[Buildroot] Buildroot 2025.02.18 released
Peter Korsgaard
peter at korsgaard.com
Fri Sep 11 05:59:49 UTC 2026
>>>>> "Arnout" == Arnout Vandecappelle via buildroot <buildroot at buildroot.org> writes:
Hi,
Thanks for doing the release! Some minor comments:
> Important / security related fixes:
..
> glibc: CVE-2026-18374, CVE-2026-19499, CVE-2026-5435, CVE-2026-6238,
> CVE-2026-6368, CVE-2026-6791, CVE-2026-77117, CVE-2026-80489
..
> localedef: CVE-2026-18374, CVE-2026-19499, CVE-2026-5435,
> CVE-2026-6238, CVE-2026-6368, CVE-2026-6791, CVE-2026-77117,
> CVE-2026-80489
I don't think it makes a lot of sense to list the glibc security fixes
twice, just like we wouldn't list mesa3d security fixes for
mesa3d-headers. Maybe adjust your script to filter out packages setting
a custom _DL_SUBDIR?
> Toolchain:
> - linux-headers: bump to 5.10.269, 5.15.220, 6.1.187, 6.6.156, 6.12.109
> - powerpc: correctly track libquadmath
..
> Updated / fixed packages: avro-c, bind, clamav, collectd, dejavu,
> dnsmasq, dpdk, dracut, erlang, exiv2, expat, gcc-bare-metal, gdb,
> glibc, go, haproxy, hostapd, libcurl, libde265, libgit2, libheif,
> libldns, libopenssl, libssh2, libxkbcommon, libxml-parser-perl,
> libxml2, linux, linux-headers, linux-tools, localedef, mongoose,
> mosquitto, newt, nodejs, opencv4, openssh, openvpn, perl, powerpc,
We do not have a "powerpc" package, so I guess that was somehow in
relation to the toolchain change?
--
Bye, Peter Korsgaard
More information about the buildroot
mailing list