mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-30 22:11:59 -09:00
CHANGES: Update for 2025.02.14
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
(cherry picked from commit 92f9688952)
This commit is contained in:
Arnout Vandecappelle
133
CHANGES
133
CHANGES
@@ -1111,6 +1111,139 @@
|
|||||||
- netsnmp: unexpected header length in /proc/net/snmp...
|
- netsnmp: unexpected header length in /proc/net/snmp...
|
||||||
https://gitlab.com/buildroot.org/buildroot/-/issues/110
|
https://gitlab.com/buildroot.org/buildroot/-/issues/110
|
||||||
|
|
||||||
|
2025.02.14, released May 20, 2026
|
||||||
|
|
||||||
|
Changes with potentially large impact:
|
||||||
|
|
||||||
|
- ficl was downgraded to version 3.065 because ficl4 is no longer
|
||||||
|
maintained.
|
||||||
|
|
||||||
|
Important / security related fixes:
|
||||||
|
|
||||||
|
apache: CVE-2026-23918, CVE-2026-24072, CVE-2026-28780, CVE-2026-29168,
|
||||||
|
CVE-2026-29169, CVE-2026-33006, CVE-2026-33007, CVE-2026-33523,
|
||||||
|
CVE-2026-33857, CVE-2026-34032, CVE-2026-34059
|
||||||
|
bubblewrap: CVE-2026-41163
|
||||||
|
cups: CVE-2026-27447, CVE-2026-34978, CVE-2026-34979, CVE-2026-34980,
|
||||||
|
CVE-2026-34990, CVE-2026-39314, CVE-2026-39316, CVE-2026-41079
|
||||||
|
dash: CVE-2026-31323
|
||||||
|
dropbear: CVE-2019-6111, CVE-2026-35385
|
||||||
|
exim: CVE-2026-40684, CVE-2026-40685, CVE-2026-40686, CVE-2026-40687
|
||||||
|
expat: CVE-2026-7210, CVE-2026-41080
|
||||||
|
ffmpeg: CVE-2026-30997
|
||||||
|
freetype: CVE-2026-23865
|
||||||
|
ghostscript: (no CVE assigned)
|
||||||
|
giflib: CVE-2021-40633, CVE-2025-31344, CVE-2026-23868
|
||||||
|
gnutls: CVE-2026-33845, CVE-2026-33846, CVE-2026-3832, CVE-2026-3833,
|
||||||
|
CVE-2026-42009, CVE-2026-42010, CVE-2026-42011, CVE-2026-42012,
|
||||||
|
CVE-2026-42013, CVE-2026-42014, CVE-2026-42015, CVE-2026-5260,
|
||||||
|
CVE-2026-5419
|
||||||
|
imagemagick: CVE-2026-28493, CVE-2026-28494, CVE-2026-28686,
|
||||||
|
CVE-2026-28687, CVE-2026-28688, CVE-2026-28689, CVE-2026-28690,
|
||||||
|
CVE-2026-28691, CVE-2026-28692, CVE-2026-28693, CVE-2026-30883,
|
||||||
|
CVE-2026-30929, CVE-2026-30931, CVE-2026-30935, CVE-2026-30936,
|
||||||
|
CVE-2026-30937, CVE-2026-31853, CVE-2026-32259, CVE-2026-32636,
|
||||||
|
CVE-2026-33535, CVE-2026-33536, CVE-2026-33899, CVE-2026-33900,
|
||||||
|
CVE-2026-33901, CVE-2026-33902, CVE-2026-33905, CVE-2026-33908,
|
||||||
|
CVE-2026-34238, CVE-2026-40169, CVE-2026-40183, CVE-2026-40310,
|
||||||
|
CVE-2026-40311, CVE-2026-40312
|
||||||
|
lcms2: CVE-2026-41254, CVE-2026-42798
|
||||||
|
libcap: CVE-2026-4878
|
||||||
|
libcurl: CVE-2026-7168, CVE-2026-7009, CVE-2026-6429, CVE-2026-6276,
|
||||||
|
CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873
|
||||||
|
libexif: CVE-2026-40386, CVE-2026-40385, CVE-2026-32775
|
||||||
|
libjxl: CVE-2025-12474, CVE-2026-1837
|
||||||
|
libmicrohttpd: (no CVE assigned)
|
||||||
|
libpcap: CVE-2025-11961
|
||||||
|
libpjsip: CVE-2026-25994, CVE-2026-26203, CVE-2026-26967,
|
||||||
|
CVE-2026-29068, CVE-2026-28799, CVE-2026-32942, CVE-2026-32945,
|
||||||
|
CVE-2026-33069, CVE-2026-34235, CVE-2026-40614, CVE-2026-40892,
|
||||||
|
CVE-2026-41416, CVE-2026-41415, CVE-2026-42225, CVE-2025-65102
|
||||||
|
libspdm: GHSA-m4wc-xmvg-369f, GHSA-j54w-759w-xj3m
|
||||||
|
liburiparser: CVE-2026-42371
|
||||||
|
libxml2: CVE-2026-6732
|
||||||
|
log4cxx: CVE-2025-54812, CVE-2025-54813, CVE-2026-40023
|
||||||
|
mbedtls: CVE-2025-66442, CVE-2026-25833, CVE-2026-25834,
|
||||||
|
CVE-2026-25835, CVE-2026-34871, CVE-2026-34872, CVE-2026-34873,
|
||||||
|
CVE-2026-34874, CVE-2026-34875, CVE-2026-34876, CVE-2026-34877
|
||||||
|
musl: CVE-2026-6042, CVE-2026-40200
|
||||||
|
nginx: CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
|
||||||
|
CVE-2026-28753, CVE-2026-28755, CVE-2025-53859, CVE-2025-23419,
|
||||||
|
CVE-2024-7347, CVE-2024-32760, CVE-2024-31079, CVE-2024-35200,
|
||||||
|
CVE-2024-34161
|
||||||
|
opensc: CVE-2025-13763, CVE-2025-49010, CVE-2025-66215, CVE-2025-66038,
|
||||||
|
CVE-2025-66037
|
||||||
|
openvpn: CVE-2026-40215, CVE-2026-35058
|
||||||
|
p11-kit: CVE-2026-2100
|
||||||
|
p7zip: CVE-2021-3520
|
||||||
|
proftpd: CVE-2026-42167
|
||||||
|
python-cbor2: CVE-2026-26209, CVE-2025-64076, CVE-2025-68131
|
||||||
|
python-django: CVE-2026-3902, CVE-2026-4277, CVE-2026-4292,
|
||||||
|
CVE-2026-33033, CVE-2026-33034
|
||||||
|
python-pyasn1: CVE-2026-30922
|
||||||
|
python-pyopenssl: CVE-2026-27448, CVE-2026-27459
|
||||||
|
python-requests: CVE-2026-25645
|
||||||
|
python3: CVE-2024-6923, CVE-2025-13836, CVE-2025-59375
|
||||||
|
rsync: (no CVE assigned)
|
||||||
|
ruby: CVE-2026-41316
|
||||||
|
sqlite: CVE-2025-70873
|
||||||
|
strongswan: CVE-2026-25075
|
||||||
|
systemd: CVE-2026-40226
|
||||||
|
thrift: CVE-2025-48431, CVE-2026-41602, CVE-2026-41603, CVE-2026-41604,
|
||||||
|
CVE-2026-41605, CVE-2026-41606, CVE-2026-41607, CVE-2026-41636,
|
||||||
|
CVE-2026-43868, CVE-2026-43869, CVE-2026-43870
|
||||||
|
tor: CVE-2026-44597, CVE-2026-44599, CVE-2026-44600, CVE-2026-44601,
|
||||||
|
CVE-2026-44602, CVE-2026-44603
|
||||||
|
util-linux: CVE-2026-27456
|
||||||
|
webkitgtk: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
|
||||||
|
CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
|
||||||
|
CVE-2026-28871, CVE-2025-43457, CVE-2025-46299, CVE-2026-20608,
|
||||||
|
CVE-2026-20635, CVE-2026-20636, CVE-2026-20644, CVE-2026-20652,
|
||||||
|
CVE-2026-20676
|
||||||
|
wolfssl: CVE-2026-5264, CVE-2026-5263, CVE-2026-5295, CVE-2026-5466,
|
||||||
|
CVE-2026-5477, CVE-2026-5447, CVE-2026-5500, CVE-2026-5501,
|
||||||
|
CVE-2026-5503, CVE-2026-5187, CVE-2026-5188, CVE-2026-5448,
|
||||||
|
CVE-2026-5772, CVE-2026-5778, CVE-2026-3548, CVE-2026-3549,
|
||||||
|
CVE-2026-3547, CVE-2026-0819, CVE-2026-1005, CVE-2026-2645,
|
||||||
|
CVE-2026-3230, CVE-2025-12888, CVE-2025-11936, CVE-2025-11935,
|
||||||
|
CVE-2025-11934, CVE-2025-11933, CVE-2025-11931, CVE-2025-11932,
|
||||||
|
CVE-2025-12889, CVE-2025-13912, CVE-2025-7395, CVE-2025-7394,
|
||||||
|
CVE-2025-7396
|
||||||
|
wolftpm: CVE-2025-7844
|
||||||
|
xlib_libXpm: CVE-2026-4367
|
||||||
|
xserver_xorg-server: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
|
||||||
|
CVE-2026-34002, CVE-2026-34003
|
||||||
|
xwayland: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
|
||||||
|
CVE-2026-34002, CVE-2026-34003
|
||||||
|
xz: CVE-2025-31115, CVE-2026-34743
|
||||||
|
|
||||||
|
Toolchain:
|
||||||
|
|
||||||
|
- gcc: fix GCC 12, 13 and 14 build with host gcc 16, bump 12.x series
|
||||||
|
to 12.5.0
|
||||||
|
- linux-headers: bump to 6.12.90, 6.6.140, 6.1.173, 5.15.207, 5.10.256
|
||||||
|
|
||||||
|
Infrastructure updates/fixes:
|
||||||
|
|
||||||
|
- Various improvements to pkg-stats.
|
||||||
|
|
||||||
|
New packages: libxmlsec1
|
||||||
|
|
||||||
|
Updated / fixed packages: apache, btrfs-progs, bubblewrap, c-icap,
|
||||||
|
ca-certificates, cmake, cups, dash, dropbear, exim, expat, ffmpeg,
|
||||||
|
ficl, freetype, frr, gcc, ghostscript, giflib, gnutls, haproxy,
|
||||||
|
imagemagick, initscripts, kmod, lcms2, libarchive, libcap, libcurl,
|
||||||
|
libexif, libinput, libjxl, libmicrohttpd, libpcap, libpjsip, libpng,
|
||||||
|
libsodium, libspdm, liburiparser, libxml2, linux, linux-headers,
|
||||||
|
log4cxx, mbedtls, mkpasswd, musl, mutt, neon, netsnmp,
|
||||||
|
network-manager, nginx, opensc, openssh, openvpn, p11-kit, p7zip,
|
||||||
|
proftpd, python-cbor2, python-certifi, python-django,
|
||||||
|
python-magic-wormhole, python-pyasn1, python-pyopenssl,
|
||||||
|
python-requests, python3, rsync, ruby, sqlite, strongswan, sudo,
|
||||||
|
systemd, thrift, tor, util-linux, watchdogd, webkitgtk,
|
||||||
|
wireless-regdb, wolfssl, wolftpm, xdg-dbus-proxy, xlib_libXpm,
|
||||||
|
xserver_xorg-server, xwayland, xz
|
||||||
|
|
||||||
2025.02.13, released April 21, 2026
|
2025.02.13, released April 21, 2026
|
||||||
|
|
||||||
Changes with potentially large impact:
|
Changes with potentially large impact:
|
||||||
|
|||||||
Reference in New Issue
Block a user