Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-14348 State: PUBLISHED Published: 2020-09-16T17:43:39 Last Updated: 2024-08-04T12:39:36.482Z Vendors: n/a Products: AMQ Problem Types: CWE-248 Description: It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating addresses, though this does not impact upon already existing messaging clients or brokers. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1861814
CVE ID: CVE-2020-14349 State: PUBLISHED Published: 2020-08-24T12:32:13 Last Updated: 2024-08-04T12:39:36.599Z Vendors: n/a Products: PostgreSQL Problem Types: Improper Input Validation Description: It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html - http://lists.opensuse.org/opensuse
ences: - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html - https://bugzilla.redhat.com/show_bug.cgi?id=1865744 - https://security.gentoo.org/glsa/202008-13 - https://usn.ubuntu.com/4472-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.html - https://security.netapp.com/advisory/ntap-20200918-0002/
CVE ID: CVE-2020-14350 State: PUBLISHED Published: 2020-08-24T12:42:45 Last Updated: 2024-08-04T12:39:36.524Z Vendors: n/a Products: PostgreSQL Problem Types: Improper Input Validation Description: It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security
ore 9.5.23. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html - https://bugzilla.redhat.com/show_bug.cgi?id=1865746 - https://lists.debian.org/debian-lts-announce/2020/08/msg00028.html - https://security.gentoo.org/glsa/202008-13 - https://usn.ubuntu.com/4472-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html - http://lists.opensuse.org/opensuse-se
-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.html - https://security.netapp.com/advisory/ntap-20200918-0002/
CVE ID: CVE-2020-14351 State: PUBLISHED Published: 2020-12-03T16:43:22 Last Updated: 2024-08-04T12:39:36.525Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1862849 - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html - http
/bugzilla.redhat.com/show_bug.cgi?id=1862849 - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html
CVE ID: CVE-2020-14352 State: PUBLISHED Published: 2020-08-30T13:55:27 Last Updated: 2024-08-04T12:39:36.596Z Vendors: n/a Products: librepo Problem Types: CWE-22 Description: A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories. Additio
system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1866498 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OOMDEQBRJ7SO2QWL7H23G3VV2VSCUYOY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33RX4P5R5YL4NZSFSE4NOX37X6YCXAS4/ - https://lists.fedoraproject.org/archives/list/pa
e%40lists.fedoraproject.org/message/33RX4P5R5YL4NZSFSE4NOX37X6YCXAS4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XDMHVY7OMIJNSPVZ2GJWHT77Z5V3YJ55/
CVE ID: CVE-2020-14353 State: REJECTED Published: 2020-08-14T19:06:49 Last Updated: 2020-08-14T19:06:49 Description: No description available.
CVE ID: CVE-2020-14354 State: PUBLISHED Published: 2021-05-13T13:38:56 Last Updated: 2024-08-04T12:39:36.541Z Vendors: n/a Products: c-ares Problem Types: CWE-120 Description: A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ - https://bugzilla.redhat.com/sh
st/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ - https://bugzilla.redhat.com/show_bug.cgi?id=1866838 - https://packetstormsecurity.com/files/158755/GS20200804145053.txt - https://c-ares.haxx.se/changelog.html - https://github.com/c-ares/c-ares/commit/1cc7e83c3bdfaafbc5919c95025592d8de3a170e
CVE ID: CVE-2020-14355 State: PUBLISHED Published: 2020-10-07T14:41:18 Last Updated: 2024-08-04T12:39:36.601Z Vendors: n/a Products: spice Problem Types: CWE-120 Description: Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?
de execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1868435 - https://www.openwall.com/lists/oss-security/2020/10/06/10 - https://www.debian.org/security/2020/dsa-4771 - https://usn.ubuntu.com/4572-1/ - https://usn.ubuntu.com/4572-2/ - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00000.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00002.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00001.html
CVE ID: CVE-2020-14356 State: PUBLISHED Published: 2020-08-19T14:37:50 Last Updated: 2024-08-04T12:39:36.532Z Vendors: n/a Products: Kernel Problem Types: Use After Free Description: A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1868453 - https://bugzilla.kernel.org/show_bug.cgi?id=208003 - https://lore.kernel.org/netdev/CAM_iQpUKQJrj8wE+Qa8NGR3P0L+5Uz=qo-O5+k_P60HzTde6aw%40mail.gmail.com/t/ - h
i?id=208003 - https://lore.kernel.org/netdev/CAM_iQpUKQJrj8wE+Qa8NGR3P0L+5Uz=qo-O5+k_P60HzTde6aw%40mail.gmail.com/t/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html - https://security.netapp.com/advisory/ntap-20200904-0002/ - https://usn.ubuntu.com/4484-1/ - https://usn.ubuntu.com/4483-1/ - https://usn.ubuntu.com/4526-1/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-14357 State: REJECTED Published: 2020-08-20T13:39:28 Last Updated: 2020-08-20T13:39:28 Description: No description available.
CVE ID: CVE-2020-14358 State: REJECTED Published: 2021-03-17T14:52:50 Last Updated: 2021-03-17T14:52:50 Description: No description available.
CVE ID: CVE-2020-14359 State: PUBLISHED Published: 2021-02-23T12:42:06 Last Updated: 2024-08-04T12:39:36.641Z Vendors: n/a Products: keycloak Problem Types: CWE-305 Description: A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an attacker can bypass our Gatekeeper. Lower case headers are also accepted by some webservers (e.g. Jetty). This means there is no protection when we put a Gatekeeper in front of a Jetty server and use lowercase headers. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1868591 - https://issues.jboss.org/browse/KEYCLOAK-14090
CVE ID: CVE-2020-14360 State: PUBLISHED Published: 2021-01-20T15:18:20 Last Updated: 2024-08-04T12:39:36.530Z Vendors: n/a Products: xorg-x11-server Problem Types: CWE-119 Description: A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.x.org/archives/xorg-announce/2020-December/003066.html - https://bugzilla.redhat.com/show_bug.cgi?id=1869139
CVE ID: CVE-2020-14361 State: PUBLISHED Published: 2020-09-15T00:00:00 Last Updated: 2024-08-04T12:46:33.907Z Vendors: n/a Products: xorg-x11-server Problem Types: CWE-191 Description: A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.x.org/archives/xorg-announce/2020-August/003058.html - https://bugzilla.redhat.com/show_bug.cgi?id=1869142 - https://usn.ubuntu.com/4488-2/ - https://sec
-August/003058.html - https://bugzilla.redhat.com/show_bug.cgi?id=1869142 - https://usn.ubuntu.com/4488-2/ - https://security.gentoo.org/glsa/202012-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-1418/
CVE ID: CVE-2020-14362 State: PUBLISHED Published: 2020-09-15T00:00:00 Last Updated: 2024-08-04T12:46:33.327Z Vendors: n/a Products: xorg-x11-server Problem Types: CWE-191 Description: A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.x.org/archives/xorg-announce/2020-August/003058.html - https://bugzilla.redhat.com/show_bug.cgi?id=1869144 - https://usn.ubuntu.com/4488-2/ - https://sec
-August/003058.html - https://bugzilla.redhat.com/show_bug.cgi?id=1869144 - https://usn.ubuntu.com/4488-2/ - https://security.gentoo.org/glsa/202012-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-1419/
CVE ID: CVE-2020-14363 State: PUBLISHED Published: 2020-09-11T18:02:24 Last Updated: 2024-08-04T12:46:34.044Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: The X11 Project Products: libX11 Problem Types: CWE-190, CWE-416 Description: An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ruia-ruia/Explo
system availability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ruia-ruia/Exploits/blob/master/DFX11details.txt - https://github.com/Ruia-ruia/Exploits/blob/master/x11doublefree.sh - https://lists.x.org/archives/xorg-announce/2020-August/003056.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14363 - https://usn.ubuntu.com/4487-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7AVXCQOSCAPKYYHFIJAZ6E2C7LJBTLXF/
CVE ID: CVE-2020-14364 State: PUBLISHED Published: 2020-08-31T17:11:52 Last Updated: 2024-08-04T12:46:34.192Z Vendors: n/a Products: QEMU Problem Types: CWE-125 Description: An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host. Additional Analyst Notes: - CVE Program Container: References: - https
h the privileges of the QEMU process on the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1869201 - https://www.openwall.com/lists/oss-security/2020/08/24/3 - https://www.openwall.com/lists/oss-security/2020/08/24/2 - https://www.debian.org/security/2020/dsa-4760 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTZQUQ6ZBPMFMNAUQBVJFELYNMUZLL6P/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52WIRMZL6TZRYZ65N6OAYNNFHV62O2N/ - https://usn.ubuntu.com/4511-1/
st/package-announce%40lists.fedoraproject.org/message/M52WIRMZL6TZRYZ65N6OAYNNFHV62O2N/ - https://usn.ubuntu.com/4511-1/ - https://security.netapp.com/advisory/ntap-20200924-0006/ - https://security.gentoo.org/glsa/202009-14 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html - https://security.gentoo.org/glsa/202011-09
CVE ID: CVE-2020-14365 State: PUBLISHED Published: 2020-09-23T12:25:47 Last Updated: 2024-08-04T12:46:33.762Z Vendors: n/a Products: ansible Problem Types: CWE-347 Description: A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability. Additional Analyst No
ation scripts. The highest threat from this vulnerability is to integrity and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1869154 - https://www.debian.org/security/2021/dsa-4950
CVE ID: CVE-2020-14366 State: PUBLISHED Published: 2020-11-09T16:50:08 Last Updated: 2024-08-04T12:46:33.307Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Red Hat Products: keycloak Problem Types: CWE-22 Description: A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14366
CVE ID: CVE-2020-14367 State: PUBLISHED Published: 2020-08-24T14:07:19 Last Updated: 2024-08-04T12:46:33.289Z Vendors: n/a Products: Chrony Problem Types: CWE-59 Description: A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writing, chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversa
pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversal. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WKABKNLCSC3MACCWU6OM2YGWVWFWFMU/ - https://bugzilla.redhat.com/show_bug.cgi?id=1870298 - https://security.gentoo.org/glsa/202008-23 - https://usn.ubuntu.com/4475-1/
CVE ID: CVE-2020-14368 State: PUBLISHED Published: 2020-12-14T20:05:10 Last Updated: 2024-08-04T12:46:33.326Z Vendors: n/a Products: eclipse Problem Types: CWE-352 Description: A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cookies authentication, Theia IDE doesn't properly set the SameSite value, allowing a Cross-Site Request Forgery (CSRF) and consequently allowing a cross-site WebSocket hijack on Theia IDE. This flaw allows an attacker to gain full access to the victim's workspace through the /services endpoint. To perform a successful attack, the attacker conducts a Man-in-the-middle attack (MITM) and tricks the victim
endpoint. To perform a successful attack, the attacker conducts a Man-in-the-middle attack (MITM) and tricks the victim into executing a request via an untrusted link, which performs the CSRF and the Socket hijack. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1823892
CVE ID: CVE-2020-14369 State: PUBLISHED Published: 2020-12-02T14:28:04 Last Updated: 2024-08-04T12:46:33.285Z Vendors: n/a Products: CloudForms Problem Types: CWE-352 Description: This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash file which can force the user to perform state changing requests like provisioning VMs, running ansible playbooks and so forth. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show
laybooks and so forth. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1871921
CVE ID: CVE-2020-14370 State: PUBLISHED Published: 2020-09-23T00:00:00 Last Updated: 2024-08-04T12:46:33.326Z Vendors: n/a Products: podman Problem Types: CWE-212 Description: An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables. Additional Analyst Notes: - CVE Program Container: Referen
ain access to sensitive information stored in such variables. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1874268 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6BPCZX4ASKNONL3MSCK564IVXNYSKLP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y74V7HGQBNLT6XECCSNZNFZIB7G7XSAR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4Y2FSGQWP4AFT5AZ6UBN6RKHVXUBRFV/
CVE ID: CVE-2020-14371 State: PUBLISHED Published: 2021-06-02T12:12:04 Last Updated: 2024-08-04T12:46:33.314Z Vendors: n/a Products: Red Hat Satellite Problem Types: CWE-200 Description: A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1873131
CVE ID: CVE-2020-14372 State: PUBLISHED Published: 2021-03-03T16:40:36 Last Updated: 2024-08-04T12:46:33.294Z Vendors: n/a Products: grub2 Problem Types: CWE-184 Description: A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the Linux kernel lockdown variable content directly into memory. The table is further loaded and executed by the kernel, defeating its Secure Boot lockdown and allowing the attacker to load unsigned code. The highest threat from this vulnerability is
its Secure Boot lockdown and allowing the attacker to load unsigned code. The highest threat from this vulnerability is to data confidentiality and integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1873150 - https://access.redhat.com/security/vulnerabilities/RHSB-2021-003 - https://security.netapp.com/advisory/ntap-20210416-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/ - https://security.gentoo.org/glsa/202104-05