[Buildroot-users] Buildroot 2025.08.1 released

[Arnout Vandecappelle]

Hi,

Buildroot is a simple tool for creating complete embedded Linux systems
(https://buildroot.org).

Buildroot 2025.08.1 is released - Go download it at:

https://buildroot.org/downloads/buildroot-2025.08.1.tar.gz

or

https://buildroot.org/downloads/buildroot-2025.08.1.tar.xz

Or get it from Git:

https://gitlab.com/buildroot.org/buildroot.git (2025.08.1 tag)

Buildroot 2025.08.1 is a bugfix release, fixing a number of important /
security related issues discovered since the 2025.08 release.


     Important / security related fixes:

     - atop: CVE-2025-31160
     - civetweb: CVE-2025-55763
     - cjson: CVE-2025-57052
     - connman: CVE-2025-32366, CVE-2025-32743
     - cups: CVE-2025-58060, CVE-2025-58364
     - expat: CVE-2025-59375
     - fastd: CVE-2025-24356
     - fetchmail: CVE number pending
     - ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800,
                    CVE-2025-59801
     - intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
                        CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
     - jasper: CVE-2023-51257, CVE-2025-8835
     - libcurl: CVE-2025-10148, CVE-2025-9086
     - libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
     - libssh: CVE-2025-8114, CVE-2025-8277
     - lua: CVE-2014-5461
     - opencv4: CVE-2025-53644
     - pcre2: CVE-2025-58050
     - poco: CVE-2025-6375
     - postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
     - python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
     - python-pip: CVE-2025-8869
     - raptor: CVE-2024-57822, CVE-2024-57823
     - syslog-ng: CVE-2024-47619
     - tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165


     Updated / fixed packages: asterisk, boinc, boot-wrapper-aarch64, c-icap,
     chocolate-doom, cjson, cpp-httplib, cutekeyboard, docker-engine, fatcat,
     fluent-bit, gnupg2, gnuplot, htpdate, iputils, kodi, libfreeimage,
     libopenssl, libselinux, libsemanage, libxkbcommon, libxmlrpc,
     linux-firmware, linuxptp, llvm, luaossl, luvi, mariadb, mdio-tools,
     modsecurity2, openjpeg, pango, php-lua, policycoreutils,
     python-aiohttp-session, python-certifi, python-cryptography,
     python-flask-cors, python-pytz, python-trove-classifiers,
     python-typing-extensions, rtl8723bu, rtl8723ds, rtl8821cu, rtl8822cs,
     rtl_433, ruby, samba4, sysprof, ti-k3-boot-firmware, tiff, tor, uboot,
     uclibc, upx, vulkan-headers, webkitgtk, wilc-driver, wlroots, x11r7,
     xilinx-embeddedsw, xilinx-prebuilt, xlib_xtrans, xr819-xradio, zziplib

     Boards updated / fixed: beagleboneai, loongarch64-efi, qemu (all),
     versal, zedboard

     Boards removed: at91sam9260eknf, atmel_sama5d3xek, roseapplepi

     Test Improvements:

     - test_docker_compose: update kernel & VM CPU
     - TestZfsUclibc: use internal backend for uClibc-ng toolchain
     - GitTestBase: remove git daemon due to Gitlab-CI security settings


For more details, see the CHANGES file:

https://gitlab.com/buildroot.org/buildroot/-/blob/2025.08.1/CHANGES

Users of the affected packages are strongly encouraged to upgrade.

Many thanks to all the people contributing to this release:

git shortlog -s -n 2025.08..

     21  Thomas Perale
     15  Titouan Christophe
      9  Dario Binacchi
      9  Thomas Petazzoni
      8  Bernd Kuhls
      8  Neal Frager
      8  Peter Korsgaard
      5  Giulio Benetti
      5  Waldemar Brodkorb
      4  Alexis Lothoré
      4  James Hilliard
      4  Romain Naour
      4  Scott Fan
      3  Fiona Klute (WIWA)
      3  Julien Olivain
      2  Adam Duskett
      2  Adrian Perez de Castro
      2  Angelo Compagnucci
      2  Francois Perrad
      2  Thomas Devoogdt
      1  Alex McLain
      1  Arnout Vandecappelle
      1  Bryan Brattlof
      1  Florian Larysch
      1  Maxim Kochetkov
      1  Nicolas Cavallari
      1  Raphael Pavlidis
      1  Robert Marko
      1  Viacheslav Bocharov
      1  Victor Krawiec
      1  Yegor Yefremov

Regards,
Arnout