Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html - http://packetstormsecurity.com/files/159975/Chrome-ConvertToJavaBitmap-Heap-Buffer-Overflow.html - https://www.debian.org/security/2021/dsa-4824
CVE ID: CVE-2020-16012 State: PUBLISHED Published: 2021-01-08T17:48:32 Last Updated: 2024-08-04T13:30:23.546Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1088224
CVE ID: CVE-2020-16013 State: PUBLISHED Published: 2021-01-08T17:47:28.000Z Last Updated: 2025-10-21T23:35:30.538Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/1147206 - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
CVE ID: CVE-2020-16014 State: PUBLISHED Published: 2021-01-08T17:49:15 Last Updated: 2024-08-04T13:30:23.549Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1146675
CVE ID: CVE-2020-16015 State: PUBLISHED Published: 2021-01-08T17:49:28 Last Updated: 2024-08-04T13:30:23.565Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1146673
CVE ID: CVE-2020-16016 State: PUBLISHED Published: 2021-01-08T17:49:52 Last Updated: 2024-08-04T13:30:23.526Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1146679 - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_9.html
CVE ID: CVE-2020-16017 State: PUBLISHED Published: 2021-01-08T17:50:08.000Z Last Updated: 2025-10-21T23:35:30.390Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html - https://crbug.com/1146709
CVE ID: CVE-2020-16018 State: PUBLISHED Published: 2021-01-08T17:50:43 Last Updated: 2024-08-04T13:30:23.504Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1136078
CVE ID: CVE-2020-16019 State: PUBLISHED Published: 2021-01-08T17:50:57 Last Updated: 2024-08-04T13:30:23.577Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1139408
CVE ID: CVE-2020-16020 State: PUBLISHED Published: 2021-01-08T17:51:18 Last Updated: 2024-08-04T13:30:23.525Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1139411
CVE ID: CVE-2020-16021 State: PUBLISHED Published: 2021-01-08T17:51:29 Last Updated: 2024-08-04T13:30:23.505Z Vendors: Google Products: Chrome Problem Types: Race Description: Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1139414
CVE ID: CVE-2020-16022 State: PUBLISHED Published: 2021-01-08T17:51:43 Last Updated: 2024-08-04T13:37:53.067Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1145680
CVE ID: CVE-2020-16023 State: PUBLISHED Published: 2021-01-08T17:52:05 Last Updated: 2024-08-04T13:37:53.056Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1146761
CVE ID: CVE-2020-16024 State: PUBLISHED Published: 2021-01-08T17:52:24 Last Updated: 2024-08-04T13:37:53.055Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1147430 - http://packetstormsecurity.com/files/161353/Chrome-SkBitmapOperations-UnPreMultiply-Heap-Buffer-Overflow.html
CVE ID: CVE-2020-16025 State: PUBLISHED Published: 2021-01-08T17:52:24 Last Updated: 2024-08-04T13:37:53.437Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1147431 - http://packetstormsecurity.com/files/161354/Chrome-ClipboardWin-WriteBitmap-Heap-Buffer-Overflow.html
CVE ID: CVE-2020-16026 State: PUBLISHED Published: 2021-01-08T17:52:25 Last Updated: 2024-08-04T13:37:52.998Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1139153
CVE ID: CVE-2020-16027 State: PUBLISHED Published: 2021-01-08T17:52:25 Last Updated: 2024-08-04T13:37:53.421Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1116444
CVE ID: CVE-2020-16028 State: PUBLISHED Published: 2021-01-08T17:52:25 Last Updated: 2024-08-04T13:37:53.478Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1138446
CVE ID: CVE-2020-16029 State: PUBLISHED Published: 2021-01-08T17:52:25 Last Updated: 2024-08-04T13:37:53.066Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1134338
CVE ID: CVE-2020-16030 State: PUBLISHED Published: 2021-01-08T17:53:29 Last Updated: 2024-08-04T13:37:53.134Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1141350
CVE ID: CVE-2020-16031 State: PUBLISHED Published: 2021-01-08T17:53:29 Last Updated: 2024-08-04T13:37:53.230Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1133183
CVE ID: CVE-2020-16032 State: PUBLISHED Published: 2021-01-08T17:53:29 Last Updated: 2024-08-04T13:37:53.017Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1136714
CVE ID: CVE-2020-16033 State: PUBLISHED Published: 2021-01-08T17:53:30 Last Updated: 2024-08-04T13:37:53.090Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof security UI via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1143057
CVE ID: CVE-2020-16034 State: PUBLISHED Published: 2021-01-08T17:53:30 Last Updated: 2024-08-04T13:37:53.339Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1137362
CVE ID: CVE-2020-16035 State: PUBLISHED Published: 2021-01-08T17:53:30 Last Updated: 2024-08-04T13:37:53.051Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1139409
CVE ID: CVE-2020-16036 State: PUBLISHED Published: 2021-01-08T17:53:30 Last Updated: 2024-08-04T13:37:53.058Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cookie restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/830808
CVE ID: CVE-2020-16037 State: PUBLISHED Published: 2021-01-08T17:54:26 Last Updated: 2024-08-04T13:37:53.331Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1142331 - https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
CVE ID: CVE-2020-16038 State: PUBLISHED Published: 2021-01-08T17:54:27 Last Updated: 2024-08-04T13:37:53.236Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html - https://crbug.com/1138683
CVE ID: CVE-2020-16039 State: PUBLISHED Published: 2021-01-08T17:54:27 Last Updated: 2024-08-04T13:37:52.999Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html - https://crbug.com/1149177
CVE ID: CVE-2020-16040 State: PUBLISHED Published: 2021-01-08T17:54:27 Last Updated: 2024-08-04T13:37:53.018Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html - https://crbug.com/1150649 - http://packetstormsecurity.com/files/162087/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html - http://packetstormsecurity.com/files/162106/Google-Chrom
/162087/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html - http://packetstormsecurity.com/files/162106/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html - http://packetstormsecurity.com/files/162144/Google-Chrome-SimplfiedLowering-Integer-Overflow.html
CVE ID: CVE-2020-16041 State: PUBLISHED Published: 2021-01-08T17:54:27 Last Updated: 2024-08-04T13:37:53.428Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html - https://crbug.com/1151865 - http://packetstormsecurity.com/files/161581/Chrome-DataElement-Out-Of-Bounds-Read.html
CVE ID: CVE-2020-16042 State: PUBLISHED Published: 2021-01-08T17:54:27 Last Updated: 2024-08-04T13:37:53.087Z Vendors: Google Products: Chrome Problem Types: Uninitialized Use Description: Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html - https://crbug.com/1151890
CVE ID: CVE-2020-16043 State: PUBLISHED Published: 2021-01-08T17:55:39 Last Updated: 2024-08-04T13:37:53.118Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1148309 - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/pa
oo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
CVE ID: CVE-2020-16044 State: PUBLISHED Published: 2021-02-09T13:55:54 Last Updated: 2024-08-04T13:37:53.353Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1163228 - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
CVE ID: CVE-2020-16045 State: PUBLISHED Published: 2021-01-14T20:55:22 Last Updated: 2024-08-04T13:37:53.821Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html - https://crbug.com/1125614
CVE ID: CVE-2020-16046 State: PUBLISHED Published: 2021-01-14T20:55:23 Last Updated: 2024-08-04T13:37:53.365Z Vendors: Google Products: Chrome Problem Types: Script injection Description: Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html - https://crbug.com/1098606
CVE ID: CVE-2020-16048 State: PUBLISHED Published: 2021-11-02T22:40:11 Last Updated: 2024-08-04T13:37:53.598Z Vendors: n/a Products: n/a Problem Types: Out of bounds read Description: Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1174641
CVE ID: CVE-2020-16087 State: PUBLISHED Published: 2020-08-13T12:21:20 Last Updated: 2024-08-04T13:37:54.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://threatspike.com - https://github.com/VNG-Zalo - https://www.threatspike.com/blog/cve-2020-16087.html
CVE ID: CVE-2020-16088 State: PUBLISHED Published: 2020-07-28T11:46:41 Last Updated: 2024-08-04T13:37:54.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches. Additional Analyst Notes: - CVE Program Container: References: - https://www.openiked.org/security.html - https://github.com/xcllnt/openiked/commits/master - https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/014_iked.patch.sig - https://github.com/openbsd/src/commit/7afb2d41c6d373cf965285840b85c45011357115
CVE ID: CVE-2020-16091 State: REJECTED Published: 2020-11-12T17:07:55 Last Updated: 2020-11-12T17:07:55 Description: No description available.
CVE ID: CVE-2020-16092 State: PUBLISHED Published: 2020-08-11T15:55:29 Last Updated: 2024-08-04T13:37:53.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html - http://www.openwall.com/lists/oss-security/2020/08/10/1 -
ts.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html - http://www.openwall.com/lists/oss-security/2020/08/10/1 - https://security.netapp.com/advisory/ntap-20200821-0006/ - https://usn.ubuntu.com/4467-1/ - https://www.debian.org/security/2020/dsa-4760 - https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html - https://security.gentoo.org/glsa/202208-27