-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 -------------------------------------------------------------------------- Turbolinux Security Advisory TLSA-2008-18 http://www.turbolinux.co.jp/security/ security-team@turbolinux.co.jp -------------------------------------------------------------------------- Original released date: 05 May 2008 Last revised: 05 May 2008 Package: thunderbird Summary: JavaScript garbage collector More information: Mozilla Thunderbird is an open-source mail client, designed for standards compliance, performance and portability. The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. (CVE-2008-1380) Affected Products: - wizpy - Turbolinux FUJI Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/wizpy/updates/SRPMS/thunderbird-2.0.0.14-1.src.rpm 37968724 6ba1570f7b79715590114edf36bcc2ac Binary Packages Size: MD5 thunderbird-2.0.0.14-1.i386.rpm 10125163 40d3dacc854d75bb45bc9e3c32dee558 thunderbird-en_US-2.0.0.14-1.i386.rpm 140553 a9c8d81e55ea962bf056922af56841aa thunderbird-ja-2.0.0.14-1.i386.rpm 345790 c6b1001ce9992afbaa0d92ff181156f0 Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/11/updates/SRPMS/thunderbird-2.0.0.14-1.src.rpm 37968724 f51ffad130823c8143c8e31a8c204fd8 Binary Packages Size: MD5 thunderbird-2.0.0.14-1.i686.rpm 13047224 e2dd291192dcc0cfa8dc9d6fe30ba6db Mozilla Foundation [Mozilla Foundation Security Advisories] http://www.mozilla.org/projects/security/known-vulnerabilities.html -------------------------------------------------------------------------- Revision History 05 May 2008 Initial release -------------------------------------------------------------------------- Copyright(C) 2008 Turbolinux, Inc. All rights reserved. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkghlw4ACgkQK0LzjOqIJMxAdACfV25TTbsfXFAGHzGy5CQ4fJwe UfgAn0DOxtD9OxRZcJM1sQ6o/SAA/pmG =IYC6 -----END PGP SIGNATURE-----