Alpine/thunderbird: medium 5.9
If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS handshake, then Thunderbird didn't ignore t
Action: Upgrade thunderbird to 91.3.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 91.3.2-r0 | - |
Fixed versions
| 91.3.2-r0 |
Sources
- osv: ALPINE-CVE-2021-29969#Alpine:v3.17/thunderbird
- https://security.alpinelinux.org/vuln/CVE-2021-29969
published · modified · JSON