Lucene search

K
nessusUbuntu Security Notice (C) 2019-2023 Canonical, Inc. / NASL script (C) 2019-2023 and is owned by Tenable, Inc. or an Affiliate thereof.UBUNTU_USN-4064-1.NASL
HistoryJul 19, 2019 - 12:00 a.m.

Ubuntu 16.04 LTS / 18.04 LTS : Thunderbird vulnerabilities (USN-4064-1)

2019-07-1900:00:00
Ubuntu Security Notice (C) 2019-2023 Canonical, Inc. / NASL script (C) 2019-2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14

A sandbox escape was discovered in Thunderbird. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. (CVE-2019-9811)

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass same origin restrictions, conduct cross-site scripting (XSS) attacks, spoof origin attributes, or execute arbitrary code. (CVE-2019-11709, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713, CVE-2019-11715, CVE-2019-11717)

It was discovered that NSS incorrectly handled importing certain curve25519 private keys. An attacker could exploit this issue to cause Thunderbird to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2019-11719)

It was discovered that NSS incorrectly handled certain p256-ECDH public keys. An attacker could possibly exploit this issue to cause Thunderbird to crash, resulting in a denial of service.
(CVE-2019-11729)

It was discovered that Thunderbird treats all files in a directory as same origin. If a user were tricked in to downloading a specially crafted HTML file, an attacker could potentially exploit this to obtain sensitive information from local files. (CVE-2019-11730).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-4064-1. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include('compat.inc');

if (description)
{
  script_id(126816);
  script_version("1.8");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/20");

  script_cve_id(
    "CVE-2019-11709",
    "CVE-2019-11711",
    "CVE-2019-11712",
    "CVE-2019-11713",
    "CVE-2019-11715",
    "CVE-2019-11717",
    "CVE-2019-11719",
    "CVE-2019-11729",
    "CVE-2019-11730",
    "CVE-2019-9811"
  );
  script_xref(name:"USN", value:"4064-1");

  script_name(english:"Ubuntu 16.04 LTS / 18.04 LTS : Thunderbird vulnerabilities (USN-4064-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"A sandbox escape was discovered in Thunderbird. If a user were tricked
in to installing a malicious language pack, an attacker could exploit
this to gain additional privileges. (CVE-2019-9811)

Multiple security issues were discovered in Thunderbird. If a user
were tricked in to opening a specially crafted website in a browsing
context, an attacker could potentially exploit these to cause a denial
of service, bypass same origin restrictions, conduct cross-site
scripting (XSS) attacks, spoof origin attributes, or execute arbitrary
code. (CVE-2019-11709, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713,
CVE-2019-11715, CVE-2019-11717)

It was discovered that NSS incorrectly handled importing certain
curve25519 private keys. An attacker could exploit this issue to cause
Thunderbird to crash, resulting in a denial of service, or possibly
obtain sensitive information. (CVE-2019-11719)

It was discovered that NSS incorrectly handled certain p256-ECDH
public keys. An attacker could possibly exploit this issue to cause
Thunderbird to crash, resulting in a denial of service.
(CVE-2019-11729)

It was discovered that Thunderbird treats all files in a directory as
same origin. If a user were tricked in to downloading a specially
crafted HTML file, an attacker could potentially exploit this to
obtain sensitive information from local files. (CVE-2019-11730).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-4064-1");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-11713");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/07/23");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/07/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/07/19");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-globalmenu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-gnome-support");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-af");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-be");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bn-bd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-cy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-dsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-en");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-en-gb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-en-us");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-es-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-es-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fy-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ga");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ga-ie");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-he");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-hsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-hy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-id");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-is");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ka");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-kab");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-kk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-mk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ms");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nb-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nn-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pa-in");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pt-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pt-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-rm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-si");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sv-se");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ta");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ta-lk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-uk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-vi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-cn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-hans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-hant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-tw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-mozsymbols");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xul-ext-calendar-timezones");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xul-ext-gdata-provider");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xul-ext-lightning");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2019-2023 Canonical, Inc. / NASL script (C) 2019-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('16.04' >< os_release || '18.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 16.04 / 18.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '16.04', 'pkgname': 'thunderbird', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-dev', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-globalmenu', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-gnome-support', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-af', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ar', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ast', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-be', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-bg', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-bn', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-bn-bd', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-br', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ca', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-cs', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-cy', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-da', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-de', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-dsb', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-el', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-en', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-en-gb', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-en-us', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-es', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-es-ar', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-es-es', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-et', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-eu', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-fi', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-fr', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-fy', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-fy-nl', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ga', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ga-ie', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-gd', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-gl', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-he', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-hr', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-hsb', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-hu', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-hy', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-id', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-is', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-it', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ja', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ka', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-kab', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-kk', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ko', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-lt', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-mk', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ms', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-nb', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-nb-no', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-nl', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-nn', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-nn-no', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-pa', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-pa-in', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-pl', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-pt', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-pt-br', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-pt-pt', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-rm', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ro', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ru', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-si', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-sk', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-sl', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-sq', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-sr', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-sv', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-sv-se', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ta', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-ta-lk', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-tr', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-uk', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-vi', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-zh-cn', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-zh-hans', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-zh-hant', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-locale-zh-tw', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'thunderbird-mozsymbols', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'xul-ext-calendar-timezones', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'xul-ext-gdata-provider', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '16.04', 'pkgname': 'xul-ext-lightning', 'pkgver': '1:60.8.0+build1-0ubuntu0.16.04.2'},
    {'osver': '18.04', 'pkgname': 'thunderbird', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-dev', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-globalmenu', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-gnome-support', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-af', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ar', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ast', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-be', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-bg', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-bn', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-bn-bd', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-br', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ca', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-cs', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-cy', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-da', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-de', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-dsb', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-el', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-en', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-en-gb', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-en-us', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-es', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-es-ar', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-es-es', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-et', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-eu', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-fi', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-fr', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-fy', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-fy-nl', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ga', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ga-ie', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-gd', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-gl', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-he', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-hr', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-hsb', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-hu', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-hy', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-id', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-is', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-it', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ja', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ka', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-kab', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-kk', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ko', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-lt', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-mk', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ms', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-nb', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-nb-no', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-nl', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-nn', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-nn-no', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-pa', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-pa-in', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-pl', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-pt', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-pt-br', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-pt-pt', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-rm', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ro', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ru', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-si', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-sk', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-sl', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-sq', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-sr', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-sv', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-sv-se', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ta', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-ta-lk', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-tr', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-uk', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-vi', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-zh-cn', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-zh-hans', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-zh-hant', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-locale-zh-tw', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'thunderbird-mozsymbols', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'xul-ext-calendar-timezones', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'xul-ext-gdata-provider', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'},
    {'osver': '18.04', 'pkgname': 'xul-ext-lightning', 'pkgver': '1:60.8.0+build1-0ubuntu0.18.04.1'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (osver && pkgname && pkgver) {
    if (ubuntu_check(osver:osver, pkgname:pkgname, pkgver:pkgver)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'thunderbird / thunderbird-dev / thunderbird-globalmenu / etc');
}
VendorProductVersionCPE
canonicalubuntu_linuxthunderbirdp-cpe:/a:canonical:ubuntu_linux:thunderbird
canonicalubuntu_linuxthunderbird-devp-cpe:/a:canonical:ubuntu_linux:thunderbird-dev
canonicalubuntu_linuxthunderbird-globalmenup-cpe:/a:canonical:ubuntu_linux:thunderbird-globalmenu
canonicalubuntu_linuxthunderbird-gnome-supportp-cpe:/a:canonical:ubuntu_linux:thunderbird-gnome-support
canonicalubuntu_linuxthunderbird-locale-afp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-af
canonicalubuntu_linuxthunderbird-locale-arp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ar
canonicalubuntu_linuxthunderbird-locale-astp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ast
canonicalubuntu_linuxthunderbird-locale-bep-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-be
canonicalubuntu_linuxthunderbird-locale-bgp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bg
canonicalubuntu_linuxthunderbird-locale-bnp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bn
Rows per page:
1-10 of 871