[Bug 199412] Re: [thunderbird] [CVE-2008-0591] missing fix in USN-582-1/2?

[Alexander Sack]

On Tue, Dec 02, 2008 at 04:37:57PM -0000, Jamie Strandboge wrote:
> The MFSA states that this only affected Firefox:
> http://www.mozilla.org/security/announce/2008/mfsa2008-08.html
> 
> However the CVE lists Thunderbird below 2.0.0.12 is affected.
> 
> Alexander, is Thunderbird actually affected by this and in which update?
> I can update the USN accordingly if Thunderbird is affected.
> 

Not sure why it wasnt declared to affect tbird. However, we have the
patch in both: tbird 2 and in 1.5 branch used in dapper ... so we
should be save.

 - Alexander

-- 
[thunderbird] [CVE-2008-0591] missing fix in USN-582-1/2?
https://bugs.launchpad.net/bugs/199412
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to thunderbird in ubuntu.