l/babl-0.1.48-i586-1.txz

l/gegl-0.4.2-i586-1.txz

l/gst-plugins-base-1.14.1-i586-1.txz

l/gst-plugins-good-1.14.1-i586-1.txz

l/gst-plugins-libav-1.14.1-i586-1.txz

l/gstreamer-1.14.1-i586-1.txz

n/ca-certificates-20180409-noarch-1.txz

n/samba-4.8.2-i586-1.txz

x/libinput-1.10.7-i586-1.txz

x/xf86-video-vmware-13.3.0-i586-1.txz

xap/mozilla-firefox-60.0.1-i686-1.txz

extra/pure-alsa-system/gst-plugins-good-1.14.1-i586-1_alsa.txz

a/e2fsprogs-1.44.2-i586-1.txz

a/kernel-generic-4.14.41-i586-1.txz

a/kernel-generic-smp-4.14.41_smp-i686-1.txz

a/kernel-huge-4.14.41-i586-1.txz

a/kernel-huge-smp-4.14.41_smp-i686-1.txz

a/kernel-modules-4.14.41-i586-1.txz

a/kernel-modules-smp-4.14.41_smp-i686-1.txz

a/usbutils-010-i586-1.txz

ap/lsscsi-0.29-i586-1.txz

ap/nano-2.9.7-i586-1.txz

d/kernel-headers-4.14.41_smp-x86-1.txz

k/kernel-source-4.14.41_smp-noarch-1.txz

l/libgphoto2-2.5.18-i586-1.txz

n/curl-7.60.0-i586-1.txz
This release contains security fixes:
FTP: shutdown response buffer overflow
RTSP: bad headers buffer over-read
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000300
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000301
(* Security fix *)

n/links-2.16-i586-1.txz

x/xdg-utils-1.1.3-noarch-1.txz

xfce/xfce4-terminal-0.8.7.4-i586-1.txz

extra/linux-4.14.41-nosmp-sdk/*

kernels/*

l/libimobiledevice-1.2.0-i586-5.txz
Patch to fix double free with OpenSSL-1.1.x. Thanks to ill323.

extra/tigervnc/tigervnc-1.8.0-i586-5.txz
Patched and recompiled for xorg-server-1.20.0. Thanks to Matteo Bernardini.

isolinux/initrd.img

usb-and-pxe-installers/usbboot.img

pasture/php-5.6.36-i586-1.txz
Since some things still require php-5.6, here's an alternate package
compiled against openssl-1.1. Thanks to Darth Vader.