From d65ceed345089383b6af2d0b32c4dcab4a2998d2 Mon Sep 17 00:00:00 2001 From: Colin Evrard Date: Thu, 17 Apr 2025 14:04:13 +0200 Subject: [PATCH] CHANGES: Add changes for 2024.11.4 Signed-off-by: Colin Evrard Signed-off-by: Arnout Vandecappelle (cherry picked from commit c9e65c2cd7d81f775bf17b2e480c7e86fe419c3b) [Anrout: drop Makefile changes] Signed-off-by: Arnout Vandecappelle --- CHANGES | 44 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) diff --git a/CHANGES b/CHANGES index 836871373c..92c976fb97 100644 --- a/CHANGES +++ b/CHANGES @@ -77,6 +77,50 @@ - samba4 build failed in master https://gitlab.com/buildroot.org/buildroot/-/issues/86 +2024.11.4, released April 22nd, 2025 + + Important / security related fixes: + + - xserver_xorg-server & xwayland: CVE-2024-9632, CVE-2025-26594, + CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598 + CVE-2025-26599, CVE-2025-26600, CVE-2025-26601. + - exim: CVE-2025-30232. + - mbedtls: CVE-2025-27809, CVE-2025-27810. + - augeas: CVE-2025-2588. + - libarchive: CVE-2024-57970, CVE-2025-1632, CVE-2025-25724. + - xwayland: CVE-2024-31081, CVE-2024-31083, CVE-2024-9632, + CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, + CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, + CVE-2025-26600, CVE-2025-26601 + - libopenh264: CVE-2025-27091. + - libmodsecurity: CVE-2025-27110. + - tinyxml2: CVE-2024-50615. + + Updated/fixed packages: + + libgeos, freerdp, libsoup3, cairo, linux, apr, mali-driver, + libcoap, python-fastapi, python-twisted, tor, mc, linux-header, + linux-tools. + + Test Improvements: + + - linux-tools: selftests: Add path containing BPF binary. + - testing: add git runtime test. + + Infrastructure updates/fixes: + + - DEVELOPERS: change arnout's address. + - DEVELOPERS: add Dario Binacchi for ti-k3-boot-firmware. + - support/download/svn: use 'svn info' whith LC_ALL=C**. + - dillo: Fix an issue related to _SITE url for make show-info. + - kconfig: Handle backspace (^H) key. + - pkg-stats: add -v/--verbose option + + Build issues/problems solved for: + + freeswitch, glibc, v4l2loopback, ls1028ardb, ls1028ardb, + mesa3d-demos. + 2024.11.3, released March 24st, 2025 Important / security related fixes.