debian/patches/git-updates.diff: update from upstream stable branch:

* debian/patches/git-updates.diff: update from upstream stable branch:
  - resolv: do not ignore short error responses (as generated by e.g.
    Unbound) to avoid timeouts.
  - resolv: fix timeouts when single-request mode is enabled in resolv.conf.
  - resolv: fix reloading resolv.conf when a nameserver has been
    automatically switched to single-request mode.
  - mremap(): fix support for the MREMAP_DONTUNMAP option.
  - fortification: fix name space violation in fortify wrappers.
  - vfscanf(): fix matches longer than INT_MAX.
  - ungetc(): fix uninitialized read when putting into unused streams.
  - ungetc(): fix backup buffer leak on program exit.