Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.spinics.net/lists/netdev/msg568315.html - https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4dd2b82d5adfbe0b1587ccad7a8f76d826120f37 - http://www.openwall.com/lists/oss-security/2019/05/02/1 - http://www.securityfocus.com/bid/108142 - http://www.openwall.com/lists/oss-security/2019/05/05/4 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7CYLTCIRTKUB4R2TLLUYPZLDQL44OBG/ - https://usn.ubuntu.com/3979-1/ - https://security.netapp.com/advisory/ntap-20190517-0002/ - https://support.f5.com/csp/article/K69550896
CVE ID: CVE-2019-11684 State: PUBLISHED Published: 2021-02-26T15:05:45.533535Z Last Updated: 2024-09-17T01:22:05.355Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks. Prior releases of VRM software version 3.70 are considered unaffected. This vulnerability affects VRM v3.70.x, v3.71 < v3.71.0034 and v3.81 < 3.81.00
e version 3.70 are considered unaffected. This vulnerability affects VRM v3.70.x, v3.71 < v3.71.0034 and v3.81 < 3.81.0050; DIVAR IP 5000 3.80 < 3.80.0039; BVMS all versions using VRM. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-804652.html
CVE ID: CVE-2019-11686 State: PUBLISHED Published: 2020-03-10T12:35:45 Last Updated: 2024-08-04T23:03:32.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure. Additional Analyst Notes: - CVE Program Container: References: - https://support.wdc.com/downloads.aspx?g=907&lang=en - https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s - https://www.westerndigital.com/support/productsecurity/wdc-
support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s - https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd
CVE ID: CVE-2019-11687 State: PUBLISHED Published: 2019-05-02T21:07:15.000Z Last Updated: 2025-07-24T16:34:42.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems, including Portable Executable (PE) files for Windows and Executable and Linkable Format (ELF) files for Linux-based systems. This space is left unspecified so that dual-purpose files can be created. For example, dual-purpose TIFF/D
ased systems. This space is left unspecified so that dual-purpose files can be created. For example, dual-purpose TIFF/DICOM files are used in digital whole slide imaging applications in medicine. This design flaw enables system-wide compromise as malicious DICOM files are routinely shared between medical devices and hospital systems and transported via removable media for patient care coordination. To exploit this vulnerability, someone must execute the maliciously crafted file. These files can be executable even with the .dcm file extension. Anti-malware configurations at healthcare facilities often ignore medical imagery. DICOM files exist on systems that process protected health informat
healthcare facilities often ignore medical imagery. DICOM files exist on systems that process protected health information, and successful exploitation could result in violations of regulatory compliance requirements such as HIPAA and FDA postmarket obligations. Additional Analyst Notes: - CVE Program Container: References: - https://labs.cylera.com/2019.04.16/pe-dicom-medical-malware - https://github.com/d00rt/pedicom/blob/master/doc/Attacking_Digital_Imaging_and_Communication_in_Medicine_%28DICOM%29_file_format_standard_-_Markel_Picado_Ortiz_%28d00rt%29.pdf - https://github.com/d00rt/pedicom - http://www.securityfocus.com/bid/108730 - https://www.praetorian.com/blog/elfdicom-poc-malware-p
hub.com/d00rt/pedicom - http://www.securityfocus.com/bid/108730 - https://www.praetorian.com/blog/elfdicom-poc-malware-polyglot-exploiting-linux-based-medical-devices/
CVE ID: CVE-2019-11688 State: PUBLISHED Published: 2020-03-18T14:58:47 Last Updated: 2024-08-04T23:03:32.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.asustor.com/app_central/app_detail?id=776 - https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md
CVE ID: CVE-2019-11689 State: PUBLISHED Published: 2020-03-18T14:59:34 Last Updated: 2024-08-04T23:03:32.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.asustor.com/app_central/app_detail?id=776 - https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md
CVE ID: CVE-2019-11690 State: PUBLISHED Published: 2019-05-03T12:07:21 Last Updated: 2024-08-04T23:03:32.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.ozlabs.org/patch/1092945
CVE ID: CVE-2019-11691 State: PUBLISHED Published: 2019-07-23T13:23:12 Last Updated: 2024-08-04T23:03:32.349Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Use-after-free in XMLHttpRequest Description: A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://www.mozilla.org/security/advisories/mf
References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://www.mozilla.org/security/advisories/mfsa2019-15/ - https://www.mozilla.org/security/advisories/mfsa2019-14/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1542465
CVE ID: CVE-2019-11692 State: PUBLISHED Published: 2019-07-23T13:23:02 Last Updated: 2024-08-04T23:03:32.472Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Use-after-free removing listeners in the event listener manager Description: A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://www.mozilla.org/security/advisories/mfsa2019-15/ - htt
ttps://www.mozilla.org/security/advisories/mfsa2019-13/ - https://www.mozilla.org/security/advisories/mfsa2019-15/ - https://www.mozilla.org/security/advisories/mfsa2019-14/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1544670
CVE ID: CVE-2019-11693 State: PUBLISHED Published: 2019-07-23T13:22:53 Last Updated: 2024-08-04T23:03:32.198Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Buffer overflow in WebGL bufferdata on Linux Description: The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.mo
7, Firefox < 67, and Firefox ESR < 60.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://www.mozilla.org/security/advisories/mfsa2019-15/ - https://www.mozilla.org/security/advisories/mfsa2019-14/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1532525
CVE ID: CVE-2019-11694 State: PUBLISHED Published: 2019-07-23T13:22:42 Last Updated: 2024-08-04T23:03:32.459Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Uninitialized memory memory leakage in Windows sandbox Description: A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7. Addit
ing systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://www.mozilla.org/security/advisories/mfsa2019-15/ - https://www.mozilla.org/security/advisories/mfsa2019-14/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1534196
CVE ID: CVE-2019-11695 State: PUBLISHED Published: 2019-07-23T13:22:31 Last Updated: 2024-08-04T23:03:32.450Z Vendors: Mozilla Products: Firefox Problem Types: Custom cursor can render over user interface outside of web content Description: A custom cursor defined by scripting on a site can position itself over the addressbar to spoof the actual cursor when it should not be allowed outside of the primary web content area. This could be used by a malicious site to trick users into clicking on permission prompts, doorhanger notifications, or other buttons inadvertently if the location is spoofed over the user interface. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE P
location is spoofed over the user interface. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1445844
CVE ID: CVE-2019-11696 State: PUBLISHED Published: 2019-07-23T13:22:20 Last Updated: 2024-08-04T23:03:32.571Z Vendors: Mozilla Products: Firefox Problem Types: Java web start .JNLP files are not recognized as executable files for download prompts Description: Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even though they can be executed if Java is installed on the local system. This could allow users to mistakenly launch an executable binary locally. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/
dditional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1392955
CVE ID: CVE-2019-11697 State: PUBLISHED Published: 2019-07-23T13:22:10 Last Updated: 2024-08-04T23:03:32.363Z Vendors: Mozilla Products: Firefox Problem Types: Pressing key combinations can bypass installation prompt delays and install extensions Description: If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed without the install prompt delay that keeps the prompt visible in order for users to accept or decline the installation. A malicious web page could use this with spoofing on the page to trick users into installing a malicious extension. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE Program C
nto installing a malicious extension. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1440079
CVE ID: CVE-2019-11698 State: PUBLISHED Published: 2019-07-23T13:21:58 Last Updated: 2024-08-04T23:03:32.445Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Theft of user history data through drag and drop of hyperlinks to and from bookmarks Description: If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Fir
r the theft of browser history by a malicious site. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://www.mozilla.org/security/advisories/mfsa2019-15/ - https://www.mozilla.org/security/advisories/mfsa2019-14/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1543191
CVE ID: CVE-2019-11699 State: PUBLISHED Published: 2019-07-23T13:21:47 Last Updated: 2024-08-04T23:03:32.720Z Vendors: Mozilla Products: Firefox Problem Types: Incorrect domain name highlighting during page navigation Description: A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations. This could result in user confusion of which site is currently loaded for spoofing attacks. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1528939
CVE ID: CVE-2019-11700 State: PUBLISHED Published: 2019-07-23T13:21:36 Last Updated: 2024-08-04T23:03:32.537Z Vendors: Mozilla Products: Firefox Problem Types: res: protocol can be used to open known local files Description: A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution when prompted. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1549833
CVE ID: CVE-2019-11701 State: PUBLISHED Published: 2019-07-23T13:21:25 Last Updated: 2024-08-04T23:03:32.417Z Vendors: Mozilla Products: Firefox Problem Types: webcal: protocol default handler loads vulnerable web page Description: The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks. This default was left in place as a legacy feature and has now been removed. *Note: this issue only affects users with an account on the vulnerable service. Other users are unaffected.*. This vulnerability affects Firefox < 67. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://
nalyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1518627
CVE ID: CVE-2019-11702 State: PUBLISHED Published: 2019-07-23T13:21:16 Last Updated: 2024-08-04T23:03:32.359Z Vendors: Mozilla Products: Firefox Problem Types: IE protocols can be used to open known local files Description: A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a known location with Internet Explorer if a user approves execution when prompted. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 67.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-16/ - https://bugzilla.mozill
CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-16/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1552627
CVE ID: CVE-2019-11703 State: PUBLISHED Published: 2019-07-23T13:20:58 Last Updated: 2024-08-04T23:03:32.404Z Vendors: Mozilla Products: Thunderbird Problem Types: Heap buffer overflow in icalparser.c Description: A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1553820 - https://security.gentoo.org/glsa/201908-20
CVE ID: CVE-2019-11704 State: PUBLISHED Published: 2019-07-23T13:20:48 Last Updated: 2024-08-04T23:03:32.479Z Vendors: Mozilla Products: Thunderbird Problem Types: Heap buffer overflow in icalvalue.c Description: A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1553814 - https://security.gentoo.org/glsa/201908-20
CVE ID: CVE-2019-11705 State: PUBLISHED Published: 2019-07-23T13:20:34 Last Updated: 2024-08-04T23:03:32.344Z Vendors: Mozilla Products: Thunderbird Problem Types: Stack buffer overflow in icalrecur.c Description: A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1553808 - https://security.gentoo.org/glsa/201908-20
CVE ID: CVE-2019-11706 State: PUBLISHED Published: 2019-07-23T13:20:26 Last Updated: 2024-08-04T23:03:32.247Z Vendors: Mozilla Products: Thunderbird Problem Types: Type confusion in icalproperty.c Description: A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulting in a crash. This vulnerability affects Thunderbird < 60.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1555646 - https://security.gentoo.org/glsa/201908-20
CVE ID: CVE-2019-11707 State: PUBLISHED Published: 2019-07-23T13:20:17.000Z Last Updated: 2025-10-21T23:45:33.091Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Type confusion in Array.pop Description: A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2019-20/ - https://www.moz
ainer: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2019-20/ - https://www.mozilla.org/security/advisories/mfsa2019-18/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1544386 - https://security.gentoo.org/glsa/201908-12
CVE ID: CVE-2019-11708 State: PUBLISHED Published: 2019-07-23T13:20:03.000Z Last Updated: 2025-10-21T23:45:33.259Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: sandbox escape using Prompt:Open Description: Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2. Additional Analyst Notes: - CVE Progra
ability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2019-19/ - https://www.mozilla.org/security/advisories/mfsa2019-20/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1559858 - https://security.gentoo.org/glsa/201908-12 - http://packetstormsecurity.com/files/155592/Mozilla-Firefox-Windows-64-Bit-Chain-Exploit.html
CVE ID: CVE-2019-11709 State: PUBLISHED Published: 2019-07-23T13:19:53 Last Updated: 2024-08-04T23:03:32.452Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.or
ox < 68, and Thunderbird < 60.8. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-21/ - https://www.mozilla.org/security/advisories/mfsa2019-22/ - https://www.mozilla.org/security/advisories/mfsa2019-23/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1547266%2C1540759%2C1548822%2C1550498%2C1515052%2C1539219%2C1547757%2C1550498%2C1533522 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00002.ht
.debian.org/debian-lts-announce/2019/08/msg00001.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html - https://security.gentoo.org/glsa/201908-12 - https://security.gentoo.org/glsa/201908-20 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html