samba36: add three CVE patches from 2015-12-16