Yocto Project 5.0.4 リリース

はじめに

2024/10/9 に Yocto Project 5.0.4 がリリースされました。 Yocto Project 5.0 のポイントリリースとなります。

最新版のリリース物

リポジトリ情報

poky

Repository Name: poky
Repository Location: https://git.yoctoproject.org/poky
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: 2034fc38eb4e63984d9bd6b260aa1bf95ce562e4
Release Artefact: poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4
sha: 697ed099793d6c86d5ffe590e96f99689bd28dcb2d4451dc4585496fa4a20400
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2

openembedded-core

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: f888dd911529a828820799a7a1b75dfd3a44847c
Release Artefact: oecore-f888dd911529a828820799a7a1b75dfd3a44847c
sha: 93cb4c3c8e0f77edab20814d155847dc3452c6b083e3dd9c7a801e80a7e4d228
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2

meta-mingw

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: acbba477893ef87388effc4679b7f40ee49fc852
Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852
sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2

bitbake

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.8
Tag: yocto-5.0.4
Git Revision: d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3
Release Artefact: bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3
sha: d873f4d3a471d26680dc39200d8f3851a6863f15daa9bed978ba31b930f9a1c1
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2

yocto-docs

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: d71081dd14a9d75ace4d1c62472374f37b4a888d

リリース内容

バグフィックスと脆弱性フィックスとなります。

詳細は [ANNOUNCEMENT] Yocto Project 5.0.4 is Released を参照ください。

脆弱性フィックス

5.0.4 で修正された脆弱性は下記になります。

パッケージ	修正方法	CVE
apr	Fix	CVE-2023-49582
curl	Ignore	CVE-2024-32928
curl	Fix	CVE-2024-7264
expat	Fix	CVE-2024-45490 CVE-2024-45491 CVE-2024-45492
ffmpeg	Fix	CVE-2023-50008 CVE-2024-32230
libpcap	Fix	CVE-2023-7256 CVE-2024-8006
libyaml	Ignore	CVE-2024-35325 CVE-2024-35326
openssl	Fix	CVE-2024-5535 CVE-2024-6119
python3-certifi	Fix	CVE-2024-39689
python3-setuptools	Fix	CVE-2024-6345
python3	Fix	CVE-2024-6232 CVE-2024-7592 CVE-2024-8088 CVE-2024-27034
qemu	Fix	CVE-2024-4467 CVE-2024-7409
ruby	Fix	CVE-2024-27282
tiff	Fix	CVE-2024-7006
vim	Fix	CVE-2024-41957 CVE-2024-41965 CVE-2024-43374 CVE-2024-43790 CVE-2024-43802