CVE ID | Vulnerability | Severity |
CVE-2021-23991 | An attacker may use Thunderbird's OpenPGP key refresh mechanism to poison an existing key | Moderate |
MOZ-2021-23992 | A crafted OpenPGP key with an invalid user ID could be used to confuse the user | Moderate |
CVE-2021- 23993 | Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key | Moderate |
To install these updates using Desktop Central, initiate a sync between the Central Patch Repository and the Desktop Central server. Once the sync is complete, search for the following Patch IDs or Bulletin ID and deploy them to your target systems.
Patch ID | Bulletin ID | Patch Description |
319077 | TU-028 | Mozilla Thunderbird (78.9.1) |
319078 | TU-028 | Mozilla Thunderbird (x64) (78.9.1) |
Cheers,