root,roofit: bump version; update CMS patch

Hash: 30abeeeedaf4be894a535d650d7c627db56fba53

Signed-off-by: David Abdurachmanov <David.Abdurachmanov@cern.ch>