CVE-2021-29950

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 78.8.1

Description: The issue is related to errors in handling OpenPGP cryptographic signatures in the Thunderbird email client. Exploitation of this issue could allow a remote attacker to impact the confidentiality and integrity of protected information. Specifically, Thunderbird fails to protect a secret OpenPGP key before using it for decryption, signing, or key import tasks. If such a task fails, the secret key may remain in memory in its unprotected state.

Recommendations: For versions prior to 78.8.1, update to version 78.8.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of OpenPGP keys in Thunderbird until the update is applied.