Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9922 State: PUBLISHED Published: 2017-03-27T15:00:00 Last Updated: 2024-08-06T03:07:30.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://access.redhat.com/errata/RHSA-2017:2392 - http
ps://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://access.redhat.com/errata/RHSA-2017:2392 - http://www.securityfocus.com/bid/94803 - https://bugzilla.redhat.com/show_bug.cgi?id=1334398 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70 - https://access.redhat.com/errata/RHSA-2017:2408 - http://www.openwall.com/lists/oss-security/2016/12/09/1
CVE ID: CVE-2016-9923 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T03:07:31.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/09/2 - https://security.gentoo.org/glsa/201701-49 - http://www.securityfocus.com/bid/94827
CVE ID: CVE-2016-9924 State: PUBLISHED Published: 2017-03-29T14:00:00 Last Updated: 2024-08-06T03:07:31.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Security_Center - http://www.securityfocus.com/bid/97121
CVE ID: CVE-2016-9928 State: PUBLISHED Published: 2020-02-06T13:16:55 Last Updated: 2024-08-06T03:07:31.382Z Vendors: MCabber Products: MCabber Problem Types: Other Description: MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1403790 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845258 - https://bitbucket.org/McKael/mcabber-crew/commits/6e1ead98930d7dd0a520ad17c720ae49
rg/cgi-bin/bugreport.cgi?bug=845258 - https://bitbucket.org/McKael/mcabber-crew/commits/6e1ead98930d7dd0a520ad17c720ae4908429033/raw - https://gultsch.de/gajim_roster_push_and_message_interception.html - http://www.openwall.com/lists/oss-security/2017/02/09/29 - http://www.openwall.com/lists/oss-security/2016/12/11/2 - http://www.securityfocus.com/bid/94862 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00130.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00031.html - https://usn.ubuntu.com/4506-1/
CVE ID: CVE-2016-9932 State: PUBLISHED Published: 2017-01-26T15:00:00 Last Updated: 2024-08-06T03:07:31.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-200.html - https://security.gentoo.org/glsa/201612-56 - http://www.debian.org/security/2017/dsa-3847 - http://www.securitytracker.com/id/1037468 - http://www.securityfocus.com/bid/94863 - https://support.citrix.com/article/CTX219378
CVE ID: CVE-2016-9933 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T03:07:31.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/12/2 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html - h
/www.openwall.com/lists/oss-security/2016/12/12/2 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html - http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html - http://www.php.net/ChangeLog-7.php - http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html - https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1 - http://www.debian.org/security/2017/dsa-3751 - http://www.securityfocus.com/bid/94865 - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=72696 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html - http://lists.opensuse.org/opensuse-updates/2016
696 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html - https://github.com/libgd/libgd/issues/215 - https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40e
CVE ID: CVE-2016-9934 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T03:07:31.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/12/2 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html - http://www.php.net/ChangeLog-7.php - http://www.securityfocus.com/bid/94845 - https://access.redhat.com/errat
054.html - http://www.php.net/ChangeLog-7.php - http://www.securityfocus.com/bid/94845 - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html - https://github.com/php/php-src/commit/6045de69c7dedcba3eadf7c4bba424b19c81d00d - https://bugs.php.net/bug.php?id=73331
CVE ID: CVE-2016-9935 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T03:07:31.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/66fd44209d5ffcb9b3d1bc1b9fd8e35b485040c0 - http://www.openwall.com/lists/oss-security/2016/12/12/2 - http://www.debian.org/security/201
9b3d1bc1b9fd8e35b485040c0 - http://www.openwall.com/lists/oss-security/2016/12/12/2 - http://www.debian.org/security/2016/dsa-3737 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html - http://www.php.net/ChangeLog-7.php - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html - https://bugs.php.net/bug.php?id=73631 - https://security.gentoo.org/glsa/201702-29 - http://www.securityfocus.com/bid/94846
CVE ID: CVE-2016-9936 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T03:07:31.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/12/2 - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/b2af4e8868726a040234de113436c6e4f63
12/12/2 - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/b2af4e8868726a040234de113436c6e4f6372d17 - https://access.redhat.com/errata/RHSA-2018:1296 - https://bugs.php.net/bug.php?id=72978 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html - http://www.securityfocus.com/bid/94849
CVE ID: CVE-2016-9937 State: PUBLISHED Published: 2016-12-12T21:00:00 Last Updated: 2024-08-06T03:07:31.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. If an SDP offer or answer is received with the Opus codec and with the format parameters separated using a space the code responsible for parsing will recursively call itself until it crashes. This occurs as the code does not properly handle spaces separating the parameters. This does NOT require the endpoint to have Opus configured in Asterisk. This also does not require the endpoint to be authenticated. If guest is enab
point to have Opus configured in Asterisk. This also does not require the endpoint to be authenticated. If guest is enabled for chan_sip or anonymous in chan_pjsip an SDP offer or answer is still processed and the crash occurs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94792 - http://downloads.asterisk.org/pub/security/AST-2016-008-14.diff - https://issues.asterisk.org/jira/browse/ASTERISK-26579 - http://downloads.asterisk.org/pub/security/AST-2016-008.html - http://downloads.asterisk.org/pub/security/AST-2016-008-13.diff - http://www.securitytracker.com/id/1037407
CVE ID: CVE-2016-9938 State: PUBLISHED Published: 2016-12-12T21:00:00 Last Updated: 2024-08-06T03:07:31.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14.x before 14.2.1 and Certified Asterisk 11.x before 11.6-cert16 and 13.x before 13.8-cert4. The chan_sip channel driver has a liberal definition for whitespace when attempting to strip the content between a SIP header name and a colon character. Rather than following RFC 3261 and stripping only spaces and horizontal tabs, Asterisk treats any non-printable ASCII character as if it were whitespace. This means that headers such as Cont
l tabs, Asterisk treats any non-printable ASCII character as if it were whitespace. This means that headers such as Contact\x01: will be seen as a valid Contact header. This mostly does not pose a problem until Asterisk is placed in tandem with an authenticating SIP proxy. In such a case, a crafty combination of valid and invalid To headers can cause a proxy to allow an INVITE request into Asterisk without authentication since it believes the request is an in-dialog request. However, because of the bug described above, the request will look like an out-of-dialog request to Asterisk. Asterisk will then process the request as a new call. The result is that Asterisk can process calls from unvet
Asterisk. Asterisk will then process the request as a new call. The result is that Asterisk can process calls from unvetted sources without any authentication. If you do not use a proxy for authentication, then this issue does not affect you. If your proxy is dialog-aware (meaning that the proxy keeps track of what dialogs are currently valid), then this issue does not affect you. If you use chan_pjsip instead of chan_sip, then this issue does not affect you. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2016-009.html - http://www.securityfocus.com/bid/94789 - http://www.securitytracker.com/id/1037408
CVE ID: CVE-2016-9939 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T03:07:31.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will allocate a memory block based on the length field of the ASN.1 object. If there is not enough content octets in the ASN.1 object, then the function will fail and the memory block will be zeroed even if its unused. There is a noticeable delay during the wipe for a large allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/12/7 - http://www.de
st Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/12/7 - http://www.debian.org/security/2016/dsa-3748 - http://www.securityfocus.com/bid/94854 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/
CVE ID: CVE-2016-9941 State: PUBLISHED Published: 2016-12-31T18:00:00 Last Updated: 2024-08-06T03:07:31.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message containing a subrectangle outside of the client drawing area. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95170 - https://github.com/LibVNC/libvncserver/pull/137 - http://www.debian.org/security/2017/dsa-3753 - https://security.gentoo.org/glsa/2
hub.com/LibVNC/libvncserver/pull/137 - http://www.debian.org/security/2017/dsa-3753 - https://security.gentoo.org/glsa/201702-24 - https://github.com/LibVNC/libvncserver/releases/tag/LibVNCServer-0.9.11 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2016-9942 State: PUBLISHED Published: 2016-12-31T18:00:00 Last Updated: 2024-08-06T03:07:31.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type tile, such that the LZO payload decompressed length exceeds what is specified by the tile dimensions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95170 - https://github.com/LibVNC/libvncserver/pull/137 - http://www.debian.org/se
s: - http://www.securityfocus.com/bid/95170 - https://github.com/LibVNC/libvncserver/pull/137 - http://www.debian.org/security/2017/dsa-3753 - https://security.gentoo.org/glsa/201702-24 - https://github.com/LibVNC/libvncserver/releases/tag/LibVNCServer-0.9.11 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2016-9949 State: PUBLISHED Published: 2016-12-17T03:34:00 Last Updated: 2024-08-06T03:07:31.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DonnchaC/ubuntu-apport-exploitation - https://donncha.is/2016/12/compromising-ubuntu-desktop/ - https://bugs.launchpad.net/apport/+bug/1648806 - http://www.securityfocus.com/bid/95011 - http://www.ubuntu.com/usn/USN-
https://bugs.launchpad.net/apport/+bug/1648806 - http://www.securityfocus.com/bid/95011 - http://www.ubuntu.com/usn/USN-3157-1 - https://www.exploit-db.com/exploits/40937/
CVE ID: CVE-2016-9950 State: PUBLISHED Published: 2016-12-17T03:34:00 Last Updated: 2024-08-06T03:07:31.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DonnchaC/ubuntu-apport-exploitation - https://donncha.is/2016/12/compromising-u
tainer: References: - https://github.com/DonnchaC/ubuntu-apport-exploitation - https://donncha.is/2016/12/compromising-ubuntu-desktop/ - https://bugs.launchpad.net/apport/+bug/1648806 - http://www.securityfocus.com/bid/95011 - http://www.ubuntu.com/usn/USN-3157-1 - https://www.exploit-db.com/exploits/40937/
CVE ID: CVE-2016-9951 State: PUBLISHED Published: 2016-12-17T03:34:00 Last Updated: 2024-08-06T03:07:32.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the Relaunch button on Apport crash files generated by local systems. The Relaunch button will be hidden when crash files are opened directly in Apport-GTK. Additional Analyst Notes: - CVE Program Container: References: - https://githu
files are opened directly in Apport-GTK. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DonnchaC/ubuntu-apport-exploitation - https://donncha.is/2016/12/compromising-ubuntu-desktop/ - https://bugs.launchpad.net/apport/+bug/1648806 - http://www.securityfocus.com/bid/95011 - http://www.ubuntu.com/usn/USN-3157-1 - https://www.exploit-db.com/exploits/40937/
CVE ID: CVE-2016-9952 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-07T19:19:13.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by "*.com." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://curl.haxx.se/docs/adv_20161221B.html - https://curl.haxx.se/CVE-2016-9952.patch
CVE ID: CVE-2016-9953 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-06T03:07:31.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://curl.haxx.se/CVE-2016-9952.patch - https://curl.haxx.se/docs/adv_20161221C.html
CVE ID: CVE-2016-9954 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-06T03:07:31.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6 for Scheme allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression with a repeating pattern. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/15/8 - https://github.com/ashinn/irregex/commit/a16ffc86eca15fca9e40607d41de3cea9cf868f1 - http://www.securityfocus.com/bid/94942 - https://bugzilla.redhat.com/show_bug.cgi?id=1
ca15fca9e40607d41de3cea9cf868f1 - http://www.securityfocus.com/bid/94942 - https://bugzilla.redhat.com/show_bug.cgi?id=1413990
CVE ID: CVE-2016-9955 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T03:07:31.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean. Additional Analyst Notes: - CVE Program Container: References: - https://simplesamlphp.org/security/201612-02 - http://www.securityfocus.com/bid/94946 - https://lists.debian.org/debian-lts-announce/2018/03/msg00001.html
CVE ID: CVE-2016-9956 State: PUBLISHED Published: 2017-02-22T16:00:00 Last Updated: 2024-08-06T03:07:31.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DB3B5XBB2NL2O2U4WNYGH7ZL45Q4UHGG/ - https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2/ - http://www.securityfocus.com/bid/94945 - https://lists.fedoraproject.org/archives/list/package-announce%40lists
e67d2/ - http://www.securityfocus.com/bid/94945 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZKAN7V6UOHSRFWO567XMN4O6WXTSL32/ - http://www.openwall.com/lists/oss-security/2016/12/15/10 - http://www.debian.org/security/2016/dsa-3742 - https://sourceforge.net/projects/flightgear/files/release-2016.4/ - http://www.openwall.com/lists/oss-security/2016/12/14/11 - http://www.openwall.com/lists/oss-security/2016/12/16/5 - https://usn.ubuntu.com/4588-1/
CVE ID: CVE-2016-9957 State: PUBLISHED Published: 2017-04-12T20:00:00 Last Updated: 2024-08-06T03:07:31.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in game-music-emu before 0.6.1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/ - http://www.securityfocus.com/bid/95305 - http://www.openwall.com/lists/oss-security/2016/12/15/11 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html - https:/
curity/2016/12/15/11 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html - https://security.gentoo.org/glsa/201707-02 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/ - https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/ - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html