sourced from debian as patch isn't even in upstream master yet.

(cherry picked from commit 302a77a)

…r19.09

[r19.09] cyrus_sasl: add patch for CVE-2019-19906

(cherry picked from commit 787a7f6)

(cherry picked from commit 39cd457)
Backport of #75182

apache-kafka.nix: Add missing quote inside tmpfiles rule

(cherry picked from commit 2d6f1ff)

Traceback (most recent call last):
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/bin/.swift-wrapped", line 7, in <module>
    from swiftclient.shell import main
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/__init__.py", line 20, in <module>
    from .client import *  # noqa
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/client.py", line 33, in <module>
    from swiftclient import version as swiftclient_version
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/version.py", line 15, in <module>
    import pkg_resources
ModuleNotFoundError: No module named 'pkg_resources'

(cherry picked from commit dfd115a)

(cherry picked from commit 3b15451)

(cherry picked from commit 2ad59bd)

[19.09] firefox: 71.0 -> 72.0

(cherry picked from commit 3f0fee7)

(cherry picked from commit aab1f2d)

(cherry picked from commit 204d32a)

(cherry picked from commit b4983fe)

Previously when this function was called without a value coercible to a
string it would throw an error instead of returning false. Now it does.

As a result this now allows the use of a type like `either path attrs`
without it erroring out when a definition is an attribute set.

The warning about there not being a isPath primop was removed because
this is not the case anymore, there is builtins.isPath. But also there
always was `builtins.typeOf x == "path"` that could've been used
instead. However the path type now stands for more than just path types,
but absolute paths in general.

(cherry picked from commit d7a109b)

See #76861 (comment)
for why this is cherry-picked

(cherry picked from commit 6cd31dd)
Signed-off-by: Domen Kožar <domen@dev.si>

[19.09] firefox: 72.0 -> 72.0.1

(cherry picked from commit 0271b2c)

https://github.com/matrix-org/synapse/releases/tag/v1.8.0
(cherry picked from commit 9d845d4)

firefox-bin: 72.0 -> 72.0.1 [security] CVE-2019-17026 [19.09]