[SECURITY] pulseaudio: Patch against CVE-2014-3970

Note this is a backport to PulseAudio 4.0, major ABI changes are currently
not tolerated for components such as PulseAudio in Evolve OS, as we are
rapidly approaching freeze.