See: #13051

Newbyte authored Aug 24, 2021 and Leo committed Nov 21, 2021

While Lollypop does function without gst-plugins-good, it can't
play much in the way of local music. The "good" plugins allow for
decoding of at least MP3 and FLAC, which should be good enough for
most people.

If only Alpine had "weak" dependencies ...

- add secfixes for this upgrade
- remove mips comment, mips64 is discontinued

Jake Buchholz Göktürk authored Nov 19, 2021 and Andy Postnikov committed Nov 19, 2021

Addresses CVE-2021-41190.  For additional information, see https://github.com/moby/moby/releases/tag/v20.10.11

Addresses CVE-2021-41190.  For additional information, see https://github.com/containerd/containerd/releases/tag/v1.5.8

https://svn.apache.org/viewvc?view=revision&revision=1894734

fixes #10116

Thomas Liske authored Nov 15, 2021 and Francesco Colista committed Nov 15, 2021

fixes CVE-2021-43612

Anatoli Babenia authored Nov 15, 2021 and Leo committed Nov 15, 2021

Introduced in 20.5.1 https://github.com/gevent/gevent/commit/94d9788fc047a44bf2db7e179abb8796e3bed79e

https://www.postgresql.org/docs/release/13.5/

install luajit-dev which provides pkgconf .pc file

- CVE-2021-42378
- CVE-2021-42379
- CVE-2021-42380
- CVE-2021-42381
- CVE-2021-42382
- CVE-2021-42383
- CVE-2021-42384
- CVE-2021-42385
- CVE-2021-42386

Duncan Bellamy authored Nov 11, 2021 and Andy Postnikov committed Nov 12, 2021

* backport yarn patch to fix out of space during build
* remove dashboard angular app source