Advisories MDKSA-2006:146: Updated Thunderbird packages fix multiple vulnerabilities

[paul]

A number of security vulnerabilities have been discovered and corrected

in the latest Mozilla Thunderbird program.

 

Corporate 3 had contained the Mozilla suite however, due to the support

cycle for Mozilla, it was felt that upgrading Mozilla to Firefox and

Thunderbird would allow for better future support for Corporate 3

users. To that end, the latest Thunderbird is being provided for

Corporate 3 users which fix all known vulnerabilities up to version

1.5.0.5, as well as providing new and enhanced features.

 

Corporate users who were using Mozilla for mail may need to explicitly

install the new mozilla-thunderbird packages.

 

For 2006 users, no explicit installs are necessary.

 

The following CVE names have been corrected with this update:

CVE-2006-2775, CVE-2006-2776, CVE-2006-2778, CVE-2006-2779,

CVE-2006-2780, CVE-2006-2781, CVE-2006-2783, CVE-2006-2787,

CVE-2006-3803, CVE-2006-3804, CVE-2006-3806, CVE-2006-3807,

CVE-2006-3113, CVE-2006-3802, CVE-2006-3805, CVE-2006-3809,

CVE-2006-3810, CVE-2006-3811, CVE-2006-3812.