FYI: I just checked in a "patches" directory inside the 2.4.x branch. I hope it's not picked up in a source distribution.
If we keep patches for backports/hot-fixes here - instead of all over the world in not-secure http: locations - it should give us tracking and easier use, I hope. I am not fixed on names or structure here, just trying to keep patches where they belong and version them. Cheers, Stefan