a/btrfs-progs-v4.19.1-arm-1.txz

a/dbus-1.12.12-arm-1.txz

a/hwdata-0.318-arm-1.txz

ap/cups-2.2.10-arm-1.txz

ap/cups-filters-1.21.5-arm-1.txz

ap/hplip-3.18.12-arm-1.txz

d/git-2.20.0-arm-1.txz

d/mercurial-4.8.1-arm-1.txz

d/meson-0.49.0-arm-1.txz

d/rust-1.31.0-arm-1.txz

l/ffmpeg-3.4.5-arm-1.txz

l/gobject-introspection-1.58.2-arm-1.txz

l/imagemagick-6.9.10_16-arm-1.txz

l/libgphoto2-2.5.21-arm-1.txz

l/libpng-1.6.36-arm-1.txz

l/librsvg-2.44.10-arm-1.txz

l/mozilla-nss-3.41-arm-1.txz

l/python-idna-2.8-arm-1.txz

l/python-requests-2.21.0-arm-1.txz

l/vte-0.54.3-arm-1.txz

n/ca-certificates-20181210-noarch-1.txz

n/libgpg-error-1.33-arm-1.txz

n/nghttp2-1.35.1-arm-1.txz

n/php-7.2.13-arm-1.txz
This is a security release which also contains several minor bug fixes.
For more information, see:
https://php.net/ChangeLog-7.php#7.2.13
(* Security fix *)

n/wpa_supplicant-2.7-arm-1.txz

x/mesa-18.3.1-arm-1.txz

x/xf86-video-i128-1.4.0-arm-1.txz

x/xterm-338-arm-1.txz

xap/mozilla-firefox-60.4.0esr-arm-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-17466
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18492
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18493
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18494
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18498
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-12405
(* Security fix *)

xap/mozilla-thunderbird-60.3.3-arm-1.txz
This is a bugfix release. For more information, see:
https://www.mozilla.org/en-US/thunderbird/60.3.3/releasenotes/

xfce/garcon-0.6.2-arm-1.txz

xfce/thunar-volman-0.9.1-arm-1.txz

pasture/php-5.6.39-arm-1.txz
Several security bugs have been fixed in this release:
Segfault when using convert.quoted-printable-encode filter.
Null pointer dereference in imap_mail.
imap_open allows to run arbitrary shell commands via mailbox parameter.
PharData always creates new files with mode 0666.
Heap Buffer Overflow (READ: 4) in phar_parse_pharfile.
For more information, see:
https://php.net/ChangeLog-5.php#5.6.39
(* Security fix *)

l/SDL2-2.0.9-arm-3.txz
Applied upstream patch to fix controller rumble. Thanks to orbea.

n/ntp-4.2.8p12-arm-5.txz
Fixed logrotate file. Thanks to allend and rworkman.