Red Hat Security Advisory: thunderbird security update

Fixed packages 6

Vulnerabilities 5

• Unscored —
  CVE-2021-23991

  If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her ke…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 24, 2021
• Unscored —
  CVE-2021-23992

  Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may cre…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 24, 2021
• Unscored —
  CVE-2021-23993

  An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker …

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 24, 2021
• Unscored —
  CVE-2021-29949

  When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to op…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 24, 2021
• Unscored —
  CVE-2021-29950

  Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 24, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1948393
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1948394
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1948395
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1192.json
• report
  https://access.redhat.com/security/cve/CVE-2021-23991
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23991
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23991
• report
  https://access.redhat.com/security/cve/CVE-2021-23992
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23992
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23992
• report
  https://access.redhat.com/security/cve/CVE-2021-23993
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23993
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23993
• report
  https://access.redhat.com/security/cve/CVE-2021-29949
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1951872
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-29949
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-29949
• report
  https://access.redhat.com/security/cve/CVE-2021-29950
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1951873
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-29950
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-29950