CVE catalog

CVE-2018-5089

firefox-esr affected and fixed versions

[CVE catalog]

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Severity
Critical · CVSS 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.33% · Oct 27, 2026

Projects and upstream resources

Related catalog projects (63)

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityfirefox-esr153.6.0esr-1~deb13u1Fixed[CVE-2018-5089]
Debiantrixie-securitythunderbird1:153.5.1esr-1~deb13u2Fixed[CVE-2018-5089]
Debiantrixiefirefox-esr140.15.0esr-1~deb13u1Fixed[CVE-2018-5089]
Debiantrixiefirefox-esr52.6.0esr-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiantrixiethunderbird1:140.12.0esr-1~deb13u1Fixed[CVE-2018-5089]
Debiantrixiethunderbird1:52.6.0-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiansidfirefox-esr153.6.0esr-1Fixed[CVE-2018-5089]
Debiansidfirefox-esr52.6.0esr-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiansidthunderbird1:153.6.0esr-1Fixed[CVE-2018-5089]
Debiansidthunderbird1:52.6.0-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debianforkyfirefox-esr153.5.1esr-1Fixed[CVE-2018-5089]
Debianforkyfirefox-esr52.6.0esr-1FixedDistribution-reported fixed boundary[CVE-2018-5089]

Showing 12 fix observations. All 212 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedfirefox-esr52.6.0esr-1UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedthunderbird1:52.6.0-1UnknownSource applicability is not establishedProvider not reported
Debianbookwormfirefox-esr140.12.0esr-1~deb12u1Fixed[CVE-2018-5089]
Debianbookwormfirefox-esr52.6.0esr-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debianbookwormthunderbird1:140.12.0esr-1~deb12u1Fixed[CVE-2018-5089]
Debianbookwormthunderbird1:52.6.0-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debianbookworm-securityfirefox-esr153.6.0esr-1~deb12u2Fixed[CVE-2018-5089]
Debianbookworm-securitythunderbird1:153.6.0esr-1~deb12u1Fixed[CVE-2018-5089]
Debianforkyfirefox-esr153.5.1esr-1Fixed[CVE-2018-5089]
Debianforkyfirefox-esr52.6.0esr-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debianforkythunderbird1:153.5.0esr-1Fixed[CVE-2018-5089]
Debianforkythunderbird1:52.6.0-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiansidfirefox-esr153.6.0esr-1Fixed[CVE-2018-5089]
Debiansidfirefox-esr52.6.0esr-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiansidthunderbird1:153.6.0esr-1Fixed[CVE-2018-5089]
Debiansidthunderbird1:52.6.0-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiantrixiefirefox-esr140.15.0esr-1~deb13u1Fixed[CVE-2018-5089]
Debiantrixiefirefox-esr52.6.0esr-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiantrixiethunderbird1:140.12.0esr-1~deb13u1Fixed[CVE-2018-5089]
Debiantrixiethunderbird1:52.6.0-1FixedDistribution-reported fixed boundary[CVE-2018-5089]
Debiantrixie-securityfirefox-esr153.6.0esr-1~deb13u1Fixed[CVE-2018-5089]
Debiantrixie-securitythunderbird1:153.5.1esr-1~deb13u2Fixed[CVE-2018-5089]
Suselinux enterprise desktop 12 sp2MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise desktop 12 sp3MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise point of sale 11 sp3MozillaFirefox52.6.0esr-72.20.2UnknownSource applicability is not established[SUSE-SU-2018:0361-1]
Suselinux enterprise server 11 sp3-ltssMozillaFirefox52.6.0esr-72.20.2UnknownSource applicability is not established[SUSE-SU-2018:0361-1]
Suselinux enterprise server 11 sp3-teradataMozillaFirefox52.6.0esr-72.20.2UnknownSource applicability is not established[SUSE-SU-2018:0361-1]
Suselinux enterprise server 11 sp4MozillaFirefox52.6.0esr-72.20.2UnknownSource applicability is not established[SUSE-SU-2018:0361-1]
Suselinux enterprise server 12 sp1-ltssMozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise server 12 sp2MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise server 12 sp3MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise server 12-ltssMozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise server for raspberry pi 12 sp2MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise server for sap applications 11 sp4MozillaFirefox52.6.0esr-72.20.2UnknownSource applicability is not established[SUSE-SU-2018:0361-1]
Suselinux enterprise server for sap applications 12 sp1MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise server for sap applications 12 sp2MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise server for sap applications 12 sp3MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise software development kit 11 sp4MozillaFirefox52.6.0esr-72.20.2UnknownSource applicability is not established[SUSE-SU-2018:0361-1]
Suselinux enterprise software development kit 12 sp2MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suselinux enterprise software development kit 12 sp3MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Suseopenstack cloud 6MozillaFirefox52.6.0esr-109.13.1UnknownSource applicability is not established[SUSE-SU-2018:0374-1]
Susepackage hub 12MozillaThunderbird52.6-54.1UnknownSource applicability is not established[OPENSUSE-SU-2018:0256-1][OPENSUSE-SU-2018:0257-1]
Ubuntu14.04firefox24.0+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox25.0+build3-0ubuntu0.13.10.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox28.0+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox28.0+build2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox28.0+build2-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox28.0~b2+build1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox29.0+build1-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox30.0+build1-0ubuntu0.14.04.3UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox31.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox32.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox32.0.3+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox33.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox34.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox35.0+build3-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox35.0.1+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox36.0+build2-0ubuntu0.14.04.4UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox36.0.1+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox36.0.4+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox37.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox37.0.1+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox37.0.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox38.0+build3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox39.0+build5-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox39.0.3+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox40.0+build4-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox40.0+build4-0ubuntu0.14.04.4UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox40.0.3+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox41.0+build3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox41.0.1+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox41.0.2+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox42.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox43.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox43.0.4+build3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox44.0+build3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox44.0.1+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox44.0.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox45.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox45.0.1+build1-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox45.0.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox46.0+build5-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox46.0.1+build1-0ubuntu0.14.04.3UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox47.0+build3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox48.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox49.0+build4-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox49.0.2+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox50.0+build2-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox50.0.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox50.1.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox51.0.1+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox51.0.1+build2-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox52.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox52.0.1+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox52.0.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox53.0+build6-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox53.0.2+build1-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox53.0.3+build1-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox54.0+build3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox55.0.1+build2-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox55.0.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox56.0+build6-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox56.0+build6-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox57.0+build4-0ubuntu0.14.04.4UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox57.0+build4-0ubuntu0.14.04.5UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox57.0.1+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox57.0.3+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox57.0.4+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04firefox58.0+build6-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu14.04thunderbird1:24.0+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:24.0+build1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:24.1.1+build1-0ubuntu0.13.10.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:24.1.1+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:24.2.0+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:24.4.0+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:24.5.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:24.6.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.1.1+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.1.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.2.0+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.3.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.4.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.5.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.6.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.7.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:31.8.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:38.2.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:38.3.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:38.4.0+build3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:38.5.1+build2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:38.6.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:38.7.2+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:38.8.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:45.2.0+build1-0ubuntu0.14.04.3UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:45.3.0+build1-0ubuntu0.14.04.4UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:45.4.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:45.5.1+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:45.7.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:45.8.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:52.1.1+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:52.2.1+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:52.3.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:52.4.0+build1-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:52.5.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu14.04thunderbird1:52.6.0+build1-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04firefox41.0.2+build2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox42.0+build2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox44.0+build3-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox44.0.1+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox44.0.2+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox45.0+build2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox45.0.1+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox45.0.2+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox46.0+build5-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox46.0.1+build1-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox47.0+build3-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox48.0+build2-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox49.0+build4-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox49.0.2+build2-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox50.0+build2-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox50.0.2+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox50.1.0+build2-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox51.0.1+build2-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox51.0.1+build2-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox52.0+build2-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox52.0.1+build2-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox52.0.2+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox53.0+build6-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox53.0.2+build1-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox53.0.3+build1-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox54.0+build3-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox55.0.1+build2-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox55.0.2+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox56.0+build6-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox56.0+build6-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox57.0+build4-0ubuntu0.16.04.5UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox57.0+build4-0ubuntu0.16.04.6UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox57.0.1+build2-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox57.0.3+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox57.0.4+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04firefox58.0+build6-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089][USN-3544-1]
Ubuntu16.04thunderbird1:38.3.0+build1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:38.5.1+build2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:38.6.0+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:38.7.2+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:38.8.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:45.2.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:45.3.0+build1-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:45.4.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:45.5.1+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:45.7.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:45.8.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:52.1.1+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:52.2.1+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:52.3.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:52.4.0+build1-0ubuntu0.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:52.5.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu16.04thunderbird1:52.6.0+build1-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04firefox56.0+build6-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04firefox57.0.1+build2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04firefox59.0.1+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04mozjs3838.8.0~repack1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04mozjs3838.8.0~repack1-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04mozjs3838.8.0~repack1-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04mozjs5252.3.1-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04mozjs5252.3.1-7fakesync1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04mozjs5252.8.1-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04thunderbird1:52.4.0+build1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu18.04thunderbird1:52.6.0+build1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu20.04mozjs5252.9.1-1build1UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Ubuntu20.04mozjs5252.9.1-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2018-5089]
Original provider fields
{
  "package_releases": [
    {
      "name": "firefox-esr",
      "status": "fixed",
      "release": "sid",
      "version": "153.6.0esr-1"
    },
    {
      "name": "firefox-esr",
      "status": "fixed",
      "release": "forky",
      "version": "153.5.1esr-1"
    },
    {
      "name": "firefox-esr",
      "status": "fixed",
      "release": "trixie",
      "version": "140.15.0esr-1~deb13u1"
    },
    {
      "name": "firefox-esr",
      "status": "fixed",
      "release": "trixie-security",
      "version": "153.6.0esr-1~deb13u1"
    },
    {
      "name": "firefox-esr",
      "status": "fixed",
      "release": "bookworm",
      "version": "140.12.0esr-1~deb12u1"
    },
    {
      "name": "firefox-esr",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "153.6.0esr-1~deb12u2"
    },
    {
      "name": "thunderbird",
      "status": "fixed",
      "release": "sid",
      "version": "1:153.6.0esr-1"
    },
    {
      "name": "thunderbird",
      "status": "fixed",
      "release": "forky",
      "version": "1:153.5.0esr-1"
    },
    {
      "name": "thunderbird",
      "status": "fixed",
      "release": "trixie",
      "version": "1:140.12.0esr-1~deb13u1"
    },
    {
      "name": "thunderbird",
      "status": "fixed",
      "release": "trixie-security",
      "version": "1:153.5.1esr-1~deb13u2"
    },
    {
      "name": "thunderbird",
      "status": "fixed",
      "release": "bookworm",
      "version": "1:140.12.0esr-1~deb12u1"
    },
    {
      "name": "thunderbird",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "1:153.6.0esr-1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "52.6.0esr-1"
    },
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "52.6.0esr-1"
    },
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "52.6.0esr-1"
    },
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "52.6.0esr-1"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1:52.6.0-1"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1:52.6.0-1"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1:52.6.0-1"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "1:52.6.0-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "firefox-esr",
      "fixed_version": "52.6.0esr-1",
      "applicability_unknown": true
    },
    {
      "name": "thunderbird",
      "fixed_version": "1:52.6.0-1",
      "applicability_unknown": true
    },
    {
      "name": "firefox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.14.04.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "24.0+build1-0ubuntu1",
        "25.0+build3-0ubuntu0.13.10.1",
        "28.0~b2+build1-0ubuntu2",
        "28.0+build1-0ubuntu1",
        "28.0+build2-0ubuntu1",
        "28.0+build2-0ubuntu2",
        "29.0+build1-0ubuntu0.14.04.2",
        "30.0+build1-0ubuntu0.14.04.3",
        "31.0+build1-0ubuntu0.14.04.1",
        "32.0+build1-0ubuntu0.14.04.1",
        "32.0.3+build1-0ubuntu0.14.04.1",
        "33.0+build2-0ubuntu0.14.04.1",
        "34.0+build2-0ubuntu0.14.04.1",
        "35.0+build3-0ubuntu0.14.04.2",
        "35.0.1+build1-0ubuntu0.14.04.1",
        "36.0+build2-0ubuntu0.14.04.4",
        "36.0.1+build2-0ubuntu0.14.04.1",
        "36.0.4+build1-0ubuntu0.14.04.1",
        "37.0+build2-0ubuntu0.14.04.1",
        "37.0.1+build1-0ubuntu0.14.04.1",
        "37.0.2+build1-0ubuntu0.14.04.1",
        "38.0+build3-0ubuntu0.14.04.1",
        "39.0+build5-0ubuntu0.14.04.1",
        "39.0.3+build2-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.4",
        "40.0.3+build1-0ubuntu0.14.04.1",
        "41.0+build3-0ubuntu0.14.04.1",
        "41.0.1+build2-0ubuntu0.14.04.1",
        "41.0.2+build2-0ubuntu0.14.04.1",
        "42.0+build2-0ubuntu0.14.04.1",
        "43.0+build1-0ubuntu0.14.04.1",
        "43.0.4+build3-0ubuntu0.14.04.1",
        "44.0+build3-0ubuntu0.14.04.1",
        "44.0.1+build2-0ubuntu0.14.04.1",
        "44.0.2+build1-0ubuntu0.14.04.1",
        "45.0+build2-0ubuntu0.14.04.1",
        "45.0.1+build1-0ubuntu0.14.04.2",
        "45.0.2+build1-0ubuntu0.14.04.1",
        "46.0+build5-0ubuntu0.14.04.2",
        "46.0.1+build1-0ubuntu0.14.04.3",
        "47.0+build3-0ubuntu0.14.04.1",
        "48.0+build2-0ubuntu0.14.04.1",
        "49.0+build4-0ubuntu0.14.04.1",
        "49.0.2+build2-0ubuntu0.14.04.1",
        "50.0+build2-0ubuntu0.14.04.2",
        "50.0.2+build1-0ubuntu0.14.04.1",
        "50.1.0+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.2",
        "52.0+build2-0ubuntu0.14.04.1",
        "52.0.1+build2-0ubuntu0.14.04.1",
        "52.0.2+build1-0ubuntu0.14.04.1",
        "53.0+build6-0ubuntu0.14.04.1",
        "53.0.2+build1-0ubuntu0.14.04.2",
        "53.0.3+build1-0ubuntu0.14.04.2",
        "54.0+build3-0ubuntu0.14.04.1",
        "55.0.1+build2-0ubuntu0.14.04.2",
        "55.0.2+build1-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.2",
        "57.0+build4-0ubuntu0.14.04.4",
        "57.0+build4-0ubuntu0.14.04.5",
        "57.0.1+build2-0ubuntu0.14.04.1",
        "57.0.3+build1-0ubuntu0.14.04.1",
        "57.0.4+build1-0ubuntu0.14.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "58.0+build6-0ubuntu0.14.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "thunderbird",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:52.6.0+build1-0ubuntu0.14.04.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "1:24.0+build1-0ubuntu1",
        "1:24.0+build1-0ubuntu2",
        "1:24.1.1+build1-0ubuntu0.13.10.1",
        "1:24.1.1+build1-0ubuntu1",
        "1:24.2.0+build1-0ubuntu1",
        "1:24.4.0+build1-0ubuntu1",
        "1:24.5.0+build1-0ubuntu0.14.04.1",
        "1:24.6.0+build1-0ubuntu0.14.04.1",
        "1:31.0+build1-0ubuntu0.14.04.1",
        "1:31.1.1+build1-0ubuntu0.14.04.1",
        "1:31.1.2+build1-0ubuntu0.14.04.1",
        "1:31.2.0+build2-0ubuntu0.14.04.1",
        "1:31.3.0+build1-0ubuntu0.14.04.1",
        "1:31.4.0+build1-0ubuntu0.14.04.1",
        "1:31.5.0+build1-0ubuntu0.14.04.1",
        "1:31.6.0+build1-0ubuntu0.14.04.1",
        "1:31.7.0+build1-0ubuntu0.14.04.1",
        "1:31.8.0+build1-0ubuntu0.14.04.1",
        "1:38.2.0+build1-0ubuntu0.14.04.1",
        "1:38.3.0+build1-0ubuntu0.14.04.1",
        "1:38.4.0+build3-0ubuntu0.14.04.1",
        "1:38.5.1+build2-0ubuntu0.14.04.1",
        "1:38.6.0+build1-0ubuntu0.14.04.1",
        "1:38.7.2+build1-0ubuntu0.14.04.1",
        "1:38.8.0+build1-0ubuntu0.14.04.1",
        "1:45.2.0+build1-0ubuntu0.14.04.3",
        "1:45.3.0+build1-0ubuntu0.14.04.4",
        "1:45.4.0+build1-0ubuntu0.14.04.1",
        "1:45.5.1+build1-0ubuntu0.14.04.1",
        "1:45.7.0+build1-0ubuntu0.14.04.1",
        "1:45.8.0+build1-0ubuntu0.14.04.1",
        "1:52.1.1+build1-0ubuntu0.14.04.1",
        "1:52.2.1+build1-0ubuntu0.14.04.1",
        "1:52.3.0+build1-0ubuntu0.14.04.1",
        "1:52.4.0+build1-0ubuntu0.14.04.2",
        "1:52.5.0+build1-0ubuntu0.14.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "1:52.6.0+build1-0ubuntu0.14.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "firefox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.16.04.1"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "41.0.2+build2-0ubuntu1",
        "42.0+build2-0ubuntu1",
        "44.0+build3-0ubuntu2",
        "44.0.1+build1-0ubuntu1",
        "44.0.2+build1-0ubuntu1",
        "45.0+build2-0ubuntu1",
        "45.0.1+build1-0ubuntu1",
        "45.0.2+build1-0ubuntu1",
        "46.0+build5-0ubuntu0.16.04.2",
        "46.0.1+build1-0ubuntu0.16.04.2",
        "47.0+build3-0ubuntu0.16.04.1",
        "48.0+build2-0ubuntu0.16.04.1",
        "49.0+build4-0ubuntu0.16.04.1",
        "49.0.2+build2-0ubuntu0.16.04.2",
        "50.0+build2-0ubuntu0.16.04.2",
        "50.0.2+build1-0ubuntu0.16.04.1",
        "50.1.0+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.2",
        "52.0+build2-0ubuntu0.16.04.1",
        "52.0.1+build2-0ubuntu0.16.04.1",
        "52.0.2+build1-0ubuntu0.16.04.1",
        "53.0+build6-0ubuntu0.16.04.1",
        "53.0.2+build1-0ubuntu0.16.04.2",
        "53.0.3+build1-0ubuntu0.16.04.2",
        "54.0+build3-0ubuntu0.16.04.1",
        "55.0.1+build2-0ubuntu0.16.04.2",
        "55.0.2+build1-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.2",
        "57.0+build4-0ubuntu0.16.04.5",
        "57.0+build4-0ubuntu0.16.04.6",
        "57.0.1+build2-0ubuntu0.16.04.1",
        "57.0.3+build1-0ubuntu0.16.04.1",
        "57.0.4+build1-0ubuntu0.16.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "58.0+build6-0ubuntu0.16.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "thunderbird",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:52.6.0+build1-0ubuntu0.16.04.1"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1:38.3.0+build1-0ubuntu2",
        "1:38.5.1+build2-0ubuntu1",
        "1:38.6.0+build1-0ubuntu1",
        "1:38.7.2+build1-0ubuntu0.16.04.1",
        "1:38.8.0+build1-0ubuntu0.16.04.1",
        "1:45.2.0+build1-0ubuntu0.16.04.1",
        "1:45.3.0+build1-0ubuntu0.16.04.2",
        "1:45.4.0+build1-0ubuntu0.16.04.1",
        "1:45.5.1+build1-0ubuntu0.16.04.1",
        "1:45.7.0+build1-0ubuntu0.16.04.1",
        "1:45.8.0+build1-0ubuntu0.16.04.1",
        "1:52.1.1+build1-0ubuntu0.16.04.1",
        "1:52.2.1+build1-0ubuntu0.16.04.1",
        "1:52.3.0+build1-0ubuntu0.16.04.1",
        "1:52.4.0+build1-0ubuntu0.16.04.2",
        "1:52.5.0+build1-0ubuntu0.16.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "1:52.6.0+build1-0ubuntu0.16.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "firefox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "59.0.1+build1-0ubuntu1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "56.0+build6-0ubuntu1",
        "57.0.1+build2-0ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "59.0.1+build1-0ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs52",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.8.1-0ubuntu0.18.04.1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "52.3.1-0ubuntu3",
        "52.3.1-7fakesync1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "52.8.1-0ubuntu0.18.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "thunderbird",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:52.6.0+build1-0ubuntu1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1:52.4.0+build1-0ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "1:52.6.0+build1-0ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs38",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "38.8.0~repack1-0ubuntu1",
        "38.8.0~repack1-0ubuntu3",
        "38.8.0~repack1-0ubuntu4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs52",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "52.9.1-1build1",
        "52.9.1-1ubuntu3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-5089",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-5089",
      "provider_updated_at": "2026-04-22T11:56:41.972768Z",
      "applicability_unknown": true
    },
    {
      "name": "firefox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.14.04.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "24.0+build1-0ubuntu1",
        "25.0+build3-0ubuntu0.13.10.1",
        "28.0~b2+build1-0ubuntu2",
        "28.0+build1-0ubuntu1",
        "28.0+build2-0ubuntu1",
        "28.0+build2-0ubuntu2",
        "29.0+build1-0ubuntu0.14.04.2",
        "30.0+build1-0ubuntu0.14.04.3",
        "31.0+build1-0ubuntu0.14.04.1",
        "32.0+build1-0ubuntu0.14.04.1",
        "32.0.3+build1-0ubuntu0.14.04.1",
        "33.0+build2-0ubuntu0.14.04.1",
        "34.0+build2-0ubuntu0.14.04.1",
        "35.0+build3-0ubuntu0.14.04.2",
        "35.0.1+build1-0ubuntu0.14.04.1",
        "36.0+build2-0ubuntu0.14.04.4",
        "36.0.1+build2-0ubuntu0.14.04.1",
        "36.0.4+build1-0ubuntu0.14.04.1",
        "37.0+build2-0ubuntu0.14.04.1",
        "37.0.1+build1-0ubuntu0.14.04.1",
        "37.0.2+build1-0ubuntu0.14.04.1",
        "38.0+build3-0ubuntu0.14.04.1",
        "39.0+build5-0ubuntu0.14.04.1",
        "39.0.3+build2-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.4",
        "40.0.3+build1-0ubuntu0.14.04.1",
        "41.0+build3-0ubuntu0.14.04.1",
        "41.0.1+build2-0ubuntu0.14.04.1",
        "41.0.2+build2-0ubuntu0.14.04.1",
        "42.0+build2-0ubuntu0.14.04.1",
        "43.0+build1-0ubuntu0.14.04.1",
        "43.0.4+build3-0ubuntu0.14.04.1",
        "44.0+build3-0ubuntu0.14.04.1",
        "44.0.1+build2-0ubuntu0.14.04.1",
        "44.0.2+build1-0ubuntu0.14.04.1",
        "45.0+build2-0ubuntu0.14.04.1",
        "45.0.1+build1-0ubuntu0.14.04.2",
        "45.0.2+build1-0ubuntu0.14.04.1",
        "46.0+build5-0ubuntu0.14.04.2",
        "46.0.1+build1-0ubuntu0.14.04.3",
        "47.0+build3-0ubuntu0.14.04.1",
        "48.0+build2-0ubuntu0.14.04.1",
        "49.0+build4-0ubuntu0.14.04.1",
        "49.0.2+build2-0ubuntu0.14.04.1",
        "50.0+build2-0ubuntu0.14.04.2",
        "50.0.2+build1-0ubuntu0.14.04.1",
        "50.1.0+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.2",
        "52.0+build2-0ubuntu0.14.04.1",
        "52.0.1+build2-0ubuntu0.14.04.1",
        "52.0.2+build1-0ubuntu0.14.04.1",
        "53.0+build6-0ubuntu0.14.04.1",
        "53.0.2+build1-0ubuntu0.14.04.2",
        "53.0.3+build1-0ubuntu0.14.04.2",
        "54.0+build3-0ubuntu0.14.04.1",
        "55.0.1+build2-0ubuntu0.14.04.2",
        "55.0.2+build1-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.2",
        "57.0+build4-0ubuntu0.14.04.4",
        "57.0+build4-0ubuntu0.14.04.5",
        "57.0.1+build2-0ubuntu0.14.04.1",
        "57.0.3+build1-0ubuntu0.14.04.1",
        "57.0.4+build1-0ubuntu0.14.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-3544-1",
      "fixed_version": "58.0+build6-0ubuntu0.14.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-3544-1",
      "provider_updated_at": "2026-04-22T09:43:10.914674Z",
      "applicability_unknown": true
    },
    {
      "name": "firefox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.16.04.1"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "41.0.2+build2-0ubuntu1",
        "42.0+build2-0ubuntu1",
        "44.0+build3-0ubuntu2",
        "44.0.1+build1-0ubuntu1",
        "44.0.2+build1-0ubuntu1",
        "45.0+build2-0ubuntu1",
        "45.0.1+build1-0ubuntu1",
        "45.0.2+build1-0ubuntu1",
        "46.0+build5-0ubuntu0.16.04.2",
        "46.0.1+build1-0ubuntu0.16.04.2",
        "47.0+build3-0ubuntu0.16.04.1",
        "48.0+build2-0ubuntu0.16.04.1",
        "49.0+build4-0ubuntu0.16.04.1",
        "49.0.2+build2-0ubuntu0.16.04.2",
        "50.0+build2-0ubuntu0.16.04.2",
        "50.0.2+build1-0ubuntu0.16.04.1",
        "50.1.0+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.2",
        "52.0+build2-0ubuntu0.16.04.1",
        "52.0.1+build2-0ubuntu0.16.04.1",
        "52.0.2+build1-0ubuntu0.16.04.1",
        "53.0+build6-0ubuntu0.16.04.1",
        "53.0.2+build1-0ubuntu0.16.04.2",
        "53.0.3+build1-0ubuntu0.16.04.2",
        "54.0+build3-0ubuntu0.16.04.1",
        "55.0.1+build2-0ubuntu0.16.04.2",
        "55.0.2+build1-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.2",
        "57.0+build4-0ubuntu0.16.04.5",
        "57.0+build4-0ubuntu0.16.04.6",
        "57.0.1+build2-0ubuntu0.16.04.1",
        "57.0.3+build1-0ubuntu0.16.04.1",
        "57.0.4+build1-0ubuntu0.16.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-3544-1",
      "fixed_version": "58.0+build6-0ubuntu0.16.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-3544-1",
      "provider_updated_at": "2026-04-22T09:43:10.914674Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise desktop 12 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise desktop 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for raspberry pi 12 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-109.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0374-1",
      "fixed_version": "52.6.0esr-109.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0374-1",
      "provider_updated_at": "2026-02-04T04:39:06.410175Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaThunderbird",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6-54.1"
            }
          ]
        }
      ],
      "release": "package hub 12",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2018:0256-1",
      "fixed_version": "52.6-54.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2018:0256-1",
      "provider_updated_at": "2026-02-04T04:38:06.518965Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-72.20.2"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0361-1",
      "fixed_version": "52.6.0esr-72.20.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0361-1",
      "provider_updated_at": "2026-02-04T02:31:20.208207Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-72.20.2"
            }
          ]
        }
      ],
      "release": "linux enterprise point of sale 11 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0361-1",
      "fixed_version": "52.6.0esr-72.20.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0361-1",
      "provider_updated_at": "2026-02-04T02:31:20.208207Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-72.20.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0361-1",
      "fixed_version": "52.6.0esr-72.20.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0361-1",
      "provider_updated_at": "2026-02-04T02:31:20.208207Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-72.20.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp3-teradata",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0361-1",
      "fixed_version": "52.6.0esr-72.20.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0361-1",
      "provider_updated_at": "2026-02-04T02:31:20.208207Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-72.20.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0361-1",
      "fixed_version": "52.6.0esr-72.20.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0361-1",
      "provider_updated_at": "2026-02-04T02:31:20.208207Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6.0esr-72.20.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0361-1",
      "fixed_version": "52.6.0esr-72.20.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0361-1",
      "provider_updated_at": "2026-02-04T02:31:20.208207Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaThunderbird",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.6-54.1"
            }
          ]
        }
      ],
      "release": "package hub 12",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2018:0257-1",
      "fixed_version": "52.6-54.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2018:0257-1",
      "provider_updated_at": "2025-05-02T04:29:58.494551Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [firefox-esr]Unknown
    Details (4)

    • 140.12.0esr-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-ach]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-af]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-all]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-an]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-ar]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-ast]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-az]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-be]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-bg]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-bn]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-br]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-bs]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-ca]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-cak]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-ca-valencia]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-cs]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-cy]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-da]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • [firefox-esr-l10n-de]Unknown

    Source package: [firefox-esr]

    Details (4)

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 52.6.0esr-1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]