Yocto Project 5.0.13 リリース (Scarthgap)

はじめに

2025/11/1 に Yocto Project 5.0.13 がリリースされました。 Yocto Project 5.0 のポイントリリースとなります。

最新版のリリース物

リポジトリ情報

yocto-docs

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: 6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a
Release Artefact: yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a
sha: 454601d8b6034268212f74ca689ed360b08f7a4c7de5df726aa3706586ca4351
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a.tar.bz2

poky

Repository Name: poky
Repository Location: https://git.yoctoproject.org/poky
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: f16cffd030d21d12dd57bb95cfc310bda41f8a1f
Release Artefact: poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f
sha: 1367e43907f5ffa725f3afb019cd7ca07de21f13e5e73a1f5d1808989ae6ed2a
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f.tar.bz2

openembedded-core

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: 7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b
Release Artefact: oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b
sha: 4dcf636ec4a7b38b47a24e9cb3345b385bc126bb19620bf6af773bf292fef6b2
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b.tar.bz2

meta-yocto

Repository Name: meta-yocto
Repository Location: https://git.yoctoproject.org/meta-yocto
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: 3ff7ca786732390cd56ae92ff4a43aba46a1bf2e
Release Artefact: meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e
sha: 8efbaeab49dc3e1c4b67ff8d5801df1b05204c2255d18cff9a6857769ae33b23
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e.tar.bz2

meta-mingw

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2

bitbake

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.8
Tag: yocto-5.0.13
Git Revision: 1c9ec1ffde75809de34c10d3ec2b40d84d258cb4
Release Artefact: bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4
sha: 98bf54fa3abe237b73a93b1e33842a429209371fca6e409c258a441987879d16
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4.tar.bz2

リリース内容

バグフィックスと脆弱性フィックスとなります。

詳細は[ANNOUNCEMENT] Yocto Project 5.0.13(scarthgap-5.0.13) is Releasedを参照ください。

脆弱性フィックス

5.0.13 で修正された脆弱性は下記になります。

パッケージ	修正方法	CVE
busybox	Fix	CVE-2025-46394
cups	Fix	CVE-2025-58060 CVE-2025-58364
curl	Fix	CVE-2025-9086
dpkg	Fix	CVE-2025-6297
expat	follow-up Fix	CVE-2024-8176
ffmpeg	Fix	CVE-2025-1594
ffmpeg	Ignore	CVE-2023-49502 CVE-2023-50007 CVE-2023-50008 CVE-2023-50009 CVE-2023-50010 CVE-2024-31578 CVE-2024-31582 CVE-2024-31585
ghostscript	Fix	CVE-2025-59798 CVE-2025-59799 CVE-2025-59800
glib-2.0	Fix	CVE-2025-6052 CVE-2025-7039
go-binary-native	Ignore	CVE-2025-0913
go	Fix	CVE-2025-4674 CVE-2025-47906 CVE-2025-47907
grub2	Fix	CVE-2024-56738
grub2	Ignore	CVE-2024-2312
gstreamer1.0-plugins-bad	Fix	CVE-2025-3887
gstreamer1.0-plugins-base	Fix	CVE-2025-47807
gstreamer1.0-plugins-base	Ignore	CVE-2025-47806 CVE-2025-47808
gstreamer1.0-plugins-good	Ignore	CVE-2025-47183 CVE-2025-47219
gstreamer1.0	Ignore	CVE-2025-2759
libpam	Fix	CVE-2024-10963
libxslt	Fix	CVE-2025-7424
openssl	Fix	CVE-2025-9230 CVE-2025-9231 CVE-2025-9232
pulseaudio	Ignore	CVE-2024-11586
qemu	Ignore	CVE-2024-7730
tiff	Fix	CVE-2025-9900
tiff	Ignore	CVE-2024-13978 CVE-2025-8176 CVE-2025-8177 CVE-2025-8534 CVE-2025-8851
vim	Fix	CVE-2025-9389
wpa-supplicant	Fix	CVE-2022-37660

この記事の著者

三ツ木祐介 ( みつきん )

2020 年サイバートラスト入社。組み込み Linux に関わる業務に従事している。Yocto Project 公式実践講座 (LFD461-JP)講師。個人ブログ「みつきんのメモ」にて Yocto Project 関連の情報を発信。 2015 年から CQ 出版のインターフェース誌に寄稿を開始、2022 年 9 月号より「Yocto Project ではじめる組み込み Linux 開発入門」を連載中。