Not building, not tested

This package has known vulnerabilities, please investigate and fix if possible:
 CVE-2018-20167
