Release notes for 6.1 (blacksail)

This document lists new features and enhancements for the Yocto Project 6.1 Release (codename “blacksail”). For a list of breaking changes and migration guides, see the Migration notes for 6.1 (blacksail) section.

New Features / Enhancements in 6.1

• Linux kernel 7.2, gcc 16.2, glibc 2.44, LLVM 23.1.1, and over 300 other recipe upgrades

• Minimum Python version required on the host: 3.9.

• Kernel-related changes:

  • kernel-module-split: Return list of values in extract_modinfo (43da9b9)

  • kernel: Disable module tarball deployment (MODULE_TARBALL_DEPLOY) by default (f51d48c)

  • linux-yocto: Remove CVE exclusion list as sbom-cve-check does this itself (596ad6c)

  • kernel-fit-image:

    • Validate key files expected by mkimage for the selected algorithm (7570ab5)

    • Do not include kernel property in DTBO configuration sub-nodes (06ed340)

    • Fix operation with KERNEL_DTBVENDORED set to “1” (4297b94)

    • Add KERNEL_DTBVENDORED support for FIT_CONF_DEFAULT_DTB (3bceb2d)

    • Make kernel entry point and load address optional (54c4b48)

    • Avoid shadowing os stdlib import (fe1b5a0)

    • Introduce FIT_OS variable to override ‘os’ field (dc00e83)

    • Reference the boot script as “script” (6bb0775)

    • Skip sign key check for PKCS #11 URI (b606b71)

    • Don’t add configuration hash node when signing is enabled (7346ffe)

  • kernel-arch: Add Clang toolchain support (928d819)

  • kernel-arch: Fall back to GNU ld unless ld-is-lld is in DISTRO_FEATURES (f92bfb5)

  • kernel-yocto: Set CLANG_FLAGS for kernel config checks when using Clang (e88ee79)

  • linux-yocto-dev: Enable BSP config audit reporting (through KCONF_BSP_AUDIT_LEVEL) (c98e839)

  • kernel-devsrc: Install sources required for BPF host tools (cf5b627)

  • kernel-yocto-rust: Add Clang toolchain check for riscv64 (2b22849)

  • lib/oe/kernel_module.py: Re-sign kernel modules after package stripping process (a608d10)

  • kernel-module-split: Don’t re-sign compressed kernel modules (3483d02)

• New core recipes:

  • python3-vcs-versioning: Added as a new dependency of the python3-setuptools-scm recipe (507bb52)

  • cgo-helloworld: A Go example recipe with cgo enabled (204e4f7)

  • jansson: Add a recipe from meta-oe, as it is a new hard dependency of the igt-gpu-tools recipe (2b6e7d0)

  • packagegroup-core-buildessential-rust: A packagegroup to provide the on-target dependencies required for building Rust-based kernel modules, including the Rust toolchain, bindgen, and libclang (500b45f)

  • nativesdk-packagegroup-sdk-host-rust: Similar to packagegroup-core-buildessential-rust but for building Rust-based kernel modules in the SDK (a05c097)

  • nativesdk-packagegroup-sdk-host-clang: nativesdk packagegroup providing the Clang, lld, and llvm-bin dependencies needed to build external/out-of-tree modules in the SDK using the LLVM/Clang toolchain (2b1db6e)

  • gstreamer1.0-plugins-rs: GStreamer Rust plugins (3a2b032)

  • rust-source: Recipe that fetches, unpacks, and patches the rustc source tree into a “work-shared” location (395fe16)

  • libzip: Added because it is a dependency of various tools (f17e875)

  • mesa-libclc: New recipe for forking libclc for Rusticl purposes in Mesa (956aaf3)

  • libtracefs: Added as powertop version 2.16 requires it (3c3f227)

  • libfaketime: Used for reproducibility testing (f3a4faa)

  • python3-tomlkit: New dependency of hatchling (46d3b26)

• New core classes:

  • python_uv_build: Used to build Python recipes with uv_build, a slimmed down version of uv (c535a9f)

  • upstream-stable-release-point: Helper class for setting the UPSTREAM_STABLE_RELEASE_REGEX variable with STABLE_VERSION_PARTS (a1e069d)

  • python_pbr: Used to build Python recipes with the Python Build Reasonableness backend (b9f3b36)

• New variables:

  • UBOOT_FIT_CONF_DESC allows configuring the description property of the configuration node of a U-Boot FIT image (df16e4a)

  • KERNEL_TOOLCHAIN: Allows specifying the toolchain to use to build the Linux kernel (0e3756e)

  • FIT_OS: Controls the os field of the FIT image built with the kernel-fit-image class (dc00e83)

  • CARGO_PROFILE: Allows selecting the cargo profile to use (--profile) (d4de7d0)

• OpenEmbedded-Core (OE-Core) library changes:

  • oe/lsb: Only read /etc/os-release (1331c5f)

  • oe/utils: Drop all_distro_features() (28d32a9)

• Global configuration changes:

  • bitbake.conf:

    • Define a new firmwaredir variable (which by default points to /lib/firmware). This variable was adopted in several recipes to replace ${nonarch_base_libdir}/firmware (2b75c7b)

    • Drop opencl from DISTRO_FEATURES_FILTER_NATIVE and DISTRO_FEATURES_FILTER_NATIVESDK (f810998)

  • useradd*: Add support for the USERMOD_PARAM variable, acting as a replacement of the GROUPMEMS_PARAM variable (b8da733, cec67e2)

    Show a deprecation warning if GROUPMEMS_PARAM is used (06f48de)

  • useradd*: Switch from --root to --prefix option (a7b846b)

• BitBake changes:

  • The git-make-shallow utility script was dropped along with its test cases. It was replaced by Git native shallow fetches 0223ec6

  • Replace codegen with ast.unparse() (76dd6d6)

  • After the removal of the previous obsolete bb.fetch module, the bb.fetch2 module was renamed to bb.fetch. A warning will be printed if bb.fetch2 is used in layers (34ea7cb)

  • fetch/git:

    • Fix leaking of temporary directory (c7ebe03)

    • Fix trailing slash in clone command causing double slash in alternates (797b0a3)

    • Accept SHA256 revisions (707ba7e)

  • Unpack RPMs with --no-absolute-filenames (1b1a715)

  • tinfoil:

    • Only allow one process progress bar at once (d6bc0e5)

    • Add a prepared task runner, to execute a single recipe task and nothing else (280a3b3)

  • knotty: Show elapsed time on the task progress bar (b8dfa35)

  • bitbake-setup:

    • Add a “notes” item to bitbake-setup configuration files which create a “conf-notes.txt” file in the Build Directory (020a5ba)

    • Add a --version option (0e39aca)

    • Add PyPI packaging for bitbake-setup, allowing to install the tool with pip (6b51b93)

    • Use the BitBake built-in fetcher for buildtools installer download (e8d531c)

    • default-registry: Use the core/yocto/monitor-disk-space fragment by default (975b322)

    • Print a note about fetcher log if something fails there (3860fab)

  • lib: Drop pyinotify, as it wasn’t used by BitBake anymore (d20e7dc)

  • lib: Rename fetch2 as fetch and invert compatibility shim to make bb.fetch2 equal to bb.fetch (34ea7cb)

  • fetch: Switch to shared locking for read accesses (e8f8ab6)

  • fetch/crate: Support user-defined protocols (22a993a)

  • fetch: Export AWS_SHARED_CREDENTIALS_FILE for S3 fetches, allowing to use a credential file different than ~/.aws/credentials (0d6aa2b)

  • fetch/{npm,npmsw}: Re-enable fetchers now that checksums come from SRC_URI, and restore the fetcher’s test coverage (9e45e00, f7608f3)

  • fetch/wget:

    • Handle long filenames correctly (da1fcdf)

    • Reuse cached HTTPS connections (2c236d8)

    • Cache SSL context instead of recreating every time (625b25a)

  • fetch/gitsm: Store the original URL data to fix relative gitsm:// paths (5887225)

  • Add pyproject.toml and vendor.txt for vendoring (70b54fd)

  • data: Return a list from exported_vars() (c870f5b)

  • asyncrpc: Add Task Group (4fc36e6)

  • hashserv:

    • Client: Add asynchronous streaming API (544d9f1)

    • Server: Add queued streaming API (9e0f064)

• SPDX-related changes:

  • Add SHA 512 support (383a5a6)

  • Add custom annotations to recipe packages (e5a4a7d)

  • common-licenses: Add SPDX License Exceptions (9c8d126)

  • lib/oe: Add SPDX license library (51c7930)

  • lib/oe/license: Rework package licenses matching (e3c5cb7)

  • lib/oe/spdx30_tasks: Fix image deploy dir (fe3a721)

• sbom-cve-check-related changes:

  • sbom-cve-check recipe: Enable offline mode (db2e0fd)

• Packaging changes:

  • package_manager/ipk: Skip checksums for unsigned local feeds (3f50b04)

  • package_rpm: Drop external dependency generator to support RPM 6 (093ae99)

  • libarchive: Add RPM format reader to support RPM 6 (8401bac)

  • No longer modify paths in save_debugsources_info() (b567c2f)

• QEMU / runqemu changes:

  • runqemu-export-rootfs: Set PSEUDO_INCLUDE_PATHS for unfsd (76b8b83)

  • runqemu-extract-sdk: Refactor in Python (78c176d)

  • qemu: Set the compilation progress bar flag (21994d6)

  • qemu: Add ppc64le support to COMPATIBLE_HOST (77a329d)

  • python3-qemu-qmp: Added as a new dependency of QEMU (5babf4e)

• Documentation changes:

  • New document on shared state signing

  • New document on setting up a shared state mirror

  • New document on how security is handled in builds: Build Process Security

• Go changes:

  • go-vendor: Remove vendor symlink (d3cbc28)

• Testing-related changes:

  • ptest support was added for the following recipes:

    • go (9ca4140)

    • libatomic-ops (d899b7f)

    • libcap (bfc0a65)

    • libxslt (fa4328b)

    • python3-certifi (0aa251f)

    • python3-pyopenssl (3fdfff9)

    • python3-vcs-versioning (90c8bc1)

    • wget (bb24e39)

    • zstd (f3e3ccb)

  • meta-selftest: Add a usegroup-deponly recipe to test USERADD_DEPENDS only (36eac58)

  • python3: Use a SKIPPED_TESTS variable instead of test skip patches (a8b2baa)

  • oeqa/oelib: Add runcmd tests (b364c44)

  • oeqa/selftest/pkgdata: Add a test for variable consistency in multilib* (b937278)

  • oeqa/selftest/kernelmodulesplit: Test cross-recipe kernel module dependencies (6ca1f21)

  • oe-selftest: kernel-fit-image: Add tests for KERNEL_DTBVENDORED (de2e11e)

  • testimage: Handle bootlog variants on failed QEMU tests (7a65969)

  • oeqa/selftest: Add go-vendor selftest suite (79d251a)

  • oeqa/selftest/clang: Add selftests for Clang/LLVM/LLD test suites (8e7a293)

  • oe-selftest: devtool: Add test for add/finish workflow (36472a7)

• devtool-related changes:

  • Disable GPG signing when setting up source tree repos (b5c84b0)

  • upgrade command: Extract changelog between versions (ddd54d6)

  • Fix finish/update-recipe for recipes using AUTOREV (ae7be93)

  • Fix update-recipe/finish --initial-rev override (62abb60)

  • Guess srcrev update mode for gitsm:// recipes too (9307c37)

  • upgrade: Ignore changelogs from 3rd party (1c9d4bb)

  • deploy-target: Fix running strip under pseudo (a48a731)

  • ide-sdk:

    • Add LLDB support for Clang toolchain (e81d897)

    • Default to all modified recipes (4c1c0ff)

    • Auto-write image debug settings to bbappend (929a8c1)

    • Support runqemu slirp (5cc15ec)

    • Support NFS rootfs (4ab284a)

    • Add clangd support for VSCode IntelliSense (10a0a09)

    • Support clangd for non-clang toolchain recipes (da9ac67)

    • Format C/C++ with clangd when .clang-format is present (5c13e48)

    • Support LLDB ATTACH mode (6a4227b)

    • Allow –ide to select multiple plugins (8aa5c03)

  • Fix file copy on finish --force (b8fda5d)

  • deploy-target: Add --package/--file-glob filters (cf6d07f)

  • deploy: Make pseudo calls independent of bitbake.conf (462019b)

  • deploy: Allow deploying directly into a local rootfs directory (763accb)

• Utility script changes:

  • scripts/cve-json-to-text.py: Simplify getopt argument parsing (a92dfe5)

  • upgrade command: Add a --stable option (1e86aa0)

  • oe-pkgdata-util: Fix empty runtime-rprovides directory handling (678c1c2, dbca656)

  • recipeutils: Add optional stable_upgrade parameter to get_recipe_upgrade_status, to add the possibility of doing stable version upgrades of recipes (1ed8fdd)

  • scripts/pull-spdx-licenses.py: Add exceptions to the script that updates the SPDX license files (4190cdd)

  • install-buildtools:

    • Auto-discover environment setup script via glob (1105378)

    • Add a --local-file option (e160ff4)

  • scripts/contrib: Add reuse-get-license.py, a script that extracts the LICENSE and LIC_FILES_CHKSUM for projects that use reuse (8ec5b74)

  • scripts/contrib: Add helper to report and fix missing SRC_URI ;tag= parameters (d9a75fa)

  • resulttool: Add support for ptests results for both Musl and Glibc (c0508fb)

  • scripts/oe-depends-dot: Give the dotfile argument a sensible default (88620a3)

  • sstate-cache-management.py: Also check the SSTATE_DIR environment variable for --cache-dir (ad44f5e)

• Clang/LLVM-related changes:

  • clang: Enable cmake flags for llvm, clang, lld tests (c926c4f)

• Patchtest-related changes:

• insane / sanity classes-related changes:

  • Add a check that SOURCE_MIRROR_URL is defined when own-mirrors is used (6d989b9)

  • Add a check for build host HOME directory in packaged files (81bbe42)

  • Allow exceptions in buildpaths HOME checks (ee29a91)

  • sanity: Warn on Cargo config files outside of the build tree (77516d3)

  • Increase shebang size limit (c205e77)

  • Improve HOME checks exceptions (f6b9494)

• Security changes:

• sbom-cve-check-related changes:

• New PACKAGECONFIG options for individual recipes:

  • curl: libpsl, libssh

  • dhcpcd: seccomp

  • ethtool: pretty-dump

  • ffmpeg: libdav1d

  • iproute2: dcb, dpll

  • libical: introspection, vala

  • libportal: gtk4

  • librsvg: avif, gdkpixbuf

  • p11-kit: systemd, trust

  • pciutils: dns, shared

  • perf: bpf-skel, llvm

  • python3-requests: chardet, charset-normalizer

  • seatd: manpages

  • strace: libdw

  • vim: desktop

  • webkitgtk: bubblewrap, librice, webrtc

  • wpa-supplicant: suiteb, mbo, wnm

• systemd-related changes:

  • systemd-tools-native: Add systemd-hwdb (2a7c2dd)

  • systemd: Enable coredump in PACKAGECONFIG by default (1086a56)

• U-Boot-related changes:

  • Add support for Clang toolchain (3214211)

  • uboot-sign: List the TEE loadable behind U-Boot (a9a20a0)

• Busybox-related changes:

  • fdisk: Enable GPT support (d0914b8)

  • Enable xxd (2852025)

  • Enable findfs for initramfs LABEL support (c2b681e)

• initramfs-framework-related changes:

  • overlayroot: Use switch_root instead of chroot (848c368)

  • Add opt-in root-only udev trigger (d3a196f)

  • Support LABEL with root-only udev trigger (fda394c)

  • Avoid external commands in rootfs resolution (d6e8e72)

  • Allow opting out of efivarfs mount (9147744)

• Miscellaneous changes:

  • pulseaudio: Split pactl into a dedicated client subpackage (31dd308)

  • u-boot-tools: Add dependency on libyaml for dtschema validation (02e09e0)

  • p11-kit: Rewrite packaging to provide additional p11-kit-modules and p11-kit-remote packages (7511a86)

  • harfbuzz: Improve packaging (fb39870)

  • sstate: Detect broken shared state paths containing TMPDIR (907af8f)

  • gcr: Package the ssh-agent into a separate package (c957909)

  • glibc: Disable automatic libatomic linking (677f0ac)

  • uboot-sign: Sign SPL FIT into a copy of the SPL DTB (79584fe)

  • archiver: Properly remove artifacts when configuration changes (4b0ac92)

  • wget: Disable NTLM support (4eb7e98)

  • vex: Drop obsolete conflict check with cve-check class (ddb00a3)

  • toaster: Support layers that are not Git repositories (3fb96cc)

  • classes/meson: Use ninja explicitly when compiling (9e1513b)

  • webkitgtk: Allow using Clang to compile for arm target (7702381)

  • report-error: Add site.conf/toolcfg.conf into error report (40ca5fc)

  • cml1: Use KCONFIG_CONFIG_ROOTDIR in savedefconfig (4696450)

  • uki: Make initramfs optional (909d3ba)

  • cpan_build: Disable .packlist and HTML doc (3c2bb7b)

  • useradd*: Drop groupmems from sysroot setup, as groupmems was removed from shadow version 4.20.0 (de0bf57)

  • image_types: Make oe_mkext234fs reproducible (8d1d548)

  • pypi: Only set downloadprefix in SRC_URI if needed (be391d8)

  • sqlite3: Squash sqlite3.inc into the recipe, since this is the only place where it is used. (35db548)

Known Issues in 6.1

N/A

Recipe License changes in 6.1

The following changes have been made to the LICENSE values set by recipes:

Recipe(s)	Previous value	New value
erofs-utils	GPL-2.0-or-later	MIT AND (GPL-2.0-or-later OR MIT)
git	GPL-2.0-only AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND BSL-1.0 AND LGPL-2.1-or-later	GPL-2.0-only AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND LGPL-2.1-or-later
fmt	MIT	MIT-with-fmt-exception
vulkan-headers	Apache-2.0 AND MIT	Apache-2.0 AND MIT AND (Apache-2.0 OR MIT)
vulkan-validation-layers	Apache-2.0 AND BSL-1.0 AND MIT	Apache-2.0 AND BSL-1.0 AND MIT AND BSD-2-Clause AND (Apache-2.0 WITH LLVM-exception)
lttng-tools	GPL-2.0-only AND LGPL-2.1-only	BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND CC0-1.0 AND CC-BY-SA-4.0 AND FSFAP AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-2.0-or-later WITH Autoconf-exception-2.0 AND GPL-2.0-or-later WITH Autoconf-exception-macro AND LGPL-2.1-only AND LGPL-2.1-or-later AND MIT

Security Fixes in 6.1

The following CVEs have been fixed:

Recipe	CVE IDs
acl	CVE-2026-54369, CVE-2026-54370
alsa-lib	CVE-2026-90781, CVE-2026-96674, CVE-2026-96675
attr	CVE-2026-54371
avahi	CVE-2025-59529
bind	CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19667, CVE-2026-19668, CVE-2026-19941, CVE-2026-75029, CVE-2026-76163, CVE-2026-77119, CVE-2026-77692, CVE-2026-78301, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736
binutils	CVE-2026-6844, CVE-2026-6845
binutils-cross-x86_64	CVE-2026-6844, CVE-2026-6845
binutils-testsuite	CVE-2026-6844, CVE-2026-6845
bison	CVE-2026-56390
bluez5	CVE-2026-19774
busybox	CVE-2026-38752, CVE-2026-38753, CVE-2026-38755
cairo	CVE-2025-50422
coreutils	CVE-2026-56392
cryptodev-linux	CVE-2026-28529
cups	CVE-2024-47850
curl	CVE-2026-8926, CVE-2026-11564, CVE-2026-11856, CVE-2026-18924, CVE-2026-19931, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208
epiphany	CVE-2026-18487
expat	CVE-2026-66046, CVE-2026-76641, CVE-2026-76956, CVE-2026-76957, CVE-2026-93990, CVE-2026-102633
ffmpeg	CVE-2026-58049, CVE-2026-66036, CVE-2026-66040, CVE-2026-66041, CVE-2026-70628, CVE-2026-70629, CVE-2026-70630, CVE-2026-70631, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75145, CVE-2026-75146, CVE-2026-75147, CVE-2026-96611
gdk-pixbuf	CVE-2026-5201
ghostscript	CVE-2026-19547, CVE-2026-39919
glibc	CVE-2011-0536, CVE-2025-0577, CVE-2026-8674, CVE-2026-18374, CVE-2026-19499, CVE-2026-19542, CVE-2026-77117, CVE-2026-80489, CVE-2026-86805, CVE-2026-89092, CVE-2026-95818, CVE-2026-97399
gnutls	CVE-2023-0361
graphene	CVE-2026-81281
gstreamer1.0	CVE-2026-73433, CVE-2026-73434
libarchive	CVE-2026-4424
libgcrypt	CVE-2024-2236
libgit2	CVE-2026-5917, CVE-2026-53583, CVE-2026-53584, CVE-2026-53585, CVE-2026-53586, CVE-2026-53587
libpcre2	CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-89162, CVE-2026-103111
libsndfile1	CVE-2024-50613, CVE-2025-52194
libsolv	CVE-2026-48863, CVE-2026-48864
libsoup	CVE-2026-3099, CVE-2026-3632, CVE-2026-3633, CVE-2026-3634, CVE-2026-12548, CVE-2026-12549, CVE-2026-66337, CVE-2026-66338, CVE-2026-66339
libtheora	CVE-2026-5673
libx11	CVE-2026-88806, CVE-2026-94283, CVE-2026-94284, CVE-2026-94285
libxfont	CVE-2026-44950
libxi	CVE-2026-93541, CVE-2026-93542, CVE-2026-93543, CVE-2026-93544, CVE-2026-93545, CVE-2026-94281, CVE-2026-94282
libxrender	CVE-2026-88807
libxtst	CVE-2026-94286
linux-yocto	CVE-2019-14899, CVE-2020-10774, CVE-2021-3714, CVE-2021-3864, CVE-2022-0400, CVE-2022-1247, CVE-2022-4543, CVE-2023-3397, CVE-2023-3640, CVE-2023-6238, CVE-2023-6240, CVE-2025-71074, CVE-2025-71306, CVE-2025-71308, CVE-2025-71313, CVE-2026-23328, CVE-2026-23374, CVE-2026-23377, CVE-2026-31501, CVE-2026-31771, CVE-2026-31777, CVE-2026-43022, CVE-2026-43042, CVE-2026-43045, CVE-2026-43053, CVE-2026-43095, CVE-2026-43115, CVE-2026-43131, CVE-2026-43174, CVE-2026-43191, CVE-2026-43204, CVE-2026-43228, CVE-2026-43299, CVE-2026-43308, CVE-2026-43310, CVE-2026-43311, CVE-2026-43326, CVE-2026-43414, CVE-2026-43443, CVE-2026-45961, CVE-2026-45991, CVE-2026-46008, CVE-2026-46017, CVE-2026-46032, CVE-2026-46153, CVE-2026-46210, CVE-2026-46245, CVE-2026-46298, CVE-2026-46302, CVE-2026-46311, CVE-2026-46330, CVE-2026-52949, CVE-2026-52956, CVE-2026-52960, CVE-2026-52965, CVE-2026-52988, CVE-2026-53007, CVE-2026-53008, CVE-2026-53009, CVE-2026-53017, CVE-2026-53024, CVE-2026-53025, CVE-2026-53091, CVE-2026-53106, CVE-2026-53108, CVE-2026-53124, CVE-2026-53222, CVE-2026-53257, CVE-2026-53285, CVE-2026-53292, CVE-2026-53308, CVE-2026-53401, CVE-2026-63811, CVE-2026-63879, CVE-2026-63941, CVE-2026-63977, CVE-2026-63983, CVE-2026-64013, CVE-2026-64019, CVE-2026-64020, CVE-2026-64040, CVE-2026-64057, CVE-2026-64067, CVE-2026-64079, CVE-2026-64117, CVE-2026-64123, CVE-2026-64146, CVE-2026-64154, CVE-2026-64159, CVE-2026-64160, CVE-2026-64283, CVE-2026-64325, CVE-2026-64341, CVE-2026-64388, CVE-2026-64400, CVE-2026-68086, CVE-2026-68103, CVE-2026-68105, CVE-2026-68242, CVE-2026-68286, CVE-2026-68287, CVE-2026-68288, CVE-2026-68289, CVE-2026-68291, CVE-2026-68295, CVE-2026-68303, CVE-2026-68305, CVE-2026-68312, CVE-2026-68323, CVE-2026-68337, CVE-2026-68375, CVE-2026-68399, CVE-2026-68404, CVE-2026-68436, CVE-2026-68441, CVE-2026-68447, CVE-2026-68470, CVE-2026-72031, CVE-2026-72064, CVE-2026-72091, CVE-2026-72315, CVE-2026-72329, CVE-2026-72331, CVE-2026-72334, CVE-2026-72337, CVE-2026-72345, CVE-2026-72355, CVE-2026-72370, CVE-2026-72377, CVE-2026-72380, CVE-2026-72388, CVE-2026-72397, CVE-2026-72402, CVE-2026-72404, CVE-2026-72413, CVE-2026-72423, CVE-2026-72438, CVE-2026-72440, CVE-2026-72454, CVE-2026-72463, CVE-2026-72477, CVE-2026-72485, CVE-2026-72494, CVE-2026-72496, CVE-2026-72497, CVE-2026-72499, CVE-2026-74258, CVE-2026-74260, CVE-2026-74269, CVE-2026-74272, CVE-2026-74273, CVE-2026-74277, CVE-2026-74289, CVE-2026-74291, CVE-2026-74294, CVE-2026-74307, CVE-2026-74317, CVE-2026-74336, CVE-2026-74338, CVE-2026-74342, CVE-2026-74347, CVE-2026-74350, CVE-2026-74354, CVE-2026-74367, CVE-2026-74373, CVE-2026-74374, CVE-2026-74375, CVE-2026-74407, CVE-2026-74419, CVE-2026-74449, CVE-2026-74466, CVE-2026-74496, CVE-2026-74521, CVE-2026-74527, CVE-2026-74542, CVE-2026-74544, CVE-2026-74558, CVE-2026-74561, CVE-2026-74562, CVE-2026-74568, CVE-2026-74713, CVE-2026-74715, CVE-2026-74716, CVE-2026-74721, CVE-2026-74723, CVE-2026-74729, CVE-2026-74735, CVE-2026-74745, CVE-2026-74747, CVE-2026-74750, CVE-2026-74752, CVE-2026-74754, CVE-2026-80521, CVE-2026-80524, CVE-2026-80579, CVE-2026-80580, CVE-2026-80631, CVE-2026-80634, CVE-2026-80655, CVE-2026-80657, CVE-2026-80668, CVE-2026-80693, CVE-2026-80705, CVE-2026-80729, CVE-2026-80738, CVE-2026-80747, CVE-2026-80785, CVE-2026-80786, CVE-2026-80884, CVE-2026-80899, CVE-2026-89513, CVE-2026-89527, CVE-2026-89534, CVE-2026-89537, CVE-2026-89568, CVE-2026-89584, CVE-2026-89601, CVE-2026-89610, CVE-2026-89611, CVE-2026-89642, CVE-2026-89654, CVE-2026-89705, CVE-2026-89709, CVE-2026-89718, CVE-2026-89755, CVE-2026-89764, CVE-2026-89772, CVE-2026-89792, CVE-2026-89796, CVE-2026-89805, CVE-2026-89812, CVE-2026-89813, CVE-2026-89815, CVE-2026-89827, CVE-2026-89838, CVE-2026-89840, CVE-2026-89859, CVE-2026-89862, CVE-2026-89866, CVE-2026-89868, CVE-2026-89907, CVE-2026-90040, CVE-2026-90061, CVE-2026-90079, CVE-2026-90082, CVE-2026-90093, CVE-2026-90095, CVE-2026-90098, CVE-2026-90099, CVE-2026-90104, CVE-2026-90105, CVE-2026-90106, CVE-2026-90111, CVE-2026-90121, CVE-2026-90142, CVE-2026-90144, CVE-2026-90154, CVE-2026-90155, CVE-2026-90156, CVE-2026-90162, CVE-2026-90167, CVE-2026-90174, CVE-2026-90177, CVE-2026-90182, CVE-2026-90183, CVE-2026-90206, CVE-2026-90208, CVE-2026-90211, CVE-2026-90217, CVE-2026-90234, CVE-2026-90237, CVE-2026-90242, CVE-2026-90263, CVE-2026-90267, CVE-2026-90273, CVE-2026-90301, CVE-2026-90311, CVE-2026-90315, CVE-2026-90317, CVE-2026-90320, CVE-2026-90321, CVE-2026-90323, CVE-2026-90330, CVE-2026-90335, CVE-2026-90336, CVE-2026-90337, CVE-2026-90345, CVE-2026-90346, CVE-2026-90347, CVE-2026-90355, CVE-2026-90359, CVE-2026-90365, CVE-2026-90380, CVE-2026-90381, CVE-2026-90408, CVE-2026-90409, CVE-2026-90412, CVE-2026-90417, CVE-2026-90421, CVE-2026-90427, CVE-2026-92480, CVE-2026-92482, CVE-2026-93044, CVE-2026-93047, CVE-2026-93096, CVE-2026-93099, CVE-2026-93104, CVE-2026-93105, CVE-2026-93116, CVE-2026-93122, CVE-2026-93125, CVE-2026-93129, CVE-2026-93135, CVE-2026-93144, CVE-2026-93148, CVE-2026-93164, CVE-2026-93168, CVE-2026-93175, CVE-2026-93176, CVE-2026-93179, CVE-2026-93181, CVE-2026-93201, CVE-2026-93216, CVE-2026-93221, CVE-2026-93248, CVE-2026-93251, CVE-2026-93260, CVE-2026-93270, CVE-2026-93282, CVE-2026-93284, CVE-2026-93285, CVE-2026-93286, CVE-2026-93287, CVE-2026-93288, CVE-2026-93781, CVE-2026-93782, CVE-2026-93783, CVE-2026-93784, CVE-2026-93785, CVE-2026-93786, CVE-2026-93787, CVE-2026-93788, CVE-2026-93789, CVE-2026-93790, CVE-2026-93791, CVE-2026-93792, CVE-2026-93793, CVE-2026-93794, CVE-2026-93795, CVE-2026-93796, CVE-2026-93797, CVE-2026-93798, CVE-2026-93799, CVE-2026-93800, CVE-2026-93801, CVE-2026-93802, CVE-2026-93803, CVE-2026-93804, CVE-2026-93805, CVE-2026-93806, CVE-2026-93807, CVE-2026-93808, CVE-2026-93810, CVE-2026-93811, CVE-2026-93812, CVE-2026-93813, CVE-2026-93814, CVE-2026-93815, CVE-2026-93816, CVE-2026-93817, CVE-2026-93818, CVE-2026-93819, CVE-2026-93820, CVE-2026-93821, CVE-2026-93822, CVE-2026-93823, CVE-2026-93824, CVE-2026-93825, CVE-2026-93826, CVE-2026-93827, CVE-2026-93828, CVE-2026-93829, CVE-2026-93830, CVE-2026-97407, CVE-2026-97408, CVE-2026-97409, CVE-2026-97410, CVE-2026-97411, CVE-2026-97412, CVE-2026-97413, CVE-2026-97414, CVE-2026-97415, CVE-2026-97416, CVE-2026-97417, CVE-2026-97418, CVE-2026-97419, CVE-2026-97420, CVE-2026-97421, CVE-2026-97422, CVE-2026-97423, CVE-2026-97424, CVE-2026-97425, CVE-2026-97426, CVE-2026-97427, CVE-2026-97428, CVE-2026-97429, CVE-2026-97430, CVE-2026-97431, CVE-2026-97432, CVE-2026-97433, CVE-2026-97434, CVE-2026-97435, CVE-2026-97436, CVE-2026-97437, CVE-2026-97438, CVE-2026-97439, CVE-2026-97440, CVE-2026-97441, CVE-2026-97442, CVE-2026-97443, CVE-2026-97444, CVE-2026-97445, CVE-2026-97446, CVE-2026-97447, CVE-2026-97448, CVE-2026-97449, CVE-2026-97450, CVE-2026-97451, CVE-2026-97452, CVE-2026-97453, CVE-2026-97454, CVE-2026-97455, CVE-2026-97456, CVE-2026-97472, CVE-2026-97473, CVE-2026-97474, CVE-2026-97475, CVE-2026-97476, CVE-2026-97477, CVE-2026-97478, CVE-2026-97479, CVE-2026-97480, CVE-2026-97481, CVE-2026-97482, CVE-2026-97483, CVE-2026-97484, CVE-2026-97485, CVE-2026-97486, CVE-2026-97487, CVE-2026-97488, CVE-2026-97489, CVE-2026-97490, CVE-2026-97491, CVE-2026-97492, CVE-2026-97493, CVE-2026-97494, CVE-2026-97495, CVE-2026-97496, CVE-2026-97497, CVE-2026-97498, CVE-2026-97499, CVE-2026-97500, CVE-2026-97501, CVE-2026-97502, CVE-2026-97503, CVE-2026-97504, CVE-2026-97505, CVE-2026-97506, CVE-2026-97507, CVE-2026-97508, CVE-2026-97509, CVE-2026-97510, CVE-2026-97511, CVE-2026-97512, CVE-2026-97513, CVE-2026-97514, CVE-2026-97515, CVE-2026-97516, CVE-2026-97517, CVE-2026-97518, CVE-2026-97519, CVE-2026-97520, CVE-2026-97521, CVE-2026-97522, CVE-2026-97523, CVE-2026-97524, CVE-2026-97525, CVE-2026-97526, CVE-2026-97527, CVE-2026-97528, CVE-2026-97529, CVE-2026-97530, CVE-2026-97531, CVE-2026-97532, CVE-2026-97533, CVE-2026-97534, CVE-2026-97535, CVE-2026-97536, CVE-2026-97537, CVE-2026-97538, CVE-2026-97539, CVE-2026-97540, CVE-2026-97541, CVE-2026-97542, CVE-2026-97543, CVE-2026-97544, CVE-2026-97545, CVE-2026-97546, CVE-2026-97547, CVE-2026-97548, CVE-2026-97549, CVE-2026-97550, CVE-2026-97551, CVE-2026-97552, CVE-2026-97555, CVE-2026-97556, CVE-2026-97557, CVE-2026-97558, CVE-2026-97559, CVE-2026-97560, CVE-2026-97561, CVE-2026-97562, CVE-2026-97563, CVE-2026-97564, CVE-2026-97565, CVE-2026-97566, CVE-2026-97567, CVE-2026-97568, CVE-2026-97571, CVE-2026-97572, CVE-2026-97573, CVE-2026-97574, CVE-2026-97575, CVE-2026-97576, CVE-2026-97577, CVE-2026-97578, CVE-2026-97579, CVE-2026-97581, CVE-2026-97582, CVE-2026-97583, CVE-2026-97584, CVE-2026-97585, CVE-2026-97586, CVE-2026-97587, CVE-2026-97588, CVE-2026-97589, CVE-2026-97590, CVE-2026-97591, CVE-2026-97592, CVE-2026-97593, CVE-2026-97594, CVE-2026-97595, CVE-2026-97596, CVE-2026-97597, CVE-2026-97598, CVE-2026-97599, CVE-2026-97600, CVE-2026-97601, CVE-2026-97602, CVE-2026-97603, CVE-2026-97604, CVE-2026-97605, CVE-2026-97606, CVE-2026-97607, CVE-2026-97608, CVE-2026-97609, CVE-2026-97610, CVE-2026-97611, CVE-2026-97612, CVE-2026-97613, CVE-2026-97614, CVE-2026-97615, CVE-2026-97616, CVE-2026-97617, CVE-2026-97618, CVE-2026-97619, CVE-2026-97620, CVE-2026-97621, CVE-2026-97899, CVE-2026-97900, CVE-2026-97901, CVE-2026-97902, CVE-2026-97903, CVE-2026-97904, CVE-2026-97905, CVE-2026-97906, CVE-2026-97907, CVE-2026-97908, CVE-2026-97909, CVE-2026-97910, CVE-2026-97915, CVE-2026-97916, CVE-2026-97917, CVE-2026-97918, CVE-2026-97919, CVE-2026-97920, CVE-2026-97921, CVE-2026-97922, CVE-2026-97923, CVE-2026-97924, CVE-2026-97925, CVE-2026-97926, CVE-2026-97927, CVE-2026-97928, CVE-2026-97929, CVE-2026-97930, CVE-2026-97931, CVE-2026-97934, CVE-2026-97935, CVE-2026-97936, CVE-2026-97938, CVE-2026-97939, CVE-2026-97940, CVE-2026-97942, CVE-2026-97943, CVE-2026-97944, CVE-2026-97945, CVE-2026-97946, CVE-2026-97947, CVE-2026-97948, CVE-2026-97949, CVE-2026-97950, CVE-2026-97951, CVE-2026-97952, CVE-2026-97953, CVE-2026-97954, CVE-2026-97955, CVE-2026-97956, CVE-2026-97957, CVE-2026-97958, CVE-2026-97959, CVE-2026-97960, CVE-2026-97961, CVE-2026-97962, CVE-2026-97963, CVE-2026-97964, CVE-2026-97965, CVE-2026-97966, CVE-2026-97967, CVE-2026-97968, CVE-2026-97969, CVE-2026-97970, CVE-2026-97972, CVE-2026-97973, CVE-2026-97974, CVE-2026-97975, CVE-2026-97976, CVE-2026-97977, CVE-2026-97978, CVE-2026-97979, CVE-2026-97981, CVE-2026-97982, CVE-2026-97984, CVE-2026-97985, CVE-2026-97986, CVE-2026-97987, CVE-2026-97988, CVE-2026-97989, CVE-2026-97990, CVE-2026-97991, CVE-2026-97992, CVE-2026-97993, CVE-2026-97994, CVE-2026-97995, CVE-2026-97996, CVE-2026-97997, CVE-2026-97998, CVE-2026-98000, CVE-2026-98001, CVE-2026-98003, CVE-2026-98004, CVE-2026-98006, CVE-2026-98007, CVE-2026-98008, CVE-2026-98009, CVE-2026-98010, CVE-2026-98011, CVE-2026-98012, CVE-2026-98013, CVE-2026-98014, CVE-2026-98015, CVE-2026-98016, CVE-2026-98017, CVE-2026-98018, CVE-2026-98019, CVE-2026-98020, CVE-2026-98021, CVE-2026-98022, CVE-2026-98023, CVE-2026-98024, CVE-2026-98025, CVE-2026-98026, CVE-2026-98027, CVE-2026-98028, CVE-2026-98029, CVE-2026-98030, CVE-2026-98031, CVE-2026-98032, CVE-2026-98033, CVE-2026-98037, CVE-2026-98038, CVE-2026-98039, CVE-2026-98041, CVE-2026-98043, CVE-2026-98044, CVE-2026-98045, CVE-2026-98046, CVE-2026-98047, CVE-2026-98048, CVE-2026-98049, CVE-2026-98050, CVE-2026-98051, CVE-2026-98052, CVE-2026-98053, CVE-2026-98054, CVE-2026-98055, CVE-2026-98056, CVE-2026-98058, CVE-2026-98059, CVE-2026-98060, CVE-2026-98061, CVE-2026-98062, CVE-2026-98063, CVE-2026-98064, CVE-2026-98066, CVE-2026-98067, CVE-2026-98068, CVE-2026-98069, CVE-2026-98070, CVE-2026-98071, CVE-2026-98072, CVE-2026-98073, CVE-2026-98074, CVE-2026-98075, CVE-2026-98076, CVE-2026-98077, CVE-2026-98078, CVE-2026-98079, CVE-2026-98080, CVE-2026-98081, CVE-2026-98082, CVE-2026-98083, CVE-2026-98085, CVE-2026-98086, CVE-2026-98087, CVE-2026-98088, CVE-2026-98089, CVE-2026-98090, CVE-2026-98091, CVE-2026-98092, CVE-2026-98093, CVE-2026-98094, CVE-2026-98095, CVE-2026-98096, CVE-2026-98097, CVE-2026-98098, CVE-2026-98099, CVE-2026-98101, CVE-2026-98102, CVE-2026-98103, CVE-2026-98104, CVE-2026-98105, CVE-2026-98106, CVE-2026-98107, CVE-2026-98108, CVE-2026-98109, CVE-2026-98110, CVE-2026-98111, CVE-2026-98113, CVE-2026-98114, CVE-2026-98116, CVE-2026-98117, CVE-2026-98118, CVE-2026-98119, CVE-2026-98120, CVE-2026-98121, CVE-2026-98122, CVE-2026-98123, CVE-2026-98124, CVE-2026-98126, CVE-2026-98127, CVE-2026-98128, CVE-2026-98129, CVE-2026-98130, CVE-2026-98131, CVE-2026-98134, CVE-2026-98142, CVE-2026-98146, CVE-2026-98147, CVE-2026-98148, CVE-2026-98151, CVE-2026-98152, CVE-2026-98153, CVE-2026-98154, CVE-2026-98155, CVE-2026-98156, CVE-2026-98157, CVE-2026-98158, CVE-2026-98159, CVE-2026-100072
nfs-utils	CVE-2025-12801
openssh	CVE-2026-55654, CVE-2026-55655, CVE-2026-73281, CVE-2026-73282, CVE-2026-73283
openssl	CVE-2015-3216, CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84784
ovmf	CVE-2017-5731, CVE-2019-14584
perl	CVE-2026-15534, CVE-2026-82560
popt	CVE-2026-18739, CVE-2026-18743, CVE-2026-18839
ppp	CVE-2020-15704
pulseaudio	CVE-2020-15710, CVE-2020-16123
python3	CVE-2025-15367, CVE-2026-12345, CVE-2026-15310, CVE-2026-15806, CVE-2026-17084, CVE-2026-19445, CVE-2026-19553, CVE-2026-19672, CVE-2026-87910
python3-cryptography	CVE-2026-69247
python3-git	CVE-2026-67322, CVE-2026-67323, CVE-2026-67324, CVE-2026-67325, CVE-2026-67326, CVE-2026-69097, CVE-2026-73619, CVE-2026-73620, CVE-2026-73621, CVE-2026-73622, CVE-2026-73623, CVE-2026-73624, CVE-2026-73625, CVE-2026-76217, CVE-2026-76218, CVE-2026-76219, CVE-2026-76220, CVE-2026-76221, CVE-2026-76222, CVE-2026-78675, CVE-2026-78676, CVE-2026-78677, CVE-2026-78678, CVE-2026-78679, CVE-2026-87817, CVE-2026-87818, CVE-2026-87819, CVE-2026-100689
python3-lxml	CVE-2026-49825
python3-mako	CVE-2026-102991
python3-urllib3	CVE-2026-44432, CVE-2026-97687, CVE-2026-97688, CVE-2026-97689
qemu	CVE-2026-3195, CVE-2026-3196, CVE-2026-3842
qemu-system-native	CVE-2026-3195, CVE-2026-3196, CVE-2026-3842
rpm-sequoia	CVE-2026-2625
rsync	CVE-2026-29518, CVE-2026-41035, CVE-2026-43617, CVE-2026-43618, CVE-2026-43619, CVE-2026-43620, CVE-2026-45232, CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53786, CVE-2026-53788, CVE-2026-53789, CVE-2026-53790, CVE-2026-53791, CVE-2026-53792, CVE-2026-53793, CVE-2026-53794, CVE-2026-53795, CVE-2026-53796, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53802, CVE-2026-53803, CVE-2026-70452, CVE-2026-70453, CVE-2026-70454, CVE-2026-70456, CVE-2026-70457, CVE-2026-70458, CVE-2026-70459, CVE-2026-70460, CVE-2026-70461, CVE-2026-70462, CVE-2026-70463, CVE-2026-70464
sudo	CVE-2026-82474
tar	CVE-2026-18477, CVE-2026-18508
u-boot-tools	CVE-2026-71971, CVE-2026-71972, CVE-2026-71973, CVE-2026-71974, CVE-2026-74220, CVE-2026-74221, CVE-2026-74222, CVE-2026-74225
util-linux	CVE-2026-76642
util-linux-libuuid	CVE-2026-76642
vim	CVE-2026-51400, CVE-2026-51401, CVE-2026-73070
webkitgtk	CVE-2026-78376, CVE-2026-83596
xserver-xorg	CVE-2026-55999, CVE-2026-56000
zlib	CVE-2026-85091

Recipe Upgrades in 6.1

The following recipes have been upgraded:

Recipe	Previous version(s)	New version(s)
acl	2.3.2	2.4.0
acpica	20251212	20260408
adwaita-icon-theme	49.0	50.0
alsa-lib	1.2.15.3	1.2.16.1
alsa-ucm-conf	1.2.15.3	1.2.16.1
alsa-utils	1.2.15.2	1.2.16
appstream	1.1.2	1.2.0
apr-util	1.6.3	1.6.5
at-spi2-core	2.60.0	2.62.0.1
attr	2.5.2	2.6.0
avahi	0.8	0.9~rc5
barebox	2026.04.0	2026.09.0
barebox-tools	2026.04.0	2026.08.0
bash-completion	2.17.0	2.18.0
bind	9.20.26	9.20.29
binutils	2.46.1	2.47
binutils-cross	2.46.1	2.47
binutils-cross-canadian	2.46.1	2.47
binutils-crosssdk	2.46.1	2.47
binutils-testsuite	2.46.1	2.47
bluez5	5.86	5.87
boost	1.90.0	1.92.0
boost-build-native	1.90.0	1.92.0
btrfs-tools	6.19.1	7.1
busybox	1.37.0	1.38.0
busybox-inittab	1.37.0	1.38.0
ca-certificates	20260601	20260816
cairo	1.18.4	1.18.6
cargo	1.94.1	1.98.1
cargo-c	0.10.21+cargo-0.95.0	0.10.25+cargo-0.99.0
ccache	4.13.3	4.14
clang	22.1.8	23.1.0
cmake	4.3.1	4.4.3
cmake-native	4.3.1	4.4.3
compiler-rt	22.1.8	23.1.0
compiler-rt-sanitizers	22.1.8	23.1.0
coreutils	9.10	9.11
createrepo-c	1.2.3	1.2.4
cross-localedef-native	2.43+git	2.44+git
cryptodev-linux	1.14	1.14+git
cryptodev-module	1.14	1.14+git
cryptodev-tests	1.14	1.14+git
cups	2.4.16	2.4.19
curl	8.19.0	8.22.0
debianutils	5.23.2	5.24
debugedit	5.2	5.3
dhcpcd	10.3.1	10.5.2
diffoscope	314	329
diffstat	1.68	1.69
dos2unix	7.5.4	7.5.7
dropbear	2025.89	2026.94
dtc	1.7.2	1.8.1
ed	1.22.5	1.22.6
elfutils	0.194	0.196
enchant2	2.8.15	2.8.21
epiphany	49.7	50.6
erofs-utils	1.9.1	1.9.4
ethtool	6.19	7.1
expat	2.7.5	2.8.4
fastfloat	8.2.4	8.2.10
ffmpeg	8.0.3	9.0.2
file	5.47	5.48
findutils	4.10.0	4.11.0
fmt	12.1.0	12.2.0
font-util	1.4.1	1.4.2
fontconfig	2.17.1	2.18.3
gawk	5.4.0	5.4.1
gcc	15.3.0	16.2.0
gcc-cross	15.3.0	16.2.0
gcc-cross-canadian	15.3.0	16.2.0
gcc-crosssdk	15.3.0	16.2.0
gcc-runtime	15.3.0	16.2.0
gcc-sanitizers	15.3.0	16.2.0
gcc-source	15.3.0	16.2.0
gdk-pixbuf	2.44.5	2.44.8
ghostscript	10.06.0	10.07.1
git	2.53.0	2.55.0
glib-2.0	2.88.2	2.88.3
glib-2.0-initial	2.88.2	2.88.3
glibc	2.43+git	2.44+git
glibc-locale	2.43+git	2.44+git
glibc-mtrace	2.43+git	2.44+git
glibc-scripts	2.43+git	2.44+git
glibc-testsuite	2.43+git	2.44+git
glslang	1.4.341.0	1.4.357.0
gn	0+git (9d19a7870add…)	0+git (17b0057970fa…)
gnu-config	20250709+git	20260629+git
gnupg	2.5.17	2.5.22
gnutls	3.8.12	3.8.13
go	1.26.5	1.27.1
go-binary-native	1.26.5	1.27.1
go-cross-canadian	1.26.5	1.27.1
go-cross-core2-32	1.26.5	1.27.1
go-crosssdk	1.26.5	1.27.1
go-runtime	1.26.5	1.27.1
gpgme	2.0.1	2.1.2
gst-devtools	1.28.5	1.28.6
gst-examples	1.28.5	1.28.6
gstreamer1.0	1.28.5	1.28.6
gstreamer1.0-libav	1.28.5	1.28.6
gstreamer1.0-plugins-bad	1.28.5	1.28.6
gstreamer1.0-plugins-base	1.28.5	1.28.6
gstreamer1.0-plugins-good	1.28.5	1.28.6
gstreamer1.0-plugins-ugly	1.28.5	1.28.6
gstreamer1.0-python	1.28.5	1.28.6
gstreamer1.0-rtsp-server	1.28.5	1.28.6
gtk-doc	1.35.1	1.36.1
gtk4	4.22.2	4.22.4
gzip	1.14	1.15
harfbuzz	12.3.2	14.4.0
hwdata	0.406	0.410
igt-gpu-tools	2.3	2.5
inetutils	2.7	2.8
iproute2	6.19.0	7.2.0
json-c	0.18	0.19
kbd	2.9.0	2.10.0
kea	3.0.3	3.2.0
less	692	704
libadwaita	1.8.4	1.9.3
libarchive	3.8.7	3.8.9
libcap	2.77	2.78
libcap-ng	0.9.1	0.9.5
libcap-ng-python	0.9.1	0.9.5
libcxx	22.1.8	23.1.0
libdisplay-info	0.3.0	0.4.0
libdrm	2.4.131	2.4.134
libedit	20251016-3.1	20260512-3.1
libevdev	1.13.6	1.13.7
libevent	2.1.12	2.1.13
libffi	3.5.2	3.8.0
libfyaml	0.9.4	0.9.6
libgcc	15.3.0	16.2.0
libgcc-initial	15.3.0	16.2.0
libgcrypt	1.12.1	1.12.3
libgfortran	15.3.0	16.2.0
libgit2	1.9.2	1.9.7
libgpg-error	1.59	1.61
libical	3.0.20	4.0.5
libinput	1.30.2	1.31.3
libjpeg-turbo	3.1.3	3.2.0
libksba	1.6.8	1.8.1
libmd	1.1.0	1.2.0
libmicrohttpd	1.0.2	1.0.10
libmodulemd	2.15.2	2.15.3
libmpc	1.3.1	1.4.1
libpcre2	10.47	10.48
libpng	1.6.56	1.6.58
libportal	0.9.1	0.10.0
libpsl	0.21.5	0.23.3
librepo	1.20.0	1.21.0
librsvg	2.61.3	2.63.2
libseccomp	2.6.0	2.6.1
libsecret	0.21.7	0.21.8.2
libslirp	4.9.1	4.9.5
libsolv	0.7.36	0.7.39
libstd-rs	1.94.1	1.98.1
libtest-fatal-perl	0.018	0.019
libtool	2.5.4	2.6.2
libtool-cross	2.5.4	2.6.2
libtool-native	2.5.4	2.6.2
libusb1	1.0.29	1.0.30
libva	2.23.0	2.24.1
libva-initial	2.23.0	2.24.1
libva-utils	2.23.0	2.24.0
libxfont2	2.0.7	2.0.9
libxi	1.8.2	1.8.3
libxkbcommon	1.13.1	1.13.2
libxmlb	0.3.25	0.3.29
lighttpd	1.4.82	1.4.85
linux-firmware	20260410	20260916
linux-libc-headers	6.18	7.2
linux-yocto	6.18.39+git	6.18.48+git, 7.2.2+git
linux-yocto-dev	7.0+git	7.2+git
linux-yocto-rt	6.18.39+git	6.18.48+git, 7.2.2+git
linux-yocto-tiny	6.18.39+git	6.18.48+git, 7.2.2+git
lld	22.1.8	23.1.0
lldb	22.1.8	23.1.0
llvm	22.1.8	23.1.0
llvm-tblgen-native	22.1.8	23.1.0
log4cplus	2.1.2	2.2.0.1
lsof	4.99.6	4.99.7
ltp	20260130	20260529
lttng-modules	2.14.4	2.16.0
lttng-tools	2.14.1	2.16.0
lttng-ust	2.14.0	2.16.0
lua	5.5.0	5.5.1
lzip	1.25	1.26
makedumpfile	1.7.8	1.7.9
man-pages	6.17	6.19
mesa	26.0.5	26.2.3
mesa-demos	9.0.0	9.0.0+git
mesa-gl	26.0.5	26.2.2
mesa-tools-native	26.0.5	26.2.2
meson	1.10.2	1.12.0
minicom	2.10	2.11.1
mkfontscale	1.2.3	1.2.4
mpg123	1.33.4	1.33.7
msmtp	1.8.32	1.8.34
nasm	3.01	3.02
nativesdk-libtool	2.5.4	2.6.2
neard	0.19	0.20
netbase	6.5	6.6
nettle	3.10.2	4.0
nfs-utils	2.8.7	2.9.2
nghttp2	1.68.1	1.70.0
openmp	22.1.8	23.1.0
opensbi	1.8.1	1.9
openssh	10.3p1	10.5p1
openssl	3.5.7	4.0.3
opkg	0.9.0	0.10.0
orc	0.4.42	0.4.43
ovmf	edk2-stable202511	edk2-stable202605
p11-kit	0.26.4	0.26.5
pango	1.57.0	1.58.2
parted	3.6	3.8
patchelf	0.18.0+git	0.19.1
pciutils	3.14.0	3.15.0
perl	5.42.0	5.44.0
piglit	1.0+gitr (a0a27e528f64…)	1.0+gitr (56f237be32ed…)
pinentry	1.3.2	1.3.3
pkgconf	2.5.1	3.0.6
powertop	2.15	2.16
ppp	2.5.2	2.5.4
procps	4.0.6	4.0.7
puzzles	0.0+git (ecb576fb2a0a…)	0.0+git (3c3632259d29…)
python3	3.14.6	3.14.7
python3-attrs	25.4.0	26.1.0
python3-build	1.4.0	1.6.0
python3-certifi	2026.2.25	2026.7.22
python3-cffi	2.0.0	2.1.1
python3-click	8.3.1	8.5.0
python3-cryptography	46.0.7	50.0.1
python3-cryptography-vectors	46.0.7	50.0.1
python3-cython	3.2.4	3.2.9
python3-docutils	0.22.4	0.23
python3-dtc	1.7.2	1.8.1
python3-dtschema	2025.12	2026.6
python3-editables	0.5	0.6
python3-git	3.1.43	3.1.61
python3-hatchling	1.29.0	1.31.0
python3-hypothesis	6.151.9	6.167.0
python3-idna	3.11	3.20
python3-imagesize	2.0.0	2.0.1
python3-installer	0.7.0	1.0.1
python3-jsonpointer	3.0.0	3.1.1
python3-lxml	6.0.2	6.1.2
python3-mako	1.3.10	1.4.1
python3-markdown	3.10.2	3.10.3
python3-maturin	1.12.4	1.15.0
python3-meson-python	0.19.0	0.20.0
python3-more-itertools	10.6.0	10.8.0
python3-numpy	2.4.3	2.5.2
python3-packaging	26.0	26.3
python3-pathspec	1.0.4	1.1.1
python3-pbr	7.0.3	7.1.0
python3-pdm	2.26.6	2.29.0
python3-pdm-backend	2.4.7	2.4.9
python3-pip	26.0.1	26.2.1
python3-poetry-core	2.3.1	2.4.1
python3-pycairo	1.29.0	1.29.1
python3-pyelftools	0.32	0.33
python3-pygments	2.19.2	2.21.0
python3-pygobject	3.56.1	3.58.0
python3-pyopenssl	26.0.0	26.4.0
python3-pyproject-hooks	1.2.0	1.3.3
python3-pyproject-metadata	0.11.0	0.12.1
python3-pytest	9.0.2	9.1.1
python3-pytz	2026.1	2026.3.post1
python3-requests	2.32.5	2.34.2
python3-rpds-py	0.30.0	2026.6.3
python3-sbom-cve-check	1.3.1	1.3.3
python3-scons	4.10.1	4.11.1
python3-setuptools	82.0.1	84.0.0
python3-setuptools-rust	1.12.0	1.13.0
python3-setuptools-scm	9.2.2	10.2.3
python3-shacl2code	1.0.1	1.1.0
python3-snowballstemmer	3.0.1	3.1.1
python3-spdx-python-model	0.0.5	0.0.6
python3-sphinx-argparse	0.5.2	0.6.1
python3-testtools	2.8.7	2.9.1
python3-trove-classifiers	2026.1.14.14	2026.6.1.19
python3-typing-extensions	4.15.0	4.16.0
python3-uritools	6.0.1	6.1.3
python3-urllib3	2.6.3	2.8.0
python3-uv-build	0.10.10	0.12.9
python3-wcwidth	0.6.0	0.8.3
python3-websockets	16.0	17.1
python3-wheel	0.46.3	0.48.0
python3-zipp	3.23.0	4.1.0
qemu	10.2.0	11.1.1
qemu-native	10.2.0	11.1.1
qemu-system-native	10.2.0	11.1.1
re2c	4.4	4.6
repo	2.61.1	2.66.1
resolvconf	1.94	1.95
rpm	4.20.1	6.0.2
rpm-sequoia	1.10.1	1.10.2
rpm-sequoia-crypto-policy	git (f3f5fa454345…)	git (359ab169da6a…)
rsync	3.4.1	3.5.1
ruby	4.0.5	4.0.7
rust	1.94.1	1.98.1
rust-cross-canadian	1.94.1	1.98.1
sbom-cve-check-update-cvelist-native	2026-05-07	2026-08-25
sbom-cve-check-update-nvd-native	2026.05.07-000006	2026.08.25-000009
scdoc	1.11.4	1.11.5
screen	5.0.1	5.0.2
shaderc	2026.1	2026.3
shadow	4.19.4	4.20.2
shared-mime-info	2.4	2.5.1
spirv-headers	1.4.341.0	1.4.357.0
spirv-llvm-translator	22.1.1	23.1.1
spirv-tools	1.4.341.0	1.4.357.0
sqlite3	3.51.3	3.53.4
strace	6.19	7.2
stress-ng	0.20.01	0.22.00
swig	4.4.1	4.5.0
sysstat	12.7.9	12.8.0
systemd	259.5	261.2
systemd-boot	259.5	261.2
systemd-boot-native	259.5	261.2
systemtap	5.4	5.5
systemtap-native	5.4	5.5
taglib	2.2.1	2.3.1
tcf-agent	1.9.0	1.11.0
tcl	9.0.3	9.0.4
tcl8	8.6.17	8.6.18
tiff	4.7.1	4.7.2
time	1.9	1.10
ttyrun	2.41.0	2.44.0
tzdata/tzcode-native	2026c	2026d
u-boot	2026.01	2026.07
u-boot-tools	2026.01	2026.07
utfcpp	4.0.9	4.2.0
util-linux	2.41.5	2.42.4
util-linux-libuuid	2.41.5	2.42.3
vala	0.56.18	0.56.19
valgrind	3.26.0	3.27.1
vim	9.2.0340	9.2.0993
vim-tiny	9.2.0340	9.2.0993
virglrenderer	1.2.0	1.3.0
vte	0.82.2	0.84.1
vulkan-headers	1.4.341.0	1.4.357.0
vulkan-loader	1.4.341.0	1.4.357.0
vulkan-samples	git (fa2cf45adde0…)	git (383471195757…)
vulkan-tools	1.4.341.0	1.4.357.0
vulkan-utility-libraries	1.4.341.0	1.4.357.0
vulkan-validation-layers	1.4.341.0	1.4.357.0
vulkan-volk	1.4.341.0	1.4.357.0
waffle	1.8.1	1.8.3
wayland	1.24.0	1.26.0
wayland-protocols	1.47	1.49
webkitgtk	2.50.6	2.52.6
weston	15.0.0	16.0.0
which	2.23	2.25
wireless-regdb	2026.05.30	2026.09.03
wpa-supplicant	2.11	2.12
xev	1.2.6	1.2.7
xkeyboard-config	2.47	2.48
xmodmap	1.0.11	1.0.12
xrandr	1.5.3	1.5.4
xset	1.2.5	1.2.6
xvinfo	1.1.5	1.1.6
xwininfo	1.1.6	1.1.7
xz	5.8.2	5.8.3

Contributors to 6.1

Thanks to the following people who contributed to this release:

• Adam Blank

• Adam Duskett

• Adarsh Jagadish Kamini

• Aditya GS

• Adrian Freihofer

• Aksh Garg

• Alejandro Hernandez Samaniego

• Alejandro Mery

• Alessandro Zini

• Alexander Kanavin

• Alexander Stein

• Alex Kiernan

• Alper Ak

• Amaury Couderc

• Anders Heimer

• Andreas Mützel

• Andrei Lalaev

• Andrej Valek

• Andrew Geissler

• Anis Bougrine

• Ankur Tyagi

• Anthony Squires

• Antoine Gouby

• Antonin Godard

• Anton Skorup

• Aravind Bandari

• AshishKumar Mishra

• Aswin Murugan

• Aurelien DESBRIERES

• Baban

• Babanpreet Singh

• Benjamin Robin

• Bhavikkumar Girishbhai Ronvelia

• Bin Cao

• Bruce Ashfield

• Changqing Li

• Chen Qi

• Chris Laplante

• Colin Pinnell McAllister

• Corentin Guillevic

• Daiane Angolini

• Daniel Dragomir

• Daniel McGregor

• Daniel Turull

• Daniel Wagenknecht

• David Nyström

• David Reyna

• Dawid Bijak

• Deepesh Varatharajan

• Denys Dmytriyenko

• Devansh Patel

• Dmitry Baryshkov

• Dmitry Sakhonchik

• Efe Can Icoz

• Eilís ‘pidge’ Ní Fhlannagáin

• El Mehdi YOUNES

• Enoch Ng

• Enzo Frese

• Eric Meyers

• Ernest Van Hoecke

• Esa Jaaskela

• Etienne Cordonnier

• Fabian Pfitzner

• Fabian Pflug

• Fabien Lehoussel

• Fabio Estevam

• Florin Diaconescu

• Francesco Valla

• Francisco Pedraza

• Fredrik Svensson (svsvenss)

• Frieder Schrempf

• Gabriel Smith

• Gavvala, Kris

• George Refseth

• Ghanshyam Banait

• Guðni Már Gilbert

• Gustavo Henrique Nihei

• Haiqing Bai

• Haixiao Yan

• Hangtian Zhu

• Harald Brinkmann

• Harish Sadineni

• Hemanth Kumar M D

• Hetvi Thakar

• Hiago De Franco

• Himani Barde

• Himani Ramesh Barde

• Himanshu Jadon

• hongxu

• Igor Opaniuk

• Ivan Nestlerode

• jaekyu.lee

• Jaeyoon Jung

• Jaipaul Cheernam

• Jamin Lin

• Jan Vermaete

• Jate Sujjavanich

• Jesse Van Gavere

• Jinfeng Wang

• Jinwang Li

• Joao Marcos Costa

• João Marcos Costa

• Joerg Vehlow

• Johan Anderholm

• John Ripple

• Jonas Juffinger

• Jörg Sommer

• Jose Quaresma

• Joshua Watt

• Juhandré Knoetze

• Junjie Cao

• Kanksha Paturi

• Karthik

• KAZUYOSHI AKIYAMA (秋山 和慶)

• Khem Raj

• Kris Gavvala

• Kyungjik Min

• Lee Chee Yang

• Leon Anavi

• Leonardo Costa

• Leonid Iziumtsev

• Levi Shafter

• Lian Wang

• Li Wang

• Li Zhou

• Luca Fancellu

• Marcio Henriques

• Marcus Flyckt

• Marek Vasut

• Mark Hatle

• Mark Jonas

• Markus Swarowsky

• Markus Volk

• mark.yang

• Marta Rybczynska

• Martin Jansa

• Mathieu Dubois-Briand

• Matt Madison

• Mengshi Wu

• Metz, Josiah

• Michael Halstead

• Michael Opdenacker

• Michael Tretter

• Michal Sieron

• Mikko Rapeli

• Mingli Yu

• Minwoo Choi

• Moritz Haase

• Nate Kent

• Nathaniel White

• Nick Owens

• Nico

• Nicolas Dechesne

• Niko Mauno

• Nora Schiffer

• Oleksiy Obitotskyy

• Omkar Patil

• Otavio Salvador

• Pascal Eberhard

• Paul Barker

• Paul Eggleton

• Peter Kjellerstedt

• Peter Marko

• Peter Tatrai

• Philip Lorenz

• Prabhudasu Vatala

• Pratik Farkase

• Quan Sun

• Quentin Schulz

• Rasmus Villemoes

• Ricardo Salveti

• Ricardo Simoes

• Richard Purdie

• Robert P. J. Day

• Robert Yang

• Rob Woolley

• Roland Kovacs

• Ross Burton

• Rouven Czerwinski

• Rouven Rastetter

• Ryan Eatmon

• Sai Sneha

• Sam Kent

• Sandeep J

• Sebastian Muxel

• Sergio Prado

• sh0127.shin

• Shinu Chandran

• Siddharth Doshi

• Siva Balasubramanian

• Sudhir Dumbhare

• Sumanth Gavini

• Sundeep KOKKONDA

• Sunil Dora

• Tafil Avdyli

• Tan Siewert

• Taruntej Kanakamalla

• Tejas Kanfade

• Theo Gaige

• Thomas Perrot

• Thorsten Schmelzer

• Thune Tran

• Tim Orling

• Tobias Pistora

• Trevor Gamblin

• Trevor Woerner

• T, Sai Sireesha

• Tushar Darote

• Ulrich Ölmann

• Vijay Anusuri

• Viswanath Kraleti

• Vivek Puar

• Vyacheslav Yurkov

• Walter Werner Schneider

• Wang Mingyu

• Wei Deng

• Wei Gao

• Wei Zhang

• Wenwen Fu

• Wes Malone

• WXbet

• Xiaozhan Li

• Xiuzhuo Shang

• Yann Dirson

• Yash Shinde

• Yoann Congal

• Yogesh Tyagi

• Zheng Ruoqin

• Zhixiong Chi

• Zk47T

• Zoltán Böszörményi

Repositories / Downloads for Yocto-6.1