a/aaa_elflibs-14.2-i586-26.txz

a/btrfs-progs-v4.9-i586-1.txz

ap/hplip-3.16.11-i586-1.txz

ap/tmux-2.3-i586-1.txz

l/elfutils-0.168-i586-1.txz

l/libpng-1.6.27-i586-1.txz
This release fixes an old NULL pointer dereference bug in png_set_text_2()
discovered and patched by Patrick Keshishian. The potential “NULL
dereference” bug has existed in libpng since version 0.71 of June 26, 1995.
To be vulnerable, an application has to load a text chunk into the png
structure, then delete all text, then add another text chunk to the same
png structure, which seems to be an unlikely sequence, but it has happened.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10087
(* Security fix *)

l/seamonkey-solibs-2.46-i586-1.txz

n/openvpn-2.4.0-i586-1.txz

x/libXpm-3.5.12-i586-1.txz

x/libdrm-2.4.74-i586-1.txz

x/mesa-13.0.2-i586-1.txz

x/xf86-video-dummy-0.3.8-i586-1.txz

x/xf86-video-geode-2.11.19-i586-1.txz

x/xf86-video-intel-git_20161117_169c74fa-i686-1.txz

xap/mozilla-thunderbird-45.6.0-i586-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/security/known-vulnerabilities/thunderbird.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899
(* Security fix *)

xap/seamonkey-2.46-i586-1.txz
This update contains security fixes and improvements.
For more information, see:
http://www.seamonkey-project.org/releases/seamonkey2.46
(* Security fix *)

xfce/xfce4-panel-4.12.1-i586-1.txz

xfce/xfce4-settings-4.12.1-i586-1.txz

xfce/xfconf-4.12.1-i586-1.txz