security update to 4.8.0.3, add test_dep on BUILD_PKGPATH