[PATCH 0/4] fixes CVE-2020-12351 and CVE-2020-12352