a/etc-15.0-i586-5.txz
Don't hardcode passwd/shadow/group additions in doinst.sh - get them from
the .new files.

a/sysvinit-scripts-2.1-noarch-11.txz
rc.S: don't start rc.haveged in this script - move it to rc.M.
rc.M: start rc.haveged after seeding /dev/urandom in rc.S, and after
starting syslogd, klogd, and udev in rc.M.
rc.M: start rc.rndg (we don't ship it or rng-tools) after udev.
H. Peter Anvin says that it's fine to run both haveged and rndg,
and I trust his opinion on that.
Thanks to GazL.

ap/at-3.1.20-i586-4.txz
Fixed wrong variable in rc.atd. Thanks to upnort.

n/libgcrypt-1.8.3-i586-1.txz
Use blinding for ECDSA signing to mitigate a novel side-channel attack.
For more information, see:
https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0495
(* Security fix *)

a/dcron-4.5-i586-7.txz
Added init script and defaults file.
Moved TMPDIR to /run/cron.
Thanks to Robby Workman and shasta.

a/elilo-3.16-i586-7.txz

a/glibc-solibs-2.27-i586-4.txz
Don't restart init in the install script, let rc.6 handle it.

a/pkgtools-15.0-noarch-18.txz
setup.services: add support for rc.atd and rc.crond

a/sysvinit-scripts-2.1-noarch-10.txz
rc.6: restart init when shutting down - this prevents it from holding file
handles to removed/upgraded versions of the glibc shared libraries which
would interfere with shutdown.
rc.K: use full path to telinit
rc.M: start rc.atd and rc.crond
rc.M: don't remove cron tempfiles (moved to /run/cron)
rc.S: start rc.haveged

ap/at-3.1.20-i586-3.txz
Added init script and defaults file.

l/glibc-2.27-i586-4.txz
Don't restart init in the install script, let rc.6 handle it.

l/glibc-i18n-2.27-i586-4.txz

l/glibc-profile-2.27-i586-4.txz

a/efibootmgr-16-i586-1.txz

l/gnu-efi-3.0.8-i586-1.txz

a/efivar-36-i586-1.txz

a/haveged-1.9.2-i586-1.txz