OSS + ELC EU 2026

The Buildroot Long-Term Support (LTS) sponsorship initiative was launched in March 2025. Its goal is to help Buildroot users maintain stable and secure products over longer periods, particularly in light of upcoming security regulations such as the Cyber Resilience Act (CRA).

We transitioned from a day-to-day maintenance workflow to a more systematic, weekly peer-reviewed approach. After more than a year and a half of maintaining the Buildroot LTS branch, we have encountered both successes and unforeseen challenges. We had to develop custom tooling to deal with a growing number of vulnerability reports, all while preserving stability for the releases.

This talk covers:

* How we tackle the maintenance task as a distributed team.
* Maintenance challenges with the constant flow of CVEs.
* Keeping the package metadata up-to-date and improving the vulnerability
monitoring across branches.
* What worked and what didn't.
* How we plan to evolve and improve for the future.