the first two patches were mistakenly left out during the 4.2 qemu rebase. also adds another patch for issue CVE-2019-14378 (heap-based BOF) Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
