python: bump to 2.7.5

fixes #137, the referenced CVE does apparently not apply to python 2.7.
the affected wildcard handling code seems to be missing.
alsa-lib: use better patch for mutex issue

patch was taken from alpine linux.
patch 1/2 addressing #142
alsa-utils: use better patch for mutex issue

patch modeled after alpine's alsa-lib patch.
closes #142.