{"id":"CVE-2017-7775","aliases":["EUVD-2017-16750","MGASA-2017-0178","MGASA-2017-0217","RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793","UBUNTU-CVE-2017-7775","USN-3315-1","USN-3321-1","USN-3398-1","openSUSE-SU-2017:1579-1"],"status":"rejected","title":"Updated firefox packages fix security vulnerabilities","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-06-14T00:00:00Z","modified":"2026-06-26T10:34:32Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"firefox","fixed_in":["54.0+build3-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"graphite2","fixed_in":["1.3.10-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.2.1+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"firefox","fixed_in":["54.0+build3-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"graphite2","fixed_in":["1.3.10-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.2.1+build1-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0-1.mga5"}]}],"bundled":19},{"source":"osv","ecosystem":"Mageia:5","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0-1.mga5"}]}],"bundled":19},{"source":"osv","ecosystem":"Mageia:5","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15-1.mga5"}]}],"bundled":19},{"source":"osv","ecosystem":"Mageia:5","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1","53.0+build6-0ubuntu0.14.04.1","53.0.2+build1-0ubuntu0.14.04.2","53.0.3+build1-0ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.14.04.1"}]}],"versions":["1.2.3-1","1.2.4-1","1.2.4-1ubuntu1","1.2.4-1ubuntu1.1","1.3.6-1ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.16.04.1"}]}],"versions":["1.2.4-3ubuntu1","1.3.5-1ubuntu1","1.3.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1","53.0+build6-0ubuntu0.14.04.1","53.0.2+build1-0ubuntu0.14.04.2","53.0.3+build1-0ubuntu0.14.04.2"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1"],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1"],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.14.04.1"}]}],"versions":["1.2.3-1","1.2.4-1","1.2.4-1ubuntu1","1.2.4-1ubuntu1.1","1.3.6-1ubuntu0.14.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.16.04.1"}]}],"versions":["1.2.4-3ubuntu1","1.3.5-1ubuntu1","1.3.6-1ubuntu1"],"bundled":8},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2-36.1"}]}],"bundled":21}],"references":[{"url":"https://advisories.mageia.org/MGASA-2017-0178.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21088","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/","tags":["advisory","article"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2017-1440.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0217.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20778","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2017-05/msg00053.html","tags":["web"]},{"url":"https://www.debian.org/security/2017/dsa-3894","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1440","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461264","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1440.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5470","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-5470","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5472","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-5472","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7749","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7749","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7750","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7750","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7751","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7751","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7752","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7752","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7754","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7754","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7754","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7756","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7756","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7756","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7756","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7757","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7757","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7758","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7758","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7758","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7758","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7764","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7764","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7764","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7771","tags":["advisory"]},{"url":"https://sourceforge.net/p/silgraphite/mailman/message/35824024/","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7778","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472213","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7772","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472215","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7773","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7774","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7774","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7775","tags":["advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7776","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7777","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7778","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1561","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1561.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1793","tags":["advisory"]},{"url":"https://raw.githubusercontent.com/silnrsi/graphite/master/ChangeLog","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1793.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7775","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3315-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3321-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3398-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7778","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040105","tags":["report"]},{"url":"https://bugzilla.suse.com/1042090","tags":["report"]},{"url":"https://bugzilla.suse.com/1043960","tags":["report"]},{"url":"https://bugzilla.suse.com/1273265","tags":["report"]},{"url":"https://bugzilla.suse.com/1355039","tags":["report"]},{"url":"https://bugzilla.suse.com/1356558","tags":["report"]},{"url":"https://bugzilla.suse.com/1356824","tags":["report"]},{"url":"https://bugzilla.suse.com/1357090","tags":["report"]},{"url":"https://bugzilla.suse.com/1359547","tags":["report"]},{"url":"https://bugzilla.suse.com/1360309","tags":["report"]},{"url":"https://bugzilla.suse.com/1363396","tags":["report"]},{"url":"https://bugzilla.suse.com/1364283","tags":["report"]},{"url":"https://bugzilla.suse.com/1365602","tags":["report"]},{"url":"https://bugzilla.suse.com/1366595","tags":["report"]},{"url":"https://bugzilla.suse.com/1368490","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-7775","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2019-04-12T19:44:03Z","modified":"2019-04-12T19:44:03Z","updated_at":"2026-11-02T14:33:20.171335Z"}],"euvd":[{"id":"EUVD-2017-16750","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2019-04-12T19:44:03Z","modified":"2019-04-12T19:44:03Z","updated_at":"2026-11-03T03:51:30.035644Z"}],"nvd":[{"id":"CVE-2017-7775","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2019-04-15T12:16:31.573Z","modified":"2023-11-07T02:50:16.577Z","updated_at":"2026-11-02T14:04:19.545286Z"}],"osv":[{"id":"RHSA-2017:1440","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T00:24:51Z","modified":"2026-06-26T10:34:11Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1561","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T00:24:57Z","modified":"2026-06-26T10:34:19Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1793","title":"Red Hat Security Advisory: graphite2 security update","status":"published","published":"2024-09-16T00:25:04Z","modified":"2026-06-26T10:34:32Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"MGASA-2017-0178","title":"Updated firefox packages fix security vulnerabilities","description":"Multiple flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox (CVE-2017-5470, CVE-2017-5472, CVE-2017-7749,\nCVE-2017-7751, CVE-2017-7756, CVE-2017-7771, CVE-2017-7772,\nCVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\nCVE-2017-7777, CVE-2017-7778, CVE-2017-7750, CVE-2017-7752,\nCVE-2017-7754, CVE-2017-7757, CVE-2017-7758, CVE-2017-7764).\n","status":"published","published":"2017-06-19T07:44:03Z","modified":"2026-04-16T06:22:33.230020369Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0217","title":"Updated graphite2 packages fix security vulnerabilities","description":"An out-of-bounds write triggered with a maliciously crafted Graphite\nfont could lead to a crash or potentially code execution\n(CVE-2017-5436).\n\nMultiple vulnerabilities have been found in the Graphite font rendering\nengine which might result in denial of service or the execution of\narbitrary code if a malformed font file is processed (CVE-2017-7771,\nCVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775,\nCVE-2017-7776, CVE-2017-7777, CVE-2017-7778).\n","status":"published","published":"2017-07-25T22:07:12Z","modified":"2026-04-16T06:23:34.955800313Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2017:1579-1","title":"Security update for Mozilla Thunderbird","description":"This update to Thunderbird 52.2 fixes security issues and bugs.\n\nThe following vulnerabilities were fixed:\n    \n* CVE-2017-5472: Use-after-free using destroyed node when regenerating trees\n* CVE-2017-7749: Use-after-free during docshell reloading\n* CVE-2017-7750: Use-after-free with track elements\n* CVE-2017-7751: Use-after-free with content viewer listeners\n* CVE-2017-7752: Use-after-free with IME input\n* CVE-2017-7754: Out-of-bounds read in WebGL with ImageInfo object\n* CVE-2017-7756: Use-after-free and use-after-scope logging XHR header errors\n* CVE-2017-7757: Use-after-free in IndexedDB\n* CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,\n  CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\n  CVE-2017-7777: Vulnerabilities in the Graphite 2 library\n* CVE-2017-7758: Out-of-bounds read in Opus encoder\n* CVE-2017-7764: Domain spoofing with combination of Canadian Syllabics and other unicode blocks\n* CVE-2017-5470: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2\n\nMozilla Thunderbird now requires NSS 3.28.5.\n\nThe following bugs were fixed:\n\n* Embedded images not shown in email received from Hotmail/Outlook webmailer\n* Detection of non-ASCII font names in font selector\n* Attachment not forwarded correctly under certain circumstances\n* Multiple requests for master password when GMail OAuth2 is enabled\n* Large number of blank pages being printed under certain circumstances when invalid preferences were present\n* Messages sent via the Simple MAPI interface are forced to HTML\n* Calendar: Invitations can't be printed\n* Mailing list (group) not accessible from macOS or Outlook address book\n* Clicking on links with references/anchors where target doesn't exist in the message not opening in external browser\n  ","status":"published","published":"2017-06-16T09:03:31Z","modified":"2026-02-04T03:49:02.663791Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"UBUNTU-CVE-2017-7775","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2017-06-14T00:00:00Z","modified":"2026-04-22T11:32:11.735316Z","updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"USN-3315-1","title":"firefox vulnerabilities","description":"Multiple security issues were discovered in Firefox. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service, read uninitialized\nmemory, obtain sensitive information, spoof the addressbar contents, or\nexecute arbitrary code. (CVE-2017-5470, CVE-2017-5471, CVE-2017-5472,\nCVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,\nCVE-2017-7756, CVE-2017-7757, CVE-2017-7758, CVE-2017-7762, CVE-2017-7764)\n\nMultiple security issues were discovered in the Graphite 2 library used by\nFirefox. If a user were tricked in to opening a specially crafted website,\nan attacker could potentially exploit these to cause a denial of service,\nread uninitialized memory, or execute arbitrary code. (CVE-2017-7771,\nCVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\nCVE-2017-7777, CVE-2017-7778)\n","status":"published","published":"2017-06-15T11:46:10Z","modified":"2026-04-22T09:36:29.694721Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3321-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nread uninitialized memory, obtain sensitive information or execute\narbitrary code. (CVE-2017-5470, CVE-2017-5472,\nCVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,\nCVE-2017-7756, CVE-2017-7757, CVE-2017-7758, CVE-2017-7764)\n\nMultiple security issues were discovered in the Graphite 2 library used\nby Thunderbird. If a user were tricked in to opening a specially crafted\nmessage, an attacker could potentially exploit these to cause a denial of\nservice, read uninitialized memory, or execute arbitrary code.\n(CVE-2017-7771, CVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775,\nCVE-2017-7776, CVE-2017-7777, CVE-2017-7778)\n","status":"published","published":"2017-07-05T19:42:44Z","modified":"2026-04-22T09:35:41.242777Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3398-1","title":"graphite2 vulnerabilities","description":"Holger Fuhrmannek and Tyson Smith discovered that graphite2 incorrectly\nhandled certain malformed fonts. If a user or automated system were tricked\ninto opening a specially-crafted font file, a remote attacker could use\nthis issue to cause graphite2 to crash, resulting in a denial of service,\nor possibly execute arbitrary code.\n","status":"published","published":"2017-08-21T13:07:35Z","modified":"2026-04-22T09:37:57.938204Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}