<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="157ef14746abeaecbcb665f51bb72f14"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="192">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Update to 2.0.0.16</title>
  <release>openSUSE 11.0</release>
  <issued date="1221183980"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=407573" id="407573" title="bug number 407573" type="bugzilla"/>
  </references>
  <description>Mozilla Thunderbird was updated to 2.0.0.16.

MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via
TippingPoint's Zero Day Initiative program, reported a
vulnerability in Mozilla CSS reference counting code. The
vulnerability was caused by an insufficiently sized
variable being used as a reference counter for CSS objects.
By creating a very large number of references to a common
CSS object, this counter could be overflowed which could
cause a crash when the browser attempts to free the CSS
object while still in use. An attacker could use this crash
to run arbitrary code on the victim's computer
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-2.0.0.16-0.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="ppc" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-2.0.0.16-0.1.ppc.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-2.0.0.16-0.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-devel-2.0.0.16-0.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="ppc" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-devel-2.0.0.16-0.1.ppc.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-devel-2.0.0.16-0.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations" arch="i586" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-translations-2.0.0.16-0.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations" arch="ppc" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-translations-2.0.0.16-0.1.ppc.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations" arch="x86_64" version="2.0.0.16" release="0.1">
          <filename>MozillaThunderbird-translations-2.0.0.16-0.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
