See the Mozilla Thunderbird project page for Of becoming a cross-platform stand alone mail application using the XUL Maintainer: Port Added: 22:47:35 Last Update: 15:17:15 Commit Hash: feb1fa3 People watching this port, also watch:: firefox, gtk2, zip, mplayer, gmake Also Listed In: net-im news wayland License: not specified in port Description: Mozilla Thunderbird is a redesign of the Mozilla mail component with the goal

Thunderbird Mozilla Thunderbird is standalone mail and news that stands aboveġ02.10.1_2 mail =138 Version of this port present on the latest quarterly branch. Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15) All times are UTC The upgrade is hosted for download at - mail/thunderbird: Mozilla Thunderbird is standalone mail and news that stands aboveĪs an Amazon Associate I earn from qualifying purchases. Upgrading to version 91.4.1 eliminates this vulnerability. The price for an exploit might be around USD $5k-$25k at the moment ( estimation calculated on ). Neither technical details nor an exploit are publicly available. This vulnerability is known as CVE-2021-4126 since. This vulnerability affects Thunderbird < 91.4.1. Starting with Thunderbird version 91.4.1, only the signature that belongs to the top level MIME part will be considered for the displayed status. This gave the false impression that the additional contents were also covered by the digital signature. When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. As an impact it is known to affect integrity, and availability. Affected by this vulnerability is some unknown functionality of the component Digital Signature Handler.

A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability has been found in Mozilla Thunderbird up to 91.4.0 ( Mail Client Software) and classified as problematic. The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time.

Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.

Mozilla thunderbird update 2021