File _patchinfo of Package patchinfo.19722
<patchinfo incident="19722"> <issue tracker="cve" id="2021-29957"/> <issue tracker="cve" id="2021-29950"/> <issue tracker="cve" id="2021-29951"/> <issue tracker="cve" id="2021-29956"/> <issue tracker="bnc" id="1186198">VUL-1: CVE-2021-29957: MozillaThunderbird: Partial protection of inline OpenPGP message not indicated</issue> <issue tracker="bnc" id="1186199">VUL-1: CVE-2021-29956: MozillaThunderbird: Thunderbird stored OpenPGP secret keys without master password protection</issue> <issue tracker="bnc" id="1185633">VUL-0: CVE-2021-29951: MozillaFirefox, MozillaThunderbird: update to 88.0.1 and 78.10.1esr</issue> <issue tracker="bnc" id="1185086">VUL-0: CVE-2021-29950: MozillaThunderbird: Logic issue potentially leaves key material unlocked</issue> <packager>MSirringhaus</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for MozillaThunderbird</summary> <description>This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.10.2 - CVE-2021-29957: Fixed partial protection of inline OpenPGP message not indicated (bsc#1186198). - CVE-2021-29956: Fixed Thunderbird stored OpenPGP secret keys without master password protection (bsc#1186199). - CVE-2021-29951: Fixed Thunderbird Maintenance Service could have been started or stopped by domain users (bsc#1185633). - CVE-2021-29950: Fixed logic issue potentially leaves key material unlocked (bsc#1185086). </description> </patchinfo>