Re: [Buildroot] Buildroot 2025.02.18 released

quoted

quoted

quoted

quoted

"Arnout" == Arnout Vandecappelle via buildroot [off-list ref] writes:

Hi,

Thanks for doing the release! Some minor comments:

 > Important / security related fixes:
..
 > glibc: CVE-2026-18374, CVE-2026-19499, CVE-2026-5435, CVE-2026-6238,
 >   CVE-2026-6368, CVE-2026-6791, CVE-2026-77117, CVE-2026-80489
..
 > localedef: CVE-2026-18374, CVE-2026-19499, CVE-2026-5435,
 >   CVE-2026-6238, CVE-2026-6368, CVE-2026-6791, CVE-2026-77117,
 >   CVE-2026-80489

I don't think it makes a lot of sense to list the glibc security fixes
twice, just like we wouldn't list mesa3d security fixes for
mesa3d-headers. Maybe adjust your script to filter out packages setting
a custom _DL_SUBDIR?


 > Toolchain:

 > - linux-headers: bump to 5.10.269, 5.15.220, 6.1.187, 6.6.156, 6.12.109
 > - powerpc: correctly track libquadmath

..

 > Updated / fixed packages: avro-c, bind, clamav, collectd, dejavu,
 >   dnsmasq, dpdk, dracut, erlang, exiv2, expat, gcc-bare-metal, gdb,
 >   glibc, go, haproxy, hostapd, libcurl, libde265, libgit2, libheif,
 >   libldns, libopenssl, libssh2, libxkbcommon, libxml-parser-perl,
 >   libxml2, linux, linux-headers, linux-tools, localedef, mongoose,
 >   mosquitto, newt, nodejs, opencv4, openssh, openvpn, perl, powerpc,

We do not have a "powerpc" package, so I guess that was somehow in
relation to the toolchain change?

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot