a/udisks2-2.6.5-arm-1.txz
Thanks to Robby Workman.

ap/lxc-2.0.8-arm-1.txz
rc.lxc: Don't use screen for container startup. Thanks to franzen.
Added additional default container packages: cyrus-sasl, db48, gnutls,
iproute2, kmod, libcap-ng, libffi, libmnl, libtasn1, libunistring, nettle,
and p11-kit. Thanks to CTM.
Use configure option –enable-cgmanager=no. Thanks to Didier Spaier.

d/nasm-2.13.01-arm-1.txz

l/cairo-1.14.10-arm-1.txz

l/gsl-2.4-arm-1.txz
Shared library .so-version bump.

l/libbluray-1.0.1-arm-1.txz

n/ModemManager-1.6.8-arm-1.txz

n/nmap-7.50-arm-1.txz

n/openvpn-2.4.3-arm-1.txz
This update fixes several denial of service issues discovered
by Guido Vranken.
For more information, see:
https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7508
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7521
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7522
(* Security fix *)

x/libepoxy-1.4.3-arm-1.txz

x/libinput-1.7.3-arm-1.txz

x/libwacom-0.25-arm-1.txz

xap/gnuplot-5.0.6-arm-1.txz

xap/mozilla-firefox-52.2.0esr-arm-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
(* Security fix *)

xfce/garcon-0.6.1-arm-1.txz

xfce/tumbler-0.1.32-arm-1.txz

d/libtool-2.4.6-arm-2.txz
Recompiled to fix wrong embedded GCC version number.
Thanks to B Watson.

kde/calligra-2.9.11-arm-9.txz
Recompiled against gsl-2.4.

kde/step-4.14.3-arm-2.txz
Recompiled against gsl-2.4.

l/polkit-0.113-arm-2.txz
Added upstream patches to fix a memory leak and increase security when
using GIO. Thanks to Robby Workman.

n/gnupg2-2.1.21-arm-2.txz
If the machine does not have smart card devices, do not issue a warning about
a missing smart card. Thanks to Willy Sudiarto Raharjo.