Patch heap overflow in Floating Point Parsing.

Provide a patch to 1.8.7 which fixes CVE-2013-4164.

It's been a long while since I've built Debian packages... :smile: