d/patches: patch to harden the build

The Debian buildd log scanner reports that the build is not hardened.
This commit includes a patch to include CPPFLAGS in the build process.

Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>