<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="b011faf50988aa365f2bb0bf758c7d04"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="MozillaThunderbird-5095"
    timestamp="1205345337"
    engine="1.0">
  <yum:name>MozillaThunderbird</yum:name>
  <summary lang="en">MozillaThunderbird: Security update</summary>
  <summary lang="de">MozillaThunderbird: Securityupdate</summary>
  <description lang="en">This update brings Mozilla Thunderbird to security fix
level of version 2.0.0.12

Following security problems were fixed:
- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <description lang="de">Der Mailclient Mozilla Thunderbird erhielt Backports für
die Security Fixes in 2.0.0.12, die folgende
sicherheitsrelevante Fehler behebt (aufgelistet auf
englisch):

- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <yum:version ver="5095" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="EQ"/>
    <rpm:entry kind="atom" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">a2bd778586f47429021af6b4906b7f2b54bba433</checksum>
      <time file="1205371542" build="1205345337"/>
      <size package="7967877" installed="24415916" archive="24471260"/>
      <location href="rpm/i586/MozillaThunderbird-1.5.0.14-0.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/MozillaThunderbird-1.5.0.14-0.3.i586.patch.rpm"/>
          <checksum type="sha">535ac30876297279be6244c4d9c98730ad3c3654</checksum>
          <time file="1205372866" build="1205345337"/>
          <size package="6879598" archive="21282468"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.2"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.4"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/MozillaThunderbird-1.5.0.8_1.5.0.14-3_0.3.i586.delta.rpm"/>
          <checksum type="sha">de1589597412a3b5323276e8f1dc06ede627ad80</checksum>
          <time file="1205372885" build="1205345337"/>
          <size package="1099308" archive="0"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3" md5sum="20d5afbcc012beca4b0c7965b16aa937" buildtime="1164814270" sequence_info="MozillaThunderbird-1.5.0.8-3-7c50472bee81734c79833659967c3e8aaa50"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/i586/MozillaThunderbird-1.5.0.14-0.1_0.3.i586.delta.rpm"/>
          <checksum type="sha">cbd815fedccbfea30291bdadb939190db1925c7b</checksum>
          <time file="1205372898" build="1205345337"/>
          <size package="1067439" archive="0"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1" md5sum="7fdb6b556f2e211f12442c51a39b8181" buildtime="1199750072" sequence_info="MozillaThunderbird-1.5.0.14-0.1-a674ccf8834e0447dd29e82d68c18ba762c2111fc33991"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">c8dc726e2aee65dd9b6b785f954bfd28a3f71e40</checksum>
      <time file="1205371005" build="1205344810"/>
      <size package="8073525" installed="27225616" archive="27280960"/>
      <location href="rpm/ppc/MozillaThunderbird-1.5.0.14-0.3.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/MozillaThunderbird-1.5.0.14-0.3.ppc.patch.rpm"/>
          <checksum type="sha">78d8908d3392a914b22232a628868b8dbcf198f3</checksum>
          <time file="1205372920" build="1205344810"/>
          <size package="6841886" archive="23693336"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.2"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.4"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/MozillaThunderbird-1.5.0.8_1.5.0.14-3_0.3.ppc.delta.rpm"/>
          <checksum type="sha">248d8e7125c433994620ff684e8b5c52e0c24073</checksum>
          <time file="1205372937" build="1205344810"/>
          <size package="1074517" archive="0"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3" md5sum="c0c3c4cce8a5a09a31252c696e2354bc" buildtime="1164816306" sequence_info="MozillaThunderbird-1.5.0.8-3-03f74448edb72a70ee32d6a56c6b2f36aa50"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/ppc/MozillaThunderbird-1.5.0.14-0.1_0.3.ppc.delta.rpm"/>
          <checksum type="sha">99bbbdcc105fca916a06b0f97b1edeb366ec44ee</checksum>
          <time file="1205372953" build="1205344810"/>
          <size package="1001919" archive="0"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1" md5sum="657b8580e37652950d0c5275c9b146cb" buildtime="1199737634" sequence_info="MozillaThunderbird-1.5.0.14-0.1-f0f02c299ab74b9f9c5590d845a4e04e62c2111fc33991"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">44d1143dc7313344d1b4cb2443296636e06ba685</checksum>
      <time file="1205371026" build="1205343022"/>
      <size package="9028870" installed="28311221" archive="28367252"/>
      <location href="rpm/x86_64/MozillaThunderbird-1.5.0.14-0.3.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/MozillaThunderbird-1.5.0.14-0.3.x86_64.patch.rpm"/>
          <checksum type="sha">d857bd4d3c3597af87929481627e95e746d1eea3</checksum>
          <time file="1205372973" build="1205343022"/>
          <size package="7749287" archive="24769816"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.2"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.4"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/MozillaThunderbird-1.5.0.8_1.5.0.14-3_0.3.x86_64.delta.rpm"/>
          <checksum type="sha">94cbc2e3340b89efd6826e858dac432bc5d32fd4</checksum>
          <time file="1205372995" build="1205343022"/>
          <size package="1714242" archive="0"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3" md5sum="6ab67446150713f480f3392caac9295b" buildtime="1164813862" sequence_info="MozillaThunderbird-1.5.0.8-3-f36677f05a826f91b34aca899ebd5678aa50"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/x86_64/MozillaThunderbird-1.5.0.14-0.1_0.3.x86_64.delta.rpm"/>
          <checksum type="sha">d9dd082053c07aa8ae9835ccc2382a663ef87b00</checksum>
          <time file="1205373012" build="1205343022"/>
          <size package="1274581" archive="0"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1" md5sum="bf88f4608247e1b00a2d959fa95fdccd" buildtime="1199754096" sequence_info="MozillaThunderbird-1.5.0.14-0.1-e841839e058c6a70237deafe0dad65d162c2111fc33991"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird-translations</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">100416da47193e80497a72d84aa79faecff19735</checksum>
      <time file="1205371548" build="1205345337"/>
      <size package="4671624" installed="29913309" archive="29924160"/>
      <location href="rpm/i586/MozillaThunderbird-translations-1.5.0.14-0.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird-translations"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/MozillaThunderbird-translations-1.5.0.14-0.3.i586.patch.rpm"/>
          <checksum type="sha">5545f3e15c6b529e08832c89f703020c03068bd5</checksum>
          <time file="1205373022" build="1205345337"/>
          <size package="18077" archive="124"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.2"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.4"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird-translations</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">0d7a502ab9b1dc471a22de4c9e850d15be94fe23</checksum>
      <time file="1205371018" build="1205344810"/>
      <size package="4671404" installed="29913309" archive="29924160"/>
      <location href="rpm/ppc/MozillaThunderbird-translations-1.5.0.14-0.3.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird-translations"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/MozillaThunderbird-translations-1.5.0.14-0.3.ppc.patch.rpm"/>
          <checksum type="sha">bce770835234043f1288d200ec297eb368369461</checksum>
          <time file="1205373067" build="1205344810"/>
          <size package="18061" archive="124"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.2"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.4"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>MozillaThunderbird-translations</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.5.0.14" rel="0.3"/>
      <checksum type="sha" pkgid="YES">13f36d3aaedc9497529f85db1bebed176bcfe9ca</checksum>
      <time file="1205371032" build="1205343022"/>
      <size package="4671402" installed="29913309" archive="29924252"/>
      <location href="rpm/x86_64/MozillaThunderbird-translations-1.5.0.14-0.3.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="MozillaThunderbird-translations" epoch="0" ver="1.5.0.14" rel="0.3" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="MozillaThunderbird-translations"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/MozillaThunderbird-translations-1.5.0.14-0.3.x86_64.patch.rpm"/>
          <checksum type="sha">f9e9b62b5fc4aaa371d3d23d44c6bbf2f6ef232d</checksum>
          <time file="1205373109" build="1205343022"/>
          <size package="18069" archive="124"/>
          <base-version epoch="0" ver="1.5.0.10" rel="1.1"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.2"/>
          <base-version epoch="0" ver="1.5.0.12" rel="3.4"/>
          <base-version epoch="0" ver="1.5.0.14" rel="0.1"/>
          <base-version epoch="0" ver="1.5.0.8" rel="3"/>
          <base-version epoch="0" ver="1.5.0.9" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
