Vulnerabilities in savannah.nongnu.org software