a/sysvinit-scripts-2.0-noarch-32.txz
rc.S: Fixed cgroup, cgmanager, and cgproxy handling so that it works if /usr
is a separate partition. Thanks to Richard Cranium and Matteo Bernardini.

ap/ghostscript-9.19-i586-2.txz
Use the bundled version of openjpeg, which includes patches needed by
ghostscript. Thanks to qunying.

ap/lxc-2.0.1-i586-2.txz
Merged rc.S changes.

isolinux/initrd.img
Make rc.dropbear executable. Thanks to Eduard Rozenberg.

usb-and-pxe-installers/usbboot.img
Make rc.dropbear executable. Thanks to Eduard Rozenberg.

l/libxml2-2.9.4-i586-1.txz
This release fixes bugs and security issues:
Heap-based buffer underreads due to xmlParseName (CVE-2016-4447).
Format string vulnerability (CVE-2016-4448).
Inappropriate fetch of entities content (CVE-2016-4449).
For more information, see:
http://xmlsoft.org/news.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4448
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4449
(* Security fix *)

l/libxslt-1.1.29-i586-1.txz
This release fixes bugs and a security issue:
Fix for type confusion in preprocessing attributes (Daniel Veillard).
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7995
(* Security fix *)

n/php-5.6.22-i586-1.txz
This release fixes bugs and security issues.
For more information, see:
http://php.net/ChangeLog-5.php#5.6.22
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7456
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5093
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5094
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5096
(* Security fix *)

xap/geeqie-1.3-i586-1.txz