Release notes for Yocto-5.0.14 (Scarthgap)

Security Fixes in Yocto-5.0.14

Fixes in Yocto-5.0.14

  • bind: upgrade to 9.18.41

  • bitbake: bb/fetch2/__init__.py: remove a DeprecationWarning in uri_replace()

  • bitbake: fetch2/wget: Keep query parameters in URL during checkstatus

  • build-appliance-image: Update to scarthgap head revision

  • ca-certificates: Add comment for provenance of SRCREV

  • ca-certificates: fix on-target postinstall script

  • ca-certificates: get sources from debian tarballs

  • ca-certificates: submit sysroot patch upstream, drop default-sysroot.patch

  • ca-certificates: upgrade to 20250419

  • classes/create-spdx-2.2: align DEPLOY_DIR_SPDX with SPDX_VERSION layout

  • classes/create-spdx-2.2: Handle empty packages

  • classes-global/license: Move functions to library code

  • classes-global/staging: Exclude do_create_spdx from automatic sysroot extension

  • classes-recipe/baremetal-image: Add image file manifest

  • classes-recipe/image: Add image file manifest

  • curl: only set CA bundle in target build

  • dev-manual, test-manual: Update autobuilder output links

  • flex: fix build with gcc-15 on host

  • glibc: stable 2.39 branch updates

  • gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs

  • icu: Backport patch to fix build issues with long paths (>512 chars)

  • iptables: remove /etc/ethertypes

  • lib/license: Move package license skip to library

  • lib: oe: license: Add missing import

  • lib: oeqa: spdx: Add tests for extra options

  • linux-yocto/6.6: update to v6.6.111

  • meta: backport SPDX 3.0 fixes and tasks from upstream version Walnascar

  • migration-guides: add release notes for 4.0.30

  • oe-build-perf-report: relax metadata matching rules

  • oe-core: Remove empty file

  • oeqa/runtime/ping: don’t bother trying to ping localhost

  • oeqa/selftest: Add SPDX 3.0 include source case for work-share

  • oeqa/selftest/devtool: Update after upstream repo changes

  • oeqa: spdx: Add tar test for SPDX 2.2

  • overview-manual/yp-intro.rst: update on-target packaging info

  • perf: add arm64 source files for unistd_64.h

  • poky.conf: bump version for 5.0.14

  • python3: upgrade to 3.12.12

  • ref-manual/classes.rst: document the relative_symlinks class

  • ref-manual/classes.rst: extend the uninative class documentation

  • ref-manual/classes.rst: gettext: extend the documentation of the class

  • ref-manual/variables.rst: document CCACHE_DISABLE CHECKSUM UNINATIVE_URL REQUIRED_COMBINED_FEATURES REQUIRED_IMAGE_FEATURES REQUIRED_MACHINE_FEATURES USE_NLS variable

  • ref-manual/variables.rst: fix LAYERDEPENDS description

  • selftest: spdx: Add SPDX 3.0 test cases

  • selftest/spdx: Fix for SPDX_VERSION addition

  • spdx 3.0: Rework how SPDX aliases are linked

  • spdx30_tasks: adapt CVE handling to new cve-check API

  • spdx30_tasks: fix FetchData attribute in add_download_files

  • util-linux: fix pointer usage in hwclock param handling

  • vulnerabilities: update nvdcve file name

  • webkitgtk: upgrade to 2.44.4

  • wireless-regdb: upgrade to 2025.10.07

  • xf86-video-intel: correct SRC_URI as freedesktop anongit is down

Known Issues in Yocto-5.0.14

  • N/A

Contributors to Yocto-5.0.14

Thanks to the following people who contributed to this release: - Alexander Kanavin - Anders Heimer - Ankur Tyagi - Antonin Godard - Archana Polampalli - Bastian Krause - Bin Lan - Bruce Ashfield - Carlos Alberto Lopez Perez - Daniel Semkowicz - David Nyström - Deepesh Varatharajan - Gyorgy Sarvari - Hongxu Jia - Joshua Watt - João Marcos Costa - Kamel Bouhara (Schneider Electric) - Lee Chee Yang - Martin Jansa - Matthias Schiffer - Michael Haener - Paul Barker - Peter Marko - Philippe-Alexandre Mathieu - Praveen Kumar - Rajeshkumar Ramasamy - Rasmus Villemoes - Richard Purdie - Robert P. J. Day - Saravanan - Soumya Sambu - Steve Sakoman - Theodore A. Roth - Wang Mingyu - Yannic Moog - Yash Shinde - Yogita Urade

Repositories / Downloads for Yocto-5.0.14

yocto-docs

poky

openembedded-core

meta-yocto

meta-mingw

bitbake