2025 年 01 月 24 日
Yocto Project 5.0.6 リリース (Scarthgap)
はじめに
2025/1/15 に Yocto Project 5.0.6 がリリースされました。 Yocto Project 5.0 のポイントリリースとなります。
最新版のリリース物
リポジトリ情報
poky
Repository Name: poky Repository Location: https://git.yoctoproject.org/poky Branch: scarthgap Tag: yocto-5.0.6 Git Revision: 2541a8171f91812a4b16e7dc4da0d77d2318a256 Release Artefact: poky-2541a8171f91812a4b16e7dc4da0d77d2318a256 sha: b77157596ae75d163387a08a317397a57ab8fa6cf4725f28e344fae3f69cca4d Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2
openembedded-core
Repository Name: openembedded-core Repository Location: https://git.openembedded.org/openembedded-core Branch: scarthgap Tag: yocto-5.0.6 Git Revision: 336eec6808710f260a5336ca8ca98139a80ccb14 Release Artefact: oecore-336eec6808710f260a5336ca8ca98139a80ccb14 sha: 38c4fa7e7e88c28361c012dd5baabe373e2ec3c8aba6194146768b146192cceb Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2
meta-mingw
Repository Name: meta-mingw Repository Location: https://git.yoctoproject.org/meta-mingw Branch: scarthgap Tag: yocto-5.0.6 Git Revision: acbba477893ef87388effc4679b7f40ee49fc852 Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2
bitbake
Repository Name: bitbake Repository Location: https://git.openembedded.org/bitbake Branch: 2.8 Tag: yocto-5.0.6 Git Revision: f40a3a477d5241b697bf2fb030dd804c1ff5839f Release Artefact: bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f sha: dbfc056c7408a5547f624799621ab1261a05685112e0922a88007723b1edbc87 Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2
yocto-docs
Repository Name: yocto-docs Repository Location: https://git.yoctoproject.org/yocto-docs Branch: scarthgap Tag: yocto-5.0.6 Git Revision: 12d0ba4f496b2b28a188d34fc36e36895f397079
リリース内容
バグフィックスと脆弱性フィックスとなります。
詳細は [ANNOUNCEMENT] Yocto Project 5.0.6 is Released を参照ください。
脆弱性フィックス
5.0.6 で修正された脆弱性は下記になります。
パッケージ | 修正方法 | CVE |
---|---|---|
acpica | Fix | CVE-2024-24856 |
curl | Fix | CVE-2024-9681 |
dropbear | Fix | CVE-2023-48795 |
expat | Fix | CVE-2024-50602 |
ffmpeg | Fix | CVE-2023-49501 CVE-2023-49528 CVE-2023-50007 CVE-2024-7055 CVE-2024-28661 |
glib-2.0 | Fix | CVE-2024-52533 |
ghostscript | Fix | CVE-2024-46951 CVE-2024-46952 CVE-2024-46953 CVE-2024-46954 CVE-2024-46955 CVE-2024-46956 |
gstreamer1.0 | Ignore | CVE-2024-0444 |
libpam | Fix | CVE-2024-10041 |
libsndfile | Fix | CVE-2024-50612 |
libsoup | Fix | CVE-2024-52530 CVE-2024-52531 CVE-2024-52532 |
ovmf | Fix | CVE-2024-1298 CVE-2024-38796 |
python3-zipp | Fix | CVE-2024-5569 |
qemu | Fix | CVE-2024-4693 CVE-2024-6505 CVE-2024-7730 |
qemu | Ignore | CVE-2024-6505 |