- bump version to 4.0.9
- add patches copied from Debian for CVE-2017-18013 and CVE-2017-9935

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Signed-off-by: Jiri Slachta <jiri@slachta.eu>

Signed-off-by: Jiri Slachta <jiri@slachta.eu>

The libtiff library declares an `ftell()` compat macro redirecting calls
to `ftello()` if such an implementation exists. The compat macro however
is declared with a wrong number of arguments, leading to the following
error on our buildbots:

    In file included from .../usr/include/uClibc++/iostream:29:0,
                     from tif_stream.cxx:31:
    .../usr/include/uClibc++/fstream:422:22: error: macro "ftell" requires 3 arguments, but only 1 given
         retval = ftell(fp);

Add a patch to fix the macro definition in order to fix compilation of
the tiff package.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

Signed-off-by: Jiri Slachta <slachta@cesnet.cz>

Signed-off-by: Jiri Slachta <slachta@cesnet.cz>

This commit fixes multiple CVE's for library tiff:
CVE-2012-4564
CVE-2013-1960
CVE-2013-1961
CVE-2013-4231
CVE-2013-4232
CVE-2013-4244
CVE-2013-4243

Signed-off-by: Jiri Slachta <slachta@cesnet.cz>

Signed-off-by: Jiri Slachta <slachta@cesnet.cz>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Oliver Ertl <oliver-ertl@t-online.de>