- updated format-security patch to avoid overflows through environment variables
- verbose lib, include files