Lucene search
+L

Debian dsa-5984 : thunderbird - security update

🗓️ 24 Aug 2025 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 2 Views

Debian DSA-5984: Thunderbird fixed for CVE-2025-9179, 9180, 9181, 9185; upgrade deb12u1 or deb13u1

Related
Refs
Code
ReporterTitlePublishedViews
Family
FreeBSD
Mozilla -- Same-origin policy bypass in the Graphics: Canvas2D component
19 Aug 202500:00
freebsd
FreeBSD
Mozilla -- memory corruption in GMP
19 Aug 202500:00
freebsd
FreeBSD
Mozilla -- Same-origin policy bypass
19 Aug 202500:00
freebsd
FreeBSD
Mozilla -- Uninitialized memory
19 Aug 202500:00
freebsd
FreeBSD
Mozilla -- memory safety bugs
19 Aug 202500:00
freebsd
ATTACKERKB
CVE-2025-9180
19 Aug 202520:33
attackerkb
ATTACKERKB
CVE-2025-9185
19 Aug 202520:33
attackerkb
ATTACKERKB
CVE-2025-9179
19 Aug 202520:33
attackerkb
ATTACKERKB
CVE-2025-9181
19 Aug 202520:33
attackerkb
Tenable Nessus
Amazon Linux 2023 : firefox (ALAS2023-2025-1171)
8 Sep 202500:00
nessus
Rows per page
#%NASL_MIN_LEVEL 80900
#
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory dsa-5984. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#

include('compat.inc');

if (description)
{
  script_id(253987);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/21");

  script_cve_id(
    "CVE-2025-9179",
    "CVE-2025-9180",
    "CVE-2025-9181",
    "CVE-2025-9185"
  );
  script_xref(name:"IAVA", value:"2025-A-0616-S");

  script_name(english:"Debian dsa-5984 : thunderbird - security update");

  script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing one or more security-related updates.");
  script_set_attribute(attribute:"description", value:
"The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the
dsa-5984 advisory.

    - -------------------------------------------------------------------------
    Debian Security Advisory DSA-5984-1                   [email protected]
    https://www.debian.org/security/                       Moritz Muehlenhoff
    August 24, 2025                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : thunderbird
    CVE ID         : CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185

    Multiple security issues were discovered in Thunderbird, which could
    result in the execution of arbitrary code.

    For the oldstable distribution (bookworm), these problems have been fixed
    in version 1:128.14.0esr-1~deb12u1.

    For the stable distribution (trixie), these problems have been fixed in
    version 1:128.14.0esr-1~deb13u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to
    its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/thunderbird");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-9179");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-9180");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-9181");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-9185");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/bookworm/thunderbird");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/trixie/thunderbird");
  script_set_attribute(attribute:"solution", value:
"Upgrade the thunderbird packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-9185");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/19");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/08/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/08/24");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-af");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-all");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-be");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cak");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-dsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-en-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-en-gb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-mx");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fy-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ga-ie");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-he");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hy-am");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-id");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-is");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ka");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-kab");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-kk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-lv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ms");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nb-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nn-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pa-in");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-rm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sv-se");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-th");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-uk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-uz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-vi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-cn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-tw");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Debian Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);

var debian_release = get_kb_item('Host/Debian/release');
if ( isnull(debian_release) ) audit(AUDIT_OS_NOT, 'Debian');
debian_release = chomp(debian_release);
if (! preg(pattern:"^(12)\.[0-9]+|^(13)\.[0-9]+", string:debian_release)) audit(AUDIT_OS_NOT, 'Debian 12.0 / 13.0', 'Debian ' + debian_release);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Debian', cpu);

var pkgs = [
    {'release': '12.0', 'prefix': 'thunderbird', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-af', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-all', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ar', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ast', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-be', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-bg', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-br', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ca', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-cak', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-cs', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-cy', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-da', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-de', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-dsb', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-el', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-en-ca', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-en-gb', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-es-ar', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-es-es', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-es-mx', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-et', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-eu', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-fi', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-fr', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-fy-nl', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ga-ie', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-gd', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-gl', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-he', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hr', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hsb', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hu', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hy-am', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-id', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-is', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-it', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ja', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ka', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-kab', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-kk', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ko', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-lt', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-lv', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ms', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-nb-no', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-nl', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-nn-no', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pa-in', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pl', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pt-br', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pt-pt', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-rm', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ro', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ru', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sk', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sl', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sq', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sr', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sv-se', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-th', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-tr', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-uk', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-uz', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-vi', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-zh-cn', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-zh-tw', 'reference': '1:128.14.0esr-1~deb12u1'},
    {'release': '13.0', 'prefix': 'thunderbird', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-af', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-all', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ar', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ast', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-be', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-bg', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-br', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ca', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-cak', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-cs', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-cy', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-da', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-de', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-dsb', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-el', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-en-ca', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-en-gb', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-es-ar', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-es-es', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-es-mx', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-et', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-eu', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-fi', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-fr', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-fy-nl', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ga-ie', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-gd', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-gl', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-he', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hr', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hsb', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hu', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hy-am', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-id', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-is', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-it', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ja', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ka', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-kab', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-kk', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ko', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-lt', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-lv', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ms', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-nb-no', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-nl', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-nn-no', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pa-in', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pl', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pt-br', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pt-pt', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-rm', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ro', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ru', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sk', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sl', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sq', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sr', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sv-se', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-th', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-tr', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-uk', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-uz', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-vi', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-zh-cn', 'reference': '1:128.14.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-zh-tw', 'reference': '1:128.14.0esr-1~deb13u1'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var _release = NULL;
  var prefix = NULL;
  var reference = NULL;
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['prefix'])) prefix = package_array['prefix'];
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (_release && prefix && reference) {
    if (deb_check(release:_release, prefix:prefix, reference:reference)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : deb_report_get()
  );
  exit(0);
}
else
{
  var tested = deb_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'thunderbird / thunderbird-l10n-af / thunderbird-l10n-all / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Jan 2026 00:00Current
8.1High risk
Vulners AI Score8.1
CVSS 3.18.1 - 9.8
EPSS0.00568
SSVC
2