CentOS Errata and Security Advisory 2009:0209
https://rhn.redhat.com/errata/RHSA-2008-0209.html
The following updated files have been uploaded and are currently syncing to the mirrors:
i386: thunderbird-1.5.0.12-10.el4.centos.i386.rpm
src: thunderbird-1.5.0.12-10.el4.centos.src.rpm