miniupnpc changelog:
http://miniupnp.free.fr/files/changelog.php?file=miniupnpc-2.0.20180203.tar.gz
2.0.20180203 includes fixes for the recent buffer overflow and segfault
issues, see miniupnp/miniupnp#268.

expat changelog:
https://github.com/libexpat/libexpat/blob/R_2_2_5/expat/Changes
2.2.2 & 2.2.3 included security fixes.

Also includes latest config.guess and config.sub.

This updates our depends version for expat, miniupnpc, config.guess and
config.sub.
The ccache version is NOT updated (see D5503).

It also includes a fix for miniupnpc.

Backport of core PR12402 and PR12466.

Depends on D5502 and D5503.

*Note to reviewers:* the diff ends up fairly large due to the pull of
config.guess and config.sub. However this is mostly formatting changes
(${FOO} vs $FOO in particular), and there was no merge conflict
during the cherry-pick.

Run the Gitian builds twice, ensure the build is still deterministic.