CVE-2020-28015+28021: New-line injection into spool header file