tiff: Adding some CVE patches kindly provided by the gentoo folks.