a/bash-5.0.002-x86_64-2.txz
Rebuilt with –libdir=/usr/lib${LIBDIRSUFFIX}. Thanks to RandomTroll.

a/mkinitrd-1.4.11-x86_64-9.txz
Automatically generate an initial ramdisk from the installer.
Added 'geninitrd' script to generate an initial ramdisk for the kernel that
/boot/vmlinuz-generic (and/or /boot/vmlinuz-generic-smp) points to.

ap/man-db-2.8.5-x86_64-2.txz
Comment out all the options in /etc/profile.d/man-db.{csh,sh} and let the
user decide whether or not to choose anything.

a/btrfs-progs-4.20.1-x86_64-1.txz

d/python-pip-19.0.1-x86_64-1.txz

l/mozilla-nss-3.41.1-x86_64-1.txz

n/dhcpcd-7.1.0-x86_64-1.txz

a/kernel-generic-4.19.17-x86_64-1.txz

a/kernel-huge-4.19.17-x86_64-1.txz

a/kernel-modules-4.19.17-x86_64-1.txz

d/kernel-headers-4.19.17-x86-1.txz

d/scons-3.0.4-x86_64-1.txz

d/vala-0.42.5-x86_64-1.txz

k/kernel-source-4.19.17-noarch-1.txz

n/httpd-2.4.38-x86_64-1.txz
This release contains security fixes and improvements.
mod_session: mod_session_cookie does not respect expiry time allowing
sessions to be reused. [Hank Ibell]
mod_http2: fixes a DoS attack vector. By sending slow request bodies
to resources not consuming them, httpd cleanup code occupies a server
thread unnecessarily. This was changed to an immediate stream reset
which discards all stream state and incoming data. [Stefan Eissing]
mod_ssl: Fix infinite loop triggered by a client-initiated
renegotiation in TLSv1.2 (or earlier) with OpenSSL 1.1.1 and
later. PR 63052. [Joe Orton]
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17199
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17189
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0190
(* Security fix *)

x/libdrm-2.4.97-x86_64-1.txz

kernels/*

isolinux/initrd.img

usb-and-pxe-installers/usbboot.img