Log Message:
Fix CVE-2014-3618.
https://bugzilla.redhat.com/show_bug.cgi?id=1121299

While here:
Convert to user-destdir by using pkgsrc setuid framework.
Add comments to some patches.

Bump PKGREVISION.