obs-api: embed sanitize-4.0.0 to fix runtime issue

See merge request ruby-team/open-build-service!4

  When adding comments and other cases, obs-api calls unexistent
  function in sanitize 2.1.0, causing error 500 in webui.

Signed-off-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>

CVE-2017-5188.patch: Apply upstream fixes for CVE-2017-5188.(Closes:#900133)

See merge request ruby-team/open-build-service!3

obs-worker: depends on fdisk | util-linux (<< 2.29.2-3~). (Closes: #872093)

See merge request ruby-team/open-build-service!2

These are two upstream commits that fixes CVE-2017-5188:
  https://github.com/openSUSE/open-build-service/commit/00ec3c6f4132422f00d5c15e854755c331ef1661
  https://github.com/openSUSE/open-build-service/commit/ba27c91351878bc297ec4baba0bd488a2f3b568d



Signed-off-by: Andrew Lee (李健秋) <ajqlee@debian.org>

Signed-off-by: Andrew Lee (李健秋) <ajqlee@debian.org>

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>

  Running worker code in /run does not work as it is usually noexec.

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>

Fix logrotate, refine postrm, prerm script to ensure config and log files removed after purged. (Closes:#851356)

disable-slp.patch: do not use SLP in obs-serverconf as Debian drop slptool from archive. (Closes: #848855)

Refine postinst script to avoid modifies some files it has shipped. And also not fails during installation without setup database via dbconfig-common. (Closes: #847687)