[package] tiff: update to 4.0.1 and include CVE-2012-1173 patch