Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/firefox@54.0.1-1
purl pkg:alpm/archlinux/firefox@54.0.1-1
Next non-vulnerable version 55.0-1
Latest non-vulnerable version 101.0-1
Risk 10.0
Vulnerabilities affecting this package (25)
Vulnerability Summary Fixed by
VCID-39za-a75a-z7c3
Aliases:
CVE-2017-7794
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. *Note: This attack only affects the Linux operating system. Other operating systems are not affected.*
55.0-1
Affected by 0 other vulnerabilities.
VCID-3cbn-278y-hkah
Aliases:
CVE-2017-7784
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-48em-7yxs-pqf9
Aliases:
CVE-2017-7779
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-4rt5-58ue-sufc
Aliases:
CVE-2017-7780
Mozilla developers and community members Gary Kwong, Christian Holler, André Bargull, Bob Clary, Carsten Book, Emilio Cobos Álvarez, Masayuki Nakano, Sebastian Hengst, Franziskus Kiefer, Tyson Smith, and Ronald Crane reported memory safety bugs present in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-6aqn-abjb-skbd
Aliases:
CVE-2017-7789
If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict Transport Security (HSTS) will not be enabled for the connection.
55.0-1
Affected by 0 other vulnerabilities.
VCID-7mvz-mr2e-hyfx
Aliases:
CVE-2017-7787
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-9cje-24ah-p7fk
Aliases:
CVE-2017-7808
A content security policy (CSP) frame-ancestors directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information.
55.0-1
Affected by 0 other vulnerabilities.
VCID-d7jf-wx4p-cuek
Aliases:
CVE-2017-7807
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-dck1-2x3v-1ygr
Aliases:
CVE-2017-7792
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-eaau-g1uf-73gd
Aliases:
CVE-2017-7806
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potentially exploitable crash.
55.0-1
Affected by 0 other vulnerabilities.
VCID-f7ut-fqny-tffr
Aliases:
CVE-2017-7799
JavaScript in the about:webrtc page is not sanitized properly being assigned to innerHTML. Data on this page is supplied by WebRTC usage and is not under third-party control, making this difficult to exploit, but the vulnerability could possibly be used for a cross-site scripting (XSS) attack.
55.0-1
Affected by 0 other vulnerabilities.
VCID-gf3v-rmys-syex
Aliases:
CVE-2017-7797
Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin.
55.0-1
Affected by 0 other vulnerabilities.
VCID-hd7u-f91y-dqhz
Aliases:
CVE-2017-7781
An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result POINT_AT_INFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret.
55.0-1
Affected by 0 other vulnerabilities.
VCID-hk7b-ckyd-7qg2
Aliases:
CVE-2017-7803
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-hw2h-w5r2-7qhv
Aliases:
CVE-2017-7753
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-kn3f-cx36-17h2
Aliases:
CVE-2017-7788
When an iframe has a sandbox attribute and its content is specified using srcdoc, that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included allow-same-origin.
55.0-1
Affected by 0 other vulnerabilities.
VCID-nmws-nx6k-5qbe
Aliases:
CVE-2017-7798
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-np75-dzzq-8yef
Aliases:
CVE-2017-7783
If a long user name is used in a username/password combination in a site URL (such as http://UserName:Password@example.com), the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service.
55.0-1
Affected by 0 other vulnerabilities.
VCID-q7jk-b69d-bbav
Aliases:
CVE-2017-7785
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-qetw-2ah7-5ba4
Aliases:
CVE-2017-7809
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-qh1k-c7ct-efg8
Aliases:
CVE-2017-7786
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-s558-4jac-47ft
Aliases:
CVE-2017-7791
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-vgwu-jbjv-xyd1
Aliases:
CVE-2017-7802
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-xzxb-5pq8-9bfd
Aliases:
CVE-2017-7801
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
VCID-yk2z-f6vu-93fb
Aliases:
CVE-2017-7800
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
55.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-07T13:59:10.053064+00:00 Arch Linux Importer Affected by VCID-hw2h-w5r2-7qhv https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:10.041100+00:00 Arch Linux Importer Affected by VCID-48em-7yxs-pqf9 https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:10.029083+00:00 Arch Linux Importer Affected by VCID-4rt5-58ue-sufc https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:10.015863+00:00 Arch Linux Importer Affected by VCID-hd7u-f91y-dqhz https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:10.003824+00:00 Arch Linux Importer Affected by VCID-np75-dzzq-8yef https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.991845+00:00 Arch Linux Importer Affected by VCID-3cbn-278y-hkah https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.979996+00:00 Arch Linux Importer Affected by VCID-q7jk-b69d-bbav https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.967944+00:00 Arch Linux Importer Affected by VCID-qh1k-c7ct-efg8 https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.954674+00:00 Arch Linux Importer Affected by VCID-7mvz-mr2e-hyfx https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.942944+00:00 Arch Linux Importer Affected by VCID-kn3f-cx36-17h2 https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.930611+00:00 Arch Linux Importer Affected by VCID-6aqn-abjb-skbd https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.918694+00:00 Arch Linux Importer Affected by VCID-s558-4jac-47ft https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.906802+00:00 Arch Linux Importer Affected by VCID-dck1-2x3v-1ygr https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.894691+00:00 Arch Linux Importer Affected by VCID-39za-a75a-z7c3 https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.882451+00:00 Arch Linux Importer Affected by VCID-gf3v-rmys-syex https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.870815+00:00 Arch Linux Importer Affected by VCID-nmws-nx6k-5qbe https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.854207+00:00 Arch Linux Importer Affected by VCID-f7ut-fqny-tffr https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.841917+00:00 Arch Linux Importer Affected by VCID-yk2z-f6vu-93fb https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.829642+00:00 Arch Linux Importer Affected by VCID-xzxb-5pq8-9bfd https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.818433+00:00 Arch Linux Importer Affected by VCID-vgwu-jbjv-xyd1 https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.805984+00:00 Arch Linux Importer Affected by VCID-hk7b-ckyd-7qg2 https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.792620+00:00 Arch Linux Importer Affected by VCID-eaau-g1uf-73gd https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.778360+00:00 Arch Linux Importer Affected by VCID-d7jf-wx4p-cuek https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.766037+00:00 Arch Linux Importer Affected by VCID-9cje-24ah-p7fk https://security.archlinux.org/AVG-375 38.1.0
2026-04-07T13:59:09.753624+00:00 Arch Linux Importer Affected by VCID-qetw-2ah7-5ba4 https://security.archlinux.org/AVG-375 38.1.0
2026-04-01T18:24:43.383422+00:00 Arch Linux Importer Affected by VCID-hw2h-w5r2-7qhv https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.360498+00:00 Arch Linux Importer Affected by VCID-48em-7yxs-pqf9 https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.338301+00:00 Arch Linux Importer Affected by VCID-4rt5-58ue-sufc https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.309017+00:00 Arch Linux Importer Affected by VCID-hd7u-f91y-dqhz https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.284000+00:00 Arch Linux Importer Affected by VCID-np75-dzzq-8yef https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.257544+00:00 Arch Linux Importer Affected by VCID-3cbn-278y-hkah https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.232631+00:00 Arch Linux Importer Affected by VCID-q7jk-b69d-bbav https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.205485+00:00 Arch Linux Importer Affected by VCID-qh1k-c7ct-efg8 https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.179544+00:00 Arch Linux Importer Affected by VCID-7mvz-mr2e-hyfx https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.150382+00:00 Arch Linux Importer Affected by VCID-kn3f-cx36-17h2 https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.126397+00:00 Arch Linux Importer Affected by VCID-6aqn-abjb-skbd https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.098394+00:00 Arch Linux Importer Affected by VCID-s558-4jac-47ft https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.073551+00:00 Arch Linux Importer Affected by VCID-dck1-2x3v-1ygr https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.048980+00:00 Arch Linux Importer Affected by VCID-39za-a75a-z7c3 https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:43.023254+00:00 Arch Linux Importer Affected by VCID-gf3v-rmys-syex https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.996354+00:00 Arch Linux Importer Affected by VCID-nmws-nx6k-5qbe https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.968423+00:00 Arch Linux Importer Affected by VCID-f7ut-fqny-tffr https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.936990+00:00 Arch Linux Importer Affected by VCID-yk2z-f6vu-93fb https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.905117+00:00 Arch Linux Importer Affected by VCID-xzxb-5pq8-9bfd https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.880734+00:00 Arch Linux Importer Affected by VCID-vgwu-jbjv-xyd1 https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.854821+00:00 Arch Linux Importer Affected by VCID-hk7b-ckyd-7qg2 https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.830015+00:00 Arch Linux Importer Affected by VCID-eaau-g1uf-73gd https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.802389+00:00 Arch Linux Importer Affected by VCID-d7jf-wx4p-cuek https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.771461+00:00 Arch Linux Importer Affected by VCID-9cje-24ah-p7fk https://security.archlinux.org/AVG-375 38.0.0
2026-04-01T18:24:42.746208+00:00 Arch Linux Importer Affected by VCID-qetw-2ah7-5ba4 https://security.archlinux.org/AVG-375 38.0.0