(cherry picked from commit 5596874)

This should be a behavior no-op, but it helps vulnix figure out that we
are up to date regarding security patches.

(cherry picked from commit 2242bb86d1edbdd8083c840d1160349286372fac)

CVE-2019-14973.patch is a manually backported of the upstream patch to
work around some minor merge conflicts.

(cherry picked from commit a2e1da7367bf2397cb0cd82a1ab6503a9c1fa5aa)

…-9928

Refactor the patchPhase management for the package along the way to
something more standard.

(Cherry pick from 97e4a11b003a5a88397d9a1fc4ee8ce8f006a396 with an extra
version of the package to patch in 19.03.)

Patches have been imported into nixpkgs and manually edited to avoid
merge conflicts on ChangeLog / NEWS files.

(cherry picked from commit 17be09a)

Partially fixes #70084.  Cherry-picked from 19.09's 22b5bbf.

custom adapted patch to accommodate the openjpeg1/openjpeg2 split that
0.61 still has

(cherry picked from commit e6889d4)

...into staging-19.03

...into staging-19.03

...into staging-19.03

(cherry picked from commit 3fa2864)

Only x86_64-linux has managed to finish rebuilding so far
https://hydra.nixos.org/eval/1548583
but I think that's a sufficient trade-off, given that regressions
should be very unlikely.

wpa_supplicant: apply patch for CVE-2019-16275 [19.03]

(cherry picked from commit 9dbc302)

sudo: 1.8.27 -> 1.8.28 (CVE-2019-14287) [19.03]

Since [1], cabal2nix has been able to parse full platform triples. We
need this for when the system doesn't say enough info (e.g. android).

[1]: NixOS/cabal2nix@0bb88f0#diff-d9172aeec4039eef8cfcc8a2ab6c0677R143

(cherry picked from commit 66a9f39)

(cherry picked from commit 09ef6dc)

(cherry picked from commit 8948290)