CVE-2018-1098, CVE-2018-1099: please consider backporting fix to v3.3 and v3.2

[zumbi]

Request

Please consider backporting fix for CVE-2018-1098 CVE-2018-1099 to older branches (release-3.3,release-3.2,etc).

Background information

v3.2 is part of a stable distribution release, and it is important to support it security wise.

Thanks for your consideration.

[satta]

Thanks! This will also help keeping the packaged version in Debian up to date and secured.

[jingyih]

cc @jpbetz

[mssalvatore]

This would also help keep the packaged version in Ubuntu secured.

[spzala]

cc @gyuho

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 21 days if no further activity occurs. Thank you for your contributions.