(cherry picked from commit 94f0a6793b2d5d4296ff9207bfc10efdb38bc5da)

This must have been lost when cherry-picking
5ba846023672388ad1a47909ae021ba6861c1326 from master.

(cherry picked from commit 42e6b754fbc5c0d887f4730fcc1de77800000b93)

* sublime3: replace hardcoded /bin/bash with /usr/bin/env

exec.py in Default.package-sublime calls /bin/bash with subprocess.
See Issue #12011. Because of this builds could not be started from
withtin Sublime Text.

* sublime3: use wrapped of bash to fix internal build system

Without the wrapped version of bash (a symlink to $bash/bin/bash)
with LD_PRELOAD to glibc an relocation error occurs when trying
to run builds from within Sublime Text 3. See Issue #12011.

(cherry picked from commit 1893ed54dc1ee7cef56be1c2ce7839c9523ba17e)

(cherry picked from commit 3c0114d4728aff4158730ccaf89cc1d9115c83ee)

(cherry picked from commit cb838cad5cb7cec088bde25fb62ac797c82251bb)

(cherry picked from commit 1f95524ab5bf7dee448afe646a78712d70c5ca2a)

(cherry picked from commit 839b3ce5fe4258d4584a7a8ec66faa9ca5dbc764)

(cherry picked from commit c2257506ae30de77f4937775974ae009e6bfa725)

Build was failing with res_9_init missing on OS X. Resolved with a little help from
https://github.com/Homebrew/homebrew-core/pull/4427.

(cherry picked from commit 5da42092faef25e46d93833fe7a0debe8be0f663)

(cherry picked from commit 6717213ca41fc8639fb3b744bfd69e37b594cd9c)

(cherry picked from commit 38dbb8008d9103c139bc0fb3f9580acb10fd2fcf)

(cherry picked from commit 7cc3de8742025a2dd425042ec8a35bd3348e861e)

(cherry picked from commit f999e9edf8c89f658ce0e2c146634dd54159e6dd)

(cherry picked from commit 0c488ed8f0d1af52c219f0632d4752d3d9ebb9d9)

This allows gitweb to expand '~' in /etc/gitconfig. Without a $HOME
variable, it fails to list any projects and instead show the text
"No such projects found" in the UI.

Setting $HOME to the gitweb project root seems like a sensible value.

(cherry picked from commit d916ce2ef40e412c361805531eff5966a309da1d)

(cherry picked from commit 73f04ddd57edfa7944e8f68c13e98c2022ce9968)

(cherry picked from commit e18bec1e3c902d6ae8ce84f8d5586fc3e784aed0)

(cherry picked from commit 846007b8db338d8293c1bf208ba42f10c78e14aa)

(cherry picked from commit f1ba2c8d3bbe4f2421a6872d56d34b3bb2a4bf00)

(cherry picked from commit ca8d3de1d2ec5e8adb7319545385140506115ee0)

(cherry picked from commit d3be9a50e0a3d87d76b74133a9afc40ea2fb0f08)

(cherry picked from commit a04a4b2a6aa6e75b0887e6f7d27ded5ea6c0dcd2)

(cherry picked from commit 323acff8e60e84217a10c056bb6b2b4276b58173)

(cherry picked from commit 4ae2189d8cf65161118584c54a483422c1a92b0b)

(cherry picked from commit f091686a18f565435c1d7468c60397130aa3fb3f)

Fixes security issues:

https://about.gitlab.com/2017/04/05/gitlab-9-dot-0-dot-4-security-release/

(cherry picked from commit d3ef8dc63353736679c10bbcc879b3a5252fe237)

Just nitpick changes in the tarball, minutes after the release.

(cherry picked from commit 44168b4b22a8c3a60ac4782c90052b497c4dee40)

(cherry picked from commit 12839e45997486bab15aa24717618f3607168f79)

(cherry picked from commit 59b548069c1db00c5e37b4e9ee4027cbb125073b)

(cherry picked from commit cb791371c542ff2018916b84dccd43c7c7afd302)

(cherry picked from commit 6b5193bcd9de2404023b3a0639ea25240263ee31)

(cherry picked from commit 23d0f01e9584394d4c05ee6ff395b69d60b8f370)

This reverts commit deb73f214c296e7670bfda9a689a53047d74eb25.

... via a patch from Debian.

previous source tarball changed contents.

(cherry picked from commit 00f16e3d7c4239bcb4c0b55302e4956adf69d691)
Close #24422.

This setting should ensure that email notifications are sent
*only* when the commit caused the build to start failing. That
is, no more "the build is still failing" spam.

As an alternative we could consider disabling email
notifications outright and possibly enable IRC notifications
instead.

(cherry picked from commit 541b3ec1bc9357fd5c2ff9bcd96a82920f3316c1)

(cherry picked from commit 5fe81c1bdb8b1331cef33231d642940b3ff026a0)

(cherry picked from commit 94ab4932aee749da8b4045f3611886af88de924d)

(cherry picked from commit d4409817a63a398ba7cb18e577e4f8a1c02f08f5)

Contains a fix for the n_hdlc double free bug.

(cherry picked from commit 9e60a17cb82b4387832fd563892c8ee1639a99c8)

This reverts commit 310ed9213d4ab1f585d3558b7dff3fb8e1649979.

Fails to build: https://hydra.nixos.org/build/50207269/nixlog/1/raw
Ref: https://github.com/NixOS/nixpkgs/issues/24217

Partial cherry-pick, dropped hydra bump.

(cherry picked from commit 99632d54663ad8866f8414948c12f37328abe865)

Backported from d284e37a59ef759b1bdca7f92f8b0278d6a70ad0

CVE-2017-7186

refs nixos/security#57 #24319

(cherry picked from commit 955b79f4629dd7ea8ba6b234c043b97e4ed5e5f5)

CVE-2017-7186

refs nixos/security#57 #24319

(cherry picked from commit 6b9c81aa1829611094464e4885e6f1b47adf4685)

(cherry picked from commit 6c17ad677c4970c87e8562574ea7e6fbf12b0813)

https://github.com/NixOS/security/issues/104
(cherry picked from commit 8c4339a9dcd34d33e16b3db5d911cc078164f0e8)

(cherry picked from commit 56504fcb2c548fc672e8c966f6dc41927e6c62b4)

(cherry picked from commit 157b2168527d3fd43578c615de1f3171b9b7ec08)
It's supposed to fix CVE-2016-10254.
https://github.com/NixOS/security/issues/49

According to NEWS
https://sourceware.org/git/?p=elfutils.git;a=blob;f=NEWS
ld got removed, but I don't expect that to break anything.

(cherry picked from commit 7b706900e7dd3ec55eb46a366f0bc47858fb7633)