file: upgrade to 5.17

Version 5.17 fixes CVE-2014-1943. See:
https://security-tracker.debian.org/tracker/CVE-2014-1943
file: add security patches cherry-picked from upstream