Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2876 State: PUBLISHED Published: 2011-10-04T20:00:00 Last Updated: 2024-08-06T23:15:31.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=93788 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14439 - http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html
CVE ID: CVE-2011-2877 State: PUBLISHED Published: 2011-10-04T20:00:00 Last Updated: 2024-08-06T23:15:31.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026774 - http://code.google.com/p/chromium/issues/detail?id=95072 - http://secunia.com/advisories/48377 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html - http://secunia.com/advisories/4827
es/48377 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html - http://secunia.com/advisories/48274 - http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html - http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14694 - http://secunia.com/advisories/48288 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
CVE ID: CVE-2011-2878 State: PUBLISHED Published: 2011-10-04T20:00:00 Last Updated: 2024-08-06T23:15:31.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=95671 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14470 - http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html
CVE ID: CVE-2011-2879 State: PUBLISHED Published: 2011-10-04T20:00:00 Last Updated: 2024-08-06T23:15:31.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of audio nodes, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14496 - http://code.google.com/p/chromium/issues/detail?id=96150 - http://googlechromereleases.blogspot.com/2011/10/stable-cha
- http://code.google.com/p/chromium/issues/detail?id=96150 - http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html
CVE ID: CVE-2011-2880 State: PUBLISHED Published: 2011-10-04T20:00:00 Last Updated: 2024-08-06T23:15:31.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=97520 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14319 - http://code.google.com/p/chromium/issues/detail?id=97451 - http://code.google.com/p/chromium/issues/detai
Adef%3A14319 - http://code.google.com/p/chromium/issues/detail?id=97451 - http://code.google.com/p/chromium/issues/detail?id=97615 - http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html
CVE ID: CVE-2011-2881 State: PUBLISHED Published: 2011-10-04T20:00:00 Last Updated: 2024-08-06T23:15:31.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14075 - http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=97784
CVE ID: CVE-2011-2882 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T23:15:31.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8358 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=929
CVE ID: CVE-2011-2883 State: PUBLISHED Published: 2011-07-21T23:00:00Z Last Updated: 2024-09-17T01:42:00.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to execute arbitrary code via HTTP header data referencing a DLL that was signed with a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?
Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=928
CVE ID: CVE-2011-2884 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/73988 - http://www.securityfocus.com/bid/48936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68892 - http://www.ibm.com/support/docview.wss?uid=swg21505448 - http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&c
448 - http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm - http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm - http://secunia.com/advisories/45271
CVE ID: CVE-2011-2885 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48936 - http://www.ibm.com/support/docview.wss?uid=swg21505448 - http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://www-304.ibm.com/jct03001c/software/lotus/sympho
n&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm - http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/68891 - http://osvdb.org/74159
CVE ID: CVE-2011-2886 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68890 - http://www.ibm.com/support/docview.wss?uid=swg21505448 - http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements -
m/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm - http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm - http://osvdb.org/74160
CVE ID: CVE-2011-2887 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68889 - http://www.securityfocus.com/bid/48936 - http://www.ibm.com/support/docview.wss?uid=swg21505448 - http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://www-304.ibm.com/j
buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm - http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm - http://osvdb.org/74163
CVE ID: CVE-2011-2888 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48936 - http://www.ibm.com/support/docview.wss?uid=swg21505448 - http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/re
0404BCF&category=announcements - https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm - http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm - http://osvdb.org/74165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68888
CVE ID: CVE-2011-2889 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/9-security/10-core-security/340-20110401-core-information-disclosure.html - http://www.joomla.org/announcements/release-news/5367-joomla-1523-
urity/340-20110401-core-information-disclosure.html - http://www.joomla.org/announcements/release-news/5367-joomla-1523-released.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68883 - http://www.openwall.com/lists/oss-security/2011/07/01/1
CVE ID: CVE-2011-2890 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68882 - http://www.openwall.com/lists/oss-security/2011/07/01/1
CVE ID: CVE-2011-2891 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68881 - http://bl0g.yehg.net/2011/04/joomla-161-and-lower-information.html - http://www.openwall.com/lists/oss-security/2011/06/27/8 - http://www.openwall.com/lists/oss-security/
information.html - http://www.openwall.com/lists/oss-security/2011/06/27/8 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://developer.joomla.org/security/news/341-20110402-core-information-disclosure.html
CVE ID: CVE-2011-2892 State: PUBLISHED Published: 2011-07-27T20:00:00Z Last Updated: 2024-09-16T20:31:26.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://bl0g.yehg.net/2011/04/joomla-161-and-lower-information.html - http://developer.joomla.org/security/news/347-20110409-core-clickjacking.html
CVE ID: CVE-2011-2893 State: PUBLISHED Published: 2011-07-27T20:00:00 Last Updated: 2024-08-06T23:15:31.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48936 - http://www.ibm.com/support/docview.wss?uid=swg21505448 - http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://exchange.xforce.i
buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements - https://exchange.xforce.ibmcloud.com/vulnerabilities/68748 - https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm - http://osvdb.org/74166 - http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
CVE ID: CVE-2011-2894 State: PUBLISHED Published: 2011-10-04T10:00:00 Last Updated: 2024-08-06T23:15:31.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untrusted code by (1) serializing a java.lang.Proxy instance and using InvocationHandler, or (2) accessing internal AOP interfaces, as demonstrated using deserialization of a DefaultListableBeanFactory instance to execute arbitrary commands via the java.lang.Runtime class. Addi
rialization of a DefaultListableBeanFactory instance to execute arbitrary commands via the java.lang.Runtime class. Additional Analyst Notes: - CVE Program Container: References: - http://www.springsource.com/security/cve-2011-2894 - http://www.securityfocus.com/bid/49536 - http://www.securityfocus.com/archive/1/519593/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-1334.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69687 - http://securityreason.com/securityalert/8405 - http://osvdb.org/75263 - https://web.archive.org/web/20120307233721/http://www.springsource.com/security/cve-2011-2894
CVE ID: CVE-2011-2895 State: PUBLISHED Published: 2011-08-19T17:00:00 Last Updated: 2024-08-06T23:15:31.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary
context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205635 - http://www.redhat.com/support/errata/RHSA-2011-1154.html - http://www.ubuntu.com/usn/USN-1191-1 - http://www.openwall.com/lists/oss-security/2011/08/10/10 - https://bugzilla.redhat.com/show_bug.cgi?id=725760 - http://secunia.com/advisories/45544 - https://support.apple.com/HT205637 - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00
ple.com/HT205637 - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:153 - http://www.securityfocus.com/bid/49124 - http://secunia.com/advisories/45599 - http://www.redhat.com/support/errata/RHSA-2011-1155.html - http://securitytracker.com/id?1025920 - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00004.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.freedesk
2011-09/msg00019.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.freedesktop.org/archives/xorg-announce/2011-August/001721.html - http://secunia.com/advisories/46127 - http://secunia.com/advisories/45986 - http://www.redhat.com/support/errata/RHSA-2011-1161.html - http://www.redhat.com/support/errata/RHSA-2011-1834.html - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/compress/zopen.c#rev1.17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69141 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html - http://secunia.com/advisories/45568 - http://lists.freedesktop.org/archives/xorg-announce/2011-August/001722.html -
l - http://secunia.com/advisories/45568 - http://lists.freedesktop.org/archives/xorg-announce/2011-August/001722.html - https://support.apple.com/HT205641 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-007.txt.asc - https://support.apple.com/HT205640 - http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d11ee5886e9d9ec610051a206b135a4cdc1e09a0 - http://secunia.com/advisories/48951 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://www.debian.org/security/2011/dsa-2293 - https://bugzilla.redhat.com/show_bug.cgi?id=727624
CVE ID: CVE-2011-2896 State: PUBLISHED Published: 2011-08-19T17:00:00 Last Updated: 2024-08-06T23:15:31.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite
rds that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2426 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html - http://security.gentoo.org/glsa/glsa-201209-23.xml - http://cups.org/str.php?L3867 - http://www.openwall.com/lists/oss-security/2011/08/10/10 - http://www.ubuntu.com/usn/USN-1207-1 - https://bugzilla.redhat.com/show_bug.c
all.com/lists/oss-security/2011/08/10/10 - http://www.ubuntu.com/usn/USN-1207-1 - https://bugzilla.redhat.com/show_bug.cgi?id=727800 - http://rhn.redhat.com/errata/RHSA-2012-1180.html - http://secunia.com/advisories/48308 - http://www.debian.org/security/2011/dsa-2354 - http://secunia.com/advisories/45948 - http://rhn.redhat.com/errata/RHSA-2012-1181.html - http://secunia.com/advisories/46024 - http://secunia.com/advisories/45900 - http://www.redhat.com/support/errata/RHSA-2011-1635.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065550.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html - https://bugzilla.redhat.com/show_b
- http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html - https://bugzilla.redhat.com/show_bug.cgi?id=730338 - http://www.securityfocus.com/bid/49148 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:146 - http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065527.html - http://www.ubuntu.com/usn/USN-1214-1 - http://secunia.com/advisories/50737 - http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc - http://www.mandriva.com/security/advisories?name=MDVSA-2011:167 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.ht
ecurity/advisories?name=MDVSA-2011:167 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065651.html - http://secunia.com/advisories/48236 - http://www.securitytracker.com/id?1025929 - http://secunia.com/advisories/45621 - http://secunia.com/advisories/45945