[Buildroot] Buildroot 2025.02.18 released

[Arnout Vandecappelle]

On 11/09/2026 07:59, Peter Korsgaard wrote:
>>>>>> "Arnout" == Arnout Vandecappelle via buildroot <buildroot at buildroot.org> writes:
> 
> Hi,
> 
> Thanks for doing the release! Some minor comments:
> 
>   > Important / security related fixes:
> ..
>   > glibc: CVE-2026-18374, CVE-2026-19499, CVE-2026-5435, CVE-2026-6238,
>   >   CVE-2026-6368, CVE-2026-6791, CVE-2026-77117, CVE-2026-80489
> ..
>   > localedef: CVE-2026-18374, CVE-2026-19499, CVE-2026-5435,
>   >   CVE-2026-6238, CVE-2026-6368, CVE-2026-6791, CVE-2026-77117,
>   >   CVE-2026-80489
> 
> I don't think it makes a lot of sense to list the glibc security fixes
> twice, just like we wouldn't list mesa3d security fixes for
> mesa3d-headers. Maybe adjust your script to filter out packages setting
> a custom _DL_SUBDIR?

  I actually do that manually - it will be much easier to drop localedef.

>   > Toolchain:
> 
>   > - linux-headers: bump to 5.10.269, 5.15.220, 6.1.187, 6.6.156, 6.12.109
>   > - powerpc: correctly track libquadmath
> 
> ..
> 
>   > Updated / fixed packages: avro-c, bind, clamav, collectd, dejavu,
>   >   dnsmasq, dpdk, dracut, erlang, exiv2, expat, gcc-bare-metal, gdb,
>   >   glibc, go, haproxy, hostapd, libcurl, libde265, libgit2, libheif,
>   >   libldns, libopenssl, libssh2, libxkbcommon, libxml-parser-perl,
>   >   libxml2, linux, linux-headers, linux-tools, localedef, mongoose,
>   >   mosquitto, newt, nodejs, opencv4, openssh, openvpn, perl, powerpc,
> 
> We do not have a "powerpc" package, so I guess that was somehow in
> relation to the toolchain change?
  Heh, indeed, I didn't realize that by writing "powerpc: ..." my script would 
interpret it as a package name...


  Regards,
  Arnout