- updated to 3.6.3
- fixes CVE-2013-0240 and CVE-2013-1799
- added patch to fix build with -Werror=format-security