ALPINE-CVE-2021-29956

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2021-29956
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2021-29956
Upstream
Published
2021-06-24T14:15:10Z
Modified
2026-11-03T06:32:39Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automatically protect keys that had been imported using affected Thunderbird versions. This vulnerability affects Thunderbird < 78.10.2.

References

Affected packages

Alpine:v3.16
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"
Alpine:v3.17
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"
Alpine:v3.18
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"
Alpine:v3.19
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"
Alpine:v3.20
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"
Alpine:v3.21
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"
Alpine:v3.22
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"
Alpine:v3.23
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
78.8.1
Fixed
91.3.2-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-29956.json"