Release notes for Yocto-5.0.6 (Scarthgap)
Security Fixes in Yocto-5.0.6
- acpica: Fix CVE-2024-24856 
- curl: Fix CVE-2024-9681 
- dropbear: Fix CVE-2023-48795 
- expat: Fix CVE-2024-50602 
- ffmpeg: Fix CVE-2023-49501, CVE-2023-49528, CVE-2023-50007, CVE-2024-7055 and CVE-2024-28661 
- glib-2.0: Fix CVE-2024-52533 
- ghostscript: Fix CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954, CVE-2024-46955 and CVE-2024-46956 
- gstreamer1.0: Ignore CVE-2024-0444 
- libpam: Fix CVE-2024-10041 
- libsndfile: Fix CVE-2024-50612 
- libsoup: Fix CVE-2024-52530, CVE-2024-52531 and CVE-2024-52532 
- ovmf: Fix CVE-2024-1298 and CVE-2024-38796 
- python3-zipp: Fix CVE-2024-5569 
- qemu: Fix CVE-2024-4693, CVE-2024-6505 and CVE-2024-7730 
- qemu: Ignore CVE-2024-6505 
Fixes in Yocto-5.0.6
- binutils: Add missing perl modules to RDEPENDS for nativesdk variant 
- binutils: stable 2.42 branch update 
- bitbake: Remove custom exception backtrace formatting 
- bitbake: fetch2/git: Use quote from shlex, not pipes 
- bitbake: fetch2: use persist_data context managers 
- bitbake: fetch/wget: Increase timeout to 100s from 30s 
- bitbake: persist_data: close connection in SQLTable __exit__ 
- bitbake: runqueue: Fix performance of multiconfigs with large overlap 
- bitbake: runqueue: Fix scenetask processing performance issue 
- bitbake: runqueue: Optimise setscene loop processing 
- build-appliance-image: Update to scarthgap head revision 
- builder: set CVE_PRODUCT 
- cmake: Fix sporadic issues when determining compiler internals 
- cml1: do_diffconfig: Don’t override .config with .config.orig 
- contributor-guide: Remove duplicated words 
- dev-manual: bblock: use warning block instead of attention 
- dev-manual: document how to provide confs from layer.conf 
- do_package/sstate/sstatesig: Change timestamp clamping to hash output only 
- doc: Makefile: add support for xelatex 
- doc: Makefile: publish pdf and epub versions too 
- doc: Makefile: remove inkscape, replace by rsvg-convert 
- doc: add a download page for epub and pdf 
- doc: conf.py: add a bitbake_git extlink 
- doc: standards.md: add a section on admonitions 
- doc: sphinx-static: switchers.js.in: do not refer to URL_ROOT anymore 
- dropbear: backport fix for concurrent channel open/close 
- enchant2: fix do_fetch error 
- expat: upgrade to 2.6.4 
- gcc: backport patch to fix an issue with tzdata 2024b 
- ghostscript: upgrade to 10.04.0 
- glibc: stable 2.39 branch updates 
- groff: fix rare build race in hdtbl 
- libgcrypt: Fix building error with ‘-O2’ in sysroot path 
- libpam: drop cracklib from DEPENDS 
- libxml-parser-perl: fix do_fetch error 
- llvm: reduce size of -dbg package 
- lttng-ust: backport patch to fix cmake-multiple-shared-libraries build error 
- migration-guides: add release notes for 4.0.23 and 5.0.5 
- ninja: fix build with python 3.13 
- oeqa/runtime/ssh: Fix incorrect timeout fix 
- oeqa/runtime/ssh: Rework ssh timeout 
- oeqa/utils/gitarchive: Return tag name and improve exclude handling 
- package_rpm: Check if file exists before open() 
- package_rpm: restrict rpm to 4 threads 
- package_rpm: use zstd’s default compression level 
- poky.conf: bump version for 5.0.6 
- pseudo: Fix envp bug and add posix_spawn wrapper 
- python3-poetry-core: drop python3-six from RDEPENDS 
- python3-requests: upgrade to 2.32.2 
- python3-urllib3: upgrade to 2.2.2 
- qemu: upgrade to 8.2.7 
- qemurunner: Clean up serial_lock handling 
- ref-manual: classes: fix bin_package description 
- resulttool: Add –logfile-archive option to store mode 
- resulttool: Allow store to filter to specific revisions 
- resulttool: Clean up repoducible build logs 
- resulttool: Fix passthrough of –all files in store mode 
- resulttool: Handle ltp rawlogs as well as ptest 
- resulttool: Improve repo layout for oeselftest results 
- resulttool: Trim the precision of duration information 
- resulttool: Use single space indentation in json output 
- rootfs: Ensure run-postinsts is not uninstalled for read-only-rootfs-delayed-postinsts 
- rxvt-unicode.inc: disable the terminfo installation by setting TIC to : 
- sanity: check for working user namespaces 
- scripts/install-buildtools: Update to 5.0.5 
- selftest/reproducible: Clean up pathnames 
- selftest/reproducible: Drop rawlogs 
- shared-mime-info: drop itstool-native from DEPENDS 
- strace: download release tarballs from GitHub 
- systemd-boot: drop intltool-native from DEPENDS 
- systemd: drop intltool-native from DEPENDS 
- systemd: upgrade to 255.13 
- sysvinit: backport patch for fixing one issue of pidof 
- tcl: skip io-13.6 test case 
- toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails 
- tune-cortexa32: set tune feature as armv8a 
- tzcode-native: upgrade to 2024b 
- tzdata: upgrade to 2024b 
- uboot-sign: fix concat_dtb arguments 
- udev-extraconf: fix network.sh script did not configure hotplugged interfaces 
- webkitgtk: fix erroneous use of unsuported DEBUG_LEVELFLAG variable 
- wireless-regdb: upgrade to 2024.10.07 
Known Issues in Yocto-5.0.6
- N/A 
Contributors to Yocto-5.0.6
Thanks to the following people who contributed to this release:
- Aleksandar Nikolic 
- Alexander Kanavin 
- Antonin Godard 
- Archana Polampalli 
- Bin Lan 
- Changqing Li 
- Chen Qi 
- Chris Laplante 
- Clayton Casciato 
- Deepthi Hemraj 
- Divya Chellam 
- Florian Kreutzer 
- Gassner, Tobias.ext 
- Guðni Már Gilbert 
- Harish Sadineni 
- Hitendra Prajapati 
- Hongxu Jia 
- Jagadeesh Krishnanjanappa 
- Jiaying Song 
- Jinfeng Wang 
- Joshua Watt 
- Lee Chee Yang 
- Markus Volk 
- Michael Opdenacker 
- Pavel Zhukov 
- Peter Marko 
- Philip Lorenz 
- Randy MacLeod 
- Regis Dargent 
- Richard Purdie 
- Robert Yang 
- Ross Burton 
- Soumya Sambu 
- Steve Sakoman 
- Talel BELHAJSALEM 
- Trevor Gamblin 
- Vijay Anusuri 
- Wang Mingyu 
- Yogita Urade 
Repositories / Downloads for Yocto-5.0.6
poky
- Repository Location: https://git.yoctoproject.org/poky 
- Branch: scarthgap 
- Tag: yocto-5.0.6 
- Git Revision: 2541a8171f91812a4b16e7dc4da0d77d2318a256 
- Release Artefact: poky-2541a8171f91812a4b16e7dc4da0d77d2318a256 
- sha: b77157596ae75d163387a08a317397a57ab8fa6cf4725f28e344fae3f69cca4d 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2 
openembedded-core
- Repository Location: https://git.openembedded.org/openembedded-core 
- Branch: scarthgap 
- Tag: yocto-5.0.6 
- Git Revision: 336eec6808710f260a5336ca8ca98139a80ccb14 
- Release Artefact: oecore-336eec6808710f260a5336ca8ca98139a80ccb14 
- sha: 38c4fa7e7e88c28361c012dd5baabe373e2ec3c8aba6194146768b146192cceb 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2 
meta-mingw
- Repository Location: https://git.yoctoproject.org/meta-mingw 
- Branch: scarthgap 
- Tag: yocto-5.0.6 
- Git Revision: acbba477893ef87388effc4679b7f40ee49fc852 
- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 
- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 
bitbake
- Repository Location: https://git.openembedded.org/bitbake 
- Branch: 2.8 
- Tag: yocto-5.0.6 
- Git Revision: f40a3a477d5241b697bf2fb030dd804c1ff5839f 
- Release Artefact: bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f 
- sha: dbfc056c7408a5547f624799621ab1261a05685112e0922a88007723b1edbc87 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2 
yocto-docs
- Repository Location: https://git.yoctoproject.org/yocto-docs 
- Branch: scarthgap 
- Tag: yocto-5.0.6 
- Git Revision: TBD