This write-up takes a while to get to the point for Thunderbird users, which is: * Thunderbird add-ons aren't well-sandboxed, so a vulnerable or malicious add-

This write-up takes a while to get to the point for Thunderbird users, which is: * Thunderbird add-ons aren't well-sandboxed, so a vulnerable or malicious add-on can access your mail and even private keys * an as-yet-fully-specified bug in Thunderbird RSS feed handling allows RSS feeds to access "communications and other sensitive data" I'm not sure how many Thunderbird users are dependent on add-ons – so simply disabling most/all add-ons may be an acceptable mitigation for the 1st matter. But for the vaguely-described RSS bug, their only suggestion is: "Do not use RSS feeds in Thunderbird for now. There are critical security problems, threatening your entire communication."