Release notes for 6.0 (wrynose)

This document lists new features and enhancements for the Yocto Project 6.0 Release (codename “wrynose”). For a list of breaking changes and migration guides, see the Migration notes for 6.0 (wrynose) section.

The 6.0 (wrynose) release is the new LTS release after 5.0 (scarthgap). If you are migrating from the 5.0 version, be sure to read the previous migration guides:

See also the list of new features and enhancements of the previous releases:

New Features / Enhancements in 6.0

  • Linux kernel 6.18, gcc 15.2, glibc 2.43, LLVM 22.1.2, and over 300 other recipe upgrades

  • Minimum Python version required on the host: 3.9.

  • New variables:

  • Kernel-related changes:

  • New core recipes:

    • libconfig: Import recipe from https://git.openembedded.org/meta-openembedded/, needed by one of the Mesa recipes (1a0196a)

    • python3-sphinxcontrib-svg2pdfconverter: Used for the generation of the Yocto Project documentation (f3f0019)

    • python3-pyzstd: Import from meta-python, needed by the ukify tool of systemd v258 (88a2713)

    • python3-uv-build: This recipe adds the uv Python build backend, required by python3-cryptography (0880cd2)

    • blueprint-compiler: Add the recipe as it became a dependency of the epiphany recipe after its upgrade to 49.2 (4212392)

    • python3-sbom-cve-check: New recipe for building and using sbom-cve-check, a lightweight SBOM CVE analysis tool (0fdacec)

    • python3-shacl2code, python3-hatch-build-scripts, python3-spdx-python-model: Added as dependencies of python3-sbom-cve-check (4862221, 41591af, a83eaca)

    • libfyaml: Added as a dependency of appstream (b8b7b58)

    • meta-world-recipe-sbom: Building this recipe will produce SBOM documents for each recipe present in the build environment, using the create-spdx class. This is different from the image SBOM which can also be generated using the create-spdx class after building an image. See Creating a Software Bill of Materials for more information (d999ac4)

    • python3-kirk: The Kirk application is a fork of runltp-ng and became the official LTP tests executor (c33fd4e)

    • wic: This recipe builds the WIC command-line tool. This used to be part of OpenEmbedded-Core (OE-Core) but is now externally managed (25ca1cb, b9e2a2f)

  • New core classes:

  • Global configuration changes:

  • QEMU / runqemu changes:

    • qemuboot`: Make the tap interface nameserver configurable through QB_TAP_NAMESERVER (0e8c258)

    • qemu: Disable the libkeyutils feature (30cc9f5)

    • runqemu-extract-sdk: Support the tar.zst format (650bb45)

    • qemurunner: Improve qmp module detection (a7386d0)

    • runqemu: Support .tar.zst, .tar,xz, .tar rootfs archive types (3a6172f)

    • runqemu: Allow VNC to be used as a fallback when there is no DISPLAY set (df9e9f3)

  • Documentation changes:

    • The documentation build now fetches the list of active and inactive version of the documentation from the remote releases.json file. This also applies to the BitBake documentation.

  • Go changes:

    • go: Disable workspaces when building (GOWORK="off") (c52c5e8)

    • meta-go-toolchain: Disable support for the riscv32 and ppc32 architectures, as this was not supported (f554071)

  • Rust changes:

    • Enable dynamic linking with llvm. This allows dynamically linking to libLLVM.so instead of linking statically (74ba238)

    • Install Rust library sources for make rustavailable support (2912ca3)

    • Enable dynamic LLVM linking by default (d0671c3)

    • Enable fully static linking when TCLIBC is set to musl (75409c6)

  • Wic Image Creator changes:

  • Testing-related changes:

    • ptest support was added for the following recipes:

    • selftests: Use SHA256 keys for RPM tests (692919b)

    • oeqa: Open JSON files to parse in a context manager (e96baf5)

    • resulttool: Add ptest support to the JUnit output format (2abe2d7)

    • do_testimage: Print last lines of kernel log on test fail (fea3c44)

    • reproducible: Use the jQuery CDN instead of jquery-native (d3ee549)

    • selftest: Test installation of recipes with complex packaging (6f3aab6)

    • Add test_sdk_runqemu to test the execution of runqemu from an SDK (7fbb281)

    • Add tests for Rust support in the Linux kernel (01ea2b2, 10dff9f)

    • Replace runltp with kirk, as it became the new official LTP test executor (c1e5ed4)

    • WIC related tests were updated after wic was moved to its own repository and is externally managed (b9e2a2f)

  • Utility script changes:classes

    • bitbake-config-build: It is now possible to disable all fragments starting with a prefix by issuing bitbake-config-build disable-fragment <prefix>/ (573695d)

    • recipetool: Support PEP639-variant of license key in Python pyproject.toml files (9d1a7bb)

    • buildhistory:

    • create-pull-request: Keep commit hash to be pulled in cover email (c78f5ae)

    • yocto-check-layer: Add messages in test_readme assertions (9fe883c)

    • improve_kernel_cve_report:

      • Sort kernel_compiled_files (682e5be)

      • Correct the description for fixed version (b76da20)

      • Update data if CVE exists (9ea6d92)

      • Validate that cve details field exists (80ff490)

    • oe-pkgdata-util: improve the lookup-pkg error message for RPROVIDES packages (46ff3a8)

  • BitBake changes:

    • bitbake-layers:

      • Add a --show-variants option to the show-recipes subcommand to display BBCLASSEXTEND variants (353d5e9)

      • Fix the branch detection method of layerindex-fetch (af9dd01)

    • bitbake-setup:

      • Implement symlinking local sources into builds with the --use-local-source option of the init subcommand (ed5a3a0)

      • Convert print() calls to use a BitBake logger (6e511d0)

      • Correct several scenarios in layer updates (aa15cc7)

      • Source in the git-remote section can now be specified more simply with the uri property, instead of the remotes property (7941a5d). For example:

        "bitbake": {
            "git-remote": {
                "uri": "https://git.openembedded.org/bitbake",
                "branch": "master",
                "rev": "master"
            }
        }
        
      • Use the internal registry if run from a Git checkout, from a remote BitBake repository otherwise (675e907)

      • Fragments passed in the oe-fragments-one-of property can now contain descriptions (29f2cee)

      • Improve the readability of choices during the bitbake-setup init command (d970063)

      • Enable coloring of the diff outputs when using the bitbake-setup status or bitbake-setup update commands

      • The bitbake-setup update now behaves in a non-destructive way: local commits and modifications to layers are taken into account, and the tool will either stop or warn the user that the update is possible or not (2ee3a19)

      • Share Shared State by default between builds, by adding a definition for SSTATE_DIR and BB_HASHSERVE_DB_DIR in the site.conf file created by bitbake-setup init (a70c336)

      • Generate config files for VSCode by default, unless --no-init-vscode is passed to bitbake-setup init (92fd721)

    • The unpack() function (the one containing the logic of the do_unpack task), can now take an update argument to allow updating a Git repository in-place rather than deleting it and re-creating it. An alias function named unpack_update() was created for this unpack mode. See The Non-Destructive Update (unpack_update) for more information (e7d5e15)

    • cooker: Use BB_HASHSERVE_DB_DIR as hash server database location. If unset, the existing behavior is preserved (b339d05)

    • bitbake-getvar: Show close matches when no providers are found (1f8fa7c)

    • The GIT_CONFIG_GLOBAL environment variable will now be taken into account by the Git fetcher, to allow passing a different set of Git configuration options when fetching Git repositories (4c37844)

    • When using the subpath parameter with the Git fetcher in an SRC_URI, properly make the HEAD point to the value specified in SRCREV.

  • Clang/LLVM related changes:

    • compiler-rt:

      • Remove the need to depend on libgcc (f504b6b)

      • Always build C runtime (crt) files (56fe42a)

    • libcxx: Remove GNU runtime from dependencies (8034509)

    • libcxx/compiler-rt: Add support for llvm-libgcc, a drop-in replacement for libgcc and crt files (ed02230)

  • SPDX-related changes:

    • Output SBOM documents now include recipe metadata (d999ac4)

    • spdx30_tasks: Fix SPDX_CUSTOM_ANNOTATION_VARS implementation (52ab3b6)

    • kernel: Add a task to export the kernel configuration to SPDX (228a968)

    • Add support for exporting the PACKAGECONFIG to SPDX (7ec61ac)

    • Add suport for package URLs (PURLs) through SPDX_PACKAGE_URL (874b2d3)

    • create-spdx-2.2: Add CVEs in CVE_CHECK_IGNORE to the list of fixed CVEs in the output SBOM (f852522)

    • The create-spdx class used to include VEX statements in the SPDX documents tied to each packages. This is no longer the case, as these statements are now found in the SPDX documents for recipes directly. This was done to decrease the duplication of these statements for packages that were generated by the same recipe.

      The output SPDX document for an image recipe will still include the VEX statements, as the SPDX document for the image also include the recipe SPDX metadata.

      The inclusion of VEX statements in SPDX documents can be controlled with the SPDX_INCLUDE_VEX variable (d999ac4)

  • devtool changes:

    • ide-sdk:

      • Find bitbake-setup’s init-build-env first, and oe-init-build-env if not found (6ab7e9e)

      • Add gdbserver attach mode support (1191710)

      • Support GDB pretty-printing for C++ STL types (a69e2ba)

      • Support kernel module development (aaf15d6)

    • Add new patches in correct order when running devtool finish (fa7877d)

    • Prevent devtool modify -n from corrupting Linux kernel Git repos (d383ea3)

  • Patchtest-related changes:

  • insane / sanity classes related changes:

  • Security changes:

    • A new document was added to the Yocto Project documentation: Yocto Project Security Reference. It is intended to document how to report vulnerabilities to the Yocto Project security team.

  • sbom-cve-check-related changes:

    • Escape special characters in CPE 2.3 strings (9dd9c00)

  • New PACKAGECONFIG options for individual recipes:

    • curl: schannel

    • gstreamer1.0-plugins-bad: fdkaac

    • gstreamer1.0-plugins-good: qt6

    • libinput: lua, libwacom, mtdev

    • librepo: sequoia

    • mesa: expat, zlib

    • openssl: legacy

    • opkg: acl, xattr

    • orc: hotdoc

    • python3: freethreading (experimental, see c569901)

    • python3-cryptography: legacy-openssl

    • systemd: osc-context

    • systemtap: readline

  • systemd related changes:

    • Package ukify separately, with the systemd-ukify package name (e924274)

  • U-Boot related changes:

  • Miscellaneous changes:

    • curl: Ensure CURL_CA_BUNDLE from host environment is respected (545e43a)

    • weston: Add PipeWire as runtime dependency when pipewire is part of PACKAGECONFIG (9f52867)

    • uki: Use basename of device trees available via KERNEL_DEVICETREE (27a7fbb)

    • rpcbind: Set the owner of /run/rpcbind to rpc (80e4289)

    • archiver: Remove WORKDIR from the patch directory (c99d228)

    • gtk4: Convert to use the gnomebase class (fcd5e7c)

    • udev-extraconf: Split automount and autonet into seperate packages (udev-extraconf-automount and udev-extraconf-autonet) (08662d7)

    • e2fsprogs: Fix a bug for files larger than 2GB (683a1e7)

    • mesa: Add support for the virtio, gfxstream, hasvk Vulkan drivers (8e7ffdc, 3b56f14)

    • mesa: Drop VDPAU remnants in the recipe after upstream support was removed (3b05f58)

    • cross: Propagate dependencies to outhash, improving hash equivalence (267b651)

    • run-postinsts: Propagate exit status to the run-postinsts.service systemd service (7f74d88)

    • freetype: Use meson instead of autotools* (7395e4f)

    • wpa-supplicant:

    • overlayfs: Remove helper unit (623c20f)

    • patch: Show full path when a patch fails to apply (602e28b)

    • kea: Replace keactrl with kea daemons (kea-dhcp*) in initscripts (7f9d929), and remove keactrl from the recipe (08c3877)

    • initramfs-framework:

      • Add handover of PID 1’s arguments to modules (a0ab3d1)

      • Fix Linux kernel command line parsing when passing in double quotes (f9acaf1)

    • perl: Provide pod2man (in the recipe’s PROVIDES definition). This is used by many other recipes to produce man pages. This allows existing recipes to explicitly depend on pod2man-native to produce man pages (1d1e55d)

    • build-sysroots: Add sysroot tasks to default build and remove warning (e73f150)

    • Licenses and manifests are now deployed in the SDK when setting COPY_LIC_DIRS and/or COPY_LIC_MANIFEST, for both host and target sysroots (f757ae4)

    • openssl: Disable TLS 1.0/1.1 by default (d5501e7)

    • python3-cryptography: Disable legacy-openssl feature by default (1acd199)

    • openssl: Add support for config snippet includes. This can be done by installing extra configuration files in ${sysconfdir}/ssl/openssl.cnf.d/ (34bafcf)

    • busybox:

    • coreutils: kill and uptime are no longer provided by the recipe (cedeb95)

    • tcl8: Skip timing-sensitive ptests (1b93479)

    • license_image.bbclass: Report all packages with incompatible license (when using INCOMPATIBLE_LICENSE) (57fe3e4)

    • python3: Package all of the compression module into python3-compression (5f34680)

    • gobject-introspection: Disable cache for the scanner during the do_compile task (GI_SCANNER_DISABLE_CACHE=1), to fix an intermittent build failure (2b55dd1)

    • archiver: Don’t try to preserve all attributes when copying files (6e83136)

    • useradd*: allow inheriting the class with only USERADD_DEPENDS set, when a recipe only depends on users/groups created by another (09a901b)

    • vim: disable GTK+3 UI by default (a07763f)

Known Issues in 6.0

Recipe License changes in 6.0

The following changes have been made to the LICENSE values set by recipes:

Recipe(s)

Previous value

New value

libxcrypt-compat, libxcrypt

LGPL-2.1-only

LGPL-2.1-only & 0BSD & BSD-3-Clause

libpcre2

BSD-3-Clause

BSD-3-Clause & BSD-2-Clause & MIT

libtest-fatal-perl

Artistic-1.0 | GPL-1.0-or-later

Artistic-1.0-Perl | GPL-1.0-or-later

python3-cffi

MIT

MIT-0

icu

ICU

ICU & MIT

iso-code

LGPL-2.1-only

LGPL-2.1-or-later

ruby

Ruby | BSD-2-Clause | BSD-3-Clause | GPL-2.0-only | ISC | MIT

Ruby | BSD-2-Clause | BSD-3-Clause | GPL-2.0-only | ISC | MIT | BSL-1.0 | Apache-2.0

Security Fixes in 6.0

The following CVEs have been fixed:

Recipe

CVE IDs

avahi

CVE-2025-59529, CVE-2026-34933

binutils

CVE-2025-69644, CVE-2025-69647, CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647

binutils-cross-x86_64

CVE-2025-69644, CVE-2025-69647, CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647

binutils-testsuite

CVE-2025-69644, CVE-2025-69647, CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647

cargo

CVE-2026-39837, CVE-2026-39839, CVE-2026-39840, CVE-2026-39841

cups

CVE-2026-34978, CVE-2026-34979, CVE-2026-34980, CVE-2026-34990, CVE-2026-39314, CVE-2026-39316

ffmpeg

CVE-2025-69693, CVE-2026-40962

glibc

CVE-2026-4046, CVE-2026-4437, CVE-2026-4438

go

CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289

go-binary-native

CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289

go-cross-x86-64-v3

CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289

go-runtime

CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289

gstreamer1.0

CVE-2026-2920, CVE-2026-2921, CVE-2026-2922, CVE-2026-2923, CVE-2026-3081, CVE-2026-3082, CVE-2026-3083, CVE-2026-3084, CVE-2026-3085, CVE-2026-3086

libarchive

CVE-2026-5121

libexif

CVE-2026-40385, CVE-2026-40386

libinput

CVE-2026-35093, CVE-2026-35094

libpng

CVE-2026-33416, CVE-2026-33636

libsndfile1

CVE-2024-50613, CVE-2025-52194

libsoup

CVE-2026-1467, CVE-2026-1536, CVE-2026-1539, CVE-2026-1801, CVE-2026-2443, CVE-2026-3099, CVE-2026-3632, CVE-2026-3633, CVE-2026-3634, CVE-2026-4271, CVE-2026-5119

linux-yocto

CVE-2019-14899, CVE-2021-3714, CVE-2021-3864, CVE-2022-0400, CVE-2022-1247, CVE-2022-4543, CVE-2023-3397, CVE-2023-3640, CVE-2023-4010, CVE-2023-6238, CVE-2023-6240, CVE-2025-40039, CVE-2025-40040, CVE-2025-40082, CVE-2025-40149, CVE-2025-40164, CVE-2025-40251, CVE-2025-68211, CVE-2025-68214, CVE-2025-68223, CVE-2025-68333, CVE-2025-68340, CVE-2025-68351, CVE-2025-68358, CVE-2025-68365, CVE-2025-68725, CVE-2025-68749, CVE-2025-68817, CVE-2025-68823, CVE-2025-71071, CVE-2025-71072, CVE-2025-71073, CVE-2025-71074, CVE-2025-71075, CVE-2025-71076, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71080, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71099, CVE-2025-71100, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71115, CVE-2025-71116, CVE-2025-71117, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121, CVE-2025-71122, CVE-2025-71124, CVE-2025-71125, CVE-2025-71126, CVE-2025-71127, CVE-2025-71128, CVE-2025-71129, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71134, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138, CVE-2025-71141, CVE-2025-71142, CVE-2025-71143, CVE-2025-71147, CVE-2025-71148, CVE-2025-71149, CVE-2025-71150, CVE-2025-71151, CVE-2025-71152, CVE-2025-71153, CVE-2025-71154, CVE-2025-71156, CVE-2025-71157, CVE-2025-71158, CVE-2025-71160, CVE-2025-71161, CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71183, CVE-2025-71184, CVE-2025-71185, CVE-2025-71186, CVE-2025-71187, CVE-2025-71188, CVE-2025-71189, CVE-2025-71190, CVE-2025-71191, CVE-2025-71200, CVE-2025-71201, CVE-2025-71202, CVE-2025-71203, CVE-2025-71204, CVE-2025-71220, CVE-2025-71221, CVE-2025-71222, CVE-2025-71223, CVE-2025-71225, CVE-2025-71227, CVE-2025-71229, CVE-2025-71230, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71234, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22979, CVE-2026-22980, CVE-2026-22981, CVE-2026-22982, CVE-2026-22984, CVE-2026-22985, CVE-2026-22986, CVE-2026-22989, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22993, CVE-2026-22994, CVE-2026-22996, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23000, CVE-2026-23001, CVE-2026-23002, CVE-2026-23003, CVE-2026-23005, CVE-2026-23006, CVE-2026-23007, CVE-2026-23008, CVE-2026-23009, CVE-2026-23010, CVE-2026-23011, CVE-2026-23013, CVE-2026-23015, CVE-2026-23017, CVE-2026-23018, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23023, CVE-2026-23025, CVE-2026-23026, CVE-2026-23060, CVE-2026-23061, CVE-2026-23062, CVE-2026-23063, CVE-2026-23064, CVE-2026-23065, CVE-2026-23066, CVE-2026-23067, CVE-2026-23068, CVE-2026-23069, CVE-2026-23070, CVE-2026-23071, CVE-2026-23072, CVE-2026-23073, CVE-2026-23074, CVE-2026-23075, CVE-2026-23076, CVE-2026-23077, CVE-2026-23078, CVE-2026-23080, CVE-2026-23081, CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23086, CVE-2026-23087, CVE-2026-23088, CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23092, CVE-2026-23093, CVE-2026-23094, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23098, CVE-2026-23099, CVE-2026-23100, CVE-2026-23101, CVE-2026-23102, CVE-2026-23103, CVE-2026-23104, CVE-2026-23105, CVE-2026-23107, CVE-2026-23108, CVE-2026-23109, CVE-2026-23110, CVE-2026-23111, CVE-2026-23112, CVE-2026-23113, CVE-2026-23114, CVE-2026-23115, CVE-2026-23116, CVE-2026-23118, CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23122, CVE-2026-23123, CVE-2026-23124, CVE-2026-23125, CVE-2026-23126, CVE-2026-23128, CVE-2026-23129, CVE-2026-23130, CVE-2026-23131, CVE-2026-23133, CVE-2026-23135, CVE-2026-23136, CVE-2026-23137, CVE-2026-23138, CVE-2026-23139, CVE-2026-23140, CVE-2026-23141, CVE-2026-23142, CVE-2026-23143, CVE-2026-23144, CVE-2026-23146, CVE-2026-23147, CVE-2026-23148, CVE-2026-23150, CVE-2026-23151, CVE-2026-23152, CVE-2026-23154, CVE-2026-23156, CVE-2026-23157, CVE-2026-23158, CVE-2026-23160, CVE-2026-23161, CVE-2026-23163, CVE-2026-23164, CVE-2026-23166, CVE-2026-23167, CVE-2026-23168, CVE-2026-23169, CVE-2026-23170, CVE-2026-23171, CVE-2026-23172, CVE-2026-23173, CVE-2026-23186, CVE-2026-23187, CVE-2026-23188, CVE-2026-23190, CVE-2026-23191, CVE-2026-23192, CVE-2026-23193, CVE-2026-23195, CVE-2026-23196, CVE-2026-23197, CVE-2026-23198, CVE-2026-23199, CVE-2026-23201, CVE-2026-23204, CVE-2026-23205, CVE-2026-23206, CVE-2026-23208, CVE-2026-23209, CVE-2026-23210, CVE-2026-23212, CVE-2026-23213, CVE-2026-23214, CVE-2026-23215, CVE-2026-23216, CVE-2026-23217, CVE-2026-23219, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23223, CVE-2026-23224, CVE-2026-23226, CVE-2026-23227, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23231, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238

mesa

CVE-2026-40393

nfs-utils

CVE-2025-12801

nghttp2

CVE-2026-27135

openssh

CVE-2026-35414

python3

CVE-2026-4519

python3-requests

CVE-2026-25645

qemu

CVE-2024-6519

qemu-system-native

CVE-2024-6519

sqlite3

CVE-2025-70873

systemd-boot

CVE-2026-29111, CVE-2026-40226

vim

CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-33412, CVE-2026-34714, CVE-2026-35177

xz

CVE-2026-34743

Recipe Upgrades in 6.0

The following recipes have been upgraded:

Recipe

Previous version(s)

New version(s)

acpica

20250807

20251212

adwaita-icon-theme

48.0

49.0

alsa-lib

1.2.14

1.2.15.3

alsa-tools

1.2.14

1.2.15

alsa-ucm-conf

1.2.14

1.2.15.3

alsa-utils

1.2.14

1.2.15.2

appstream

1.0.6

1.1.2

aspell

0.60.8.1

0.60.8.2

at-spi2-core

2.56.4

2.60.0

autoconf

2.72

2.73

barebox

2025.09.3

2026.04.0

barebox-tools

2025.09.3

2026.04.0

base-passwd

3.6.7

3.6.8

bash-completion

2.16.0

2.17.0

bind

9.20.15

9.20.22

binutils

2.45.1+git

2.46

binutils-cross

2.45.1+git

2.46

binutils-cross-canadian

2.45.1+git

2.46

binutils-crosssdk

2.45.1+git

2.46

binutils-testsuite

2.45.1+git

2.46

bluez5

5.84

5.86

boost

1.89.0

1.90.0

boost-build-native

1.89.0

1.90.0

btrfs-tools

6.16

6.19.1

cargo

1.90.0

1.94.1

cargo-c

0.10.16+cargo-0.91.0

0.10.21+cargo-0.95.0

ccache

4.12.3

4.13.2

clang

21.1.7

22.1.3

cmake

4.1.2

4.3.1

cmake-native

4.1.2

4.3.1

compiler-rt

21.1.7

22.1.3

compiler-rt-sanitizers

21.1.7

22.1.3

connman

1.45

2.0

coreutils

9.7

9.10

createrepo-c

1.2.1

1.2.3

cross-localedef-native

2.42+git

2.43+git

cryptodev-linux

1.14 (135cbff90af2…)

1.14 (08644db02d43…)

cryptodev-module

1.14 (135cbff90af2…)

1.14 (08644db02d43…)

cryptodev-tests

1.14 (135cbff90af2…)

1.14 (08644db02d43…)

cups

2.4.15

2.4.16

curl

8.17.0

8.19.0

dhcpcd

10.2.4

10.3.0

diffoscope

306

314

dmidecode

3.6

3.7

dnf

4.23.0

4.24.0

dos2unix

7.5.2

7.5.4

dpkg

1.22.21

1.23.7

dropbear

2025.88

2025.89

e2fsprogs

1.47.3

1.47.4

ed

1.22.2

1.22.5

elfutils

0.193

0.194

ell

0.80

0.83

enchant2

2.8.14

2.8.15

epiphany

48.5

49.7

erofs-utils

1.8.10

1.9.1

ethtool

6.15

6.19

expat

2.7.4

2.7.5

fastfloat

8.0.2

8.2.4

ffmpeg

8.0

8.0.1

file

5.46

5.47

fmt

11.2.0

12.1.0

font-alias

1.0.5

1.0.6

freetype

2.13.3

2.14.3

gawk

5.3.2

5.4.0

gdb

16.3

17.1

gdb-cross

16.3

17.1

gdb-cross-canadian

16.3

17.1

gdk-pixbuf

2.42.12

2.44.5

gettext

0.26

1.0

gettext-minimal-native

0.26

1.0

gi-docgen

2025.4

2026.1

git

2.51.0

2.53.0

glew

2.2.0

2.3.1

glib-2.0

2.86.4

2.88.0

glib-2.0-initial

2.86.4

2.88.0

glibc

2.42+git

2.43+git

glibc-locale

2.42+git

2.43+git

glibc-mtrace

2.42+git

2.43+git

glibc-scripts

2.42+git

2.43+git

glibc-testsuite

2.42+git

2.43+git

glslang

1.4.328.1

1.4.341.0

gn

0+git (81b24e01531e…)

0+git (9d19a7870add…)

gnu-efi

4.0.2

4.0.4

gnupg

2.5.11

2.5.17

gnutls

3.8.10

3.8.12

go

1.25.9

1.26.2

go-binary-native

1.25.9

1.26.2

go-cross-canadian

1.25.9

1.26.2

go-cross-core2-32

1.25.9

1.26.2

go-crosssdk

1.25.9

1.26.2

go-helloworld

0.1 (8b405629c4a5…)

0.1 (7f05d217867b…)

go-runtime

1.25.9

1.26.2

gobject-introspection

1.84.0

1.86.0

groff

1.23.0

1.24.0

grub

2.12

2.14

grub-efi

2.12

2.14

gsettings-desktop-schemas

48.0

50.0

gst-devtools

1.26.7

1.28.2

gst-examples

1.26.7

1.28.2

gstreamer1.0

1.26.7

1.28.2

gstreamer1.0-libav

1.26.7

1.28.2

gstreamer1.0-plugins-bad

1.26.7

1.28.2

gstreamer1.0-plugins-base

1.26.7

1.28.2

gstreamer1.0-plugins-good

1.26.7

1.28.2

gstreamer1.0-plugins-ugly

1.26.7

1.28.2

gstreamer1.0-python

1.26.7

1.28.2

gstreamer1.0-rtsp-server

1.26.7

1.28.2

gtk-doc

1.34.0

1.35.1

gtk4

4.18.6

4.22.1

harfbuzz

11.4.5

12.3.2

hwdata

0.399

0.405

hwlatdetect

2.9

2.10

icu

77-1

78.3

ifupdown

0.8.44

0.8.45

igt-gpu-tools

2.1

2.3

inetutils

2.6

2.7

iproute2

6.16.0

6.19.0

iptables

1.8.11

1.8.13

iso-codes

4.18.0

4.20.1

kbd

2.8.0

2.9.0

kea

3.0.1

3.0.3

kern-tools-native

0.3+git (f589e1df2325…)

0.3+git (a4a362d9f4f0…)

kexec-tools

2.0.31

2.0.32

kmscube

0.0.1+git (2c1f2646c5e5…)

0.0.1+git (f60e50e887d3…)

less

679

692

libadwaita

1.7.6

1.8.4

libarchive

3.8.6

3.8.7

libatomic-ops

7.8.4

7.10.0

libcap

2.76

2.77

libcap-ng

0.8.5

0.9.1

libcap-ng-python

0.8.5

0.9.1

libclc

21.1.7

22.1.3

libcomps

0.1.22

0.1.24

libcxx

21.1.7

22.1.3

libdisplay-info

0.2.0

0.3.0

libdnf

0.74.0

0.75.0

libdrm

2.4.125

2.4.131

libedit

20250104-3.1

20251016-3.1

libevdev

1.13.5

1.13.6

libexif

0.6.25

0.6.26

libfontenc

1.1.8

1.1.9

libgcrypt

1.11.2

1.12.1

libgit2

1.9.1

1.9.2

libgloss

4.5.0+git

4.6.0+git

libgpg-error

1.56

1.59

libinput

1.29.1

1.30.2

libjpeg-turbo

3.1.2

3.1.3

libksba

1.6.7

1.6.8

libnl

3.11.0

3.12.0

libnotify

0.8.6

0.8.8

libpam

1.7.1

1.7.2

libpciaccess

0.18.1

0.19

libpcre2

10.46

10.47

libproxy

0.5.10

0.5.12

librsvg

2.61.0

2.61.3

libsolv

0.7.35

0.7.36

libstd-rs

1.90.0

1.94.1

libtasn1

4.20.0

4.21.0

libtest-fatal-perl

0.017

0.018

libtirpc

1.3.6

1.3.7

libtraceevent

1.8.4

1.9.0

libubootenv

0.3.6

0.3.7

libunistring

1.3

1.4.2

liburcu

0.15.3

0.15.6

libuv

1.51.0

1.52.1

libva

2.22.0

2.23.0

libva-initial

2.22.0

2.23.0

libva-utils

2.22.0

2.23.0

libx11

1.8.12

1.8.13

libx11-compose-data

1.8.4

1.8.12

libxcomposite

0.4.6

0.4.7

libxcrypt

4.4.38

4.5.2

libxcrypt-compat

4.4.38

4.5.2

libxdamage

1.1.6

1.1.7

libxext

1.3.6

1.3.7

libxinerama

1.1.5

1.1.6

libxkbcommon

1.11.0

1.13.1

libxkbfile

1.1.3

1.2.0

libxml2

2.14.6

2.15.2

libxmu

1.2.1

1.3.1

libxpm

3.5.17

3.5.18

libxrandr

1.5.4

1.5.5

libxslt

1.1.43

1.1.45

libxvmc

1.0.14

1.0.15

libxxf86vm

1.1.6

1.1.7

lighttpd

1.4.81

1.4.82

linux-firmware

20251111

20260410

linux-libc-headers

6.17

6.18

linux-yocto

6.12.69+git, 6.16.11+git

6.18.24+git

linux-yocto-dev

6.18+git

7.0+git

linux-yocto-rt

6.12.69+git, 6.16.11+git

6.18.24+git

linux-yocto-tiny

6.12.69+git, 6.16.11+git

6.18.24+git

lld

21.1.7

22.1.3

lldb

21.1.7

22.1.3

llvm

21.1.7

22.1.3

llvm-tblgen-native

21.1.7

22.1.3

lsof

4.99.5

4.99.6

ltp

20250930

20260130

lttng-modules

2.14.3

2.14.4

lttng-tools

2.14.0

2.14.1

lua

5.4.8

5.5.0

lzlib

1.15

1.16

m4

1.4.20

1.4.21

m4-native

1.4.20

1.4.21

makedumpfile

1.7.7

1.7.8

man-pages

6.15

6.17

mdadm

4.4

4.6

mesa

25.2.8

26.0.5

mesa-gl

25.2.8

26.0.5

meson

1.9.1

1.10.2

mpg123

1.33.2

1.33.4

msmtp

1.8.31

1.8.32

mtd-utils

2.3.0

2.3.1

musl

1.2.5+git

1.2.6+git

nasm

2.16.03

3.01

ncurses

6.5

6.6

newlib

4.5.0+git

4.6.0+git

nfs-utils

2.8.4

2.8.7

nghttp2

1.66.0

1.68.1

ninja

1.13.1

1.13.2

ofono

2.18

2.19

openmp

21.1.7

22.1.3

opensbi

1.7

1.8.1

openssh

10.2p1

10.3p1

opkg

0.8.0

0.9.0

orc

0.4.41

0.4.42

ovmf

edk2-stable202508

edk2-stable202511

p11-kit

0.25.5

0.26.2

perl

5.40.2

5.42.0

perlcross

1.6.2

1.6.4

picolibc

1.8.6+git

1.8.11+git

picolibc-helloworld

1.8.6+git

1.8.11+git

procps

4.0.5

4.0.6

pseudo

1.9.3+git

1.9.5

puzzles

0.0+git (a7c7826bce5c…)

0.0+git (ecb576fb2a0a…)

python3

3.13.12

3.14.4

python3-attrs

25.3.0

25.4.0

python3-babel

2.17.0

2.18.0

python3-bcrypt

4.3.0

5.0.0

python3-beartype

0.21.0

0.22.9

python3-build

1.3.0

1.4.0

python3-calver

2025.04.17

2025.10.20

python3-certifi

2025.8.3

2026.2.25

python3-cffi

1.17.1

2.0.0

python3-chardet

5.2.0

6.0.0.post1

python3-click

8.2.2

8.3.1

python3-cryptography

45.0.7

46.0.5

python3-cryptography-vectors

45.0.7

46.0.5

python3-cython

3.1.3

3.2.4

python3-dbusmock

0.37.0

0.38.1

python3-docutils

0.22

0.22.4

python3-dtschema

2025.8

2025.12

python3-hatchling

1.27.0

1.29.0

python3-hypothesis

6.142.2

6.151.9

python3-imagesize

1.4.1

2.0.0

python3-iniconfig

2.1.0

2.3.0

python3-jsonschema

4.25.1

4.26.0

python3-markdown

3.9

3.10.2

python3-markupsafe

3.0.2

3.0.3

python3-maturin

1.9.4

1.12.4

python3-meson-python

0.18.0

0.19.0

python3-numpy

2.3.4

2.4.3

python3-packaging

25.0

26.0

python3-pathspec

0.12.1

1.0.4

python3-pbr

7.0.1

7.0.3

python3-pdm

2.25.9

2.26.6

python3-pdm-backend

2.4.5

2.4.7

python3-pdm-build-locked

0.3.5

0.3.7

python3-pip

25.2

26.0.1

python3-poetry-core

2.1.3

2.3.1

python3-psutil

7.0.0

7.2.2

python3-pyasn1

0.6.1

0.6.2

python3-pycairo

1.28.0

1.29.0

python3-pycparser

2.22

3.0

python3-pygobject

3.52.3

3.56.1

python3-pyopenssl

25.1.0

26.0.0

python3-pyparsing

3.2.4

3.3.2

python3-pyproject-metadata

0.9.1

0.11.0

python3-pytest

8.4.2

9.0.2

python3-pytest-subtests

0.14.2

0.15.0

python3-pytz

2025.2

2026.1

python3-pyyaml

6.0.2

6.0.3

python3-rdflib

7.1.4

7.6.0

python3-rpds-py

0.27.1

0.30.0

python3-ruamel-yaml

0.18.15

0.19.1

python3-scons

4.9.1

4.10.1

python3-setuptools

80.9.0

82.0.1

python3-setuptools-scm

8.3.1

9.2.2

python3-sphinx

8.2.1

9.1.0

python3-sphinx-rtd-theme

3.0.2

3.1.0

python3-testtools

2.7.2

2.8.7

python3-trove-classifiers

2025.9.11.17

2026.1.14.14

python3-unittest-automake-output

0.3

0.4

python3-uritools

5.0.0

6.0.1

python3-urllib3

2.5.0

2.6.3

python3-wcwidth

0.2.13

0.6.0

python3-webcolors

24.11.1

25.10.0

python3-websockets

15.0.1

16.0

python3-wheel

0.46.1

0.46.3

python3-xmltodict

0.15.1

1.0.4

python3-yamllint

1.37.1

1.38.0

qemu

10.0.6

10.2.0

qemu-native

10.0.6

10.2.0

qemu-system-native

10.0.6

10.2.0

quota

4.10

4.11

re2c

4.3

4.4

repo

2.58

2.61.1

resolvconf

1.93

1.94

rgb

1.1.0

1.1.1

rpm-sequoia

1.9.0

1.10.1

rpm-sequoia-crypto-policy

git (ae1df75b1155…)

git (f3f5fa454345…)

rt-tests

2.9

2.10

ruby

3.4.5

4.0.2

rust

1.90.0

1.94.1

rust-cross-canadian

1.90.0

1.94.1

sbc

2.1

2.2

scdoc

1.11.3

1.11.4

seatd

0.9.1

0.9.3

shaderc

2025.3

2026.1

shadow

4.18.0

4.19.4

socat

1.8.0.3

1.8.1.1

spirv-headers

1.4.328.1

1.4.341.0

spirv-llvm-translator

21.1.1

22.1.1

spirv-tools

1.4.328.1

1.4.341.0

sqlite3

3.48.0

3.51.3

squashfs-tools

4.7.2

4.7.5

strace

6.16

6.19

stress-ng

0.19.04

0.20.01

swig

4.3.1

4.4.1

sysstat

12.7.8

12.7.9

systemd

257.8

259.5

systemd-boot

257.8

259.5

systemd-boot-native

257.8

259.5

systemd-systemctl-native

257.8

259.5

systemtap

5.3

5.4

systemtap-native

5.3

5.4

taglib

2.1.1

2.2.1

tcl

9.0.2

9.0.3

texinfo

7.2

7.3

ttyrun

2.38.0

2.41.0

u-boot

2025.10

2026.01

u-boot-tools

2025.10

2026.01

usbutils

018

019

utfcpp

4.0.6

4.0.9

util-linux

2.41.1

2.41.3

util-linux-libuuid

2.41.1

2.41.3

valgrind

3.25.1

3.26.0

vim

9.1.1683

9.2.0340

vim-tiny

9.1.1683

9.2.0340

virglrenderer

1.1.1

1.2.0

vte

0.82.1

0.82.2

vulkan-headers

1.4.328.1

1.4.341.0

vulkan-loader

1.4.328.1

1.4.341.0

vulkan-samples

git (d27205d14d01…)

git (fa2cf45adde0…)

vulkan-tools

1.4.328.1

1.4.341.0

vulkan-utility-libraries

1.4.328.1

1.4.341.0

vulkan-validation-layers

1.4.328.1

1.4.341.0

vulkan-volk

1.4.328.1

1.4.341.0

wayland-protocols

1.45

1.47

wayland-utils

1.2.0

1.3.0

webkitgtk

2.50.4

2.50.6

weston

14.0.2

15.0.0

wpebackend-fdo

1.16.0

1.16.1

x264

r3039+git (31e19f92f00c…)

r3039+git (0480cb05fa18…)

xauth

1.1.4

1.1.5

xcb-util-cursor

0.1.5

0.1.6

xeyes

1.3.0

1.3.1

xkbcomp

1.4.7

1.5.0

xkeyboard-config

2.45

2.47

xorgproto

2024.1

2025.1

xserver-xorg

21.1.18

21.1.21

xwayland

24.1.8

24.1.9

xz

5.8.1

5.8.2

zlib

1.3.1

1.3.2

Contributors to 6.0

Thanks to the following people who contributed to this release:

  • Adam Blank

  • Adam Duskett

  • Adarsh Jagadish Kamini

  • Aditya Kurdunkar

  • Adrian Freihofer

  • Ahmad Fatoum

  • Alejandro Hernandez Samaniego

  • Aleksandar Nikolic

  • Alexander Kanavin

  • Alexander Sverdlin

  • Alex Bradbury

  • Alex Kiernan

  • Amaury Couderc

  • Andrej Kozemcak

  • Anibal Limon

  • Ankur Tyagi

  • Antonin Godard

  • Ashish Kumar Mishra

  • Ashish Sharma

  • BELHADJ SALEM Talel

  • Benjamin Robin

  • Bruce Ashfield

  • Changqing Li

  • Chen Qi

  • Clement Faure

  • Colin Pinnell McAllister

  • Corentin Guillevic

  • Daiane Angolini

  • Daniel Dragomir

  • Daniel Turull

  • Dan McGregor

  • Deepesh Varatharajan

  • Dmitry Baryshkov

  • Dragomir, Daniel

  • El Mehdi YOUNES

  • Enrico Jörns

  • Ernst Persson

  • Etienne Cordonnier

  • Fabio Berton

  • Fabio Estevam

  • Favazza, Samuele

  • Florian Schmaus

  • Francesco Valla

  • Franz Schnyder

  • Germann, Bastian

  • Guðni Már Gilbert

  • Gyorgy Sarvari

  • Haiqing Bai

  • Harish Sadineni

  • Hemanth Kumar M D

  • Het Patel

  • Hiago De Franco

  • Himanshu Jadon

  • hongxu

  • Hongxu Jia

  • Jaeyoon Jung

  • Jan Luebbe

  • Jan Vermaete

  • Jason Schonberg

  • Javier Tia

  • Jiaying Song

  • Jinfeng Wang

  • João Marcos Costa

  • Jörg Sommer

  • Jose Quaresma

  • Joshua Watt

  • Kai Kang

  • Kamel Bouhara

  • Kavinaya S

  • Ken Kurematsu

  • Khai Dang

  • Khalifa Rouis

  • Khem Raj

  • Koen Kooi

  • Kory Maincent

  • Kristiyan Chakarov

  • Krupal Ka Patel

  • Lee Chee Yang

  • Leon Anavi

  • Le Qi

  • Liu Yiding

  • Livin Sunny

  • Liyin Zhang

  • Logan Gallois

  • Louis Rannou

  • Lucas Stach

  • Luka Krstic

  • Mahesh Angadi

  • Mark Hatle

  • Mark-Pk Tsai

  • Markus Volk

  • mark.yang

  • Martin Jansa

  • Martin Schwan

  • Mathieu Dubois-Briand

  • Matt Madison

  • Maxin B. John

  • Maxin John

  • Max Krummenacher

  • Miaoqing Pan

  • Michael Arndt

  • Michael Halstead

  • Michael Opdenacker

  • Michal Sieron

  • Mikko Rapeli

  • Ming Liu

  • Mingli Yu

  • Miroslav Cernak

  • Mohammad Rafi Shaik

  • Mohammad Rahimi

  • Moritz Haase

  • Naftaly RALAMBOARIVONY

  • Naman Jain

  • Nikhil R

  • Niko Mauno

  • Nora Schiffer

  • Osama Abdelkader

  • Patrick Vogelaar

  • Patrick Wicki

  • Paul Barker

  • Pavel Löbl

  • Peter Bergin

  • Peter de Ridder

  • Peter Kjellerstedt

  • Peter Marko

  • Peter Tatrai

  • Philip Lorenz

  • Pierre-Loup GOSSE

  • Piotr Buliński

  • Pratik Farkase

  • Quentin Schulz

  • Randolph Sapp

  • Randy MacLeod

  • Ricardo Salveti

  • Ricardo Simoes

  • Ricardo Ungerer

  • Richard Purdie

  • Robert Joslyn

  • Robert P. J. Day

  • Robert Yang

  • Rob Woolley

  • Ross Burton

  • Rouven Rastetter

  • Ryan Eatmon

  • Sam Povilus

  • Samuli Piippo

  • Sandeep Gundlupet Raju

  • Scott Murray

  • Shaik Moin

  • Shotaro Uchida

  • Stefano Babic

  • Stefano Tondo

  • Sunil Dora

  • sven.kalmbach

  • Swami

  • Telukula Jeevan Kumar Sahu

  • Theo GAIGE

  • Thomas Perrot

  • Tim Orling

  • Tom Geelen

  • Trevor Gamblin

  • Trevor Woerner

  • Ulrich Ölmann

  • Uwe Kleine-König

  • Veeresh Kadasani

  • Victor Kamensky

  • Vijay Anusuri

  • Viswanath Kraleti

  • Vivek Puar

  • Vyacheslav Yurkov

  • Wang Mingyu

  • Weisser, Pascal

  • Xiangyu Chen

  • Yanis BINARD

  • Yann Dirson

  • Yannic Moog

  • Yash Gupta

  • Yash Shinde

  • Yasir Al-Latifi

  • Yiding Liu

  • Yi Zhao

  • Yoann Congal

  • Yongxin Liu

  • Zhangfei Gao

  • Zhang Peng

  • Zk47T

  • Zoltán Böszörményi

Repositories / Downloads for Yocto-6.0