Add comments and upstream URLs to patch files, per merge review suggestion.

libtiff-CVE-2009-2347.patch

@@ -1,3 +1,9 @@
+This is a portion of the patch we were carrying for CVE-2009-2347 in 3.8.2.
+Unfortunately the upstream fix in 3.9.2 is incomplete, so we still need this
+part.  Reported upstream at
+http://bugzilla.maptools.org/show_bug.cgi?id=2079
+
+
 diff -Naur tiff-3.9.2.orig/tools/tiff2rgba.c tiff-3.9.2/tools/tiff2rgba.c
 --- tiff-3.9.2.orig/tools/tiff2rgba.c	2009-08-20 16:23:53.000000000 -0400
 +++ tiff-3.9.2/tools/tiff2rgba.c	2009-12-03 12:19:07.000000000 -0500

libtiff-acversion.patch

@@ -1,3 +1,7 @@
+This patch is needed for building the package as of F-11.  It can be
+dropped whenever autoconf 2.63 is no longer used on any live branch.
+
+
 diff -Naur tiff-3.9.2.orig/configure.ac tiff-3.9.2/configure.ac
 --- tiff-3.9.2.orig/configure.ac	2009-11-04 12:11:20.000000000 -0500
 +++ tiff-3.9.2/configure.ac	2009-12-03 12:52:41.000000000 -0500

libtiff-mantypo.patch

@@ -1,3 +1,8 @@
+Minor typo, reported upstream at
+http://bugzilla.maptools.org/show_bug.cgi?id=2129
+This patch should not be needed as of libtiff 4.0.
+
+
 diff -Naur tiff-3.9.2.orig/man/tiffset.1 tiff-3.9.2/man/tiffset.1
 --- tiff-3.9.2.orig/man/tiffset.1	2006-04-20 08:17:19.000000000 -0400
 +++ tiff-3.9.2/man/tiffset.1	2009-12-03 12:11:58.000000000 -0500