Yocto Project 5.2.2 リリース (Walnascar)

はじめに

2025/7/17 に Yocto Project 5.2.2 がリリースされました。 Yocto Project 5.2 のポイントリリースとなります。

最新版のリリース物

リポジトリ情報

poky

Repository Name: poky
Repository Location: https://git.yoctoproject.org/poky
Branch: walnascar
Tag: yocto-5.2.2
Git Revision: 41038342a471b4a8884548568ad147a1704253a3
Release Artefact: poky-41038342a471b4a8884548568ad147a1704253a3
sha: 4b1e9c80949e5c5ab5ffeb4fa3dadb43b74b813fc9d132caabf1fc8c38bd8f5e
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.2.2/poky-41038342a471b4a8884548568ad147a1704253a3.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.2.2/poky-41038342a471b4a8884548568ad147a1704253a3.tar.bz2

openembedded-core

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: walnascar
Tag: yocto-5.2.2
Git Revision: c855be07828c9cff3aa7ddfa04eb0c4df28658e4
Release Artefact: oecore-c855be07828c9cff3aa7ddfa04eb0c4df28658e4
sha: c510b69b984be7ad8045236a3dde9bc4f5833bc9f3045dc04d6442a9453165f4
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.2.2/oecore-c855be07828c9cff3aa7ddfa04eb0c4df28658e4.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.2.2/oecore-c855be07828c9cff3aa7ddfa04eb0c4df28658e4.tar.bz2

meta-mingw

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: walnascar
Tag: yocto-5.2.2
Git Revision: edce693e1b8fabd84651aa6c0888aafbcf238577
Release Artefact: meta-mingw-edce693e1b8fabd84651aa6c0888aafbcf238577
sha: 6cfed41b54f83da91a6cf201ec1c2cd4ac284f642b1268c8fa89d2335ea2bce1
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.2.2/meta-mingw-edce693e1b8fabd84651aa6c0888aafbcf238577.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.2.2/meta-mingw-edce693e1b8fabd84651aa6c0888aafbcf238577.tar.bz2

bitbake

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.12
Tag: yocto-5.2.2
Git Revision: 74c28e14a9b5e2ff908a03f93c189efa6f56b0ca
Release Artefact: bitbake-74c28e14a9b5e2ff908a03f93c189efa6f56b0ca
sha: 1d417990d922289152af6274d461d7809d06c290d57e5373fd46bb0112e6b812
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.2.2/bitbake-74c28e14a9b5e2ff908a03f93c189efa6f56b0ca.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.2.2/bitbake-74c28e14a9b5e2ff908a03f93c189efa6f56b0ca.tar.bz2

meta-yocto

Repository Name: meta-yocto
Repository Location: https://git.yoctoproject.org/meta-yocto
Branch: walnascar
Tag: yocto-5.2.2
Git Revision: 5754fb5efb54cf06f96012a88619baba0995b0fc

yocto-docs

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: walnascar
Tag: yocto-5.2.2
Git Revision: 85f8e5c799ef38c6dcca615d7cc6baff325df259

リリース内容

バグフィックスと脆弱性フィックスとなります。

詳細は[ANNOUNCEMENT] Yocto Project 5.2.2 is Releasedを参照ください。

脆弱性フィックス

5.2.2 で修正された脆弱性は下記になります。

パッケージ	修正方法	CVE
bind	Fix	CVE-2025-40775
binutils	Fix	CVE-2025-1153 CVE-2025-1178 CVE-2025-1180 CVE-2025-1181 CVE-2025-1182 CVE-2025-3198 CVE-2025-5244
binutils	Ignore	CVE-2025-1153 (fixed in current version)
epiphany	Fix	CVE-2025-3839
go	Fix	CVE-2025-0913 CVE-2025-4673 CVE-2025-22874
go	Ignore	CVE-2024-3566
kea	Fix	CVE-2025-32801 CVE-2025-32802 CVE-2025-32803
libarchive	Fix	CVE-2025-5914
libsoup-2.4	Fix	CVE-2024-52530 CVE-2024-52531 CVE-2025-2784 CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906 CVE-2025-32907 CVE-2025-32909 CVE-2025-32910 CVE-2025-32912 CVE-2025-32913 CVE-2025-32914 CVE-2025-46420 CVE-2025-46421
libsoup	Fix	CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-32907 CVE-2025-32908 CVE-2025-32914
linux-yocto	Fix	CVE-2023-3079 CVE-2023-52904 CVE-2023-52979 CVE-2025-22102 CVE-2025-37800 CVE-2025-37801 CVE-2025-37802 CVE-2025-37805 CVE-2025-37821 CVE-2025-37838 CVE-2025-37890 CVE-2025-37891 CVE-2025-37894 CVE-2025-37895 CVE-2025-37897 CVE-2025-37899 CVE-2025-37900 CVE-2025-37901 CVE-2025-37903 CVE-2025-37905 CVE-2025-37907 CVE-2025-37908 CVE-2025-37909 CVE-2025-37910 CVE-2025-37911 CVE-2025-37912 CVE-2025-37913 CVE-2025-37914 CVE-2025-37915 CVE-2025-37916 CVE-2025-37917 CVE-2025-37918 CVE-2025-37919 CVE-2025-37920 CVE-2025-37921 CVE-2025-37922 CVE-2025-37923 CVE-2025-37924 CVE-2025-37926 CVE-2025-37927 CVE-2025-37928 CVE-2025-37929 CVE-2025-37930 CVE-2025-37931 CVE-2025-37932 CVE-2025-37933 CVE-2025-37934 CVE-2025-37935 CVE-2025-37936 CVE-2025-37946 CVE-2025-37947 CVE-2025-37948 CVE-2025-37949 CVE-2025-37951 CVE-2025-37952 CVE-2025-37953 CVE-2025-37954 CVE-2025-37955 CVE-2025-37956 CVE-2025-37957 CVE-2025-37958 CVE-2025-37959 CVE-2025-37960 CVE-2025-37961 CVE-2025-37962 CVE-2025-37963 CVE-2025-37964 CVE-2025-37965 CVE-2025-37967 CVE-2025-37968 CVE-2025-37969 CVE-2025-37970 CVE-2025-37971 CVE-2025-37972 CVE-2025-37973 CVE-2025-37974 CVE-2025-37990 CVE-2025-37991 CVE-2025-37992 CVE-2025-37993 CVE-2025-37994 CVE-2025-37995 CVE-2025-37997 CVE-2025-37998 CVE-2025-37999
linux-yocto	Ignore	CVE-2023-3079 CVE-2025-37996
net-tools	Fix	CVE-2025-46836
ofono	Fix	CVE-2024-7537
python3-setuptools	Fix	CVE-2025-47273
python3-urllib3	Fix	CVE-2025-50181 CVE-2025-50182
sqlite3	Fix	CVE-2025-3277 CVE-2025-29087^※CVE-2025-29088
systemd	Fix	CVE-2025-4598
xz	Fix	CVE-2025-31115

※: mark as patched

この記事の著者

三ツ木祐介 ( みつきん )

2020 年サイバートラスト入社。組み込み Linux に関わる業務に従事している。Yocto Project 公式実践講座 (LFD461-JP)講師。個人ブログ「みつきんのメモ」にて Yocto Project 関連の情報を発信。 2015 年から CQ 出版のインターフェース誌に寄稿を開始、2022 年 9 月号より「Yocto Project ではじめる組み込み Linux 開発入門」を連載中。