Comment 3 for bug 1648998

ACK on the trees in comment #2. I've uploaded packages for building with a couple of small changes:

- LP tag in changelog needs a "#" for it to be automatically picked up, as in LP: #1234
- CVE-2016-9839 patch was a bit broken on xenial and yakkety, which I've fixed, it was adding the following to the build log:

/<<PKGBUILDDIR>>/mapogr.cpp: In function ‘int msOGRFileWhichShapes(layerObj*, rectObj, msOGRFileInfo*)’:
/<<PKGBUILDDIR>>/mapogr.cpp:1671:74: warning: too many arguments for format [-Wformat-extra-args]
                  layer->filter.string+6, layer->name?layer->name:"(null)");
                                                                          ^

Once packages are built, I will release them as security updates. Thanks! :)