Bug#854739: patch for CVE-2017-5591

[W. Martin Borgert]

Identical fix is now also in new upstream release 1.3.2.