New upstream snapshot

  - Fix read buffer overflow in MSG_ReadBits
    (CVE-2017-11721) (Closes: #870725)
  - Check buffer boundary exactly in MSG_WriteBits, instead of
    potentially failing with a few bytes still available