Add old tarball links
Update CVE IDs