From patchwork Fri Sep 12 14:03:34 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Lee, Chee Yang" X-Patchwork-Id: 70072 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 320E4CA101F for ; Fri, 12 Sep 2025 14:04:06 +0000 (UTC) Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.21]) by mx.groups.io with SMTP id smtpd.web11.17583.1757685834393270526 for ; Fri, 12 Sep 2025 07:03:55 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@intel.com header.s=Intel header.b=e/vcLhea; spf=pass (domain: intel.com, ip: 198.175.65.21, mailfrom: chee.yang.lee@intel.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1757685836; x=1789221836; h=from:to:subject:date:message-id:in-reply-to:references: mime-version:content-transfer-encoding; bh=bts4wzV7iUQsyKiuADBJpYb3BUU9ayyIPeXsGUb4C+M=; b=e/vcLheazLSz6inDjNXcxKOHL2+XEnXsy5jZMIttpUgBnQxvCAfM1qgM 0sG8RRxSLuEJp+A+CeA9iv6w3GTjL4yIpDFA2Sk4/DYV1v2K2mTT3NR40 4TTR6/oeTy0Gab6sBOmUMyam9uxlPotGIZC2LtLD9th+ijz1NhpAaNyDN Wfe9Jzq2oONauUwEXDC62Czro157Xk8kb4/p/SC7R41BLOtB4wQPilIAM /193l/ibQpEUxDWzb9d1So38LKrwXKl6COvVzr+r+hYvVAxL0phU0brUN nW4ZvpWYyb70GNhq9neimGXnn57C8yO3jj7YO6ob03+kbpiGK9uQcZ1Oy w==; X-CSE-ConnectionGUID: kCRf4aedSc2K5Wij0UQw/Q== X-CSE-MsgGUID: hX1Hy+0ERWmvjG6FSSg9lw== X-IronPort-AV: E=McAfee;i="6800,10657,11531"; a="59955495" X-IronPort-AV: E=Sophos;i="6.17,312,1747724400"; d="scan'208";a="59955495" Received: from orviesa003.jf.intel.com ([10.64.159.143]) by orvoesa113.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 12 Sep 2025 07:03:56 -0700 X-CSE-ConnectionGUID: DsuvWPd9Rn6T4EtKWql17g== X-CSE-MsgGUID: ZaeC4aM5SFWEgKQ6nm7NbQ== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.18,259,1751266800"; d="scan'208";a="178005929" Received: from cheeyang-desk4.png.intel.com ([10.107.249.123]) by orviesa003.jf.intel.com with ESMTP; 12 Sep 2025 07:03:54 -0700 From: chee.yang.lee@intel.com To: docs@lists.yoctoproject.org Subject: [PATCH 2/2] migration-guides: add release notes for 5.0.12 Date: Fri, 12 Sep 2025 22:03:34 +0800 Message-ID: <20250912140334.1504278-2-chee.yang.lee@intel.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20250912140334.1504278-1-chee.yang.lee@intel.com> References: <20250912140334.1504278-1-chee.yang.lee@intel.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 12 Sep 2025 14:04:06 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/docs/message/7503 From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- .../migration-guides/release-5.0.rst | 1 + .../migration-guides/release-notes-5.0.12.rst | 184 ++++++++++++++++++ 2 files changed, 185 insertions(+) create mode 100644 documentation/migration-guides/release-notes-5.0.12.rst diff --git a/documentation/migration-guides/release-5.0.rst b/documentation/migration-guides/release-5.0.rst index 6942b37c8..523521b37 100644 --- a/documentation/migration-guides/release-5.0.rst +++ b/documentation/migration-guides/release-5.0.rst @@ -18,3 +18,4 @@ Release 5.0 (scarthgap) release-notes-5.0.9 release-notes-5.0.10 release-notes-5.0.11 + release-notes-5.0.12 diff --git a/documentation/migration-guides/release-notes-5.0.12.rst b/documentation/migration-guides/release-notes-5.0.12.rst new file mode 100644 index 000000000..79acff0c7 --- /dev/null +++ b/documentation/migration-guides/release-notes-5.0.12.rst @@ -0,0 +1,184 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.12 (Scarthgap) +------------------------------------------ + +Security Fixes in Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- avahi: Fix :cve_nist:`2024-52615` +- binutils: Fix :cve_nist:`2025-7545` and :cve_nist:`2025-7546` +- busybox: Fix :cve_nist:`2023-39810` +- dropbear: Fix :cve_nist:`2025-47203` +- gdk-pixbuf: Fix :cve_nist:`2025-7345` +- git: Fix :cve_nist:`2025-27613`, :cve_nist:`2025-27614`, :cve_nist:`2025-46334`, + :cve_nist:`2025-46835`, :cve_nist:`2025-48384`, :cve_nist:`2025-48385` and :cve_nist:`2025-48386` +- glib-2.0: Ignore :cve_nist:`2025-4056` +- glibc: Fix :cve_nist:`2025-8058` +- gnutls: Fix :cve_nist:`2025-6395`, :cve_nist:`2025-32988`, :cve_nist:`2025-32989` and + :cve_nist:`2025-32990` +- go: Ignore :cve_nist:`2025-0913` +- gstreamer1.0-plugins-base: Fix :cve_nist:`2025-47806` and :cve_nist:`2025-47808` +- gstreamer1.0-plugins-good: Fix :cve_nist:`2025-47183` and :cve_nist:`2025-47219` +- iputils: Fix :cve_nist:`2025-48964` +- libpam: Fix :cve_nist:`2025-6020` +- libxml2: Fix :cve_nist:`2025-6170`, :cve_nist:`2025-49794`, :cve_nist:`2025-49795` and + :cve_nist:`2025-49796` +- libxml2: Ignore :cve_nist:`2025-8732` +- ncurses: Fix :cve_nist:`2025-6141` +- openssl: Fix :cve_nist:`2024-41996` and :cve_nist:`2025-27587` +- python3: Fix :cve_nist:`2025-8194` +- sqlite3: Fix :cve_nist:`2025-6965` +- sudo: Fix :cve_nist:`2025-32463` +- xserver-xorg: Fix :cve_nist:`2022-49737`, :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, + :cve_nist:`2025-49177`, :cve_nist:`2025-49178`, :cve_nist:`2025-49179`, :cve_nist:`2025-49180` + and :cve_nist:`2025-49176` +- xz: Ignore :cve_nist:`2024-47611` + + +Fixes in Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~ + +- bash: Stick to C17 std +- bash: use -std=gnu17 also for native :term:`CFLAGS` +- binutils: stable 2.42 branch updates +- bitbake: bitbake: runqueue: Verify mcdepends are valid +- bitbake: test/fetch: Switch u-boot based test to use our own mirror +- bitbake: utils: Optimise signal/sigmask performance +- build-appliance-image: Update to scarthgap head revision +- cairo: fix build with gcc-15 on host +- cmake: Add :term:`PACKAGECONFIG` option for debugger support +- cve-check: Add missing call to exit_if_errors +- dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart +- e2fsprogs: Fix build failure with gcc 15 +- git: Upgrade to 2.44.4 +- glibc: stable 2.39 branch updates +- gnutls: patch read buffer overrun in the "pre_shared_key" extension +- gnutls: patch reject zero-length version in certificate request +- go-helloworld: fix license +- kea: set correct permissions for /var/run/kea +- linux-libc-headers: Fix invalid conversion in cn_proc.h +- migration-guides: add release notes for 5.0.11 +- mtools: upgrade to 4.0.49 +- oe-debuginfod: add option for data storage +- orc: set :term:`CVE_PRODUCT` +- overview-manual/yp-intro.rst: fix broken link to article +- parted: Fix build with GCC 15 +- poky.conf: bump version for 5.0.12 +- python3: update CVE product +- ref-manual/classes.rst: document the testexport class +- ref-manual/system-requirements.rst: update supported distributions +- ref-manual/variables.rst: document :term:`SPL_DTB_BINARY` :term:`FIT_CONF_PREFIX` variable +- scripts/install-buildtools: Update to 5.0.11 +- sudo: upgrade to 1.9.17p1 +- timedated: wait for jobs before SetNTP response +- variables.rst: remove references to obsolete tar packaging +- xserver-xorg: upgrade to 21.1.18 + + +Known Issues in Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: +- Aleksandar Nikolic +- Alexander Kanavin +- Antonin Godard +- Archana Polampalli +- Daniel Turull +- Deepesh Varatharajan +- Erik Lindsten +- Fabio Berton +- Hitendra Prajapati +- Jinfeng Wang +- Joe Slater +- Khem Raj +- Lee Chee Yang +- Marco Cavallini +- Mark Hatle +- Martin Jansa +- Michal Seben +- Nikhil R +- Peter Marko +- Philip Lorenz +- Praveen Kumar +- Quentin Schulz +- Richard Purdie +- Robert P. J. Day +- Roland Kovacs +- Steve Sakoman +- Vijay Anusuri +- Wang Mingyu +- Yash Shinde +- Yi Zhao +- Zhang Peng + +Repositories / Downloads for Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.12 ` +- Git Revision: :yocto_git:`ec220ae083dba35c279192b2249ad03fe238446e ` +- Release Artefact: poky-ec220ae083dba35c279192b2249ad03fe238446e +- sha: a5f8c2ad491c59d0bdfb85f46a136b0ee66cfdd4359ab1ab9dac2430d0a52c17 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap ` +- Tag: :oe_git:`yocto-5.0.12 ` +- Git Revision: :oe_git:`93c7489d843a0e46fe4fc685b356d0ae885300d7 ` +- Release Artefact: oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7 +- sha: 49695592179cd777eee337d922aae354dad4ab503628f0344b1b53329900c4d9 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.12 ` +- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f ` +- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f +- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 ` +- Tag: :oe_git:`yocto-5.0.12 ` +- Git Revision: :oe_git:`982645110a19ebb94d519926a4e14c8a2a205cfd ` +- Release Artefact: bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd +- sha: f8d777d322b8f05372d7ce75c67df2db2b7de3f64d5b7769b8051c507161245d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.12 ` +- Git Revision: :yocto_git:`82602cda1a89644d1acbe230a81c93e3fb5031c8 ` + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.12 ` +- Git Revision: :yocto_git:`dd665216fa578a1f2f268790d708c6a5d2912ecf ` +