(cherry picked from commit 8c4a92887fc4c827d6f2fec9c146f5a947cfec7e)

(cherry picked from commit c29045c0908e4512d08a0510deb52a1df7ee0bbc)

Add to gappsWrapperArgs in preFixupPhases.

(cherry picked from commit 29fc27b)

[20.03] go_1_14: init at 1.14 and switch to it (backport)

(cherry picked from commit deec226)

Since we split wrapGAppsHook and move its variable initialization to preFixupPhases in #81475, it was getting run before glibPreFixupPhase which sets GSETTINGS_SCHEMAS_PATH variable gappsWrapperArgsHook depends on. Let's introduce this ugly hack to ensure glibPreFixupPhase will run before gappsWrapperArgsHook.

(cherry picked from commit 8e4f502)

Fixes CVE-2020-9308.

(cherry picked from commit 13a03f4)

See here for details:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html

(cherry picked from commit 8f8b6459e9f38bc21df4976265f96b4541b917ec)

[20.03][Security] bluez: 5.52 -> 5.53 for CVE-2020-0556

Fixes CVE-2019-14889, issue #77264.
Release notes: https://www.libssh.org/2019/12/10/libssh-0-9-3-and-libssh-0-8-8-security-release/

(cherry picked from commit 7ef8a42)

Fixes: https://nvd.nist.gov/vuln/detail/CVE-2019-17543
Release notes: https://github.com/lz4/lz4/releases/tag/v1.9.2

(cherry picked from commit 18ac6ba)

Fixes #78744

My previous change broke when there are more packages than the maximum
number of layers. I had assumed that the `store-path-to-layer.sh` was
only ever passed a single store path, but that is not the case if
there are multiple packages going into the final layer. To fix this, we
loop through the paths going into the final layer, appending them to the
tar file and making sure they end up at the right path.

dockerTools.buildLayeredImage: store all paths passed in final layer (backport)