https://sources.debian.org/data/main/p/plib/1.8.5-8/debian/patches/04_CVE-2011-4620.diff

--- a/src/util/ulError.cxx
+++ b/src/util/ulError.cxx
@@ -39,7 +39,7 @@
 {
   va_list argp;
   va_start ( argp, fmt ) ;
-  vsprintf ( _ulErrorBuffer, fmt, argp ) ;
+  vsnprintf ( _ulErrorBuffer, sizeof(_ulErrorBuffer), fmt, argp ) ;
   va_end ( argp ) ;
  
   if ( _ulErrorCB )
<tr>
<td class='logo' rowspan='2'><a href='/'><img src='https://git.koszko.org/cgit-static/cgit.png' alt='cgit logo'/></a></td>
<td class='main'><a href='/'>index</a> : <a href='/guix/'>guix</a></td><td class='form'><form method='get'>
<input type='hidden' name='id' value='305e90161ad0b50f756123edac0b982ba77a154a'/><select name='h' onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=305e90161ad0b50f756123edac0b982ba77a154a'>refs</a><a class='active' href='/guix/log/gnu/system/locale.scm'>log</a><a href='/guix/tree/gnu/system/locale.scm?id=305e90161ad0b50f756123edac0b982ba77a154a'>tree</a><a href='/guix/commit/gnu/system/locale.scm?id=305e90161ad0b50f756123edac0b982ba77a154a'>commit</a><a href='/guix/diff/gnu/system/locale.scm?id=305e90161ad0b50f756123edac0b982ba77a154a'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/system/locale.scm'>
<input type='hidden' name='id' value='305e90161ad0b50f756123edac0b982ba77a154a'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=305e90161ad0b50f756123edac0b982ba77a154a'>root</a>/<a href='/guix/log/gnu?id=305e90161ad0b50f756123edac0b982ba77a154a'>gnu</a>/<a href='/guix/log/gnu/system?id=305e90161ad0b50f756123edac0b982ba77a154a'>system</a>/<a href='/guix/log/gnu/system/locale.scm?id=305e90161ad0b50f756123edac0b982ba77a154a'>locale.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/system/locale.scm?id=305e90161ad0b50f756123edac0b982ba77a154a&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-05-15 00:01:39 +0200'>2020-05-15</span></td><td><a href='/guix/commit/gnu/system/locale.scm?id=4daa7a85b41c10d70893675edf1ac61ebd3bf746'>locale: Use the native gzip and libc when building locales.</a><span class='msg-avail'>...<span class='msg-tooltip'>This fixes system cross-compilation.

* gnu/system/locale.scm (single-locale-directory)[build]: Use the native
GZIP and LIBC.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-05-03 17:25:28 +0200'>2020-05-03</span></td><td><a href='/guix/commit/gnu/system/locale.scm?id=0eed77127592323d89f56c215a15374a1aaae110'>locale: Add glibc 2.29 to '%default-locale-libcs'.</a><span class='msg-avail'>...<span class='msg-tooltip'>This eases transition for anyone reconfiguring and still having profiles
with packages using the former libc.

* gnu/system/locale.scm (%default-locale-libcs): Add GLIBC-2.29.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-02-12 11:09:11 +0100'>2020-02-12</span></td><td><a href='/guix/commit/gnu/system/locale.scm?id=f30d84d32db0f4f6cb84e139868e1727a7dc0a51'>system: locale: Remove canonical-package call.</a><span class='msg-avail'>...<span class='msg-tooltip'>This is a follow-up of dfc8ccbf5da96a67eb1cade499f0def21e7fdb02. Building
locales using the same glibc as the one programs are linked against is
enough.

* gnu/system/locale.scm (%default-locale-libcs): Use the plain glibc package.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2020-02-11 13:54:45 +0100'>2020-02-11</span></td><td><a href='/guix/commit/gnu/system/locale.scm?id=dfc8ccbf5da96a67eb1cade499f0def21e7fdb02'>system: Stop using canonical-package.</a><span class='msg-avail'>...<span class='msg-tooltip'>Usage of canonical-package outside of thunked fields breaks cross-compilation,
see: https://lists.gnu.org/archive/html/guix-devel/2019-12/msg00410.html.

* gnu/installer.scm (installer-program): Remove canonical-package.
* gnu/services/base.scm (&lt;nscd-cache&gt;): Ditto,
(%base-services): ditto.
* gnu/services/xorg.scm: Remove useless canonical-package import.
* gnu/system.scm (%base-packages): Remove canonical-package.
* gnu/system/install.scm (%installation-services): Ditto,
(installation-os): ditto.
* gnu/system/locale.scm (single-locale-directory): Ditto.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2019-06-07 21:50:18 +0200'>2019-06-07</span></td><td><a href='/guix/commit/gnu/system/locale.scm?id=15ec93a7832ae7dde747ccd9bb2bb2776be9f199'>Add (gnu build locale).</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/locale.scm: New file.
* gnu/local.mk (MODULES_NOT_COMPILED): Add it.
* gnu/installer/locale.scm (normalize-codeset): Remove.
* gnu/system/locale.scm (localedef-command): Remove.
(single-locale-directory): Use (gnu build locale).
(glibc-supported-locales)[build]: Likewise, and remove
'read-supported-locales'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-05-13 23:46:08 +0200'>2019-05-13</span></td><td><a href='/guix/commit/gnu/system/locale.scm?id=1be065c4784805e7a7b4c3f08970d8e4043b0a60'>locale: Add 'glibc-supported-locales'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/locale.scm (glibc-supported-locales): New procedure.
</span></span></td><td>Ludovic Courtès</td></tr>