Release notes for Yocto-5.0.19 (Scarthgap)

gawk-native is now built from source instead of used from the host when building grub2 & glibc to avoid reproducibility issues on newer host distros.

Security Fixes in Yocto-5.0.19

Fixes in Yocto-5.0.19

  • apr-util: Add CVE_PRODUCT to support product name

  • apr: Add CVE_PRODUCT to support product name

  • bitbake: data: fix issue with varflag exclusion

  • bitbake: fetch2/git: quote shallow extra ref arguments

  • bitbake: fetch2/wget: handle HTTP 308 Permanent Redirect

  • bitbake: fetch2/wget: limit auth on checkstatus redirects

  • bitbake: fetch2: Unpack RPMs with –no-absolute-filenames

  • bitbake: fetch2: validate deb/ipk data member names

  • bitbake: fetch2: validate striplevel parameter

  • bitbake: hashserv/tests: use valid 64-character unihashes

  • bitbake: hashserv: validate unihash values

  • bitbake: tests/fetch: cover checkstatus redirect auth handling

  • bsp-guide: mention bootloader and device tree in BSP intro

  • bsp-guide: update guide to reflect newer beaglebone

  • build-appliance-image: Update to scarthgap head revisions

  • build-manual: update ROOTFS_POSTPROCESS_COMMAND example

  • bzip2: set CVE_PRODUCT

  • cargo: set CVE_PRODUCT

  • classes/base: prefer gnu-prefixed HOSTTOOLS

  • classes/gtk-icon-cache: fix libdir passed to the postrm intercept

  • conf/machine: fix typos in ARM and x86 README files

  • contributor-guide: couple minor typo/grammar fixes

  • contributor-guide: fix type “maintainance” to “maintenance”

  • dev-manual: drop “PREFERRED_VERSION” from x86-base.inc snippet

  • dev-manual: fix broken grammar in “Libraries” section

  • dev-manual: fix grammatical error, missing word “with”

  • dev-manual: fully define SOLIBS-related variables in bitbake.conf

  • dev-manual: remove semicolons for rootfs commands

  • dev-manual: SysVinit is the default init manager for Poky

  • dev-manual: update AUTOREV explanation to match current file

  • devtool: prevent ‘devtool modify -n’ from corrupting kernel Git repos

  • docs: conf.py: add a :yocto_bug: role

  • docs: conf.py: define new *_path roles

  • docs: conf.py: define new {oecore,bitbake,meta_yocto}_rev roles

  • docs: index.rst: update “Software Overview” to “Technical Overview”

  • docs: “Transitioning …” Various pedantic cleanups

  • docs: What I Wish I’d Known: Various pedantic cleanups

  • docs: YP Quick Build: delete extraneous periods in list

  • gawk-native: fix gcc-15/C23 compilation issues

  • gawk: trim native build configuration

  • gawk: use native gawk when building glibc and grub

  • gdb: backport a patch to fix static_assert in recent GCC

  • gnupg: upgrade to 2.4.9

  • go.bbclass: change GOTMPDIR to improve reproducibility

  • go.bbclass: disable workspaces

  • grub/glibc: Bump versions to resolve hashequiv/reproducibility issues

  • kernel-dev: remove references to defunct LTSI project

  • linux-yocto/6.6: address ltp hang

  • linux-yocto/6.6: genericarm64 fix configuration audit warning

  • linux-yocto/6.6: update to v6.6.142

  • lttng-modules: Fix trace_hrtimer_start build failure

  • meta/lib/oe/package.py: fix path to kernel sources in save_debugsources_info

  • meta: fix generation of kernel CONFIGi_ in SPDX3

  • migration-guide: add release notes for 4.0.35 5.0.18

  • oeqa/core/runner: stub addDuration in OETestResult

  • oeqa/runtime/parselogs: update pci BAR ignore for kernel 6.10

  • oeqa: Drop /git/ from our urls

  • oeqa: runtime: go: Increase test_go_compile/test_go_module timeout

  • openssl: upgrade to 3.5.7

  • overview-manual: add “:term:” for OE Build System

  • overview-manual: fix “checkout” versus “check out”

  • overview-manual: fix typo, “semi-colon” -> “colon”

  • overview-manual: hyphens not allowed in file version

  • overview-manual: inform the reader early of “bitbake-getvar”

  • overview-manual: mention that patch files can be compressed

  • overview-manual: provide a more expansive definition of “layer”

  • overview-manual: remind reader that meta-poky is a distro layer

  • overview-manual: update deploy.bbclass snippet

  • overview-manual: use correct spelling “counterpart”

  • overview-manual: yp-intro.rst: add link to “buildbot”

  • overview-manual: yp-intro.rst: delete really old references

  • perl: link to the system zlib instead of a vendored copy

  • poky.conf: Bump version for 5.0.19 release

  • pseudo: Update to 1.9.8

  • python_setuptools_build_meta: clean the build directory in configure

  • recipe-style-guide.rst: two minor grammatical tweaks

  • recipetool: Recognise https://git. as git urls

  • ref-manual/variables.rst: link *MIRRORS definitions to the BitBake manual

  • ref-manual: add more explanation to glossary variable LICENSE

  • ref-manual: clarify that PACKAGE_EXCLUDE supports DEB packaging

  • ref-manual: clarify use of “PACKAGE_ARCH” in a packagegroup

  • ref-manual: document RM_WORK_EXCLUDE_ITEMS variable

  • scripts/install-buildtools: Update to 5.0.18

  • security-team.rst: update my email address and key

  • security-team: Add section on multi-project embargoes

  • security-team: Tidy and update section on security team operations

  • security-team: Update membership list

  • setuptools3: clean the build directory in configure

  • setuptools3_legacy: ensure ${B} is clean

  • systemd: update musl specific patch to apply

  • tzdata/tzcode-native: upgrade to 2026b

  • wic: filemap: use separate fd for SEEK_HOLE probes

Known Issues in Yocto-5.0.19

  • N/A

Contributors to Yocto-5.0.19

Thanks to the following people who contributed to this release:

  • Adarsh Jagadish Kamini

  • Alexander Kanavin

  • Amaury Couderc

  • Anders Heimer

  • Anil Dongare

  • Ankur Tyagi

  • Antonin Godard

  • Benjamin Robin (Schneider Electric)

  • Bruce Ashfield

  • Changqing Li

  • Deepak Rathore

  • Enrico Jörns

  • Guðni Már Gilbert

  • He Zhe

  • Himanshu Jadon

  • Hitendra Prajapati

  • Hugo SIMELIERE (Schneider Electric)

  • Jonas Munsin

  • João Marcos Costa (Schneider Electric)

  • Lee Chee Yang

  • Marcio Henriques

  • Mark Hatle

  • Marta Rybczynska

  • Martin Jansa

  • Mathieu Dubois-Briand

  • Naman Jain

  • Paul Barker

  • Peter Bergin

  • Peter Marko

  • Prabhudasu Vatala

  • Richard Purdie

  • Robert P. J. Day

  • Ross Burton

  • Shubham Pushpkar

  • Sudhir Dumbhare

  • Theo Gaige (Schneider Electric)

  • Trevor Woerner

  • Vijay Anusuri

  • Yoann Congal

  • Zahir Hussain

Repositories / Downloads for Yocto-5.0.19

yocto-docs

poky

openembedded-core

meta-yocto

meta-mingw

bitbake