MFH: r437961, r440117

• Behave same on BSDs as on Darwin in that UTF-8 shall be used instead of

ASCII outside the POSIX 'C' locale and UTF-8 is deafult in case anything
should call ucnv_getDefaultName() prior to calling setlocale(). This change
fixes problems that occur in multiple Qt5 applications when handling files
with names containing non-ASCII characters.

• Apply upstream patches to fix CVE-2017-7867 and CVE-2017-7868.

Approved by: ports-secteam (miwi)