backports commit nghttp2/nghttp2@b1bd603

The line was essentially checking whether /bin/sh exists and is
executable and if that's the case, the isScript function returns
successfully.

When asking the author of this line on IRC it seems that even they can't
remember or imagine what this was supposed to be.

In summary: Whenever /bin/sh doesn't exist during a build, *any* file
given to isScript is reported as being a script even if it isn't.

This is kinda counter-intuitive and not something what somebody would
expect from a function called "isScript".

Signed-off-by: aszlig <aszlig@nix.build>
Cc: @edolstra
(cherry picked from commit 739c835)

fixes #42465

Plasma5 & KdeApplications bugfix releases

http://hackage.haskell.org/package/network-2.6.3.6/changelog

https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/89355585366:/Changelog
/cc #42883: it certainly seems to fix some security issues,
but I'm not sure about mapping to particular CVE numbers;
perhaps it will appear on http://ffmpeg.org/security.html

(cherry picked from commit 10cbebe)

(cherry picked from commit 342f72e)

(cherry picked from commit 7d10768)

dbeaver: 5.1.2 -> 5.1.3 (18.03)

haskell/network: 2.6.3.4 -> 2.6.3.6 (release-18.03)

(cherry picked from commit 1997dea)

Backported from master to solve a number of known security vulnerabilities.

Reference:
NixOS/nixpkgs#43307

Backported from master. Needed after vlc update

spidermonkey doesn’t compile correctly on i686 linux & gcc7. It gives
the error:

  with gcc-7: undefined reference to `__divmoddi4'

The packaged version is susceptible to man-in-the-middle attacks.
See https://www.home-assistant.io/blog/2018/07/16/release-73-2/.

(cherry picked from commit 5b259a67f97af82556653d8a3452aa60346f2e19)

(cherry picked from commit b73dc5b80aafae473ca3be2d24629c4505e4e370)

(cherry picked from commit c7e1e0a92f1d5adcd886597951e481ecf23ee530)

(cherry picked from commit 5f9770ff0be8fa74533ba26de516281b94fc8925)

(cherry picked from commit b3c3df4)

(cherry picked from commit 7ec0471)
This isn't a real cherry pick, as I've only applied the changes
affecting Signal (these changes are required to cherry-pick further
commits) and customized the subject to avoid confusion.

(cherry picked from commit e1b501a)

(cherry picked from commit 1ac4be3)

(cherry picked from commit 507d24a)

If executed in a pure environment (nix-shell --pure) or depending on the
`gtk3` version of the system Signal-Desktop was e.g. crashing when
clicking on a PDF attachment (instead of showing the dialog to save a
file).
Using wrapGAppsHook and setting XDG_DATA_DIRS to the correct version
fixes this bug.

The error message was the following:
```
(signal-desktop:30756): Gtk-WARNING **: 14:04:49.073: Could not find the icon 'user-home-symbolic-ltr'. The 'hicolor' theme
was not found either, perhaps you need to install it.
You can get a copy from:
        http://icon-theme.freedesktop.org/releases

(signal-desktop:30756): GLib-GIO-ERROR **: 14:04:49.134: No GSettings schemas are installed on the system
Trace/breakpoint trap
```

(cherry picked from commit 5d79535)

Removed some redundancy (src check via meta.platforms) and made some
changes according to our style-guide.
I've changed meta.description and added meta.longDescription.

(cherry picked from commit ab593d4)

(cherry picked from commit 54ea1cd)

(cherry picked from commit db0da28)

(cherry picked from commit c4d94d6)

(cherry picked from commit c4fca64)

keybase-gui: fix kbfs mount path check

Backport signal-desktop to stable (18.03)

Reason: According to an IRC discussion the Signal team might regularly
break older clients.

(cherry picked from commit 711c56d)

backport of #43659
closes #41360

(cherry picked from commit fa4c1ee)

[18.03] home-assistant: mark as insecure

(cherry picked from commit 8432dec)

(cherry picked from commit e953d31)

release-18.03: Update VLC to version 3.0.3

(cherry picked from commit 037e06f)

The regression in ext4 kernel code appears to cause no real issue
to anyone, so I hate it would block other fixes from 18.03 for longer
than a full week.
(The ext4 changes themselves fix some CVE, though apparently minor.)

(cherry picked from commit fd269b9)

(cherry picked from commit a4d5583)

We really have these things spread over too many files.