Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eract with a speech input element. Additional Analyst Notes: - CVE Program Container: References: - https://src.chromium.org/viewvc/chrome?revision=235302&view=revision - http://code.google.com/p/chromium/issues/detail?id=320183 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html - http://googlechromereleases.blogspot.com/2014/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=318791 - http://www.debian.org/security/2014/dsa-2862
CVE ID: CVE-2013-6646 State: PUBLISHED Published: 2014-01-16T11:00:00 Last Updated: 2024-08-06T17:46:22.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the shutting down of a worker process. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html - https://src.chromium.org/viewvc/chrome?revision=233367&view=revision - http:
e-security-announce/2014-02/msg00008.html - https://src.chromium.org/viewvc/chrome?revision=233367&view=revision - http://googlechromereleases.blogspot.com/2014/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=249502 - http://www.debian.org/security/2014/dsa-2862 - https://src.chromium.org/viewvc/chrome?revision=233099&view=revision
CVE ID: CVE-2013-6647 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T17:46:22.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=315889
CVE ID: CVE-2013-6648 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T17:46:22.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SkRegion::setPath in Skia allows remote attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=330293 - https://skia.googlesource.com/skia/+/73be1fc
CVE ID: CVE-2013-6649 State: PUBLISHED Published: 2014-01-28T11:00:00 Last Updated: 2024-08-06T17:46:22.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image. Additional Analyst Notes: - CVE Program Container: References: - https://src.chromium.org/viewvc/blink?revision=164536&view=revision - http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html - http://list
sion=164536&view=revision - http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html - http://crbug.com/330420 - http://www.debian.org/security/2014/dsa-2862
CVE ID: CVE-2013-6650 State: PUBLISHED Published: 2014-01-28T11:00:00 Last Updated: 2024-08-06T17:46:22.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg
es.blogspot.com/2014/01/stable-channel-update_27.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html - https://code.google.com/p/v8/source/detail?r=18483 - http://www.debian.org/security/2014/dsa-2862 - http://crbug.com/331444
CVE ID: CVE-2013-6652 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\?\ protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=334897 - https://src.chromium.org/viewvc/chrome?revision=247511&view=revision - http
gle.com/p/chromium/issues/detail?id=334897 - https://src.chromium.org/viewvc/chrome?revision=247511&view=revision - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html
CVE ID: CVE-2013-6653 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - https://code.google.com/p/chromium/issues/detail?id=331790 - http://googlechromerel
suse-updates/2014-03/msg00006.html - https://code.google.com/p/chromium/issues/detail?id=331790 - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html - https://src.chromium.org/viewvc/chrome?revision=244710&view=revision
CVE ID: CVE-2013-6654 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service (incorrect cast) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=333176 - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/
oogle.com/p/chromium/issues/detail?id=333176 - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - https://src.chromium.org/viewvc/blink?revision=165009&view=revision - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html
CVE ID: CVE-2013-6655 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and layout. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - http://googlechromereleases.blogspot.com/2014/02/st
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html - https://src.chromium.org/viewvc/blink?revision=162655&view=revision - https://code.google.com/p/chromium/issues/detail?id=293534
CVE ID: CVE-2013-6656 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - https://code.google
bian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - https://code.google.com/p/chromium/issues/detail?id=331725 - https://src.chromium.org/viewvc/blink?revision=164749&view=revision - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html
CVE ID: CVE-2013-6657 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - https://src.chromium.org/viewvc/blink?revision=164538&view=revision - http://lists.opensuse.org/open
ity/2014/dsa-2883 - https://src.chromium.org/viewvc/blink?revision=164538&view=revision - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html - https://code.google.com/p/chromium/issues/detail?id=331060
CVE ID: CVE-2013-6658 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code during execution of the updateWidgetPositions function or (2) making a call into a plugin during execution of the updateWidgetPositions function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - http
on. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html - https://code.google.com/p/chromium/issues/detail?id=322891 - https://src.chromium.org/viewvc/blink?revision=165052&view=revision
CVE ID: CVE-2013-6659 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user's expectations, by initiating a TLS renegotiation. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg0
er: References: - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - https://code.google.com/p/chromium/issues/detail?id=306959 - https://src.chromium.org/viewvc/chrome?revision=229611&view=revision - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html
CVE ID: CVE-2013-6660 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2883 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - https://src.chromium.org/viewvc/chrome?revision=244538&view=revision - http://googlechromereleases.blogspot.com/2014/02/stable
//src.chromium.org/viewvc/chrome?revision=244538&view=revision - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html - https://code.google.com/p/chromium/issues/detail?id=332579
CVE ID: CVE-2013-6661 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:46:22.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=330222 - http://www.debian.org/security/2014/dsa-2883 - https://code.google.com/p/chromium/issues/detail?id=339337 - https://code.google.com/p/chromium/issues/detail?id=314088 - https://code.google.com/p/c
omium/issues/detail?id=339337 - https://code.google.com/p/chromium/issues/detail?id=314088 - https://code.google.com/p/chromium/issues/detail?id=344876 - https://code.google.com/p/chromium/issues/detail?id=341220 - https://code.google.com/p/chromium/issues/detail?id=313005 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html - https://code.google.com/p/chromium/issues/detail?id=330750 - https://code.google.com/p/chromium/issues/detail?id=324812 - https://code.google.com/p/chromium/issues/detail?id=294687 - https://code.google.com/p/chromium/issues/detail?id=333885 - https://code.google.com/p/chromium/issues/detail?id=338561 - https://code.google.com/p/chromium/issues/detail?id=
3885 - https://code.google.com/p/chromium/issues/detail?id=338561 - https://code.google.com/p/chromium/issues/detail?id=328620 - https://code.google.com/p/chromium/issues/detail?id=332957 - https://code.google.com/p/chromium/issues/detail?id=338532 - https://code.google.com/p/chromium/issues/detail?id=326860 - https://code.google.com/p/chromium/issues/detail?id=334274 - https://code.google.com/p/chromium/issues/detail?id=312016 - https://code.google.com/p/chromium/issues/detail?id=329651 - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html - https://code.google.com/p/chromium/issues/detail?id=338464
CVE ID: CVE-2013-6662 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T17:46:22.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome caches TLS sessions before certificate validation occurs. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=305220
CVE ID: CVE-2013-6663 State: PUBLISHED Published: 2014-03-05T02:00:00 Last Updated: 2024-08-06T17:46:22.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65930 - http://www.debian.org/security/2014/dsa-2883 - http://support.apple.com/kb/HT6441 - https://sup
ityfocus.com/bid/65930 - http://www.debian.org/security/2014/dsa-2883 - http://support.apple.com/kb/HT6441 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6442 - http://secunia.com/advisories/61318 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://support.apple.com/kb/HT6440 - http://secunia.com/advisories/61306 - https://code.google.com/p/chromium/issues/detail?id=344492 - https://src.chromium.org/viewvc/blink?revision=168152&view=revision
CVE ID: CVE-2013-6664 State: PUBLISHED Published: 2014-03-05T02:00:00 Last Updated: 2024-08-06T17:46:22.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving FORM elements, as demonstrated by use of the speech-recognition feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65930 - http://www.debian.org/security/2014/dsa-2883 - https
m Container: References: - http://www.securityfocus.com/bid/65930 - http://www.debian.org/security/2014/dsa-2883 - https://src.chromium.org/viewvc/blink?revision=163825&view=revision - http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=326854
CVE ID: CVE-2013-6665 State: PUBLISHED Published: 2014-03-05T02:00:00 Last Updated: 2024-08-06T17:46:22.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome before 33.0.1750.146 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large texture size that triggers improper memory allocation in the software renderer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65930 - https://code.google.com/p/chromium/issues/detail?id=337882 - http://www.debian.org/s
//www.securityfocus.com/bid/65930 - https://code.google.com/p/chromium/issues/detail?id=337882 - http://www.debian.org/security/2014/dsa-2883 - http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html - https://src.chromium.org/viewvc/chrome?revision=250870&view=revision
CVE ID: CVE-2013-6666 State: PUBLISHED Published: 2014-03-05T02:00:00 Last Updated: 2024-08-06T17:46:22.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header. Additional Analyst Notes: - CVE Program Container: References: - https://src.chromium.org/viewvc/chrome?revision=249114&view=revision - http://www.secu
Program Container: References: - https://src.chromium.org/viewvc/chrome?revision=249114&view=revision - http://www.securityfocus.com/bid/65930 - http://www.debian.org/security/2014/dsa-2883 - https://code.google.com/p/chromium/issues/detail?id=332023 - http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html
CVE ID: CVE-2013-6667 State: PUBLISHED Published: 2014-03-05T02:00:00 Last Updated: 2024-08-06T17:46:22.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=344186 - https://code.google.com/p/chromium/issues/detail?id=333279 - http://www.securityfocus.com/bid/65930 - http://www.debian.org/security/2014/dsa-2883 - https://code.google.com/p/chromium/issues/detail?id=345959 - https://code.google.com/p
bian.org/security/2014/dsa-2883 - https://code.google.com/p/chromium/issues/detail?id=345959 - https://code.google.com/p/chromium/issues/detail?id=341068 - https://code.google.com/p/chromium/issues/detail?id=329006 - https://code.google.com/p/chromium/issues/detail?id=339667 - https://code.google.com/p/chromium/issues/detail?id=341063 - https://code.google.com/p/chromium/issues/detail?id=332947 - https://code.google.com/p/chromium/issues/detail?id=344887 - http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=343964 - https://code.google.com/p/chromium/issues/detail?id=347302 - https://code.google.com/p/chromium/issu
/detail?id=343964 - https://code.google.com/p/chromium/issues/detail?id=347302 - https://code.google.com/p/chromium/issues/detail?id=348175 - https://code.google.com/p/chromium/issues/detail?id=341060 - https://code.google.com/p/chromium/issues/detail?id=347909 - https://code.google.com/p/chromium/issues/detail?id=333280 - https://code.google.com/p/chromium/issues/detail?id=343265
CVE ID: CVE-2013-6668 State: PUBLISHED Published: 2014-03-05T02:00:00 Last Updated: 2024-08-06T17:46:22.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=344186 - http://www.securityfocus.com/bid/65930 - http://www.debian.org/security/2014/dsa-2883 - http://advisories.mageia.org/MGASA-2014-0516.html - http://secunia.com/advisories/61184 - http://www-01.ib
14/dsa-2883 - http://advisories.mageia.org/MGASA-2014-0516.html - http://secunia.com/advisories/61184 - http://www-01.ibm.com/support/docview.wss?uid=swg21683389 - https://code.google.com/p/v8/source/detail?r=19475 - http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=343964 - https://code.google.com/p/chromium/issues/detail?id=347909 - https://code.google.com/p/v8/source/detail?r=19553 - https://code.google.com/p/v8/source/detail?r=19599 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:142
CVE ID: CVE-2013-6671 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:46:22.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00
opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/