openssl: security update 1.0.1e -> f

It's supposed to fix CVE-2013-{4353,6449,6450}
http://www.openssl.org/news/openssl-1.0.1-notes.html

I just tested the build succeeds, the list of major changes seems safe.

(cherry picked from commit f1766c252f7572fce9f4f6150dafda4dba211387)
wineStable: maintenance update 1.6.1 -> .2, use lcms2

lcms2 is now supported according to the announcement, so I switched to it.
Tested on a steam game ;-)

(cherry picked from commit a00e382e237e31d4dea8fc158bbea006dffa4edd)

Conflicts (master taken):
	pkgs/misc/emulators/wine/stable.nix
xorg.libXfont: bugfix update, CVE-2013-6462

This lib is deprecated and almost unused, but still...

(cherry picked from commit e01af040ed970371d0e0342dc89a9a5525fdef52)
fftw: minor update and major refactoring

- Unify the "single" and "float" variants, which are the same thing.
- Enable threads and openmp wrapper by default (they are very small).
- Don't use sse on i686, as I'm quite sure we have no warrant for that.
  Cf. http://en.wikipedia.org/wiki/Pentium_Pro
- Disable static libs (big, no indication we need them).
- I tested most builds using fftw (they build OK).

(cherry picked from commit 506a30418125d69b22a7e52c1d9dbe5f3bb7450c)

Conflicts:
	pkgs/applications/graphics/gimp/plugins/default.nix
	pkgs/top-level/all-packages.nix
xfce4-terminal: bugfix update 0.6.2 -> .3

(cherry picked from commit 9020582feadaae2e17ed18d98253f3498fd44ef6)
netpbm: fix CVE-2005-2471

(cherry picked from commit 15a5894ab3ed1e8ebafb72dc903052b091b6155f)
netpbm: fix build

(cherry picked from commit c744a7e106aba084a56deb28db96ae644ae4736a)
libxslt: minor update to fix DOS security problem

(cherry picked from commit 91ead938116beb93d05a78ff297f47acd6c00ecb)
libXtst: forgotten security update

(cherry picked from commit 4f8809a0910840c266dec28952f15e2dec68b0df)
qt4: fix CVE-2013-4549.patch

(cherry picked from commit a84d2267d1940c83c15ed1b7f78579111212ba08)
libtiff: pull (mostly) security patches from Arch

Also enable lzma support and check phase.

(cherry picked from commit a1cfb23d7300e76a602772ec159067213213c18b)
gdk_pixbuf: remain on the same major branch

(cherry picked from commit 51c83e927d52f0e72dc2d22cc7a2919e193af41f)

Conflicts:
	pkgs/development/libraries/gdk-pixbuf/default.nix
libpng: minor update 1.6.7 -> .8

Fixes a potential segfault.

(cherry picked from commit f4782016edddf0e643f4699c86d6bbc2e54c82e1)

Conflicts (take later = master):
	pkgs/development/libraries/libpng/default.nix
mesa: bugfix update 9.1.6 -> .7

(cherry picked from commit e8394e3f8c7d464bc27a344a982648c20a08a6d7)

Conflicts (stay on 9.1 branch):
	pkgs/development/libraries/mesa/default.nix
mesa: move vdpau drivers so they are found

(cherry picked from commit 458f17ae260b9bcbb22baa4dba49a1e3d5f7b7ed)
dragonegg: fix build via update to 3.3

(cherry picked from commit 4855b0a22eb957740e7c1e0ead39ca3984f98d33)
racket: fix build via forcing -lgcc_s

(cherry picked from commit 1d62c6445fbcdf4b8d020ff94d143e875dfa5fd8)
mu: fix build via disabling mug GUI by default

It seems it can't handle gtk-3.10.
CC @the-kenny

(cherry picked from commit 3c013cdec98a29302e10a0a9f0f79a1991dfbe2b)
atkmm: maintenance update

(cherry picked from commit a5110391ddf0cb739f69eb34c723433ce7bae1c6)
pangomm: update, so we can drop older cairo

(cherry picked from commit 1e113b82840049362c0b6942074e6847ca01fd6b)