rxvt-unicode: update to 9.20, fixing CVE-2014-3121 (close #2649)

(cherry picked from commit 4b668bb5548c4771578445cb90163dff5d4814e6)