[Buildroot-users] Buildroot 2025.02.11 released

[Arnout Vandecappelle]

Hi,

Buildroot is a simple tool for creating complete embedded Linux systems
(https://buildroot.org).

Buildroot 2025.02.11 is released - Go download it at:

https://buildroot.org/downloads/buildroot-2025.02.11.tar.gz

or

https://buildroot.org/downloads/buildroot-2025.02.11.tar.xz

Or get it from Git:

https://gitlab.com/buildroot.org/buildroot.git (2025.02.11 tag)

Buildroot 2025.02.11 is a bugfix release, fixing a number of important /
security related issues discovered since the 2025.02.10 release.


avahi: CVE-2021-3468, CVE-2023-38469, CVE-2023-38470, CVE-2023-38471,
   CVE-2023-38472, CVE-2023-38473, CVE-2024-52615, CVE-2024-52616,
   CVE-2025-68276, CVE-2025-68468, CVE-2025-68471, CVE-2026-24401
bind: CVE-2025-13878
busybox: CVE-2025-46394, CVE-2025-60876
expat: CVE-2026-24515, CVE-2026-25210
glibc: CVE-2025-15281, CVE-2026-0861, CVE-2026-0915
gnutls: CVE-2025-14831, CVE-2026-1584
haproxy: CVE-2025-11230
intel-microcode: CVE-2024-24853, CVE-2025-31648
libopenssl: CVE-2025-11187, CVE-2025-15467, CVE-2025-15468,
   CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419,
   CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796
libpng: CVE-2026-22695, CVE-2026-22801, CVE-2026-25646
libtasn1: CVE-2025-13151
libvpx
linux-pam: CVE-2024-10963
nginx: CVE-2025-53859
nodejs: CVE-2025-27210, CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
   CVE-2025-59465, CVE-2025-59466, CVE-2026-21637
python-django: CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285,
  CVE-2026-1287, CVE-2026-1312
python-urllib3: CVE-2026-21441
strongswan: CVE-2025-62291
tor: TROVE-2025-016
vim: CVE-2025-66476
webkitgtk

Infrastructure updates/fixes:

arm-trusted-firmware, at91bootstrap3, barebox, linux, opensbi, optee-os,
   uboot: Add support for custom license files
config-fragments/autobuild: drop a number of duplicated toolchains
generate-cyclonedx: fix dependencies
Makefile: add check-package-external target
pkg-stats: add -N/--needs-update option
pkg-stats: fix RuntimeError with python 3.14 asyncio
relocate-sdk.sh: pre-calculate files in need of relocation
system/Config.in: do not reference md5 for sha256 option
testing/run-tests: specify multiprocessing method
testing: python-requests: new runtime test
testing: test_python.py: disable interpreter colors
testing/tests/package/test_firewalld: use ext2 instead of cpio

Updated / fixed packages: asterisk, at91bootstrap3, avahi, berkeleydb,
bind, bitcoin, brltty, busybox, cryptsetup, dash, dc3dd, docker-engine,
easy-rsa, ell, expat, frr, glibc, gnutls, haproxy,
igmpproxy, intel-microcode, libcec, libcurl, libgphoto2, libgpiod2,
libite, libopenssl, libpng, libselinux,
libtasn1, libucl, libvpx, libwebsockets, linux, linux-headers,
linux-pam, localedef, lockdev, m4, manual, mcelog, mesa3d, mp4v2,
mpg123, mpir, mupdf, netdata, nginx, nodejs, php, php-lua, pkg-utils,
python3, python-django, python-jinja2, python-urllib3, rp-pppoe,
rust-bindgen, safeclib, screen, shadow, spandsp, strongswan, swig,
syslog-ng, tor, uclibc, uftp, util-linux, vim, webkitgtk,
wireless-regdb, xmlstarlet, zeek

New package: libpam-pkcs11

Removed packages: criu, cvs, dbus-triggerd, dvdrw-tools, libsvg, libsvg-cairo, 
lockdev, gconf,


For more details, see the CHANGES file:

https://gitlab.com/buildroot.org/buildroot/-/blob/2025.02.11/CHANGES

Users of the affected packages are strongly encouraged to upgrade.

Many thanks to all the people contributing to this release:

git shortlog -s -n 2025.02.10..

     35  Bernd Kuhls
     22  Thomas Perale
     14  Peter Korsgaard
     13  Thomas Petazzoni
     12  Dario Binacchi
      7  Kory Maincent
      6  Giulio Benetti
      5  Titouan Christophe
      4  Julien Olivain
      4  Waldemar Brodkorb
      3  Arnout Vandecappelle
      3  Marcus Hoffmann
      2  Joachim Wiberg
      2  Michael Nosthoff
      2  Raphaël Mélotte
      2  Thomas Devoogdt
      1  Bart Van Severen
      1  Danomi Manchego
      1  Edgar Bonet
      1  El Mehdi YOUNES
      1  Fiona Klute
      1  Florian Larysch
      1  Franciszek Stachura
      1  Frank Vanbever
      1  Jimmy Durand Wesolowski
      1  Kadambini Nema
      1  Lance Fredrickson
      1  Pierre-Yves Kerbrat
      1  Raphael Pavlidis
      1  Romain Naour
      1  Yann E. MORIN

Regards,
Arnout