libtar: fix CVE-2013-4420 by Debian patches

CC maintainer @bjornfor.