Those are registered as CVE-2016-9843, CVE-2016-9842, CVE-2016-9841, CVE-2016-9840, but judging from the code, it's not even clear how to build an exploit from this (mostly underspecified C behavior, plus it's deep within zlib's streams). So, don't get too alarmed about this. Okay sthen@, naddy@