Release notes for Yocto-4.0.34 (Kirkstone)
Security Fixes in Yocto-4.0.34
avahi: Fix CVE-2026-24401, CVE-2025-68276, CVE-2025-68468 and CVE-2025-68471
bind: Fix CVE-2025-13878
expat: Fix CVE-2026-24515 and CVE-2026-25210
ffmpeg: Ignore CVE-2025-25468 and CVE-2025-25469
glib-2.0: Fix CVE-2026-0988, CVE-2026-1484, CVE-2026-1485 and CVE-2026-1489
glibc: Fix CVE-2025-15281, CVE-2026-0861 and CVE-2026-0915
harfbuzz: Ignore CVE-2026-22693
inetutils: Fix CVE-2026-24061
libpng: Fix CVE-2026-22695, CVE-2026-22801 and CVE-2026-25646
libtasn1: Fix CVE-2025-13151
libxml2: Fix CVE-2026-0990 and CVE-2026-0992
linux-yocto/5.15: Fix CVE-2022-49465, CVE-2023-54207, CVE-2025-22058, CVE-2025-40040, CVE-2025-40149, CVE-2025-40164, CVE-2025-68211, CVE-2025-68340, CVE-2025-68365, CVE-2025-68725, CVE-2025-68817, CVE-2025-71147, CVE-2025-71154, CVE-2025-71162, CVE-2025-71163, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982, CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23060, CVE-2026-23061, CVE-2026-23063, CVE-2026-23064, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080, CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23087, CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23093, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23124, CVE-2026-23125, CVE-2026-23133, CVE-2026-23146, CVE-2026-23150, CVE-2026-23164, CVE-2026-23167 and CVE-2026-23170
openssl: Fix CVE-2025-15467, CVE-2026-22795, CVE-2026-22796, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420 and CVE-2025-69421
python3: Fix CVE-2025-12084 and CVE-2025-13837
vim: Ignore CVE-2025-66476
zlib: Ignore CVE-2026-22184
Fixes in Yocto-4.0.34
bind: Upgrade to 9.18.44
build-appliance-image: Update to kirkstone head revision
classes/buildhistory: Do not sign buildhistory commits
dev-manual/packages.rst: fix example recipe version
dev-manual/packages.rst: pr server: fix and explain why r0.X increments on SRCREV change
dev-manual/packages.rst: rename r0.0 to r0 when PR server is not enabled
glibc: stable 2.35 branch updates
linux-yocto/5.15: update to v5.15.199
migration-guides: add release notes for 4.0.32
openssl: upgrade to 3.0.19
poky.conf: Bump version for 4.0.34 release
poky.conf: add fedora-41, debian-12, rocky-8&9 to SANITY_TESTED_DISTROS
pseudo: Update to 1.9.3+git43cbd8fb49
ref-manual/classes.rst: fix broken links to U-Boot documentation
ref-manual/system-requirements.rst: update untested distros
scripts/install-buildtools: Update to 4.0.32
u-boot: move CVE patch out of u-boot-common.inc
what-i-wish-id-known.rst: replace figure by the new SVG
Known Issues in Yocto-4.0.34
N/A
Contributors to Yocto-4.0.34
Aleksandar Nikolic
Amaury Couderc
Ankur Tyagi
Antonin Godard
Bruce Ashfield
Fabio Berton
Hugo SIMELIERE
Lee Chee Yang
Michael Opdenacker
Paul Barker
Peter Marko
Richard Purdie
Scott Murray
Vijay Anusuri
Yoann Congal
Repositories / Downloads for Yocto-4.0.34
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: kirkstone
Tag: yocto-4.0.34
Git Revision: 7c348dd67cfd169b1a56bf969606b03dccb76c56
Release Artefact: yocto-docs-7c348dd67cfd169b1a56bf969606b03dccb76c56
sha: 0677fc3aee3c936599f3bcffbe16792494058bd3506ca3ab1697ceac1822829b
Download Locations:
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: kirkstone
Tag: yocto-4.0.34
Git Revision: 8334e82e1d85e50557bd3da64054fc9e3eafc495
Release Artefact: poky-8334e82e1d85e50557bd3da64054fc9e3eafc495
sha: 74fcc57d1dd3bb0c6ef77bfaaeca7504f393e705a55149cf52d4b61981c9c387
Download Locations:
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: kirkstone
Tag: yocto-4.0.34
Git Revision: 7b6c9faa301a6d058ca34e230586f6a81ffa3ffb
Release Artefact: oecore-7b6c9faa301a6d058ca34e230586f6a81ffa3ffb
sha: 375a22e3e229064749e78c80c44cde95adcedd26df76045fccefa3a9d3fa14ad
Download Locations:
meta-yocto
Repository Location: https://git.yoctoproject.org/meta-yocto
Branch: kirkstone
Tag: yocto-4.0.34
Git Revision: 1d3874a383023a5e2433e0fcfd87ac5d1e6d341d
Release Artefact: meta-yocto-1d3874a383023a5e2433e0fcfd87ac5d1e6d341d
sha: baf48bbe1f29686d502c0c6f311c7723b0a18f08e7efbf89c150589102285dbe
Download Locations:
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: kirkstone
Tag: yocto-4.0.34
Git Revision: 87c22abb1f11be430caf4372e6b833dc7d77564e
Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
Download Locations:
meta-gplv2
Repository Location: https://git.yoctoproject.org/meta-gplv2
Branch: kirkstone
Tag: yocto-4.0.34
Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
Download Locations:
bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.0
Tag: yocto-4.0.34
Git Revision: 8e2d1f8de055549b2101614d85454fcd1d0f94b2
Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
Download Locations: