Backporting stacked security patch