Search for packages
| purl | pkg:rpm/redhat/thunderbird@78.11.0-1?arch=el8_2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-dedv-96fb-vyhp
Aliases: CVE-2021-29967 |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
|
VCID-vgf2-x49m-cqde
Aliases: CVE-2021-29957 |
If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. | There are no reported fixed by versions. |
|
VCID-wzpf-nter-m3dv
Aliases: CVE-2021-29956 |
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automatically protect keys that had been imported using affected Thunderbird versions. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:02:17.481716+00:00 | RedHat Importer | Affected by | VCID-wzpf-nter-m3dv | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-29956.json | 38.0.0 |
| 2026-04-01T14:02:17.400922+00:00 | RedHat Importer | Affected by | VCID-vgf2-x49m-cqde | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-29957.json | 38.0.0 |
| 2026-04-01T14:02:10.164237+00:00 | RedHat Importer | Affected by | VCID-dedv-96fb-vyhp | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-29967.json | 38.0.0 |