.. SPDX-License-Identifier: CC-BY-SA-2.0-UK Release notes for Yocto-5.0.14 (Scarthgap) ------------------------------------------ Security Fixes in Yocto-5.0.14 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - bind: Fix :cve_nist:`2025-8677`, :cve_nist:`2025-40778` and :cve_nist:`2025-40780` - binutils: Fix :cve_nist:`2025-8225`, :cve_nist:`2025-11081`, :cve_nist:`2025-11082`, :cve_nist:`2025-11083`, :cve_nist:`2025-11412`, :cve_nist:`2025-11413` and :cve_nist:`2025-11414` - cmake: fix :cve_nist:`2025-9301` - curl: Ignore :cve_nist:`2025-10966` - elfutils: Fix :cve_nist:`2025-1376` and :cve_nist:`2025-1377` - expat: Fix :cve_nist:`2025-59375` - glib-networking: Fix :cve_nist:`2025-60018` and :cve_nist:`2025-60019` - gnupg: Ignore :cve_nist:`2025-30258` - go: Fix :cve_nist:`2025-47912`, :cve_nist:`2025-58185`, :cve_nist:`2025-58187`, :cve_nist:`2025-58188`, :cve_nist:`2025-58189`, :cve_nist:`2025-61723` and :cve_nist:`2025-61724` - libpam: Ignore :cve_nist:`2025-6018` - lz4: Fix :cve_nist:`2025-62813` - openssh: Fix :cve_nist:`2025-61984` and :cve_nist:`2025-61985` - python3: Fix :cve_nist:`2025-59375` - python3-xmltodict: Fix :cve_nist:`2025-9375` - qemu: Fix :cve_nist:`2024-8354` - tiff: Ignore :cve_nist:`2025-8961` - u-boot: Fix :cve_nist:`2024-42040` - wpa-supplicant: Fix :cve_nist:`2025-24912` Fixes in Yocto-5.0.14 ~~~~~~~~~~~~~~~~~~~~~ - bind: upgrade to 9.18.41 - bitbake: bb/fetch2/__init__.py: remove a DeprecationWarning in uri_replace() - bitbake: fetch2/wget: Keep query parameters in URL during checkstatus - build-appliance-image: Update to scarthgap head revision - ca-certificates: Add comment for provenance of :term:`SRCREV` - ca-certificates: fix on-target postinstall script - ca-certificates: get sources from debian tarballs - ca-certificates: submit sysroot patch upstream, drop default-sysroot.patch - ca-certificates: upgrade to 20250419 - classes/create-spdx-2.2: align DEPLOY_DIR_SPDX with SPDX_VERSION layout - classes/create-spdx-2.2: Handle empty packages - classes-global/license: Move functions to library code - classes-global/staging: Exclude do_create_spdx from automatic sysroot extension - classes-recipe/baremetal-image: Add image file manifest - classes-recipe/image: Add image file manifest - curl: only set CA bundle in target build - dev-manual, test-manual: Update autobuilder output links - flex: fix build with gcc-15 on host - glibc: stable 2.39 branch updates - gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs - icu: Backport patch to fix build issues with long paths (>512 chars) - iptables: remove /etc/ethertypes - lib/license: Move package license skip to library - lib: oe: license: Add missing import - lib: oeqa: spdx: Add tests for extra options - linux-yocto/6.6: update to v6.6.111 - meta: backport :term:`SPDX` 3.0 fixes and tasks from upstream version Walnascar - migration-guides: add release notes for 4.0.30 - oe-build-perf-report: relax metadata matching rules - oe-core: Remove empty file - oeqa/runtime/ping: don't bother trying to ping localhost - oeqa/selftest: Add :term:`SPDX` 3.0 include source case for work-share - oeqa/selftest/devtool: Update after upstream repo changes - oeqa: spdx: Add tar test for :term:`SPDX` 2.2 - overview-manual/yp-intro.rst: update on-target packaging info - perf: add arm64 source files for unistd_64.h - poky.conf: bump version for 5.0.14 - python3: upgrade to 3.12.12 - ref-manual/classes.rst: document the relative_symlinks class - ref-manual/classes.rst: extend the uninative class documentation - ref-manual/classes.rst: gettext: extend the documentation of the class - ref-manual/variables.rst: document :term:`CCACHE_DISABLE` CHECKSUM :term:`UNINATIVE_URL` :term:`REQUIRED_COMBINED_FEATURES` :term:`REQUIRED_IMAGE_FEATURES` :term:`REQUIRED_MACHINE_FEATURES` :term:`USE_NLS` variable - ref-manual/variables.rst: fix :term:`LAYERDEPENDS` description - selftest: spdx: Add :term:`SPDX` 3.0 test cases - selftest/spdx: Fix for SPDX_VERSION addition - spdx 3.0: Rework how :term:`SPDX` aliases are linked - spdx30_tasks: adapt CVE handling to new cve-check API - spdx30_tasks: fix FetchData attribute in add_download_files - util-linux: fix pointer usage in hwclock param handling - vulnerabilities: update nvdcve file name - webkitgtk: upgrade to 2.44.4 - wireless-regdb: upgrade to 2025.10.07 - xf86-video-intel: correct :term:`SRC_URI` as freedesktop anongit is down Known Issues in Yocto-5.0.14 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - N/A Contributors to Yocto-5.0.14 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Thanks to the following people who contributed to this release: - Alexander Kanavin - Anders Heimer - Ankur Tyagi - Antonin Godard - Archana Polampalli - Bastian Krause - Bin Lan - Bruce Ashfield - Carlos Alberto Lopez Perez - Daniel Semkowicz - David Nyström - Deepesh Varatharajan - Gyorgy Sarvari - Hongxu Jia - Joshua Watt - João Marcos Costa - Kamel Bouhara (Schneider Electric) - Lee Chee Yang - Martin Jansa - Matthias Schiffer - Michael Haener - Paul Barker - Peter Marko - Philippe-Alexandre Mathieu - Praveen Kumar - Rajeshkumar Ramasamy - Rasmus Villemoes - Richard Purdie - Robert P. J. Day - Saravanan - Soumya Sambu - Steve Sakoman - Theodore A. Roth - Wang Mingyu - Yannic Moog - Yash Shinde - Yogita Urade Repositories / Downloads for Yocto-5.0.14 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ yocto-docs - Repository Location: :yocto_git:`/yocto-docs` - Branch: :yocto_git:`scarthgap ` - Tag: :yocto_git:`yocto-5.0.14 ` - Git Revision: :yocto_git:`a8687e4bb2e822670b6ad110613a12fa02943d3d ` - Release Artefact: yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d - sha: 72a51b6049a59f773720d9b0aa94f090222a41aeb22d65c5f4211c78418fb6fa - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2 poky - Repository Location: :yocto_git:`/poky` - Branch: :yocto_git:`scarthgap ` - Tag: :yocto_git:`yocto-5.0.14 ` - Git Revision: :yocto_git:`7e8674996b0164b07e56bc066d0fba790e627061 ` - Release Artefact: poky-7e8674996b0164b07e56bc066d0fba790e627061 - sha: 071e189ebccfad99d4d79ea9021475296fa642611828249f0963b019f842a021 - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2 openembedded-core - Repository Location: :oe_git:`/openembedded-core` - Branch: :oe_git:`scarthgap ` - Tag: :oe_git:`yocto-5.0.14 ` - Git Revision: :oe_git:`471adaa5f77fa3b974eab60a2ded48e360042828 ` - Release Artefact: oecore-471adaa5f77fa3b974eab60a2ded48e360042828 - sha: 4dfad047a68aea2293845cdb4a86911bb3b1b0444a63f51b4e5a2448018d6a5e - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2 meta-yocto - Repository Location: :yocto_git:`/meta-yocto` - Branch: :yocto_git:`scarthgap ` - Tag: :yocto_git:`yocto-5.0.14 ` - Git Revision: :yocto_git:`bf6aea52c4009e08f26565c33ce432eec7cfb090 ` - Release Artefact: meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090 - sha: 92c9da1027efaf945d80bcd44984d5f8e7606c7ded485b57c0c8f47c9fa1302d - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2 meta-mingw - Repository Location: :yocto_git:`/meta-mingw` - Branch: :yocto_git:`scarthgap ` - Tag: :yocto_git:`yocto-5.0.14 ` - Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f ` - Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f - sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 bitbake - Repository Location: :oe_git:`/bitbake` - Branch: :oe_git:`2.8 ` - Tag: :oe_git:`yocto-5.0.14 ` - Git Revision: :oe_git:`8dcf084522b9c66a6639b5f117f554fde9b6b45a ` - Release Artefact: bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a - sha: 766eda21f2a914276d2723b1d8248be11507f954aef8fc5bb1767f3cb65688dd - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2