Synopsis: Critical: thunderbird security update Issue Date: 2012-02-16 CVE Numbers: CVE-2011-3026 Mozilla Thunderbird is a standalone mail and newsgroup client. A heap-based buffer overflow flaw was found in the way Thunderbird handled PNG (Portable Network Graphics) images. An HTML mail message or remote content containing a specially-crafted PNG image could cause Thunderbird to crash or, possibly, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2011-3026) All Thunderbird users should upgrade to this updated package, which corrects this issue. After installing the update, Thunderbird must be restarted for the changes to take effect. SL6: i386 thunderbird-3.1.18-2.el6_2.i686.rpm thunderbird-debuginfo-3.1.18-2.el6_2.i686.rpm x86_64 thunderbird-3.1.18-2.el6_2.x86_64.rpm thunderbird-debuginfo-3.1.18-2.el6_2.x86_64.rpm - Scientific Linux Development Team