CVE-2021-4126

2021-12-2400:00:00

ubuntu.com

0.001 Low

EPSS

Percentile

29.8%

JSON

When receiving an OpenPGP/MIME signed email message that contains an
additional outer MIME message layer, for example a message footer added by
a mailing list gateway, Thunderbird only considered the inner signed
message for the signature validity. This gave the false impression that the
additional contents were also covered by the digital signature. Starting
with Thunderbird version 91.4.1, only the signature that belongs to the top
level MIME part will be considered for the displayed status. This
vulnerability affects Thunderbird < 91.4.1.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchthunderbird< 1:91.5.0+build1-0ubuntu0.18.04.1UNKNOWN
ubuntu20.04noarchthunderbird< 1:91.5.0+build1-0ubuntu0.20.04.1UNKNOWN
ubuntu21.10noarchthunderbird< 1:91.5.0+build1-0ubuntu0.21.10.1UNKNOWN
ubuntu22.04noarchthunderbird< 1:91.5.0+build1-0ubuntu1UNKNOWN
ubuntu22.10noarchthunderbird< 1:91.5.0+build1-0ubuntu1UNKNOWN
ubuntu23.04noarchthunderbird< 1:91.5.0+build1-0ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	thunderbird	< 1:91.5.0+build1-0ubuntu0.18.04.1	UNKNOWN
ubuntu	20.04	noarch	thunderbird	< 1:91.5.0+build1-0ubuntu0.20.04.1	UNKNOWN
ubuntu	21.10	noarch	thunderbird	< 1:91.5.0+build1-0ubuntu0.21.10.1	UNKNOWN
ubuntu	22.04	noarch	thunderbird	< 1:91.5.0+build1-0ubuntu1	UNKNOWN
ubuntu	22.10	noarch	thunderbird	< 1:91.5.0+build1-0ubuntu1	UNKNOWN
ubuntu	23.04	noarch	thunderbird	< 1:91.5.0+build1-0ubuntu1	UNKNOWN