Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may remain in memory in its unprotected state. This vulnerability affects Thunderbird < 78.8.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbird | May 4, 2022 | Jun 24, 2021 |
| Centos_linux | — | Upgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade thunderbird | Jun 1, 2021 | Apr 14, 2021 |
| Debian | — | Upgrade thunderbird | Apr 23, 2021 | Apr 23, 2021 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 78.8.1 | Apr 21, 2021 | Mar 8, 2021 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 78.9.0-11.4.32.0.1.88.3 on Solaris 11.4 | Jun 16, 2021 | Jun 16, 2021 |
| Redhat_linux | — | Upgrade thunderbirdNo solution existsUpgrade thunderbird-debuginfoUpgrade thunderbird-debugsource | Apr 28, 2021 | Apr 14, 2021 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird | Jun 9, 2021 | May 6, 2021 |
| Ubuntu | — | Upgrade thunderbird | May 7, 2021 | May 6, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub