Adding patch to fix CVE-2014-4199

Closes: #770809
Thanks: Moritz Muehlenhoff
Updating changelog.