Fixes CVE-2014-2284 but not CVE-2014-2285 so add a patch for that one. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>