Release notes for Yocto-4.0.32 (Kirkstone)
Security Fixes in Yocto-4.0.32
bind: Fix CVE-2025-8677, CVE-2025-40778 and CVE-2025-40780
binutils: Fix CVE-2025-11412 and CVE-2025-11413
curl: Ignore CVE-2025-10966
elfutils: Fix CVE-2025-1376 and CVE-2025-1377
gnutls: Fix CVE-2025-9820
go: Fix CVE-2024-24783, CVE-2025-58187, CVE-2025-58189, CVE-2025-61723 and CVE-2025-61724
libarchive: Fix CVE-2025-60753
libarchive: Fix 2 security issue (https://github.com/libarchive/libarchive/pull/2753 and https://github.com/libarchive/libarchive/pull/2768)
libpng: Fix CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018 and CVE-2025-66293
libxml2: Fix CVE-2025-7425
musl: Fix CVE-2025-26519
openssh: Fix CVE-2025-61984 and CVE-2025-61985
python3-idna: Fix CVE-2024-3651
python3-urllib3: Fix CVE-2024-37891
python3: fix CVE-2025-6075
ruby: Fix CVE-2024-35176, CVE-2024-39908 and CVE-2024-41123
rust-cross-canadian: Ignore CVE-2024-43402
u-boot: Fix CVE-2024-42040
wpa-supplicant: Fix CVE-2025-24912
xserver-xorg: Fix CVE-2025-62229, CVE-2025-62230 and CVE-2025-62231
xwayland: Fix CVE-2025-62229, CVE-2025-62230 and CVE-2025-62231
Fixes in Yocto-4.0.32
babeltrace2: fetch with https protocol
bind: upgrade to 9.18.41
build-appliance-image: Update to kirkstone head revision
dev-manual/layers.rst: document “bitbake-layers show-machines”
dev-manual/new-recipe.rst: replace ‘bitbake -e’ with ‘bitbake-getvar’
dev-manual/new-recipe.rst: typo, “whith” -> “which”
dev-manual/new-recipe.rst: update “recipetool -h” output
dev-manual: debugging: use bitbake-getvar in Viewing Variable Values section
documentation: link to the Releases page on yoctoproject.org instead of wiki
efibootmgr: update SRC_URI branch
flac: patch seeking bug
goarch.bbclass: do not leak TUNE_FEATURES into crosssdk task signatures
kernel-dev: add disable config example
kernel-dev: common: migrate bitbake -e to bitbake-getvar
libmicrohttpd: disable experimental code by default
migration-guides: add release notes for 4.0.31
oe-build-perf-report: relax metadata matching rules
overview-manual: migrate to SVG + fix typo
poky.conf: bump version for 4.0.32
python3-urllib3: upgrade to 1.26.20
recipes: Don’t use ftp.gnome.org
ref-manual: variables: migrate the OVERRIDES note to bitbake-getvar
systemd-bootchart: update SRC_URI branch
xf86-video-intel: correct SRC_URI as freedesktop anongit is down
Known Issues in Yocto-4.0.32
N/A
Contributors to Yocto-4.0.32
Thanks to the following people who contributed to this release:
Alexander Kanavin
Archana Polampalli
Divya Chellam
Gyorgy Sarvari
Hitendra Prajapati
Hongxu Jia
Jason Schonberg
Lee Chee Yang
Peter Marko
Praveen Kumar
Quentin Schulz
Richard Purdie
Robert P. J. Day
Ross Burton
Saquib Iltaf
Soumya Sambu
Steve Sakoman
Vijay Anusuri
Walter Werner SCHNEIDER
Repositories / Downloads for Yocto-4.0.32
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: kirkstone
Tag: yocto-4.0.32
Git Revision: 4b9df539fa06fb19ed8b51ef2d46e5c56779de81
Release Artefact: yocto-docs-4b9df539fa06fb19ed8b51ef2d46e5c56779de81
sha: 70ee2caf576683c5f31ac5a592cde1c0650ece25cfcd5ff3cc7eedf531575611
Download Locations:
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: kirkstone
Tag: yocto-4.0.32
Git Revision: 2c05660b21c7cc1082aeac8b75d8a2d82e249f63
Release Artefact: poky-2c05660b21c7cc1082aeac8b75d8a2d82e249f63
sha: d7a55a18a597a7b140a81586b7ca6379c208ebbb3285de36c48fde10882947d8
Download Locations:
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: kirkstone
Tag: yocto-4.0.32
Git Revision: 2ed3f8b938579dbbb804e04c45a968cc57761db7
Release Artefact: oecore-2ed3f8b938579dbbb804e04c45a968cc57761db7
sha: 11b9632586dfbf3f0ef69eca2014a8002f25ca8d53cfe9424e27361ba3a20831
Download Locations:
meta-yocto
Repository Location: https://git.yoctoproject.org/meta-yocto
Branch: kirkstone
Tag: yocto-4.0.32
Git Revision: 77b40877c179ea3ce5c37c7ba1831e9c0e289266
Release Artefact: meta-yocto-77b40877c179ea3ce5c37c7ba1831e9c0e289266
sha: e908d42690881cd6e07b9ca18a21eb8761a0ec72d940b12905622e75ba913974
Download Locations:
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: kirkstone
Tag: yocto-4.0.32
Git Revision: 87c22abb1f11be430caf4372e6b833dc7d77564e
Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
Download Locations:
meta-gplv2
Repository Location: https://git.yoctoproject.org/meta-gplv2
Branch: kirkstone
Tag: yocto-4.0.32
Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
Download Locations:
bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.0
Tag: yocto-4.0.32
Git Revision: 8e2d1f8de055549b2101614d85454fcd1d0f94b2
Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
Download Locations: