pjproject: add upstream security fixes