Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-4126HistoryDec 22, 2022 - 8:15 p.m.
CVE-2021-4126
2022-12-2220:15:00
Debian Security Bug Tracker
security-tracker.debian.org
15
0.001 Low
EPSS
Percentile
29.6%
When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the additional contents were also covered by the digital signature. Starting with Thunderbird version 91.4.1, only the signature that belongs to the top level MIME part will be considered for the displayed status. This vulnerability affects Thunderbird < 91.4.1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | thunderbird | < 1:91.4.1-1 | thunderbird_1:91.4.1-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:91.4.1-1~deb11u1 | thunderbird_1:91.4.1-1~deb11u1_all.deb |
| Debian | 10 | all | thunderbird | < 1:91.4.1-1~deb10u1 | thunderbird_1:91.4.1-1~deb10u1_all.deb |
| Debian | 999 | all | thunderbird | < 1:91.4.1-1 | thunderbird_1:91.4.1-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:91.4.1-1 | thunderbird_1:91.4.1-1_all.deb |
Related
cve
cve
CVE-2021-4126
2022-12-22 20:15:00
alpinelinux
alpinelinux
CVE-2021-4126
2022-12-22 20:15:00
veracode
veracode
Insecure Signature Validation
2021-12-29 21:01:25
cvelist
cvelist
CVE-2021-4126
2022-12-22 00:00:00
prion
prion
Code injection
2022-12-22 20:15:00
ubuntucve
ubuntucve
CVE-2021-4126
2021-12-24 00:00:00
nessus
nessus
Mozilla Thunderbird < 91.4.1
2021-12-20 00:00:00
openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2022:0058-1)
2022-01-13 00:00:00
Mozilla Thunderbird < 91.4.1
2021-12-20 00:00:00
kaspersky
kaspersky
KLA12397 Multiple vulnerabilities in Mozilla Thunderbird
2021-12-21 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2021-12-24 00:01:45
openvas
openvas
openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2022:0058-1)
2022-02-01 00:00:00
Mageia: Security Advisory (MGASA-2021-0584)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-5034-1)
2022-01-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 91.4.1-alt1
2021-12-27 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 91.4.1 — Mozilla
2021-12-21 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2022-03-01 00:00:00
osv
osv
thunderbird - security update
2022-01-02 00:00:00
thunderbird - security update
2022-01-04 00:00:00
thunderbird vulnerabilities
2022-01-21 17:00:48
debian
debian
[SECURITY] [DSA 5034-1] thunderbird security update
2022-01-02 17:02:08
[SECURITY] [DLA 2874-1] thunderbird security update
2022-01-04 10:10:27
ubuntu
ubuntu
Thunderbird vulnerabilities
2022-01-21 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00