ3rG1oOd3
=aBNo
-----END PGP SIGNATURE-----






The Bluewhite64 name and logo is a registered trademark of BIN-SH SRL
Without written permission from our company, you are not allowed to use the Bluewhite64 name in any other software or domain name.
Hosting & Solutii Linux | Linux Flash Stick | Stiri ITC | Online Shop | Blog | Web Design
Linux Chicks