[ANNOUNCEMENT] Yocto Project 5.0.12(scarthgap-5.0.12) is Released

Hi

We are pleased to announce the Yocto Project 5.0.12 Release is now available for download.

https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2

A gpg signed version of these release notes is available at:

https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/RELEASENOTES

Full Test Report:

https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/testreport.txt

Thank you for everyone's contributions to this release.

Chee Yang
[email protected]<mailto:[email protected]>
Yocto Project Build and Release


--------------------------
yocto-5.0.12 Release Notes
--------------------------


--------------------------
Repositories/Downloads
--------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/poky
Branch: scarthgap
Tag: yocto-5.0.12
Git Revision: ec220ae083dba35c279192b2249ad03fe238446e
Release Artefact: poky-ec220ae083dba35c279192b2249ad03fe238446e
sha: a5f8c2ad491c59d0bdfb85f46a136b0ee66cfdd4359ab1ab9dac2430d0a52c17
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: scarthgap
Tag: yocto-5.0.12
Git Revision: 93c7489d843a0e46fe4fc685b356d0ae885300d7
Release Artefact: oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7
sha: 49695592179cd777eee337d922aae354dad4ab503628f0344b1b53329900c4d9
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: scarthgap
Tag: yocto-5.0.12
Git Revision: bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.8
Tag: yocto-5.0.12
Git Revision: 982645110a19ebb94d519926a4e14c8a2a205cfd
Release Artefact: bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd
sha: f8d777d322b8f05372d7ce75c67df2db2b7de3f64d5b7769b8051c507161245d
Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2

Repository Name: meta-yocto
Repository Location: https://git.yoctoproject.org/meta-yocto
Branch: scarthgap
Tag: yocto-5.0.12
Git Revision: 82602cda1a89644d1acbe230a81c93e3fb5031c8

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: scarthgap
Tag: yocto-5.0.12
Git Revision: dd665216fa578a1f2f268790d708c6a5d2912ecf


---------------
Contributors
---------------
Aleksandar Nikolic
Alexander Kanavin
Antonin Godard
Archana Polampalli
Daniel Turull
Deepesh Varatharajan
Erik Lindsten
Fabio Berton
Hitendra Prajapati
Jinfeng Wang
Joe Slater
Khem Raj
Lee Chee Yang
Marco Cavallini
Mark Hatle
Martin Jansa
Michal Seben
Nikhil R
Peter Marko
Philip Lorenz
Praveen Kumar
Quentin Schulz
Richard Purdie
Robert P. J. Day
Roland Kovacs
Steve Sakoman
Vijay Anusuri
Wang Mingyu
Yash Shinde
Yi Zhao
Zhang Peng

---------------
Known Issues
---------------
N/A


---------------
Security Fixes
---------------
avahi: Fix CVE-2024-52615
binutils: Fix CVE-2025-7545 CVE-2025-7546
busybox: Fix CVE-2023-39810
dropbear: Fix CVE-2025-47203
gdk-pixbuf: Fix CVE-2025-7345
git: Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
glib-2.0: Ignore CVE-2025-4056
glibc: Fix CVE-2025-8058
gnutls: Fix CVE-2025-6395 CVE-2025-32988 CVE-2025-32989 CVE-2025-32990
go: Ignore CVE-2025-0913
gstreamer1.0-plugins-base: Fix CVE-2025-47806 CVE-2025-47808
gstreamer1.0-plugins-good: Fix CVE-2025-47183 CVE-2025-47219
iputils: Fix CVE-2025-48964
libpam: Fix CVE-2025-6020
libxml2: Fix CVE-2025-6170 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796
libxml2: Ignore CVE-2025-8732
ncurses: Fix CVE-2025-6141
openssl: Fix CVE-2024-41996 CVE-2025-27587
python3: Fix CVE-2025-8194
sqlite3: Fix CVE-2025-6965
sudo: Fix CVE-2025-32463
xserver-xorg: Fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49177 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-49176
xz: Ignore CVE-2024-47611

---------------
Fixes
---------------
bash: Stick to C17 std
bash: use -std=gnu17 also for native CFLAGS
binutils: stable 2.42 branch updates
bitbake: bitbake: runqueue: Verify mcdepends are valid
bitbake: test/fetch: Switch u-boot based test to use our own mirror
bitbake: utils: Optimise signal/sigmask performance
build-appliance-image: Update to scarthgap head revision
cairo: fix build with gcc-15 on host
cmake: Add PACKAGECONFIG option for debugger support
cve-check: Add missing call to exit_if_errors
dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
e2fsprogs: Fix build failure with gcc 15
git: Upgrade to 2.44.4
glibc: stable 2.39 branch updates
gnutls: patch read buffer overrun in the "pre_shared_key" extension
gnutls: patch reject zero-length version in certificate request
go-helloworld: fix license
kea: set correct permissions for /var/run/kea
linux-libc-headers: Fix invalid conversion in cn_proc.h
migration-guides: add release notes for 5.0.11
mtools: upgrade to 4.0.49
oe-debuginfod: add option for data storage
orc: set CVE_PRODUCT
overview-manual/yp-intro.rst: fix broken link to article
parted: Fix build with GCC 15
poky.conf: bump version for 5.0.12
python3: update CVE product
ref-manual/classes.rst: document the testexport class
ref-manual/system-requirements.rst: update supported distributions
ref-manual/variables.rst: document SPL_DTB_BINARY FIT_CONF_PREFIX variable
scripts/install-buildtools: Update to 5.0.11
sudo: upgrade to 1.9.17p1
timedated: wait for jobs before SetNTP response
variables.rst: remove references to obsolete tar packaging
xserver-xorg: upgrade to 21.1.18