Re: [docs] [PATCH] migration-guide: add release notes for 5.0.18

["Antonin Godard" <antonin.godard@bootlin.com>]

Hi,

On Fri Jun 5, 2026 at 11:55 PM CEST, Yoann Congal wrote:
> On Fri Jun 5, 2026 at 4:18 PM CEST, Antonin Godard via lists.yoctoproject.org wrote:
>> Hi,
>>
>> How are there so many new CVE status updates for the kernel? Is it linked to a
>> recent change on Scarthgap? Could we mention it in the release notes? This seems
>> a bit out of the ordinary.
>
> I think this is linked to
> linux/generate-cve-exclusions: backport script from master branch
> https://git.openembedded.org/openembedded-core/commit/?h=scarthgap&id=66a13f93403533b95ed27eed24931aa310f8ce79
> linux-yocto/6.6: update CVE exclusions (6.6.123)
> https://git.openembedded.org/openembedded-core/commit/?h=scarthgap&id=4bdf5345c32c9e294a64d61af49ce2adabdaf1db
>
> Basically, the cve exclusion list jumped from 6.6.32 to 6.6.123 in one
> commit.

Ok, I've added this sentence at the beginning of the section:

"""
The large number of CVE updates for the ``linux-yocto`` recipe is linked to two backport
commits on :term:`OpenEmbedded-Core (OE-Core)`. See
:oecore_rev:`66a13f93403533b95ed27eed24931aa310f8ce79` and
:oecore_rev:`4bdf5345c32c9e294a64d61af49ce2adabdaf1db` for more details on these
changes.
"""

Antonin