SUSE-SU-2021:1854-1
SUSE-SU-2021:1854-1 · Security update for MozillaThunderbird
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.10.2 - CVE-2021-29957: Fixed partial protection of inline OpenPGP message not indicated (bsc#1186198). - CVE-2021-29956: Fixed Thunderbird stored OpenPGP secret keys without master password protection (bsc#1186199). - CVE-2021-29951: Fixed Thunderbird Maintenance Service could have been started or stopped by domain users (bsc#1185633). - CVE-2021-29950: Fixed logic issue potentially leaves key material unlocked (bsc#1185086).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
mozillathunderbird SUSE:Linux Enterprise Workstation Extension 15 SP2
- Affected ranges
- ECOSYSTEM: < 78.10.2-8.27.1
Update to 78.10.2-8.27.1
mozillathunderbird SUSE:Linux Enterprise Workstation Extension 15 SP3
- Affected ranges
- ECOSYSTEM: < 78.10.2-8.27.1
Update to 78.10.2-8.27.1
Original sources
- https://www.suse.com/support/update/announcement/2021/suse-su-20211854-1/
- https://bugzilla.suse.com/1185086
- https://bugzilla.suse.com/1185633
- https://bugzilla.suse.com/1186198
- https://bugzilla.suse.com/1186199
- https://www.suse.com/security/cve/CVE-2021-29950
- https://www.suse.com/security/cve/CVE-2021-29951
- https://www.suse.com/security/cve/CVE-2021-29956
- https://www.suse.com/security/cve/CVE-2021-29957
- https://osv.dev/vulnerability/SUSE-SU-2021:1854-1