mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 21:23:51 -09:00
Code Issues Packages Projects Releases Wiki Activity

CHANGES: update for 2025.02.12

Browse Source 
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
(cherry picked from commit 8e3c43d9cc)
This commit is contained in:
Thomas Perale
2026-03-17 20:42:57 +01:00
committed by Arnout Vandecappelle
parent b6cd846443
commit a21946562b
1 changed files with 54 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

54
CHANGES
View File

@@ -931,6 +931,60 @@
- netsnmp: unexpected header length in /proc/net/snmp...
https://gitlab.com/buildroot.org/buildroot/-/issues/110
2025.02.12, released March 17, 2026
Important / security related fixes:
botan: CVE-2024-50382, CVE-2024-50383
c-ares: CVE-2025-62408
containerd: CVE-2024-25621, CVE-2024-40635, CVE-2025-47291,
CVE-2025-64329
cups: CVE-2025-58436, CVE-2025-61915
exiv2: CVE-2026-25884, CVE-2026-27596, CVE-2026-27631
fluidsynth: CVE-2025-56225
freerdp: CVE-2024-32661, CVE-2026-23530, CVE-2026-23531,
CVE-2026-23532, CVE-2026-23533, CVE-2026-23534, CVE-2026-23948,
CVE-2026-24675, CVE-2026-24676, CVE-2026-24679, CVE-2026-24681,
CVE-2026-24682, CVE-2026-24683
graphicsmagick, CVE-2025-27796
igmpproxy: CVE-2025-50681
imagemagick: CVE-2026-22770, CVE-2026-23874, CVE-2026-23876,
CVE-2026-24481, CVE-2026-25638, CVE-2026-25794, CVE-2026-25795,
CVE-2026-25796, CVE-2026-25798, CVE-2026-25799, CVE-2026-25897,
CVE-2026-25989, CVE-2026-26066, CVE-2026-26283, CVE-2026-26284,
CVE-2026-26983
jasper: CVE-2025-8836, CVE-2025-8837
libsoup3: CVE-2025-14523
libssh: CVE-2025-14821, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966,
CVE-2026-0967, CVE-2026-0968
libtpms: CVE-2026-21444
mupdf: CVE-2026-25556
netsnmp: CVE-2025-68615
patch: CVE-2018-6952, CVE-2019-20633
postgresql: CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006
rtl_433: CVE-2025-34450
squid: CVE-2025-62168
tinyproxy: CVE-2025-63938
vim: CVE-2026-25749, CVE-2026-26269
wpewebkit: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
CVE-2025-43240, CVE-2025-43265, CVE-2025-43272, CVE-2025-43342,
CVE-2025-43343, CVE-2025-43356, CVE-2025-43368, CVE-2025-6558
Infrastructure updates/fixes:
linux: make license option visible for _CUSTOM_VERSION as well
support/testing/run-tests: fix Debian testing/unstable
Updated / fixed packages: botan, c-ares, containerd, cups, dtc, exiv2,
faketime, flashbench, fluidsynth, freerdp, graphicsmagick, igmpproxy,
imagemagick, jasper, libsoup3, libssh, libtpms, libvips, libvirt,
libzlib, mupdf, netsnmp, patch, poco, postgresql, python-multipart,
qemu, rtl_433, squid, tinyproxy, util-linux, vim, webkitgtk, wmctrl,
wpewebkit
Removed packages: qemu (cris target)
2025.02.11, released February 20, 2026
avahi: CVE-2021-3468, CVE-2023-38469, CVE-2023-38470, CVE-2023-38471,