patch security-issues in stretch (and jessie?)

there are some security-issues which are fixed upstream and should be backported to the versions from buster since it is still supported.

How about jessie? It has LTS-Support until 2020.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information