From patchwork Thu Apr 2 09:58:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Lee, Chee Yang" X-Patchwork-Id: 85154 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id ED343D3940D for ; Thu, 2 Apr 2026 09:59:01 +0000 (UTC) Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.12]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.12034.1775123937419192239 for ; Thu, 02 Apr 2026 02:58:58 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@intel.com header.s=Intel header.b=njjFQQy4; spf=pass (domain: intel.com, ip: 198.175.65.12, mailfrom: chee.yang.lee@intel.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1775123938; x=1806659938; h=from:to:subject:date:message-id:in-reply-to:references: mime-version:content-transfer-encoding; bh=zWE6dswkp7Lgon3OBkilcgheZSKhhkqRsEU5n3TsjrY=; b=njjFQQy41f/LdyLtHGplBZP+X3GVwa6KvttyKkxI5d5+CxNZED340elP 6ZOtP/J55ADsV7C66UYA8S5XeFcPL7XVmc1u05wWXgvtw1gaHoKiCz1cA RlQ3yt2LT94/X55qJ3ecftSXkiPr/UT/r/ElMigjKkp219/MAHPnSL5TP d7xRSFkMole6JfgL817xQGQKMY1a7CJ5mF2Y3nIK0eKQtb3HI079nlj7R 6Kb/oQMBySouFqTMidhpyMsGYSBSgaa4yZmHEn1aRu8MDiDxZqUuOp90T qMul+C6hs+XwiygpjlDOJxtmd1Eq5YR7LEpgVPJkMGGoNwB++kwpG794d g==; X-CSE-ConnectionGUID: pvCLwRkLTwCd7v96uiv+JA== X-CSE-MsgGUID: ereu++IxR+2G/w6OqWE0Lg== X-IronPort-AV: E=McAfee;i="6800,10657,11746"; a="87638458" X-IronPort-AV: E=Sophos;i="6.23,155,1770624000"; d="scan'208";a="87638458" Received: from orviesa004.jf.intel.com ([10.64.159.144]) by orvoesa104.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 02 Apr 2026 02:58:58 -0700 X-CSE-ConnectionGUID: PHmOEM33RnSsuhv5lGWaMw== X-CSE-MsgGUID: zbKcIAHsQSysps7rvbUuZw== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.23,155,1770624000"; d="scan'208";a="231343364" Received: from cheeyang-desk4.png.intel.com ([10.107.249.123]) by orviesa004.jf.intel.com with ESMTP; 02 Apr 2026 02:58:57 -0700 From: chee.yang.lee@intel.com To: docs@lists.yoctoproject.org Subject: [PATCH 2/2] migration-guide: add release notes for 5.3.3 Date: Thu, 2 Apr 2026 17:58:11 +0800 Message-ID: <20260402095811.60426-2-chee.yang.lee@intel.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260402095811.60426-1-chee.yang.lee@intel.com> References: <20260402095811.60426-1-chee.yang.lee@intel.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 02 Apr 2026 09:59:01 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/docs/message/9165 From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- .../migration-guides/release-5.3.rst | 1 + .../migration-guides/release-notes-5.3.3.rst | 175 ++++++++++++++++++ 2 files changed, 176 insertions(+) create mode 100644 documentation/migration-guides/release-notes-5.3.3.rst diff --git a/documentation/migration-guides/release-5.3.rst b/documentation/migration-guides/release-5.3.rst index 61fc082c1..4c2770e19 100644 --- a/documentation/migration-guides/release-5.3.rst +++ b/documentation/migration-guides/release-5.3.rst @@ -9,3 +9,4 @@ Release 5.3 (whinlatter) release-notes-5.3 release-notes-5.3.1 release-notes-5.3.2 + release-notes-5.3.3 diff --git a/documentation/migration-guides/release-notes-5.3.3.rst b/documentation/migration-guides/release-notes-5.3.3.rst new file mode 100644 index 000000000..94913afc4 --- /dev/null +++ b/documentation/migration-guides/release-notes-5.3.3.rst @@ -0,0 +1,175 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.3.3 (Whinlatter) +------------------------------------------ + +Security Fixes in Yocto-5.3.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- alsa-lib: patch :cve_nist:`2026-25068` +- busybox: Fix :cve_nist:`2025-60876` +- ffmpeg: Ignore :cve_nist:`2025-12343` +- freetype: Fix :cve_nist:`2026-23865` +- gdk-pixbuf: Fix :cve_nist:`2025-6199` +- glib-2.0: Fix :cve_nist:`2026-1484`, :cve_nist:`2026-1485` and :cve_nist:`2026-1489` +- gnutls: Fix :cve_nist:`2025-14831` +- go: Fix :cve_nist:`2026-25679`, :cve_nist:`2026-27137`, :cve_nist:`2026-27138`, + :cve_nist:`2026-27139` and :cve_nist:`2026-27142` +- harfbuzz: Fix :cve_nist:`2026-22693` +- inetutils: Fix :cve_nist:`2026-28372` +- libpam: Ignore :cve_nist:`2024-10041` +- libpng: Fix :cve_nist:`2026-25646` +- linux-yocto: Ignore :cve_nist:`2022-38096`, :cve_nist:`2023-6535`, :cve_nist:`2023-39176`, + :cve_nist:`2023-39179` and :cve_nist:`2023-39180` +- python3-pip: Fix :cve_nist:`2026-1703` +- python3-urllib3: Fix :cve_nist:`2025-66471` +- zlib: Fix :cve_nist:`2026-27171` + + +Fixes in Yocto-5.3.3 +~~~~~~~~~~~~~~~~~~~~ + +meta-yocto +^^^^^^^^^^ +- poky.conf: Bump version for 5.3.3 release + +openembedded-core +^^^^^^^^^^^^^^^^^ +- README: Add whinlatter subject-prefix to git-send-email suggestion +- avahi: Remove a reference to the rejected :cve_nist:`2021-36217` +- b4-config: add send-prefixes for whinlatter +- build-appliance-image: Update to whinlatter head revisions +- classes/buildhistory: Do not sign buildhistory commits +- create-pull-request: Keep commit hash to be pulled in cover email +- glib-2.0: upgrade to 2.86.4 +- gnutls: fix postinst script for ${PN}-fips for multilibs +- gnutls: use libtool to install test binaries +- go: upgrade to 1.25.8 +- libpng: upgrade to 1.6.55 +- linux-yocto: apply cve-exclusions also to rt and tiny recipe variants +- lsb.py: strip ' from os-release file +- lz4: Remove a reference to the rejected :cve_nist:`2025-62813` +- pseudo: Update to include a fix for systems with kernel <5.6 +- python3: skip flaky test_default_timeout test +- scripts/install-buildtools: Update to 5.3.2 +- wic/engine: error on old host debugfs for standalone directory copy +- wireless-regdb: upgrade to 2026.02.04 + +yocto-docs +^^^^^^^^^^ +- Makefile: pass -silent to latexmk +- dev-manual: delete references to "tar" package format +- overview-manual/concepts: list other possible class directories +- overview-manual: escape wildcard in inline markup +- qemu.rst: parsing of the code-block was not done +- ref-manual/classes.rst: fix broken links to U-Boot documentation +- tools/host_packages_scripts/tlmgr_docs_pdf.sh: install perl +- what-i-wish-id-known.rst: replace figure by the new SVG + + +Known Issues in Yocto-5.3.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.3.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Adarsh Jagadish Kamini +- Ankur Tyagi +- Antonin Godard +- Benjamin Robin (Schneider Electric) +- Daniel Dragomir +- Fabio Berton +- Hugo SIMELIERE +- Jan Vermaete +- Kristiyan Chakarov +- Liu Yiding +- Livin Sunny +- Martin Jansa +- Michael Opdenacker +- Paul Barker +- Peter Marko +- Quentin Schulz +- Richard Purdie +- Robert P. J. Day +- Ross Burton +- Shaik Moin +- Vijay Anusuri +- Yoann Congal + +Repositories / Downloads for Yocto-5.3.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`whinlatter ` +- Tag: :yocto_git:`yocto-5.3.3 ` +- Git Revision: :yocto_git:`82bd1a71e6e6a707d0009725969976cf2256af36 ` +- Release Artefact: yocto-docs-82bd1a71e6e6a707d0009725969976cf2256af36 +- sha: fcf7020e34198f3b89077f9649cec579f4d23228f7f0a3a28a21c6b5b3649857 +- Download Locations: + + https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.3/yocto-docs-82bd1a71e6e6a707d0009725969976cf2256af36.tar.bz2 + + https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.3/yocto-docs-82bd1a71e6e6a707d0009725969976cf2256af36.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`whinlatter ` +- Tag: :oe_git:`yocto-5.3.3 ` +- Git Revision: :oe_git:`ab57471acad7ce2a037480dc7b301104620f1ebf ` +- Release Artefact: oecore-ab57471acad7ce2a037480dc7b301104620f1ebf +- sha: 63ed486722e186d517e333c204def0a7bf578ca78bdeb2ad982625c49e7ee833 +- Download Locations: + + https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.3/oecore-ab57471acad7ce2a037480dc7b301104620f1ebf.tar.bz2 + + https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.3/oecore-ab57471acad7ce2a037480dc7b301104620f1ebf.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`whinlatter ` +- Tag: :yocto_git:`yocto-5.3.3 ` +- Git Revision: :yocto_git:`9b98ec5e6cfb6c9dc74d3c2e6304eeb274f7c487 ` +- Release Artefact: meta-yocto-9b98ec5e6cfb6c9dc74d3c2e6304eeb274f7c487 +- sha: fcb81c6835036c4157b16dfc9f6d8c5a7dd0ed7ac72f59be238e99b486b1f8fa +- Download Locations: + + https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.3/meta-yocto-9b98ec5e6cfb6c9dc74d3c2e6304eeb274f7c487.tar.bz2 + + https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.3/meta-yocto-9b98ec5e6cfb6c9dc74d3c2e6304eeb274f7c487.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`whinlatter ` +- Tag: :yocto_git:`yocto-5.3.3 ` +- Git Revision: :yocto_git:`00323de97e397d4f6734ef2191806616989f5e10 ` +- Release Artefact: meta-mingw-00323de97e397d4f6734ef2191806616989f5e10 +- sha: c9a70539b12c0642596fde6a2766d4a6a8fec8b2a366453fb6473363127a1c77 +- Download Locations: + + https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.3/meta-mingw-00323de97e397d4f6734ef2191806616989f5e10.tar.bz2 + + https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.3/meta-mingw-00323de97e397d4f6734ef2191806616989f5e10.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.16 ` +- Tag: :oe_git:`yocto-5.3.3 ` +- Git Revision: :oe_git:`7af7e04f3adc8ba144d9e2e6b37ed4ddb3b59df0 ` +- Release Artefact: bitbake-7af7e04f3adc8ba144d9e2e6b37ed4ddb3b59df0 +- sha: 06dd68908a5ffafae46ff7616e93a80f8b73c016f541e9517cf63b05f52f15c7 +- Download Locations: + + https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.3/bitbake-7af7e04f3adc8ba144d9e2e6b37ed4ddb3b59df0.tar.bz2 + + https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.3/bitbake-7af7e04f3adc8ba144d9e2e6b37ed4ddb3b59df0.tar.bz2 +