Release notes for Yocto-5.0.13 (Scarthgap)
Security Fixes in Yocto-5.0.13
busybox: Fix CVE-2025-46394
cups: Fix CVE-2025-58060 and CVE-2025-58364
curl: Fix CVE-2025-9086
dpkg: Fix CVE-2025-6297
expat: follow-up Fix CVE-2024-8176
ffmpeg: Fix CVE-2025-1594
ffmpeg: Ignore CVE-2023-49502, CVE-2023-50007, CVE-2023-50008, CVE-2023-50009, CVE-2023-50010, CVE-2024-31578, CVE-2024-31582 and CVE-2024-31585
ghostscript: Fix CVE-2025-59798, CVE-2025-59799 and CVE-2025-59800
glib-2.0: Fix CVE-2025-6052 and CVE-2025-7039
go-binary-native: Ignore CVE-2025-0913
go: Fix CVE-2025-4674, CVE-2025-47906 and CVE-2025-47907
grub2: Fix CVE-2024-56738
grub2: Ignore CVE-2024-2312
gstreamer1.0-plugins-bad: Fix CVE-2025-3887
gstreamer1.0-plugins-base: Fix CVE-2025-47807
gstreamer1.0-plugins-base: Ignore CVE-2025-47806 and CVE-2025-47808
gstreamer1.0-plugins-good: Ignore CVE-2025-47183 and CVE-2025-47219
gstreamer1.0: Ignore CVE-2025-2759
libpam: Fix CVE-2024-10963
libxslt: Fix CVE-2025-7424
openssl: Fix CVE-2025-9230, CVE-2025-9231 and CVE-2025-9232
pulseaudio: Ignore CVE-2024-11586
qemu: Ignore CVE-2024-7730
tiff: Fix CVE-2025-9900
tiff: Ignore CVE-2024-13978, CVE-2025-8176, CVE-2025-8177, CVE-2025-8534 and CVE-2025-8851
vim: Fix CVE-2025-9389
wpa-supplicant: Fix CVE-2022-37660
Fixes in Yocto-5.0.13
binutils: fix build with gcc-15
bitbake: Use a “fork” multiprocessing context
bitbake: bitbake: Bump version to 2.8.1
build-appliance-image: Update to scarthgap head revision
buildtools-tarball: fix unbound variable issues under ‘set -u’
cmake: fix build with gcc-15 on host
conf/bitbake.conf: use gnu mirror instead of main server
contributor-guide: submit-changes: align CC tag description
contributor-guide: submit-changes: clarify example with Yocto bug ID
contributor-guide: submit-changes: fix improper bold string
contributor-guide: submit-changes: make “Crediting contributors” part of “Commit your changes”
contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
contributor-guide: submit-changes: number instruction list in commit your changes
contributor-guide: submit-changes: reword commit message instructions
cpio: Pin to use C17 std
cups: upgrade to 2.4.11
curl: update CVE_STATUS for CVE-2025-5025
dbus-glib: fix build with gcc-15
default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
dev-manual/building.rst: add note about externalsrc variables absolute paths
dev-manual/security-subjects.rst: update mailing lists
elfutils: fix build with gcc-15
examples: genl: fix wrong attribute size
expect: Fix build with GCC 15
expect: Revert “expect-native: fix do_compile failure with gcc-14”
expect: cleanup do_install
expect: don’t run aclocal in do_configure
expect: fix native build with GCC 15
expect: update code for Tcl channel implementation
ffmpeg: upgrade to 6.1.3
gdbm: Use C11 standard
git: fix build with gcc-15 on host
gmp: Fix build with GCC15/C23
gmp: Fix build with older gcc versions
kernel-dev/common.rst: fix the in-tree defconfig description
lib/oe/utils: use multiprocessing from bb
libarchive: patch regression of patch for CVE-2025-5918
libgpg-error: fix build with gcc-15
libtirpc: Fix build with gcc-15/C23
license.py: avoid deprecated ast.Str
llvm: fix build with gcc-15
llvm: update to 18.1.8
m4: Stick to C17 standard
migration-guides: add release notes for 4.0.29 5.0.12
ncurses: Pin to C17 standard
oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
openssl: upgrade to 3.2.6
p11-kit: backport fix for handle USE_NLS from master
pkgconfig: fix build with gcc-15
poky.conf: bump version for 5.0.13
pulseaudio: Add audio group explicitly
ref-manual/structure: document the auto.conf file
ref-manual/variables.rst: expand IMAGE_OVERHEAD_FACTOR glossary entry
ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG STAGING_DIR
rpm: keep leading “/” from sed operation
ruby-ptest: some ptest fixes
runqemu: fix special characters bug
rust-llvm: fix build with gcc-15
sanity.conf: Update minimum bitbake version to 2.8.1
scripts/install-buildtools: Update to 5.0.12
sdk: The main in the C example should return an int
selftest/cases/meta_ide.py: use use gnu mirror instead of main server
shared-mime-info: Handle USE_NLS
sudo: remove devtool FIXME comment
systemd: backport fix for handle USE_NLS from master
systemtap: Fix task_work_cancel build
test-manual/yocto-project-compatible.rst: fix a typo
test-manual: update runtime-testing Exporting Tests section
unifdef: Don’t use C23 constexpr keyword
unzip: Fix build with GCC-15
util-linux: use ${B} instead of ${WORKDIR}/build, to fix building under devtool
vim: upgrade to 9.1.1683
yocto-uninative: Update to 4.9 for glibc 2.42 GCC 15.1
Known Issues in Yocto-5.0.13
N/A
Contributors to Yocto-5.0.13
Thanks to the following people who contributed to this release: - Adam Blank - Adrian Freihofer - Aleksandar Nikolic - Antonin Godard - Archana Polampalli - AshishKumar Mishra - Barne Carstensen - Chris Laplante - Deepak Rathore - Divya Chellam - Gyorgy Sarvari - Haixiao Yan - Hitendra Prajapati - Hongxu Jia - Jan Vermaete - Jiaying Song - Jinfeng Wang - Joao Marcos Costa - Joshua Watt - Khem Raj - Kyungjik Min - Lee Chee Yang - Libo Chen - Martin Jansa - Michael Halstead - Nitin Wankhade - Peter Marko - Philip Lorenz - Praveen Kumar - Quentin Schulz - Ross Burton - Stanislav Vovk - Steve Sakoman - Talel BELHAJ SALEM - Vijay Anusuri - Vrushti Dabhi - Yogita Urade
Repositories / Downloads for Yocto-5.0.13
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: 6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a
Release Artefact: yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a
sha: 454601d8b6034268212f74ca689ed360b08f7a4c7de5df726aa3706586ca4351
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a.tar.bz2
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: f16cffd030d21d12dd57bb95cfc310bda41f8a1f
Release Artefact: poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f
sha: 1367e43907f5ffa725f3afb019cd7ca07de21f13e5e73a1f5d1808989ae6ed2a
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f.tar.bz2
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: 7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b
Release Artefact: oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b
sha: 4dcf636ec4a7b38b47a24e9cb3345b385bc126bb19620bf6af773bf292fef6b2
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b.tar.bz2
meta-yocto
Repository Location: https://git.yoctoproject.org/meta-yocto
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: 3ff7ca786732390cd56ae92ff4a43aba46a1bf2e
Release Artefact: meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e
sha: 8efbaeab49dc3e1c4b67ff8d5801df1b05204c2255d18cff9a6857769ae33b23
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e.tar.bz2
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: scarthgap
Tag: yocto-5.0.13
Git Revision: bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.8
Tag: yocto-5.0.13
Git Revision: 1c9ec1ffde75809de34c10d3ec2b40d84d258cb4
Release Artefact: bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4
sha: 98bf54fa3abe237b73a93b1e33842a429209371fca6e409c258a441987879d16
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4.tar.bz2