[PATCH 0/2] fixes CVE-2020-8648