Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3843 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept or (2) emulate unspecified Telephony STK SIM commands via an application that sends a crafted Intent, related to com/android/internal/telephony/cat/AppInterface.java, aka internal bug 21697171. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/opt/telephony/+/b48581401259439dc5ef6dcf8b0f303e4cbefbe9 - https://android.googlesource.com/platform/frameworks/base/+/a5e9
/telephony/+/b48581401259439dc5ef6dcf8b0f303e4cbefbe9 - https://android.googlesource.com/platform/frameworks/base/+/a5e904e7eb3aaec532de83ca52e24af18e0496b4 - https://android.googlesource.com/platform/packages/apps/Stk/+/1d8e00160c07ae308e5b460214eb2a425b93ccf7 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ - https://android.googlesource.com/platform/packages/services/Telephony/+/fcb1d13c320dd1a6350bc7af3166929b4d54a456
CVE ID: CVE-2015-3844 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityManager in Android before 5.1.1 LMY48I allows attackers to trigger incorrect process loading via a crafted application, as demonstrated by interfering with use of the Settings application, aka internal bug 21669445. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ - https://android.googlesource.com/p
.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ - https://android.googlesource.com/platform/frameworks/base/+/e3cde784e3d99966f313fe00dcecf191f6a44a31
CVE ID: CVE-2015-3845 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider parcel boundaries during identification of binder objects in an append operation, which allows attackers to obtain a different application's privileges via a crafted application, aka internal bug 17312693. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/fr
m/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/frameworks/native/+/e68cbc3e9e66df4231e70efa3e9c41abc12aea20
CVE ID: CVE-2015-3847 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3849 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/framewor
m/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/frameworks/base/+/4cff1f49ff95d990d6c2614da5d5a23d02145885 - https://android.googlesource.com/platform/frameworks/base/+/1e72dc7a3074cd0b44d89afbf39bbf5000ef7cc3
CVE ID: CVE-2015-3854 State: PUBLISHED Published: 2016-08-07T21:00:00 Last Updated: 2024-08-06T05:56:15.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/71 - http://seclists.org/fulldisclosure/2016/May/72 - https://android.googlesource.com/platform/frameworks/base/+/05e0705177d2078fa9f940ce6df723312cfab976
CVE ID: CVE-2015-3858 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:16.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application, aka internal bug 22314646. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform
.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/frameworks/opt/telephony/+/df31d37d285dde9911b699837c351aed2320b586
CVE ID: CVE-2015-3860 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended access restrictions via a long password that triggers a SystemUI crash, aka internal bug 22214934. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://code.google.com
ps://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://code.google.com/p/android/issues/detail?id=178139 - http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/ - https://android.googlesource.com/platform/frameworks/base/+/8fba7e6931245a17215e0e740e78b45f6b66d590
CVE ID: CVE-2015-3861 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:16.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Matroska data, aka internal bug 21296336. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/frameworks/av/+/304ef91624e12661e7e3
curity-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/frameworks/av/+/304ef91624e12661e7e35c2c0c235da84a73e9c0
CVE ID: CVE-2015-3862 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22954006. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3863 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/system/security/+/bb9f4392c2f1b11be3acdc17
-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/system/security/+/bb9f4392c2f1b11be3acdc1737828274ff1ec55b
CVE ID: CVE-2015-3864 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://blog.zimperium.com/cve-2015-38
gle.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://blog.zimperium.com/cve-2015-3864-metasploit-module-now-available-for-testing/ - https://android.googlesource.com/platform/frameworks/av/+/6fe85f7e15203e48df2cc3e8e1c4bc6ad49dc968 - https://www.exploit-db.com/exploits/38226/ - http://www.securityfocus.com/bid/76682 - https://blog.zimperium.com/reflecting-on-stagefright-patches/ - https://www.exploit-db.com/exploits/40436/ - https://www.exploit-db.com/exploits/39640/
CVE ID: CVE-2015-3865 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Runtime subsystem in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23050463. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3867 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:15.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23213430. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3868 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23270724. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ - http://packetstormsecurity.com/files/134132/Libstagefright-Saio-Tag-Integer-Overflow-Heap-Corruption.html
CVE ID: CVE-2015-3869 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23036083. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3870 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22771132. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3871 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23031033. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3872 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23346388. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3873 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:15.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23016072, 23248776, 23247055, 22845824, 22008959, 21814993, 21048776, 20718524, 20674674, 22388975, 20674086, 21443020, and 22077698, a different vulnerability than CVE-2015-7716. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3874 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23335715, 23307276, and 23286323. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3875 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22952485. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3876 State: PUBLISHED Published: 2015-10-02T01:00:00 Last Updated: 2024-08-06T05:56:16.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033725 - https://code.google.com/p/android/issues/detail?id=182386 - http://twitter.com/4Dgifts/statuses/649589185792339968
CVE ID: CVE-2015-3877 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20723696. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3878 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warning feature and obtain sensitive screen-snapshot information via a crafted application that references a long application name, aka internal bug 23345192. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3879 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:16.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3880 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T05:56:16.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.phpbb.com/Release_Highlights/3.1.4 - https://github.com/phpbb/phpbb/commit/1a3350619f428d9d69d196c52128727e27ef2f04 - http://www.openwall.com/lists/oss-security/2015/05/12/10 - https://www.phpbb.com/community/viewtopic.php?f=14&t=2313941 - http
/www.openwall.com/lists/oss-security/2015/05/12/10 - https://www.phpbb.com/community/viewtopic.php?f=14&t=2313941 - http://www.securityfocus.com/bid/74592 - https://wiki.phpbb.com/Release_Highlights/3.0.14
CVE ID: CVE-2015-3881 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T05:56:16.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to (1) core/config/databases.yml, (2) core/log/qdPM_prod.log, or (3) core/apps/qdPM/config/settings.yml. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/qdPM_8.3.txt - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2015-3882 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T05:56:16.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/qdPM_8.3.txt - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2015-3883 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T05:56:16.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) search[keywords] parameter to index.php/users page; the (2) "Name of application" on index.php/configuration; (3) a new project name on index.php/projects; (4) the task name on index.php/tasks; (5) ticket name on index.php/tickets; (6) discussion name on index.php/discussions; (7) report name on index.php/projectReports; or (8) event name on index.php/scheduler/personal. Additional Analyst N
ns; (7) report name on index.php/projectReports; or (8) event name on index.php/scheduler/personal. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/qdPM_8.3.txt - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2015-3884 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T05:56:16.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/attachments/ or uploads/users/. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/qdPM_8.3.txt - http://rossmarks.uk/portfolio.php - http://packetstormsecurit
ferences: - http://rossmarks.uk/whitepapers/qdPM_8.3.txt - http://rossmarks.uk/portfolio.php - http://packetstormsecurity.com/files/168559/qdPM-9.1-Authenticated-Shell-Upload.html
CVE ID: CVE-2015-3885 State: PUBLISHED Published: 2015-05-19T18:00:00 Last Updated: 2024-08-06T05:56:16.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74590 - https://security.gentoo.org/glsa/201706-17 - https://github.com/LibRaw/LibRaw/commit/4606c28f494a750892c5c1ac7903e62dd1c6fdb5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159083.html - h
28f494a750892c5c1ac7903e62dd1c6fdb5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159083.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159469.html - https://security.gentoo.org/glsa/201701-54 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159518.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159625.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162084.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159665.html - http://lists.fedoraproject.org/pipermail/pack
lists.fedoraproject.org/pipermail/package-announce/2015-June/159665.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159579.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159479.html - http://www.securityfocus.com/archive/1/535513/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159123.html - http://www.ocert.org/advisories/ocert-2015-006.html - https://github.com/rawstudio/rawstudio/commit/983bda1f0fa5fa86884381208274198a620f006e