TI-2021-10567 CVE-2021-29950 · GHSA-4ghf-pq62-2jfh
Cleartext storage of sensitive information in Mozilla Thunderbird
Priority LOW 34
Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task.
RHSA-2021:1190
thunderbird security update
Released 2021-04-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.1) thunderbird-78.9.1-1.el8_1
Fixes 5 records
TI-2021-10566 CVE-2021-29949 · GHSA-mhf4-98x7-2cw4
Uncontrolled search path in Mozilla Thunderbird
Priority LOW 34
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird.
TI-2021-06310 CVE-2021-23991 · GHSA-x5j6-p8w8-5r65
If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended…
Priority LOW 32
If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a craf…
TI-2021-06312 CVE-2021-23993 · GHSA-3pj2-rvj5-6646
Improper signature verification in Mozilla Thunderbird
Priority LOW 29
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent.
TI-2021-06311 CVE-2021-23992 · GHSA-x89c-f42w-ch2g
Improper signature verification in Mozilla Thunderbird
Priority LOW 21
Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature.