added patches to fix CVE-2019-1010301 and CVE-2019-1010302 from Debian