Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-23106 State: PUBLISHED Published: 2022-01-12T00:00:00 Last Updated: 2024-08-03T03:36:19.211Z Vendors: Jenkins project Products: Jenkins Configuration as Code Plugin Description: Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2141 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23107 State: PUBLISHED Published: 2022-01-12T19:06:06 Last Updated: 2024-08-03T03:36:19.199Z Vendors: Jenkins project Products: Jenkins Warnings Next Generation Plugin Description: Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific files with a hard-coded suffix on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2090 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23108 State: PUBLISHED Published: 2022-01-12T19:06:08 Last Updated: 2024-08-03T03:36:19.201Z Vendors: Jenkins project Products: Jenkins Badge Plugin Description: Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2547 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23109 State: PUBLISHED Published: 2022-01-12T19:06:09 Last Updated: 2024-08-03T03:36:19.195Z Vendors: Jenkins project Products: Jenkins HashiCorp Vault Plugin Description: Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2213 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23110 State: PUBLISHED Published: 2022-01-12T19:06:11 Last Updated: 2024-08-03T03:36:19.206Z Vendors: Jenkins project Products: Jenkins Publish Over SSH Plugin Description: Jenkins Publish Over SSH Plugin 1.22 and earlier does not escape the SSH server name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2287 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23111 State: PUBLISHED Published: 2022-01-12T19:06:13 Last Updated: 2024-08-03T03:36:19.206Z Vendors: Jenkins project Products: Jenkins Publish Over SSH Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2290 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23112 State: PUBLISHED Published: 2022-01-12T19:06:15 Last Updated: 2024-08-03T03:36:19.173Z Vendors: Jenkins project Products: Jenkins Publish Over SSH Plugin Description: A missing permission check in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers with Overall/Read access to connect to an attacker-specified SSH server using attacker-specified credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2290 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23113 State: PUBLISHED Published: 2022-01-12T19:06:17 Last Updated: 2024-10-15T17:14:13.043Z Vendors: Jenkins project Products: Jenkins Publish Over SSH Plugin Description: Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2307 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23114 State: PUBLISHED Published: 2022-01-12T19:06:19 Last Updated: 2024-08-03T03:36:20.028Z Vendors: Jenkins project Products: Jenkins Publish Over SSH Plugin Description: Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2291 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23115 State: PUBLISHED Published: 2022-01-12T19:06:21 Last Updated: 2024-08-03T03:36:19.192Z Vendors: Jenkins project Products: Jenkins batch task Plugin Description: Cross-site request forgery (CSRF) vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1025 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23116 State: PUBLISHED Published: 2022-01-12T19:06:23 Last Updated: 2024-08-03T03:36:19.213Z Vendors: Jenkins project Products: Jenkins Conjur Secrets Plugin Description: Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2522%20%281%29 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23117 State: PUBLISHED Published: 2022-01-12T19:06:25 Last Updated: 2024-08-03T03:36:20.033Z Vendors: Jenkins project Products: Jenkins Conjur Secrets Plugin Description: Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2522%20%282%29 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23118 State: PUBLISHED Published: 2022-01-12T19:06:27 Last Updated: 2024-11-19T19:01:27.534Z Vendors: Jenkins project Products: Jenkins Debian Package Builder Plugin Description: Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2546 - http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE ID: CVE-2022-23119 State: PUBLISHED Published: 2022-01-20T18:11:17 Last Updated: 2024-08-03T03:36:19.202Z Vendors: Trend Micro Products: Trend Micro Deep Security Agent for Linux Problem Types: Directory Traversal Description: A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the target Deep Security Manager (DSM) or the target agent must be not yet activated or configured in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Referenc
ivated or configured in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290104 - https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt
CVE ID: CVE-2022-23120 State: PUBLISHED Published: 2022-01-20T18:11:18 Last Updated: 2024-08-03T03:36:19.169Z Vendors: Trend Micro Products: Trend Micro Deep Security Agent for Linux Problem Types: Code Injection LPE Description: A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.c
xploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290104 - https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt
CVE ID: CVE-2022-23121 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-11-04T19:12:53.329Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Netatalk Products: Netatalk Problem Types: CWE-755 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parse_entries function. The issue results from the lack of proper error handling when parsing AppleDouble entries. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15819. Additional An
es. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15819. Additional Analyst Notes: - CVE Program Container: References: - https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html - https://www.zerodayinitiative.com/advisories/ZDI-22-527/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html - https://lists.debian.org/debian-lts-announce/2023/06/msg00000.html - https://www.debian.org/security/2023/dsa-5503 - https://security.gentoo.org/glsa/202311-02
CVE ID: CVE-2022-23122 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-11-04T19:12:54.404Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Netatalk Products: Netatalk Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code i
prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15837. Additional Analyst Notes: - CVE Program Container: References: - https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html - https://www.zerodayinitiative.com/advisories/ZDI-22-529/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html - https://www.debian.org/security/2023/dsa-5503 - https://security.gentoo.org/glsa/202311-02
CVE ID: CVE-2022-23123 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-11-04T19:12:55.489Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Netatalk Products: Netatalk Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getdirparams method. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerab
n result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-15830. Additional Analyst Notes: - CVE Program Container: References: - https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html - https://www.zerodayinitiative.com/advisories/ZDI-22-528/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00016.html - https://www.debian.org/security/2023/dsa-5503 - https://security.gentoo.org/glsa/202311-02
CVE ID: CVE-2022-23124 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-11-04T19:12:56.576Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Netatalk Products: Netatalk Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the get_finderinfo method. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulner
can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-15870. Additional Analyst Notes: - CVE Program Container: References: - https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html - https://www.zerodayinitiative.com/advisories/ZDI-22-525/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html - https://www.debian.org/security/2023/dsa-5503 - https://security.gentoo.org/glsa/202311-02
CVE ID: CVE-2022-23125 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-11-04T19:12:57.658Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Netatalk Products: Netatalk Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to e
supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15869. Additional Analyst Notes: - CVE Program Container: References: - https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html - https://www.zerodayinitiative.com/advisories/ZDI-22-526/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html - https://www.debian.org/security/2023/dsa-5503 - https://security.gentoo.org/glsa/202311-02
CVE ID: CVE-2022-23126 State: PUBLISHED Published: 2022-01-24T18:07:18 Last Updated: 2024-08-03T03:36:19.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeslaMate before 1.25.1 (when using the default Docker configuration) allows attackers to open doors of Tesla vehicles, start Keyless Driving, and interfere with vehicle operation en route. This occurs because an attacker can leverage Grafana login access to obtain a token for Tesla API calls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adriankumpf/teslamate/commit/fff6915e7364f83b3030f980d5743299c4e5260d - https://twitter.com/teslascope/status/1481252837174624258 - https://github.com/a
6915e7364f83b3030f980d5743299c4e5260d - https://twitter.com/teslascope/status/1481252837174624258 - https://github.com/adriankumpf/teslamate/compare/v1.25.0...v1.25.1 - https://github.com/adriankumpf/teslamate/releases/tag/v1.25.1 - https://medium.com/%40david_colombo/how-i-got-access-to-25-teslas-around-the-world-by-accident-and-curiosity-8b9ef040a028
CVE ID: CVE-2022-23127 State: PUBLISHED Published: 2022-01-21T18:17:32 Last Updated: 2024-08-03T03:36:20.098Z Vendors: n/a Products: Mitsubishi Electric MC Works64; ICONICS MobileHMI Problem Types: Cross-site Scripting Description: Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the acquired authentication information, by injecting a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an ap
g a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an application for mobile devices and leading a legitimate user to access this URL. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/vu/JVNVU95403720/index.html - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-025_en.pdf - https://www.cisa.gov/uscert/ics/advisories/icsa-22-020-01
CVE ID: CVE-2022-23128 State: PUBLISHED Published: 2022-01-21T18:17:33 Last Updated: 2024-08-03T03:36:19.863Z Vendors: n/a Products: Mitsubishi Electric MC Works64; ICONICS GENESIS64; ICONICS Hyper Historian; ICONICS AnalytiX; ICONICS MobileHMI Problem Types: Incomplete List of Disallowed Inputs Description: Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMI versions 10.95.3 to 10.97 allows a remote unauthenticated attacker to bypass the authenti
to 10.97 and ICONICS MobileHMI versions 10.95.3 to 10.97 allows a remote unauthenticated attacker to bypass the authentication of MC Works64, GENESIS64, Hyper Historian, AnalytiX and MobileHMI, and gain unauthorized access to the products, by sending specially crafted WebSocket packets to FrameWorX server, one of the functions of the products. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/vu/JVNVU95403720/index.html - https://www.cisa.gov/uscert/ics/advisories/icsa-22-020-01 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-026_en.pdf
CVE ID: CVE-2022-23129 State: PUBLISHED Published: 2022-01-21T18:17:31 Last Updated: 2024-08-03T03:36:19.744Z Vendors: n/a Products: Mitsubishi Electric MC Works64; ICONICS GENESIS64 Problem Types: Plaintext Storage of a Password Description: Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is sa
a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/vu/JVNVU95403720/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-027_en.pdf
CVE ID: CVE-2022-23130 State: PUBLISHED Published: 2022-01-21T18:17:30 Last Updated: 2024-08-03T03:36:19.772Z Vendors: n/a Products: Mitsubishi Electric MC Works64; ICONICS GENESIS64; ICONICS Hyper Historian Problem Types: Buffer Over-read Description: Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.97 and prior and ICONICS Hyper Historian versions 10.97 and prior allows an attacker to cause a DoS condition in the database server by getting a legitimate user to import a configuration file containing specially crafted stored procedures into GENESIS64 or MC Works64 and execute commands against
figuration file containing specially crafted stored procedures into GENESIS64 or MC Works64 and execute commands against the database from GENESIS64 or MC Works64. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-028_en.pdf - https://jvn.jp/vu/JVNVU95403720/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01
CVE ID: CVE-2022-23131 State: PUBLISHED Published: 2022-01-13T15:50:39.137Z Last Updated: 2025-10-21T23:15:49.275Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Zabbix Products: Frontend Problem Types: CWE-290 Description: In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user
perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-20350
CVE ID: CVE-2022-23132 State: PUBLISHED Published: 2022-01-13T15:50:40.425Z Last Updated: 2025-11-03T21:45:50.064Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Zabbix Products: Proxy, Server Problem Types: CWE-284 Description: During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level Additional Analyst Notes: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-20341 - https://lists.fedoraproject.org/archives/list/package-announce%40lists
: - https://support.zabbix.com/browse/ZBX-20341 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7/