Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
unctions. An attacker could exploit this vulnerability by sending requests that contain specially crafted path variables to the vulnerable system. A successful exploit could allow the attacker to overwrite arbitrary files, allowing the attacker to modify the system in such a way that could allow the attacker to gain escalated privileges.Cisco&nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-escalation-Jhqs5Skf - https://sec.cloudapps.cisco.com/security/center
ter/content/CiscoSecurityAdvisory/cisco-sa-vmanage-escalation-Jhqs5Skf - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-dos-7uZWwSEy
CVE ID: CVE-2020-26075 State: PUBLISHED Published: 2020-11-18T17:40:24.093694Z Last Updated: 2024-11-13T17:39:53.076Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Cisco Products: Cisco IoT Field Network Director (IoT-FND) Problem Types: CWE-89 Description: A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. An attacker could exploit this vulnerability by crafting malicious API requests to the affected device. A s
cted device. An attacker could exploit this vulnerability by crafting malicious API requests to the affected device. A successful exploit could allow the attacker to gain access to the back-end database of the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-SQL-zEkBnL2h
CVE ID: CVE-2020-26076 State: PUBLISHED Published: 2020-11-18T17:40:28.504631Z Last Updated: 2024-11-13T17:39:43.830Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Cisco Products: Cisco IoT Field Network Director (IoT-FND) Problem Types: CWE-497 Description: A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive database information on an affected device. The vulnerability is due to the absence of authentication for sensitive information. An attacker could exploit this vulnerability by sending crafted curl commands to an affected device. A successful exploit could allow the attacker to vi
ulnerability by sending crafted curl commands to an affected device. A successful exploit could allow the attacker to view sensitive database information on the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-SSI-V2myWX9y
CVE ID: CVE-2020-26077 State: PUBLISHED Published: 2020-11-18T17:40:32.927009Z Last Updated: 2024-11-13T17:39:33.443Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Cisco Products: Cisco IoT Field Network Director (IoT-FND) Problem Types: CWE-284 Description: A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to view lists of users from different domains that are configured on an affected system. The vulnerability is due to improper access control. An attacker could exploit this vulnerability by sending an API request that alters the domain for a requested user list on an
tacker could exploit this vulnerability by sending an API request that alters the domain for a requested user list on an affected system. A successful exploit could allow the attacker to view lists of users from different domains on the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-LV-hE4Rntet
CVE ID: CVE-2020-26078 State: PUBLISHED Published: 2020-11-18T17:40:37.320623Z Last Updated: 2024-11-13T17:39:24.746Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Cisco Products: Cisco IoT Field Network Director (IoT-FND) Problem Types: CWE-73 Description: A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected system. The vulnerability is due to insufficient file system protections. An attacker could exploit this vulnerability by crafting API requests and sending them to an affected system. A successful exploit could allow the attacker to overwrite files
g API requests and sending them to an affected system. A successful exploit could allow the attacker to overwrite files on an affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-OVW-SHzOE3Pd
CVE ID: CVE-2020-26079 State: PUBLISHED Published: 2020-11-18T17:40:41.825145Z Last Updated: 2024-11-13T17:39:15.606Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Cisco Products: Cisco IoT Field Network Director (IoT-FND) Problem Types: CWE-256 Description: A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is due to insufficient protection of user credentials. An attacker could exploit this vulnerability by logging in as an administrative user and crafting a call for user information. A successful exploit could al
rability by logging in as an administrative user and crafting a call for user information. A successful exploit could allow the attacker to obtain hashes of user passwords on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-PWH-yCA6M7p
CVE ID: CVE-2020-26080 State: PUBLISHED Published: 2020-11-18T17:40:46.724171Z Last Updated: 2024-11-13T17:39:03.072Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: Cisco Products: Cisco IoT Field Network Director (IoT-FND) Problem Types: CWE-284 Description: A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to manage user information for users in different domains on an affected system. The vulnerability is due to improper domain access control. An attacker could exploit this vulnerability by manipulating JSON payloads to target different domains on an affected syste
attacker could exploit this vulnerability by manipulating JSON payloads to target different domains on an affected system. A successful exploit could allow the attacker to manage user information for users in different domains on an affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-UPWD-dCRPuQ78
CVE ID: CVE-2020-26081 State: PUBLISHED Published: 2020-11-18T17:40:51.168130Z Last Updated: 2024-11-13T17:38:54.200Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco IoT Field Network Director (IoT-FND) Problem Types: CWE-74 Description: Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users on an affected system. The vulnerabilities are due to insufficient validation of user-supplied input that is processed by the web UI. An attacker could exploit these vulnerabilities by persuading a user to click a cra
put that is processed by the web UI. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information on an affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-XSS-NzOPCGEc
CVE ID: CVE-2020-26082 State: PUBLISHED Published: 2023-08-04T20:49:05.202Z Last Updated: 2025-07-09T13:37:52.867Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Cisco Products: Cisco Secure Email Problem Types: CWE-20 Description: A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass content filters that are configured on an affected device. The vulnerability is due to improper handling of password-protected zip files. An attacker could exploit this vulnerability by sending a malicious file inside a crafted zip-compressed file to an affect
attacker could exploit this vulnerability by sending a malicious file inside a crafted zip-compressed file to an affected device. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-zip-bypass-gbU4gtTg
CVE ID: CVE-2020-26083 State: PUBLISHED Published: 2020-11-06T18:15:24.864332Z Last Updated: 2024-11-13T17:45:14.808Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco Identity Services Engine Software Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerabil
web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker would need to have valid administrative credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxs-pkjCmq9d
CVE ID: CVE-2020-26084 State: PUBLISHED Published: 2020-11-06T18:15:29.448379Z Last Updated: 2024-11-13T17:45:05.195Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Cisco Products: Cisco Edge Fog Fabric Problem Types: CWE-668 Description: A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to overwrite arbitrary file
ility by sending a crafted request to the API. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-eff-incperm-9E6h4yBz
CVE ID: CVE-2020-26085 State: PUBLISHED Published: 2021-01-06T23:35:12.594001Z Last Updated: 2024-11-12T20:53:40.311Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Cisco Products: Cisco Jabber Problem Types: CWE-201 Description: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
see the Details section of this advisory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO
CVE ID: CVE-2020-26086 State: PUBLISHED Published: 2020-11-06T18:15:33.870910Z Last Updated: 2024-11-13T17:44:55.552Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Cisco Products: Cisco TelePresence Endpoint Software (TC/CE) Problem Types: CWE-668 Description: A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected device. An attacker could exploit this vulnerability by accessing information that should not be acce
ion on an affected device. An attacker could exploit this vulnerability by accessing information that should not be accessible to users with low privileges. A successful exploit could allow the attacker to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tele-info-DrEGLpDQ
CVE ID: CVE-2020-26088 State: PUBLISHED Published: 2020-09-24T14:06:29 Last Updated: 2024-08-04T15:49:06.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/26896f01467a28651f7a536143fe5ac8449d4041 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.2 - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - http://lists.opensuse.org/opensuse-s
ngeLog-5.8.2 - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html - https://usn.ubuntu.com/4578-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-26097 State: PUBLISHED Published: 2020-11-18T17:46:36 Last Updated: 2024-08-04T15:49:06.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware of the PLANET Technology Corp NVR-915 and NVR-1615 before 2020-10-28 embeds default credentials for root access via telnet. By exposing telnet on the Internet, remote root access on the device is possible. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-research.com/1604584604-hard-coded-credentials-in-netzwerk-videorekorder-planet-nvr-915.html
CVE ID: CVE-2020-26098 State: PUBLISHED Published: 2020-09-25T05:43:32 Last Updated: 2024-08-04T15:49:07.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26099 State: PUBLISHED Published: 2020-09-25T05:43:26 Last Updated: 2024-08-04T15:49:06.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26100 State: PUBLISHED Published: 2020-09-25T05:43:16 Last Updated: 2024-08-04T15:49:07.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26101 State: PUBLISHED Published: 2020-09-25T05:43:08 Last Updated: 2024-08-04T15:49:06.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26102 State: PUBLISHED Published: 2020-09-25T05:42:59 Last Updated: 2024-08-04T15:49:06.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26103 State: PUBLISHED Published: 2020-09-25T05:42:53 Last Updated: 2024-08-04T15:49:06.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26104 State: PUBLISHED Published: 2020-09-25T05:42:46 Last Updated: 2024-08-04T15:49:06.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26105 State: PUBLISHED Published: 2020-09-25T05:42:40 Last Updated: 2024-08-04T15:49:06.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26106 State: PUBLISHED Published: 2020-09-25T05:42:32 Last Updated: 2024-08-04T15:49:06.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26107 State: PUBLISHED Published: 2020-09-25T05:42:25 Last Updated: 2024-08-04T15:49:06.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26108 State: PUBLISHED Published: 2020-09-25T05:42:12 Last Updated: 2024-08-04T15:49:06.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26109 State: PUBLISHED Published: 2020-09-25T05:41:09 Last Updated: 2024-08-04T15:49:06.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26110 State: PUBLISHED Published: 2020-09-25T05:40:59 Last Updated: 2024-08-04T15:49:07.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/88-change-log/
CVE ID: CVE-2020-26111 State: PUBLISHED Published: 2020-09-25T05:40:50 Last Updated: 2024-08-04T15:49:06.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/90-change-log/
CVE ID: CVE-2020-26112 State: PUBLISHED Published: 2020-09-25T05:40:42 Last Updated: 2024-08-04T15:49:07.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The email quota cache in cPanel before 90.0.10 allows overwriting of files. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/90-change-log/
CVE ID: CVE-2020-26113 State: PUBLISHED Published: 2020-09-25T05:40:34 Last Updated: 2024-08-04T15:49:07.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/90-change-log/
CVE ID: CVE-2020-26114 State: PUBLISHED Published: 2020-09-25T05:40:26 Last Updated: 2024-08-04T15:49:07.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/90-change-log/
CVE ID: CVE-2020-26115 State: PUBLISHED Published: 2020-09-25T05:40:17 Last Updated: 2024-08-04T15:49:06.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/90-change-log/
CVE ID: CVE-2020-26116 State: PUBLISHED Published: 2020-09-27T00:00:00 Last Updated: 2024-08-04T15:49:07.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request. Additional Analyst Notes: - CVE Program Container: References: - https://python-security.readthedocs.io/vuln/http-header-injection-method.html - https://bugs.python.org/issue39603 - https://lists.fedoraproject.org/archives/list/package-announce%40
ion-method.html - https://bugs.python.org/issue39603 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BW4GCLQISJCOEGQNIMVUZDQMIY6RR6CC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWMAVY4T4257AZHTF2RZJKNJNSJFY24O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/ - https://usn.ubuntu.com/4581-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDQ2THWU4GPV4Y5H5WW5PFMSWXL2CRFD/ - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00027.html - htt