-------------------------- yocto-5.0.14 Release Notes -------------------------- -------------------------- Repositories/Downloads -------------------------- Repository Name: yocto-docs Repository Location: https://git.yoctoproject.org/yocto-docs Branch: scarthgap Tag: yocto-5.0.14 Git Revision: a8687e4bb2e822670b6ad110613a12fa02943d3d Release Artefact: yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d sha: 72a51b6049a59f773720d9b0aa94f090222a41aeb22d65c5f4211c78418fb6fa Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2 Repository Name: poky Repository Location: https://git.yoctoproject.org/poky Branch: scarthgap Tag: yocto-5.0.14 Git Revision: 7e8674996b0164b07e56bc066d0fba790e627061 Release Artefact: poky-7e8674996b0164b07e56bc066d0fba790e627061 sha: 071e189ebccfad99d4d79ea9021475296fa642611828249f0963b019f842a021 Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2 Repository Name: openembedded-core Repository Location: https://git.openembedded.org/openembedded-core Branch: scarthgap Tag: yocto-5.0.14 Git Revision: 471adaa5f77fa3b974eab60a2ded48e360042828 Release Artefact: oecore-471adaa5f77fa3b974eab60a2ded48e360042828 sha: 4dfad047a68aea2293845cdb4a86911bb3b1b0444a63f51b4e5a2448018d6a5e Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2 Repository Name: meta-yocto Repository Location: https://git.yoctoproject.org/meta-yocto Branch: scarthgap Tag: yocto-5.0.14 Git Revision: bf6aea52c4009e08f26565c33ce432eec7cfb090 Release Artefact: meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090 sha: 92c9da1027efaf945d80bcd44984d5f8e7606c7ded485b57c0c8f47c9fa1302d Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2 Repository Name: meta-mingw Repository Location: https://git.yoctoproject.org/meta-mingw Branch: scarthgap Tag: yocto-5.0.14 Git Revision: bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 Repository Name: bitbake Repository Location: https://git.openembedded.org/bitbake Branch: 2.8 Tag: yocto-5.0.14 Git Revision: 8dcf084522b9c66a6639b5f117f554fde9b6b45a Release Artefact: bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a sha: 766eda21f2a914276d2723b1d8248be11507f954aef8fc5bb1767f3cb65688dd Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2 --------------- Contributors --------------- Alexander Kanavin Anders Heimer Ankur Tyagi Antonin Godard Archana Polampalli Bastian Krause Bin Lan Bruce Ashfield Carlos Alberto Lopez Perez Daniel Semkowicz David Nyström Deepesh Varatharajan Gyorgy Sarvari Hongxu Jia Joshua Watt João Marcos Costa Kamel Bouhara (Schneider Electric) Lee Chee Yang Martin Jansa Matthias Schiffer Michael Haener Paul Barker Peter Marko Philippe-Alexandre Mathieu Praveen Kumar Rajeshkumar Ramasamy Rasmus Villemoes Richard Purdie Robert P. J. Day Saravanan Soumya Sambu Steve Sakoman Theodore A. Roth Wang Mingyu Yannic Moog Yash Shinde Yogita Urade --------------- Known Issues --------------- N/A --------------- Security Fixes --------------- bind: Fix CVE-2025-8677 CVE-2025-40778 CVE-2025-40780 binutils: Fix CVE-2025-8225 CVE-2025-11081 CVE-2025-11082 CVE-2025-11083 CVE-2025-11412 CVE-2025-11413 CVE-2025-11414 cmake: fix CVE-2025-9301 curl: Ignore CVE-2025-10966 elfutils: Fix CVE-2025-1376 CVE-2025-1377 expat: Fix CVE-2025-59375 glib-networking: Fix CVE-2025-60018 CVE-2025-60019 gnupg: Ignore CVE-2025-30258 go: Fix CVE-2025-47912 CVE-2025-58185 CVE-2025-58187 CVE-2025-58188 CVE-2025-58189 CVE-2025-61723 CVE-2025-61724 libpam: Ignore CVE-2025-6018 lz4: Fix CVE-2025-62813 openssh: Fix CVE-2025-61984 CVE-2025-61985 python3: Fix CVE-2025-59375 python3-xmltodict: Fix CVE-2025-9375 qemu: Fix CVE-2024-8354 tiff: Ignore CVE-2025-8961 u-boot: Fix CVE-2024-42040 wpa-supplicant: Fix CVE-2025-24912 --------------- Fixes --------------- bind: upgrade to 9.18.41 bitbake: bb/fetch2/__init__.py: remove a DeprecationWarning in uri_replace() bitbake: fetch2/wget: Keep query parameters in URL during checkstatus build-appliance-image: Update to scarthgap head revision ca-certificates: Add comment for provenance of SRCREV ca-certificates: fix on-target postinstall script ca-certificates: get sources from debian tarballs ca-certificates: submit sysroot patch upstream, drop default-sysroot.patch ca-certificates: upgrade to 20250419 classes/create-spdx-2.2: align DEPLOY_DIR_SPDX with SPDX_VERSION layout classes/create-spdx-2.2: Handle empty packages classes-global/license: Move functions to library code classes-global/staging: Exclude do_create_spdx from automatic sysroot extension classes-recipe/baremetal-image: Add image file manifest classes-recipe/image: Add image file manifest curl: only set CA bundle in target build dev-manual, test-manual: Update autobuilder output links flex: fix build with gcc-15 on host glibc: stable 2.39 branch updates gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs icu: Backport patch to fix build issues with long paths (>512 chars) iptables: remove /etc/ethertypes lib/license: Move package license skip to library lib: oe: license: Add missing import lib: oeqa: spdx: Add tests for extra options linux-yocto/6.6: update to v6.6.111 meta: backport SPDX 3.0 fixes and tasks from upstream version Walnascar migration-guides: add release notes for 4.0.30 oe-build-perf-report: relax metadata matching rules oe-core: Remove empty file oeqa/runtime/ping: don't bother trying to ping localhost oeqa/selftest: Add SPDX 3.0 include source case for work-share oeqa/selftest/devtool: Update after upstream repo changes oeqa: spdx: Add tar test for SPDX 2.2 overview-manual/yp-intro.rst: update on-target packaging info perf: add arm64 source files for unistd_64.h poky.conf: bump version for 5.0.14 python3: upgrade to 3.12.12 ref-manual/classes.rst: document the relative_symlinks class ref-manual/classes.rst: extend the uninative class documentation ref-manual/classes.rst: gettext: extend the documentation of the class ref-manual/variables.rst: document CCACHE_DISABLE CHECKSUM UNINATIVE_URL REQUIRED_COMBINED_FEATURES REQUIRED_IMAGE_FEATURES REQUIRED_MACHINE_FEATURES USE_NLS variable ref-manual/variables.rst: fix LAYERDEPENDS description selftest: spdx: Add SPDX 3.0 test cases selftest/spdx: Fix for SPDX_VERSION addition spdx 3.0: Rework how SPDX aliases are linked spdx30_tasks: adapt CVE handling to new cve-check API spdx30_tasks: fix FetchData attribute in add_download_files util-linux: fix pointer usage in hwclock param handling vulnerabilities: update nvdcve file name webkitgtk: upgrade to 2.44.4 wireless-regdb: upgrade to 2025.10.07 xf86-video-intel: correct SRC_URI as freedesktop anongit is down Detached signature at https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/RELEASENOTES.asc Signing key at https://downloads.yoctoproject.org/releases/yocto/keys/yocto-release-key.asc