Fixes CVE-2017-10140: Berkeley DB reads DB_CONFIG from cwd
For more details, see:
https://security-tracker.debian.org/tracker/CVE-2017-10140
And add license hash while we are at it.
[Peter: extend commit message]
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
