CVE catalog

CVE-2019-7317

firefox-esr: CVE-2019-7317

Severity: Medium · CVSS 5.5CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published: Jan 25, 2019, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 9.39% · Oct 25, 2026

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libpng1.6	sid	`1.6.59-1`	fixed
Debian	libpng1.6	forky	`1.6.59-1`	fixed
Debian	libpng1.6	trixie	`1.6.48-1+deb13u5`	fixed
Debian	libpng1.6	trixie-security	`1.6.48-1+deb13u6`	fixed
Debian	libpng1.6	bookworm	`1.6.39-2+deb12u5`	fixed
Debian	libpng1.6	bookworm-security	`1.6.39-2+deb12u6`	fixed
Debian	firefox-esr	sid	`153.5.1esr-1`	fixed
Debian	firefox-esr	forky	`153.5.1esr-1`	fixed
Debian	firefox-esr	trixie	`140.15.0esr-1~deb13u1`	fixed
Debian	firefox-esr	trixie-security	`153.5.1esr-1~deb13u1`	fixed
Debian	firefox-esr	bookworm	`140.12.0esr-1~deb12u1`	fixed
Debian	firefox-esr	bookworm-security	`153.5.1esr-1~deb12u1`	fixed
Debian	thunderbird	sid	`1:153.5.1esr-1`	fixed
Debian	thunderbird	forky	`1:153.5.0esr-1`	fixed
Debian	thunderbird	trixie	`1:140.12.0esr-1~deb13u1`	fixed
Debian	thunderbird	trixie-security	`1:153.5.1esr-1~deb13u2`	fixed
Debian	thunderbird	bookworm	`1:140.12.0esr-1~deb12u1`	fixed
Debian	thunderbird	bookworm-security	`1:153.5.1esr-1~deb12u1`	fixed
Alpine	libpng	3.10	`1.6.37-r0`	fixed
Alpine	libpng	3.11	`1.6.37-r0`	fixed
Alpine	libpng	3.12	`1.6.37-r0`	fixed
Alpine	libpng	3.13	`1.6.37-r0`	fixed
Alpine	libpng	3.14	`1.6.37-r0`	fixed
Alpine	libpng	3.15	`1.6.37-r0`	fixed
Alpine	libpng	3.16	`1.6.37-r0`	fixed
Alpine	libpng	3.17	`1.6.37-r0`	fixed
Alpine	libpng	3.18	`1.6.37-r0`	fixed
Alpine	libpng	3.19	`1.6.37-r0`	fixed
Alpine	libpng	3.20	`1.6.37-r0`	fixed
Alpine	libpng	3.21	`1.6.37-r0`	fixed
Alpine	libpng	3.22	`1.6.37-r0`	fixed
Alpine	libpng	3.23	`1.6.37-r0`	fixed
Alpine	libpng	3.24	`1.6.37-r0`	fixed
Alpine	libpng	3.6	`1.6.37-r0`	fixed
Alpine	libpng	3.7	`1.6.37-r0`	fixed
Alpine	libpng	3.8	`1.6.37-r0`	fixed
Alpine	libpng	3.9	`1.6.37-r0`	fixed
Ubuntu	firefox	16.04	`41.0.2+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`42.0+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`44.0+build3-0ubuntu2`	vulnerable
Ubuntu	firefox	16.04	`44.0.1+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`44.0.2+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`45.0+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`45.0.1+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`45.0.2+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`46.0+build5-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`46.0.1+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`47.0+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`48.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`49.0+build4-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`49.0.2+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`50.0+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`50.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`50.1.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`51.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`51.0.1+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`52.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`52.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`52.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`53.0+build6-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`53.0.2+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`53.0.3+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`54.0+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`55.0.1+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`55.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`56.0+build6-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`56.0+build6-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`57.0+build4-0ubuntu0.16.04.5`	vulnerable
Ubuntu	firefox	16.04	`57.0+build4-0ubuntu0.16.04.6`	vulnerable
Ubuntu	firefox	16.04	`57.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`57.0.3+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`57.0.4+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`58.0+build6-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`58.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`58.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0+build5-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0.2+build1-0ubuntu0.16.04.3`	vulnerable
Ubuntu	firefox	16.04	`60.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`60.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`60.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`61.0+build3-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`61.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`62.0+build2-0ubuntu0.16.04.3`	vulnerable
Ubuntu	firefox	16.04	`62.0+build2-0ubuntu0.16.04.4`	vulnerable
Ubuntu	firefox	16.04	`62.0+build2-0ubuntu0.16.04.5`	vulnerable
Ubuntu	firefox	16.04	`62.0.3+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`63.0+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`63.0.3+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`64.0+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`65.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`65.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0+build3-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`66.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.3+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.4+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.5+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`67.0+build2-0ubuntu0.16.04.1`	fixed
Ubuntu	openjdk-8	16.04	`8u66-b01-5`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b05-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b05-5`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b05-6`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-2ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-2ubuntu3`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-1ubuntu2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-3ubuntu2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-3ubuntu3`	vulnerable
Ubuntu	openjdk-8	16.04	`8u91-b14-0ubuntu4~16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u91-b14-3ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u111-b14-2ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u121-b13-0ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u131-b11-0ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u131-b11-2ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u131-b11-2ubuntu1.16.04.3`	vulnerable
Ubuntu	openjdk-8	16.04	`8u151-b12-0ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u162-b12-0ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u171-b11-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u181-b13-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u181-b13-1ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u191-b12-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u191-b12-2ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u212-b03-0ubuntu1.16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u222-b10-1ubuntu1~16.04.1`	fixed
Ubuntu	thunderbird	16.04	`1:38.3.0+build1-0ubuntu2`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.5.1+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.6.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.7.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.8.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.2.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.3.0+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.4.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.5.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.7.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.8.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.1.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.2.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.3.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.4.0+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.5.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.6.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.7.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.8.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.9.1+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.2.1+build1-0ubuntu0.16.04.4`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.4.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.5.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.6.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.7.0+build1-0ubuntu0.16.04.1`	fixed
Ubuntu	libpng1.6	pro	`1.6.20-2`	vulnerable
Ubuntu	libpng1.6	pro	`1.6.20-2ubuntu0.1~esm1`	vulnerable
Ubuntu	libpng1.6	pro	`1.6.20-2ubuntu0.1~esm2`	vulnerable
Ubuntu	libpng1.6	pro	`1.6.20-2ubuntu0.1~esm3`	vulnerable
Ubuntu	libpng1.6	pro	`1.6.20-2ubuntu0.1~esm4`	fixed
Ubuntu	openjdk-9	16.04	`9~b88-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b101-2ubuntu2`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b102-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b113-0ubuntu1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b114-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`56.0+build6-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`57.0.1+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`59.0.1+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`59.0.2+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`60.0+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`60.0.1+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`60.0.2+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`61.0+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`61.0.1+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`62.0+build2-0ubuntu0.18.04.3`	vulnerable
Ubuntu	firefox	18.04	`62.0+build2-0ubuntu0.18.04.4`	vulnerable
Ubuntu	firefox	18.04	`62.0+build2-0ubuntu0.18.04.5`	vulnerable
Ubuntu	firefox	18.04	`62.0.3+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`63.0+build2-0ubuntu0.18.04.2`	vulnerable
Ubuntu	firefox	18.04	`63.0.3+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`64.0+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`65.0+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`65.0.1+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.1+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.2+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.3+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.4+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.5+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`67.0+build2-0ubuntu0.18.04.1`	fixed
Ubuntu	libpng1.6	18.04	`1.6.34-1`	vulnerable
Ubuntu	libpng1.6	18.04	`1.6.34-1ubuntu0.18.04.1`	vulnerable
Ubuntu	libpng1.6	18.04	`1.6.34-1ubuntu0.18.04.2`	fixed
Ubuntu	openjdk-8	18.04	`8u144-b01-2`	vulnerable
Ubuntu	openjdk-8	18.04	`8u151-b12-1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u162-b12-1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u171-b11-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u181-b13-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u181-b13-1ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u191-b12-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u191-b12-2ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u212-b03-0ubuntu1.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u222-b10-1ubuntu1~18.04.1`	fixed
Ubuntu	openjdk-lts	18.04	`9.0.4+12-2ubuntu4`	vulnerable
Ubuntu	openjdk-lts	18.04	`9.0.4+12-4ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10~46-4ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10~46-5ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.1+10-1ubuntu2`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.1+10-3ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.2`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.4`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.2+9-3ubuntu1~18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.3+7-1ubuntu2~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.4+11-1ubuntu2~18.04.3`	fixed
Ubuntu	thunderbird	18.04	`1:52.4.0+build1-0ubuntu2`	vulnerable
Ubuntu	thunderbird	18.04	`1:52.6.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	18.04	`1:52.7.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	18.04	`1:52.8.0+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	thunderbird	18.04	`1:52.9.1+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	thunderbird	18.04	`1:60.2.1+build1-0ubuntu0.18.04.2`	vulnerable
Ubuntu	thunderbird	18.04	`1:60.4.0+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	thunderbird	18.04	`1:60.5.1+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	thunderbird	18.04	`1:60.6.1+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	thunderbird	18.04	`1:60.7.0+build1-0ubuntu0.18.04.1`	fixed
Ubuntu	libpng1.6	18.04	`1.6.34-1`	vulnerable
Ubuntu	libpng1.6	18.04	`1.6.34-1ubuntu0.18.04.1`	vulnerable
Ubuntu	libpng1.6	18.04	`1.6.34-1ubuntu0.18.04.2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libpng1.6	source	sid	`1.6.36-4`	not yet assigned	Not reported	[921355]
Debian	libpng1.6	source	forky	`1.6.36-4`	not yet assigned	Not reported	[921355]
Debian	libpng1.6	source	trixie	`1.6.36-4`	not yet assigned	Not reported	[921355]
Debian	libpng1.6	source	bookworm	`1.6.36-4`	not yet assigned	Not reported	[921355]
Debian	firefox-esr	source	sid	`60.7.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	forky	`60.7.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	trixie	`60.7.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	bookworm	`60.7.0esr-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	sid	`1:60.7.0-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	forky	`1:60.7.0-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	trixie	`1:60.7.0-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	bookworm	`1:60.7.0-1`	not yet assigned	Not reported	Not reported
Alpine	libpng	apk	3.10	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.11	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.12	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.13	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.14	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.15	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.16	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.17	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.18	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.19	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.20	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.21	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.22	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.23	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.24	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.6	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.7	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.8	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Alpine	libpng	apk	3.9	`1.6.37-r0`	Not reported	ALPINE-CVE-2019-7317	Not reported
Ubuntu	firefox	deb	16.04	`67.0+build2-0ubuntu0.16.04.1`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	openjdk-8	deb	16.04	`8u222-b10-1ubuntu1~16.04.1`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	thunderbird	deb	16.04	`1:60.7.0+build1-0ubuntu0.16.04.1`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	libpng1.6	deb	pro	`1.6.20-2ubuntu0.1~esm4`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	firefox	deb	18.04	`67.0+build2-0ubuntu0.18.04.1`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	libpng1.6	deb	18.04	`1.6.34-1ubuntu0.18.04.2`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	openjdk-8	deb	18.04	`8u222-b10-1ubuntu1~18.04.1`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	openjdk-lts	deb	18.04	`11.0.4+11-1ubuntu2~18.04.3`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	thunderbird	deb	18.04	`1:60.7.0+build1-0ubuntu0.18.04.1`	Not reported	UBUNTU-CVE-2019-7317	Not reported
Ubuntu	libpng1.6	deb	18.04	`1.6.34-1ubuntu0.18.04.2`	Not reported	USN-3962-1	Not reported

[Debian bug #921355]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[firefox-esr]Unknown
Details (4)
- 140.12.0esr-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-ach]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-af]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-all]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-an]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-ar]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-ast]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-az]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-be]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-bg]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-bn]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-br]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-bs]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-ca]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-cak]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-ca-valencia]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-cs]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-cy]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-da]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
[firefox-esr-l10n-de]Unknown
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 60.7.0esr-1
  dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

Next results

Observed: Oct 23, 2026, 5:44:58 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]