[Buildroot] Buildroot 2025.02.17 released

Arnout Vandecappelle via buildroot <[email protected]>
Newsgroups net.busybox.buildroot
Message-ID <[email protected]> 
Hi,

Buildroot is a simple tool for creating complete embedded Linux systems
(https://buildroot.org).

Buildroot 2025.02.17 is released - Go download it at:

https://buildroot.org/downloads/buildroot-2025.02.17.tar.gz

or

https://buildroot.org/downloads/buildroot-2025.02.17.tar.xz

Or get it from Git:

https://gitlab.com/buildroot.org/buildroot.git (2025.02.17 tag)

Buildroot 2025.02.17 is a bugfix release, fixing a number of important /
security related issues discovered since the 2025.02.16 release.

Important / security related fixes:

apr-util: CVE-2025-49506, CVE-2026-32327, CVE-2026-34191,
  CVE-2026-34501, CVE-2026-34502
bind: CVE-2026-10723, CVE-2026-10822, CVE-2026-11331, CVE-2026-11605,
  CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204,
  CVE-2026-13321
botan: CVE-2026-32877, CVE-2026-32883, CVE-2026-32884, CVE-2026-34580,
  CVE-2026-34582
busybox: CVE-2023-39810, CVE-2024-58251, CVE-2026-26157,
  CVE-2026-26158, CVE-2026-29004
containerd: CVE-2026-35469, CVE-2026-46680, CVE-2026-47262,
  CVE-2026-53488
dracut: CVE-2026-6893
dropbear: (no CVE assigned)
exim: GCVE-25-2026-07-45-1, CVE-2026-66140, CVE-2026-66141
expat: CVE-2026-72522
go: CVE-2026-39822
intel-microcode: CVE-2025-31936, CVE-2025-31938, CVE-2025-35973,
  CVE-2026-20707, CVE-2026-20713, CVE-2026-20716, CVE-2026-20760,
  CVE-2026-20917
libarchive: (no CVE assigned)
libass: CVE-2026-61626, CVE-2026-61627
libgcrypt: CVE-2026-41989
libgit2: CVE-2026-53583, CVE-2026-53584, CVE-2026-53585,
  CVE-2026-53586, CVE-2026-53587
libheif: CVE-2026-62289, CVE-2026-62291, CVE-2026-62292,
  CVE-2026-62377, GHSA-46rp-pcq2-rpmr, GHSA-73p7-m7gg-w2jv,
  GHSA-9ww4-9v47-m7pj, GHSA-jc8f-p23p-5hjg, GHSA-xpw3-9rhw-482x
libmodsecurity: CVE-2026-52747, CVE-2026-52761
libssh: CVE-2026-15370, CVE-2026-59843, CVE-2026-59844, CVE-2026-59845,
  CVE-2026-59846, CVE-2026-59847, CVE-2026-59848, CVE-2026-59849,
  CVE-2026-59850
memcached: (no CVE assigned)
ntfs-3g: CVE-2026-42616, CVE-2026-42617, CVE-2026-42618,
  CVE-2026-46569, CVE-2026-46570, CVE-2026-46571, CVE-2026-46572,
  CVE-2026-56135, CVE-2026-56136
openssh: CVE-2026-59995, CVE-2026-59996, CVE-2026-59997,
  CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001,
  CVE-2026-60002
openvpn: CVE-2026-63649
perl: CVE-2026-13221, CVE-2026-57432, CVE-2026-8376
php: CVE-2026-17543, CVE-2026-7260, CVE-2026-9672
postgresql: CVE-2026-14662, CVE-2026-14663, CVE-2026-14664,
  CVE-2026-14666, CVE-2026-14668, CVE-2026-14669, CVE-2026-14670,
  CVE-2026-14671, CVE-2026-14672, CVE-2026-14673, CVE-2026-14676,
  CVE-2026-14677, CVE-2026-14678, CVE-2026-14679, CVE-2026-14680,
  CVE-2026-14681, CVE-2026-15741, CVE-2026-15742, CVE-2026-16238,
  CVE-2026-16239, CVE-2026-16241, CVE-2026-18024, CVE-2026-18408,
  CVE-2026-19385, CVE-2026-6464, CVE-2026-6469, CVE-2026-6470,
  CVE-2026-6471
python3: CVE-2025-13462, CVE-2026-15308, CVE-2026-2297, CVE-2026-3644,
  CVE-2026-4224, CVE-2026-4519, CVE-2026-7210
redis: (no CVE assigned)
rsync: CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53786,
  CVE-2026-53788, CVE-2026-53789, CVE-2026-53790, CVE-2026-53791,
  CVE-2026-53792, CVE-2026-53793, CVE-2026-53794, CVE-2026-53795,
  CVE-2026-53796, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799,
  CVE-2026-53800, CVE-2026-53801, CVE-2026-53802, CVE-2026-53803,
  CVE-2026-70452, CVE-2026-70453, CVE-2026-70454, CVE-2026-70455,
  CVE-2026-70456, CVE-2026-70457, CVE-2026-70458, CVE-2026-70459,
  CVE-2026-70460, CVE-2026-70461, CVE-2026-70462, CVE-2026-70463,
  CVE-2026-70464
samba4: CVE-2026-58216, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222,
  CVE-2026-58224, CVE-2026-6949
screen: (no CVE assigned)
ser2net: GHSA-cgh5-39mg-vhfr
socat: CVE-2026-56123
sqlite: CVE-2026-1182, CVE-2026-11822, CVE-2026-11824
stunnel: CVE-2026-70367, CVE-2026-70368
syslog-ng: CVE-2026-39879
util-linux: CVE-2026-13595
vim: CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420,
  CVE-2026-28421, CVE-2026-28422, CVE-2026-32249, CVE-2026-33412,
  CVE-2026-34714, CVE-2026-34982, CVE-2026-35177, CVE-2026-39881,
  CVE-2026-41411, CVE-2026-42307, CVE-2026-44656, CVE-2026-45130,
  CVE-2026-46483, CVE-2026-47162, CVE-2026-47167, CVE-2026-52858,
  CVE-2026-52859, CVE-2026-52860, CVE-2026-55693, CVE-2026-55892,
  CVE-2026-55895, CVE-2026-57451, CVE-2026-57452, CVE-2026-57453,
  CVE-2026-57455, CVE-2026-57456, CVE-2026-59856, CVE-2026-59857,
  CVE-2026-59858
wpa_supplicant: (no CVE assigned)
xlib_libXfont2: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
xserver_xorg-server: CVE-2026-55999, CVE-2026-56000
xwayland: CVE-2026-55999, CVE-2026-56000

Toolchain:

- toolchain-buildroot: drop Synopsys ARC specific GCC, binutils and gdb
- toolchain-external: drop Synopsys ARC toolchain
- linux-headers:: bump to 5.10.265, 5.15.216, 6.1.183, 6.6.152,
  6.12.104

Infrastructure updates/fixes:

- Add license information for skeleton packages
- Make docker image reproducible again
- New runtime tests for guile, libgpiod2, mdnsd, php, python-pydal

Updated defconfigs: acmesystems_acqua_a5_*

Removed defconfigs: acmesystems_aria_g25_{128mb, 256mb},
  acmesystems_arietta_g25_{128mb, 256mb}, s6lx9_microboard, ts4900,
  ts5500

Removed packages: argparse, ts4900-fpga

Updated / fixed packages: apache, apr-util, arm-trusted-firmware,
  at-spi2-core, bind, binutils, botan, busybox, cantarell, cifs-utils,
  containerd, cramfs, dbus-broker, dracut, drop, dropbear,
  environment-setup, exim, expat, glibc, go, guile, gvfs,
  ifupdown-scripts, initscripts, intel-microcode, libarchive, libass,
  libcamera, libgcrypt, libgee, libgit2, libglib2, libgpg-error,
  libgtk4, libgudev, libheif, libmicrohttpd, libmodsecurity, libpeas,
  librsvg, libsecret, libsoup, libsoup3, libssh, linux, linux-headers:,
  localedef, mbedtls, memcached, mini-snmpd, nettle, ntfs-3g, ogre,
  open62541, openblas, openssh, openvpn, optee-os, p11-kit, pahole,
  perl, php, postgresql, python-paho-mqtt, python-pydal, python-web2py,
  python3, qt6, quickjs, redis, rsync, rygel, samba4, screen, ser2net,
  socat, sqlite, stunnel, syslog-ng, uclibc, urandom-scripts, usbutils,
  util-linux, vim, wpa_supplicant, xlib_libXfont2, xserver_xorg-server,
  xwayland, xz

For more details, see the CHANGES file:

https://gitlab.com/buildroot.org/buildroot/-/blob/2025.02.17/CHANGES

Users of the affected packages are strongly encouraged to upgrade.

Many thanks to all the people contributing to this release:

git shortlog -s -n 2025.02.16..

    30	Bernd Kuhls
    15	Fiona Klute (Othermo GmbH)
    14	Fiona Klute
    11	Thomas Perale
    11	Titouan Christophe
     8	Waldemar Brodkorb
     6	Romain Naour
     6	Thomas Petazzoni
     5	Julien Olivain
     3	Francois Perrad
     3	Nicolas Cavallari
     3	Quentin Schulz
     3	Thomas Perale via buildroot
     2	Arnout Vandecappelle
     2	Franciszek Stachura
     2	Joachim Wiberg
     2	Yegor Yefremov
     1	Alsey Coleman Miller
     1	Baruch Siach
     1	Bernard Gautier
     1	Christian Stewart
     1	Conghao Hu
     1	Dario Binacchi
     1	Edgar Bonet
     1	Florian Larysch
     1	Frank Vanbever
     1	Jean-Michel Hautbois
     1	Laurent Pinchart
     1	Mattia Narducci
     1	Matéo Pourrier
     1	Michael Nosthoff
     1	Michele Comignano
     1	Neal Frager via buildroot
     1	Pedro Aguilar
     1	Raphaël Mélotte
     1	Shubham Chakraborty
     1	Yann E. MORIN

Regards,
Arnout
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.