CVE-2019-7317
Fixed in a distro release EPSS 9%CVSS 5.3
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
Products: libpng, debian_linux, canonical ubuntu_linux, oracle hyperion_infrastructure_technology, Oracle Java SE, oracle jdk, oracle mysql, hp xp7_command_view, hpe xp7_command_view_advanced_edition_suite, mozilla firefox, mozilla thunderbird, opensuse leap, opensuse package_hub, netapp active_iq_unified_manager, netapp cloud_backup, netapp e-series_santricity_management, netapp e-series_santricity_storage_manager, netapp e-series_santricity_unified_manager, netapp e-series_santricity_web_services, netapp oncommand_insight, netapp oncommand_workflow_automation, netapp plug-in_for_symantec_netbackup, netapp snapmanager, netapp steelstore, redhat satellite, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_power_big_endian, redhat enterprise_linux_for_power_little_endian, redhat enterprise_linux_for_scientific_computing, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libpng | 1.6.37-r0 |
| Alpine 3.11 | libpng | 1.6.37-r0 |
| Alpine 3.12 | libpng | 1.6.37-r0 |
| Alpine 3.13 | libpng | 1.6.37-r0 |
| Alpine 3.14 | libpng | 1.6.37-r0 |
| Alpine 3.15 | libpng | 1.6.37-r0 |
| Alpine 3.16 | libpng | 1.6.37-r0 |
| Alpine 3.17 | libpng | 1.6.37-r0 |
| Alpine 3.18 | libpng | 1.6.37-r0 |
| Alpine 3.19 | libpng | 1.6.37-r0 |
| Alpine 3.20 | libpng | 1.6.37-r0 |
| Alpine 3.21 | libpng | 1.6.37-r0 |
| Alpine 3.22 | libpng | 1.6.37-r0 |
| Alpine 3.23 | libpng | 1.6.37-r0 |
| Alpine 3.24 | libpng | 1.6.37-r0 |
| Alpine 3.6 | libpng | 1.6.37-r0 |
| Alpine 3.7 | libpng | 1.6.37-r0 |
| Alpine 3.8 | libpng | 1.6.37-r0 |
| Alpine 3.9 | libpng | 1.6.37-r0 |
| Amazon Linux 2 | java-11-amazon-corretto | 1:11.0.4+11-1.amzn2 |
| Amazon Linux 2 | java-11-amazon-corretto-headless | 1:11.0.4+11-1.amzn2 |
| Amazon Linux 2 | java-11-amazon-corretto-javadoc | 1:11.0.4+11-1.amzn2 |
| Amazon Linux 2 | thunderbird | 60.7.0-1.amzn2.0.1 |
| Arch Linux | firefox | 67.0-1 |
| Arch Linux | libpng | 1.6.37-1 |
| Arch Linux | thunderbird | 60.7.0-1 |
| Chainguard | firefox | 0 |
| Chainguard | firefox-esr | 0 |
| Chainguard | mysql-8.0 | 8.0.38-r0 |
| Chainguard | mysql-8.0-client | 8.0.38-r0 |
| Chainguard | mysql-8.0-dev | 8.0.38-r0 |
| Chainguard | mysql-8.0-iamguarded-compat | 8.0.38-r0 |
| Chainguard | mysql-8.0-oci-entrypoint | 8.0.38-r0 |
| Chainguard | mysql-8.0-oci-entrypoint-compat | 8.0.38-r0 |
| Chainguard | openjdk-10-jre | no fix |
| Chainguard | openjdk-17-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0.48.0-r2 |
| Chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0.53.0-r1 |
| Chainguard | openjdk-9 | 9.0.4-r5 |
| Debian 12 | firefox-esr | 60.7.0esr-1 |
| Debian 12 | libpng1.6 | 1.6.36-4 |
| Debian 12 | thunderbird | 1:60.7.0-1 |
| Debian 13 | firefox-esr | 60.7.0esr-1 |
| Debian 13 | libpng1.6 | 1.6.36-4 |
| Debian 13 | thunderbird | 1:60.7.0-1 |
| Debian 14 | firefox-esr | 60.7.0esr-1 |
| Debian 14 | libpng1.6 | 1.6.36-4 |
| Debian 14 | thunderbird | 1:60.7.0-1 |
| Debian 8 | firefox-esr | 60.7.0esr-1~deb8u1 |
| Debian 8 | thunderbird | 1:60.7.0-1~deb8u1 |
| Debian 9 | firefox-esr | 60.7.0esr-1~deb9u1 |
| Debian 9 | libpng1.6 | 1.6.28-1+deb9u1 |
| Debian 9 | thunderbird | 1:60.7.0-1~deb9u1 |
| Red Hat Enterprise Linux 6 | firefox | 0:60.7.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:60.7.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:60.7.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:60.7.0-1.el6_10 |
| Red Hat Enterprise Linux 7 | firefox | 0:60.7.0-1.el7_6 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:60.7.0-1.el7_6 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:60.7.0-1.el7_6 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:60.7.0-1.el7_6 |
| Red Hat Enterprise Linux 8 | firefox | 0:60.7.0-1.el8_0 |
| Red Hat Enterprise Linux 8 | firefox-debuginfo | 0:60.7.0-1.el8_0 |
| Red Hat Enterprise Linux 8 | firefox-debugsource | 0:60.7.0-1.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-demo | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-devel | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-headless | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-plugin | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-src | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-webstart | 1:1.8.0.5.40-3.el8_0 |
| Red Hat Enterprise Linux 8 | thunderbird | 0:60.7.0-1.el8_0 |
| Red Hat Enterprise Linux 8 | thunderbird-debuginfo | 0:60.7.0-1.el8_0 |
| Red Hat Enterprise Linux 8 | thunderbird-debugsource | 0:60.7.0-1.el8_0 |
| Red Hat network satellite 5.8 | java-1.8.0-ibm | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat network satellite 5.8 | java-1.8.0-ibm-devel | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm | 1:1.7.1.4.50-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-demo | 1:1.7.1.4.50-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-devel | 1:1.7.1.4.50-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-jdbc | 1:1.7.1.4.50-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-plugin | 1:1.7.1.4.50-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-src | 1:1.7.1.4.50-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-demo | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-devel | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-plugin | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-src | 1:1.8.0.5.40-1jpp.1.el6_10 |
| Red Hat rhel extras 7 | java-1.7.1-ibm | 1:1.7.1.4.50-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-demo | 1:1.7.1.4.50-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-devel | 1:1.7.1.4.50-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-jdbc | 1:1.7.1.4.50-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-plugin | 1:1.7.1.4.50-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-src | 1:1.7.1.4.50-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm | 1:1.8.0.5.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-demo | 1:1.8.0.5.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-devel | 1:1.8.0.5.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-plugin | 1:1.8.0.5.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-src | 1:1.8.0.5.40-1jpp.1.el7 |
| SUSE Enterprise Storage 4 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Enterprise Storage 4 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Enterprise Storage 4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Enterprise Storage 4 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Enterprise Storage 5 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Enterprise Storage 5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Enterprise Storage 5 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Enterprise Storage 5 | libpng16 | 1.6.8-15.5.2 |
| SUSE HPE Helion OpenStack 8 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE HPE Helion OpenStack 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE HPE Helion OpenStack 8 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | java-1_7_0-openjdk | 1.7.0.231-43.27.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | java-11-openjdk | 11.0.4.0-3.33.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | libpng16 | 1.6.34-3.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | java-11-openjdk | 11.0.4.0-3.33.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | libpng16 | 1.6.34-3.9.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox | 60.7.0-3.40.6 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | MozillaFirefox | 60.7.0-3.40.6 |
| SUSE Linux Enterprise Module for Legacy 15 | java-1_8_0-ibm | 1.8.0_sr5.40-3.24.1 |
| SUSE Linux Enterprise Module for Legacy 15 | java-1_8_0-openjdk | 1.8.0.222-3.24.2 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | java-1_8_0-ibm | 1.8.0_sr5.40-3.24.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | java-1_8_0-openjdk | 1.8.0.222-3.24.2 |
| SUSE Linux Enterprise Module for Package Hub 15 | java-1_8_0-openjdk | 1.8.0.222-3.24.2 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | java-1_7_0-ibm | 1.7.0_sr10.50-65.42.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | java-1_7_1-ibm | 1.7.1_sr4.50-26.44.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP3 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP4 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_7_0-openjdk | 1.7.0.231-43.27.2 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server 12 SP5 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12-LTSS | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_7_0-openjdk | 1.7.0.231-43.27.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Workstation Extension 15 | MozillaThunderbird | 60.7.0-3.33.2 |
| SUSE Linux Enterprise Workstation Extension 15 SP1 | MozillaThunderbird | 60.7.0-3.33.2 |
| SUSE OpenStack Cloud 7 | MozillaFirefox | 60.7.0-109.72.1 |
| SUSE OpenStack Cloud 7 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE OpenStack Cloud 7 | libpng16 | 1.6.8-15.5.2 |
| SUSE OpenStack Cloud 8 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE OpenStack Cloud 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE OpenStack Cloud 8 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE OpenStack Cloud 8 | libpng16 | 1.6.8-15.5.2 |
| SUSE OpenStack Cloud Crowbar 8 | java-1_7_1-ibm | 1.7.1_sr4.50-38.41.1 |
| SUSE OpenStack Cloud Crowbar 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE OpenStack Cloud Crowbar 8 | java-1_8_0-openjdk | 1.8.0.222-27.35.2 |
| SUSE Package Hub 12 | MozillaThunderbird | 60.7.2-85.1 |
| Ubuntu 16.04 LTS | firefox | 67.0+build2-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | openjdk-8 | 8u222-b10-1ubuntu1~16.04.1 |
| Ubuntu 16.04 LTS | openjdk-9 | no fix |
| Ubuntu 16.04 LTS | thunderbird | 1:60.7.0+build1-0ubuntu0.16.04.1 |
| Ubuntu 18.04 LTS | firefox | 67.0+build2-0ubuntu0.18.04.1 |
| Ubuntu 18.04 LTS | libpng1.6 | 1.6.34-1ubuntu0.18.04.2 |
| Ubuntu 18.04 LTS | openjdk-8 | 8u222-b10-1ubuntu1~18.04.1 |
| Ubuntu 18.04 LTS | openjdk-lts | 11.0.4+11-1ubuntu2~18.04.3 |
| Ubuntu 18.04 LTS | thunderbird | 1:60.7.0+build1-0ubuntu0.18.04.1 |
| Ubuntu 22.04 LTS | libpng1.6 | 1.6.37-3ubuntu0.6 |
| Ubuntu Pro 14.04 LTS | libpng | 1.2.50-1ubuntu2.14.04.3+esm2 |
| Ubuntu Pro 16.04 LTS | libpng | 1.2.54-1ubuntu1.1+esm3 |
| Ubuntu Pro 16.04 LTS | libpng1.6 | 1.6.20-2ubuntu0.1~esm4 |
| Ubuntu Pro 18.04 LTS | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm3 |
| Ubuntu Pro 20.04 LTS | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 |
| Wolfi | firefox | 0 |
| Wolfi | openjdk-10-jre | no fix |
| Wolfi | openjdk-9 | 9.0.4-r5 |
| openSUSE Leap 15.0 | MozillaFirefox | 60.7.0-lp150.3.54.5 |
| openSUSE Leap 15.0 | java-11-openjdk | 11.0.4.0-lp151.3.6.1 |
| openSUSE Leap 15.0 | java-1_8_0-openjdk | 1.8.0.222-lp151.2.3.1 |
| openSUSE Leap 15.0 | libpng16 | 1.6.34-lp151.3.3.1 |
| openSUSE Leap 15.1 | java-11-openjdk | 11.0.4.0-lp151.3.6.1 |
| openSUSE Leap 15.1 | java-1_8_0-openjdk | 1.8.0.222-lp151.2.3.1 |
| openSUSE Leap 15.1 | libpng16 | 1.6.34-lp151.3.3.1 |
| openSUSE Tumbleweed | MozillaFirefox | 92.0-1.2 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |
| openSUSE Tumbleweed | java-11-openjdk | 11.0.12.0-3.1 |
| openSUSE Tumbleweed | java-13-openjdk | 13.0.8.0-3.1 |
| openSUSE Tumbleweed | java-1_8_0-openjdk | 1.8.0.302-2.2 |
| openSUSE Tumbleweed | libpng16 | 1.6.37-3.3 |