<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="d260689f030c1d3973b79f15a1fc4928"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="1091">
  <id>dbg111-MozillaThunderbird</id>
  <title>MozillaThunderbird: Update to 2.0.0.22 security release</title>
  <release>openSUSE 11.1</release>
  <issued date="1247230416"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=515950" id="515950" title="bug number 515950" type="bugzilla"/>
  </references>
  <description>Mozilla Thunderbird was updated to the 2.0.0.22 security
release. It fixes various bugs and security issues:

  * MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304
    CVE-2009-1305 Crashes with evidence of memory
    corruption (rv:1.9.0.9)
  * MFSA 2009-17/CVE-2009-1307 (bmo#481342) Same-origin
    violations when Adobe Flash loaded via view-source:
    scheme
  * MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833
    Crashes with evidence of memory corruption (rv:1.9.0.11)
  * MFSA 2009-27/CVE-2009-1836 (bmo#479880) SSL tampering
    via non-200 responses to proxy CONNECT requests
  * MFSA 2009-29/CVE-2009-1838 (bmo#489131) Arbitrary code
    execution using event listeners attached to an element
    whose owner document is null
  * MFSA 2009-32/CVE-2009-1841 (bmo#479560) JavaScript
    chrome privilege escalation
  * MFSA 2009-33 (bmo#495057) Crash viewing
    multipart/alternative message with text/enhanced part
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird-debuginfo" arch="i586" version="2.0.0.22" release="0.1.1">
          <filename>MozillaThunderbird-debuginfo-2.0.0.22-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-debuginfo" arch="ppc" version="2.0.0.22" release="0.1.1">
          <filename>MozillaThunderbird-debuginfo-2.0.0.22-0.1.1.ppc.rpm</filename>
        </package>
        <package name="MozillaThunderbird-debuginfo" arch="x86_64" version="2.0.0.22" release="0.1.1">
          <filename>MozillaThunderbird-debuginfo-2.0.0.22-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-debugsource" arch="i586" version="2.0.0.22" release="0.1.1">
          <filename>MozillaThunderbird-debugsource-2.0.0.22-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-debugsource" arch="ppc" version="2.0.0.22" release="0.1.1">
          <filename>MozillaThunderbird-debugsource-2.0.0.22-0.1.1.ppc.rpm</filename>
        </package>
        <package name="MozillaThunderbird-debugsource" arch="x86_64" version="2.0.0.22" release="0.1.1">
          <filename>MozillaThunderbird-debugsource-2.0.0.22-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
