disable python test which was previously failing anyway, but in previous
versions it was being ignored

addresses CVE-2019-18197

dependencies:
perlPackages.TestFakeHTTPD: init at 0.08

Use fetchpatch and explain the issue

[staging] python3Packages.pycairo: 1.18.1 -> 1.18.2

gnome2.gnome_vfs: openssl-1.1 patch

libxml2: 2.9.9 -> 2.9.10, libxslt: 1.1.33 -> 1.1.34, addressing CVE-2019-18197

* format withn nixpkgs-fmt
* drop unnecessary flags
* do not propagate gupnp-igd (it is only in Requires.private)

tests are failing there

FAIL: test-is-public
====================
valgrind: mmap-FIXED(0x7fff5f400000, 8388608) failed in UME (load_unixthread1) with error 22 (Invalid argument).
FAIL test-is-public (exit status: 1)
FAIL: test-is-public-all
========================
valgrind: mmap-FIXED(0x7fff5f400000, 8388608) failed in UME (load_unixthread1) with error 22 (Invalid argument).
FAIL test-is-public-all (exit status: 1)
FAIL: test-is-cookie-domain-acceptable
======================================
valgrind: mmap-FIXED(0x7fff5f400000, 8388608) failed in UME (load_unixthread1) with error 22 (Invalid argument).
FAIL test-is-cookie-domain-acceptable (exit status: 1)
FAIL: test-is-public-builtin
============================
valgrind: mmap-FIXED(0x7fff5f400000, 8388608) failed in UME (load_unixthread1) with error 22 (Invalid argument).
FAIL test-is-public-builtin (exit status: 1)
FAIL: test-registrable-domain
=============================
valgrind: mmap-FIXED(0x7fff5f400000, 8388608) failed in UME (load_unixthread1) with error 22 (Invalid argument).
FAIL test-registrable-domain (exit status: 1)

Commit be38210 broke evaluation
on Darwin because it added these unconditional buildInputs
that don't evaluate on Darwin:

    libnice librdf lilv lv2 serd sord sratom

This commit fixes it, and also fixes recently-added new dependencies
for other packages accordingly.

It further fixes the build of many gstreamer packages on Darwin.

Fixes building gst_all_1.gst-plugins-good.

Patch backported from 0.52.0.

mesa: 19.2.3 -> 19.2.4

gstreamer 1.16.1

Hopefully commits will be more stable.

Release notes: https://www.postgresql.org/docs/9.5/release-9-5-20.html

Patch for CVE-2019-13720 is included since QT 5.12.6, so it is unnecessary now.

Fixes regression from #70690

gst_all_1.gst-plugins-good: fix build with gtkSupport

This reverts commit 4467e53.