CVE-2021-29956

OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will...

CVE-2021-29957

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird 78.10.2...

UBUNTU-CVE-2021-29957

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird 78.10.2...

UBUNTU-CVE-2021-29956

OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will...

[ASA-202105-29] thunderbird: multiple issues

Arch Linux Security Advisory ASA-202105-29 ========================================== Severity: Low Date : 2021-05-25 CVE-ID : CVE-2021-29956 CVE-2021-29957 Package : thunderbird Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1964 Summary ======= The package...

Information Disclosure

thunderbird is vulnerable to information disclosure. OpenPGP secret keys that were imported were stored unencrypted on the user's local disk...

Phishing Attack

thunderbird is vulnerable to phishing attack. The vulnerability exists as thunderbird does noto indicate that only parts of the message are protected when a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part...

MGASA-2021-0217 Updated thunderbird packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection CVE-2021-29956. Partial protection of inline OpenPGP message not indicated CVE-2021-29957...

Updated thunderbird packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection CVE-2021-29956. Partial protection of inline OpenPGP message not indicated CVE-2021-29957...

Mozilla Thunderbird has an unspecified vulnerability (CNVD-2021-54707)

Mozilla Thunderbird is a suite of email client software from the Mozilla Foundation that is separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols, and HTML mail formats. Mozilla Thunderbird has a security vulnerability that originates from the use of OpenPGP...

CVE-2021-29956

OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will...

CVE-2021-29957

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird 78.10.2...

PT-2021-3102

Name of the Vulnerable Software and Affected Versions Thunderbird versions 78.8.1 through 78.10.1 Description The issue is related to the storage of OpenPGP secret keys in an unencrypted form on the user's local disk, which could allow an attacker to access confidential information. The master...

PT-2021-3103

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 78.10.2 Description The issue arises when a MIME encoded email contains an OpenPGP inline signed or encrypted message part, along with an additional unprotected part. In such cases, Thunderbird fails to indicate...

Security Vulnerabilities fixed in Thunderbird 78.10.2 — Mozilla

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version...

Mozilla Thunderbird < 78.10.2

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 78.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-22 advisory. - If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains...

Mozilla Thunderbird < 78.10.2

The version of Thunderbird installed on the remote Windows host is prior to 78.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-22 advisory. - If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an...

Huawei EulerOS: Security Advisory for evolution (EulerOS-SA-2021-1779)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : evolution (EulerOS-SA-2021-1779)

According to the version of the evolution packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains...

Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1

April 26, 2021 Andrey Cherepanov 78.10.0-alt1 - New version 78.10.0. - Security fixes: + CVE-2021-23994 Out of bound write due to lazy initialization + CVE-2021-23995 Use-after-free in Responsive Design Mode + CVE-2021-23998 Secure Lock icon could have been spoofed + CVE-2021-23961 More internal...