Security Update for Thunderbird

thunderbird Updated 02 Oct 2025

Summary

05/10/2023
N/A
Yes i
Unrated
Not published

DLA-3601-1: thunderbird - security update. Affects thunderbird versions < 1:115.3.1-1~deb10u1. Fixed in 1:115.3.1-1~deb10u1. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Mobile apps built by Devnack Design, build and launch iOS and Android apps with a senior product team. From idea to store release Start a project

Background

Thunderbird is an open-source email client developed by Mozilla. It provides various features for managing emails, contacts, and calendars. Thunderbird is widely used by individuals and organizations for its robustness and user-friendly interface. However, multiple security issues have been discovered in Thunderbird, which could lead to denial of service or the execution of arbitrary code.

Vulnerability Detail

The vulnerability affects Thunderbird versions 102.x and earlier. With the release of version 115.x, Debian has ended support for the 102.x series and is now following the 115.x series. The specific security issues that have been addressed in this update are not mentioned in the provided information. However, it is important to note that these issues could potentially allow attackers to disrupt the functionality of Thunderbird or execute malicious code on a user's system.

How To Fix

Minimum fixed version

1:115.3.1-1~deb10u1

This is the first release that contains the fix.

sudo apt-get install --only-upgrade thunderbird

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Conclusion

Multiple security issues have been discovered in Thunderbird, which could lead to denial of service or the execution of arbitrary code. It is crucial to upgrade your Thunderbird packages to version 1:115.3.1-1~deb10u1 to mitigate these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.

See every vulnerability recorded for thunderbird →

Share this vulnerability

FAQ

Thunderbird is an open-source email client developed by Mozilla. It provides features for managing emails, contacts, and calendars.

The security issues in Thunderbird could result in denial of service or the execution of arbitrary code, potentially allowing attackers to disrupt the functionality of the software or compromise the user's system.

The security issues affect Thunderbird versions 102.x and earlier. Debian has ended support for the 102.x series and recommends upgrading to the 115.x series.

To fix the vulnerability, you should upgrade your Thunderbird packages to version 1:115.3.1-1~deb10u1. This update includes the necessary security patches.

You can find detailed information about Thunderbird security updates on the Debian security tracker page for Thunderbird.

Related vulnerabilities

Recent vulnerabilities recorded for thunderbird.

How To Fix

Minimum fixed version

1:115.3.1-1~deb10u1

This is the first release that contains the fix.

sudo apt-get install --only-upgrade thunderbird

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback