root/pypi: links for cve-2015-1635