Synopsis:    Critical: thunderbird security update
Issue Date:  2012-02-16
CVE Numbers: CVE-2011-3026


Mozilla Thunderbird is a standalone mail and newsgroup client.

A heap-based buffer overflow flaw was found in the way Thunderbird handled
PNG (Portable Network Graphics) images. An HTML mail message or remote
content containing a specially-crafted PNG image could cause Thunderbird to
crash or, possibly, execute arbitrary code with the privileges of the user
running Thunderbird. (CVE-2011-3026)

All Thunderbird users should upgrade to this updated package, which
corrects this issue. After installing the update, Thunderbird must be
restarted for the changes to take effect.

SL6:
  i386
     thunderbird-3.1.18-2.el6_2.i686.rpm
     thunderbird-debuginfo-3.1.18-2.el6_2.i686.rpm
  x86_64
     thunderbird-3.1.18-2.el6_2.x86_64.rpm
     thunderbird-debuginfo-3.1.18-2.el6_2.x86_64.rpm

- Scientific Linux Development Team