Lucene search
K

Debian dsa-6081 : thunderbird - security update

🗓️ 14 Dec 2025 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 1 Views

Debian advisory DSA-6081 fixes Thunderbird CVEs that enable arbitrary code execution; upgrade to 140.6.0esr-1~deb12u1 or 140.6.0esr-1~deb13u1.

Related
Refs
Code
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Use After Free in Mozilla Firefox
2 Feb 202619:54
githubexploit
GithubExploit
Exploit for Type Confusion in Mozilla Firefox
9 Apr 202615:45
githubexploit
FreeBSD
Mozilla -- Use-after-free
9 Dec 202500:00
freebsd
FreeBSD
Mozilla -- Sandbox escape
9 Dec 202500:00
freebsd
FreeBSD
Mozilla -- Privilege escalation
9 Dec 202500:00
freebsd
FreeBSD
Mozilla -- JIT miscompilation
9 Dec 202500:00
freebsd
FreeBSD
Mozilla -- Privilege escalation
9 Dec 202500:00
freebsd
FreeBSD
Mozilla -- Privilege escalation
9 Dec 202500:00
freebsd
FreeBSD
Mozilla -- JIT miscompilation in the JavaScript Engine: JIT component
9 Dec 202500:00
freebsd
FreeBSD
Mozilla -- Same-origin policy bypass
9 Dec 202500:00
freebsd
Rows per page
#%NASL_MIN_LEVEL 80900
#
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory dsa-6081. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#

include('compat.inc');

if (description)
{
  script_id(278631);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/24");

  script_cve_id(
    "CVE-2025-14321",
    "CVE-2025-14322",
    "CVE-2025-14323",
    "CVE-2025-14324",
    "CVE-2025-14325",
    "CVE-2025-14328",
    "CVE-2025-14329",
    "CVE-2025-14330",
    "CVE-2025-14331",
    "CVE-2025-14333"
  );
  script_xref(name:"IAVA", value:"2025-A-0895-S");

  script_name(english:"Debian dsa-6081 : thunderbird - security update");

  script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing one or more security-related updates.");
  script_set_attribute(attribute:"description", value:
"The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the
dsa-6081 advisory.

    - -------------------------------------------------------------------------
    Debian Security Advisory DSA-6081-1                   [email protected]
    https://www.debian.org/security/                       Moritz Muehlenhoff
    December 14, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : thunderbird
    CVE ID         : CVE-2025-14321 CVE-2025-14322 CVE-2025-14323 CVE-2025-14324
                     CVE-2025-14325 CVE-2025-14328 CVE-2025-14329 CVE-2025-14330
                     CVE-2025-14331 CVE-2025-14333

    Multiple security issues were discovered in Thunderbird, which could
    result in the execution of arbitrary code.

    For the oldstable distribution (bookworm), these problems have been fixed
    in version 1:140.6.0esr-1~deb12u1.

    For the stable distribution (trixie), these problems have been fixed in
    version 1:140.6.0esr-1~deb13u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to
    its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/thunderbird");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14321");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14322");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14323");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14324");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14325");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14328");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14329");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14330");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14331");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-14333");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/bookworm/thunderbird");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/trixie/thunderbird");
  script_set_attribute(attribute:"solution", value:
"Upgrade the thunderbird packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-14330");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/12/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/12/14");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/12/14");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-af");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-all");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-be");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cak");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-dsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-en-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-en-gb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-mx");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fy-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ga-ie");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-he");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hy-am");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-id");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-is");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ka");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-kab");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-kk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-lv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ms");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nb-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nn-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pa-in");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-rm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sv-se");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-th");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-uk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-uz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-vi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-cn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-tw");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Debian Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);

var debian_release = get_kb_item('Host/Debian/release');
if ( isnull(debian_release) ) audit(AUDIT_OS_NOT, 'Debian');
debian_release = chomp(debian_release);
if (! preg(pattern:"^(12)\.[0-9]+|^(13)\.[0-9]+", string:debian_release)) audit(AUDIT_OS_NOT, 'Debian 12.0 / 13.0', 'Debian ' + debian_release);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Debian', cpu);

var pkgs = [
    {'release': '12.0', 'prefix': 'thunderbird', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-af', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-all', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ar', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ast', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-be', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-bg', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-br', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ca', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-cak', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-cs', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-cy', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-da', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-de', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-dsb', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-el', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-en-ca', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-en-gb', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-es-ar', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-es-es', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-es-mx', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-et', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-eu', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-fi', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-fr', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-fy-nl', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ga-ie', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-gd', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-gl', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-he', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hr', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hsb', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hu', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-hy-am', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-id', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-is', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-it', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ja', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ka', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-kab', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-kk', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ko', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-lt', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-lv', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ms', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-nb-no', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-nl', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-nn-no', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pa-in', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pl', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pt-br', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-pt-pt', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-rm', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ro', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-ru', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sk', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sl', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sq', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sr', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-sv-se', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-th', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-tr', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-uk', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-uz', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-vi', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-zh-cn', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '12.0', 'prefix': 'thunderbird-l10n-zh-tw', 'reference': '1:140.6.0esr-1~deb12u1'},
    {'release': '13.0', 'prefix': 'thunderbird', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-af', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-all', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ar', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ast', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-be', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-bg', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-br', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ca', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-cak', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-cs', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-cy', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-da', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-de', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-dsb', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-el', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-en-ca', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-en-gb', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-es-ar', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-es-es', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-es-mx', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-et', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-eu', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-fi', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-fr', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-fy-nl', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ga-ie', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-gd', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-gl', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-he', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hr', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hsb', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hu', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-hy-am', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-id', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-is', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-it', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ja', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ka', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-kab', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-kk', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ko', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-lt', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-lv', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ms', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-nb-no', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-nl', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-nn-no', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pa-in', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pl', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pt-br', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-pt-pt', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-rm', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ro', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-ru', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sk', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sl', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sq', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sr', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-sv-se', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-th', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-tr', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-uk', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-uz', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-vi', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-zh-cn', 'reference': '1:140.6.0esr-1~deb13u1'},
    {'release': '13.0', 'prefix': 'thunderbird-l10n-zh-tw', 'reference': '1:140.6.0esr-1~deb13u1'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var _release = NULL;
  var prefix = NULL;
  var reference = NULL;
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['prefix'])) prefix = package_array['prefix'];
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (_release && prefix && reference) {
    if (deb_check(release:_release, prefix:prefix, reference:reference)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : deb_report_get()
  );
  exit(0);
}
else
{
  var tested = deb_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'thunderbird / thunderbird-l10n-af / thunderbird-l10n-all / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Feb 2026 00:00Current
9High risk
Vulners AI Score9
CVSS 3.19.8
EPSS0.00517
SSVC
1