<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="b011faf50988aa365f2bb0bf758c7d04"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="MozillaThunderbird-5095"
    timestamp="1205345680"
    engine="1.0">
  <yum:name>MozillaThunderbird</yum:name>
  <summary lang="en">MozillaThunderbird: Security update</summary>
  <summary lang="de">MozillaThunderbird: Securityupdate</summary>
  <description lang="en">This update brings Mozilla Thunderbird to security fix
level of version 2.0.0.12

Following security problems were fixed:
- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <description lang="de">Der Mailclient Mozilla Thunderbird erhielt Backports für
die Security Fixes in 2.0.0.12, die folgende
sicherheitsrelevante Fehler behebt (aufgelistet auf
englisch):

- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <yum:version ver="5095" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="EQ"/>
    <rpm:entry kind="atom" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">a7cbe7ba618e52415851098b0935969820bc046a</checksum>
      <time file="1205370565" build="1205345680"/>
      <size package="7967170" installed="24395894" archive="24451244"/>
      <location href="rpm/i586/MozillaThunderbird-1.5.0.14-0.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/MozillaThunderbird-1.5.0.14-0.3.i586.patch.rpm"/>
          <checksum type="sha">a51c64a7786555f382e603c18d5a0a26f294bb5a</checksum>
          <time file="1205372514" build="1205345680"/>
          <size package="6988848" archive="21540556"/>
          <base-version epoch="0" ver="1.5" rel="27"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="2.2"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.4" rel="2.1"/>
          <base-version epoch="0" ver="1.5.0.5" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.7" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/MozillaThunderbird-1.5_1.5.0.14-27_0.3.i586.delta.rpm"/>
          <checksum type="sha">eb628545de2a20985c2fdbc4e94d99c13e65a230</checksum>
          <time file="1205372536" build="1205345680"/>
          <size package="4125150" archive="0"/>
          <base-version epoch="0" ver="1.5" rel="27" md5sum="7d4267190b28bf16be21b07fb02749e8" buildtime="1146621380" sequence_info="MozillaThunderbird-1.5-27-fda5f3f6eafdc0d4c3e580f5ac8fe288aa50"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/i586/MozillaThunderbird-1.5.0.14-0.1_0.3.i586.delta.rpm"/>
          <checksum type="sha">bb5fe0e51b5b1c458ce880b0ee27817efcc24f04</checksum>
          <time file="1205372554" build="1205345680"/>
          <size package="957345" archive="0"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1" md5sum="31e4885de07d4a1ea3bdec2f32ab0ff6" buildtime="1199761132" sequence_info="MozillaThunderbird-1.5.0.14-0.1-7159b5a0e8fe5655df80fa46bd818bbd62c2111be4"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">d454c80cc99bd7d9c34ce01f8baecaa835418b72</checksum>
      <time file="1205370739" build="1205346929"/>
      <size package="8034985" installed="27049114" archive="27104464"/>
      <location href="rpm/ppc/MozillaThunderbird-1.5.0.14-0.3.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/MozillaThunderbird-1.5.0.14-0.3.ppc.patch.rpm"/>
          <checksum type="sha">1cf4080cdb43e03deb2b5adc63067651d2ddff1b</checksum>
          <time file="1205372581" build="1205346929"/>
          <size package="7060436" archive="24193776"/>
          <base-version epoch="0" ver="1.5" rel="27"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="2.2"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.4" rel="2.1"/>
          <base-version epoch="0" ver="1.5.0.5" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.7" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/MozillaThunderbird-1.5_1.5.0.14-27_0.3.ppc.delta.rpm"/>
          <checksum type="sha">9673a2f2ebc28ea63eab2ad4716f26d604c0058d</checksum>
          <time file="1205372607" build="1205346929"/>
          <size package="3702783" archive="0"/>
          <base-version epoch="0" ver="1.5" rel="27" md5sum="66ae830d7308b4bbbccc73e7870650ea" buildtime="1146634039" sequence_info="MozillaThunderbird-1.5-27-d875a14b007a8e41fece7abf1bdbfee0aa50"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/ppc/MozillaThunderbird-1.5.0.14-0.1_0.3.ppc.delta.rpm"/>
          <checksum type="sha">b504c3e5148265329252da1ef93601aaec0bd101</checksum>
          <time file="1205372624" build="1205346929"/>
          <size package="888750" archive="0"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1" md5sum="9fd12ccb4a5eeeb88d01d40d393a1439" buildtime="1199760633" sequence_info="MozillaThunderbird-1.5.0.14-0.1-3c7863f47bbfa16a774265b70d6db5f962c2111be4"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">100544ae540da7fdc43509e644a50b216b1135ee</checksum>
      <time file="1205370673" build="1205344702"/>
      <size package="9031302" installed="28282871" archive="28338904"/>
      <location href="rpm/x86_64/MozillaThunderbird-1.5.0.14-0.3.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/MozillaThunderbird-1.5.0.14-0.3.x86_64.patch.rpm"/>
          <checksum type="sha">7405d0e03698c5ba93b809cd3cc06a8e05c2cd5a</checksum>
          <time file="1205372646" build="1205344702"/>
          <size package="8081850" archive="25403752"/>
          <base-version epoch="0" ver="1.5" rel="27"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="2.2"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.4" rel="2.1"/>
          <base-version epoch="0" ver="1.5.0.5" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.7" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/MozillaThunderbird-1.5_1.5.0.14-27_0.3.x86_64.delta.rpm"/>
          <checksum type="sha">d59e9832574ef618f6cb8707e1346be697c84409</checksum>
          <time file="1205372676" build="1205344702"/>
          <size package="2386584" archive="0"/>
          <base-version epoch="0" ver="1.5" rel="27" md5sum="de910909327cfe765d63ed2902e697a9" buildtime="1146621425" sequence_info="MozillaThunderbird-1.5-27-78d4c9bc516bcafa6e222d94e7e0e933aa50"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/x86_64/MozillaThunderbird-1.5.0.14-0.1_0.3.x86_64.delta.rpm"/>
          <checksum type="sha">871808de9401a9a1def7292b31c68b84b977614c</checksum>
          <time file="1205372697" build="1205344702"/>
          <size package="1161390" archive="0"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1" md5sum="be7276f6c8d901595cb363bb1ee66105" buildtime="1199760032" sequence_info="MozillaThunderbird-1.5.0.14-0.1-de39ea3eaba66efa3c3aba45e5f60a7d62c2111be4"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird-translations</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">8e75f3b6e182595f8c2dee5d31baa0eff6020ae7</checksum>
      <time file="1205370570" build="1205345680"/>
      <size package="4672090" installed="29913309" archive="29924160"/>
      <location href="rpm/i586/MozillaThunderbird-translations-1.5.0.14-0.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird-translations"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/MozillaThunderbird-translations-1.5.0.14-0.3.i586.patch.rpm"/>
          <checksum type="sha">e1cffe0041a99e2b5d9e643253f0ca26843e4aa9</checksum>
          <time file="1205372709" build="1205345680"/>
          <size package="1212982" archive="7572528"/>
          <base-version epoch="0" ver="1.5" rel="27"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="2.2"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.4" rel="2.1"/>
          <base-version epoch="0" ver="1.5.0.5" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.7" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/MozillaThunderbird-translations-1.5_1.5.0.14-27_0.3.i586.delta.rpm"/>
          <checksum type="sha">9414731c5889c55fe124ad4e6b9d976a9abd9649</checksum>
          <time file="1205372726" build="1205345680"/>
          <size package="150236" archive="0"/>
          <base-version epoch="0" ver="1.5" rel="27" md5sum="d34eda50366333b60eade37fbcc81867" buildtime="1146621380" sequence_info="MozillaThunderbird-translations-1.5-27-4132beae9075ef7986a0b42c955c79c0c810"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird-translations</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">2e45df8284745519b2b4a3c720b2ee8ea29213fe</checksum>
      <time file="1205370749" build="1205346929"/>
      <size package="4671686" installed="29913309" archive="29924160"/>
      <location href="rpm/ppc/MozillaThunderbird-translations-1.5.0.14-0.3.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird-translations"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/MozillaThunderbird-translations-1.5.0.14-0.3.ppc.patch.rpm"/>
          <checksum type="sha">e2591d04fa6e6054f667ca162d85b51beb0fd542</checksum>
          <time file="1205372761" build="1205346929"/>
          <size package="1212470" archive="7572528"/>
          <base-version epoch="0" ver="1.5" rel="27"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="2.2"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.4" rel="2.1"/>
          <base-version epoch="0" ver="1.5.0.5" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.7" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/MozillaThunderbird-translations-1.5_1.5.0.14-27_0.3.ppc.delta.rpm"/>
          <checksum type="sha">d40668479cac24c3fce2225c8abc74b6b445b35f</checksum>
          <time file="1205372777" build="1205346929"/>
          <size package="150206" archive="0"/>
          <base-version epoch="0" ver="1.5" rel="27" md5sum="b5d1a0b2d5a220e64e4a30faff8b62e2" buildtime="1146634039" sequence_info="MozillaThunderbird-translations-1.5-27-4132beae9075ef7986a0b42c955c79c0c810"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird-translations</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">c46728e0a198e67755ae5d2bf73fd12ae97b611a</checksum>
      <time file="1205370675" build="1205344702"/>
      <size package="4671464" installed="29913309" archive="29924252"/>
      <location href="rpm/x86_64/MozillaThunderbird-translations-1.5.0.14-0.3.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird-translations"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/MozillaThunderbird-translations-1.5.0.14-0.3.x86_64.patch.rpm"/>
          <checksum type="sha">7cc46350f38001a047011b5356c887fd44521cd3</checksum>
          <time file="1205372812" build="1205344702"/>
          <size package="1212892" archive="7572532"/>
          <base-version epoch="0" ver="1.5" rel="27"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="2.2"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.4" rel="2.1"/>
          <base-version epoch="0" ver="1.5.0.5" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.7" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/MozillaThunderbird-translations-1.5_1.5.0.14-27_0.3.x86_64.delta.rpm"/>
          <checksum type="sha">9970b1c63e2266f59fabbd7ce1818357a9468a35</checksum>
          <time file="1205372826" build="1205344702"/>
          <size package="150730" archive="0"/>
          <base-version epoch="0" ver="1.5" rel="27" md5sum="10fad56eadf47cbd1fb08ff582fd4659" buildtime="1146621425" sequence_info="MozillaThunderbird-translations-1.5-27-a98d8cacf859680115dfbaacbe084ecac810"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
