- Added patch from Debian to avoid free on invalid pointer due to a buffer overflow (#1196751, #1207180)
- Added patch from Debian for symlink directory traversal (#1178824)
- Added patch from Debian to fix the directory traversal via //multiple/leading/slash (#1178824)