dropbear: backport upstream fix for CVE-2018-15599