[ANNOUNCEMENT] Yocto Project 4.0.31(kirkstone-4.0.31) is Released

Hi

We are pleased to announce the Yocto Project 4.0.31 Release is now available for download.

https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2

A gpg signed version of these release notes is available at:

https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/RELEASENOTES

Full Test Report:

https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/testreport.txt

Thank you for everyone's contributions to this release.

Chee Yang
[email protected]<mailto:[email protected]>
Yocto Project Build and Release


--------------------------
yocto-4.0.31 Release Notes
--------------------------


--------------------------
Repositories/Downloads
--------------------------

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: kirkstone
Tag: yocto-4.0.31
Git Revision: 073f3bca4c374b03398317e7f445d2440a287741
Release Artefact: yocto-docs-073f3bca4c374b03398317e7f445d2440a287741
sha: 3bfde9b6ad310dd42817509b67f61cd69552f74b2bc5011bd20788fe96d6823b
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/yocto-docs-073f3bca4c374b03398317e7f445d2440a287741.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/yocto-docs-073f3bca4c374b03398317e7f445d2440a287741.tar.bz2

Repository Name: poky
Repository Location: https://git.yoctoproject.org/poky
Branch: kirkstone
Tag: yocto-4.0.31
Git Revision: 04b39e5b7eb19498215d85c88a5fffb460fea1eb
Release Artefact: poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb
sha: 0ca18ab1ed25c0d77412ba30dbb03d74811756c7c2fe2401940f848a5e734930
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: kirkstone
Tag: yocto-4.0.31
Git Revision: 99204008786f659ab03538cd2ae2fd23ed4164c5
Release Artefact: oecore-99204008786f659ab03538cd2ae2fd23ed4164c5
sha: aa97bf826ad217b3a5278b4ad60bef4d194f0f1ff617677cf2323d3cc4897687
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/oecore-99204008786f659ab03538cd2ae2fd23ed4164c5.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/oecore-99204008786f659ab03538cd2ae2fd23ed4164c5.tar.bz2

Repository Name: meta-yocto
Repository Location: https://git.yoctoproject.org/meta-yocto
Branch: kirkstone
Tag: yocto-4.0.31
Git Revision: 3b2df00345b46479237fe0218675a818249f891c
Release Artefact: meta-yocto-3b2df00345b46479237fe0218675a818249f891c
sha: 630e99e0f515bab8a316b2e32aff1352b4404f15aa087e8821b84093596a08ce
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-yocto-3b2df00345b46479237fe0218675a818249f891c.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-yocto-3b2df00345b46479237fe0218675a818249f891c.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: kirkstone
Tag: yocto-4.0.31
Git Revision: 87c22abb1f11be430caf4372e6b833dc7d77564e
Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/meta-gplv2
Branch: kirkstone
Tag: yocto-4.0.31
Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.0
Tag: yocto-4.0.31
Git Revision: 8e2d1f8de055549b2101614d85454fcd1d0f94b2
Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2


---------------
Contributors
---------------
Adam Blank
Aleksandar Nikolic
Antonin Godard
Archana Polampalli
AshishKumar Mishra
Bruce Ashfield
Deepesh Varatharajan
Divya Chellam
Gyorgy Sarvari
Hitendra Prajapati
João Marcos Costa
Lee Chee Yang
Paul Barker
Peter Marko
Praveen Kumar
Quentin Schulz
Rajeshkumar Ramasamy
Saravanan
Soumya Sambu
Steve Sakoman
Sunil Dora
Talel BELHAJ SALEM
Theo GAIGE
Vijay Anusuri
Yash Shinde
Yogita Urade

---------------
Known Issues
---------------
N/A


---------------
Security Fixes
---------------
binutils: Fix CVE-2025-8225 CVE-2025-11081 CVE-2025-11082 CVE-2025-11083
busybox: Fix CVE-2025-46394
cmake: Fix CVE-2025-9301
curl: Fix CVE-2025-9086
ffmpeg: Ignore CVE-2023-6603
ffmpeg: mark CVE-2023-6601 as Fixed
ghostscript: Fix CVE-2025-59798 CVE-2025-59799 CVE-2025-59800
git: Fix CVE-2025-48386
glib-networking: Fix CVE-2025-60018 CVE-2025-60019
go: Fix CVE-2025-47906 CVE-2025-47907
grub2: Fix CVE-2024-56738
grub: Ignore CVE-2024-2312
gstreamer1.0-plugins-bad: Fix CVE-2025-3887
gstreamer1.0: Ignore CVE-2025-2759 CVE-2025-3887 CVE-2025-47183 CVE-2025-47219 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808
python3-jinja2: Fix CVE-2024-56201 CVE-2024-56326 CVE-2025-27516
libxml2: Fix CVE-2025-9714
libxslt: Fix CVE-2025-7424
lz4: Fix CVE-2025-62813
openssl: Fix CVE-2025-9230 CVE-2025-9232
pulseaudio: Ignore CVE-2024-11586
python3: Fix CVE-2024-6345 CVE-2025-47273 CVE-2025-59375
qemu: Fix CVE-2024-8354
tiff: Fix CVE-2025-8961 CVE-2025-9165 CVE-2025-9900
vim: Fix CVE-2025-9389

---------------
Fixes
---------------
build-appliance-image: Update to kirkstone head revision
poky.conf: bump version for 4.0.31
ref-manual/classes.rst: document the relative_symlinks class
ref-manual/classes.rst: gettext: extend the documentation of the class
ref-manual/variables.rst: document the CCACHE_DISABLE, UNINATIVE_CHECKSUM, UNINATIVE_URL, USE_NLS, REQUIRED_COMBINED_FEATURES, REQUIRED_IMAGE_FEATURES, REQUIRED_MACHINE_FEATURES variable
ref-manual/variables.rst: fix LAYERDEPENDS description
dev-manual, test-manual: Update autobuilder output links
ref-manual/classes.rst: extend the uninative class documentation
python3: upgrade to 3.10.19
linux-yocto/5.15: update to v5.15.194
glibc: : PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786)
glibc: nptl Use all of g1_start and g_signals
glibc: nptl rename __condvar_quiesce_and_switch_g1
glibc: nptl Fix indentation
glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop
glibc: Remove g_refs from condition variables
glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait
glibc: nptl Remove unnecessary catch-all-wake in condvar group switch
glibc: nptl Update comments and indentation for new condvar implementation
glibc: pthreads NPTL lost wakeup fix 2
glibc: Remove partial BZ#25847 backport patches
vulnerabilities: update nvdcve file name
migration-guides: add release notes for 4.0.30
oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
selftest/cases/meta_ide.py: use use gnu mirror instead of main server
conf/bitbake.conf: use gnu mirror instead of main server
p11-kit: backport fix for handle USE_NLS from master
systemd: backport fix for handle USE_NLS from master
glibc: stable 2.35 branch updates
openssl: upgrade to 3.0.18
scripts/install-buildtools: Update to 4.0.30
ref-manual/variables.rst: fix the description of STAGING_DIR
ref-manual/structure: document the auto.conf file
dev-manual/building.rst: add note about externalsrc variables absolute paths
ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG
kernel-dev/common.rst: fix the in-tree defconfig description
test-manual/yocto-project-compatible.rst: fix a typo
contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
contributor-guide: submit-changes: number instruction list in commit your changes
contributor-guide: submit-changes: reword commit message instructions
contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
contributor-guide: submit-changes: align CC tag description
contributor-guide: submit-changes: clarify example with Yocto bug ID
contributor-guide: submit-changes: fix improper bold string
libhandy: update git branch name
python3-jinja2: upgrade to 3.1.6
vim: upgrade to 9.1.1683