===== RG: r/backports =====
coreutils: Disable parallel building
linux: Update to 3.13.9
grsecurity: Update stable and test patches

stable: 3.0-3.2.56-201404012135 -> 3.0-3.2.56-201404062126
test:   3.0-3.13.8-201404011912 -> 3.0-3.13.9-201404062127
Create the 'postgres' superuser

Old PostgreSQL installations were created using the 'root' database
user. In this case, we need to create a new 'postgres' account, as we
now assume that this is the superuser account.

Unfortunately, these machines will be left with a 'root' user as
well (which will have ownership of some databases). While PostgreSQL
does let you rename superuser accounts, you can only do that when you
are connected as a *different* database user. Thus we'd have to create a
special superuser account to do the renaming. As we default to using
ident authentication, we would have to create a system level user to do
this. This all feels rather complex, so I'm currently opting to keep the
'root' user on these old machines.
Use PostgreSQL 9.3's `pg_isready` to wait for connectivity

The postgresql module has a postStart section that waits for a database
to accept connections before continuing. However, this assumes various
properties about the database - specifically the database user
and (implicitly) the database name. This means that for old
installations, this command fails because there is no 'postgres' user,
and the service never starts.

While 7deff39 does create the 'postgres' user, a better solution is to
use `pg_isready`, who's sole purpose is to check if the database is
accepting connections. This has no dependency on users, so should be
more robust.
openssl: 1.0.1f -> 1.0.1g

CVE-2014-0160, CVE-2014-0076
===== RG: r/auto-upd-chromium =====
chromium: Update stable channel from 33.0.1750.152 -> 34.0.1847.116
===== RG: r/pepperapi =====
wrapFirefox: Rename to wrapBrowser and split out Firefox-specific defaults

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
midoriWrapper: Use wrapBrowser instead of wrapFirefox

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
chromiumWrapper: Use wrapBrowser instead of wrapFirefox

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
wrapBrowser: Add extraFlags parameter

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
chromiumWrapper: Add support for pepper plugins

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
chromium: Convert update.sh script to python and add support for Debian package info

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
chromium: Add Debian package info to sources.nix

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
chromium: Make the channel available as an attribute

Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
libpdf: Add new package

libpdf is a binary plugin distributed with Google Chrome that allows PDFs to be
opened inside the browser.

A big thanks to @PkmX for the original work which this is based off of.

Signed-off-by: PkmX <pkmx.tw@gmail.com>
Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
pepperflash: Add new package

pepperflash is the binary Adobe Flash plugin distributed in Google Chrome.

A big thanks to @PkmX for the original work which this is based off of.

Signed-off-by: PkmX <pkmx.tw@gmail.com>
Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>