-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2008-18
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 05 May 2008
 Last revised: 05 May 2008

 Package: thunderbird

 Summary: JavaScript garbage collector

 More information:
    Mozilla Thunderbird is an open-source mail client, designed for standards
    compliance, performance and portability.

    The JavaScript engine in Mozilla Firefox before 2.0.0.14,
    Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10
    allows remote attackers to cause a denial of service
    (garbage collector crash) and possibly have other impacts via a crafted web
 page. (CVE-2008-1380)

 Affected Products:
    - wizpy
    - Turbolinux FUJI


 <wizpy>

   Source Packages
   Size: MD5

   thunderbird-2.0.0.14-1.src.rpm
     37968724 6ba1570f7b79715590114edf36bcc2ac

   Binary Packages
   Size: MD5

   thunderbird-2.0.0.14-1.i386.rpm
     10125163 40d3dacc854d75bb45bc9e3c32dee558
   thunderbird-en_US-2.0.0.14-1.i386.rpm
       140553 a9c8d81e55ea962bf056922af56841aa
   thunderbird-ja-2.0.0.14-1.i386.rpm
       345790 c6b1001ce9992afbaa0d92ff181156f0

 <Turbolinux FUJI>

   Source Packages
   Size: MD5

   thunderbird-2.0.0.14-1.src.rpm
     37968724 f51ffad130823c8143c8e31a8c204fd8

   Binary Packages
   Size: MD5

   thunderbird-2.0.0.14-1.i686.rpm
     13047224 e2dd291192dcc0cfa8dc9d6fe30ba6db


 Mozilla Foundation
   [Mozilla Foundation Security Advisories]
   http://www.mozilla.org/projects/security/known-vulnerabilities.html

 --------------------------------------------------------------------------
 Revision History
    05 May 2008 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2008 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkghlw4ACgkQK0LzjOqIJMxAdACfV25TTbsfXFAGHzGy5CQ4fJwe
UfgAn0DOxtD9OxRZcJM1sQ6o/SAA/pmG
=IYC6
-----END PGP SIGNATURE-----