Related Vulnerabilities: CVE-2021-29950  

A security issue was found in Thunderbird before version 78.8.1. Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may remain in memory in its unprotected state.

Severity Medium

Remote No

Type Private key recovery

Description

A security issue was found in Thunderbird before version 78.8.1. Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may remain in memory in its unprotected state.

AVG-1845 thunderbird 78.8.0-1 78.8.1-1 Medium Fixed

https://www.mozilla.org/en-US/security/advisories/mfsa2021-17/#CVE-2021-29950
https://bugzilla.mozilla.org/show_bug.cgi?id=1673239