[18.03] libmspack: 0.6alpha -> 0.7.1alpha

This is a bugfix release that also allows (more) Spectre migitations.
In particular for CVE-2018-3639 (Spectre v4).
CVE-2018-7550 is also addressed,

Fixes CVE-2018-10915 & CVE-2018-10925

Release notes: https://www.postgresql.org/docs/current/static/release-10-5.html

(cherry picked from commit 1c4fc1d)

Fixes CVE-2018-10915 & CVE-2018-10925

Release notes: https://www.postgresql.org/docs/current/static/release-9-6-10.html

(cherry picked from commit 94c3589)

Fixes CVE-2018-10915 & CVE-2018-10925

Release notes: https://www.postgresql.org/docs/current/static/release-9-5-14.html

(cherry picked from commit 98d8db4)

Fixes CVE-2018-10915 & CVE-2018-10925

Release notes: https://www.postgresql.org/docs/current/static/release-9-4-19.html

(cherry picked from commit 2abb00e)

Fixes CVE-2018-10915 & CVE-2018-10925

Release notes: https://www.postgresql.org/docs/current/static/release-9-3-24.html

(cherry picked from commit 5de601e)

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/lighttpd/versions.

(cherry picked from commit 6e1d3cb)

Fix trivial conflict from commit 57bccb3
("treewide: http -> https sources (#42676)") on master branch.

A few security fixes.

[18.03] qemu: 2.11.1 -> 2.11.2

https://lists.nic.cz/pipermail/knot-dns-users/2018-August/001442.html
Nixpkgs master will be getting 2.7.1 instead.

This backports the changes done in the 2.28 branch of gdm to address the
issue.

[18.03] gnome3.gdm: fix CVE-2018-14424

Bump to latest stable version of the 10.2.x branch. Besides many bug fixes the
following security related issues have been fixed:
 - CVE-2018-3060
 - CVE-2018-3064
 - CVE-2018-3063
 - CVE-2018-3058
 - CVE-2018-3066
 (probably more from before 10.2.16)

Release notes: https://mariadb.com/kb/en/library/mariadb-10217-release-notes/

(cherry picked from commit 6c3d99c7645f7c7f8331c1c7ff7453bfaeb21cc2)

(cherry picked from commit 89bed5b)

mariadb and postgresql security updates.

Don't know that there's a reason to keep the patch level
fixed at 0, optimistically bumping to latest (6).

(cherry picked from commit 8c78eee)

Changelog: https://secure.php.net/ChangeLog-7.php#7.1.21

mke2fs has this annoying property that it uses getrandom() to get random
numbers (for whatever purposes) which blocks until the kernel's secure
RNG has sufficient entropy, which it usually doesn't in the early boot
(except if your CPU supports RDRAND) where we may need to create the
root disk.

So let's give the VM a virtio RNG to avoid the boot getting stuck at
mke2fs.

(cherry picked from commit dda74d9)

(cherry picked from commit 928bc3f)

(cherry picked from commit 80448a4)

(cherry picked from commit bad288c)

(cherry picked from commit 2366de6)

(cherry picked from commit 2c76bd1)

(cherry picked from commit c954c98)

(cherry picked from commit bd9a400)