* [PATCH 2/4] release-note-6.0: update several section
2026-05-19 1:17 [PATCH 1/4] release-note-6.0: update downloads section chee.yang.lee
@ 2026-05-19 1:17 ` chee.yang.lee
2026-05-19 8:46 ` [docs] " Antonin Godard
2026-05-19 1:17 ` [PATCH 3/4] migration-guide: add release notes for 4.0.35 chee.yang.lee
` (2 subsequent siblings)
3 siblings, 1 reply; 6+ messages in thread
From: chee.yang.lee @ 2026-05-19 1:17 UTC (permalink / raw)
To: docs
From: Lee Chee Yang <chee.yang.lee@intel.com>
update several section to align with
https://downloads.yoctoproject.org/releases/yocto/yocto-6.0/RELEASENOTES
remove fixed known issue, add another on going known issue.
update for sbom-cve-check, spdx and DISTRO_FEATURES changes.
reorder new variable section.
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
---
.../migration-guides/release-notes-6.0.rst | 155 ++++++++++--------
1 file changed, 86 insertions(+), 69 deletions(-)
diff --git a/documentation/migration-guides/release-notes-6.0.rst b/documentation/migration-guides/release-notes-6.0.rst
index 00f7cfef2..b14dde377 100644
--- a/documentation/migration-guides/release-notes-6.0.rst
+++ b/documentation/migration-guides/release-notes-6.0.rst
@@ -38,67 +38,6 @@ New Features / Enhancements in |yocto-ver|
- Minimum Python version required on the host: 3.9.
-- New variables:
-
- - The :term:`OPENSSH_HOST_KEY_DIR` variable can be used to specify the
- directory where OpenSSH host keys are stored. The default value is
- ``/etc/ssh`` (:oecore_rev:`addd80ddfd892eb4513f323d369d210935416e05`)
-
- - The :term:`OPENSSH_HOST_KEY_DIR_READONLY_CONFIG` variable can be used to
- specify the directory where OpenSSH host keys are stored when the device
- uses a read-only filesystem. The default value is ``/var/run/ssh``
- (:oecore_rev:`addd80ddfd892eb4513f323d369d210935416e05`)
-
- - The :term:`SPDX_INCLUDE_KERNEL_CONFIG` can be set to "1" to export the Linux
- kernel configuration (``CONFIG_*`` parameters) into the SPDX document when
- using the :ref:`ref-classes-create-spdx` class
- (:oecore_rev:`228a968e7c47d811c06143279bdb0f9c5f374bef`)
-
- - The :term:`SPDX_INCLUDE_PACKAGECONFIG` variable can be set to "1" to
- export a recipe's :term:`PACKAGECONFIG` features (enabled/disabled) into
- the SPDX document when using the :ref:`ref-classes-create-spdx` class
- (:oecore_rev:`228a968e7c47d811c06143279bdb0f9c5f374bef`)
-
- - The :term:`SPDX_PACKAGE_URL` allows specifying a space-separated list of
- Package URLs (purls) for the software Package when using the
- :ref:`ref-classes-create-spdx` class
- (:oecore_rev:`874b2d301d3cac617b1028bc6ce91b1f916a6508`)
-
- - The :term:`SPDX_GIT_PURL_MAPPINGS` variable allows mapping domain names to
- PURLs (Package URLs) in SPDX documents
- (:oecore_rev:`9f1825e74d0f70917676201286b148aea84cc660`)
-
- - The :term:`SPDX_CONCLUDED_LICENSE` allows specifying the
- ``hasConcludedLicense`` object of individual SBOM packages when using the
- :ref:`ref-classes-create-spdx` class
- (:oecore_rev:`bb21c6a429a2ecec82a8afe7d79502291ccaef01`)
-
- - The :term:`FIT_MKIMAGE_EXTRA_OPTS` variable allows passing extra options
- to the ``mkimage`` command when creating a FIT image with the
- :ref:`ref-classes-kernel-fit-image` class
- (:oecore_rev:`d925d67061ef5d7a8abe15c715614650094d50c6`)
-
- - The :term:`FIT_CONF_MAPPINGS` variable allows mapping extra configurations
- to existing ones or rename an existing configuration in FIT images created
- with the :ref:`ref-classes-kernel-fit-image` class (:oecore_rev:`e30f809a50c2151e525424879383c02325a7ec9a`)
-
- - The :term:`UBOOT_CONFIG_FRAGMENTS` and :term:`UBOOT_FRAGMENTS` allow
- supplying additional configuration fragments to the existing U-Boot
- configuration. See the definition of the variables for more information,
- and the documentation of the :ref:`ref-classes-uboot-config` class
- (:oecore_rev:`9e96d3dedee47657657686310508e0aaee7f4e02`)
-
- - The :term:`IMAGE_EXTRA_PARTITION_FILES` allows specifying extra files from
- the deploy directory (:term:`DEPLOY_DIR_IMAGE`) to install in a WIC
- partition created with the ``extra_partition`` plugin
- (:oecore_rev:`e1526079d205dac6e3cff6d8e5cb37f68b631009`)
-
- - The :term:`FIT_LOADABLES`, :term:`FIT_LOADABLE_FILENAME`,
- :term:`FIT_LOADABLE_TYPE`, :term:`FIT_LOADABLE_ARCH`,
- :term:`FIT_LOADABLE_OS` and :term:`FIT_LOADABLE_LOADADDRESS` variables can
- be used to specify arbitrary ``loadables`` in a FIT image
- (:oecore_rev:`2535427d8de07f6e432d08cbdc046bdfd8788911`)
-
- Kernel-related changes:
- :ref:`ref-classes-kernel-fit-image`: Support arbitrary loadables
@@ -185,11 +124,78 @@ New Features / Enhancements in |yocto-ver|
- :ref:`ref-classes-sbom-cve-check-recipe`: Class for post-build CVE
analysis of recipes (using the recipe SBOM, meaning building the
software provided by the recipe is not needed), which uses the
- `sbom-cve-check <github.com/bootlin/sbom-cve-check>`__ tool internally
- (:oecore_rev:`e2518b1eaabef13c9f8d44b52b8ec9d4dd4ed916`)
+ `sbom-cve-check <github.com/bootlin/sbom-cve-check>`__ tool internally.
+ This also obsoletes the cve-check class.
+ (:oecore_rev:`e2518b1eaabef13c9f8d44b52b8ec9d4dd4ed916`,
+ :oecore_rev:`00de455f8d3aeca880129d23e8cfb7e246404699`)
+
+- New variables:
+
+ - The :term:`OPENSSH_HOST_KEY_DIR` variable can be used to specify the
+ directory where OpenSSH host keys are stored. The default value is
+ ``/etc/ssh`` (:oecore_rev:`addd80ddfd892eb4513f323d369d210935416e05`)
+
+ - The :term:`OPENSSH_HOST_KEY_DIR_READONLY_CONFIG` variable can be used to
+ specify the directory where OpenSSH host keys are stored when the device
+ uses a read-only filesystem. The default value is ``/var/run/ssh``
+ (:oecore_rev:`addd80ddfd892eb4513f323d369d210935416e05`)
+
+ - The :term:`SPDX_INCLUDE_KERNEL_CONFIG` can be set to "1" to export the Linux
+ kernel configuration (``CONFIG_*`` parameters) into the SPDX document when
+ using the :ref:`ref-classes-create-spdx` class
+ (:oecore_rev:`228a968e7c47d811c06143279bdb0f9c5f374bef`)
+
+ - The :term:`SPDX_INCLUDE_PACKAGECONFIG` variable can be set to "1" to
+ export a recipe's :term:`PACKAGECONFIG` features (enabled/disabled) into
+ the SPDX document when using the :ref:`ref-classes-create-spdx` class
+ (:oecore_rev:`228a968e7c47d811c06143279bdb0f9c5f374bef`)
+
+ - The :term:`SPDX_PACKAGE_URL` allows specifying a space-separated list of
+ Package URLs (purls) for the software Package when using the
+ :ref:`ref-classes-create-spdx` class
+ (:oecore_rev:`874b2d301d3cac617b1028bc6ce91b1f916a6508`)
+
+ - The :term:`SPDX_GIT_PURL_MAPPINGS` variable allows mapping domain names to
+ PURLs (Package URLs) in SPDX documents
+ (:oecore_rev:`9f1825e74d0f70917676201286b148aea84cc660`)
+
+ - The :term:`SPDX_CONCLUDED_LICENSE` allows specifying the
+ ``hasConcludedLicense`` object of individual SBOM packages when using the
+ :ref:`ref-classes-create-spdx` class
+ (:oecore_rev:`bb21c6a429a2ecec82a8afe7d79502291ccaef01`)
+
+ - The :term:`FIT_MKIMAGE_EXTRA_OPTS` variable allows passing extra options
+ to the ``mkimage`` command when creating a FIT image with the
+ :ref:`ref-classes-kernel-fit-image` class
+ (:oecore_rev:`d925d67061ef5d7a8abe15c715614650094d50c6`)
+
+ - The :term:`FIT_CONF_MAPPINGS` variable allows mapping extra configurations
+ to existing ones or rename an existing configuration in FIT images created
+ with the :ref:`ref-classes-kernel-fit-image` class (:oecore_rev:`e30f809a50c2151e525424879383c02325a7ec9a`)
+
+ - The :term:`UBOOT_CONFIG_FRAGMENTS` and :term:`UBOOT_FRAGMENTS` allow
+ supplying additional configuration fragments to the existing U-Boot
+ configuration. See the definition of the variables for more information,
+ and the documentation of the :ref:`ref-classes-uboot-config` class
+ (:oecore_rev:`9e96d3dedee47657657686310508e0aaee7f4e02`)
+
+ - The :term:`IMAGE_EXTRA_PARTITION_FILES` allows specifying extra files from
+ the deploy directory (:term:`DEPLOY_DIR_IMAGE`) to install in a WIC
+ partition created with the ``extra_partition`` plugin
+ (:oecore_rev:`e1526079d205dac6e3cff6d8e5cb37f68b631009`)
+
+ - The :term:`FIT_LOADABLES`, :term:`FIT_LOADABLE_FILENAME`,
+ :term:`FIT_LOADABLE_TYPE`, :term:`FIT_LOADABLE_ARCH`,
+ :term:`FIT_LOADABLE_OS` and :term:`FIT_LOADABLE_LOADADDRESS` variables can
+ be used to specify arbitrary ``loadables`` in a FIT image
+ (:oecore_rev:`2535427d8de07f6e432d08cbdc046bdfd8788911`)
- Global configuration changes:
+ - Changes in DISTRO_FEATURES default values and how DISTRO_FEATURES &
+ MACHINE_FEATURES are provided, see :doc:`/migration-guides/migration-6.0`
+ for more information.
+
- ``base-passwd``: Add a ``clock`` group as `systemd` version v258 introduces
this group to `enable applications like linuxptp to open clocks without
root privileges <https://github.com/systemd/systemd/commit/af96ccfc24bc4803078a46b4ef2cdeb5decdfbcd>`__
@@ -510,9 +516,8 @@ New Features / Enhancements in |yocto-ver|
- Add suport for package URLs (PURLs) through :term:`SPDX_PACKAGE_URL`
(:oecore_rev:`874b2d301d3cac617b1028bc6ce91b1f916a6508`)
- - ``create-spdx-2.2``: Add CVEs in :term:`CVE_CHECK_IGNORE`
- to the list of fixed CVEs in the output SBOM
- (:oecore_rev:`f8525224cb825b1aad2be240731eabafdde7612d`)
+ - Support only SPDX 3 and removed SPDX 2.2 support.
+ (:oecore_rev:`12abd0574c267bade0962ecb39d9e8da8c56842b`)
- The :ref:`ref-classes-create-spdx` class used to include `VEX
<https://cyclonedx.org/capabilities/vex/>`__ statements in the SPDX documents
@@ -757,9 +762,21 @@ New Features / Enhancements in |yocto-ver|
Known Issues in |yocto-ver|
---------------------------
-- A known bug is affecting :term:`build hosts <Build Host>` that have Intel
- Ultra 7 CPUs and breaks :term:`OpenEmbedded-Core (OE-Core)` tests that
- involve KVM. See bug :yocto_bug:`16074` for more information.
+Referencing an unset variable in DISTRO_FEATURES causes DISTRO_FEATURES_NATIVE
+and DISTRO_FEATURES_NATIVESDK to be set incorrectly. The leads to confusing
+errors, such as
+
+ - Nothing PROVIDES 'libseccomp-native'
+
+ - Required build target 'glibc' has no buildable providers.
+
+To resolve these errors, ensure that all variables used in DISTRO_FEATURES are
+set. Variables may be set to an empty string if not needed.
+
+A fix for this issue is in progress and should be included in Yocto
+Project 6.0.1. See :yocto_bugs:`Yocto bug #16275 </show_bug.cgi?id=16275>`
+for further details.
+
Recipe License changes in |yocto-ver|
-------------------------------------
--
2.37.3
^ permalink raw reply related [flat|nested] 6+ messages in thread* Re: [docs] [PATCH 2/4] release-note-6.0: update several section
2026-05-19 1:17 ` [PATCH 2/4] release-note-6.0: update several section chee.yang.lee
@ 2026-05-19 8:46 ` Antonin Godard
0 siblings, 0 replies; 6+ messages in thread
From: Antonin Godard @ 2026-05-19 8:46 UTC (permalink / raw)
To: chee.yang.lee, docs
Hi,
Merged with the following formatting/wording fixes:
diff --git a/documentation/migration-guides/release-notes-6.0.rst b/documentation/migration-guides/release-notes-6.0.rst
index e539ebf38..6f8801012 100644
--- a/documentation/migration-guides/release-notes-6.0.rst
+++ b/documentation/migration-guides/release-notes-6.0.rst
@@ -125,7 +125,7 @@ New Features / Enhancements in |yocto-ver|
analysis of recipes (using the recipe SBOM, meaning building the
software provided by the recipe is not needed), which uses the
`sbom-cve-check <github.com/bootlin/sbom-cve-check>`__ tool internally.
- This also obsoletes the cve-check class.
+ This also obsoletes the ``cve-check`` class.
(:oecore_rev:`e2518b1eaabef13c9f8d44b52b8ec9d4dd4ed916`,
:oecore_rev:`00de455f8d3aeca880129d23e8cfb7e246404699`)
@@ -192,9 +192,9 @@ New Features / Enhancements in |yocto-ver|
- Global configuration changes:
- - Changes in DISTRO_FEATURES default values and how DISTRO_FEATURES &
- MACHINE_FEATURES are provided, see :doc:`/migration-guides/migration-6.0`
- for more information.
+ - Changes in :term:`DISTRO_FEATURES` default values and how
+ :term:`DISTRO_FEATURES` and :term:`MACHINE_FEATURES` are provided, see
+ :doc:`/migration-guides/migration-6.0` for more information.
- ``base-passwd``: Add a ``clock`` group as `systemd` version v258 introduces
this group to `enable applications like linuxptp to open clocks without
@@ -762,21 +762,20 @@ New Features / Enhancements in |yocto-ver|
Known Issues in |yocto-ver|
---------------------------
-Referencing an unset variable in DISTRO_FEATURES causes DISTRO_FEATURES_NATIVE
-and DISTRO_FEATURES_NATIVESDK to be set incorrectly. The leads to confusing
-errors, such as
+Referencing an unset variable in :term:`DISTRO_FEATURES` causes
+:term:`DISTRO_FEATURES_NATIVE` and :term:`DISTRO_FEATURES_NATIVESDK` to be set
+incorrectly. The leads to confusing errors, such as:
- - Nothing PROVIDES 'libseccomp-native'
+- ``Nothing PROVIDES 'libseccomp-native'``
- - Required build target 'glibc' has no buildable providers.
+- ``Required build target 'glibc' has no buildable providers.``
-To resolve these errors, ensure that all variables used in DISTRO_FEATURES are
-set. Variables may be set to an empty string if not needed.
-
-A fix for this issue is in progress and should be included in Yocto
-Project 6.0.1. See :yocto_bugs:`Yocto bug #16275 </show_bug.cgi?id=16275>`
-for further details.
+To resolve these errors, ensure that all variables referenced in
+:term:`DISTRO_FEATURES` are set. Variables may be set to an empty string if not
+needed.
+A fix for this issue is in progress and should be included in Yocto Project
+6.0.1. See Yocto bug :yocto_bug:`16275` for further details.
Recipe License changes in |yocto-ver|
-------------------------------------
Thanks,
Antonin
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [PATCH 3/4] migration-guide: add release notes for 4.0.35
2026-05-19 1:17 [PATCH 1/4] release-note-6.0: update downloads section chee.yang.lee
2026-05-19 1:17 ` [PATCH 2/4] release-note-6.0: update several section chee.yang.lee
@ 2026-05-19 1:17 ` chee.yang.lee
2026-05-19 1:17 ` [PATCH 4/4] migration-guide: add release notes for 5.3.4 chee.yang.lee
2026-05-21 7:06 ` [PATCH 1/4] release-note-6.0: update downloads section Antonin Godard
3 siblings, 0 replies; 6+ messages in thread
From: chee.yang.lee @ 2026-05-19 1:17 UTC (permalink / raw)
To: docs
From: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
---
.../migration-guides/release-4.0.rst | 1 +
.../migration-guides/release-notes-4.0.35.rst | 198 ++++++++++++++++++
2 files changed, 199 insertions(+)
create mode 100644 documentation/migration-guides/release-notes-4.0.35.rst
diff --git a/documentation/migration-guides/release-4.0.rst b/documentation/migration-guides/release-4.0.rst
index daacd92ff..e0b9a8fb5 100644
--- a/documentation/migration-guides/release-4.0.rst
+++ b/documentation/migration-guides/release-4.0.rst
@@ -41,3 +41,4 @@ Release 4.0 (kirkstone)
release-notes-4.0.32
release-notes-4.0.33
release-notes-4.0.34
+ release-notes-4.0.35
diff --git a/documentation/migration-guides/release-notes-4.0.35.rst b/documentation/migration-guides/release-notes-4.0.35.rst
new file mode 100644
index 000000000..f8336d1e9
--- /dev/null
+++ b/documentation/migration-guides/release-notes-4.0.35.rst
@@ -0,0 +1,198 @@
+.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
+
+Release notes for Yocto-4.0.35 (Kirkstone)
+------------------------------------------
+
+Security Fixes in Yocto-4.0.35
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- alsa-lib: Fix :cve_nist:`2026-25068`
+- busybox: Fix :cve_nist:`2025-60876`
+- curl: Fix :cve_nist:`2025-14524`, :cve_nist:`2026-1965`, :cve_nist:`2026-3783` and
+ :cve_nist:`2026-3784`
+- ffmpeg: Fix :cve_nist:`2025-10256`
+- gdk-pixbuf: Fix :cve_nist:`2025-6199`
+- inetutils: Fix :cve_nist:`2026-28372`
+- libarchive: Fix :cve_nist:`2026-4111`
+- libpam: Fix :cve_nist:`2024-10963`
+- linux-yocto/5.15: Fix :cve_nist:`2025-40082`, :cve_nist:`2025-68358`, :cve_nist:`2025-71089`,
+ :cve_nist:`2025-71220`, :cve_nist:`2025-71222`, :cve_nist:`2025-71232`, :cve_nist:`2025-71233`,
+ :cve_nist:`2025-71235`, :cve_nist:`2025-71236`, :cve_nist:`2025-71237`, :cve_nist:`2025-71238`,
+ :cve_nist:`2026-23111`, :cve_nist:`2026-23112`, :cve_nist:`2026-23169`, :cve_nist:`2026-23190`,
+ :cve_nist:`2026-23193`, :cve_nist:`2026-23198`, :cve_nist:`2026-23202`, :cve_nist:`2026-23206`,
+ :cve_nist:`2026-23209`, :cve_nist:`2026-23216`, :cve_nist:`2026-23221`, :cve_nist:`2026-23222`,
+ :cve_nist:`2026-23228`, :cve_nist:`2026-23229`, :cve_nist:`2026-23231`, :cve_nist:`2026-23234`,
+ :cve_nist:`2026-23235`, :cve_nist:`2026-23236`, :cve_nist:`2026-23237` and :cve_nist:`2026-23238`
+- ncurses: Fix :cve_nist:`2025-69720`
+- python3: Fix :cve_nist:`2024-6923`, :cve_nist:`2025-15282`, :cve_nist:`2025-59375`,
+ :cve_nist:`2026-0865`, :cve_nist:`2026-24515` and :cve_nist:`2026-25210`
+- python3-pip: Fix :cve_nist:`2026-1703`
+- python3-pyopenssl: Fix :cve_nist:`2026-27448` and :cve_nist:`2026-27459`
+- sqlite3: Fix :cve_nist:`2025-70873`
+- tiff: Fix :cve_nist:`2025-61143` and :cve_nist:`2025-61144`
+- vim: Fix :cve_nist:`2026-25749`, :cve_nist:`2026-26269`, :cve_nist:`2026-28418`,
+ :cve_nist:`2026-28419` and :cve_nist:`2026-33412`
+
+
+Fixes in Yocto-4.0.35
+~~~~~~~~~~~~~~~~~~~~~
+
+- bitbake: tests/fetch: Avoid using git protocol in tests
+- build-appliance-image: Update to kirkstone head revision
+- contributor-guide/submit-changes.rst: Added missing word
+- create-pull-request: Keep commit hash to be pulled in cover email
+- createrepo-c: Fix createrepo-c-native build on GCC14 hosts (e.g. Fedora 41)
+- gtk+3: fix incompatible-pointer-types errors for native build on Fedora 41
+- libcomps: Fix libcomps-native build on GCC14 hosts (e.g. Fedora 41)
+- libpam: re-add missing libgen include
+- libtheora: set :term:`CVE_PRODUCT`
+- linux-yocto/5.15: update to v5.15.201
+- lsb.py: strip ' from os-release file
+- migration-guide: add release notes for 4.0.33 4.0.34
+- oeqa/manual: Default to https git protocol for YP/OE repos
+- oeqa/sdk: Default to https git protocol for YP/OE repos
+- oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos
+- overview-manual: escape wildcard in inline markup
+- poky.conf: Bump version for 4.0.35 release
+- python3: upgrade to 3.10.20
+- README.OE-Core: update contributor links and add kirkstone prefix
+- recipes: Default to https git protocol for YP/OE repos
+- recipetool: Recognise https://git. as git urls
+- ref-manual/system-requirements.rst: update end-of-life distros
+- scripts/install-buildtools: Update to 4.0.34
+- scripts: Default to https git protocol for YP/OE repos
+- selftest/scripts: Update old git protocol references
+- tcl: skip http11 tests
+- tiff: set status of CVE-2025-61145 as fixed by patch for :cve_nist:`2025-8961`
+- tzdata,tzcode-native: Upgrade to 2026a
+
+
+Known Issues in Yocto-4.0.35
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- N/A
+
+
+Contributors to Yocto-4.0.35
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- Aleksandar Nikolic
+- Antonin Godard
+- Bruce Ashfield
+- Fabien Thomas
+- Hitendra Prajapati
+- Jinfeng Wang
+- Ken Kurematsu
+- Kristiyan Chakarov
+- Lee Chee Yang
+- Martin Jansa
+- Paul Barker
+- Peter Marko
+- Richard Purdie
+- Ross Burton
+- Shaik Moin
+- Vijay Anusuri
+- Yanis BINARD
+- Yoann Congal
+
+Repositories / Downloads for Yocto-4.0.35
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+yocto-docs
+
+- Repository Location: :yocto_git:`/yocto-docs`
+- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.35 </yocto-docs/log/?h=yocto-4.0.35>`
+- Git Revision: :yocto_git:`ce6734c68649739c635675a133fa77edb9865028 </yocto-docs/commit/?id=ce6734c68649739c635675a133fa77edb9865028>`
+- Release Artefact: yocto-docs-ce6734c68649739c635675a133fa77edb9865028
+- sha: ddb6fac4d257f4f76836055cafad529729e99c293d3b8d3dabef926fad5e725f
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.35/yocto-docs-ce6734c68649739c635675a133fa77edb9865028.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.35/yocto-docs-ce6734c68649739c635675a133fa77edb9865028.tar.bz2
+
+poky
+
+- Repository Location: :yocto_git:`/poky`
+- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.35 </poky/log/?h=yocto-4.0.35>`
+- Git Revision: :yocto_git:`93431249a6260da7bd29ee3ca32145d89e5b8259 </poky/commit/?id=93431249a6260da7bd29ee3ca32145d89e5b8259>`
+- Release Artefact: poky-93431249a6260da7bd29ee3ca32145d89e5b8259
+- sha: a8e95213248c5400276611754f2c98b8d8972e166bdf41433c45fcdd2bf668cb
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.35/poky-93431249a6260da7bd29ee3ca32145d89e5b8259.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.35/poky-93431249a6260da7bd29ee3ca32145d89e5b8259.tar.bz2
+
+openembedded-core
+
+- Repository Location: :oe_git:`/openembedded-core`
+- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
+- Tag: :oe_git:`yocto-4.0.35 </openembedded-core/log/?h=yocto-4.0.35>`
+- Git Revision: :oe_git:`51259c7e933a2ac8ebc01604d6e65607b76b7b56 </openembedded-core/commit/?id=51259c7e933a2ac8ebc01604d6e65607b76b7b56>`
+- Release Artefact: oecore-51259c7e933a2ac8ebc01604d6e65607b76b7b56
+- sha: 2cd531e2a107849e7a452e71e41f22b42160979066e10d0661e97acfab125b1f
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.35/oecore-51259c7e933a2ac8ebc01604d6e65607b76b7b56.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.35/oecore-51259c7e933a2ac8ebc01604d6e65607b76b7b56.tar.bz2
+
+meta-yocto
+
+- Repository Location: :yocto_git:`/meta-yocto`
+- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.35 </meta-yocto/log/?h=yocto-4.0.35>`
+- Git Revision: :yocto_git:`34e3c9a19b8b955116109a2e9528966db3fced37 </meta-yocto/commit/?id=34e3c9a19b8b955116109a2e9528966db3fced37>`
+- Release Artefact: meta-yocto-34e3c9a19b8b955116109a2e9528966db3fced37
+- sha: 18da6dbb745d5e4e42a93527c36751778155e3762728b0b1020b890480402dde
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.35/meta-yocto-34e3c9a19b8b955116109a2e9528966db3fced37.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.35/meta-yocto-34e3c9a19b8b955116109a2e9528966db3fced37.tar.bz2
+
+meta-mingw
+
+- Repository Location: :yocto_git:`/meta-mingw`
+- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.35 </meta-mingw/log/?h=yocto-4.0.35>`
+- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
+- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
+- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.35/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.35/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
+
+meta-gplv2
+
+- Repository Location: :yocto_git:`/meta-gplv2`
+- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.35 </meta-gplv2/log/?h=yocto-4.0.35>`
+- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
+- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
+- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.35/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.35/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
+
+bitbake
+
+- Repository Location: :oe_git:`/bitbake`
+- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
+- Tag: :oe_git:`yocto-4.0.35 </bitbake/log/?h=yocto-4.0.35>`
+- Git Revision: :oe_git:`7fd0197fd5fedd23cc885b5e7e816d86a392fdf9 </bitbake/commit/?id=7fd0197fd5fedd23cc885b5e7e816d86a392fdf9>`
+- Release Artefact: bitbake-7fd0197fd5fedd23cc885b5e7e816d86a392fdf9
+- sha: 6c01ff2b4b0060ef3d6d3f1fc11690094b22865af4989946544d08d74b473ec9
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.35/bitbake-7fd0197fd5fedd23cc885b5e7e816d86a392fdf9.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.35/bitbake-7fd0197fd5fedd23cc885b5e7e816d86a392fdf9.tar.bz2
+
--
2.37.3
^ permalink raw reply related [flat|nested] 6+ messages in thread* [PATCH 4/4] migration-guide: add release notes for 5.3.4
2026-05-19 1:17 [PATCH 1/4] release-note-6.0: update downloads section chee.yang.lee
2026-05-19 1:17 ` [PATCH 2/4] release-note-6.0: update several section chee.yang.lee
2026-05-19 1:17 ` [PATCH 3/4] migration-guide: add release notes for 4.0.35 chee.yang.lee
@ 2026-05-19 1:17 ` chee.yang.lee
2026-05-21 7:06 ` [PATCH 1/4] release-note-6.0: update downloads section Antonin Godard
3 siblings, 0 replies; 6+ messages in thread
From: chee.yang.lee @ 2026-05-19 1:17 UTC (permalink / raw)
To: docs
From: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
---
.../migration-guides/release-5.3.rst | 1 +
.../migration-guides/release-notes-5.3.4.rst | 218 ++++++++++++++++++
2 files changed, 219 insertions(+)
create mode 100644 documentation/migration-guides/release-notes-5.3.4.rst
diff --git a/documentation/migration-guides/release-5.3.rst b/documentation/migration-guides/release-5.3.rst
index 4c2770e19..2df5c8cb9 100644
--- a/documentation/migration-guides/release-5.3.rst
+++ b/documentation/migration-guides/release-5.3.rst
@@ -10,3 +10,4 @@ Release 5.3 (whinlatter)
release-notes-5.3.1
release-notes-5.3.2
release-notes-5.3.3
+ release-notes-5.3.4
diff --git a/documentation/migration-guides/release-notes-5.3.4.rst b/documentation/migration-guides/release-notes-5.3.4.rst
new file mode 100644
index 000000000..fd14e7707
--- /dev/null
+++ b/documentation/migration-guides/release-notes-5.3.4.rst
@@ -0,0 +1,218 @@
+.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
+
+Release notes for Yocto-5.3.4 (Whinlatter)
+------------------------------------------
+
+Security Fixes in Yocto-5.3.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- binutils: Fix :cve_nist:`2025-69644`, :cve_nist:`2025-69647`, :cve_nist:`2025-69648`,
+ :cve_nist:`2025-69649` and :cve_nist:`2025-69652`
+- binutils: Ignore :cve_nist:`2025-69650` and :cve_nist:`2025-69651`
+- curl: Fix :cve_nist:`2026-1965`, :cve_nist:`2026-3783`, :cve_nist:`2026-3784` and
+ :cve_nist:`2026-3805`
+- expat: Fix :cve_nist:`2026-32776`, :cve_nist:`2026-32777` and :cve_nist:`2026-32778`
+- glibc: Fix :cve_nist:`2026-4437` and :cve_nist:`2026-4438`
+- go: Fix :cve_nist:`2026-27140`, :cve_nist:`2026-27143`, :cve_nist:`2026-27144`,
+ :cve_nist:`2026-32280`, :cve_nist:`2026-32281`, :cve_nist:`2026-32282`, :cve_nist:`2026-32283`,
+ :cve_nist:`2026-32288` and :cve_nist:`2026-32289`
+- inetutils: Fix :cve_nist:`2026-32746`
+- libpng: Fix :cve_nist:`2026-33416` and :cve_nist:`2026-33636`
+- libsoup: fix :cve_nist:`2025-32049` and :cve_nist:`2026-1539`
+- nfs-utils: Fix :cve_nist:`2025-12801`
+- openssl: Fix :cve_nist:`2026-2673`, :cve_nist:`2026-28387`, :cve_nist:`2026-28388`,
+ :cve_nist:`2026-28389`, :cve_nist:`2026-28390`, :cve_nist:`2026-31789` and :cve_nist:`2026-31790`
+- python3-pyopenssl: Fix :cve_nist:`2026-27448` and :cve_nist:`2026-27459`
+- python3: Fix :cve_nist:`2025-15282`
+- sqlite3: Fix :cve_nist:`2025-70873`
+- vim: Fix :cve_nist:`2026-25749`, :cve_nist:`2026-26269`, :cve_nist:`2026-28418`,
+ :cve_nist:`2026-28419` and :cve_nist:`2026-33412`
+
+
+Fixes in Yocto-5.3.4
+~~~~~~~~~~~~~~~~~~~~
+
+bitbake
+^^^^^^^
+- runqueue.py: make sure we use bb multiprocessing
+- tests/fetch: Avoid using git protocol in tests
+
+meta-yocto
+^^^^^^^^^^
+- poky.conf: Bump version for 5.3.4 release
+- poky: Fix CentOS Stream 9 distro name
+
+openembedded-core
+^^^^^^^^^^^^^^^^^
+- archiver: Don't try to preserve all attributes when copying files
+- barebox/barebox-tools: upgrade to 2025.09.3
+- binutils: Fix build with GLIBC 2.43 on the host
+- binutils: Upgrade to 2.45.1 release
+- build-appliance-image: switch :term:`SRC_URI` to https protocol
+- build-appliance-image: Update to whinlatter head revisions
+- ca-certificates: upgrade to 20260223
+- ccache: upgrade to 4.12.3
+- dtc: backport fix for build with glibc-2.43
+- gcc: backport a fix for building with gcc-16
+- gettext: backport gnulib changes to fix build with glibc-2.43 on host
+- glibc: stable 2.42 branch updates (a56a2943d2c...)
+- go: upgrade to 1.25.9
+- libarchive: upgrade to 3.8.6
+- libpng: upgrade to 1.6.56
+- libsoup: upgrade to 3.6.6
+- libxcrypt: avoid discarded-qualifiers build failure with glibc 2.43
+- libxcrypt: Fix build wrt C23 support
+- libxcrypt: Use configure knob to disable warnings as errors
+- libxmlb: upgrade to 0.3.25
+- license.py: Drop visit_Str from SeenVisitor in selftest
+- m4: backport 3 gnulib changes to fix build with glibc-2.43 on host
+- meta/files/layers.example.json: switch to https clone URIs
+- oe-setup-build: :term:`TEMPLATECONF` were not applied correctly
+- oeqa/sdk: Default to https git protocol for YP/OE repos
+- oeqa/selftest/devtool: add vulkan feature check for test needing it
+- oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos
+- oeqa/selftest: add wayland feature check for tests needing it
+- openssl: upgrade to 3.5.6
+- ovmf: backport a fix for build with gcc-16
+- pseudo: Add fix for glibc 2.43
+- ptest-runner: Upgrade to 2.5.1
+- ptest-runner: Use git tag in :term:`SRC_URI`
+- python3-pip: drop unused Windows distlib launcher templates
+- python3-setuptools: drop Windows launcher executables on non-mingw builds
+- python3: Fix test under ptest-runner 2.5.1
+- python3: upgrade to 3.13.12
+- recipetool: Recognise https://git. as git urls
+- report-error.bbclass: replace 'codecs.open()' with 'open()'
+- scripts/install-buildtools: Update to 5.3.3
+- scripts: Default to https git protocol for YP/OE repos
+- selftest/gdbserver: replace shutil.unpack_archive with tarfile extract
+- selftest/minidebuginfo: extract files from tar archive using tarfile module
+- selftest/scripts: Update old git protocol references
+- spirv-tools: backport a fix for building with gcc-16
+- systemd: backport fix to build with glibc-2.43 on host
+- tzdata/tzcode-native: upgrade to 2026a
+- util-linux: backport fix to build with glibc-2.43 on host
+- virglrenderer: Fix build with glibc 2.43+
+- yocto-uninative: Update to 5.1 for glibc 2.43
+
+yocto-docs
+^^^^^^^^^^
+- contributor-guide/submit-changes.rst: Added missing word
+- dev-manual/new-recipe.rst: rework Unpacking Code section
+- migration-guide: add release notes for 4.0.33 4.0.34 5.0.16 5.0.17 5.3.2 5.3.3
+- sphinx-static/theme_overrides.css: switch to a fixed width documentation
+
+
+Known Issues in Yocto-5.3.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- N/A
+
+
+Contributors to Yocto-5.3.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Thanks to the following people who contributed to this release:
+
+- Adarsh Jagadish Kamini
+- Alexander Kanavin
+- Andrej Kozemcak
+- Anil Dongare
+- Ankur Tyagi
+- Antonin Godard
+- Changqing Li
+- Deepak Rathore
+- Hemanth Kumar M D
+- Hitendra Prajapati
+- Jinfeng Wang
+- Khem Raj
+- Krupal Ka Patel
+- Lee Chee Yang
+- Logan Gallois
+- Martin Jansa
+- Michael Halstead
+- Paul Barker
+- Peter Marko
+- Richard Purdie
+- Sunil Dora
+- Trevor Gamblin
+- Vijay Anusuri
+- Wang Mingyu
+- Yanis BINARD
+- Yoann Congal
+- Zoltán Böszörményi
+
+
+Repositories / Downloads for Yocto-5.3.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+yocto-docs
+
+- Repository Location: :yocto_git:`/yocto-docs`
+- Branch: :yocto_git:`whinlatter </yocto-docs/log/?h=whinlatter>`
+- Tag: :yocto_git:`yocto-5.3.4 </yocto-docs/log/?h=yocto-5.3.4>`
+- Git Revision: :yocto_git:`10818445a22c524de0934901547cf676256c2b9d </yocto-docs/commit/?id=10818445a22c524de0934901547cf676256c2b9d>`
+- Release Artefact: yocto-docs-10818445a22c524de0934901547cf676256c2b9d
+- sha: f9e0b155730ba23b83febd40b6e5d6e22c624d083cccb569cfff4a83ef3fde43
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.4/yocto-docs-10818445a22c524de0934901547cf676256c2b9d.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.4/yocto-docs-10818445a22c524de0934901547cf676256c2b9d.tar.bz2
+
+openembedded-core
+
+- Repository Location: :oe_git:`/openembedded-core`
+- Branch: :oe_git:`whinlatter </openembedded-core/log/?h=whinlatter>`
+- Tag: :oe_git:`yocto-5.3.4 </openembedded-core/log/?h=yocto-5.3.4>`
+- Git Revision: :oe_git:`8751ec83421192fc0f8495fb95798f9eb7be77a0 </openembedded-core/commit/?id=8751ec83421192fc0f8495fb95798f9eb7be77a0>`
+- Release Artefact: oecore-8751ec83421192fc0f8495fb95798f9eb7be77a0
+- sha: d587dc39a046a1a48f4cd33f5e9dd79b7d0948d71a9151fcf5542641893be229
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.4/oecore-8751ec83421192fc0f8495fb95798f9eb7be77a0.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.4/oecore-8751ec83421192fc0f8495fb95798f9eb7be77a0.tar.bz2
+
+meta-yocto
+
+- Repository Location: :yocto_git:`/meta-yocto`
+- Branch: :yocto_git:`whinlatter </meta-yocto/log/?h=whinlatter>`
+- Tag: :yocto_git:`yocto-5.3.4 </meta-yocto/log/?h=yocto-5.3.4>`
+- Git Revision: :yocto_git:`3f2e6b6fadfa542f0fe3738375a2f9fcbd4c1f6e </meta-yocto/commit/?id=3f2e6b6fadfa542f0fe3738375a2f9fcbd4c1f6e>`
+- Release Artefact: meta-yocto-3f2e6b6fadfa542f0fe3738375a2f9fcbd4c1f6e
+- sha: b942dc726a631b52284d4fe62dda4b97d880fea758a7090a8590cca964865e30
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.4/meta-yocto-3f2e6b6fadfa542f0fe3738375a2f9fcbd4c1f6e.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.4/meta-yocto-3f2e6b6fadfa542f0fe3738375a2f9fcbd4c1f6e.tar.bz2
+
+meta-mingw
+
+- Repository Location: :yocto_git:`/meta-mingw`
+- Branch: :yocto_git:`whinlatter </meta-mingw/log/?h=whinlatter>`
+- Tag: :yocto_git:`yocto-5.3.4 </meta-mingw/log/?h=yocto-5.3.4>`
+- Git Revision: :yocto_git:`00323de97e397d4f6734ef2191806616989f5e10 </meta-mingw/commit/?id=00323de97e397d4f6734ef2191806616989f5e10>`
+- Release Artefact: meta-mingw-00323de97e397d4f6734ef2191806616989f5e10
+- sha: c9a70539b12c0642596fde6a2766d4a6a8fec8b2a366453fb6473363127a1c77
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.4/meta-mingw-00323de97e397d4f6734ef2191806616989f5e10.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.4/meta-mingw-00323de97e397d4f6734ef2191806616989f5e10.tar.bz2
+
+bitbake
+
+- Repository Location: :oe_git:`/bitbake`
+- Branch: :oe_git:`2.16 </bitbake/log/?h=2.16>`
+- Tag: :oe_git:`yocto-5.3.4 </bitbake/log/?h=yocto-5.3.4>`
+- Git Revision: :oe_git:`713fbbdb9ecc195ceb2216a2345e0d79dbee2135 </bitbake/commit/?id=713fbbdb9ecc195ceb2216a2345e0d79dbee2135>`
+- Release Artefact: bitbake-713fbbdb9ecc195ceb2216a2345e0d79dbee2135
+- sha: 1d0f14e8bc71a39de4207aeeb329cb1d2541089c07e954131bf37a3d1b66b823
+- Download Locations:
+
+ https://downloads.yoctoproject.org/releases/yocto/yocto-5.3.4/bitbake-713fbbdb9ecc195ceb2216a2345e0d79dbee2135.tar.bz2
+
+ https://mirrors.edge.kernel.org/yocto/yocto/yocto-5.3.4/bitbake-713fbbdb9ecc195ceb2216a2345e0d79dbee2135.tar.bz2
+
--
2.37.3
^ permalink raw reply related [flat|nested] 6+ messages in thread* Re: [PATCH 1/4] release-note-6.0: update downloads section
2026-05-19 1:17 [PATCH 1/4] release-note-6.0: update downloads section chee.yang.lee
` (2 preceding siblings ...)
2026-05-19 1:17 ` [PATCH 4/4] migration-guide: add release notes for 5.3.4 chee.yang.lee
@ 2026-05-21 7:06 ` Antonin Godard
3 siblings, 0 replies; 6+ messages in thread
From: Antonin Godard @ 2026-05-21 7:06 UTC (permalink / raw)
To: docs, chee.yang.lee; +Cc: Antonin Godard
Applied, thanks!
[1/4] release-note-6.0: update downloads section
commit: 4d51b6dd45369f49ae79d8d61e5e7febc8a544d2
[2/4] release-note-6.0: update several section
commit: 4b6e843942a81e2423e958da7683d5e4a794924d
[3/4] migration-guide: add release notes for 4.0.35
commit: 39ef57628b4fb262857d8bf55abe3e6fe7ff01f1
[4/4] migration-guide: add release notes for 5.3.4
commit: c7166b77da6fa3772e1e8dda0ef4a4d7137c0aef
^ permalink raw reply [flat|nested] 6+ messages in thread