2019年1月4日付けで、Yocto2.5.2(sumo)のリリースがアナウンスされています。
2018/12/5にコミットされたものがQAを経てのリリースとなっています。

本日（日本時間2019年1月5日 10:30)現在、git で　branch sumo で指定したものは
bitbake関連のアップデートが行われておりますが、レシピに関するアップデートは
発生しておりません。
リリースノートに記載されている修正項目のうち、bitbake関連のfixは配布されるtar.bz2
には含まれておりませんので、ご注意下さい。

なお、sumoの動作確認済のhost OSに変更が有ります。
ubuntu-16.10及び17.04、 fedora-26 、opensuse-42.1及び42.2が非検証となり
新規にubuntu-18.04 、fedora-28 、opensuse-42.3 が検証済バージョンに追加となっています。

本リリースの詳細は以下のURLにてご確認ください。
https://lists.yoctoproject.org/pipermail/yocto-announce/2019-January/000...

---------------
Known Issues
---------------
Bug 13101 - eclipse oxygen-master build failing consistently
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13101

This build referenced a mirror location where files are retired and expire. A server-side redirect allows the build to complete complete successfully. Please see the bug for more detail.

---------------
Security Fixes
---------------
curl: actually apply latest CVE patches
unzip: actually apply CVE-2018-18384
curl: fix for CVE-2018-16839/CVE-2018-16840/CVE-2018-16842
unzip: fix for CVE-2018-18384
curl: CVE-2018-14618
nasm: fix CVE-2018-1000667
python: backport patch to fix CVE-2018-14647
python: backport patch to fix CVE-2018-1000802
curl: extend CVE_PRODUCT
cve-check: Allow multiple entries in CVE_PRODUCT
libtiff: fix CVE-2017-17095
libsndfile1: CVE-2018-13139
nasm: fix CVE-2018-10016
git: CVE-2018-11233
python3: CVE-2018-1061
libxml2: CVE-2018-14404
libcroco: CVE-2017-7961
gnupg: CVE-2018-9234
glibc: fix CVE-2018-11237
sqlite3: CVE-2018-8740
libpng: CVE-2018-13785
busybox: CVE-2017-15874
cve-check.bbclass: do not download the CVE DB in package-specific tasks
cve-check.bbclass: detect CVE IDs listed on multiple lines
lrzsz: fix CVE-2018-10195
libcgroup: CVE-2018-14348
libarchive: CVE-2017-14501
wpa-supplicant: fix CVE-2018-14526
libice: patch for CVE-2017-2626
taglib: Security fix CVE-2018-11439
libid3tag: patch for CVE-2004-2779
libcroco: patch for CVE-2017-7960
squashfs-tools: patch for CVE-2015-4645(4646)
libexif: patch for CVE-2017-7544
blktrace: Security fix CVE-2018-10689
patch: fix CVE-2018-6952
perl: CVE-2018-12015
perl: CVE-2018-6913
perl: CVE-2018-6797
perl: CVE-2018-6798
qemu: CVE-2018-12617
qemu: CVE-2018-7550
python: CVE-2018-1000030
procps: CVE-2018-1124
shadow: CVE-2018-7169
gnupg: CVE-2018-12020
git: CVE-2018-11235
libgcrypt: CVE-2018-0495
coreutils: CVE-2017-18018
libsndfile1: CVE-2017-14634
libsndfile1: CVE-2017-14245 CVE-2017-14246
libarchive: CVE-2017-14503
flac: CVE-2017-6888
nasm: fix CVE-2018-8883 & CVE-2018-8882 & CVE-2018-10316
unzip: fix CVE-2018-1000035
libvorbis: CVE-2018-10392
libvorbis: CVE-2017-14160 CVE-2018-10393

---------------
Fixes
---------------
testsdk: Improvements to the json logging
testimage: Improvements to the json logging
oeqa/selftest/esdk: Fix typo causing test failure
default-versions.inc: Make PREFERRED_VERSION_openssl* overwritable
oeqa/selftest/esdk: Ensure parent directory exists
image-buildinfo,oeqa/selftest/containerimage: Ensure image-buildinfo doesn't break tests
oeqa/utils/metadata: Allow to function without the git module
oeqa/selftest: Standardize json logging output directory
oeqa/selftest: Improvements to the json logging
testsdk.bbclass: write testresult to json files
testimage.bbclass: write testresult to json files
oeqa/selftest/context: write testresult to json files
oeqa/runner: Sort the test result output by result class
oeqa/runner: Always show a summary of success/fail/error/skip counts
oeqa/runtime/ptest: Inject results+logs into stored json results file
oeqa/core/runner: write testresult to json files
oeqa/core/runner: refactor for OEQA to write json testresult
oeqa: Remove xmlrunner
oeqa/runner: Simplify code
oeqa/core/threaded: Remove in favour of using concurrenttests
oeqa/runner: Ensure we don't print misleading results output
oeqa/core/runner: Improve test case comparision
oeqa/selftest/context: Improve log file handling
oeqa/utils/qemurunner.py: Fix python regex warnings
oeqa/selftest/context: Replace deprecated imp module usage
oeqa/utils/commands: Avoid unclosed file warnings
oeqa/loader: Fix deprecation warning
oeqa/selftest/esdk: run selftest inside workdir not /tmp
oeqa: don't litter /tmp with temporary directories
oeqa/utils/qemurunner: Avoid tracebacks on closed files
oeqa/selftest/runqemu: Improve testcase failure handling
oeqa/oelib/path: don't leak temporary directories
oeqa/selftest/buildoptions: Ensure diskmon tests run consistently
oeqa/selftest/buildoptions: Improve ccache test
oeqa/qemurunner: Remove resource python warnings
oeqa/utils/commands: Avoid log message duplication
oeqa/utils/qemurunner: Fix python ResourceWarning for unclosed file
oeqa/utils/commands: Add extra qemu failure logging
oeqa/selftest/buildoptions: Improve ccache test failure output
oeqa/selftest/case: Use bb.utils.remove() instead of shutil.remove()
oeqa/selftest/signing: Use do_populate_lic target instead of do_package
oeqa/selftest/signing: Allow tests not to need gpg on the host
oeqa/selftest/signing: Skip tests if gpg isn't found
scripts/runqemu: Improve lockfile handling for python with close_fd=True
scripts/runqemu: Tidy up lock handling code
scripts/runqemu: Replace subprocess.run() for compatibilty
documentation: Prepared for 2.5.2 document release
bitbake: bitbake-user-manual: Added "usehead" parameter.
bitbake: main: Don't use print() directly, use logger
bitbake: process: Flush key output to logs
bitbake: runqueue: Ensure disk monitor is started when no setscene tasks are run
bitbake: server/process: Fix ConnectionRefusedError tracebacks
bitbake: lib/bb/server: Avoid UnboundLocalError traceback
bitbake: server/process: Fix unclosed socket warnings upon server connection refused
build-appliance-image: Update to sumo head revision
poky.conf: Bump version for 2.5.2 sumo release
==========================================================================
↑ここより上の修正は、配布されるtar.bz2には含まれておりません。
==========================================================================
linux-yocto: update genericx86* SRCREV for 4.14
poky.conf: Update the distros we test against on the autobuilder
sanity: Add check for WSL
busybox: make busybox.links.{suid, nosuid} reproducible
shadow: improve reproducibility by hard-coding shell path
socat: fix LICENSE
gnupg: patch gnupg-native to allow path relocation
bitbake: bitbake: toaster: allow OE_ROOT to be provided through environment
dhcp: allow for excluding the external bind
oeqa/selftest/recipetool: Fix problems from changing upstream source
base.bbclass: avoid 'find -ignore_readdir_race -delete'
archiver: Drop unwanted directories
meta: Use double colon for chown OWNER:GROUP
crosssdk: Remove usage of host flags for cross-compilation
pixman: Trim license info extracted from pixman-matrix.c
apr-util: Trim license info extracted from apu_version.h
apr: Trim license info extracted from apr_lib.h
common-licenses: Correct the FreeType license text
wic: isoimage-isohybrid: fix UEFI spec breakage
selftest/wic: Improve error message for test_fixed_size
oeqa/selftest/wic: Ensure initramfs exists for test_iso_image
oeqa/selftest/wic: Use a subdir of builddir, not /var/
kernel-dev: Updated phrasing for what a "defconfig" file is.
oeqa/selftest/runtime_test: Ensure we build/use gnupg-native
curl: Include the complete license information
apt: update SRC_URI
m4: Workaround gnulib's fseeko.c implementation
python: don't use runtime checks to identify float endianism
python: clean up ptest
python: update to version 2.7.15
linux-yocto/4.14: update to v4.14.76
linux-yocto-rt: fixup 4.14 merge issues
linux-yocto/4.14: fix beaglebone configuration warnings
linux-yocto: enable pci and CRYPTO_DEV_VIRTIO
linux-yocto/4.14: update to v4.14.71
linux-yocto/4.14: fix kernel configuration audit warnings
linux-yocto: tweak RTC configuration
linux-yocto: configuration warning fixes
linux-yocto-rt: Add paravirt_kvm support for qemux86-64
linux-yocto/4.14/4.18: address kernel configuration warnings
kernel-yocto/cfg: configuration warning fixes
base-files: change permissions on /sys and /proc
os-release: move to nonarch_libdir
tzdata: update to 2018f
tzcode: update to 2018f
tzdata: update to 2018e
tzcode-native: updatet to 2018e
yocto-uninative: Upgrade to verson 2.3 which includes glibc 2.28
kernel: specify dependencies for compilation for config tasks
valgrind: fix compile ptest failure on mips32
valgrind: fix ptest compilation for PowerPC64
perl: skip tests that are not useful
externalsrc.bbclass: Set BB_DONT_CACHE for non-target recipes
rootfs: always update the opkg index
runqemu: fix handling of SIGTERM and the problem of line wrapping
runqemu: exit gracefully with an error message if qemu system is not evaluated
runqemu: add SIGTERM handler to make sure things are cleaned up
x264: Disable asm on musl/x86
recipes: Update git.gnome.org addresses after upstream changes
checklayer: avoid recursive loop in add_layer_dependencies
bitbake: fetcher: Fixed remote removal not throwing exception.
initramfs-framework/udev: call settle before kill
qemux86-directdisk: remove mem= parameter
cmake: put cmake.m4 and toolchain file in PN
mkefidisk: fix installation of kernel image
libsdl2: Fix left rotated display for RaspPi/VC4/GLES2
security_flags: disable static PIE in glibc
bitbake: main: Fix environment handling for UI module imports
bitbake: toaster: Fix bitbake flexible path error from Bugzilla #12891
apr-util: fix ptest fail problem
linux-yocto/4.14: update to v4.14.67
linux-yocto/4.14: update to v4.14.62
linux-yocto/4.12: update to v4.12.28
binutils: Change the ARM assembler's ADR and ADRl pseudo-ops so that they will only set the bottom bit of imported thumb function symbols if the -mthumb-interwork option is active.
os-release: fix to install in the expected location
serf: Fix Sconstruct build with python 3.7
xserver-xorg: config: fix NULL value detection for ID_INPUT being unset
busybox/mdev-mount.sh: Fix partition detect and cleanup mountpoint on fail
busybox: move init related configs to init.cfg
busybox: handle syslog
util-linux: upgrade 2.32 -> 2.32.1
bitbake: bitbake: toaster: Fix comparison in recipe template
bitbake: toaster/layerdetails.js: don't hide local layer info
bitbake: toaster/models.py: allow local paths for custom recipe's base
bitbake: toaster/checksettings: allow CUSTOM_XML_ONLY setting through env
bitbake: toastergui/newproject.html: fix release divs
bitbake: toaster/widgets.py: avoid divide by zero issues
bitbake: bitbake: toaster: allow TOASTER_DIR to be overridden from cmdline
bitbake: toaster: use a more flexible way to find bitbake
bitbake: toaster: allow pokydirname to be evaluated when all layers are local
bitbake: checksum: sanity check path when recursively checksumming
bitbake: utils/md5_file: don't iterate line-by-line
swig: Remove superfluous python dependency
unzip: fix symlink problem
openssl: update 1.1.0h -> 1.1.0i
openssl: update 1.0.2o -> 1.0.2p
openssl-1.1: fix c_rehash perl errors
openssl_1.0: drop unnecessary call to perlpath.pl from do_configure()
openssl_1.0: drop unnecessary dependency on makedepend-native
openssl: fix missing dependency on hostperl-runtime-native
openssl_1.0: squash whitespace in CC_INFO
openssl_1.0: add PACKAGECONFIG option to control manpages
openssl_1.0: drop unmaintained darwin support
openssl_1.0: drop obsolete exporting of AS, EX_LIBS and DIRS
openssl_1.0: drop obsolete ca.patch
openssl: minor indent fixes
openssl: support musl-x32 build
openssl: remove uclibc remnants
openssl_1.0: avoid running make twice for target do_compile()
openssl_1.0: drop leading "-" from no-ssl3 config option
openssl_1.0: fix cryptodev-linux PACKAGECONFIG support
openssl_1.0: drop curly brackets from shell local variables
openssl_1.0: minor recipe formatting tweaks etc
openssl_1.0: merge openssl10.inc into the openssl_1.0.2o.bb recipe
openssl_1.1: minor recipe formatting tweaks etc
openssl_1.1: avoid using += with an over-ride
openssl-nativesdk: Fix "can't open config file" warning
openssl: disable ccache usage
openssl: fix upstream version check for 1.0 version
wic/qemux86: don't pass ip parameter to kernel in wks
alsa-lib: Cleanup packaging
classes: sanity-check LIC_FILES_CHKSUM
bzip2: use Yocto Project mirror for SRC_URI
bitbake: tests/fetch: Update gnome.org urls after upstream changes
multilib_header: recognize BPF as a target
glibc: Make bits/wordsize.h multilibbed again
oe-pkgdata-util: package-info: Re-add support for the --extra option
oe-pkgdata-util: Make parse_pkgdatafile() support package suffixed vars
oe-pkgdata-util: lookup-recipe, package-info: Don't finish prematurely
devtool/sdk.py: error out in case of downloading file failure
documentation: Updated for a 2.5.1 release
ref-manual: Removed non-existant variable from PACKAGE_WRITE_DEPS description
sdk-manual: Fixed bad anchor string.
sdk-manual: Updated section on minimizing eSDK installer size
sdk-manual: Converted bullet list to ordered list
sdk-manual: Updated "Providing Additional Installable Extensible SDK Content"
sdk-manual: Provided better wording for sharing HTTP or HTTPS server
sdk-manual: Updates to sections for updating installed Ext SDKs
sdk-manual: Changed title to updating the SDK after install
sdk-manual: Fixed grammar error
sdk-manual: Updated section on changing title of extensible SDK installer
ref-manual: Updated DISTRO_NAME variable description.
ref-manual: Updated the DISTRO variable description
sdk-manual: Grammar fix
sdk-manual: Updates to "Adjusting the Extensible SDK to Suit Build Host"
sdk-manual: Updates to "Configuring the Extensible SDK" section
ref-manual: Fixed cross-reference wording in SDK_LOCAL_CONF_WHITELIST
ref-manual: Fixed grammar error in SDK_INHERIT_BLACKLIST description
ref-manual: Added cross-reference to SDK_LOCAL_CONF_BLACKLIST var
ref-manual: Updated the SDK_INHERIT_BLACKLIST variable description
ref-manual: Updated the SDK_LOCAL_CONF_WHITELIST variable description
ref-manual: Updated the SDK_LOCAL_CONF_BLACKLIST variable description
sdk-manual, mega-manual: Updated the fig for installed ext. SDK
sdk-manual, mega-manual: Updated standard SDK install directory figure
sdk-manual: Final edits to the extracting root filesystem section
sdk-manual: Added note in step to set SDKMACHINE