glibc: fix CVE-2014-0475 by upstream patches

https://sourceware.org/bugzilla/show_bug.cgi?id=17137