https://sources.debian.org/data/main/p/plib/1.8.5-8/debian/patches/04_CVE-2011-4620.diff

--- a/src/util/ulError.cxx
+++ b/src/util/ulError.cxx
@@ -39,7 +39,7 @@
 {
   va_list argp;
   va_start ( argp, fmt ) ;
-  vsprintf ( _ulErrorBuffer, fmt, argp ) ;
+  vsnprintf ( _ulErrorBuffer, sizeof(_ulErrorBuffer), fmt, argp ) ;
   va_end ( argp ) ;
  
   if ( _ulErrorCB )
 class='logo' rowspan='2'><a href='/'><img src='https://git.koszko.org/cgit-static/cgit.png' alt='cgit logo'/></a></td>
<td class='main'><a href='/'>index</a> : <a href='/guix/'>guix</a></td><td class='form'><form method='get'>
<input type='hidden' name='id' value='b610e4b9a7d4423603cac1da4f16475fb1e03e83'/><select name='h' onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83'>refs</a><a class='active' href='/guix/log/tests/gremlin.scm'>log</a><a href='/guix/tree/tests/gremlin.scm?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83'>tree</a><a href='/guix/commit/tests/gremlin.scm?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83'>commit</a><a href='/guix/diff/tests/gremlin.scm?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/tests/gremlin.scm'>
<input type='hidden' name='id' value='b610e4b9a7d4423603cac1da4f16475fb1e03e83'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83'>root</a>/<a href='/guix/log/tests?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83'>tests</a>/<a href='/guix/log/tests/gremlin.scm?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83'>gremlin.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/tests/gremlin.scm?id=b610e4b9a7d4423603cac1da4f16475fb1e03e83&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2019-05-18 12:10:15 +0200'>2019-05-18</span></td><td><a href='/guix/commit/tests/gremlin.scm?id=6b97415996583b15a97dad8254f610275353e913'>gremlin: Adjust tests for foreign distros.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://bugs.gnu.org/35775&gt;.

* tests/gremlin.scm ("elf-dynamic-info-needed, executable"): Expect only
libguile and libc among NEEDED.
("strip-runpath"): Pass '--enable-new-dtags' to get RUNPATH, not RPATH.
</span></span></td><td>Ting-Wei Lan</td></tr>