Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15515 State: PUBLISHED Published: 2020-07-07T15:25:44 Last Updated: 2024-08-04T13:15:20.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2020-011
CVE ID: CVE-2020-15516 State: PUBLISHED Published: 2020-07-07T13:46:10 Last Updated: 2024-08-04T13:15:20.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2020-013
CVE ID: CVE-2020-15517 State: PUBLISHED Published: 2020-07-07T13:44:23 Last Updated: 2024-08-04T13:15:20.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2020-009
CVE ID: CVE-2020-15518 State: PUBLISHED Published: 2020-07-03T10:58:45 Last Updated: 2024-08-04T13:15:20.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests. Additional Analyst Notes: - CVE Program Container: References: - https://zwclose.github.io/veeamon
CVE ID: CVE-2020-15521 State: PUBLISHED Published: 2020-09-25T06:05:44 Last Updated: 2024-08-04T13:15:20.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) . Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/applications_manager/issues.html#v14730
CVE ID: CVE-2020-15522 State: PUBLISHED Published: 2021-05-20T11:20:18 Last Updated: 2024-08-04T13:15:20.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures. Additional Analyst Notes: - CVE Program Container: References: - https://www.bouncycastle.org/releasenotes.html - https://github.com/bcgit/bc-java/wiki/CVE-2020-15522 - https://github.com/bcgit/bc-c
ouncycastle.org/releasenotes.html - https://github.com/bcgit/bc-java/wiki/CVE-2020-15522 - https://github.com/bcgit/bc-csharp/wiki/CVE-2020-15522 - https://security.netapp.com/advisory/ntap-20210622-0007/
CVE ID: CVE-2020-15523 State: PUBLISHED Published: 2020-07-04T22:54:00 Last Updated: 2024-08-04T13:15:20.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.o
) Python installation on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue29778 - https://github.com/python/cpython/pull/21297 - https://security.netapp.com/advisory/ntap-20210312-0004/
CVE ID: CVE-2020-15525 State: PUBLISHED Published: 2020-07-07T13:52:54 Last Updated: 2024-08-04T13:15:20.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/releases/categories/releases/ - https://gitlab.com/gitlab-org/gitlab/-/issues/225259 - https://about.gitlab.com/releases/2020/07/06/critical-security-release-gitlab-13-1-3-released/
CVE ID: CVE-2020-15526 State: PUBLISHED Published: 2020-07-09T16:40:52 Last Updated: 2024-08-04T13:15:20.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration > Notifications pages to disable certificate checking for alert notifications. These TLS security checks are also ignored during monitoring of VMware machines. This would make SQL Monitor vulnerable to potential man-in-the-middle attacks when sending alert notification emails, posting to Slack or posting to webhooks. The vulnerability is fi
-middle attacks when sending alert notification emails, posting to Slack or posting to webhooks. The vulnerability is fixed in version 10.1.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.red-gate.com/privacy-and-security/vulnerabilities/2020-07-08-sql-monitor
CVE ID: CVE-2020-15528 State: PUBLISHED Published: 2020-07-05T00:31:50 Last Updated: 2024-08-04T13:15:20.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks. Additional Analyst Notes: - CVE Program Container: References: - http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html
CVE ID: CVE-2020-15529 State: PUBLISHED Published: 2020-07-05T00:31:38 Last Updated: 2024-08-04T13:15:20.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak file permissions and can be exploited by using opportunistic locks. Additional Analyst Notes: - CVE Program Container: References: - http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html
CVE ID: CVE-2020-15530 State: PUBLISHED Published: 2020-07-05T00:31:24 Last Updated: 2024-08-04T13:15:20.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAMFILES(X86)%\Steam have weak permissions during a critical time window. An attacker can make this time window arbitrarily long by using opportunistic locks. Additional Analyst Notes: - CVE Program Container: References: - http://daniels-it-blog.blogspot.com/2020/07/steam-arbitrary-code-execution-part-2.html
CVE ID: CVE-2020-15531 State: PUBLISHED Published: 2020-08-19T19:22:58 Last Updated: 2024-08-04T13:15:20.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles. Additional Analyst Notes: - CVE Program Container: References: - https://www.blackhat.com/us-20/briefings/schedule/#finding-new-bluetooth-low-energy-exploits-via-reverse-engineering-multiple-vendors-firmwares-19655 - https://github.com/darkmentorllc/jackbnimble/blob
gy-exploits-via-reverse-engineering-multiple-vendors-firmwares-19655 - https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/silabs_efr32_extadv_rce.py - https://www.youtube.com/watch?v=saoTr1NwdzM - https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs
CVE ID: CVE-2020-15532 State: PUBLISHED Published: 2020-08-19T18:59:04 Last Updated: 2024-08-04T13:22:29.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles. Additional Analyst Notes: - CVE Program Container: References: - https://www.blackhat.com/us-20/briefings/schedule/#finding-new-bluetooth-low-energy-exploits-via-reverse-engineering-multiple-vendors-firmwares-19655 - https://github.com/darkmentorllc/publications/tree/ma
xploits-via-reverse-engineering-multiple-vendors-firmwares-19655 - https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs - https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/silabs_efr32_extadv_dos.py
CVE ID: CVE-2020-15533 State: PUBLISHED Published: 2020-10-01T18:44:11 Last Updated: 2024-08-04T13:22:29.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15533.html - https://www.manageengine.com/products/applications_manager/issues.html#v14750
CVE ID: CVE-2020-15535 State: PUBLISHED Published: 2020-07-05T15:14:04 Last Updated: 2024-08-04T13:22:29.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157118/WordPress-Car-Rental-System-1.3-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/10172
CVE ID: CVE-2020-15536 State: PUBLISHED Published: 2020-07-05T15:13:56 Last Updated: 2024-08-04T13:22:29.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157116/WordPress-Hotel-Booking-System-Pro-1.1-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/10171
CVE ID: CVE-2020-15537 State: PUBLISHED Published: 2020-07-05T15:13:47 Last Updated: 2024-08-04T13:22:29.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157099/Vanguard-2.1-Cross-Site-Scripting.html - https://cxsecurity.com/issue/WLB-2020040032
CVE ID: CVE-2020-15538 State: PUBLISHED Published: 2020-07-05T15:13:31 Last Updated: 2024-08-04T13:22:29.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157886/We-Com-Municipality-Portal-CMS-2.1.x-Cross-Site-Scripting-SQL-Injection.html - https://cxsecurity.com/issue/WLB-2020060011
CVE ID: CVE-2020-15539 State: PUBLISHED Published: 2020-07-05T15:13:19 Last Updated: 2024-08-04T13:22:29.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157886/We-Com-Municipality-Portal-CMS-2.1.x-Cross-Site-Scripting-SQL-Injection.html - https://cxsecurity.com/issue/WLB-2020060011
CVE ID: CVE-2020-15540 State: PUBLISHED Published: 2020-07-05T15:13:04 Last Updated: 2024-08-04T13:22:29.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2020060010 - https://packetstormsecurity.com/files/157887/We-Com-OpenData-CMS-2.0-SQL-Injection.html
CVE ID: CVE-2020-15541 State: PUBLISHED Published: 2020-07-05T21:04:29 Last Updated: 2024-08-04T13:22:29.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-2-1_release_notes.htm
CVE ID: CVE-2020-15542 State: PUBLISHED Published: 2020-07-05T21:04:05 Last Updated: 2024-08-04T13:22:29.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-2-1_release_notes.htm
CVE ID: CVE-2020-15543 State: PUBLISHED Published: 2020-07-05T21:04:16 Last Updated: 2024-08-04T13:22:29.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-2-1_release_notes.htm
CVE ID: CVE-2020-15562 State: PUBLISHED Published: 2020-07-06T11:26:09 Last Updated: 2024-08-04T13:22:29.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns (aka XML namespace) attribute of a HEAD element when an SVG element exists. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/releases/tag/1.4.7 - https://github.com/roundcube/roundcubemail/releases/tag/1.3.14 - https://github.com/roundcube/roundcubemail/releases/ta
https://github.com/roundcube/roundcubemail/releases/tag/1.3.14 - https://github.com/roundcube/roundcubemail/releases/tag/1.2.11 - https://github.com/roundcube/roundcubemail/commit/3e8832d029b035e3fcfb4c75839567a9580b4f82 - https://www.debian.org/security/2020/dsa-4720 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html
CVE ID: CVE-2020-15563 State: PUBLISHED Published: 2020-07-07T12:23:55 Last Updated: 2024-08-04T13:22:29.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HVM guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Xen versions from 4.8 onwards are affected. Xen versions 4.7 and earlier are not affected. Only x86 systems are affected. Arm s
sions from 4.8 onwards are affected. Xen versions 4.7 and earlier are not affected. Only x86 systems are affected. Arm systems are not affected. Only x86 HVM guests using shadow paging can leverage the vulnerability. In addition, there needs to be an entity actively monitoring a guest's video frame buffer (typically for display purposes) in order for such a guest to be able to leverage the vulnerability. x86 PV guests, as well as x86 HVM guests using hardware assisted paging (HAP), cannot leverage the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-319.html - http://www.openwall.com/lists/oss-security/2020/07/07/3 - https://
ces: - http://xenbits.xen.org/xsa/advisory-319.html - http://www.openwall.com/lists/oss-security/2020/07/07/3 - https://www.debian.org/security/2020/dsa-4723 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB3QJJZV23Z2IDYEMIHELWYSQBUEW6JP/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXESCOVI7AVRNC7HEAMFM7PMEO6D3AUH/ - https://security.gentoo.org/glsa/202007-02
CVE ID: CVE-2020-15564 State: PUBLISHED Published: 2020-07-07T12:25:47 Last Updated: 2024-08-04T13:22:29.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOP_register_vcpu_info. The hypercall VCPUOP_register_vcpu_info is used by a guest to register a shared region with the hypervisor. The region will be mapped into Xen address space so it can be directly accessed. On Arm, the region is accessed with instructions that require a specific alignment. Unfortunately, there is no check that the address provided by the guest will be correctl
t require a specific alignment. Unfortunately, there is no check that the address provided by the guest will be correctly aligned. As a result, a malicious guest could cause a hypervisor crash by passing a misaligned address. A malicious guest administrator may cause a hypervisor crash, resulting in a Denial of Service (DoS). All Xen versions are vulnerable. Only Arm systems are vulnerable. x86 systems are not affected. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-327.html - http://www.openwall.com/lists/oss-security/2020/07/07/5 - https://www.debian.org/security/2020/dsa-4723 - https://lists.fedoraproject.org/archives/list/package-anno
020/07/07/5 - https://www.debian.org/security/2020/dsa-4723 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB3QJJZV23Z2IDYEMIHELWYSQBUEW6JP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXESCOVI7AVRNC7HEAMFM7PMEO6D3AUH/ - https://security.gentoo.org/glsa/202007-02
CVE ID: CVE-2020-15565 State: PUBLISHED Published: 2020-07-07T12:25:00 Last Updated: 2024-08-04T13:22:29.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU, changes to them require flushing of both TLBs. Furthermore, IOMMUs may be non-coherent, and hence prior to flushing IOMMU TLBs, a CPU cache also needs writing back to memory after changes were made. Such writing back of cached data was missing in particular when splitting larg
g back to memory after changes were made. Such writing back of cached data was missing in particular when splitting large page mappings into smaller granularity ones. A malicious guest may be able to retain read/write DMA access to frames returned to Xen's free pool, and later reused for another purpose. Host crashes (leading to a Denial of Service) and privilege escalation cannot be ruled out. Xen versions from at least 3.2 onwards are affected. Only x86 Intel systems are affected. x86 AMD as well as Arm systems are not affected. Only x86 HVM guests using hardware assisted paging (HAP), having a passed through PCI device assigned, and having page table sharing enabled can leverage the vulne
paging (HAP), having a passed through PCI device assigned, and having page table sharing enabled can leverage the vulnerability. Note that page table sharing will be enabled (by default) only if Xen considers IOMMU and CPU large page size support compatible. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-321.html - http://www.openwall.com/lists/oss-security/2020/07/07/4 - https://www.debian.org/security/2020/dsa-4723 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB3QJJZV23Z2IDYEMIHELWYSQBUEW6JP/ - http://lists
ct.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB3QJJZV23Z2IDYEMIHELWYSQBUEW6JP/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXESCOVI7AVRNC7HEAMFM7PMEO6D3AUH/ - https://security.gentoo.org/glsa/202007-02
CVE ID: CVE-2020-15566 State: PUBLISHED Published: 2020-07-07T12:23:15 Last Updated: 2024-08-04T13:22:29.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channel port may fail for multiple reasons: (1) port is already in use, (2) the memory allocation failed, or (3) the port we try to allocate is higher than what is supported by the ABI (e.g., 2L or FIFO) used by the guest or the limit set by an administrator (max_event_channels in xl cfg). Due to the missing error checks, only (1) will
est or the limit set by an administrator (max_event_channels in xl cfg). Due to the missing error checks, only (1) will be considered an error. All the other cases will provide a valid port and will result in a crash when trying to access the event channel. When the administrator configured a guest to allow more than 1023 event channels, that guest may be able to crash the host. When Xen is out-of-memory, allocation of new event channels will result in crashing the host rather than reporting an error. Xen versions 4.10 and later are affected. All architectures are affected. The default configuration, when guests are created with xl/libxl, is not vulnerable, because of the default event-chann
The default configuration, when guests are created with xl/libxl, is not vulnerable, because of the default event-channel limit. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-317.html - http://www.openwall.com/lists/oss-security/2020/07/07/2 - https://www.debian.org/security/2020/dsa-4723 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB3QJJZV23Z2IDYEMIHELWYSQBUEW6JP/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40
org/opensuse-security-announce/2020-07/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXESCOVI7AVRNC7HEAMFM7PMEO6D3AUH/ - https://security.gentoo.org/glsa/202007-02