CVE-2021-29956

Name of the Vulnerable Software and Affected Versions Thunderbird versions 78.8.1 through 78.10.1

Description The issue is related to the storage of OpenPGP secret keys in an unencrypted form on the user's local disk, which could allow an attacker to access confidential information. The master password protection was inactive for the imported keys.

Recommendations For Thunderbird versions 78.8.1 through 78.10.1, update to version 78.10.2 or later to restore the protection mechanism for newly imported keys and to automatically protect keys that had been imported using affected Thunderbird versions.