contrib: update upnp to 1.6.19

Signed-off-by: Rafaël Carré <funman@videolan.org>
httpd: avoid uncontrolled format strings