Update VERSION to 2.6.39
do_3des: Abort on failure

The routine cannot signal encryption failures to the caller
and would leave the buffer unencrypted on error.
do_aes: Abort on failure

The routine cannot signal encryption failures to the caller
and would leave the buffer unencrypted on error.
Hardening patches provided by Florian Weimer <fweimer@redhat.com>
Hardening patches for x509dn.c provided by Florian Weimer <fweimer@redhat.com>
Need to bring in stddef.h to deal with Florian's use of ptrdiif_t
Attribution to Florian in CHANGES file