- sync with cauldron packages, to fix multiple security issues (CVE-2016-931, CVE-2016-9147, CVE-2016-9444, CVE-2017-3135) (#mga20107) - also ensure /dev/urandom is available in chroot (#mga12425)