diff --git a/sources b/sources
index 85fdd454d8658ce190a976cfc2a395ef14c5c548..227d6b628eee4ae086febc3597ea6c14991323e6 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (cbindgen-vendor.tar.xz) = 2b8db32c0bca2fa27304ee4fd3a5cc38bc43a11500b23842747813d221e55719c51cf4c0e027e41857f58ce1e283ce97b69c2c7d1eae93ecbb08c2f729e2bf55
-SHA512 (thunderbird-140.15.0esr.source.tar.xz) = 52f014fb75ac131780aba924dd973a1fb5d6a60be4f800c258dca931e2c6ad75baaad37a5ad52228e91d3d174823b6b4d38ddc2dbbf9c04b8700cc33079448bb
-SHA512 (thunderbird-langpacks-140.15.0.tar.xz) = 1d4773e2677455479acbba2359cd66f47cd7011671707374daed425e90e9a826979a50c803c17346c789baec1897659a1eb5d7272cf74339197aedaf69b7d744
+SHA512 (thunderbird-140.16.0esr.source.tar.xz) = 9844641f9c8b4e7c96445d6d6fc554fc80afd8652899de3458d183f9381a18f08233e5d2e2beedd6adf2a0a6e1331e7abb55e698765b27110ca2dafdf12ecbb7
+SHA512 (thunderbird-langpacks-140.16.0.tar.xz) = 6b0ee3b52216ed61824fd32c3e60082963ad39db6f750371eed6abc024ec5a2dc318b791ddfd53c8c93d35ffa8ba4bc18fc624e2185df9d17d3d74873b8f83dd
diff --git a/thunderbird.spec b/thunderbird.spec
index f9d18046a81cab655b3b5205d4899af2cff0e993..890e6f299973a9adff1daae43afd89376ef32aae 100644
--- a/thunderbird.spec
+++ b/thunderbird.spec
@@ -43,7 +43,7 @@
 
 Summary:        Mozilla Thunderbird mail/newsgroup client
 Name:           thunderbird
-Version:        140.15.0
+Version:        140.16.0
 Release:        1%{?dist}
 URL:            http://www.mozilla.org/projects/thunderbird/
 License:        MPL-2.0 OR GPL-2.0-or-later OR LGPL-2.0-or-later
@@ -539,6 +539,10 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 
 
 %changelog
+* Tue Sep 22 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 140.16.0-1
+- [Type] security
+- [DESC] Update to 140.16.0 (fixes CVE-2026-92238, CVE-2026-92239, CVE-2026-92240, CVE-2026-92005, CVE-2026-92006, CVE-2026-92007, CVE-2026-92008, CVE-2026-92009, CVE-2026-92010, CVE-2026-92011, CVE-2026-92012, CVE-2026-92013, CVE-2026-92014, CVE-2026-92015, CVE-2026-92016, CVE-2026-92017, CVE-2026-92018, CVE-2026-92019, CVE-2026-92020, CVE-2026-92021, CVE-2026-92022, CVE-2026-92023, CVE-2026-92024, CVE-2026-92025, CVE-2026-92026, CVE-2026-92027, CVE-2026-92028, CVE-2026-92029, CVE-2026-92030, CVE-2026-92031, CVE-2026-92032)
+
 * Wed Sep 02 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 140.15.0-1
 - [Type] security
 - [DESC] Update to 140.15.0 (fixes CVE-2026-84119)