From: Slackware Security Team <security@slackware.com>
To: slackware-security@slackware.com
Subject: [slackware-security] mozilla-thunderbird (SSA:2010-317-01)
Date: Sun, 14 Nov 2010 17:57:57 -0800 (PST)





-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] mozilla-thunderbird (SSA:2010-317-01)

New mozilla-thunderbird packages are available for Slackware 13.0,
13.1, and -current to fix security issues.


Here are the details from the Slackware 13.1 ChangeLog:
+--------------------------+
patches/packages/mozilla-thunderbird-3.0.10-i686-1.txz: Upgraded.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird30.html
(* Security fix *)
+--------------------------+


As noted in the Slackware 13.0 ChangeLog, this is a major update there:
+--------------------------+
patches/packages/mozilla-thunderbird-3.0.10-i686-1.txz: Upgraded.
With Thunderbird 2.x unmaintained, it seems like a good idea to provide a
upgrade to Thunderbird 3.x for security reasons. This will bring with it
quite a bit of changed functionality, so be prepared... one hint is that
it will now make local copies of remote mailboxes by default, so you will
need to have enough disk space to handle that.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird30.html
(* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try. This is another primary FTP site
for Slackware that can be considerably faster than downloading
directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/mozilla-thunderbird-3.0.10-i686-1.txz

Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/mozilla-thunderbird-3.0.10-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/mozilla-thunderbird-3.0.10-i686-1.txz

Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/mozilla-thunderbird-3.0.10-x86_64-1_slack13.1.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-thunderbird-3.1.6-i686-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-thunderbird-3.1.6-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 13.0 package:
70d4e0bbe528d99938c01b5b9f2a2f04 mozilla-thunderbird-3.0.10-i686-1.txz

Slackware x86_64 13.0 package:
f9f8f145c4776d269565ca9abaca7276 mozilla-thunderbird-3.0.10-x86_64-1_slack13.0.txz

Slackware 13.1 package:
70d4e0bbe528d99938c01b5b9f2a2f04 mozilla-thunderbird-3.0.10-i686-1.txz

Slackware x86_64 13.1 package:
37493f7720ddbb201e764ee620ab0e68 mozilla-thunderbird-3.0.10-x86_64-1_slack13.1.txz

Slackware -current package:
5ea80b9a3969cb6162287ef9a359be84 mozilla-thunderbird-3.1.6-i686-1.txz

Slackware x86_64 -current package:
a7470e6be42b5b7cb11ee81f6e9bcc2b mozilla-thunderbird-3.1.6-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg mozilla-thunderbird-3.0.10-i686-1.txz


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkzfOAoACgkQakRjwEAQIjNEZQCggw3TkweH0oGcHIBSXbpEI3qU
eAoAmgPaT8yKoooNSjNWiSFatz961Lq7
=GCZ+
-----END PGP SIGNATURE-----