mpfr package had invalid version 3.1.4.-3 when it should have been
3.1.4-3. This was caused because an empty _patchlevel was set appended
to the package version separated with a dot.
This commit changes the package versioning so that the _patchlevel is
appended to the package version only if it isn't empty.
Similar commit 0c86b53 was done to mpfr package in MINGW-packages.
* upgrade some broken packages
* correct some broken urls/checksums
* use secure urls where possible
* use stable url for ncurses
* some whitespace fixes
Remaining md5sums either didn't download or
didn't pass checksum tests.