CVE-2017-3738 was fixed in commit 69941fbb (main/openssl: security
upgrade to 1.0.2n)

Timo Teräs authored Jul 18, 2018 and Natanael Copa committed Nov 22, 2018

fixes #8814
fixes #9009

Andy Postnikov authored Mar 31, 2018 and Natanael Copa committed Nov 22, 2018

CVE-2017-3738, CVE-2018-0739, CVE-2018-0733

Colin Williams authored Dec 11, 2017 and Natanael Copa committed Nov 22, 2018

fixes #8277

CVE-2017-3737
CVE-2017-3738

(cherry picked from commit b74e9ca7)

https://skalatan.de/blog/advisory-hw-2018-05

See: https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-2-9-released/

We are not affected by CVE-2017-16231 due to our build with
--with-match-limit-recursion=8192. We had this option since first
commit, version 7.8, and were never affected.

fixes #8143

fixes #7941

fixes #8086

fixes #8129

fixes #8191

fixes #8149

fixes #8168

Fixes: CVE-2017-15098

Release Notes: https://www.postgresql.org/about/news/1801/

PostgreSQL on Alpine has never been affected by CVE-2017-12172.

Andy Postnikov authored Nov 05, 2017 and Timo Teräs committed Nov 09, 2017

CVE-2017-3735
CVE-2017-3736

fixes #8117

(CVE-2017-12135, CVE-2017-12137, CVE-2017-12136, CVE-2017-12134, CVE-2017-12855)

fixes #7736

(CVE-2017-14316, CVE-2017-14317, CVE-2017-14318, CVE-2017-14319)

fixes #7823

fixes #7869

fixes #7880

fixes #8034

fixes #7906

fixes #7965

(CVE-2017-11112, CVE-2017-11113, CVE-2017-13728, CVE-2017-13729, CVE-2017-13730,
CVE-2017-13731, CVE-2017-13732, CVE-2017-13733, CVE-2017-13734)

fixes #7970

(CVE-2017-15191, CVE-2017-15192, CVE-2017-15193)
(CVE-2017-13765, CVE-2017-13766, CVE-2017-13767)

fixes #8017 #7914

(cherry picked from commit dad89777)

- CVE-2016-1238
- CVE-2017-12837
- CVE-2017-12883

fixes #7901