[PATCH 00/11] Final release note updates for 5.2

[PATCH 00/11] Final release note updates for 5.2

[Antonin Godard]

This series makes the final updates before the 5.2 release, which
includes adding the recipe upgrades, license changes, as well as cleaning
up a few empty sections.

It also updates the release notes / migration guide and overall
documentation with regards to the latest changes on Poky.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
Antonin Godard (11):
      migration-guides/release-notes-5.2.rst: add the list of contributors
      migration-guides/release-notes-5.2.rst: add recipe upgrades
      migration-guides/release-notes-5.2.rst: add LICENSE recipe changes
      migration-guides/release-notes-5.2.rst: add security fixes
      migration-guides/release-notes-5.2.rst: add an entry for addfragments
      migration-guides/migration-5.2.rst: final update for 5.2
      ref-manual/system-requirements.rst: update list of supported distributions
      poky.yaml.in: bump minimum required Python version to 3.9
      ref-manual/variables.rst: document the GRUB_MKIMAGE_OPTS variable
      ref-manual/variables.rst: document the SPDX_PACKAGE_VERSION variable
      migration-guides/{migration,release-note}-5.2: update for 5.2 release

 documentation/migration-guides/migration-5.2.rst   |   39 +-
 .../migration-guides/release-notes-5.2.rst         | 1516 +++++++++++++++++++-
 documentation/poky.yaml.in                         |    2 +-
 documentation/ref-manual/system-requirements.rst   |   10 +-
 documentation/ref-manual/variables.rst             |   10 +
 5 files changed, 1567 insertions(+), 10 deletions(-)
---
base-commit: ea1636013722c12e72ca115240c8ce533e05ece2
change-id: 20250327-release-note-5-2-updates-2-8fb5d45989bd

Best regards,
-- 
Antonin Godard <antonin.godard@bootlin.com>

[PATCH 01/11] migration-guides/release-notes-5.2.rst: add the list of contributors

[Antonin Godard]

Obtained by running:

  git log --format=%an yocto-5.1..walnascar | sort | uniq

On the Poky repository.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 .../migration-guides/release-notes-5.2.rst         | 193 +++++++++++++++++++++
 1 file changed, 193 insertions(+)

diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
index a8e6e2b6e..923d3809a 100644
--- a/documentation/migration-guides/release-notes-5.2.rst
+++ b/documentation/migration-guides/release-notes-5.2.rst
@@ -715,5 +715,198 @@ Recipe Upgrades in |yocto-ver|
 Contributors to |yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
+Thanks to the following people who contributed to this release:
+
+-  Aditya Tayade
+-  Adrian Freihofer
+-  Alban Bedel
+-  Aleksandar Nikolic
+-  Alessio Cascone
+-  Alexander Hirsch
+-  Alexander Kanavin
+-  Alexander Sverdlin
+-  Alexander van Gessel
+-  Alexander Yurkov
+-  Alexandre Marques
+-  Alexis Cellier
+-  Alex Kiernan
+-  Andrej Valek
+-  Angelo Ribeiro
+-  Antonin Godard
+-  Archana Polampalli
+-  Artur Kowalski
+-  Awais Belal
+-  Balaji Pothunoori
+-  Bartosz Golaszewski
+-  Bastian Germann
+-  Bastian Krause
+-  Bastien JAUNY
+-  BELHADJ SALEM Talel
+-  Benjamin Bara
+-  Benjamin Grossschartner
+-  Benjamin Szőke
+-  Bin Lan
+-  Bruce Ashfield
+-  Changhyeok Bae
+-  Changqing Li
+-  Chen Qi
+-  Chris Laplante
+-  Christian Lindeberg
+-  Christian Taedcke
+-  Christos Gavros
+-  Claus Stovgaard
+-  Clayton Casciato
+-  Colin McAllister
+-  Daniel Ammann
+-  Daniel McGregor
+-  Dan McGregor
+-  Deepesh Varatharajan
+-  Deepthi Hemraj
+-  Denis OSTERLAND-HEIM
+-  Denys Dmytriyenko
+-  Derek Straka
+-  Divya Chellam
+-  Dmitry Baryshkov
+-  Enrico Jörns
+-  Enrico Scholz
+-  Eric Meyers
+-  Esben Haabendal
+-  Etienne Cordonnier
+-  Fabio Berton
+-  Fabio Estevam
+-  Gaël PORTAY
+-  Georgi, Tom
+-  Guðni Már Gilbert
+-  Guénaël Muller
+-  Harish Sadineni
+-  Haseeb Ashraf
+-  Hiago De Franco
+-  Hongxu Jia
+-  Igor Opaniuk
+-  Jagadeesh Krishnanjanappa
+-  Jamin Lin
+-  Jason Schonberg
+-  Jean-Pierre Geslin
+-  Jermain Horsman
+-  Jesse Riemens
+-  Jiaying Song
+-  Jinfeng Wang
+-  João Henrique Ferreira de Freitas
+-  Joerg Schmidt
+-  Jonas Gorski
+-  Jon Mason
+-  Jörg Sommer
+-  Jose Quaresma
+-  Joshua Watt
+-  Julien Stephan
+-  Justin Bronder
+-  Kai Kang
+-  Katariina Lounento
+-  Katawann
+-  Kevin Hao
+-  Khem Raj
+-  Koen Kooi
+-  Lee Chee Yang
+-  Lei Maohui
+-  Lei YU
+-  Leon Anavi
+-  Louis Rannou
+-  Maik Otto
+-  Makarios Christakis
+-  Marc Ferland
+-  Marco Felsch
+-  Marek Vasut
+-  Mark Hatle
+-  Markus Volk
+-  Marta Rybczynska
+-  Martin Jansa
+-  Mathieu Dubois-Briand
+-  Matthias Schiffer
+-  Maxin John
+-  Michael Estner
+-  Michael Halstead
+-  Michael Nazzareno Trimarchi
+-  Michael Opdenacker
+-  Michelle Lin
+-  Mikko Rapeli
+-  Ming Liu
+-  Moritz Haase
+-  Nick Owens
+-  Nicolas Dechesne
+-  Nikolai Merinov
+-  Niko Mauno
+-  Ninette Adhikari
+-  Ola x Nilsson
+-  Oleksandr Hnatiuk
+-  Oliver Kästner
+-  Omri Sarig
+-  Pascal Eberhard
+-  Patrik Nordvall
+-  Paul Barker
+-  Pavel Zhukov
+-  Pedro Ferreira
+-  Peter Bergin
+-  Peter Delevoryas
+-  Peter Kjellerstedt
+-  Peter Marko
+-  Peter Tatrai
+-  Philip Lorenz
+-  Priyal Doshi
+-  Purushottam Choudhary
+-  Quentin Schulz
+-  Ralph Siemsen
+-  Randy MacLeod
+-  Ranjitsinh Rathod
+-  Rasmus Villemoes
+-  Regis Dargent
+-  Ricardo Salveti
+-  Richard Purdie
+-  Robert Yang
+-  Rohini Sangam
+-  Roland Hieber
+-  Ross Burton
+-  Ryan Eatmon
+-  Savvas Etairidis
+-  Sean Nyekjaer
+-  Sebastian Zenker
+-  Sergei Zhmylev
+-  Shunsuke Tokumoto
+-  Sid-Ali
+-  Simon A. Eugster
+-  Simone Weiß
+-  Slawomir Stepien
+-  Sofiane HAMAM
+-  Stefan Gloor
+-  Stefan Herbrechtsmeier
+-  Stefan Koch
+-  Stefan Mueller-Klieser
+-  Steve Sakoman
+-  Sunil Dora
+-  Sven Kalmbach
+-  Talel BELHAJSALEM
+-  Thomas Perrot
+-  Thomas Roos
+-  Tim Orling
+-  Tom Hochstein
+-  Trevor Gamblin
+-  Ulrich Ölmann
+-  Valeria Petrov
+-  Victor J. Hansen
+-  Victor Kamensky
+-  Vijay Anusuri
+-  Vince Chang
+-  Vivek Puar
+-  Vyacheslav Yurkov
+-  Walter Schweizer
+-  Wang Mingyu
+-  Weisser, Pascal
+-  Xiangyu Chen
+-  Xiaotian Wu
+-  Yash Shinde
+-  Yi Zhao
+-  Yoann Congal
+-  Yogita Urade
+-  Zoltán Böszörményi
+
 Repositories / Downloads for Yocto-|yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-- 
2.47.0

[PATCH 02/11] migration-guides/release-notes-5.2.rst: add recipe upgrades

[Antonin Godard]

Extracted from layers.openembedded.org branch comparison tool.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 .../migration-guides/release-notes-5.2.rst         | 1170 ++++++++++++++++++++
 1 file changed, 1170 insertions(+)

diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
index 923d3809a..081100870 100644
--- a/documentation/migration-guides/release-notes-5.2.rst
+++ b/documentation/migration-guides/release-notes-5.2.rst
@@ -712,6 +712,1176 @@ Security Fixes in |yocto-ver|
 Recipe Upgrades in |yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
+.. list-table::
+   :widths: 20 40 40
+   :header-rows: 1
+
+   * - Recipe
+     - Previous version
+     - New version
+   * - ``adwaita-icon-theme``
+     - 46.2
+     - 48.0
+   * - ``alsa-lib``
+     - 1.2.12
+     - 1.2.13
+   * - ``alsa-ucm-conf``
+     - 1.2.12
+     - 1.2.13
+   * - ``alsa-utils``
+     - 1.2.12
+     - 1.2.13
+   * - ``appstream``
+     - 1.0.3
+     - 1.0.4
+   * - ``at-spi2-core``
+     - 2.52.0
+     - 2.56.0
+   * - ``autoconf-archive``
+     - 2023.02.20
+     - 2024.10.16
+   * - ``babeltrace2``
+     - 2.0.6
+     - 2.1.0
+   * - ``base-passwd``
+     - 3.6.4
+     - 3.6.6
+   * - ``bash``
+     - 5.2.32
+     - 5.2.37
+   * - ``bash-completion``
+     - 2.14.0
+     - 2.16.0
+   * - ``bc``
+     - 1.07.1
+     - 1.08.1
+   * - ``bind``
+     - 9.20.1
+     - 9.20.6
+   * - ``binutils``
+     - 2.43.1
+     - 2.44
+   * - ``binutils-cross``
+     - 2.43.1
+     - 2.44
+   * - ``binutils-cross-canadian``
+     - 2.43.1
+     - 2.44
+   * - ``binutils-crosssdk``
+     - 2.43.1
+     - 2.44
+   * - ``binutils-testsuite``
+     - 2.43.1
+     - 2.44
+   * - ``bluez5``
+     - 5.78
+     - 5.79
+   * - ``boost``
+     - 1.86.0
+     - 1.87.0
+   * - ``boost-build-native``
+     - 1.86.0
+     - 1.87.0
+   * - ``btrfs-tools``
+     - 6.10.1
+     - 6.13
+   * - ``build-appliance-image``
+     - 15.0.0 (6a5ba188b79e…)
+     - 15.0.0 (2fe7f46e1779…)
+   * - ``busybox``
+     - 1.36.1
+     - 1.37.0
+   * - ``busybox-inittab``
+     - 1.36.1
+     - 1.37.0
+   * - ``ca-certificates``
+     - 20240203
+     - 20241223
+   * - ``cairo``
+     - 1.18.2
+     - 1.18.4
+   * - ``cargo``
+     - 1.79.0
+     - 1.84.1
+   * - ``ccache``
+     - 4.10.2
+     - 4.11
+   * - ``chrpath``
+     - 0.16
+     - 0.18
+   * - ``cmake``
+     - 3.30.2
+     - 3.31.6
+   * - ``cmake-native``
+     - 3.30.2
+     - 3.31.6
+   * - ``connman``
+     - 1.42
+     - 1.43
+   * - ``coreutils``
+     - 9.5
+     - 9.6
+   * - ``cracklib``
+     - 2.10.2
+     - 2.10.3
+   * - ``createrepo-c``
+     - 1.1.4
+     - 1.2.0
+   * - ``cross-localedef-native``
+     - 2.40+git
+     - 2.41+git
+   * - ``cups``
+     - 2.4.10
+     - 2.4.11
+   * - ``curl``
+     - 8.9.1
+     - 8.12.1
+   * - ``dbus``
+     - 1.14.10
+     - 1.16.2
+   * - ``dbus-glib``
+     - 0.112
+     - 0.114
+   * - ``debianutils``
+     - 5.20
+     - 5.21
+   * - ``debugedit``
+     - 5.0
+     - 5.1
+   * - ``desktop-file-utils``
+     - 0.27
+     - 0.28
+   * - ``dhcpcd``
+     - 10.0.10
+     - 10.2.2
+   * - ``diffoscope``
+     - 277
+     - 289
+   * - ``diffstat``
+     - 1.66
+     - 1.67
+   * - ``diffutils``
+     - 3.10
+     - 3.11
+   * - ``dnf``
+     - 4.21.1
+     - 4.22.0
+   * - ``dropbear``
+     - 2024.85
+     - 2024.86
+   * - ``dtc``
+     - 1.7.0
+     - 1.7.2
+   * - ``ed``
+     - 1.20.2
+     - 1.21
+   * - ``efivar``
+     - 39+39+git
+     - 39
+   * - ``elfutils``
+     - 0.191
+     - 0.192
+   * - ``ell``
+     - 0.68
+     - 0.74
+   * - ``epiphany``
+     - 46.3
+     - 48.0
+   * - ``erofs-utils``
+     - 1.8.1
+     - 1.8.5
+   * - ``ethtool``
+     - 6.10
+     - 6.11
+   * - ``expat``
+     - 2.6.4
+     - 2.7.0
+   * - ``ffmpeg``
+     - 7.0.2
+     - 7.1.1
+   * - ``file``
+     - 5.45
+     - 5.46
+   * - ``fmt``
+     - 11.0.2
+     - 11.1.4
+   * - ``fribidi``
+     - 1.0.15
+     - 1.0.16
+   * - ``gawk``
+     - 5.3.0
+     - 5.3.1
+   * - ``gcr``
+     - 4.3.0
+     - 4.3.1
+   * - ``gdb``
+     - 15.1
+     - 16.2
+   * - ``gdb-cross``
+     - 15.1
+     - 16.2
+   * - ``gdb-cross-canadian``
+     - 15.1
+     - 16.2
+   * - ``gettext``
+     - 0.22.5
+     - 0.23.1
+   * - ``gettext-minimal-native``
+     - 0.22.5
+     - 0.23.1
+   * - ``ghostscript``
+     - 10.04.0
+     - 10.05.0
+   * - ``gi-docgen``
+     - 2024.1
+     - 2025.3
+   * - ``git``
+     - 2.46.1
+     - 2.49.0
+   * - ``glib-2``
+     - .0 2.80.4
+     - 2.84.0
+   * - ``glib-2``
+     - .0-initial 2.80.4
+     - 2.84.0
+   * - ``glibc``
+     - 2.40+git
+     - 2.41+git
+   * - ``glibc-locale``
+     - 2.40+git
+     - 2.41+git
+   * - ``glibc-mtrace``
+     - 2.40+git
+     - 2.41+git
+   * - ``glibc-scripts``
+     - 2.40+git
+     - 2.41+git
+   * - ``glibc-testsuite``
+     - 2.40+git
+     - 2.41+git
+   * - ``glibc-y2038-tests``
+     - 2.40+git
+     - 2.41+git
+   * - ``glslang``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``gnu-efi``
+     - 3.0.18
+     - 4.0.0
+   * - ``gnupg``
+     - 2.5.0
+     - 2.5.5
+   * - ``gnutls``
+     - 3.8.6
+     - 3.8.9
+   * - ``go``
+     - 1.22.12
+     - 1.24.1
+   * - ``go-binary-native``
+     - 1.22.12
+     - 1.24.1
+   * - ``go-cross-canadian``
+     - 1.22.12
+     - 1.24.1
+   * - ``go-cross-core2-32``
+     - 1.22.12
+     - 1.24.1
+   * - ``go-crosssdk``
+     - 1.22.12
+     - 1.24.1
+   * - ``go-helloworld``
+     - 0.1 (39e772fc2670…)
+     - 0.1 (d7b0ac127859…)
+   * - ``go-runtime``
+     - 1.22.12
+     - 1.24.1
+   * - ``gobject-introspection``
+     - 1.80.1
+     - 1.84.0
+   * - ``gpgme``
+     - 1.23.2
+     - 1.24.2
+   * - ``gsettings-desktop-schemas``
+     - 46.1
+     - 48.0
+   * - ``gst-devtools``
+     - 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-libav 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-plugins-bad 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-plugins-base 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-plugins-good 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-plugins-ugly 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-python 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-rtsp-server 1.24.10
+     - 1.24.12
+   * - ``gstreamer1``
+     - .0-vaapi 1.24.10
+     - 1.24.12
+   * - ``gtk4``
+     - 4.14.5
+     - 4.18.1
+   * - ``harfbuzz``
+     - 9.0.0
+     - 10.4.0
+   * - ``hwlatdetect``
+     - 2.7
+     - 2.8
+   * - ``i2c-tools``
+     - 4.3
+     - 4.4
+   * - ``icu``
+     - 75-1
+     - 76-1
+   * - ``ifupdown``
+     - 0.8.43
+     - 0.8.44
+   * - ``igt-gpu-tools``
+     - 1.28
+     - 1.30
+   * - ``inetutils``
+     - 2.5
+     - 2.6
+   * - ``init-system-helpers``
+     - 1.66
+     - 1.68
+   * - ``iproute2``
+     - 6.10.0
+     - 6.13.0
+   * - ``iptables``
+     - 1.8.10
+     - 1.8.11
+   * - ``iputils``
+     - 20240117
+     - 20240905
+   * - ``iso-codes``
+     - 4.16.0
+     - 4.17.0
+   * - ``json-c``
+     - 0.17
+     - 0.18
+   * - ``json-glib``
+     - 1.8.0
+     - 1.10.6
+   * - ``kbd``
+     - 2.6.4
+     - 2.7.1
+   * - ``kern-tools-native``
+     - 0.3+git (7160ebe8b865…)
+     - 0.3+git (bfca22a52ec5…)
+   * - ``kexec-tools``
+     - 2.0.29
+     - 2.0.30
+   * - ``kmod``
+     - 33
+     - 34.1
+   * - ``kmscube``
+     - 0.0.1+git (b2f97f53e01e…)
+     - 0.0.1+git (311eaaaa473d…)
+   * - ``less``
+     - 661
+     - 668
+   * - ``libadwaita``
+     - 1.5.3
+     - 1.7.0
+   * - ``libarchive``
+     - 3.7.4
+     - 3.7.8
+   * - ``libassuan``
+     - 3.0.1
+     - 3.0.2
+   * - ``libcap``
+     - 2.70
+     - 2.75
+   * - ``libdnf``
+     - 0.73.3
+     - 0.73.4
+   * - ``libdrm``
+     - 2.4.123
+     - 2.4.124
+   * - ``libedit``
+     - 20240808-3.1
+     - 20250104-3.1
+   * - ``libexif``
+     - 0.6.24
+     - 0.6.25
+   * - ``libffi``
+     - 3.4.6
+     - 3.4.7
+   * - ``libgit2``
+     - 1.8.1
+     - 1.9.0
+   * - ``libgpg-error``
+     - 1.50
+     - 1.51
+   * - ``libical``
+     - 3.0.18
+     - 3.0.20
+   * - ``libice``
+     - 1.1.1
+     - 1.1.2
+   * - ``libidn2``
+     - 2.3.7
+     - 2.3.8
+   * - ``libinput``
+     - 1.26.1
+     - 1.27.1
+   * - ``libjitterentropy``
+     - 3.5.0
+     - 3.6.2
+   * - ``libmatchbox``
+     - 1.12
+     - 1.13
+   * - ``libnl``
+     - 3.10.0
+     - 3.11.0
+   * - ``libnotify``
+     - 0.8.3
+     - 0.8.4
+   * - ``libpam``
+     - 1.6.1
+     - 1.7.0
+   * - ``libpcre2``
+     - 10.44
+     - 10.45
+   * - ``libpipeline``
+     - 1.5.7
+     - 1.5.8
+   * - ``libpng``
+     - 1.6.43
+     - 1.6.47
+   * - ``libportal``
+     - 0.7.1
+     - 0.9.1
+   * - ``libproxy``
+     - 0.5.8
+     - 0.5.9
+   * - ``librepo``
+     - 1.18.1
+     - 1.19.0
+   * - ``librsvg``
+     - 2.58.2
+     - 2.59.2
+   * - ``libsdl2``
+     - 2.30.7
+     - 2.32.2
+   * - ``libseccomp``
+     - 2.5.5
+     - 2.6.0
+   * - ``libsecret``
+     - 0.21.4
+     - 0.21.6
+   * - ``libslirp``
+     - 4.8.0
+     - 4.9.0
+   * - ``libsm``
+     - 1.2.4
+     - 1.2.6
+   * - ``libsolv``
+     - 0.7.30
+     - 0.7.31
+   * - ``libsoup``
+     - 3.6.0
+     - 3.6.4
+   * - ``libssh2``
+     - 1.11.0
+     - 1.11.1
+   * - ``libstd-rs``
+     - 1.79.0
+     - 1.84.1
+   * - ``libtest-warnings-perl``
+     - 0.033
+     - 0.038
+   * - ``libtirpc``
+     - 1.3.5
+     - 1.3.6
+   * - ``libtool``
+     - 2.5.2
+     - 2.5.4
+   * - ``libtool-cross``
+     - 2.5.2
+     - 2.5.4
+   * - ``libtool-native``
+     - 2.5.2
+     - 2.5.4
+   * - ``libtraceevent``
+     - 1.8.3
+     - 1.8.4
+   * - ``libtry-tiny-perl``
+     - 0.31
+     - 0.32
+   * - ``libubootenv``
+     - 0.3.5
+     - 0.3.6
+   * - ``libunistring``
+     - 1.2
+     - 1.3
+   * - ``liburcu``
+     - 0.14.1
+     - 0.15.1
+   * - ``libuv``
+     - 1.48.0
+     - 1.50.0
+   * - ``libwebp``
+     - 1.4.0
+     - 1.5.0
+   * - ``libwpe``
+     - 1.16.0
+     - 1.16.2
+   * - ``libx11``
+     - 1.8.10
+     - 1.8.12
+   * - ``libxau``
+     - 1.0.11
+     - 1.0.12
+   * - ``libxcrypt``
+     - 4.4.36
+     - 4.4.38
+   * - ``libxcrypt-compat``
+     - 4.4.36
+     - 4.4.38
+   * - ``libxcursor``
+     - 1.2.2
+     - 1.2.3
+   * - ``libxcvt``
+     - 0.1.2
+     - 0.1.3
+   * - ``libxi``
+     - 1.8.1
+     - 1.8.2
+   * - ``libxkbcommon``
+     - 1.7.0
+     - 1.8.1
+   * - ``libxmlb``
+     - 0.3.19
+     - 0.3.22
+   * - ``libxrender``
+     - 0.9.11
+     - 0.9.12
+   * - ``libxshmfence``
+     - 1.3.2
+     - 1.3.3
+   * - ``libxslt``
+     - 1.1.42
+     - 1.1.43
+   * - ``libxt``
+     - 1.3.0
+     - 1.3.1
+   * - ``libxv``
+     - 1.0.12
+     - 1.0.13
+   * - ``libxxf86vm``
+     - 1.1.5
+     - 1.1.6
+   * - ``lighttpd``
+     - 1.4.76
+     - 1.4.77
+   * - ``linux-firmware``
+     - 20240909
+     - 20250311
+   * - ``linux-libc-headers``
+     - 6.10
+     - 6.12
+   * - ``linux-yocto``
+     - 6.6.75+git, 6.10.14+git
+     - 6.12.19+git
+   * - ``linux-yocto-dev``
+     - 6.11+git
+     - 6.14+git
+   * - ``linux-yocto-rt``
+     - 6.6.75+git, 6.10.14+git
+     - 6.12.19+git
+   * - ``linux-yocto-tiny``
+     - 6.6.75+git, 6.10.14+git
+     - 6.12.19+git
+   * - ``llvm``
+     - 18.1.8
+     - 20.1.0
+   * - ``log4cplus``
+     - 2.1.1
+     - 2.1.2
+   * - ``lsof``
+     - 4.99.3
+     - 4.99.4
+   * - ``ltp``
+     - 20240524
+     - 20250130
+   * - ``lttng-modules``
+     - 2.13.14
+     - 2.13.17
+   * - ``lzip``
+     - 1.24.1
+     - 1.25
+   * - ``lzlib``
+     - 1.14
+     - 1.15
+   * - ``man-db``
+     - 2.12.1
+     - 2.13.0
+   * - ``man-pages``
+     - 6.9.1
+     - 6.13
+   * - ``mc``
+     - 4.8.32
+     - 4.8.33
+   * - ``mesa-demos``
+     - 8.5.0
+     - 9.0.0
+   * - ``meson``
+     - 1.5.1
+     - 1.7.0
+   * - ``minicom``
+     - 2.9
+     - 2.10
+   * - ``mmc-utils``
+     - 0.1+git (123fd8b2ac39…)
+     - 0.1+git (2aef4cd9a84d…)
+   * - ``mpg123``
+     - 1.32.7
+     - 1.32.10
+   * - ``msmtp``
+     - 1.8.26
+     - 1.8.28
+   * - ``mtd-utils``
+     - 2.2.0
+     - 2.3.0
+   * - ``mtools``
+     - 4.0.44
+     - 4.0.48
+   * - ``musl``
+     - 1.2.5+git (dd1e63c3638d…)
+     - 1.2.5+git (c47ad25ea3b4…)
+   * - ``nativesdk-libtool``
+     - 2.5.2
+     - 2.5.4
+   * - ``netbase``
+     - 6.4
+     - 6.5
+   * - ``nettle``
+     - 3.10
+     - 3.10.1
+   * - ``nfs-utils``
+     - 2.6.4
+     - 2.8.2
+   * - ``nghttp2``
+     - 1.63.0
+     - 1.65.0
+   * - ``npth``
+     - 1.7
+     - 1.8
+   * - ``numactl``
+     - 2.0.18
+     - 2.0.19
+   * - ``ofono``
+     - 2.10
+     - 2.15
+   * - ``opensbi``
+     - 1.5.1
+     - 1.6
+   * - ``openssh``
+     - 9.8p1
+     - 9.9p2
+   * - ``openssl``
+     - 3.3.1
+     - 3.4.1
+   * - ``orc``
+     - 0.4.40
+     - 0.4.41
+   * - ``ovmf``
+     - edk2-stable202402
+     - edk2-stable202411
+   * - ``pango``
+     - 1.54.0
+     - 1.56.2
+   * - ``piglit``
+     - 1.0+gitr (c11c9374c144…)
+     - 1.0+gitr (fc8179d31904…)
+   * - ``pixman``
+     - 0.42.2
+     - 0.44.2
+   * - ``pkgconf``
+     - 2.3.0
+     - 2.4.3
+   * - ``ppp``
+     - 2.5.0
+     - 2.5.2
+   * - ``procps``
+     - 4.0.4
+     - 4.0.5
+   * - ``psplash``
+     - 0.1+git (ecc191375669…)
+     - 0.1+git (1f64c654129f…)
+   * - ``ptest-runner``
+     - 2.4.5+git
+     - 2.4.5.1
+   * - ``puzzles``
+     - 0.0+git (1c1899ee1c4e…)
+     - 0.0+git (7da464122232…)
+   * - ``python3``
+     - 3.12.9
+     - 3.13.2
+   * - ``python3-attrs``
+     - 24.2.0
+     - 25.3.0
+   * - ``python3-babel``
+     - 2.16.0
+     - 2.17.0
+   * - ``python3-bcrypt``
+     - 4.2.0
+     - 4.3.0
+   * - ``python3-beartype``
+     - 0.18.5
+     - 0.20.0
+   * - ``python3-build``
+     - 1.2.1
+     - 1.2.2
+   * - ``python3-certifi``
+     - 2024.8.30
+     - 2025.1.31
+   * - ``python3-cffi``
+     - 1.17.0
+     - 1.17.1
+   * - ``python3-click``
+     - 8.1.7
+     - 8.1.8
+   * - ``python3-cryptography``
+     - 42.0.8
+     - 44.0.2
+   * - ``python3-cryptography-vectors``
+     - 42.0.8
+     - 44.0.2
+   * - ``python3-cython``
+     - 3.0.11
+     - 3.0.12
+   * - ``python3-dbus``
+     - 1.3.2
+     - 1.4.0
+   * - ``python3-dbusmock``
+     - 0.32.1
+     - 0.33.0
+   * - ``python3-dtc``
+     - 1.7.0
+     - 1.7.2
+   * - ``python3-dtschema``
+     - 2024.5
+     - 2025.2
+   * - ``python3-flit-core``
+     - 3.9.0
+     - 3.11.0
+   * - ``python3-gitdb``
+     - 4.0.11
+     - 4.0.12
+   * - ``python3-hatchling``
+     - 1.25.0
+     - 1.27.0
+   * - ``python3-hypothesis``
+     - 6.111.2
+     - 6.129.2
+   * - ``python3-idna``
+     - 3.8
+     - 3.10
+   * - ``python3-jinja2``
+     - 3.1.4
+     - 3.1.6
+   * - ``python3-jsonschema-specifications``
+     - 2023.12.1
+     - 2024.10.1
+   * - ``python3-license-expression``
+     - 30.3.1
+     - 30.4.1
+   * - ``python3-lxml``
+     - 5.3.0
+     - 5.3.1
+   * - ``python3-mako``
+     - 1.3.5
+     - 1.3.9
+   * - ``python3-markdown``
+     - 3.6
+     - 3.7
+   * - ``python3-markupsafe``
+     - 2.1.5
+     - 3.0.2
+   * - ``python3-maturin``
+     - 1.7.1
+     - 1.8.3
+   * - ``python3-meson-python``
+     - 0.16.0
+     - 0.17.1
+   * - ``python3-more-itertools``
+     - 10.4.0
+     - 10.6.0
+   * - ``python3-numpy``
+     - 1.26.4
+     - 2.2.3
+   * - ``python3-packaging``
+     - 24.1
+     - 24.2
+   * - ``python3-pip``
+     - 24.2
+     - 25.0.1
+   * - ``python3-poetry-core``
+     - 1.9.0
+     - 2.1.1
+   * - ``python3-psutil``
+     - 6.0.0
+     - 7.0.0
+   * - ``python3-pyasn1``
+     - 0.6.0
+     - 0.6.1
+   * - ``python3-pycairo``
+     - 1.26.1
+     - 1.27.0
+   * - ``python3-pycryptodome``
+     - 3.20.0
+     - 3.22.0
+   * - ``python3-pycryptodomex``
+     - 3.20.0
+     - 3.22.0
+   * - ``python3-pyelftools``
+     - 0.31
+     - 0.32
+   * - ``python3-pygments``
+     - 2.18.0
+     - 2.19.1
+   * - ``python3-pygobject``
+     - 3.48.2
+     - 3.52.2
+   * - ``python3-pyopenssl``
+     - 24.2.1
+     - 25.0.0
+   * - ``python3-pyparsing``
+     - 3.1.4
+     - 3.2.1
+   * - ``python3-pyproject-hooks``
+     - 1.0.0
+     - 1.2.0
+   * - ``python3-pyproject-metadata``
+     - 0.8.0
+     - 0.9.1
+   * - ``python3-pytest``
+     - 8.3.2
+     - 8.3.5
+   * - ``python3-pytest-subtests``
+     - 0.13.1
+     - 0.14.1
+   * - ``python3-pytz``
+     - 2024.1
+     - 2025.1
+   * - ``python3-rdflib``
+     - 7.0.0
+     - 7.1.3
+   * - ``python3-referencing``
+     - 0.35.1
+     - 0.36.2
+   * - ``python3-rpds-py``
+     - 0.20.0
+     - 0.22.3
+   * - ``python3-ruamel-yaml``
+     - 0.18.6
+     - 0.18.10
+   * - ``python3-scons``
+     - 4.8.0
+     - 4.9.0
+   * - ``python3-setuptools``
+     - 72.1.0
+     - 76.0.0
+   * - ``python3-setuptools-rust``
+     - 1.10.1
+     - 1.11.0
+   * - ``python3-setuptools-scm``
+     - 8.1.0
+     - 8.2.0
+   * - ``python3-six``
+     - 1.16.0
+     - 1.17.0
+   * - ``python3-spdx-tools``
+     - 0.8.2
+     - 0.8.3
+   * - ``python3-sphinx``
+     - 8.0.2
+     - 8.2.1
+   * - ``python3-sphinx-rtd-theme``
+     - 2.0.0
+     - 3.0.2
+   * - ``python3-trove-classifiers``
+     - 2024.7.2
+     - 2025.3.13.13
+   * - ``python3-typogrify``
+     - 2.0.7
+     - 2.1.0
+   * - ``python3-urllib3``
+     - 2.2.2
+     - 2.3.0
+   * - ``python3-websockets``
+     - 13.0.1
+     - 15.0.1
+   * - ``python3-wheel``
+     - 0.44.0
+     - 0.45.1
+   * - ``python3-xmltodict``
+     - 0.13.0
+     - 0.14.2
+   * - ``python3-yamllint``
+     - 1.35.1
+     - 1.36.0
+   * - ``python3-zipp``
+     - 3.20.1
+     - 3.21.0
+   * - ``qemu``
+     - 9.0.2
+     - 9.2.0
+   * - ``qemu-native``
+     - 9.0.2
+     - 9.2.0
+   * - ``qemu-system-native``
+     - 9.0.2
+     - 9.2.0
+   * - ``re2c``
+     - 3.1
+     - 4.1
+   * - ``repo``
+     - 2.46
+     - 2.52
+   * - ``rpm``
+     - 4.19.1.1
+     - 4.20.0
+   * - ``rsync``
+     - 3.3.0
+     - 3.4.1
+   * - ``rt-tests``
+     - 2.7
+     - 2.8
+   * - ``ruby``
+     - 3.3.4
+     - 3.4.2
+   * - ``rust``
+     - 1.79.0
+     - 1.84.1
+   * - ``rust-cross-canadian``
+     - 1.79.0
+     - 1.84.1
+   * - ``rust-llvm``
+     - 1.79.0
+     - 1.84.1
+   * - ``screen``
+     - 4.9.1
+     - 5.0.0
+   * - ``seatd``
+     - 0.8.0
+     - 0.9.1
+   * - ``shaderc``
+     - 2024.1
+     - 2024.3
+   * - ``shadow``
+     - 4.16.0
+     - 4.17.3
+   * - ``socat``
+     - 1.8.0.0
+     - 1.8.0.3
+   * - ``spirv-headers``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``spirv-tools``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``sqlite3``
+     - 3.46.1
+     - 3.48.0
+   * - ``strace``
+     - 6.10
+     - 6.12
+   * - ``stress-ng``
+     - 0.18.02
+     - 0.18.11
+   * - ``subversion``
+     - 1.14.3
+     - 1.14.5
+   * - ``sudo``
+     - 1.9.15p5
+     - 1.9.16p2
+   * - ``swig``
+     - 4.2.1
+     - 4.3.0
+   * - ``sysklogd``
+     - 2.6.1
+     - 2.7.1
+   * - ``sysstat``
+     - 12.7.6
+     - 12.7.7
+   * - ``systemd``
+     - 256.5
+     - 257.4
+   * - ``systemd-boot``
+     - 256.5
+     - 257.4
+   * - ``systemd-boot-native``
+     - 256.5
+     - 257.4
+   * - ``systemd-systemctl-native``
+     - 1.0
+     - 257.4
+   * - ``systemtap``
+     - 5.1
+     - 5.2
+   * - ``systemtap-native``
+     - 5.1
+     - 5.2
+   * - ``sysvinit``
+     - 3.04
+     - 3.14
+   * - ``tcl``
+     - 8.6.14
+     - 9.0.1
+   * - ``texinfo``
+     - 7.1
+     - 7.2
+   * - ``tiff``
+     - 4.6.0
+     - 4.7.0
+   * - ``ttyrun``
+     - 2.34.0
+     - 2.37.0
+   * - ``u-boot``
+     - 2024.07
+     - 2025.01
+   * - ``u-boot-tools``
+     - 2024.07
+     - 2025.01
+   * - ``usbutils``
+     - 017
+     - 018
+   * - ``utfcpp``
+     - 4.0.5
+     - 4.0.6
+   * - ``util-linux``
+     - 2.40.2
+     - 2.40.4
+   * - ``util-linux-libuuid``
+     - 2.40.2
+     - 2.40.4
+   * - ``util-macros``
+     - 1.20.1
+     - 1.20.2
+   * - ``vala``
+     - 0.56.17
+     - 0.56.18
+   * - ``valgrind``
+     - 3.23.0
+     - 3.24.0
+   * - ``vim``
+     - 9.1.1043
+     - 9.1.1198
+   * - ``vim-tiny``
+     - 9.1.1043
+     - 9.1.1198
+   * - ``virglrenderer``
+     - 1.0.1
+     - 1.1.0
+   * - ``vte``
+     - 0.76.3
+     - 0.78.2
+   * - ``vulkan-headers``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``vulkan-loader``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``vulkan-samples``
+     - git (fdce530c0295…)
+     - git (8547ce1022a1…)
+   * - ``vulkan-tools``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``vulkan-utility-libraries``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``vulkan-validation-layers``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``vulkan-volk``
+     - 1.3.290.0
+     - 1.4.309.0
+   * - ``wayland-protocols``
+     - 1.37
+     - 1.41
+   * - ``webkitgtk``
+     - 2.44.3
+     - 2.48.0
+   * - ``weston``
+     - 13.0.3
+     - 14.0.1
+   * - ``wget``
+     - 1.24.5
+     - 1.25.0
+   * - ``wireless-regdb``
+     - 2024.10.07
+     - 2025.02.20
+   * - ``wpebackend-fdo``
+     - 1.14.2
+     - 1.16.0
+   * - ``xauth``
+     - 1.1.3
+     - 1.1.4
+   * - ``xcb-util-cursor``
+     - 0.1.4
+     - 0.1.5
+   * - ``xf86-input-evdev``
+     - 2.10.6
+     - 2.11.0
+   * - ``xf86-input-libinput``
+     - 1.4.0
+     - 1.5.0
+   * - ``xf86-input-synaptics``
+     - 1.9.2
+     - 1.10.0
+   * - ``xf86-video-fbdev``
+     - 0.5.0
+     - 0.5.1
+   * - ``xhost``
+     - 1.0.9
+     - 1.0.10
+   * - ``xinit``
+     - 1.4.2
+     - 1.4.4
+   * - ``xkeyboard-config``
+     - 2.42
+     - 2.44
+   * - ``xprop``
+     - 1.2.7
+     - 1.2.8
+   * - ``xrandr``
+     - 1.5.2
+     - 1.5.3
+   * - ``xtrans``
+     - 1.5.0
+     - 1.6.0
+   * - ``xxhash``
+     - 0.8.2
+     - 0.8.3
+   * - ``xz``
+     - 5.6.2
+     - 5.6.4
+   * - ``zstd``
+     - 1.5.6
+     - 1.5.
+       7
+
 Contributors to |yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

-- 
2.47.0

[PATCH 03/11] migration-guides/release-notes-5.2.rst: add LICENSE recipe changes

[Antonin Godard]

Document LICENSE changes between the 5.1 and 5.2 release.
Extracted for commits message containing the "License-Update:" field in
Poky, between tag yocto-5.1 and walnascar.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 .../migration-guides/release-notes-5.2.rst         | 58 +++++++++++++++++++++-
 1 file changed, 57 insertions(+), 1 deletion(-)

diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
index 081100870..1e05631d9 100644
--- a/documentation/migration-guides/release-notes-5.2.rst
+++ b/documentation/migration-guides/release-notes-5.2.rst
@@ -704,7 +704,63 @@ Known Issues in |yocto-ver|
 Recipe License changes in |yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-The following corrections have been made to the :term:`LICENSE` values set by recipes:
+The following changes have been made to the :term:`LICENSE` values set by recipes:
+
+.. list-table::
+   :widths: 20 40 40
+   :header-rows: 1
+
+   * - Recipe
+     - Previous value
+     - New value
+   * - ``babeltrace2``
+     - ``MIT & GPL-2.0-only & LGPL-2.1-only & BSD-2-Clause``
+     - ``MIT & GPL-2.0-only & LGPL-2.1-only & BSD-2-Clause & BSD-4-Clause & GPL-3.0-or-later & CC-BY-SA-4.0 & PSF-2.0``
+   * - ``busybox``
+     - ``GPL-2.0-only & bzip2-1.0.4``
+     - ``GPL-2.0-only & bzip2-1.0.6``
+   * - ``dbus-glib``
+     - ``AFL-2.1 | GPL-2.0-or-later``
+     - ``(AFL-2.1 & LGPL-2.0-or-later & MIT) | (GPL-2.0-or-later & LGPL-2.0-or-later & MIT)``
+   * - ``diffstat``
+     - ``MIT``
+     - ``X11``
+   * - ``docbook-xsl-stylesheets``
+     - ``XSL``
+     - ``DocBook-XML``
+   * - ``font-util``
+     - ``Unicode-TOU & BSD-4-Clause & BSD-2-Clause``
+     - ``Unicode-TOU & MIT & X11 & BSD-2-Clause``
+   * - ``json-glib``
+     - ``LGPL-2.1-only``
+     - ``LGPL-2.1-or-later``
+   * - ``libbsd``
+     - ``BSD-3-Clause & BSD-4-Clause & ISC & PD``
+     - ``BSD-3-Clause & ISC & PD``
+   * - ``libxfont2``
+     - ``MIT & MIT & BSD-4-Clause & BSD-2-Clause``
+     - ``MIT & MIT & BSD-4-Clause-UC & BSD-2-Clause``
+   * - ``libxkbcommon``
+     - ``MIT & MIT``
+     - ``MIT & MIT-open-group & HPND & HPND-sell-variant & X11``
+   * - ``man-pages``
+     - ``GPL-2.0-or-later & GPL-2.0-only & GPL-1.0-or-later & BSD-2-Clause & BSD-3-Clause & BSD-4-Clause & MIT``
+     - ``GPL-2.0-or-later & GPL-2.0-only & GPL-1.0-or-later & BSD-2-Clause & BSD-3-Clause & BSD-4-Clause-UC & MIT``
+   * - ``ppp``
+     - ``BSD-3-Clause & BSD-3-Clause-Attribution & GPL-2.0-or-later & LGPL-2.0-or-later & PD & RSA-MD & MIT``
+     - ``BSD-2-Clause & GPL-2.0-or-later & LGPL-2.0-or-later & PD & RSA-MD & MIT``
+   * - ``tcf-agent``
+     - ``EPL-1.0 | EDL-1.0``
+     - ``EPL-1.0 | BSD-3-Clause``
+   * - ``unfs3``
+     - ``unfs3``
+     - ``BSD-3-Clause``
+   * - ``usbutils``
+     - ``GPL-2.0-or-later & (GPL-2.0-only | GPL-3.0-only)``
+     - ``GPL-2.0-or-later & (GPL-2.0-only | GPL-3.0-only) & CC0-1.0 & LGPL-2.1-or-later & MIT``
+   * - ``util-linux``
+     - ``GPL-1.0-or-later & GPL-2.0-only & GPL-2.0-or-later & LGPL-2.1-or-later & BSD-2-Clause & BSD-3-Clause & BSD-4-Clause & MIT``
+     - ``GPL-1.0-or-later & GPL-2.0-only & GPL-2.0-or-later & LGPL-2.1-or-later & BSD-2-Clause & BSD-3-Clause & BSD-4-Clause-UC & MIT``
 
 Security Fixes in |yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-- 
2.47.0

[PATCH 04/11] migration-guides/release-notes-5.2.rst: add security fixes

[Antonin Godard]

Add security fixes by going through the log between yocto-5.1 and
walnascar branch tip on Poky.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 .../migration-guides/release-notes-5.2.rst         | 67 ++++++++++++++++++++++
 1 file changed, 67 insertions(+)

diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
index 1e05631d9..d583f3e9d 100644
--- a/documentation/migration-guides/release-notes-5.2.rst
+++ b/documentation/migration-guides/release-notes-5.2.rst
@@ -765,6 +765,73 @@ The following changes have been made to the :term:`LICENSE` values set by recipe
 Security Fixes in |yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
+The following CVEs have been fixed:
+
+.. list-table::
+   :widths: 30 70
+   :header-rows: 1
+
+   * - Recipe
+     - CVE IDs
+   * - ``barebox``
+     - :cve_nist:`2025-26721`, :cve_nist:`2025-26722`, :cve_nist:`2025-26723`, :cve_nist:`2025-26724`, :cve_nist:`2025-26725`
+   * - ``binutils``
+     - :cve_nist:`2024-53589`, :cve_nist:`2025-1153`
+   * - ``curl``
+     - :cve_nist:`2024-8096`, :cve_nist:`2024-9681`, :cve_nist:`2024-11053`, :cve_nist:`2025-0167`, :cve_nist:`2025-0665`, :cve_nist:`2025-0725`
+   * - ``expat``
+     - :cve_nist:`2024-50602`, :cve_nist:`2024-8176`
+   * - ``ghostscript``
+     - :cve_nist:`2024-46951`, :cve_nist:`2024-46952`, :cve_nist:`2024-46953`, :cve_nist:`2024-46954`, :cve_nist:`2024-46955`, :cve_nist:`2024-46956`
+   * - ``gnutls``
+     - :cve_nist:`2024-12243`
+   * - ``go``
+     - :cve_nist:`2024-34155`, :cve_nist:`2024-34156`, :cve_nist:`2024-34158`, :cve_nist:`2024-45336`, :cve_nist:`2024-45341`, :cve_nist:`2025-22866`, :cve_nist:`2025-22870`
+   * - ``grub``
+     - :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-56737`, :cve_nist:`2024-45780`, :cve_nist:`2024-45783`, :cve_nist:`2025-0624`, :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2025-0622`, :cve_nist:`2024-45776`, :cve_nist:`2024-45777`, :cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, :cve_nist:`2025-0678`, :cve_nist:`2025-1125`
+   * - ``libarchive``
+     - :cve_nist:`2024-57970`, :cve_nist:`2025-25724`, :cve_nist:`2025-1632`
+   * - ``libcap``
+     - :cve_nist:`2025-1390`
+   * - ``libsndfile1``
+     - :cve_nist:`2024-50612`
+   * - ``libssh2``
+     - :cve_nist:`2023-48795`
+   * - ``libtasn1``
+     - :cve_nist:`2024-12133`
+   * - ``libxml2``
+     - :cve_nist:`2025-24928`, :cve_nist:`2024-56171`
+   * - ``ofono``
+     - :cve_nist:`2024-7539`, :cve_nist:`2024-7540`, :cve_nist:`2024-7541`, :cve_nist:`2024-7542`
+   * - ``omvf``
+     - :cve_nist:`2023-45236`, :cve_nist:`2023-45237`, :cve_nist:`2024-25742`
+   * - ``openssl``
+     - :cve_nist:`2024-9143`, :cve_nist:`2024-12797`, :cve_nist:`2024-13176`
+   * - ``orc``
+     - :cve_nist:`2024-40897`
+   * - ``python3``
+     - :cve_nist:`2025-0938`, :cve_nist:`2024-12254`
+   * - ``qemu``
+     - :cve_nist:`2024-6505`
+   * - ``rsync``
+     - :cve_nist:`2024-12084`, :cve_nist:`2024-12085`, :cve_nist:`2024-12086`, :cve_nist:`2024-12087`, :cve_nist:`2024-12088`, :cve_nist:`2024-12747`
+   * - ``ruby``
+     - :cve_nist:`2024-41123`, :cve_nist:`2024-41946`
+   * - ``rust``
+     - :cve_nist:`2024-43402`
+   * - ``tiff``
+     - :cve_nist:`2023-52356`, :cve_nist:`2023-6228`, :cve_nist:`2023-6277`
+   * - ``vim``
+     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`, :cve_nist:`2025-26603`, :cve_nist:`2025-1215`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`
+   * - ``webkitgtk``
+     - :cve_nist:`2025-24143`, :cve_nist:`2025-24150`, :cve_nist:`2025-24158`, :cve_nist:`2025-24162`
+   * - ``wpa-supplicant``
+     - :cve_nist:`2024-5290`
+   * - ``xserver-xorg``
+     - :cve_nist:`2024-9632`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600`, :cve_nist:`2025-26601`
+   * - ``xwayland``
+     - :cve_nist:`2024-9632`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600`, :cve_nist:`2025-26601`
+
 Recipe Upgrades in |yocto-ver|
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

-- 
2.47.0

Re: [docs] [PATCH 04/11] migration-guides/release-notes-5.2.rst: add security fixes

[Takayasu Ito]

Hi all.

* CVEs that have been fixed but are not on the list

< +   * -  ``gstreamer1.0``
< +     - :cve_nist:`2024-47606`
< +   * -  ``gstreamer1.0-plugins-base``
< +     - :cve_nist:`2024-47538`, :cve_nist:`2024-47541`, :cve_nist:`2024-47542`,  :cve_nist:`2024-47600`, 
:cve_nist:`2024-47607`, :cve_nist:`2024-47615`, :cve_nist:`2024-47835`
< +   * -  ``gstreamer1.0-plugins-good``
< +     - :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, :cve_nist:`2024-47540`, :cve_nist:`2024-47543`, 
:cve_nist:`2024-47544`, :cve_nist:`2024-47545`, :cve_nist:`2024-47546`, :cve_nist:`2024-47596`, :cve_nist:`2024-47597`, 
:cve_nist:`2024-47598`, :cve_nist:`2024-47599`, :cve_nist:`2024-47601`, :cve_nist:`2024-47602`, :cve_nist:`2024-47603`, 
:cve_nist:`2024-47606`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775`, :cve_nist:`2024-47776`, 
:cve_nist:`2024-47777`, :cve_nist:`2024-47778`, :cve_nist:`2024-47834`
see https://gstreamer.freedesktop.org/security/

< +   * - ``openssh``
< +     - :cve_nist:`2025-26465`, :cve_nist:`2025-26466`
see https://www.openssh.com/txt/release-9.9p2

< +   * - ``socat``
< +     - :cve_nist:`2024-54661`
see http://www.dest-unreach.org/socat/

* CVEs already fixed in previous releases

 > +   * - ``libssh2``
 > +     - :cve_nist:`2023-48795`

The patch for CVE-2023-28795, which is no longer needed due to libssh2 upgrading to 1.11.1, was committed on 2024/01/24 and has 
already been fixed at the time of the scarthgap release, so we do not consider it necessary to post it to this list of fixes.
see: 
https://git.yoctoproject.org/poky/commit/meta/recipes-support/libssh2/libssh2?h=walnascar&id=3adac25f899054b7d1d8c14458a1a4cd310abbd7


* CVE numbers that should be changed in ascending order

 > +   * - ``expat``
 > +     - :cve_nist:`2024-50602`, :cve_nist:`2024-8176`
< +   * - ``expat``
< +     - :cve_nist:`2024-8176`, :cve_nist:`2024-50602`


 > +   * - ``grub``
 > +     - :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-56737`, :cve_nist:`2024-45780`, 
:cve_nist:`2024-45783`, :cve_nist:`2025-0624`, :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2025-0622`, 
:cve_nist:`2024-45776`, :cve_nist:`2024-45777`, :cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2024-45778`, 
:cve_nist:`2024-45779`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, 
:cve_nist:`2025-0689`, :cve_nist:`2025-0678`, :cve_nist:`2025-1125`
< +   * - ``grub``
< +     - :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2024-45776`, :cve_nist:`2024-45777`, 
:cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2024-45780`, :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, 
:cve_nist:`2024-45783`, :cve_nist:`2024-56737`, :cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`, 
:cve_nist:`2025-0678`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, 
:cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2025-1125`

 > +   * - ``libarchive``
 > +     - :cve_nist:`2024-57970`, :cve_nist:`2025-25724`, :cve_nist:`2025-1632`
< +   * - ``libarchive``
< +     - :cve_nist:`2024-57970`, :cve_nist:`2025-1632`, :cve_nist:`2025-25724`

 > +   * - ``libxml2``
 > +     - :cve_nist:`2025-24928`, :cve_nist:`2024-56171`
< +   * - ``libxml2``
< +     - :cve_nist:`2024-56171`, :cve_nist:`2025-24928`

 > +   * - ``tiff``
 > +     - :cve_nist:`2023-52356`, :cve_nist:`2023-6228`, :cve_nist:`2023-6277`
< +   * - ``tiff``
< +     - :cve_nist:`2023-6277`, :cve_nist:`2023-52356`, :cve_nist:`2023-6228`

 > +   * - ``vim``
 > +     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`, 
:cve_nist:`2025-26603`, :cve_nist:`2025-1215`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`
< +   * - ``vim``
< +     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-1215`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`, 
:cve_nist:`2025-26603`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`



On 2025/03/28 22:07, Antonin Godard via lists.yoctoproject.org wrote:
> Add security fixes by going through the log between yocto-5.1 and
> walnascar branch tip on Poky.
> 
> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
> ---
>   .../migration-guides/release-notes-5.2.rst         | 67 ++++++++++++++++++++++
>   1 file changed, 67 insertions(+)
> 
> diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
> index 1e05631d9..d583f3e9d 100644
> --- a/documentation/migration-guides/release-notes-5.2.rst
> +++ b/documentation/migration-guides/release-notes-5.2.rst
> @@ -765,6 +765,73 @@ The following changes have been made to the :term:`LICENSE` values set by recipe
>   Security Fixes in |yocto-ver|
>   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>   
> +The following CVEs have been fixed:
> +
> +.. list-table::
> +   :widths: 30 70
> +   :header-rows: 1
> +
> +   * - Recipe
> +     - CVE IDs
> +   * - ``barebox``
> +     - :cve_nist:`2025-26721`, :cve_nist:`2025-26722`, :cve_nist:`2025-26723`, :cve_nist:`2025-26724`, :cve_nist:`2025-26725`
> +   * - ``binutils``
> +     - :cve_nist:`2024-53589`, :cve_nist:`2025-1153`
> +   * - ``curl``
> +     - :cve_nist:`2024-8096`, :cve_nist:`2024-9681`, :cve_nist:`2024-11053`, :cve_nist:`2025-0167`, :cve_nist:`2025-0665`, :cve_nist:`2025-0725`
> +   * - ``expat``
> +     - :cve_nist:`2024-50602`, :cve_nist:`2024-8176`
> +   * - ``ghostscript``
> +     - :cve_nist:`2024-46951`, :cve_nist:`2024-46952`, :cve_nist:`2024-46953`, :cve_nist:`2024-46954`, :cve_nist:`2024-46955`, :cve_nist:`2024-46956`
> +   * - ``gnutls``
> +     - :cve_nist:`2024-12243`
> +   * - ``go``
> +     - :cve_nist:`2024-34155`, :cve_nist:`2024-34156`, :cve_nist:`2024-34158`, :cve_nist:`2024-45336`, :cve_nist:`2024-45341`, :cve_nist:`2025-22866`, :cve_nist:`2025-22870`
> +   * - ``grub``
> +     - :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-56737`, :cve_nist:`2024-45780`, :cve_nist:`2024-45783`, :cve_nist:`2025-0624`, :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2025-0622`, :cve_nist:`2024-45776`, :cve_nist:`2024-45777`, :cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, :cve_nist:`2025-0678`, :cve_nist:`2025-1125`
> +   * - ``libarchive``
> +     - :cve_nist:`2024-57970`, :cve_nist:`2025-25724`, :cve_nist:`2025-1632`
> +   * - ``libcap``
> +     - :cve_nist:`2025-1390`
> +   * - ``libsndfile1``
> +     - :cve_nist:`2024-50612`
> +   * - ``libssh2``
> +     - :cve_nist:`2023-48795`
> +   * - ``libtasn1``
> +     - :cve_nist:`2024-12133`
> +   * - ``libxml2``
> +     - :cve_nist:`2025-24928`, :cve_nist:`2024-56171`
> +   * - ``ofono``
> +     - :cve_nist:`2024-7539`, :cve_nist:`2024-7540`, :cve_nist:`2024-7541`, :cve_nist:`2024-7542`
> +   * - ``omvf``
> +     - :cve_nist:`2023-45236`, :cve_nist:`2023-45237`, :cve_nist:`2024-25742`
> +   * - ``openssl``
> +     - :cve_nist:`2024-9143`, :cve_nist:`2024-12797`, :cve_nist:`2024-13176`
> +   * - ``orc``
> +     - :cve_nist:`2024-40897`
> +   * - ``python3``
> +     - :cve_nist:`2025-0938`, :cve_nist:`2024-12254`
> +   * - ``qemu``
> +     - :cve_nist:`2024-6505`
> +   * - ``rsync``
> +     - :cve_nist:`2024-12084`, :cve_nist:`2024-12085`, :cve_nist:`2024-12086`, :cve_nist:`2024-12087`, :cve_nist:`2024-12088`, :cve_nist:`2024-12747`
> +   * - ``ruby``
> +     - :cve_nist:`2024-41123`, :cve_nist:`2024-41946`
> +   * - ``rust``
> +     - :cve_nist:`2024-43402`
> +   * - ``tiff``
> +     - :cve_nist:`2023-52356`, :cve_nist:`2023-6228`, :cve_nist:`2023-6277`
> +   * - ``vim``
> +     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`, :cve_nist:`2025-26603`, :cve_nist:`2025-1215`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`
> +   * - ``webkitgtk``
> +     - :cve_nist:`2025-24143`, :cve_nist:`2025-24150`, :cve_nist:`2025-24158`, :cve_nist:`2025-24162`
> +   * - ``wpa-supplicant``
> +     - :cve_nist:`2024-5290`
> +   * - ``xserver-xorg``
> +     - :cve_nist:`2024-9632`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600`, :cve_nist:`2025-26601`
> +   * - ``xwayland``
> +     - :cve_nist:`2024-9632`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600`, :cve_nist:`2025-26601`
> +
>   Recipe Upgrades in |yocto-ver|
>   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>   
> 
> 
> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#6658): https://lists.yoctoproject.org/g/docs/message/6658
> Mute This Topic: https://lists.yoctoproject.org/mt/111953531/7581020
> Group Owner: docs+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/docs/unsub [ypa.takayasu.ito@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
> 

-- 
Takayasu Ito
Yocto Project Ambassador
ti@itrc.jp

Re: [docs] [PATCH 04/11] migration-guides/release-notes-5.2.rst: add security fixes

[Antonin Godard]

Hi Takayasu,

On Sat Apr 12, 2025 at 6:38 PM CEST, Takayasu Ito wrote:
> Hi all.
>
> * CVEs that have been fixed but are not on the list
>
> < +   * -  ``gstreamer1.0``
> < +     - :cve_nist:`2024-47606`
> < +   * -  ``gstreamer1.0-plugins-base``
> < +     - :cve_nist:`2024-47538`, :cve_nist:`2024-47541`, :cve_nist:`2024-47542`,  :cve_nist:`2024-47600`, 
> :cve_nist:`2024-47607`, :cve_nist:`2024-47615`, :cve_nist:`2024-47835`
> < +   * -  ``gstreamer1.0-plugins-good``
> < +     - :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, :cve_nist:`2024-47540`, :cve_nist:`2024-47543`, 
> :cve_nist:`2024-47544`, :cve_nist:`2024-47545`, :cve_nist:`2024-47546`, :cve_nist:`2024-47596`, :cve_nist:`2024-47597`, 
> :cve_nist:`2024-47598`, :cve_nist:`2024-47599`, :cve_nist:`2024-47601`, :cve_nist:`2024-47602`, :cve_nist:`2024-47603`, 
> :cve_nist:`2024-47606`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775`, :cve_nist:`2024-47776`, 
> :cve_nist:`2024-47777`, :cve_nist:`2024-47778`, :cve_nist:`2024-47834`
> see https://gstreamer.freedesktop.org/security/
>
> < +   * - ``openssh``
> < +     - :cve_nist:`2025-26465`, :cve_nist:`2025-26466`
> see https://www.openssh.com/txt/release-9.9p2
>
> < +   * - ``socat``
> < +     - :cve_nist:`2024-54661`
> see http://www.dest-unreach.org/socat/
>
> * CVEs already fixed in previous releases
>
>  > +   * - ``libssh2``
>  > +     - :cve_nist:`2023-48795`
>
> The patch for CVE-2023-28795, which is no longer needed due to libssh2 upgrading to 1.11.1, was committed on 2024/01/24 and has 
> already been fixed at the time of the scarthgap release, so we do not consider it necessary to post it to this list of fixes.
> see: 
> https://git.yoctoproject.org/poky/commit/meta/recipes-support/libssh2/libssh2?h=walnascar&id=3adac25f899054b7d1d8c14458a1a4cd310abbd7
>
>
> * CVE numbers that should be changed in ascending order
>
>  > +   * - ``expat``
>  > +     - :cve_nist:`2024-50602`, :cve_nist:`2024-8176`
> < +   * - ``expat``
> < +     - :cve_nist:`2024-8176`, :cve_nist:`2024-50602`
>
>
>  > +   * - ``grub``
>  > +     - :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-56737`, :cve_nist:`2024-45780`, 
> :cve_nist:`2024-45783`, :cve_nist:`2025-0624`, :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2025-0622`, 
> :cve_nist:`2024-45776`, :cve_nist:`2024-45777`, :cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2024-45778`, 
> :cve_nist:`2024-45779`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, 
> :cve_nist:`2025-0689`, :cve_nist:`2025-0678`, :cve_nist:`2025-1125`
> < +   * - ``grub``
> < +     - :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2024-45776`, :cve_nist:`2024-45777`, 
> :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2024-45780`, :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, 
> :cve_nist:`2024-45783`, :cve_nist:`2024-56737`, :cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`, 
> :cve_nist:`2025-0678`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, 
> :cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2025-1125`
>
>  > +   * - ``libarchive``
>  > +     - :cve_nist:`2024-57970`, :cve_nist:`2025-25724`, :cve_nist:`2025-1632`
> < +   * - ``libarchive``
> < +     - :cve_nist:`2024-57970`, :cve_nist:`2025-1632`, :cve_nist:`2025-25724`
>
>  > +   * - ``libxml2``
>  > +     - :cve_nist:`2025-24928`, :cve_nist:`2024-56171`
> < +   * - ``libxml2``
> < +     - :cve_nist:`2024-56171`, :cve_nist:`2025-24928`
>
>  > +   * - ``tiff``
>  > +     - :cve_nist:`2023-52356`, :cve_nist:`2023-6228`, :cve_nist:`2023-6277`
> < +   * - ``tiff``
> < +     - :cve_nist:`2023-6277`, :cve_nist:`2023-52356`, :cve_nist:`2023-6228`
>
>  > +   * - ``vim``
>  > +     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`, 
> :cve_nist:`2025-26603`, :cve_nist:`2025-1215`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`
> < +   * - ``vim``
> < +     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-1215`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`, 
> :cve_nist:`2025-26603`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`

Thanks!

Can you please send a patch on the mailing list with these additions? So that
you take credit for the changes. Please also describe how you came up with this
list.

Regards,
Antonin

-- 
Antonin Godard, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [docs] [PATCH 04/11] migration-guides/release-notes-5.2.rst: add security fixes

[Takayasu Ito]

Hi Antonin,

I could not post the patch because I did not have the development environment with me due to machine trouble.

On 2025/04/15 20:56, Antonin Godard wrote:
> Hi Takayasu,
> 
> On Sat Apr 12, 2025 at 6:38 PM CEST, Takayasu Ito wrote:
>> Hi all.
>>
>> * CVEs that have been fixed but are not on the list
>>
>> < +   * -  ``gstreamer1.0``
>> < +     - :cve_nist:`2024-47606`
>> < +   * -  ``gstreamer1.0-plugins-base``
>> < +     - :cve_nist:`2024-47538`, :cve_nist:`2024-47541`, :cve_nist:`2024-47542`,  :cve_nist:`2024-47600`,
>> :cve_nist:`2024-47607`, :cve_nist:`2024-47615`, :cve_nist:`2024-47835`
>> < +   * -  ``gstreamer1.0-plugins-good``
>> < +     - :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, :cve_nist:`2024-47540`, :cve_nist:`2024-47543`,
>> :cve_nist:`2024-47544`, :cve_nist:`2024-47545`, :cve_nist:`2024-47546`, :cve_nist:`2024-47596`, :cve_nist:`2024-47597`,
>> :cve_nist:`2024-47598`, :cve_nist:`2024-47599`, :cve_nist:`2024-47601`, :cve_nist:`2024-47602`, :cve_nist:`2024-47603`,
>> :cve_nist:`2024-47606`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775`, :cve_nist:`2024-47776`,
>> :cve_nist:`2024-47777`, :cve_nist:`2024-47778`, :cve_nist:`2024-47834`
>> see https://gstreamer.freedesktop.org/security/
>>
>> < +   * - ``openssh``
>> < +     - :cve_nist:`2025-26465`, :cve_nist:`2025-26466`
>> see https://www.openssh.com/txt/release-9.9p2
>>
>> < +   * - ``socat``
>> < +     - :cve_nist:`2024-54661`
>> see http://www.dest-unreach.org/socat/
>>
>> * CVEs already fixed in previous releases
>>
>>   > +   * - ``libssh2``
>>   > +     - :cve_nist:`2023-48795`
>>
>> The patch for CVE-2023-28795, which is no longer needed due to libssh2 upgrading to 1.11.1, was committed on 2024/01/24 and has
>> already been fixed at the time of the scarthgap release, so we do not consider it necessary to post it to this list of fixes.
>> see:
>> https://git.yoctoproject.org/poky/commit/meta/recipes-support/libssh2/libssh2?h=walnascar&id=3adac25f899054b7d1d8c14458a1a4cd310abbd7
>>
>>
>> * CVE numbers that should be changed in ascending order
>>
>>   > +   * - ``expat``
>>   > +     - :cve_nist:`2024-50602`, :cve_nist:`2024-8176`
>> < +   * - ``expat``
>> < +     - :cve_nist:`2024-8176`, :cve_nist:`2024-50602`
>>
>>
>>   > +   * - ``grub``
>>   > +     - :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-56737`, :cve_nist:`2024-45780`,
>> :cve_nist:`2024-45783`, :cve_nist:`2025-0624`, :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2025-0622`,
>> :cve_nist:`2024-45776`, :cve_nist:`2024-45777`, :cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2024-45778`,
>> :cve_nist:`2024-45779`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`,
>> :cve_nist:`2025-0689`, :cve_nist:`2025-0678`, :cve_nist:`2025-1125`
>> < +   * - ``grub``
>> < +     - :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2024-45776`, :cve_nist:`2024-45777`,
>> :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2024-45780`, :cve_nist:`2024-45781`, :cve_nist:`2024-45782`,
>> :cve_nist:`2024-45783`, :cve_nist:`2024-56737`, :cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`,
>> :cve_nist:`2025-0678`, :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`,
>> :cve_nist:`2025-0690`, :cve_nist:`2025-1118`, :cve_nist:`2025-1125`
>>
>>   > +   * - ``libarchive``
>>   > +     - :cve_nist:`2024-57970`, :cve_nist:`2025-25724`, :cve_nist:`2025-1632`
>> < +   * - ``libarchive``
>> < +     - :cve_nist:`2024-57970`, :cve_nist:`2025-1632`, :cve_nist:`2025-25724`
>>
>>   > +   * - ``libxml2``
>>   > +     - :cve_nist:`2025-24928`, :cve_nist:`2024-56171`
>> < +   * - ``libxml2``
>> < +     - :cve_nist:`2024-56171`, :cve_nist:`2025-24928`
>>
>>   > +   * - ``tiff``
>>   > +     - :cve_nist:`2023-52356`, :cve_nist:`2023-6228`, :cve_nist:`2023-6277`
>> < +   * - ``tiff``
>> < +     - :cve_nist:`2023-6277`, :cve_nist:`2023-52356`, :cve_nist:`2023-6228`
>>
>>   > +   * - ``vim``
>>   > +     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`,
>> :cve_nist:`2025-26603`, :cve_nist:`2025-1215`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`
>> < +   * - ``vim``
>> < +     - :cve_nist:`2024-45306`, :cve_nist:`2024-47814`, :cve_nist:`2025-1215`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`,
>> :cve_nist:`2025-26603`, :cve_nist:`2025-27423`, :cve_nist:`2025-29768`
> 
> Thanks!
> 
> Can you please send a patch on the mailing list with these additions? So that
> you take credit for the changes. Please also describe how you came up with this
> list.
> 
> Regards,
> Antonin
> 

-- 
Takayasu Ito
Yocto Project Ambassador
ypa.takayasu.ito@gmail.com

Re: [docs] [PATCH 04/11] migration-guides/release-notes-5.2.rst: add security fixes

[Antonin Godard]

Hi Takayasu,

On Wed Apr 16, 2025 at 12:34 AM CEST, Takayasu Ito wrote:
> Hi Antonin,
>
> I could not post the patch because I did not have the development environment with me due to machine trouble.

Okay, that's fine.

Could you please explain how you obtained these results?
It's not straightforward for me to assert the validity of your changes. I would
just need a way to reproduce the results you obtained. cve-check, maybe?

Antonin

-- 
Antonin Godard, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [docs] [PATCH 04/11] migration-guides/release-notes-5.2.rst: add security fixes

[Takayasu Ito]

Hi Antonin,

The decision is based on the upstream release notes and accompanying information.

As for gstreamer, three update commits have been made.

gstreamer1.0: upgrade 1.24.6 -> 1.24.9
https://git.yoctoproject.org/poky/commit/meta/recipes-multimedia/gstreamer?h=walnascar&id=0770b0 ecea8accb0edb9137595b2c7e0b94bb69b

gstreamer1.0: upgrade 1.24.9 -> 1.24.10
https://git.yoctoproject.org/poky/commit/?h=walnascar&id=d84 bc502cc610cbda9bf19e0320537287bf8a674

gstreamer1.0: upgrade 1.24.10 -> 1.24.12
https://git.yoctoproject.org/poky/commit/?h=walnascar&id= 925d5f1c725ceeb36c180b38a22dfdedd0dfc220

Release information for these updates is found at
https://gstreamer.freedesktop.org/news/

In it, it is stated that the security fixe is included in the 1.24.9 and 1.24.10 releases.

The details are confirmed at
https://gstreamer.freedesktop.org/security/

We can confirm that GStreamer-SA-2024-0004 through GStreamer-SA-2024-0030 were addressed in this release of walnascar.



On 2025/04/16 16:27, Antonin Godard wrote:
> Hi Takayasu,
> 
> On Wed Apr 16, 2025 at 12:34 AM CEST, Takayasu Ito wrote:
>> Hi Antonin,
>>
>> I could not post the patch because I did not have the development environment with me due to machine trouble.
> 
> Okay, that's fine.
> 
> Could you please explain how you obtained these results?
> It's not straightforward for me to assert the validity of your changes. I would
> just need a way to reproduce the results you obtained. cve-check, maybe?
> 
> Antonin
> 

-- 
Takayasu Ito
Yocto Project Ambassador
ypa.takayasu.ito@gmail.com

[PATCH 05/11] migration-guides/release-notes-5.2.rst: add an entry for addfragments

[Antonin Godard]

This should be clearly mentioned in the BitBake section as it is an
valuable addition to 5.2.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 documentation/migration-guides/release-notes-5.2.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
index d583f3e9d..cbef0d686 100644
--- a/documentation/migration-guides/release-notes-5.2.rst
+++ b/documentation/migration-guides/release-notes-5.2.rst
@@ -302,6 +302,12 @@ New Features / Enhancements in |yocto-ver|
 
 -  BitBake changes:
 
+   -  Add a new concept of configuration fragment, which allows providing
+      configuration snippets contained in layers in a structured and controlled
+      way. For more information, see the
+      :ref:`bitbake:bitbake-user-manual/bitbake-user-manual-metadata:\`\`addfragments\`\`
+      Directive` section of the BitBake User Manual.
+
    -  Add a new ``include_all`` directive, which can be used to include multiple
       files present in the same location in different layers.
 

-- 
2.47.0

[PATCH 06/11] migration-guides/migration-5.2.rst: final update for 5.2

[Antonin Godard]

- Add new/removed supported distributions.
- Set the oldest supported kernel.
- Remove empty sections.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 documentation/migration-guides/migration-5.2.rst | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/documentation/migration-guides/migration-5.2.rst b/documentation/migration-guides/migration-5.2.rst
index b5df4412e..59a2782f2 100644
--- a/documentation/migration-guides/migration-5.2.rst
+++ b/documentation/migration-guides/migration-5.2.rst
@@ -39,7 +39,7 @@ section of the Yocto Project Reference Manual.
 Supported kernel versions
 ~~~~~~~~~~~~~~~~~~~~~~~~~
 
-The :term:`OLDEST_KERNEL` setting is XXX in this release, meaning that
+The :term:`OLDEST_KERNEL` setting is 5.15 in this release, meaning that
 out the box, older kernels are not supported. See :ref:`4.3 migration notes
 <migration-4.3-supported-kernel-versions>` for details.
 
@@ -49,12 +49,17 @@ Supported distributions
 Compared to the previous releases, running BitBake is supported on new
 GNU/Linux distributions:
 
+-  Fedora 41
+-  CentOS Stream 9
+
 On the other hand, some earlier distributions are no longer supported:
 
-See :ref:`all supported distributions <system-requirements-supported-distros>`.
+-  CentOS Stream 8
+-  Fedora 38
+-  OpenSUSE Leap 15.4
+-  Ubuntu 20.04
 
-Go language changes
-~~~~~~~~~~~~~~~~~~~
+See :ref:`all supported distributions <system-requirements-supported-distros>`.
 
 Rust language changes
 ~~~~~~~~~~~~~~~~~~~~~

-- 
2.47.0

[PATCH 07/11] ref-manual/system-requirements.rst: update list of supported distributions

[Antonin Godard]

Before the 5.2 release, update the list of supported distributions to
match the SANITY_TESTED_DISTROS variable in poky.conf.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 documentation/ref-manual/system-requirements.rst | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/documentation/ref-manual/system-requirements.rst b/documentation/ref-manual/system-requirements.rst
index 93b95a7fb..df0a61dd9 100644
--- a/documentation/ref-manual/system-requirements.rst
+++ b/documentation/ref-manual/system-requirements.rst
@@ -64,20 +64,20 @@ supported on the following distributions:
 
 -  Ubuntu 24.04 (LTS)
 
--  Fedora 38
+-  Ubuntu 24.10
 
 -  Fedora 39
 
 -  Fedora 40
 
--  CentOS Stream 8
+-  Fedora 41
+
+-  CentOS Stream 9
 
 -  Debian GNU/Linux 11 (Bullseye)
 
 -  Debian GNU/Linux 12 (Bookworm)
 
--  OpenSUSE Leap 15.4
-
 -  OpenSUSE Leap 15.5
 
 -  OpenSUSE Leap 15.6
@@ -86,6 +86,8 @@ supported on the following distributions:
 
 -  AlmaLinux 9
 
+-  Rocky 8
+
 -  Rocky 9
 
 The following distribution versions are still tested, even though the

-- 
2.47.0

[PATCH 08/11] poky.yaml.in: bump minimum required Python version to 3.9

[Antonin Godard]

After commit 67566c7410e1 ("bitbake: lib/bb: Bump minimum python version
requirement to 3.9") on Poky.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 documentation/poky.yaml.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/documentation/poky.yaml.in b/documentation/poky.yaml.in
index c93b78066..aeda3665e 100644
--- a/documentation/poky.yaml.in
+++ b/documentation/poky.yaml.in
@@ -13,7 +13,7 @@ DOCCONF_VERSION : "dev"
 BITBAKE_SERIES : ""
 YOCTO_DL_URL : "https://downloads.yoctoproject.org"
 YOCTO_RELEASE_DL_URL : "&YOCTO_DL_URL;/releases/yocto/yocto-&DISTRO;"
-MIN_PYTHON_VERSION : "3.8.0"
+MIN_PYTHON_VERSION : "3.9.0"
 MIN_TAR_VERSION : "1.28"
 MIN_GIT_VERSION : "1.8.3.1"
 MIN_GCC_VERSION : "8.0"

-- 
2.47.0

[PATCH 09/11] ref-manual/variables.rst: document the GRUB_MKIMAGE_OPTS variable

[Antonin Godard]

This new Grub variable controls the options passed to the grub-mkimage
command in the Grub recipe.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 documentation/ref-manual/variables.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/documentation/ref-manual/variables.rst b/documentation/ref-manual/variables.rst
index dace40f59..20563d61f 100644
--- a/documentation/ref-manual/variables.rst
+++ b/documentation/ref-manual/variables.rst
@@ -3435,6 +3435,11 @@ system and gives an overview of their function and contents.
       See the :ref:`ref-classes-grub-efi` class for more
       information on how this variable is used.
 
+   :term:`GRUB_MKIMAGE_OPTS`
+      This variable controls additional options passed to the ``grub-mkimage``
+      command in the GNU GRand Unified Bootloader (GRUB) recipe during the
+      ``do_mkimage`` task.
+
    :term:`GRUB_OPTS`
       Additional options to add to the GNU GRand Unified Bootloader (GRUB)
       configuration. Use a semi-colon character (``;``) to separate

-- 
2.47.0

[PATCH 10/11] ref-manual/variables.rst: document the SPDX_PACKAGE_VERSION variable

[Antonin Godard]

This variable controls the package version as seen in the SPDX 3.0 JSON
output (software_packageVersion). The default value for this variable is
PV.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 documentation/ref-manual/variables.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/documentation/ref-manual/variables.rst b/documentation/ref-manual/variables.rst
index 20563d61f..62e339ed8 100644
--- a/documentation/ref-manual/variables.rst
+++ b/documentation/ref-manual/variables.rst
@@ -8420,6 +8420,11 @@ system and gives an overview of their function and contents.
       and the prefix of ``documentNamespace``. It is set by default to
       ``http://spdx.org/spdxdoc``.
 
+   :term:`SPDX_PACKAGE_VERSION`
+      This variable controls the package version as seen in the SPDX 3.0 JSON
+      output (``software_packageVersion``). The default value for this variable
+      is :term:`PV`.
+
    :term:`SPDX_PRETTY`
       This option makes the SPDX output more human-readable, using
       identation and newlines, instead of the default output in a

-- 
2.47.0

[PATCH 11/11] migration-guides/{migration,release-note}-5.2: update for 5.2 release

[Antonin Godard]

Document changes between 0e91a1dabf27 ("adwaita-icon-theme: upgrade 47.0
-> 48.0") up to b3c21a23ad3a ("migration-guides/release-notes-5.2:
update for upcoming 5.2 release") in Poky.

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
---
 documentation/migration-guides/migration-5.2.rst   | 26 ++++++++++++++++++++++
 .../migration-guides/release-notes-5.2.rst         | 22 ++++++++++++++++++
 2 files changed, 48 insertions(+)

diff --git a/documentation/migration-guides/migration-5.2.rst b/documentation/migration-guides/migration-5.2.rst
index 59a2782f2..c54f054c7 100644
--- a/documentation/migration-guides/migration-5.2.rst
+++ b/documentation/migration-guides/migration-5.2.rst
@@ -178,6 +178,32 @@ This should now be replaced by::
 
    UBOOT_ENTRYPOINT ?= "0x20008000"
 
+
+Git fetcher: support for multiple revisions per URL removed
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The support for having multiple Git revisions per URL in :term:`SRC_URI` was
+removed from BitBake, which means the following syntax is not supported
+anymore::
+
+   SRC_URI = "git://some.host/somepath;branch=branchX,branchY;name=nameX,nameY"
+   SRCREV_nameX = "xxxxxxxxxxxxxxxxxxxx"
+   SRCREV_nameY = "yyyyyyyyyyyyyyyyyyyy"
+
+This was rarely used in the core repositories, and this removal simplifies the
+code logic in several places.
+
+Git fetcher: Branch parameter now required in :term:`SRC_URI`
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The ``branch`` parameter is now required when specifying a Git repository in
+:term:`SRC_URI`, for example::
+
+   SRC_URI = "git://some.host/somepath;branch=branchX"
+
+A missing ``branch`` parameter used to produce a warning, and will now produce
+an error.
+
 Recipe changes
 ~~~~~~~~~~~~~~
 
diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
index cbef0d686..05fc92e85 100644
--- a/documentation/migration-guides/release-notes-5.2.rst
+++ b/documentation/migration-guides/release-notes-5.2.rst
@@ -43,6 +43,13 @@ New Features / Enhancements in |yocto-ver|
       This can be used for authentication of private NPM registries, among other
       uses.
 
+   -  The :term:`GRUB_MKIMAGE_OPTS` can be used to control the flags to the
+      ``grub-mkimage`` command in the context of the Grub recipe (``grub-efi``).
+
+   -  The :term:`SPDX_PACKAGE_VERSION` variable controls the package version as
+      seen in the SPDX 3.0 JSON output (``software_packageVersion``). The default
+      value for this variable is :term:`PV`.
+
 -  Kernel-related changes:
 
    -  :ref:`ref-classes-cml1`: in :ref:`ref-tasks-diffconfig`, do not override
@@ -81,6 +88,10 @@ New Features / Enhancements in |yocto-ver|
        -  ``qcom-x1e80100-lenovo-t14s-g6-adreno``
        -  ``qcom-x1e80100-lenovo-t14s-g6-audio``
        -  ``qcom-x1e80100-lenovo-t14s-g6-compute``
+       -  ``qcom-adreno-a623``
+       -  ``qcom-qcs8300-adreno``
+       -  ``qca-qca2066``
+       -  ``qcom-adreno-a2xx``
 
    -  ``linux-firmware``: split ``amgpu``, ``ath10k``, ``ath11k`` and ``ath12k``
       in separate packages.
@@ -208,6 +219,10 @@ New Features / Enhancements in |yocto-ver|
    -  ``rust-target-config``: Update the data layout for the *x86-64* target, as
       it was different in Rust from LLVM, which produced a data layout error.
 
+   -  The :term:`PACKAGECONFIG_CONFARGS` value if now passed to the ``cargo
+      build`` command, which means that Rust recipes can now properly define
+      their :term:`PACKAGECONFIG` configuration.
+
 -  Wic Image Creator changes:
 
    -  Allow the ``--exclude-path`` option to exclude symlinks.
@@ -330,6 +345,8 @@ New Features / Enhancements in |yocto-ver|
       -  ``wget``: increase timeout to 100s from 30s to match CDN worst
          response time.
 
+      -  ``wget``: Support setting :term:`PV` in :term:`SRC_URI`.
+
       -  Add support for fast initial shallow fetch. The fetcher will prefer an
          initial shallow clone, but will re-utilize an existing bare clone if
          there is one. If the remote server does not allow shallow fetches, the
@@ -494,6 +511,8 @@ New Features / Enhancements in |yocto-ver|
    -  ``systemd``: ``apparmor``, ``fido``, ``mountfsd``, ``nsresourced``
    -  ``ovmf``: ``debug``
    -  ``webkitgtk``: ``assertions``
+   -  ``iproute2``: ``iptables``
+   -  ``man-db``: ``col``
 
 -  Systemd related changes:
 
@@ -540,6 +559,9 @@ New Features / Enhancements in |yocto-ver|
    -  Add a sanity check to validate that the C++ toolchain is functional on the
       host.
 
+   -  Add a sanity check to check that the C++ compiler on the host supports
+      C++20.
+
    -  Add a sanity check to verify that :term:`TOPDIR` does not contain
       non-ASCII characters, as it may lead to unexpected build errors.
 

-- 
2.47.0

Re: [docs] [PATCH 11/11] migration-guides/{migration,release-note}-5.2: update for 5.2 release

[Quentin Schulz]

Hi Antonin,

On 3/28/25 2:07 PM, Antonin Godard via lists.yoctoproject.org wrote:
> Document changes between 0e91a1dabf27 ("adwaita-icon-theme: upgrade 47.0
> -> 48.0") up to b3c21a23ad3a ("migration-guides/release-notes-5.2:
> update for upcoming 5.2 release") in Poky.
> 
> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
> ---
>   documentation/migration-guides/migration-5.2.rst   | 26 ++++++++++++++++++++++
>   .../migration-guides/release-notes-5.2.rst         | 22 ++++++++++++++++++
>   2 files changed, 48 insertions(+)
> 
> diff --git a/documentation/migration-guides/migration-5.2.rst b/documentation/migration-guides/migration-5.2.rst
> index 59a2782f2..c54f054c7 100644
> --- a/documentation/migration-guides/migration-5.2.rst
> +++ b/documentation/migration-guides/migration-5.2.rst
> @@ -178,6 +178,32 @@ This should now be replaced by::
>   
>      UBOOT_ENTRYPOINT ?= "0x20008000"
>   
> +
> +Git fetcher: support for multiple revisions per URL removed
> +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> +
> +The support for having multiple Git revisions per URL in :term:`SRC_URI` was
> +removed from BitBake, which means the following syntax is not supported
> +anymore::
> +
> +   SRC_URI = "git://some.host/somepath;branch=branchX,branchY;name=nameX,nameY"
> +   SRCREV_nameX = "xxxxxxxxxxxxxxxxxxxx"
> +   SRCREV_nameY = "yyyyyyyyyyyyyyyyyyyy"
> +
> +This was rarely used in the core repositories, and this removal simplifies the
> +code logic in several places.
> +

Can we suggest the user how to transition away from that? What was this 
even supposed to do?

> +Git fetcher: Branch parameter now required in :term:`SRC_URI`
> +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> +
> +The ``branch`` parameter is now required when specifying a Git repository in
> +:term:`SRC_URI`, for example::
> +
> +   SRC_URI = "git://some.host/somepath;branch=branchX"
> +
> +A missing ``branch`` parameter used to produce a warning, and will now produce
> +an error.
> +

You can specify that it used to default to "master" when it was missing, 
so if the recipe was building without, you likely want to have 
;branch=master in there? (I haven't re-checked but I believe that's the 
case?).

>   Recipe changes
>   ~~~~~~~~~~~~~~
>   
> diff --git a/documentation/migration-guides/release-notes-5.2.rst b/documentation/migration-guides/release-notes-5.2.rst
> index cbef0d686..05fc92e85 100644
> --- a/documentation/migration-guides/release-notes-5.2.rst
> +++ b/documentation/migration-guides/release-notes-5.2.rst
> @@ -43,6 +43,13 @@ New Features / Enhancements in |yocto-ver|
>         This can be used for authentication of private NPM registries, among other
>         uses.
>   
> +   -  The :term:`GRUB_MKIMAGE_OPTS` can be used to control the flags to the
> +      ``grub-mkimage`` command in the context of the Grub recipe (``grub-efi``).

It should be GRUB, all uppercase? https://en.wikipedia.org/wiki/GNU_GRUB

> +
> +   -  The :term:`SPDX_PACKAGE_VERSION` variable controls the package version as
> +      seen in the SPDX 3.0 JSON output (``software_packageVersion``). The default
> +      value for this variable is :term:`PV`.
> +

Would recommend not giving the default value here if it's already in the 
glossary, let's avoid having to modify multiple places if this gets 
changed in the future.

>   -  Kernel-related changes:
>   
>      -  :ref:`ref-classes-cml1`: in :ref:`ref-tasks-diffconfig`, do not override
> @@ -81,6 +88,10 @@ New Features / Enhancements in |yocto-ver|
>          -  ``qcom-x1e80100-lenovo-t14s-g6-adreno``
>          -  ``qcom-x1e80100-lenovo-t14s-g6-audio``
>          -  ``qcom-x1e80100-lenovo-t14s-g6-compute``
> +       -  ``qcom-adreno-a623``
> +       -  ``qcom-qcs8300-adreno``
> +       -  ``qca-qca2066``
> +       -  ``qcom-adreno-a2xx``

The git diff indentation seems odd, but maybe everything;s fine (a case 
of tabs vs spaces maybe?).

>   
>      -  ``linux-firmware``: split ``amgpu``, ``ath10k``, ``ath11k`` and ``ath12k``
>         in separate packages.
> @@ -208,6 +219,10 @@ New Features / Enhancements in |yocto-ver|
>      -  ``rust-target-config``: Update the data layout for the *x86-64* target, as
>         it was different in Rust from LLVM, which produced a data layout error.
>   
> +   -  The :term:`PACKAGECONFIG_CONFARGS` value if now passed to the ``cargo
> +      build`` command, which means that Rust recipes can now properly define
> +      their :term:`PACKAGECONFIG` configuration.
> +
>   -  Wic Image Creator changes:
>   
>      -  Allow the ``--exclude-path`` option to exclude symlinks.
> @@ -330,6 +345,8 @@ New Features / Enhancements in |yocto-ver|
>         -  ``wget``: increase timeout to 100s from 30s to match CDN worst
>            response time.
>   
> +      -  ``wget``: Support setting :term:`PV` in :term:`SRC_URI`.
> +

Sorry, don't understand what that means? Do you have a commit to refer to?

>         -  Add support for fast initial shallow fetch. The fetcher will prefer an
>            initial shallow clone, but will re-utilize an existing bare clone if
>            there is one. If the remote server does not allow shallow fetches, the
> @@ -494,6 +511,8 @@ New Features / Enhancements in |yocto-ver|
>      -  ``systemd``: ``apparmor``, ``fido``, ``mountfsd``, ``nsresourced``
>      -  ``ovmf``: ``debug``
>      -  ``webkitgtk``: ``assertions``
> +   -  ``iproute2``: ``iptables``
> +   -  ``man-db``: ``col``
>   

odd indentation in git diff but maybe just a tabs vs space issue?

Cheers,
Quentin

Re: [docs] [PATCH 11/11] migration-guides/{migration,release-note}-5.2: update for 5.2 release

[Richard Purdie]

On Fri, 2025-03-28 at 17:03 +0100, Quentin Schulz via lists.yoctoproject.org wrote:
> Hi Antonin,
> 
> On 3/28/25 2:07 PM, Antonin Godard via lists.yoctoproject.org wrote:
> > Document changes between 0e91a1dabf27 ("adwaita-icon-theme: upgrade 47.0
> > -> 48.0") up to b3c21a23ad3a ("migration-guides/release-notes-5.2:
> > update for upcoming 5.2 release") in Poky.
> > 
> > Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
> > ---
> >   documentation/migration-guides/migration-5.2.rst   | 26 ++++++++++++++++++++++
> >   .../migration-guides/release-notes-5.2.rst         | 22 ++++++++++++++++++
> >   2 files changed, 48 insertions(+)
> > 
> > diff --git a/documentation/migration-guides/migration-5.2.rst b/documentation/migration-guides/migration-5.2.rst
> > index 59a2782f2..c54f054c7 100644
> > --- a/documentation/migration-guides/migration-5.2.rst
> > +++ b/documentation/migration-guides/migration-5.2.rst
> > @@ -178,6 +178,32 @@ This should now be replaced by::
> >   
> >      UBOOT_ENTRYPOINT ?= "0x20008000"
> >   
> > +
> > +Git fetcher: support for multiple revisions per URL removed
> > +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > +
> > +The support for having multiple Git revisions per URL in :term:`SRC_URI` was
> > +removed from BitBake, which means the following syntax is not supported
> > +anymore::
> > +
> > +   SRC_URI = "git://some.host/somepath;branch=branchX,branchY;name=nameX,nameY"
> > +   SRCREV_nameX = "xxxxxxxxxxxxxxxxxxxx"
> > +   SRCREV_nameY = "yyyyyyyyyyyyyyyyyyyy"
> > +
> > +This was rarely used in the core repositories, and this removal simplifies the
> > +code logic in several places.
> > +
> 
> Can we suggest the user how to transition away from that? What was this 
> even supposed to do?

It would only have ever been useful with bare clones where there wasn't
a checkout. The only user I know of used to be the kernel recipe but
that no longer does this.

Cheers,

Richard

Re: [docs] [PATCH 11/11] migration-guides/{migration,release-note}-5.2: update for 5.2 release

[Quentin Schulz]

Hi Richard,

On 3/28/25 5:47 PM, Richard Purdie wrote:
> On Fri, 2025-03-28 at 17:03 +0100, Quentin Schulz via lists.yoctoproject.org wrote:
>> Hi Antonin,
>>
>> On 3/28/25 2:07 PM, Antonin Godard via lists.yoctoproject.org wrote:
>>> Document changes between 0e91a1dabf27 ("adwaita-icon-theme: upgrade 47.0
>>> -> 48.0") up to b3c21a23ad3a ("migration-guides/release-notes-5.2:
>>> update for upcoming 5.2 release") in Poky.
>>>
>>> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
>>> ---
>>>    documentation/migration-guides/migration-5.2.rst   | 26 ++++++++++++++++++++++
>>>    .../migration-guides/release-notes-5.2.rst         | 22 ++++++++++++++++++
>>>    2 files changed, 48 insertions(+)
>>>
>>> diff --git a/documentation/migration-guides/migration-5.2.rst b/documentation/migration-guides/migration-5.2.rst
>>> index 59a2782f2..c54f054c7 100644
>>> --- a/documentation/migration-guides/migration-5.2.rst
>>> +++ b/documentation/migration-guides/migration-5.2.rst
>>> @@ -178,6 +178,32 @@ This should now be replaced by::
>>>    
>>>       UBOOT_ENTRYPOINT ?= "0x20008000"
>>>    
>>> +
>>> +Git fetcher: support for multiple revisions per URL removed
>>> +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>> +
>>> +The support for having multiple Git revisions per URL in :term:`SRC_URI` was
>>> +removed from BitBake, which means the following syntax is not supported
>>> +anymore::
>>> +
>>> +   SRC_URI = "git://some.host/somepath;branch=branchX,branchY;name=nameX,nameY"
>>> +   SRCREV_nameX = "xxxxxxxxxxxxxxxxxxxx"
>>> +   SRCREV_nameY = "yyyyyyyyyyyyyyyyyyyy"
>>> +
>>> +This was rarely used in the core repositories, and this removal simplifies the
>>> +code logic in several places.
>>> +
>>
>> Can we suggest the user how to transition away from that? What was this
>> even supposed to do?
> 
> It would only have ever been useful with bare clones where there wasn't
> a checkout. The only user I know of used to be the kernel recipe but
> that no longer does this.
> 

Ah yes, was doing my grep in git history from bitbake repo instead of 
poky :)

It seems like what we did was split the code into a separate git 
repository but I assume we can do the same by having the same git repo, 
simply in a second SRC_URI entry.

git log -p -G ";branch=.*,.*\""

followed by a search for \.bb, \.inc in the pager returned 
c29aac6a8b5b417ad46f3cdf9c1a2d61c4f6cdd5 in poky.

So I guess we can say:

"""
If one of your recipes is still using this mechanism, you can split the 
code source fetching into two separate entries::

    SRC_URI = "git://some.host/somepath;branch=branchX;name=nameX"
    SRC_URI += "git://some.host/somepath;branch=branchY;name=nameY"
    SRCREV_nameX = "xxxxxxxxxxxxxxxxxxxx"
    SRCREV_nameY = "yyyyyyyyyyyyyyyyyyyy"

"""

(NOT tested).

Cheers,
Quentin

Re: [docs] [PATCH 11/11] migration-guides/{migration,release-note}-5.2: update for 5.2 release

[Richard Purdie]

On Mon, 2025-03-31 at 10:32 +0200, Quentin Schulz wrote:
> Hi Richard,
> 
> On 3/28/25 5:47 PM, Richard Purdie wrote:
> > On Fri, 2025-03-28 at 17:03 +0100, Quentin Schulz via
> > lists.yoctoproject.org wrote:
> > > Hi Antonin,
> > > 
> > > On 3/28/25 2:07 PM, Antonin Godard via lists.yoctoproject.org
> > > wrote:
> > > > Document changes between 0e91a1dabf27 ("adwaita-icon-theme:
> > > > upgrade 47.0
> > > > -> 48.0") up to b3c21a23ad3a ("migration-guides/release-notes-
> > > > 5.2:
> > > > update for upcoming 5.2 release") in Poky.
> > > > 
> > > > Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
> > > > ---
> > > >    documentation/migration-guides/migration-5.2.rst   | 26
> > > > ++++++++++++++++++++++
> > > >    .../migration-guides/release-notes-5.2.rst         | 22
> > > > ++++++++++++++++++
> > > >    2 files changed, 48 insertions(+)
> > > > 
> > > > diff --git a/documentation/migration-guides/migration-5.2.rst
> > > > b/documentation/migration-guides/migration-5.2.rst
> > > > index 59a2782f2..c54f054c7 100644
> > > > --- a/documentation/migration-guides/migration-5.2.rst
> > > > +++ b/documentation/migration-guides/migration-5.2.rst
> > > > @@ -178,6 +178,32 @@ This should now be replaced by::
> > > >    
> > > >       UBOOT_ENTRYPOINT ?= "0x20008000"
> > > >    
> > > > +
> > > > +Git fetcher: support for multiple revisions per URL removed
> > > > +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > > > +
> > > > +The support for having multiple Git revisions per URL in
> > > > :term:`SRC_URI` was
> > > > +removed from BitBake, which means the following syntax is not
> > > > supported
> > > > +anymore::
> > > > +
> > > > +   SRC_URI =
> > > > "git://some.host/somepath;branch=branchX,branchY;name=nameX,nam
> > > > eY"
> > > > +   SRCREV_nameX = "xxxxxxxxxxxxxxxxxxxx"
> > > > +   SRCREV_nameY = "yyyyyyyyyyyyyyyyyyyy"
> > > > +
> > > > +This was rarely used in the core repositories, and this
> > > > removal simplifies the
> > > > +code logic in several places.
> > > > +
> > > 
> > > Can we suggest the user how to transition away from that? What
> > > was this
> > > even supposed to do?
> > 
> > It would only have ever been useful with bare clones where there
> > wasn't
> > a checkout. The only user I know of used to be the kernel recipe
> > but
> > that no longer does this.
> > 
> 
> Ah yes, was doing my grep in git history from bitbake repo instead of
> poky :)
> 
> It seems like what we did was split the code into a separate git 
> repository but I assume we can do the same by having the same git
> repo, 
> simply in a second SRC_URI entry.
> 
> git log -p -G ";branch=.*,.*\""
> 
> followed by a search for \.bb, \.inc in the pager returned 
> c29aac6a8b5b417ad46f3cdf9c1a2d61c4f6cdd5 in poky.
> 
> So I guess we can say:
> 
> """
> If one of your recipes is still using this mechanism, you can split
> the 
> code source fetching into two separate entries::
> 
>     SRC_URI = "git://some.host/somepath;branch=branchX;name=nameX"
>     SRC_URI += "git://some.host/somepath;branch=branchY;name=nameY"
>     SRCREV_nameX = "xxxxxxxxxxxxxxxxxxxx"
>     SRCREV_nameY = "yyyyyyyyyyyyyyyyyyyy"
> 
> """
> 
> (NOT tested).

Multiple revisions only worked with bareclones otherwise it wouldn't
know how to checkout the resulting code during unpack. The above has
the same issue, it wouldn't know how to unpack the resulting code.

With a bare clone the checkout is left to the recipe so it isn't an
issue in that case.

For that reason I think examples are probably not needed as very little
code should be using this (hopefully nothing).

Cheers,

Richard

Re: [docs] [PATCH 00/11] Final release note updates for 5.2

[Yoann Congal]

[-- Attachment #1: Type: text/plain, Size: 2830 bytes --]

Hi Antonin,

Le ven. 28 mars 2025 à 14:07, Antonin Godard via lists.yoctoproject.org
<antonin.godard=bootlin.com@lists.yoctoproject.org> a écrit :

> This series makes the final updates before the 5.2 release, which
> includes adding the recipe upgrades, license changes, as well as cleaning
> up a few empty sections.
>
> It also updates the release notes / migration guide and overall
> documentation with regards to the latest changes on Poky.
>

I don't see
[PATCH] poky.yaml.in: Raise minimum GCC version to 10.1
https://lists.yoctoproject.org/g/docs/message/6606
in your 5.2 branch. I feel like it should be in it.

It might conflict with
[PATCH 08/11] poky.yaml.in: bump minimum required Python version to 3.9
https://lists.yoctoproject.org/g/docs/message/6663

Tell me if you want me to rebase/resend to a branch.

Regards,


> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
> ---
> Antonin Godard (11):
>       migration-guides/release-notes-5.2.rst: add the list of contributors
>       migration-guides/release-notes-5.2.rst: add recipe upgrades
>       migration-guides/release-notes-5.2.rst: add LICENSE recipe changes
>       migration-guides/release-notes-5.2.rst: add security fixes
>       migration-guides/release-notes-5.2.rst: add an entry for addfragments
>       migration-guides/migration-5.2.rst: final update for 5.2
>       ref-manual/system-requirements.rst: update list of supported
> distributions
>       poky.yaml.in: bump minimum required Python version to 3.9
>       ref-manual/variables.rst: document the GRUB_MKIMAGE_OPTS variable
>       ref-manual/variables.rst: document the SPDX_PACKAGE_VERSION variable
>       migration-guides/{migration,release-note}-5.2: update for 5.2 release
>
>  documentation/migration-guides/migration-5.2.rst   |   39 +-
>  .../migration-guides/release-notes-5.2.rst         | 1516
> +++++++++++++++++++-
>  documentation/poky.yaml.in                         |    2 +-
>  documentation/ref-manual/system-requirements.rst   |   10 +-
>  documentation/ref-manual/variables.rst             |   10 +
>  5 files changed, 1567 insertions(+), 10 deletions(-)
> ---
> base-commit: ea1636013722c12e72ca115240c8ce533e05ece2
> change-id: 20250327-release-note-5-2-updates-2-8fb5d45989bd
>
> Best regards,
> --
> Antonin Godard <antonin.godard@bootlin.com>
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#6656):
> https://lists.yoctoproject.org/g/docs/message/6656
> Mute This Topic: https://lists.yoctoproject.org/mt/111953529/4316185
> Group Owner: docs+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/docs/unsub [
> yoann.congal@smile.fr]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

-- 
Yoann Congal
Smile ECS

[-- Attachment #2: Type: text/html, Size: 4730 bytes --]

Re: [docs] [PATCH 00/11] Final release note updates for 5.2

[Antonin Godard]

Hi Yoann,

On Fri Mar 28, 2025 at 3:44 PM CET, Yoann Congal wrote:
> Hi Antonin,
>
> Le ven. 28 mars 2025 à 14:07, Antonin Godard via lists.yoctoproject.org
> <antonin.godard=bootlin.com@lists.yoctoproject.org> a écrit :
>
>> This series makes the final updates before the 5.2 release, which
>> includes adding the recipe upgrades, license changes, as well as cleaning
>> up a few empty sections.
>>
>> It also updates the release notes / migration guide and overall
>> documentation with regards to the latest changes on Poky.
>>
>
> I don't see
> [PATCH] poky.yaml.in: Raise minimum GCC version to 10.1
> https://lists.yoctoproject.org/g/docs/message/6606
> in your 5.2 branch. I feel like it should be in it.
>
> It might conflict with
> [PATCH 08/11] poky.yaml.in: bump minimum required Python version to 3.9
> https://lists.yoctoproject.org/g/docs/message/6663
>
> Tell me if you want me to rebase/resend to a branch.

Sorry, I just forgot (and didn't get that you were talking about this patch on
IRC, I confounded it with your C++ toolchain flag sanity check patch somehow).

Applied to master-next, thanks for the awareness!

Regards,
Antonin

-- 
Antonin Godard, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [docs] [PATCH 00/11] Final release note updates for 5.2

[Yoann Congal]

[-- Attachment #1: Type: text/plain, Size: 1560 bytes --]

Le ven. 28 mars 2025 à 15:49, Antonin Godard <antonin.godard@bootlin.com> a
écrit :

> Hi Yoann,
>
> On Fri Mar 28, 2025 at 3:44 PM CET, Yoann Congal wrote:
> > Hi Antonin,
> >
> > Le ven. 28 mars 2025 à 14:07, Antonin Godard via lists.yoctoproject.org
> > <antonin.godard=bootlin.com@lists.yoctoproject.org> a écrit :
> >
> >> This series makes the final updates before the 5.2 release, which
> >> includes adding the recipe upgrades, license changes, as well as
> cleaning
> >> up a few empty sections.
> >>
> >> It also updates the release notes / migration guide and overall
> >> documentation with regards to the latest changes on Poky.
> >>
> >
> > I don't see
> > [PATCH] poky.yaml.in: Raise minimum GCC version to 10.1
> > https://lists.yoctoproject.org/g/docs/message/6606
> > in your 5.2 branch. I feel like it should be in it.
> >
> > It might conflict with
> > [PATCH 08/11] poky.yaml.in: bump minimum required Python version to 3.9
> > https://lists.yoctoproject.org/g/docs/message/6663
> >
> > Tell me if you want me to rebase/resend to a branch.
>
> Sorry, I just forgot (and didn't get that you were talking about this
> patch on
> IRC, I confounded it with your C++ toolchain flag sanity check patch
> somehow).
>

Well those are close, one document the other.


> Applied to master-next, thanks for the awareness!
>

Thank you :)


> Regards,
> Antonin
>
> --
> Antonin Godard, Bootlin
> Embedded Linux and Kernel engineering
> https://bootlin.com
>


-- 
Yoann Congal
Smile ECS

[-- Attachment #2: Type: text/html, Size: 3163 bytes --]