Release notes for Yocto-4.0.25 (Kirkstone)
Security Fixes in Yocto-4.0.25
avahi: Fix CVE-2024-52616
binutils: Fix CVE-2024-53589
gdb: Fix CVE-2024-53589
go: Fix CVE-2024-34155, CVE-2024-34156, CVE-2024-34158 and CVE-2024-45336
gstreamer1.0: Ignore CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834, CVE-2024-47602, CVE-2024-47603, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775 and CVE-2024-47776
linux-yocto/5.15: Fix CVE-2024-36476, CVE-2024-55916, CVE-2024-56369, CVE-2024-56626, CVE-2024-56627, CVE-2024-56715, CVE-2024-56716, CVE-2024-57802, CVE-2024-57807, CVE-2024-57841, CVE-2024-57890, CVE-2024-57896, CVE-2024-57900, CVE-2024-57910, CVE-2024-57911, CVE-2024-57938, CVE-2024-57951, CVE-2025-21631, CVE-2025-21665, CVE-2025-21666, CVE-2025-21669, CVE-2025-21680, CVE-2025-21683, CVE-2025-21694, CVE-2025-21697 and CVE-2025-21699
ofono: Fix CVE-2024-7539, CVE-2024-7540, CVE-2024-7541, CVE-2024-7542, CVE-2024-7543, CVE-2024-7544, CVE-2024-7545, CVE-2024-7546 and CVE-2024-7547
openssl: Fix CVE-2024-13176
rsync: Fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088 and CVE-2024-12747
ruby: Fix CVE-2024-49761
socat: Fix CVE-2024-54661
vte: Fix CVE-2024-37535
wget: Fix CVE-2024-10524
Fixes in Yocto-4.0.25
bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48
build-appliance-image: Update to kirkstone head revision
classes-global/insane: Look up all runtime providers for file-rdeps
classes/nativesdk: also override TUNE_PKGARCH
classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture
cmake: apply parallel build settings to ptest tasks
dev-manual/building: document the initramfs-framework recipe
docs: Update autobuilder URLs to valkyrie
documentation: Fix typo in standards.md
glibc: Suppress GCC -Os warning on user2netname for sunrpc
glibc: stable 2.35 branch updates
lib/packagedata.py: Add API to iterate over rprovides
linux-yocto/5.15: upgrade to v5.15.178
migration-guides: add release notes for 4.0.24
openssl: upgrade to 3.0.16
poky.conf: bump version for 4.0.25
python3: Treat UID/GID overflow as failure
rsync: Delete pedantic errors re-ordering patch
rsync: upgrade to 3.2.7
rust-common.bbclass: soft assignment for RUSTLIB path
scripts/install-buildtools: Update to 4.0.23
test-manual/reproducible-builds: fix reproducible links
Known Issues in Yocto-4.0.25
N/A
Contributors to Yocto-4.0.25
Aleksandar Nikolic
Alexander Kanavin
Antonin Godard
Archana Polampalli
Bruce Ashfield
Deepesh Varatharajan
Divya Chellam
Joshua Watt
Khem Raj
Lee Chee Yang
Nikhil R
Pedro Ferreira
Peter Marko
Praveen Kumar
Richard Purdie
Ross Burton
Simon A. Eugster
Steve Sakoman
Yash Shinde
Yogita Urade
Zhang Peng
Repositories / Downloads for Yocto-4.0.25
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: kirkstone
Tag: yocto-4.0.25
Git Revision: b5aa03f336c121269551f9e7baed4c677c76bb39
Release Artefact: poky-b5aa03f336c121269551f9e7baed4c677c76bb39
sha: 7afbcb25f0dd89a4fb6dd4c5945061705ef9ce79a6863806278603273c2b3b4a
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/poky-b5aa03f336c121269551f9e7baed4c677c76bb39.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/poky-b5aa03f336c121269551f9e7baed4c677c76bb39.tar.bz2
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: kirkstone
Tag: yocto-4.0.25
Git Revision: 5a794fd244f7fdeb426bd5e3def6b4effc0e8c62
Release Artefact: oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62
sha: 8fc93109693e5f4702b3fe0633b6be833605291b3d595dc8bdeb6379f40cd2de
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62.tar.bz2
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: kirkstone
Tag: yocto-4.0.25
Git Revision: 87c22abb1f11be430caf4372e6b833dc7d77564e
Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
Repository Location: https://git.yoctoproject.org/meta-gplv2
Branch: kirkstone
Tag: yocto-4.0.25
Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.0
Tag: yocto-4.0.25
Git Revision: e71f1ce53cf3b8320caa481ae62d1ce2900c4670
Release Artefact: bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670
sha: 007eef35174586c85b233f4ec91578956fe21e0236f7ca2c3f90f9d034f94b5b
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670.tar.bz2
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: kirkstone
Tag: yocto-4.0.25
Git Revision: c6dce0c77481dee7b0a0fcdc803f755ceccef234