sync with security wheezy/updates, fixes CVE-2014-7169