libav: maintenance+security update

CVE-2013-{0848,3672,3674,7020} and CVE-2014-{2098,2263}
libpng: code-cleanup update
harfbuzz: small update
gstreamer-1: bugfix-only update of all components

1.4.0 -> 1.4.1