Bug#1004433: Patches for CVE-2022-23959

[Florian Weimer]

* Salvatore Bonaccorso:

> Thanks a lot for your testing, this is very much appreciated!
>
> Florian, should we go ahead with the DSA release?

We should, I'll look into it this evening.  Thanks for all the
testing!