Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/firefox-esr@45.7.0-r0?arch=aarch64&distroversion=v3.5&reponame=community
purl pkg:apk/alpine/firefox-esr@45.7.0-r0?arch=aarch64&distroversion=v3.5&reponame=community
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (7)
Vulnerability Summary Aliases
VCID-5e5a-2swq-wbh6 URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. CVE-2017-5383
VCID-822t-e7ua-4qb2 A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. CVE-2017-5396
VCID-p1w3-75ze-bqf5 WebExtension scripts can use the data: protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. CVE-2017-5386
VCID-p5g7-qz44-s3gg Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object’s address can be discovered through hash codes, and also allows for data leakage of an object’s content using these hash codes. CVE-2017-5378
VCID-qm8u-3h4y-aqcb Use-after-free while manipulating XSL in XSLT documents CVE-2017-5376
VCID-ss8q-mzsn-mqe4 A potential use-after-free found through fuzzing during DOM manipulation of SVG content. CVE-2017-5380
VCID-tyf8-54m9-mkdn Mozilla developers and community members Christian Holler, Gary Kwong, André Bargull, Jan de Mooij, Tom Schuster, and Oriol reported memory safety bugs present in Thunderbird 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. CVE-2017-5373

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T10:12:00.546401+00:00 Alpine Linux Importer Fixing VCID-5e5a-2swq-wbh6 https://secdb.alpinelinux.org/v3.5/community.json 38.6.0
2026-05-29T10:05:02.713265+00:00 Alpine Linux Importer Fixing VCID-822t-e7ua-4qb2 https://secdb.alpinelinux.org/v3.5/community.json 38.6.0
2026-05-29T10:01:38.808711+00:00 Alpine Linux Importer Fixing VCID-p1w3-75ze-bqf5 https://secdb.alpinelinux.org/v3.5/community.json 38.6.0
2026-05-29T10:00:50.042754+00:00 Alpine Linux Importer Fixing VCID-ss8q-mzsn-mqe4 https://secdb.alpinelinux.org/v3.5/community.json 38.6.0
2026-05-29T09:55:16.179134+00:00 Alpine Linux Importer Fixing VCID-p5g7-qz44-s3gg https://secdb.alpinelinux.org/v3.5/community.json 38.6.0
2026-05-29T09:54:22.534543+00:00 Alpine Linux Importer Fixing VCID-qm8u-3h4y-aqcb https://secdb.alpinelinux.org/v3.5/community.json 38.6.0
2026-05-29T09:51:01.016048+00:00 Alpine Linux Importer Fixing VCID-tyf8-54m9-mkdn https://secdb.alpinelinux.org/v3.5/community.json 38.6.0