Important: thunderbird (SL4, SL5, SL6)

Synopsis: Important: thunderbird security update
Issue Date: 2011-08-31
Mozilla Thunderbird is a standalone mail and newsgroup client.

It was found that a Certificate Authority (CA) issued a fraudulent HTTPS
certificate. This update renders any HTTPS certificates signed by that
CA as untrusted, except for a select few. The now untrusted certificates
that were issued before July 1, 2011 can be manually re-enabled and used
again at your own risk in Thunderbird; however, affected certificates
issued after this date cannot be re-enabled or used. (BZ#734316)

All Thunderbird users should upgrade to this updated package, which
resolves this issue. All running instances of Thunderbird must be
restarted for the update to take effect.

SL4
x86_64
thunderbird-1.5.0.12-42.el4.x86_64.rpm
i386
thunderbird-1.5.0.12-42.el4.i386.rpm
SL5
x86_64
thunderbird-2.0.0.24-24.el5.x86_64.rpm
i386
thunderbird-2.0.0.24-24.el5.i386.rpm
SL6
x86_64
thunderbird-3.1.12-2.el6_1.x86_64.rpm
i386
thunderbird-3.1.12-2.el6_1.i686.rpm

– Scientific Linux Development Team