Release notes for Yocto-5.3.1 (Whinlatter)

Users of Alma 9, Rocky 9 and Centos Stream 9 rolling releases have seen obtuse failures in the execution of tar in various tasks after recent host distro updates. These newer versions of tar contain a CVE fix which uses a new glibc call/syscall (openat2). The fix is to update to a newer pseudo version which handles this syscall. This is not included in this stable release but we aim to include it in the next one.

Security Fixes in Yocto-5.3.1

Fixes in Yocto-5.3.1

bitbake

  • bin: Hide os.fork() deprecation warning in all bitbake scripts

  • bitbake-layers: Also hide os.fork() deprecation warning

meta-yocto

  • poky.conf: bump version for 5.3.1

openembedded-core

  • build-appliance-image: Update to whinlatter head revisions

  • ccache: upgrade to 4.12.2

  • cross.bbclass: Propagate dependencies to outhash

  • cups: upgrade to 2.4.15

  • curl: Use host CA bundle by default for native(sdk) builds

  • cve-update: Avoid NFS caching issues

  • e2fsprogs: misc/create_inode.c: Fix for file larger than 2GB

  • ell: upgrade to 0.80

  • enchant2: upgrade to 2.8.14

  • glib-2.0: Upgrade to 2.86.1

  • glib-2.0: upgrade to 2.86.3

  • go: upgrade to 1.25.5

  • gst-devtools: upgrade to 1.26.7

  • gst-examples: upgrade to 1.26.7

  • gstreamer1.0: upgrade to 1.26.7

  • gstreamer1.0-libav: upgrade to 1.26.7

  • gstreamer1.0-plugins-bad: upgrade to 1.26.7

  • gstreamer1.0-plugins-base: upgrade to 1.26.7

  • gstreamer1.0-plugins-good: upgrade to 1.26.7

  • gstreamer1.0-plugins-ugly: upgrade to 1.26.7

  • gstreamer1.0-python: upgrade to 1.26.7

  • gstreamer1.0-rtsp-server: upgrade to 1.26.7

  • gstreamer1.0-vaapi: upgrade to 1.26.7

  • libarchive: upgrade to 3.8.3

  • libarchive: upgrade to 3.8.4

  • libpcap: upgrade to 1.10.6

  • libpng: upgrade to 1.6.52

  • libssh2: fix regression in KEX method validation (GH-1553)

  • libxmlb: upgrade to 0.3.24

  • linux-yocto/6.12: update to v6.12.60

  • llvm/clang: Upgrade to 21.1.7

  • mesa: upgrade to 25.2.8

  • python3: upgrade to 3.13.11

  • spdx30_tasks: Fix SPDX_CUSTOM_ANNOTATION_VARS implementation

  • xserver-nodm-init: avoid race condition related to udev

yocto-docs

  • Add the sphinx-copybutton extension

  • Fix bitbake version mapping for whinlatter

  • Makefile: fix rsvg-convert –format capitalization

  • brief-yoctoprojectqs/index.rst: fix improper code-block indentation

  • brief-yoctoprojectqs/index.rst: switch shell block to to console/text blocks

  • brief-yoctoprojectqs/index.rst: update available bitbake-setup configurations

  • brief-yoctoprojectqs: specify what “recent Ubuntu Linux distribution” is

  • dev-manual/limiting-resources.rst: update how to track pressure info

  • make sure Quick Build section and System Requirements are in sync

  • migration-guide: update 5.3 release notes download section

  • migration-guides/release-notes-5.3.rst: add contributors

  • migration-guides/release-notes-5.3.rst: add fixed cve

  • migration-guides/release-notes-5.3.rst: add license updates

  • migration-guides/release-notes-5.3.rst: add recipe upgrades

  • migration-guides/release-notes-5.3.rst: latest changes from master

  • overview-manual/concepts.rst: update the cross-development toolchain section

  • poky.yaml.in: add DISTRO_RELEASE_SERIES

  • ref-manual/classes.rst: document the image-container class

  • ref-manual/faq.rst: add Q&A on third-party vuln scanning tools

  • ref-manual/system-requirements.rst: add RockyLinux install instructions

  • ref-manual/system-requirements.rst: fix AlmaLinux PDF build

  • ref-manual/tasks.rst: document the do_list_image_features task

  • ref-manual/variables.rst: document WESTON_USER/WESTON_USER_HOME variables

  • ref-manual: Document SPDX 3.0.1 variables

  • set_versions.py: add wrynose as devbranch

  • tools/build-docs-container: add CentOS Stream 9 support

  • tools/build-docs-container: move container files in their own directory

  • tools: add gen-cve-release-notes

  • tools: ubuntu_docs: remove duplicate python3-saneyaml

Known Issues in Yocto-5.3.1

  • N/A

Contributors to Yocto-5.3.1

Thanks to the following people who contributed to this release:

  • Alexander Kanavin

  • Ankur Tyagi

  • Antonin Godard

  • Bruce Ashfield

  • Chen Qi

  • Deepesh Varatharajan

  • Dmitry Baryshkov

  • Gyorgy Sarvari

  • Jayasurya Maganuru

  • Jörg Sommer

  • Lee Chee Yang

  • Martin Jansa

  • Mathieu Dubois-Briand

  • Moritz Haase

  • Paul Barker

  • Peter Marko

  • Quentin Schulz

  • Robert Yang

  • Stefano Tondo

  • Vijay Anusuri

  • Wang Mingyu

  • Yash Shinde

  • Yoann Congal

  • Zhang Peng

Repositories / Downloads for Yocto-5.3.1

yocto-docs

openembedded-core

meta-yocto

meta-mingw

bitbake