pidgin: bugfix 2.10.8 -> .9

Fixes connection to some servers broken by the previous update.

(cherry picked from commit 9dd9e52c0c1df132977d648ab15da9c01672891b)
libav: bugfix updates for both branches; maintain

(cherry picked from commit 3fe1656376bc830285bb89b9adbb11a3ad43af40)

Conflicts (0.8 skipped one update):
	pkgs/development/libraries/libav/default.nix
pull module blacklist from Ubuntu and use it by default

People often have serious problems due to bogus modules like *fb.
kmod-blacklist-ubuntu: fetch from tar.gz, not bazaar

Now the source is just a miniature archive.
kmod-blacklist-ubuntu: fix references to binaries
merge #1618: pull kernel module blacklists from Ubuntu

Ported from master.
ntp: Update to 4.2.6p5

(cherry picked from commit d451d12128e17ef015e08bad566eac8755ebc44d)
ntpd: Don't answer status queries

Workaround for CVE-2013-5211:

http://support.ntp.org/bin/view/Main/SecurityNotice#DRDoS_Amplification_Attack_using
(cherry picked from commit 9e7fe29e416736bf2be5aeaf7adbad05d4e175cf)
socat: update from 1.7.2.2 to 1.7.2.3, potentially fixes CVE-2014-0019

(cherry picked from commit 0c439c3a1afe9f31f88e28059624577068ed9405)
flashplayer: update, fixing many security CVEs

(cherry picked from commit edb9e50ef9ee4f671a65b515abe3c899a20c39ae)
libyaml: Patch to fix CVE-2013-6393 (close #1658)

(cherry picked from commit 21a220900ad72cebc08286f2f9d936db0da7fa6f)
fontconfig: stop using xml:space; vital for nixos+2.11

Since fontconfig-2.11 the xml:space attribute makes it reject
/etc/fonts/fonts.conf, so it renders garbage and eats lots of CPU.

To use anything linked to fontconfig-2.11 you need to have this patch
applied to your running NixOS. That's why I'm pushing it to master
before the fontconfig update (as soon as I found and tested the fix).

(cherry picked from commit ec985c8ffa6d29bf50e60ba814e3523ffd4c2919)
nixos/mesa: don't create /run/opengl-driver-32 ...

... if on 64-bit and without 32-bit drivers.

(cherry picked from commit 428469443987e063760cf85235d96f02f51dc891)

Conflicts (still in xserver.nix on release):
	nixos/modules/services/x11/mesa.nix
curl: update 7.33 -> .35, including two security fixes

CVE-2013-4545
CVE-2014-0015

(cherry picked from commit befe6905e2e2de88ab34e7b11608651fc5fd84b1)
gegl: fix CVE-2012-4433 via an Arch patch

(cherry picked from commit c2c50db47d9048c3747850ab25731ba509a0c4a1)
kicad: disable parallel building, as it often fails

CC @viric.

(cherry picked from commit 5559d4d47e62d079df525cbd1059f2b19727d8ba)
socat-2.*: fix CVE-2014-0019

(cherry picked from commit 2dd13fcb0b1ca678af58d5c53dd3e4b05a75b2fa)
gnash: fix CVE-2012-1175 by upstream patch

(cherry picked from commit 11914108aa7cd855a52f94c4d30e931572ba0655)
gnutls2: fix CVE-2013-2116 by Debian patch

(cherry picked from commit 97e7ce23447d0aafe1c20d2e459079abf54b31a9)
gnutls32: update 3.2.4 -> .10, including CVE fixes

Leave gnutls31 the default gnutls, despite the picked patch selecting gnutls32.
CVE-2013-{4466,4487}

(cherry picked from commit cb605c92d2294eb873c637d399169a74bdcb593a)