Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Mageia 7 and 8 Advisory 2021-0217: Moderate Thunderbird Key Issues

mageia
Calendar Grey May 21, 2021
Dist Mageia Esm H88
New Thunderbird updates address vulnerabilities, particularly unprotected key storage in Mageia versions 7 and 8.
The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection (CVE-2021-29956)

Summary

The updated packages fix security vulnerabilities:
Thunderbird stored OpenPGP secret keys without master password protection (CVE-2021-29956).
Partial protection of inline OpenPGP message not indicated (CVE-2021-29957).

References

- https://bugs.mageia.org/show_bug.cgi?id=28941

- https://www.mozilla.org/en-US/security/advisories/mfsa2021-22/

- https://www.thunderbird.net/en-US/thunderbird/78.10.1/releasenotes/

- https://www.thunderbird.net/en-US/thunderbird/78.10.2/releasenotes/

- https://www.cve.org/CVERecord?id=CVE-2021-29956

- https://www.cve.org/CVERecord?id=CVE-2021-29957

Topics%20covered

Topics Covered

security advisory moderate security issue advisory Thunderbird OpenPGP Mageia key protection

Resolution

SRPMS

- 8/core/thunderbird-78.10.2-1.mga8

- 8/core/thunderbird-l10n-78.10.2-1.mga8

- 7/core/thunderbird-78.10.2-1.mga7

- 7/core/thunderbird-l10n-78.10.2-1.mga7

Publication date: 21 May 2021
URL: https://advisories.mageia.org/MGASA-2021-0217.html
Type: security
CVE: CVE-2021-29956, CVE-2021-29957

Topics%20covered

Topics Covered

security advisory moderate security issue advisory Thunderbird OpenPGP Mageia key protection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here