- CVE-2016-8859.patch: Fix multiple integer overflows which allowed
attackers to cause memory corruption via a large number of (1) states or
(2) tags, which triggered an out-of-bounds write (bnc#1005483)