dbus: DOS-security update 1.8.4 -> .6

CVE-2014-{3532,3533}
libvdpau: minor update, fix license

Suse and wikipedia classify it as MIT,
although it seems the headers in sources aren't all consistent.