Ubuntu
thunderbird package

  1. Bug #199412
  2. Comment #2

Comment 2 for bug 199412

Revision history for this message
Alexander Sack (asac) wrote : Re: [Bug 199412] Re: [thunderbird] [CVE-2008-0591] missing fix in USN-582-1/2?

On Tue, Dec 02, 2008 at 04:37:57PM -0000, Jamie Strandboge wrote:
> The MFSA states that this only affected Firefox:
> http://www.mozilla.org/security/announce/2008/mfsa2008-08.html
>
> However the CVE lists Thunderbird below 2.0.0.12 is affected.
>
> Alexander, is Thunderbird actually affected by this and in which update?
> I can update the USN accordingly if Thunderbird is affected.
>

Not sure why it wasnt declared to affect tbird. However, we have the
patch in both: tbird 2 and in 1.5 branch used in dapper ... so we
should be save.

 - Alexander