(cherry picked from commit e635dcc)

(cherry picked from commit df959d06c40af7f275741530ad7158faf0a46e1a)

(cherry picked from commit 910a4bc162a3a2d884999d0ba3e65a454721f10a)

(cherry picked from commit c4237e2)

[20.03] firefox: 81.0.2 -> 82.0, firefox-esr-78: 78.3.1esr -> 78.4.0esr

[20.03] php72: 7.2.32 -> 7.2.34

nomachine-client: 6.11.2 -> 6.12.3

https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/
(cherry picked from commit 3775af7)

https://github.com/vector-im/element-web/releases/tag/v1.7.10
(cherry picked from commit 96f29b9)

https://github.com/vector-im/element-desktop/releases/tag/v1.7.10
(cherry picked from commit d976433)

This reverts commit 3f8fd69.

As it broke at least ghostscript and therefore caused a huge amount
of dependency failures.

(cherry picked from commit a667bc7)

(cherry picked from commit aee3076)

https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html

CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-15999 CVE-2020-16003

(cherry picked from commit 7dc2d9f)
Backport of #101306.

We can't backport NixOS/nixpkgs#101199 as it
would break freetype API, but this patch should fix the issue.

If a program (e.g. nixos-install) writes more than 1000 lines to
stderr during execute(), then process_serial_output() deadlocks
waiting for the queue to be processed. So use an unbounded queue
instead.

We should probably get rid of the structured log output (log.xml),
since then we don't need the log queue anymore.

(cherry picked from commit 78f2a83)

https://github.com/mumble-voip/mumble/releases/tag/1.3.3
(cherry picked from commit 1bc72b3)

(cherry picked from commit c0a646e)
Re-tested both briefly atop 20.03.