Release notes for Yocto-5.0.12 (Scarthgap)

Security Fixes in Yocto-5.0.12

avahi: Fix CVE-2024-52615
binutils: Fix CVE-2025-7545 and CVE-2025-7546
busybox: Fix CVE-2023-39810
dropbear: Fix CVE-2025-47203
gdk-pixbuf: Fix CVE-2025-7345
git: Fix CVE-2025-27613, CVE-2025-27614, CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385 and CVE-2025-48386
glib-2.0: Ignore CVE-2025-4056
glibc: Fix CVE-2025-8058
gnutls: Fix CVE-2025-6395, CVE-2025-32988, CVE-2025-32989 and CVE-2025-32990
go: Ignore CVE-2025-0913
gstreamer1.0-plugins-base: Fix CVE-2025-47806 and CVE-2025-47808
gstreamer1.0-plugins-good: Fix CVE-2025-47183 and CVE-2025-47219
iputils: Fix CVE-2025-48964
libpam: Fix CVE-2025-6020
libxml2: Fix CVE-2025-6170, CVE-2025-49794, CVE-2025-49795 and CVE-2025-49796
libxml2: Ignore CVE-2025-8732
ncurses: Fix CVE-2025-6141
openssl: Fix CVE-2024-41996 and CVE-2025-27587
python3: Fix CVE-2025-8194
sqlite3: Fix CVE-2025-6965
sudo: Fix CVE-2025-32463
xserver-xorg: Fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49177, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 and CVE-2025-49176
xz: Ignore CVE-2024-47611

Fixes in Yocto-5.0.12

bash: Stick to C17 std
bash: use -std=gnu17 also for native CFLAGS
binutils: stable 2.42 branch updates
bitbake: bitbake: runqueue: Verify mcdepends are valid
bitbake: test/fetch: Switch u-boot based test to use our own mirror
bitbake: utils: Optimise signal/sigmask performance
build-appliance-image: Update to scarthgap head revision
cairo: fix build with gcc-15 on host
cmake: Add PACKAGECONFIG option for debugger support
cve-check: Add missing call to exit_if_errors
dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
e2fsprogs: Fix build failure with gcc 15
git: Upgrade to 2.44.4
glibc: stable 2.39 branch updates
gnutls: patch read buffer overrun in the “pre_shared_key” extension
gnutls: patch reject zero-length version in certificate request
go-helloworld: fix license
kea: set correct permissions for /var/run/kea
linux-libc-headers: Fix invalid conversion in cn_proc.h
migration-guides: add release notes for 5.0.11
mtools: upgrade to 4.0.49
oe-debuginfod: add option for data storage
orc: set CVE_PRODUCT
overview-manual/yp-intro.rst: fix broken link to article
parted: Fix build with GCC 15
poky.conf: bump version for 5.0.12
python3: update CVE product
ref-manual/classes.rst: document the testexport class
ref-manual/system-requirements.rst: update supported distributions
ref-manual/variables.rst: document SPL_DTB_BINARY FIT_CONF_PREFIX variable
scripts/install-buildtools: Update to 5.0.11
sudo: upgrade to 1.9.17p1
timedated: wait for jobs before SetNTP response
variables.rst: remove references to obsolete tar packaging
xserver-xorg: upgrade to 21.1.18

Known Issues in Yocto-5.0.12

N/A

Contributors to Yocto-5.0.12

Thanks to the following people who contributed to this release: - Aleksandar Nikolic - Alexander Kanavin - Antonin Godard - Archana Polampalli - Daniel Turull - Deepesh Varatharajan - Erik Lindsten - Fabio Berton - Hitendra Prajapati - Jinfeng Wang - Joe Slater - Khem Raj - Lee Chee Yang - Marco Cavallini - Mark Hatle - Martin Jansa - Michal Seben - Nikhil R - Peter Marko - Philip Lorenz - Praveen Kumar - Quentin Schulz - Richard Purdie - Robert P. J. Day - Roland Kovacs - Steve Sakoman - Vijay Anusuri - Wang Mingyu - Yash Shinde - Yi Zhao - Zhang Peng