Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3448 State: PUBLISHED Published: 2021-04-08T22:06:45 Last Updated: 2024-08-03T16:53:17.620Z Vendors: n/a Products: dnsmasq Problem Types: CWE-358 Description: A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity. Additional Analyst Notes: - CVE Program Container: R
r. The highest threat from this vulnerability is to data integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939368 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/ - https://security.gentoo.org/glsa/202105-20 - https://www.oracle.com/security-alerts/cpujan2022.html
CVE ID: CVE-2021-3449 State: PUBLISHED Published: 2021-03-25T14:25:13.659307Z Last Updated: 2024-09-17T03:43:55.497Z Vendors: OpenSSL Products: OpenSSL Problem Types: NULL pointer dereference Description: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuratio
rvice attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j). Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20210325.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-G
57eeb207f52181f735d96148 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd - https://www.debian.org/security/2021/dsa-4875 - http://www.openwall.com/lists/oss-security/2021/03/27/1 - http://www.openwall.com/lists/oss-security/2021/03/27/2 - http://www.openwall.com/lists/oss-security/2021/03/28/3 - http://www.openwall.com/lists/oss-security/2021/03/28/4 - https://security.gentoo.org/glsa/202103-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/ - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-10 - https://
SYNP/ - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-10 - https://www.tenable.com/security/tns-2021-09 - https://security.netapp.com/advisory/ntap-20210513-0002/ - https://security.netapp.com/advisory/ntap-20210326-0006/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc - https://www.tenable.com/security/tns-2021-06 - https://www.tenable.com/security/tns-2021-05 - https://kc.mcafee.com/corporate/index?page=content&id=SB10356 - https://www.oracle.com//security-alerts/cpujul2021.html - https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845 -
tal.siemens.com/productcert/pdf/ssa-772220.pdf - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013 - https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2021-3450 State: PUBLISHED Published: 2021-03-25T14:25:14.287899Z Last Updated: 2024-09-17T03:07:10.879Z Vendors: OpenSSL Products: OpenSSL Problem Types: Invalid Certificate Verification Description: The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was ove
ck meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an applicatio
ault in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j). Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20210325.
-1.1.1j). Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20210325.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd - http://www.openwall.com/lists/oss-security/2021/03/27/1 - http://www.openwall.com/lists/oss-security/2021/03/27/2 - http://www.openwall.com/lists/oss-security/2021/03/28/3 - http://www.openwall.com/lists/oss-security/2021/03/28/4 - https://security.gentoo.org/glsa/202103-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.o
urity.gentoo.org/glsa/202103-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/ - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-09 - https://security.netapp.com/advisory/ntap-20210326-0006/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc - https://www.tenable.com/security/tns-2021-05 - https://kc.mcafee.com/corporate/index?page=content&id=SB10356 - https://www.tenable.com/security/tns-2021-08 - https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html - https://www.oracle.com//security-alerts/cpujul2021.html - https:/
rg/pipermail/openssl-announce/2021-March/000198.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013 - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-3451 State: PUBLISHED Published: 2021-04-27T15:27:31 Last Updated: 2024-08-03T16:53:17.757Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: PCManager Problem Types: CWE-276 Description: A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_196156.html
CVE ID: CVE-2021-3452 State: PUBLISHED Published: 2021-07-16T20:30:16 Last Updated: 2024-08-03T16:53:17.620Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: ThinkPad BIOS Problem Types: CWE-20 Description: A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-65529
CVE ID: CVE-2021-3453 State: PUBLISHED Published: 2021-07-16T20:30:17.000Z Last Updated: 2025-07-24T03:55:24.958Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-693 Description: Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-65529
CVE ID: CVE-2021-3454 State: PUBLISHED Published: 2021-10-19T22:50:09.038849Z Last Updated: 2024-09-17T00:01:39.510Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-130, CWE-617 Description: Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/adv
dditional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3
CVE ID: CVE-2021-3455 State: PUBLISHED Published: 2021-10-19T22:25:09.479971Z Last Updated: 2024-09-16T18:38:53.853Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-416 Description: Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vp Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vp
CVE ID: CVE-2021-3456 State: PUBLISHED Published: 2022-03-30T16:01:42 Last Updated: 2024-08-03T16:53:17.591Z Vendors: n/a Products: smart_proxy_salt Problem Types: CWE-863 Description: An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_
system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1941001
CVE ID: CVE-2021-3457 State: PUBLISHED Published: 2021-05-12T14:23:29 Last Updated: 2024-08-03T16:53:17.531Z Vendors: n/a Products: smart_proxy_shellhooks Problem Types: CWE-863 Description: An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redh
ntegrity and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1940990
CVE ID: CVE-2021-3458 State: PUBLISHED Published: 2021-08-17T16:25:22 Last Updated: 2024-08-03T16:53:17.704Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Motorola Products: MM1000 MoCA Adapter Problem Types: CWE-287 Description: The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified. Additional Analyst Notes: - CVE Program Container: References: - https://motorolamentor.zendesk.com/hc/en-us/articles/1260804047750
CVE ID: CVE-2021-3459 State: PUBLISHED Published: 2021-08-17T16:25:24 Last Updated: 2024-08-03T16:53:17.555Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Motorola Products: MM1000 MoCA Adapter Problem Types: CWE-78 Description: A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary privileged commands to be executed on the adapter. Additional Analyst Notes: - CVE Program Container: References: - https://motorolamentor.zendesk.com/hc/en-us/articles/1260804047750
CVE ID: CVE-2021-3460 State: PUBLISHED Published: 2021-04-13T20:41:43 Last Updated: 2024-08-03T16:53:17.619Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Motorola Products: MH702x Problem Types: CWE-295 Description: The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being accessible by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://motorolamentor.zendesk.com/hc/en-us/articles/1260804087249
CVE ID: CVE-2021-3461 State: PUBLISHED Published: 2022-04-01T22:17:45 Last Updated: 2024-08-03T16:53:17.756Z Vendors: n/a Products: keycloak Problem Types: CWE-613 Description: A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name]. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1941565
CVE ID: CVE-2021-3462 State: PUBLISHED Published: 2021-04-13T20:41:44 Last Updated: 2024-08-03T16:53:17.876Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Power Management Driver for Windows 10 Problem Types: CWE-276 Description: A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-59174
CVE ID: CVE-2021-3463 State: PUBLISHED Published: 2021-04-13T20:41:44 Last Updated: 2024-08-03T16:53:17.802Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Power Management Driver for Windows 10 Problem Types: CWE-476 Description: A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-59174
CVE ID: CVE-2021-3464 State: PUBLISHED Published: 2021-04-27T15:27:31 Last Updated: 2024-08-03T16:53:17.612Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PCManager Problem Types: CWE-427 Description: A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_196156.html
CVE ID: CVE-2021-3465 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-3466 State: PUBLISHED Published: 2021-03-25T00:00:00 Last Updated: 2024-08-03T16:53:17.627Z Vendors: n/a Products: libmicrohttpd Problem Types: CWE-120 Description: A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Only version 0.9.70 is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939127 - https://lists.fedoraproject.
CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939127 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4334XJNDJPYQNFE6S3S2KUJJ7TMHYCWL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5NEPVGP3L2CZHLZ4UB44PEILHKPDBOG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75HDMREKITMGPGE62NP7KE62ZJVLETXN/ - https://security.gentoo.org/glsa/202311-08
CVE ID: CVE-2021-3467 State: PUBLISHED Published: 2021-03-25T18:45:41 Last Updated: 2024-08-03T16:53:17.550Z Vendors: n/a Products: jasper Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1942097 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWAIUFNIUCGS2IMGGDTWZIUIY7BNLGKF/
CVE ID: CVE-2021-3468 State: PUBLISHED Published: 2021-06-02T15:09:21.000Z Last Updated: 2025-02-13T16:28:23.614Z Vendors: n/a Products: avahi Problem Types: CWE-835 Description: A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939614 - http
itional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939614 - https://lists.debian.org/debian-lts-announce/2022/06/msg00009.html - https://lists.debian.org/debian-lts-announce/2023/06/msg00028.html
CVE ID: CVE-2021-3469 State: PUBLISHED Published: 2021-06-03T19:43:42 Last Updated: 2024-08-03T16:53:17.620Z Vendors: n/a Products: Foreman Problem Types: CWE-863 Description: Foreman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling flaw. An authenticated attacker can impersonate the foreman-proxy if product enable the Puppet Certificate authority (CA) to sign certificate requests that have subject alternative names (SANs). Foreman do not enable SANs by default and `allow-authorization-extensions` is set to `false` unless user change `/etc/puppetlabs/puppetserver/conf.d/ca.conf` configuration explicitly. Additional Analyst Notes: - CVE Program Containe
`/etc/puppetlabs/puppetserver/conf.d/ca.conf` configuration explicitly. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943630
CVE ID: CVE-2021-3470 State: PUBLISHED Published: 2021-03-31T13:44:13 Last Updated: 2024-08-03T16:53:17.725Z Vendors: n/a Products: redis Problem Types: CWE-119 Description: A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943623
CVE ID: CVE-2021-3471 State: REJECTED Published: 2021-04-13T20:41:45 Last Updated: 2021-04-13T20:41:45 Description: No description available.
CVE ID: CVE-2021-3472 State: PUBLISHED Published: 2021-04-26T14:29:54 Last Updated: 2024-08-03T16:53:17.617Z Vendors: n/a Products: xorg-x11-server Problem Types: CWE-191 Description: A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/04/13/1 - https://lists.debian.org/debian-lts-announce/2021/04/msg00013.html - https://lists.fedoraproject.org/archives/list/package-
ps://lists.debian.org/debian-lts-announce/2021/04/msg00013.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6S5OPXUDYBSRSVWVLFLJ6AFERG4HNY/ - https://www.debian.org/security/2021/dsa-4893 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEXPCLMVU25AUZTUXC4MYBGPKOAIM5TW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDF7TAJE7NPZPNVOXSD5HBIFLNPUOD2V/ - https://www.zerodayinitiative.com/advisories/ZDI-21-463/ - https://lists.x.org/archives/xorg-announce/2021-April/003080.html - https://lists.fedoraproject.org/archives/list/package-announ
lists.x.org/archives/xorg-announce/2021-April/003080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N63KL3T22HNFT4FJ7VMVF6U5Q4RFJIQF/ - https://bugzilla.redhat.com/show_bug.cgi?id=1944167 - https://lists.x.org/archives/xorg-announce/2021-April/003080.html - https://seclists.org/oss-sec/2021/q2/20 - https://www.tenable.com/plugins/nessus/148701 - https://gitlab.freedesktop.org/xorg/xserver/-/commit/7aaf54a1884f71dc363f0b884e57bcb67407a6cd - https://security.gentoo.org/glsa/202104-02