-------------------------- yocto-6.0.4 Release Notes -------------------------- -------------------------- Repositories/Downloads -------------------------- Repository Name: yocto-docs Repository Location: https://git.yoctoproject.org/yocto-docs Branch: wrynose Tag: yocto-6.0.4 Git Revision: a2cc1f5b86f3cdc9ad3257a2545322c5169da3ca Release Artefact: yocto-docs-a2cc1f5b86f3cdc9ad3257a2545322c5169da3ca sha: 1addfdd9f0f9a98a325102aabd24e221173f42dd1e62b8aa2d0b5f224e25d21a Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-6.0.4/yocto-docs-a2cc1f5b86f3cdc9ad3257a2545322c5169da3ca.tar.bz2 https://mirrors.edge.kernel.org/yocto/yocto/yocto-6.0.4/yocto-docs-a2cc1f5b86f3cdc9ad3257a2545322c5169da3ca.tar.bz2 Repository Name: openembedded-core Repository Location: https://git.openembedded.org/openembedded-core Branch: wrynose Tag: yocto-6.0.4 Git Revision: 0f03c732a0a2d0506b41b1abe60b3f368b2300dc Release Artefact: oecore-0f03c732a0a2d0506b41b1abe60b3f368b2300dc sha: a35af9fd6d814ee2fbe21bbcb8de19cdf63fb2c5c78e8f5badf91dfc723a7748 Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-6.0.4/oecore-0f03c732a0a2d0506b41b1abe60b3f368b2300dc.tar.bz2 https://mirrors.edge.kernel.org/yocto/yocto/yocto-6.0.4/oecore-0f03c732a0a2d0506b41b1abe60b3f368b2300dc.tar.bz2 Repository Name: meta-yocto Repository Location: https://git.yoctoproject.org/meta-yocto Branch: wrynose Tag: yocto-6.0.4 Git Revision: 7c25b11156553145fa6b241a2d4f65d94438f804 Release Artefact: meta-yocto-7c25b11156553145fa6b241a2d4f65d94438f804 sha: 411c783757cd2931e407dff408248b6b15f4508e4bf7a9ceedec13c0e7874b84 Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-6.0.4/meta-yocto-7c25b11156553145fa6b241a2d4f65d94438f804.tar.bz2 https://mirrors.edge.kernel.org/yocto/yocto/yocto-6.0.4/meta-yocto-7c25b11156553145fa6b241a2d4f65d94438f804.tar.bz2 Repository Name: bitbake Repository Location: https://git.openembedded.org/bitbake Branch: 2.18 Tag: yocto-6.0.4 Git Revision: 51fd94a67fa17650a9ff623492005972bbc7d26f Release Artefact: bitbake-51fd94a67fa17650a9ff623492005972bbc7d26f sha: a541a9535cca6e342151e8e7b0c11f322dab879317b32e71bd47490c28af8b7d Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-6.0.4/bitbake-51fd94a67fa17650a9ff623492005972bbc7d26f.tar.bz2 https://mirrors.edge.kernel.org/yocto/yocto/yocto-6.0.4/bitbake-51fd94a67fa17650a9ff623492005972bbc7d26f.tar.bz2 --------------- Contributors --------------- Thanks to the following people who contributed to this release: Abhishek Bachiphale Adarsh Jagadish Kamini Adrian Freihofer Alejandro Mery Alexander Kanavin Andrei Lalaev Ankur Tyagi Antonin Godard AshishKumar Mishra Benjamin Robin Benjamin Robin (Schneider Electric) Bhavesh R Maheshwari Bruce Ashfield Chen Qi Chris Laplante Daiane Angolini Daniel Dragomir Daniel Turull Darsh Kelaiya Deepak Rathore Devansh Patel Esa Jaaskela Francisco Pedraza Ghanshyam Banait Harish Sadineni Hetvi Thakar Hiago De Franco Himani Ramesh Barde Himanshu Jadon Hitendra Prajapati Jaipaul Cheernam Jakub Szczudlo (Nokia) Jonas Juffinger Jose Quaresma Joshua Watt Kyungjik Min Lee Chee Yang Leonid Iziumtsev Michal Sieron Paul Barker Peter Marko Peter Tatrai Pratik Farkase Quentin Schulz Richard Purdie Robert P. J. Day Roopa Kalmath Ross Burton Siddharth Doshi Sowmya Sathram Sudhir Dumbhare Tafil Avdyli Tim Orling Trevor Woerner Vijay Anusuri Wang Mingyu Xiuzhuo Shang Yoann Congal --------------- Known Issues --------------- N/A --------------- Security Fixes --------------- oecore :- ----------- alsa-lib: patch CVE-2026-56109 apr-util: upgrade 1.6.3 -> 1.6.5 apt: mark CVE-2011-3374 as fixed-version binutils: Patch for CVE-2026-15003 binutils: fix CVE-2026-18220 binutils: fix CVE-2026-3441 and CVE-2026-3442 bison: patch CVE-2026-56389 busybox: patch CVE-2026-38754 connman: remove connection_manager from CVE_PRODUCTS coreutils: fix CVE-2026-56391 cpio: fix "CVE:" marker in CVE-2026-66484.patch cpio: patch CVE-2026-66484 cpio: patch CVE-2026-66485 cpio: patch CVE-2026-66486 curl: Fix for CVE-2026-9079 curl: Security Fix for CVE-2026-13608 curl: Security Fix for CVE-2026-80229 curl: fix CVE-2026-4873 curl: fix CVE-2026-8286 curl: fix CVE-2026-8927 curl: fix CVE-2026-8932 curl: patch CVE-2026-11352 curl: patch CVE-2026-11586 curl: patch CVE-2026-7009 curl: patch CVE-2026-8925 curl: patch CVE-2026-9080 curl: patch CVE-2026-9545 curl: patch CVE-2026-9546 curl: set CVE_STATUS for CVE-2026-12064 curl: set CVE_STATUS for CVE-2026-82209 curl: set CVE_STATUS for CVE-2026-8458 curl: set CVE_STATUS for CVE-2026-8924 curl: set CVE_STATUS for CVE-2026-9547 diffutils: patch CVE-2026-53910 expat: set CVE_STATUS for CVE-2026-72522 expat: upgrade 2.7.5 -> 2.8.3 ffmpeg: Fix for CVE-2026-64830 ffmpeg: Fix for CVE-2026-64831 ffmpeg: Fix for CVE-2026-64832 ffmpeg: Fix for CVE-2026-64833 ffmpeg: Fix for CVE-2026-64834 ffmpeg: Fix for CVE-2026-64835 ffmpeg: Fix for CVE-2026-65703 ffmpeg: Fix for CVE-2026-65704 ffmpeg: Fix for CVE-2026-65705 ffmpeg: Fix for CVE-2026-65706 ffmpeg: Fix for CVE-2026-66037 ffmpeg: Fix for CVE-2026-66038 ffmpeg: Fix for CVE-2026-66039 ffmpeg: mark CVE-2026-52295, CVE-2026-52296 and CVE-2026-52297 fixed ffmpeg: set status for CVE-2026-8461 and CVE-2026-40962 ffmpeg: upgrade 8.0.1 -> 8.0.3 glibc: stable 2.43 branch updates gnutls: fix CVE-2026-33845 gnutls: fix CVE-2026-42010 gnutls: fix CVE-2026-5419 gnutls: fix for CVE-2026-42011 go: upgrade 1.26.5 -> 1.26.6 gstreamer1.0*: upgrade 1.28.4 -> 1.28.5 improve_kernel_cve_report: fix backported-patch check kbd: Fix CVE-2026-72693 libarchive: mark CVE-2026-14164 as fixed-version libevent: set status for CVE-2026-63380 libpcap: Fix CVE-2026-0799 libpcap: Fix CVE-2026-18238 libpcap: Fix CVE-2026-18313 libpcap: Fix CVE-2026-31911 libpcap: Fix CVE-2026-31912 libpcap: Fix CVE-2026-6244 libpcap: Fix CVE-2026-6554 libsndfile1: patch CVE-2026-37555 libsoup: patch CVE-2026-4271 libssh2: Fix CVE-2026-58051 libssh2: fix CVE-2026-58050 libssh2: fix CVE-2026-66032 libssh2: fix CVE-2026-66033 libssh2: fix CVE-2026-66034 libssh2: fix CVE-2026-66035 libxfont2: Fix CVE-2026-56001 libxfont2: Fix CVE-2026-56002 libxfont2: Fix CVE-2026-56003 libxfont2: patch CVE-2026-44950 libxfont2: patch CVE-2026-59679 libxfont: Fix CVE-2026-56001 libxfont: Fix CVE-2026-56002 libxfont: Fix CVE-2026-56003 libxml2: set status for CVE-2026-6732 libxml2: upgrade 2.15.3 -> 2.15.4 nghttp2: set status for CVE-2026-58055 openssh: set status for CVE-2026-55653 openssl: upgrade 3.5.7 -> 3.5.8 p11-kit: set status for CVE-2026-13757 p11-kit: upgrade 0.26.2 -> 0.26.4 p11-kit: upgrade 0.26.4 -> 0.26.5 patch: Fix CVE-2026-56288 patch: Fix CVE-2026-56289 perl: Fix CVE-2026-57433 perl: fix CVE-2026-13221 perl: fix CVE-2026-42496 and CVE-2026-42497 perl: fix CVE-2026-57432 perl: inherit upstream-stable-release-point python3-attrs: fix CVE_PRODUCT python3-babel: fix CVE_PRODUCT python3-click: fix CVE_PRODUCT python3-click: upgrade 8.3.1 -> 8.3.3 python3-cryptography(-vectors): upgrade 46.0.5 -> 46.0.7 python3-cryptography: Fix CVE-2026-69248 python3-cryptography: Fix CVE-2026-69249 python3-dbusmock: fix CVE_PRODUCT python3-git: fix CVE-2026-42215 python3-git: fix CVE-2026-42284 python3-git: fix CVE-2026-44243 python3-git: fix CVE-2026-44244 python3-git: fix CVE_PRODUCT python3-idna: Fix CVE-2026-45409 python3-lxml: fix CVE-2026-41066 python3-mako: correct CVE_PRODUCT mapping python3-numpy: fix CVE_PRODUCT python3-pip: Fix CVE-2026-13346 python3-pip: Fix CVE-2026-8643 python3-pyasn1: upgrade 0.6.2 -> 0.6.3 python3-pyasn1: upgrade 0.6.3 -> 0.6.4 python3-pycryptodome: fix CVE_PRODUCT python3-pycryptodomex: fix CVE_PRODUCT python3-wheel: fix CVE_PRODUCT qemu: fix CVE-2026-48914 rpcbind: upgrade 1.2.8 -> 1.2.9 ruby: upgrade 4.0.2 -> 4.0.3 ruby: upgrade 4.0.3 -> 4.0.5 u-boot, u-boot-tools: Correct CVE-2026-46728 attribution for FIT fix u-boot-tools: Ignore CVE-2026-29007 u-boot-tools: Ignore CVE-2026-29008 u-boot-tools: Ignore CVE-2026-29009 u-boot: share CVE_PRODUCT with u-boot-tools util-linux: Fix CVE-2026-3184 util-linux: set status for CVE-2026-13595 vim: Fix CVE-2026-28417 hostname regression vim: Fix CVE-2026-52858 regression vim: Fix for CVE-2026-55693 vim: Fix for CVE-2026-55895 vim: Fix for CVE-2026-57451 vim: Fix for CVE-2026-57453 vim: Fix for CVE-2026-57454 vim: Fix for CVE-2026-57455 vim: Fix for CVE-2026-57456 vim: Fix for CVE-2026-59856 vim: Fix for CVE-2026-59857 vim: Fix for CVE-2026-59858 vim: Fix for CVE-2026-73072 vim: Fix for CVE-2026-73073 vim: Fix for CVE-2026-73074 vim: Fix for CVE-2026-73076 vim: Fix for CVE-2026-73077 vim: Fix for CVE-2026-73078 wget: Fix CVE-2026-58469 wget: Fix CVE-2026-58470 wget: Fix CVE-2026-58471 wget: Fix CVE-2026-58472 wget: fix CVE-2026-16599 wpa-supplicant: patch CVE-2026-58374 xz: inherit upstream-stable-release-point yocto-docs :- ----------- ref-manual/variables.rst: GCCVERSION: replace local.conf and mention recipe existence --------------- Fixes --------------- bitbake ----------- asyncrpc: Close the client event loop when the client is collected bb/tests/fetch.py: add case for filter_regex parameter in latest_versionstring data: Fix expandKeys recursion issue data: Return a list from exported_vars() doc: bitbake-user-manual-environment-setup: use pip to install bitbake-setup fetch/gitsm: Store the original url data to fix relative gitsm paths fetch/wget: Handle long filenames correctly fetch2/__init__.py: add filter_regex to default latest_versionstring fetch2/crate.py: add filter_regex parameter to latest_versionstring fetch2/git.py: add filter_regex parameter to latest_versionstring fetch2/wget.py: add filter_regex parameter to latest_versionstring runqueue: Fix pending_hash_index not including taskname runqueue: fix bad check in process_possible_migrations runqueue: wait for covered tasks before setscene tests/fetch: Drop ftp checkstatus test tests/fetch: Swap bitbake github mirror for YP one tests/fetch: Swap github grpc repo for our own small test repo tests/fetch: Switch to YP mirror repos instead of github toastergui/views: Replace os.system call with improved parameter handling oecore ----------- at-spi2-core: RDEPENDS on gsettings-desktop-schemas babeltrace2: inherit upstream-stable-release-point binutils: inherit upstream-stable-release-point binutils: stable 2.46 branch updates bitbake.conf: pseudo add rootfs-dbg to PSEUDO_INCLUDE_PATHS bluez5: restrict delta=0 RSSI to proximity filters build-appliance-image: Update to wrynose head revisions build-appliance-image: Update to wrynose head revisions ca-certificates: upgrade 20260601 -> 20260816 cmake-native: use bundled nghttp2 with bundled curl dbus: inherit upstream-stable-release-point devtool/upgrade.py: add --stable option dhcpcd: upgrade 10.3.1 -> 10.3.2 fmt: update branch name to main gawk: skip randtest in ptest suite git: inherit upstream-stable-release-point glib-2.0: inherit upstream-stable-release-point go: upgrade 1.26.6 -> 1.26.7 go: upgrade 1.26.7 -> 1.26.8 golang: fix homepage grub: disable grub-protect for native builds gst-devtools: upgrade 1.28.2 -> 1.28.4 gstreamer1.0-libav: upgrade 1.28.2 -> 1.28.4 gstreamer1.0-python: upgrade 1.28.2 -> 1.28.4 gstreamer1.0: disable an intermittently failing test gstreamer1.0: upgrade 1.28.2 -> 1.28.4 gstreamer1.0: upgrade 1.28.2 -> 1.28.4 (the remaining pieces) kern-tools: bump SRCREV for conditional 'depends on X if Y' support kernel-fit-image: Don't add hash node when signing is enabled kernel-yocto-rust: Add clang toolchain check for riscv64 lib/oe/recipeutils: make stable_upgrade argument optional in get_recipe_upstream_version() libevent: upgrade 2.1.12 -> 2.1.13 libgcrypt: inherit upstream-stable-release-point libslirp: add tag in SRC_URI libslirp: fix upstream version check libslirp: upgrade 4.9.1 -> 4.9.3 libxml2: inherit upstream-stable-release-point libxml2: upgrade 2.15.2 -> 2.15.3 linux-yocto/6.18: fix kernel reproducibility issues linux-yocto/6.18: rt: update to v6.18.37-rt6 linux-yocto/6.18: update to v6.18.41 linux-yocto/6.18: update to v6.18.43 linux-yocto/6.18: update to v6.18.44 linux-yocto/6.18: update to v6.18.48 linux-yocto/6.18: update to v6.18.50 linux-yocto/6.18: update to v6.18.52 lttng-modules: inherit upstream-stable-release-point lttng-tools: inherit upstream-stable-release-point lttng-ust: inherit upstream-stable-release-point mesa: align x86 mesa config with LLVM graphics mirrors: Disable YP mirrors on autobuilder oeqa/maturin: Update dependency version openssl: inherit upstream-stable-release-point procps: ptest: skip flaky pgrep full process name match test pseudo: 1.9.10 -> 1.9.11 pseudo: Add in openat2, exec and linkat fixes pseudo: Update to 1.9.10 python3-certifi: fix homepage python3-cryptography: backport stray file install fix python3-mako: upgrade 1.3.10 -> 1.3.12 python3-sbom-cve-check: update to version 1.3.2 python3-sbom-cve-check: update to version 1.3.3 python3-sbom-cve-check: update to version 1.3.4 python3-sbom-cve-check: update to version 1.3.5 python3-shacl2code: upgrade 1.0.1 -> 1.1.0 python3-spdx-python-model: update from version 0.0.5 to 0.0.6 python3: add missing pyc files to core python3: fix stringold cache files python3: inherit upstream-stable-release-point python3: upgrade 3.14.6 -> 3.14.7 qemu: guard RESOLVE_CACHED strace flag recipeutils: add optional stable_upgrade parameter to get_recipe_upgrade_status rootfs.py: fix run-postinsts removal on multilib images rpcbind: Drop dependency on quota sbom-cve-check-update-cvelist-native: -> 2026-07-23 sbom-cve-check-update-cvelist-native: update to version 2026-06-24 sbom-cve-check-update-cvelist-native: update to version 2026-08-03 sbom-cve-check-update-db: Exclude recipes from rm_work sbom-cve-check-update-nvd-native,sbom-cve-check-update-cvelist-native: upgrade 2026.08.03-000011 -> 2026.08.25-000009 sbom-cve-check-update-nvd-native: -> 2026.07.23-000007 sbom-cve-check-update-nvd-native: update to version 2026.06.24-000003 sbom-cve-check-update-nvd-native: update to version 2026.08.03-000011 sbom-cve-check-update-nvd-native: upgrade 2026.05.07-000006 -> 2026.06.09-000006 sbom-cve-check-update-{nvd-native,cvelist-native}: upgrade 2026.08.25 -> 2026.09.12 scripts/install-buildtools: Update to 6.0.3 sqlite3: inherit upstream-stable-release-point sstate: Update mtime/atime for sig/siginfo files in sstate_checkhashes() sstate: Update unpack touch code to be consistent systemd: inherit upstream-stable-release-point testimage: handle bootlog variants on failed qemu tests time64: enable 64-bit time/file-offset flags for 32-bit nativesdk toolchain-scripts: fix kernel host tool builds broken in the SDK upstream-stable-release-point.bbclass: add bbclass for stable point upgrade util-linux: inherit upstream-stable-release-point volatile-binds: order systemd-timesyncd after /var/lib wireless-regdb: upgrade 2026.05.30 -> 2026.09.03 xserver-xorg: upgrade 21.1.22 -> 21.1.23 xserver-xorg: upgrade 21.1.23 -> 21.1.24 xwayland: upgrade 24.1.11 -> 24.1.12 xwayland: upgrade 24.1.12 -> 24.1.13 meta-yocto ----------- linux-yocto/6.18: update to v6.18.44 linux-yocto/6.18: update to v6.18.48 poky.conf: Bump version for 6.0.4 release yocto-bsps: update to v6.18.41 yocto-bsps: update to v6.18.43 yocto-bsps: update to v6.18.50 yocto-bsps: update to v6.18.52 yocto-docs ----------- README: add references to recent security documents README: update instructions for installing vale and sphinx-lint bitbake.rst: rename section to "BitBake User Manual" bsp-manual/bsp.rst: fix a "local.conf" -> "layer.conf" typo contributor-guide/identify-component.rst: use the same tense as other section dev-manual/poky-manual-setup.rst: suggest use of fragment instead of assignments dev-manual/wic.rst: remove local.conf mentions dev-manual: correct OVERRIDES to FILESOVERRIDES for FILESPATH dev-manual: drop link to out-of-date wiki page dev-manual: quote the values in two recipe examples docs-wide: fix manual names in cross references documentation: use "https" protocol for git.yoctoproject.org index.rst: add introduction paragraphs index.rst: move external links to the bottom of the intro section index.rst: move release notes in their own section index.rst: move the "Overview and Concepts" manual in the "Introduction and Overview" section index.rst: move the contributor guide out of the Manuals section index.rst: show the intro paragraph only for html-based docs migration-guide: add release notes for 5.0.20 migration-guide: add release notes for 6.0.3 overview-manual: move the intro content in the index ref-manual/classes.rst: buildstats: remove local.conf default value ref-manual/features.rst: add tools-profile ref-manual/features.rst: fix some cross references ref-manual/structure.rst: fix a "local.conf" -> "layer.conf" typo ref-manual/system-requirements.rst: drop ccache in distros ref-manual/variables.rst: BBMULTICONFIG: fix a typo ref-manual/variables.rst: Document SPDX_AUTHORS ref-manual/variables.rst: Fix the documentation for the SPDX agent variables ref-manual/variables.rst: document the PACKAGEFUNCS variable ref-manual/variables.rst: document the PACKAGE_NO_LOCALE variable ref-manual/variables.rst: fix local.conf.extended obsolete path ref-manual/variables.rst: mention built-in fragments for MACHINE/DISTRO ref-manual/varlocality.rst: mention built-in fragments for distro/machine ref-manual/varlocality.rst: remove BBFILES from local configuration assignments ref-manual: drop the full stop from the QB_SMP example ref-manual: fix a typo in the QB_SMP description ref-manual: update DEBUG_OPTIMIZATION/FULL_OPTIMIZATION security-manual/securing-images.rst: remove "your" in "your OE-Core" toaster-manual: spell the json code-block language in lower case Detached signature at https://downloads.yoctoproject.org/releases/yocto/yocto-6.0.4/RELEASENOTES.asc Signing key at https://downloads.yoctoproject.org/releases/yocto/keys/yocto-release-key.asc