Every CVE Search/ Get API key

CVE-2019-7317

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...

5.3 MediumFix available

CVE-2019-7317 is a medium vulnerability (CVSS 5.3) in Libpng, published February 4, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.39%, the 95th percentile. Fixed in firefox-esr 60.7.0-r0.

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

9.39%Up 1.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
CVE-2019-7317
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-416
Updated
2026-11-02
CVE List 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
CVE-2019-7317
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2019-16860 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
EUVD-2019-16860
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-m96g-x499-p5f9 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
GHSA-m96g-x499-p5f9
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2019-7317 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
ALPINE-CVE-2019-7317
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-45210 5.3

CVE-2019-7317 affecting package fltk for versions less than 1.3.8-1

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
AZL-45210
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 43 moreShow less
OSVAZL-45288 5.3

CVE-2019-7317 affecting package openjpeg2 2.3.1-12

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
AZL-45288
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2019-7317 5.3

CVE-2019-7317 does not affect BellSoft software

Record
BELL-CVE-2019-7317
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
CVE-2019-7317
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-7317 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
DEBIAN-CVE-2019-7317
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:1265 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2019:1265
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:1267 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2019:1267
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:1269 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2019:1269
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:1308 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2019:1308
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:1309 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2019:1309
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:1310 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2019:1310
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2494 7.4

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2019:2494
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:2495 7.4

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2019:2495
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:2585 9.8

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:2585
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2590 9.8

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:2590
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2592 9.8

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:2592
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2737 9.8

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:2737
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-7317 5.3

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Record
UBUNTU-CVE-2019-7317
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2019-0126 No score

Updated libpng packages fix security vulnerability

png_image_free in png.c in libpng 1.6.0 up to 1.6.36 had a use-after-free because png_image_free_function is called under png_safe_execute (CVE-2019-7317).

Record
MGASA-2019-0126
Updated
2026-11-02
OSVMGASA-2019-0190 No score

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fixes bugs and security vulnerabilities:

Cross-origin theft of images with ImageBitmapRenderingContext. (CVE-2018-18511)

Out-of-bounds read in Skia. (CVE-2019-5798)

Use-after-free in png_image_free of libpng library. (CVE-2019-7317)

Cross-origin theft of images with createImageBitmap. (CVE-2019-9797)

Memory safety bugs fixed in Thunderbird 60.7. (CVE-2019-9800)

Type confusion with object groups and UnboxedObjects. (CVE-2019-9816)

Stealing of cross-domain images using canvas. (CVE-2019-9817)

Use-after-free in crash generation server. (CVE-2019-9818)

Compartment mismatch with fetch API. (CVE-2019-9819)

Use-after-free of ChromeEventHandler by DocShell. (CVE-2019-9820)

Use-after-free in XMLHttpRequest. (CVE-2019-11691)

Use-after-free removing listeners in the event listener manager. (CVE-2019-11692)

Buffer overflow in WebGL bufferdata on Linux. (CVE-2019-11693)

Theft of user history data through drag and drop of hyperlinks to and from bookmarks. (CVE-2019-11698)

Inline-PGP messages that allows an attacker to have Enigmail display a correctly signed or encrypted message info, but display a different unauthenticated text.

Record
MGASA-2019-0190
Updated
2026-11-02
OSVMGASA-2019-0191 No score

Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities.

Cross-origin theft of images with ImageBitmapRenderingContext. (CVE-2018-18511)

Out-of-bounds read in Skia. (CVE-2019-5798)

Use-after-free in png_image_free of libpng library. (CVE-2019-7317)

Cross-origin theft of images with createImageBitmap. (CVE-2019-9797)

Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and firefox 60.7. (CVE-2019-9800)

Type confusion with object groups and UnboxedObjects. (CVE-2019-9816)

Stealing of cross-domain images using canvas. (CVE-2019-9817)

Use-after-free in crash generation server. (CVE-2019-9818)

Compartment mismatch with fetch API. (CVE-2019-9819)

Use-after-free of ChromeEventHandler by DocShell. (CVE-2019-9820)

Use-after-free in XMLHttpRequest. (CVE-2019-11691)

Use-after-free removing listeners in the event listener manager. (CVE-2019-11692)

Buffer overflow in WebGL bufferdata on Linux. (CVE-2019-11693)

Theft of user history data through drag and drop of hyperlinks to and from bookmarks. (CVE-2019-11698)

Record
MGASA-2019-0191
Updated
2026-11-02
OSVopenSUSE-SU-2019:1530-1 No score

Security update for libpng16

This update for libpng16 fixes the following issues:

Security issues fixed:

  • CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211).
  • CVE-2018-13785: Fixed a wrong calculation of row_factor in the png_check_chunk_length function in pngrutil.c, which could haved triggered and integer overflow and result in an divide-by-zero while processing a crafted PNG file, leading to a denial of service (bsc#1100687)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1530-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1534-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to 60.7.0esr (boo#1135824 MFSA 2019-14):

  • CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-5798: Out-of-bounds read in Skia
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9797: Cross-origin theft of images with createImageBitmap
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: (Windows only) Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
  • CVE-2019-9821: Use-after-free in AssertWorkerThread
Record
openSUSE-SU-2019:1534-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1664-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Mozilla Thunderbird was updated to 60.7.2 / MFSA 2019-20 (boo#1138872):

  • CVE-2019-11707: Type confusion in Array.pop
  • CVE-2019-11708: sandbox escape using Prompt:Open

Mozilla Thunderbird was updated to 60.7.1 / MFSA 2019-17 (boo#1137595):

  • CVE-2019-11703: Heap buffer overflow in icalparser.c
  • CVE-2019-11704: Heap buffer overflow in icalvalue.c
  • CVE-2019-11705: Stack buffer overflow in icalrecur.c
  • CVE-2019-11706: Type confusion in icalproperty.c

Also fixed: No prompt for smartcard PIN when S/MIME signing is used

Mozilla Thunderbird was updated to 60.7.0 / MFSA 2019-15 (boo#1135824):

  • Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut

  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS

  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects

  • CVE-2019-9817: Stealing of cross-domain images using canvas

  • CVE-2019-9818 (Windows only): Use-after-free in crash generation server

  • CVE-2019-9819: Compartment mismatch with fetch API

  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell

  • CVE-2019-11691: Use-after-free in XMLHttpRequest

  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager

  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux

  • CVE-2019-7317: Use-after-free in png_image_free of libpng library

  • CVE-2019-9797: Cross-origin theft of images with createImageBitmap

  • CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext

  • CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox

  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks

  • CVE-2019-5798: Out-of-bounds read in Skia

  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7

  • Disable building with LTO (boo#1133267).
Record
openSUSE-SU-2019:1664-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1912-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • Certificate validation improvements

Non-security issue fixed:

  • Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1912-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1916-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-7317: Improve PNG support options (bsc#1141780).
  • CVE-2019-2818: Better Poly1305 support (bsc#1141788).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
  • Certificate validation improvements

Non-security issues fixed:

  • Do not fail installation when the manpages are not present (bsc#1115375)
  • Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer (bsc#1140461)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1916-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10600-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score

MozillaThunderbird-91.1.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10601-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10871-1 No score

java-11-openjdk-11.0.12.0-3.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10871-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10872-1 No score

java-13-openjdk-13.0.8.0-3.1 on GA media

These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10872-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10876-1 No score

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10876-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10972-1 No score

libpng16-16-1.6.37-3.3 on GA media

These are all security issues fixed in the libpng16-16-1.6.37-3.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10972-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2019:1388-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed:

  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell

Non-security issues fixed:

  • Font and date adjustments to accommodate the new Reiwa era in Japan
  • Update to Firefox ESR 60.7 (bsc#1135824)
Record
SUSE-SU-2019:1388-1
Updated
2026-11-02
OSVSUSE-SU-2019:1398-1 No score

Security update for libpng16

This update for libpng16 fixes the following issues:

Security issues fixed:

  • CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211).
  • CVE-2018-13785: Fixed a wrong calculation of row_factor in the png_check_chunk_length function in pngrutil.c, which could haved triggered and integer overflow and result in an divide-by-zero while processing a crafted PNG file, leading to a denial of service (bsc#1100687)
Record
SUSE-SU-2019:1398-1
Updated
2026-11-02
OSVSUSE-SU-2019:1398-2 No score

Security update for libpng16

This update for libpng16 fixes the following issues:

Security issues fixed:

  • CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211).
  • CVE-2018-13785: Fixed a wrong calculation of row_factor in the png_check_chunk_length function in pngrutil.c, which could haved triggered and integer overflow and result in an divide-by-zero while processing a crafted PNG file, leading to a denial of service (bsc#1100687)
Record
SUSE-SU-2019:1398-2
Updated
2026-11-02
OSVSUSE-SU-2019:1405-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed:

  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell

Non-security issues fixed:

  • Font and date adjustments to accommodate the new Reiwa era in Japan
  • Update to Firefox ESR 60.7 (bsc#1135824)
Record
SUSE-SU-2019:1405-1
Updated
2026-11-02
OSVSUSE-SU-2019:14160-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

Update to Java 7.1 Service Refresh 4 Fix Pack 50.

Security issues fixed:

  • CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
  • CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
  • CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
  • CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
  • CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
Record
SUSE-SU-2019:14160-1
Updated
2026-11-02
OSVSUSE-SU-2019:14188-1 No score

Security update for java-1_7_0-ibm

This update for java-1_7_0-ibm fixes the following issues:

Update to Java 7.0 Service Refresh 10 Fix Pack 50 (bsc#1147021).

Security issues fixed:

  • CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
  • CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
  • CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
  • CVE-2019-2816: Fixed issue inside Component Networking (bsc#1147021).
  • CVE-2019-4473: Fixed insecure RPATH in multiple binaries on AIX (bsc#1147021).
  • CVE-2019-7317: Fixed use-after-free in libpng, affecting client-libs/java.awt (bsc#1147021).
  • CVE-2019-11771: Fixed insecure RPATH in OpenJ9 on AIX (bsc#1147021).
  • CVE-2019-11775: Fixed failure to privatize a value pulled out of the loop by versioning (bsc#1147021).
Record
SUSE-SU-2019:14188-1
Updated
2026-11-02
OSVSUSE-SU-2019:1458-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Mozilla Thunderbird was updated to 60.7.0.

  • Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut

These security issues were fixed (MFSA 2019-15 bsc#1135824):

  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9797: Cross-origin theft of images with createImageBitmap
  • CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
  • CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-5798: Out-of-bounds read in Skia
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
Record
SUSE-SU-2019:1458-1
Updated
2026-11-02
OSVSUSE-SU-2019:2002-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-7317: Improve PNG support options (bsc#1141780).
  • CVE-2019-2818: Better Poly1305 support (bsc#1141788).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
  • Certificate validation improvements

Non-security issues fixed:

  • Do not fail installation when the manpages are not present (bsc#1115375)
  • Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer (bsc#1140461)
Record
SUSE-SU-2019:2002-1
Updated
2026-11-02
OSVSUSE-SU-2019:2021-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • Certificate validation improvements

Non-security issue fixed:

  • Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Record
SUSE-SU-2019:2021-1
Updated
2026-11-02
OSVSUSE-SU-2019:2028-1 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk to version 7u231 fixes the following issues:

Security issues fixed:

  • CVE_2019-2426: Improve web server connections (bsc#1134297).
  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE (bsc#1087082).
  • Certificate validation improvements
Record
SUSE-SU-2019:2028-1
Updated
2026-11-02
OSVSUSE-SU-2019:2036-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • Certificate validation improvements

Non-security issue fixed:

  • Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Record
SUSE-SU-2019:2036-1
Updated
2026-11-02

Affected products

Show 20 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.10
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.11
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.12
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.13
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.14
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.15
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.16
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.17
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.18
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.19
 before 60.7.0-r0
60.7.0-r0
Show 266 moreShow less
Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.20
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.21
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.22
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.23
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.9
 before 60.7.0-r0
60.7.0-r0
libpng
Alpine:v3.10
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.11
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.12
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.13
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.14
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.15
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.16
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.17
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.18
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.19
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.20
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.21
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.22
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.23
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.24
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.6
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.7
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.8
 1.6.0 up to 1.6.37-r0
1.6.37-r0
libpng
Alpine:v3.9
 1.6.0 up to 1.6.37-r0
1.6.37-r0
openjdk11
Alpine:v3.15
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.16
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.17
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.18
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.19
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.20
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.21
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.22
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.23
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.24
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk8
Alpine:v3.10
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.11
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.12
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.13
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.14
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.15
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.16
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.17
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.18
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.19
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.20
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.21
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.22
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.23
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.24
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.7
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.8
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.9
 before 8.222.10-r0
8.222.10-r0
fltk
Azure Linux:3
 before 1.3.8-1
1.3.8-1
openjpeg2
Azure Linux:3
 through 2.3.1-12 None known
firefox-esr
Debian:12
 before 60.7.0esr-1
60.7.0esr-1
firefox-esr
Debian:13
 before 60.7.0esr-1
60.7.0esr-1
firefox-esr
Debian:14
 before 60.7.0esr-1
60.7.0esr-1
libpng1.6
Debian:12
 before 1.6.36-4
1.6.36-4
libpng1.6
Debian:13
 before 1.6.36-4
1.6.36-4
libpng1.6
Debian:14
 before 1.6.36-4
1.6.36-4
thunderbird
Debian:12
 before 1:60.7.0-1
1:60.7.0-1
thunderbird
Debian:13
 before 1:60.7.0-1
1:60.7.0-1
thunderbird
Debian:14
 before 1:60.7.0-1
1:60.7.0-1
firefox-esr
Debian:8
 before 60.7.0esr-1~deb8u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1
60.7.0esr-1~deb8u1
thunderbird
Debian:8
 before 1:60.7.0-1~deb8u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:60.7.0-1~deb8u1
libpng1.6
Debian:9
 before 1.6.28-1+deb9u1, plus listed versions
1.6.28-11.6.28-1exp11.6.28-1exp21.6.28-1exp31.6.28-1exp4
1.6.28-1+deb9u1
firefox-esr
Debian:9
 before 60.7.0esr-1~deb9u1, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 45 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1
60.7.0esr-1~deb9u1
thunderbird
Debian:9
 before 1:60.7.0-1~deb9u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:60.7.0-1~deb9u1
libpng
Mageia:6
 before 1.6.35-1.1.mga6
1.6.35-1.1.mga6
thunderbird
Mageia:6
 before 60.7.0-1.mga6
60.7.0-1.mga6
thunderbird-l10n
Mageia:6
 before 60.7.0-1.mga6
60.7.0-1.mga6
firefox
Mageia:6
 before 60.7.0-1.mga6
60.7.0-1.mga6
firefox-l10n
Mageia:6
 before 60.7.0-1.mga6
60.7.0-1.mga6
firefox
Red Hat:enterprise_linux:7::client
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
firefox-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
firefox
Red Hat:enterprise_linux:7::server
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
firefox-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
firefox
Red Hat:enterprise_linux:7::workstation
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
firefox
Red Hat:enterprise_linux:6::client
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox
Red Hat:enterprise_linux:6::server
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
firefox
Red Hat:enterprise_linux:8::appstream
 before 0:60.7.0-1.el8_0
0:60.7.0-1.el8_0
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:60.7.0-1.el8_0
0:60.7.0-1.el8_0
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:60.7.0-1.el8_0
0:60.7.0-1.el8_0
thunderbird
Red Hat:enterprise_linux:8::appstream
 before 0:60.7.0-1.el8_0
0:60.7.0-1.el8_0
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:60.7.0-1.el8_0
0:60.7.0-1.el8_0
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:60.7.0-1.el8_0
0:60.7.0-1.el8_0
thunderbird
Red Hat:enterprise_linux:7::client
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
thunderbird
Red Hat:enterprise_linux:7::server
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
thunderbird
Red Hat:enterprise_linux:7::workstation
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:60.7.0-1.el7_6
0:60.7.0-1.el7_6
thunderbird
Red Hat:enterprise_linux:6::client
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
thunderbird
Red Hat:enterprise_linux:6::server
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
thunderbird
Red Hat:enterprise_linux:6::workstation
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:60.7.0-1.el6_10
0:60.7.0-1.el6_10
java-1.7.1-ibm
Red Hat:rhel_extras:6
 before 1:1.7.1.4.50-1jpp.1.el6_10
1:1.7.1.4.50-1jpp.1.el6_10
java-1.7.1-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.1.4.50-1jpp.1.el6_10
1:1.7.1.4.50-1jpp.1.el6_10
java-1.7.1-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.1.4.50-1jpp.1.el6_10
1:1.7.1.4.50-1jpp.1.el6_10
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.1.4.50-1jpp.1.el6_10
1:1.7.1.4.50-1jpp.1.el6_10
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.1.4.50-1jpp.1.el6_10
1:1.7.1.4.50-1jpp.1.el6_10
java-1.7.1-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.1.4.50-1jpp.1.el6_10
1:1.7.1.4.50-1jpp.1.el6_10
java-1.7.1-ibm
Red Hat:rhel_extras:7
 before 1:1.7.1.4.50-1jpp.1.el7
1:1.7.1.4.50-1jpp.1.el7
java-1.7.1-ibm-demo
Red Hat:rhel_extras:7
 before 1:1.7.1.4.50-1jpp.1.el7
1:1.7.1.4.50-1jpp.1.el7
java-1.7.1-ibm-devel
Red Hat:rhel_extras:7
 before 1:1.7.1.4.50-1jpp.1.el7
1:1.7.1.4.50-1jpp.1.el7
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:7
 before 1:1.7.1.4.50-1jpp.1.el7
1:1.7.1.4.50-1jpp.1.el7
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:7
 before 1:1.7.1.4.50-1jpp.1.el7
1:1.7.1.4.50-1jpp.1.el7
java-1.7.1-ibm-src
Red Hat:rhel_extras:7
 before 1:1.7.1.4.50-1jpp.1.el7
1:1.7.1.4.50-1jpp.1.el7
java-1.8.0-ibm
Red Hat:rhel_extras:7
 before 1:1.8.0.5.40-1jpp.1.el7
1:1.8.0.5.40-1jpp.1.el7
java-1.8.0-ibm-demo
Red Hat:rhel_extras:7
 before 1:1.8.0.5.40-1jpp.1.el7
1:1.8.0.5.40-1jpp.1.el7
java-1.8.0-ibm-devel
Red Hat:rhel_extras:7
 before 1:1.8.0.5.40-1jpp.1.el7
1:1.8.0.5.40-1jpp.1.el7
java-1.8.0-ibm-jdbc
Red Hat:rhel_extras:7
 before 1:1.8.0.5.40-1jpp.1.el7
1:1.8.0.5.40-1jpp.1.el7
java-1.8.0-ibm-plugin
Red Hat:rhel_extras:7
 before 1:1.8.0.5.40-1jpp.1.el7
1:1.8.0.5.40-1jpp.1.el7
java-1.8.0-ibm-src
Red Hat:rhel_extras:7
 before 1:1.8.0.5.40-1jpp.1.el7
1:1.8.0.5.40-1jpp.1.el7
java-1.8.0-ibm
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm-demo
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm-devel
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm-headless
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm-jdbc
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm-plugin
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm-src
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm-webstart
Red Hat:enterprise_linux:8::supplementary
 before 1:1.8.0.5.40-3.el8_0
1:1.8.0.5.40-3.el8_0
java-1.8.0-ibm
Red Hat:rhel_extras:6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
java-1.8.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
java-1.8.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
java-1.8.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
java-1.8.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
java-1.8.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
java-1.8.0-ibm
Red Hat:network_satellite:5.8::el6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
java-1.8.0-ibm-devel
Red Hat:network_satellite:5.8::el6
 before 1:1.8.0.5.40-1jpp.1.el6_10
1:1.8.0.5.40-1jpp.1.el6_10
MozillaFirefox
SUSE:OpenStack Cloud 7
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP3
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP4
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12-LTSS
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Enterprise Storage 4
 before 60.7.0-109.72.1
60.7.0-109.72.1
libpng16
SUSE:Linux Enterprise Module for Basesystem 15
 before 1.6.34-3.9.1
1.6.34-3.9.1
libpng16
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 1.6.34-3.9.1
1.6.34-3.9.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 60.7.0-3.40.6
60.7.0-3.40.6
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
 before 60.7.0-3.40.6
60.7.0-3.40.6
java-1_7_1-ibm
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 1.7.1_sr4.50-26.44.1
1.7.1_sr4.50-26.44.1
java-1_7_0-ibm
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 1.7.0_sr10.50-65.42.1
1.7.0_sr10.50-65.42.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15
 before 60.7.0-3.33.2
60.7.0-3.33.2
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP1
 before 60.7.0-3.33.2
60.7.0-3.33.2
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15
 before 11.0.4.0-3.33.1
11.0.4.0-3.33.1
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 11.0.4.0-3.33.1
11.0.4.0-3.33.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15
 before 1.8.0.222-3.24.2
1.8.0.222-3.24.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15 SP1
 before 1.8.0.222-3.24.2
1.8.0.222-3.24.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Package Hub 15
 before 1.8.0.222-3.24.2
1.8.0.222-3.24.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
 before 1.7.0.231-43.27.2
1.7.0.231-43.27.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
 before 1.7.0.231-43.27.2
1.7.0.231-43.27.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.7.0.231-43.27.2
1.7.0.231-43.27.2
java-1_8_0-openjdk
SUSE:HPE Helion OpenStack 8
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:OpenStack Cloud 7
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:OpenStack Cloud 8
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:OpenStack Cloud Crowbar 8
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Enterprise Storage 4
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Enterprise Storage 5
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15
 before 1.8.0_sr5.40-3.24.1
1.8.0_sr5.40-3.24.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP1
 before 1.8.0_sr5.40-3.24.1
1.8.0_sr5.40-3.24.1
java-1_7_1-ibm
SUSE:HPE Helion OpenStack 8
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 7
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 8
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:OpenStack Cloud Crowbar 8
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP4
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP5
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Enterprise Storage 4
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Enterprise Storage 5
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_8_0-ibm
SUSE:HPE Helion OpenStack 8
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 7
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 8
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:OpenStack Cloud Crowbar 8
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP4
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP5
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Enterprise Storage 4
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Enterprise Storage 5
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
libpng16
SUSE:OpenStack Cloud 7
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:OpenStack Cloud 8
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.6.8-15.5.2
1.6.8-15.5.2
libpng16
SUSE:Enterprise Storage 5
 before 1.6.8-15.5.2
1.6.8-15.5.2
firefox
Ubuntu:16.04:LTS
 before 67.0+build2-0ubuntu0.16.04.1, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 45 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.360.0+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.160.0.2+build1-0ubuntu0.16.04.161.0+build3-0ubuntu0.16.04.261.0.1+build1-0ubuntu0.16.04.162.0+build2-0ubuntu0.16.04.362.0+build2-0ubuntu0.16.04.462.0+build2-0ubuntu0.16.04.5
67.0+build2-0ubuntu0.16.04.1
openjdk-8
Ubuntu:16.04:LTS
 before 8u222-b10-1ubuntu1~16.04.1, plus listed versions
8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1
Show 22 moreShow less
8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.1
8u222-b10-1ubuntu1~16.04.1
thunderbird
Ubuntu:16.04:LTS
 before 1:60.7.0+build1-0ubuntu0.16.04.1, plus listed versions
1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.11:38.8.0+build1-0ubuntu0.16.04.1
Show 19 moreShow less
1:45.2.0+build1-0ubuntu0.16.04.11:45.3.0+build1-0ubuntu0.16.04.21:45.4.0+build1-0ubuntu0.16.04.11:45.5.1+build1-0ubuntu0.16.04.11:45.7.0+build1-0ubuntu0.16.04.11:45.8.0+build1-0ubuntu0.16.04.11:52.1.1+build1-0ubuntu0.16.04.11:52.2.1+build1-0ubuntu0.16.04.11:52.3.0+build1-0ubuntu0.16.04.11:52.4.0+build1-0ubuntu0.16.04.21:52.5.0+build1-0ubuntu0.16.04.11:52.6.0+build1-0ubuntu0.16.04.11:52.7.0+build1-0ubuntu0.16.04.11:52.8.0+build1-0ubuntu0.16.04.11:52.9.1+build3-0ubuntu0.16.04.11:60.2.1+build1-0ubuntu0.16.04.41:60.4.0+build2-0ubuntu0.16.04.11:60.5.1+build2-0ubuntu0.16.04.11:60.6.1+build2-0ubuntu0.16.04.1
1:60.7.0+build1-0ubuntu0.16.04.1
libpng1.6
Ubuntu:Pro:16.04:LTS
 before 1.6.20-2ubuntu0.1~esm4, plus listed versions
1.6.20-21.6.20-2ubuntu0.1~esm11.6.20-2ubuntu0.1~esm21.6.20-2ubuntu0.1~esm3
1.6.20-2ubuntu0.1~esm4
openjdk-9
Ubuntu:16.04:LTS
 All versions, plus listed versions
9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1
 None known
firefox
Ubuntu:18.04:LTS
 before 67.0+build2-0ubuntu0.18.04.1, plus listed versions
56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1
Show 19 moreShow less
60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.1
67.0+build2-0ubuntu0.18.04.1
libpng1.6
Ubuntu:18.04:LTS
 before 1.6.34-1ubuntu0.18.04.2, plus listed versions
1.6.34-11.6.34-1ubuntu0.18.04.1
1.6.34-1ubuntu0.18.04.2
openjdk-8
Ubuntu:18.04:LTS
 before 8u222-b10-1ubuntu1~18.04.1, plus listed versions
8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1
Show 4 moreShow less
8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.1
8u222-b10-1ubuntu1~18.04.1
openjdk-lts
Ubuntu:18.04:LTS
 before 11.0.4+11-1ubuntu2~18.04.3, plus listed versions
9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2
Show 7 moreShow less
10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.1
11.0.4+11-1ubuntu2~18.04.3
thunderbird
Ubuntu:18.04:LTS
 before 1:60.7.0+build1-0ubuntu0.18.04.1, plus listed versions
1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1
Show 4 moreShow less
1:60.2.1+build1-0ubuntu0.18.04.21:60.4.0+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.11:60.6.1+build2-0ubuntu0.18.04.1
1:60.7.0+build1-0ubuntu0.18.04.1
libpng16
openSUSE:Leap 15.0
 before 1.6.34-lp151.3.3.1
1.6.34-lp151.3.3.1
libpng16
openSUSE:Leap 15.1
 before 1.6.34-lp151.3.3.1
1.6.34-lp151.3.3.1
MozillaFirefox
openSUSE:Leap 15.0
 before 60.7.0-lp150.3.54.5
60.7.0-lp150.3.54.5
MozillaThunderbird
SUSE:Package Hub 12
 before 60.7.2-85.1
60.7.2-85.1
java-1_8_0-openjdk
openSUSE:Leap 15.0
 before 1.8.0.222-lp151.2.3.1
1.8.0.222-lp151.2.3.1
java-1_8_0-openjdk
openSUSE:Leap 15.1
 before 1.8.0.222-lp151.2.3.1
1.8.0.222-lp151.2.3.1
java-11-openjdk
openSUSE:Leap 15.0
 before 11.0.4.0-lp151.3.6.1
11.0.4.0-lp151.3.6.1
java-11-openjdk
openSUSE:Leap 15.1
 before 11.0.4.0-lp151.3.6.1
11.0.4.0-lp151.3.6.1
MozillaFirefox
openSUSE:Tumbleweed
 before 92.0-1.2
92.0-1.2
MozillaThunderbird
openSUSE:Tumbleweed
 before 91.1.1-1.1
91.1.1-1.1
java-11-openjdk
openSUSE:Tumbleweed
 before 11.0.12.0-3.1
11.0.12.0-3.1
java-13-openjdk
openSUSE:Tumbleweed
 before 13.0.8.0-3.1
13.0.8.0-3.1
java-1_8_0-openjdk
openSUSE:Tumbleweed
 before 1.8.0.302-2.2
1.8.0.302-2.2
libpng16
openSUSE:Tumbleweed
 before 1.6.37-3.3
1.6.37-3.3
firefox-esr
openSUSE:Tumbleweed
 before 128.5.1-1.1
128.5.1-1.1

History

History
WhenChangedSources
2026-11-03affectedOSV
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 202 versions and 2,178 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 10 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open