- add patch to lemon (ported from Debian) to look for lempar.c template in system location, and avoid insecure sprintf() use