Fedora does not have a fix for this but Debian does. Took fix from there. There are two more CVEs as reported by uscan but I can't seem to find patches for those. Signed-off-by: Rosen Penev <rosenp@gmail.com>