diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 7f42daa216..23a17c1639 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -41,6 +41,10 @@
    <listitem>
      <para>March 30th, 2023</para>
      <itemizedlist>
+       <listitem>
+         <para>[renodr] - Update to Thunderbird-102.9.1 (Security Update). Fixes
+         <ulink url="&blfs-ticket-root;17880">#17880</ulink>.</para>
+       </listitem>
        <listitem>
          <para>[renodr] - Update to xorg-server-21.1.8 (Security Update). Fixes
          <ulink url="&blfs-ticket-root;17882">#17882</ulink>.</para>
diff --git a/packages.ent b/packages.ent
index 5726ccbad0..25370dda44 100644
--- a/packages.ent
+++ b/packages.ent
@@ -986,7 +986,7 @@ to avoid building libxml2 twice, which is slow with all deps -->
 <!ENTITY pidgin-version               "2.14.12">
 <!ENTITY rox-filer-version            "2.11">
 <!ENTITY rxvt-unicode-version         "9.31">
-<!ENTITY thunderbird-version          "102.9.0">
+<!ENTITY thunderbird-version          "102.9.1">
 <!ENTITY tigervnc-version             "1.13.1">
 <!ENTITY transmission-version         "4.0.2">
 <!ENTITY xarchiver-version            "0.5.4.20">
diff --git a/xsoft/other/thunderbird.xml b/xsoft/other/thunderbird.xml
index 7aa3e87457..8d62ea0e46 100644
--- a/xsoft/other/thunderbird.xml
+++ b/xsoft/other/thunderbird.xml
@@ -6,10 +6,10 @@
 
   <!ENTITY thunderbird-download-http "&mozilla-http;/thunderbird/releases/&thunderbird-version;/source/thunderbird-&thunderbird-version;.source.tar.xz">
   <!ENTITY thunderbird-download-ftp  " ">
-  <!ENTITY thunderbird-md5sum        "6186b778e2a884a1d39add9596db4fe1">
+  <!ENTITY thunderbird-md5sum        "90bd924a40d66b4e708a47b8594ae41e">
   <!ENTITY thunderbird-size          "480 MB">
   <!ENTITY thunderbird-buildsize     "7.4 GB (205 MB installed)">
-  <!ENTITY thunderbird-time          "21 SBU (on a 4-core machine)">
+  <!ENTITY thunderbird-time          "20 SBU (on a 4-core machine)">
   <!-- Removed the -j1 time because python and rust do not obey it, although
        the C/C++ code appears to obey it.