From patchwork Thu Dec 4 07:46:30 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: "Lee, Chee Yang" X-Patchwork-Id: 75856 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C6018D1D882 for ; Thu, 4 Dec 2025 07:47:13 +0000 (UTC) Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.16]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.38299.1764834424645985671 for ; Wed, 03 Dec 2025 23:47:04 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@intel.com header.s=Intel header.b=kR1PQImU; spf=pass (domain: intel.com, ip: 192.198.163.16, mailfrom: chee.yang.lee@intel.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1764834425; x=1796370425; h=from:to:subject:date:message-id:mime-version: content-transfer-encoding; bh=GZu+vfYTiWLXTzAM+z4wCs0L2Ua+0W1LN51dLxNWGz0=; b=kR1PQImUFaqIol80k+wkD61dCL5OJNhj8YWSDSQrqiazDn3Eetxfq1kj 4ouNWKCN2co+jDPbU7UzN5IpRt4MzgiBXihNwhhzT4wClg5nNfGzuOw9m 98xR0uy1ypypXPb4fNSq4pK9rJHiBFJgetvDg2mR9QEI46httI0Aa/EBu f2E9EfuAP4HvTjP1FBIpKYGaYD8vevWgDsa9UZMBQJovvnzlhMm8eFSTh 3WUJDBYjtsr7pttxqkEP2K2rFIhBj05cKhPE/lDvwBIKdhV7llUOTRGJb DxQl9WmHPa+PgQV2U0qkqulMuP4axy/0LG8ZVHX6yoYWlcJhLrdpx4GFY A==; X-CSE-ConnectionGUID: Xwq3lWfQTAqla4kFLfgfRQ== X-CSE-MsgGUID: +8mUFIVmTAqC2qSYp28egQ== X-IronPort-AV: E=McAfee;i="6800,10657,11631"; a="54393431" X-IronPort-AV: E=Sophos;i="6.20,248,1758610800"; d="scan'208";a="54393431" Received: from fmviesa003.fm.intel.com ([10.60.135.143]) by fmvoesa110.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 03 Dec 2025 23:47:04 -0800 X-CSE-ConnectionGUID: sube5zb0Q1SZStE0omlgrg== X-CSE-MsgGUID: mocbOL1iTyG97OZsb7grSA== X-ExtLoop1: 1 Received: from cheeyang-desk4.png.intel.com ([10.107.249.123]) by fmviesa003.fm.intel.com with ESMTP; 03 Dec 2025 23:47:03 -0800 From: chee.yang.lee@intel.com To: docs@lists.yoctoproject.org Subject: [PATCH] migration-guides: add release notes for 5.0.14 Date: Thu, 4 Dec 2025 15:46:30 +0800 Message-ID: <20251204074630.73375-1-chee.yang.lee@intel.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 04 Dec 2025 07:47:13 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/docs/message/8206 From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- .../migration-guides/release-5.0.rst | 1 + .../migration-guides/release-notes-5.0.14.rst | 211 ++++++++++++++++++ 2 files changed, 212 insertions(+) create mode 100644 documentation/migration-guides/release-notes-5.0.14.rst diff --git a/documentation/migration-guides/release-5.0.rst b/documentation/migration-guides/release-5.0.rst index 808ead9af..8b5ae88f3 100644 --- a/documentation/migration-guides/release-5.0.rst +++ b/documentation/migration-guides/release-5.0.rst @@ -20,3 +20,4 @@ Release 5.0 (scarthgap) release-notes-5.0.11 release-notes-5.0.12 release-notes-5.0.13 + release-notes-5.0.14 diff --git a/documentation/migration-guides/release-notes-5.0.14.rst b/documentation/migration-guides/release-notes-5.0.14.rst new file mode 100644 index 000000000..d4b4da537 --- /dev/null +++ b/documentation/migration-guides/release-notes-5.0.14.rst @@ -0,0 +1,211 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.14 (Scarthgap) +------------------------------------------ + +Security Fixes in Yocto-5.0.14 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- bind: Fix :cve_nist:`2025-8677`, :cve_nist:`2025-40778` and :cve_nist:`2025-40780` +- binutils: Fix :cve_nist:`2025-8225`, :cve_nist:`2025-11081`, :cve_nist:`2025-11082`, + :cve_nist:`2025-11083`, :cve_nist:`2025-11412`, :cve_nist:`2025-11413` and :cve_nist:`2025-11414` +- cmake: fix :cve_nist:`2025-9301` +- curl: Ignore :cve_nist:`2025-10966` +- elfutils: Fix :cve_nist:`2025-1376` and :cve_nist:`2025-1377` +- expat: Fix :cve_nist:`2025-59375` +- glib-networking: Fix :cve_nist:`2025-60018` and :cve_nist:`2025-60019` +- gnupg: Ignore :cve_nist:`2025-30258` +- go: Fix :cve_nist:`2025-47912`, :cve_nist:`2025-58185`, :cve_nist:`2025-58187`, + :cve_nist:`2025-58188`, :cve_nist:`2025-58189`, :cve_nist:`2025-61723` and :cve_nist:`2025-61724` +- libpam: Ignore :cve_nist:`2025-6018` +- lz4: Fix :cve_nist:`2025-62813` +- openssh: Fix :cve_nist:`2025-61984` and :cve_nist:`2025-61985` +- python3: Fix :cve_nist:`2025-59375` +- python3-xmltodict: Fix :cve_nist:`2025-9375` +- qemu: Fix :cve_nist:`2024-8354` +- tiff: Ignore :cve_nist:`2025-8961` +- u-boot: Fix :cve_nist:`2024-42040` +- wpa-supplicant: Fix :cve_nist:`2025-24912` + + +Fixes in Yocto-5.0.14 +~~~~~~~~~~~~~~~~~~~~~ + +- bind: upgrade to 9.18.41 +- bitbake: bb/fetch2/__init__.py: remove a DeprecationWarning in uri_replace() +- bitbake: fetch2/wget: Keep query parameters in URL during checkstatus +- build-appliance-image: Update to scarthgap head revision +- ca-certificates: Add comment for provenance of :term:`SRCREV` +- ca-certificates: fix on-target postinstall script +- ca-certificates: get sources from debian tarballs +- ca-certificates: submit sysroot patch upstream, drop default-sysroot.patch +- ca-certificates: upgrade to 20250419 +- classes/create-spdx-2.2: align DEPLOY_DIR_SPDX with SPDX_VERSION layout +- classes/create-spdx-2.2: Handle empty packages +- classes-global/license: Move functions to library code +- classes-global/staging: Exclude do_create_spdx from automatic sysroot extension +- classes-recipe/baremetal-image: Add image file manifest +- classes-recipe/image: Add image file manifest +- curl: only set CA bundle in target build +- dev-manual, test-manual: Update autobuilder output links +- flex: fix build with gcc-15 on host +- glibc: stable 2.39 branch updates +- gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs +- icu: Backport patch to fix build issues with long paths (>512 chars) +- iptables: remove /etc/ethertypes +- lib/license: Move package license skip to library +- lib: oe: license: Add missing import +- lib: oeqa: spdx: Add tests for extra options +- linux-yocto/6.6: update to v6.6.111 +- meta: backport :term:`SPDX` 3.0 fixes and tasks from upstream version Walnascar +- migration-guides: add release notes for 4.0.30 +- oe-build-perf-report: relax metadata matching rules +- oe-core: Remove empty file +- oeqa/runtime/ping: don't bother trying to ping localhost +- oeqa/selftest: Add :term:`SPDX` 3.0 include source case for work-share +- oeqa/selftest/devtool: Update after upstream repo changes +- oeqa: spdx: Add tar test for :term:`SPDX` 2.2 +- overview-manual/yp-intro.rst: update on-target packaging info +- perf: add arm64 source files for unistd_64.h +- poky.conf: bump version for 5.0.14 +- python3: upgrade to 3.12.12 +- ref-manual/classes.rst: document the relative_symlinks class +- ref-manual/classes.rst: extend the uninative class documentation +- ref-manual/classes.rst: gettext: extend the documentation of the class +- ref-manual/variables.rst: document :term:`CCACHE_DISABLE` CHECKSUM :term:`UNINATIVE_URL` + :term:`REQUIRED_COMBINED_FEATURES` :term:`REQUIRED_IMAGE_FEATURES` + :term:`REQUIRED_MACHINE_FEATURES` :term:`USE_NLS` variable +- ref-manual/variables.rst: fix :term:`LAYERDEPENDS` description +- selftest: spdx: Add :term:`SPDX` 3.0 test cases +- selftest/spdx: Fix for SPDX_VERSION addition +- spdx 3.0: Rework how :term:`SPDX` aliases are linked +- spdx30_tasks: adapt CVE handling to new cve-check API +- spdx30_tasks: fix FetchData attribute in add_download_files +- util-linux: fix pointer usage in hwclock param handling +- vulnerabilities: update nvdcve file name +- webkitgtk: upgrade to 2.44.4 +- wireless-regdb: upgrade to 2025.10.07 +- xf86-video-intel: correct :term:`SRC_URI` as freedesktop anongit is down + + +Known Issues in Yocto-5.0.14 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.0.14 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: +- Alexander Kanavin +- Anders Heimer +- Ankur Tyagi +- Antonin Godard +- Archana Polampalli +- Bastian Krause +- Bin Lan +- Bruce Ashfield +- Carlos Alberto Lopez Perez +- Daniel Semkowicz +- David Nyström +- Deepesh Varatharajan +- Gyorgy Sarvari +- Hongxu Jia +- Joshua Watt +- João Marcos Costa +- Kamel Bouhara (Schneider Electric) +- Lee Chee Yang +- Martin Jansa +- Matthias Schiffer +- Michael Haener +- Paul Barker +- Peter Marko +- Philippe-Alexandre Mathieu +- Praveen Kumar +- Rajeshkumar Ramasamy +- Rasmus Villemoes +- Richard Purdie +- Robert P. J. Day +- Saravanan +- Soumya Sambu +- Steve Sakoman +- Theodore A. Roth +- Wang Mingyu +- Yannic Moog +- Yash Shinde +- Yogita Urade + +Repositories / Downloads for Yocto-5.0.14 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.14 ` +- Git Revision: :yocto_git:`a8687e4bb2e822670b6ad110613a12fa02943d3d ` +- Release Artefact: yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d +- sha: 72a51b6049a59f773720d9b0aa94f090222a41aeb22d65c5f4211c78418fb6fa +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2 + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.14 ` +- Git Revision: :yocto_git:`7e8674996b0164b07e56bc066d0fba790e627061 ` +- Release Artefact: poky-7e8674996b0164b07e56bc066d0fba790e627061 +- sha: 071e189ebccfad99d4d79ea9021475296fa642611828249f0963b019f842a021 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap ` +- Tag: :oe_git:`yocto-5.0.14 ` +- Git Revision: :oe_git:`471adaa5f77fa3b974eab60a2ded48e360042828 ` +- Release Artefact: oecore-471adaa5f77fa3b974eab60a2ded48e360042828 +- sha: 4dfad047a68aea2293845cdb4a86911bb3b1b0444a63f51b4e5a2448018d6a5e +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.14 ` +- Git Revision: :yocto_git:`bf6aea52c4009e08f26565c33ce432eec7cfb090 ` +- Release Artefact: meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090 +- sha: 92c9da1027efaf945d80bcd44984d5f8e7606c7ded485b57c0c8f47c9fa1302d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.14 ` +- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f ` +- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f +- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 ` +- Tag: :oe_git:`yocto-5.0.14 ` +- Git Revision: :oe_git:`8dcf084522b9c66a6639b5f117f554fde9b6b45a ` +- Release Artefact: bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a +- sha: 766eda21f2a914276d2723b1d8248be11507f954aef8fc5bb1767f3cb65688dd +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2