CVE-2021-29950: 
NixOS vulnerability analysis and mitigation

CVE-2021-29950 is a moderate severity vulnerability discovered in Mozilla Thunderbird's OpenPGP implementation. The vulnerability was reported by Cure53 and was publicly disclosed on March 8, 2021, with an advisory update on April 20, 2021. This security flaw affects Thunderbird version 78.8.1 and earlier versions (Mozilla Advisory).

The vulnerability is a logic issue where Thunderbird unprotects a secret OpenPGP key before using it for decryption, signing, or key import tasks. If any of these operations fail, the secret key material remains in memory in an unprotected state, rather than being properly re-protected (Mozilla Advisory).

If exploited, this vulnerability could allow a local attacker to potentially obtain private keys that remain unprotected in memory after a failed operation. This poses a security risk as sensitive cryptographic material could be exposed (Ubuntu Notice).

The vulnerability was fixed in Thunderbird version 78.8.1. Users are advised to update to this version or later. After updating, Thunderbird must be restarted for the security fixes to take effect (Red Hat Advisory).