2019年2月4日付けで、Yocto2.6.1(Thud)のリリースがアナウンスされています。
2019/01/08にコミットされたものがQAを経てのリリースとなっています。

本日（日本時間2019年2月5日 18:30)現在、git で　branch thud で指定したものは
bitbake関連のアップデートが行われておりますが、レシピに関するアップデートは
登録されていません。
リリースノートに記載されている修正項目のうち、bitbake関連のfixは配布されるtar.bz2
には含まれておりませんので、ご注意下さい。
なお、thudの動作確認済のhost OSに変更が有ります。
ubuntu-16.10及び17.04、 fedora-26 、opensuse-42.1及び42.2が非検証となり
新規にubuntu-18.04 、fedora-28 、opensuse-42.3 が検証済バージョンに追加となっています。
本リリースの詳細は以下のURLにてご確認ください。
https://lists.yoctoproject.org/pipermail/yocto-announce/2019-February/00...

---------------
Known Issues
---------------
Bug# 13143: bitbake core-image-minimal failed because no module named 'gpg' on CentOS 7 and OpenSuse 42.3
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13143

Bug# 12991: Bitbake build-appliance-image getting failed during building image due to webkitgtk package
https://bugzilla.yoctoproject.org/show_bug.cgi?id=12991

Both of these bugs are still being root caused. Please see the respective bugs for steps to reproduce and further details.

---------------
Security Fixes
---------------
linux-yocto/4.18: integrate CVE fixes
ref-manual: Added GCCVERSION variable description to glossary.
curl: actually apply latest CVE patches
unzip: actually apply CVE-2018-18384
binutils: fix four CVE issues
curl: fix for CVE-2018-16839/CVE-2018-16840/CVE-2018-16842
openssl: fix CVE-2018-0735 for 1.1.1
openssl: fix CVE-2018-0734 for both 1.0.2p and 1.1.1
ghostscript: fix CVE-2018-18284
ghostscript: fix CVE-2018-18073
ghostscript: fix CVE-2018-17961
elfutils: fix CVE-2018-18520 & CVE-2018-18521 & CVE-2018-18310
nasm: fix CVE-2018-1000667
unzip: fix for CVE-2018-18384
qemu: fix for CVE-2018-10839
systemd: fix CVE-2018-15688
systemd: fix CVE-2018-15687
systemd: fix CVE-2018-15686
nss: update to 3.39 includes CVE-2018-12384
xserver-xorg: fix CVE-2018-14665

---------------
Fixes　注：先頭2行は、tar,bz2 には含まれていません
---------------
brief-yoctoprojectqs, dev-manual: Update tag checkout examples
poky.ent: Updated release date to "January 2019"
build-appliance-image: Update to thud head revision
poky: Update version to 2.6.1
local.conf.sample: Update the sample config as per new migration manual
bitbake: bitbake-diffsigs: Support recursive deps with signature files
bitbake: bitbake-diffsigs: Merge with bitbake-dumpsig
poky.conf: Update the distros we test against on the autobuilder
bitbake: server/process: Show last 60 lines of the log if the server didn't start
bitbake: server/process: Show the last 60 log lines, not the last 10
bitbake: server/process: print a message when no logfile
bitbake: server/process: Make lockfile handling clearer
bitbake: fetch: don't use shell=True when listing ar files
bitbake: layerindex: don't use shell=True when cloning
linux-yocto: correct qemumips64el definition
linux-yocto: configuration updates (virtio and tpm)
populate_sdk_ext.bbclass: Include site.conf in parsing for contents for local.conf
createrepo-c: Fix setup of logging (log domains)
nss: Fix SHA_HTONL bug for arm 32be.
go 1.9/1.11: fix textrel qa warning for non mips arch
python3: drop redundant patch
python3: don't cripple target distutils
gdb: Remove long ago upstreamed patch
valgrind: Skip vgpreload_memcheck shared object from stripping
classes/icecc.bbclass: Fix ccache disable
patchreview: Various fixes/improvements
insane: Clarify GNU_HASH warning
linux-firmware: better packaging for TI wl12xx & wl18xx firmwares
linux-firmware: Bump revision to 1baa348
openssl: correct bad path on package preprocess
ruby: upgrade 2.5.1 -> 2.5.3
linux-yocto/4.18: update to v4.18.21
linux-yocto/4.18: update to v4.18.20
linux-yocto/4.14: update to v4.14.79
linux-yocto/4.18: update to v4.18.17
linux-yocto/4.18: bug fixes and configuration tweaks
linux-yocto/tiny: restore qemuarm support
linux-yocto/tiny: switch default branch to standard/tiny/base
linux-yocto/4.18: -rt sync and config cleanups
linux-yocto/4.14: configuration cleanups
linux-yocto: remove obselete options from lxc config
licence: Add license file CC-BY-SA-4.0
piglit: add missing waffle-bin dependency
binconfig: only try to mangles files
libc-package: fix postinst error when ENABLE_BINARY_LOCALE_GENERATION = "0"
python: Adds instructions to the manifest file
libtasn1: no need to inherit binconfig
image_types: use cpio-native to build cpio images
cpio: fix crash when appending to archives
meta-selftest/error: Cleanup large trailing whitespace
nspr: improve reproducibility
ghostscript: 9.25 -> 9.26
scripts/runqemu: Fix logic error causing failures with MACHINE from the environment
gst-validate: upgrade 1.14.2 -> 1.14.4
gstreamer1.0-python: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-omx: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-rtsp-server: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-vaapi: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-libav: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-ugly: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-bad: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-good: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-base: upgrade 1.14.3 -> 1.14.4
gstreamer1.0: upgrade 1.14.3 -> 1.14.4
gst-plugins-bad: add PACKAGECONFIG for msdk
gstreamer1.0-python: upgrade to version 1.14.3
gstreamer1.0-omx: upgrade to version 1.14.3
gstreamer1.0-vaapi: upgrade to version 1.14.3
gstreamer1.0-rtsp-server: upgrade to version 1.14.3
gstreamer1.0-libav: upgrade to version 1.14.3
gstreamer1.0-plugin-ugly: upgrade to version 1.14.3
gstreamer1.0-plugin-bad: upgrade to version 1.14.3
gstreamer1.0-plugin-good: upgrade to version 1.14.3
gstreamer1.0-plugin-base: upgrade to version 1.14.3
gstreamer1.0: upgrade to version 1.14.3
maintainers.inc: update Intel owners
devtool: fix target-deploy --strip
multilib_script: fix packages split
systemd: fix PN-container package splitting
archiver.bbclass: Fix COPYLEFT_LICENSE_{IN, EX}CLUDE
openssl: update to 1.1.1a
image.bbclass: fix a wrong position blank
mdadm: improve the run-ptest
meson: Correct use of the _append operator
meson: Disable rpath stripping at install time
meson: do not manipulate the environment when looking for python via pkg-config
ethtool: 4.17 -> 4.19
iproute2: 4.18.0 -> 4.19.0
sstate.bbclass: Only remove sstate file when task is existed
bugzilla.bbclass: Remove it since obsoleted
libgcrypt: upgrade 1.8.3 -> 1.8.4
gnupg: upgrade 2.2.10 -> 2.2.11
gnupg: upgrade 2.2.9 -> 2.2.10
gnutls: update to 3.6.4
elfutils: 0.174 -> 0.175
recipes: Remove tab indentations in python code
classes: Remove tab indentations in python code
ptest: Reproducibility: Take control of umask
reproducible: Don't look for youngest file when no source tarball
reproducible: Refactor: Break out fixed_source_date_epoch() function
boost-context: Reproducibility: Set .file section for all *_elf_gas.S files
opkg-utils: Fix update-alternatives link relocation
meta/icecc.bbclass: Update system blacklists
meta/icecc.bbclass: Move system blacklist to variables
socat: fix LICENSE
bitbake: siggen: Adapt colors used by bitbake-diffsigs to support light themes
Documentation: Prepare for 2.6.1 release.
ref-manual: Document the fifth argument to PACKAGECONFIG
ref-manual: Add missing whitespace around "=" in a few code examples.
poky.ent: Updated copyright variable to span into 2019.
ref-manual: Updates to CMake and cmake.bbclass.
ref-manual: Updated list of supported Linux Distros:
dev-manual: Added note stating no WSL support
ref-manual: Added a note saying WSL is not supported.
brief-yoctoprojectqs: Added warnings about WSL, which can't be used.
kernel-dev: Updated phrasing for what a "defconfig" file is.
ref-manual: Updated image_types.bbclass description.
ref-manual: Added description for devupstream.bbclass
dev-manual: Updated the "Post-Installation Scripts" section.
ref-manual: Added cross-references to "Post-Installation Scripts"
ref-manual: Updated "Packaging Changes" section for 2.6 migration.
ref-manual: Applied review edits to the 2.6 migration section.
ref-manual: New 2.6 Migration section complete.
ref-manual: Added new python3 profile-optimization migration topic
ref-manual: Updated postinstall migration note.
ref-manual: Updates to the 2.6 migration section.
ref-manual: Added KERNEL_ARTIFACT_NAME and adjusted referencing variables.
ref-manual: Removed the NOISO and NOHDD references.
dev-manual: Removed occurrence of mkefidisk.sh script.
ref-manual: Removed the NOISO and NOHDD variables.
ref-manual: Added several new sections to the 2.6 migration section.
ref-manual: Added new artifact naming variables to glossary.
ref-manual: Changed "post 2.6" to correct wording.
ref-manual: Added KERNEL_IMAGE_NAME description
ref-manual: Updated migration section for 2.6
ref-manual: Updated 2.6 migration topic "_remove"
ref-manual: Added the 2.6 Migration Section.
ref-manual: Updated testimage and testsdk class descriptions.
ref-manual, dev-manual: Removed TEST_IMAGE for TESTIMAGE_AUTO.
poky.ent: Updated release month to November 2018 (thud)
oeqa/selftest/esdk: Fix typo causing test failure
oeqa/selftest/esdk: Ensure parent directory exists
testimage/testsdk/selftest: Avoid platform.distro_identifier deprecation warnings
oeqa/concurrencytest: Avoid unclosed file warnings
oeqa/utils/qemurunner.py: Fix python regex warnings
oeqa/selftest/context: Replace deprecated imp module usage
oeqa/utils/commands: Avoid unclosed file warnings
oeqa/core/runner: Correctly markup regexs
oeqa/loader: Fix deprecation warning
oeqa/runner: Sort the test result output by result class
oeqa/runner: Always show a summary of success/fail/error/skip counts
oeqa/selftest/esdk: run selftest inside workdir not /tmp
oeqa: don't litter /tmp with temporary directories
oeqa/utils/qemurunner: Avoid tracebacks on closed files
oeqa/selftest/runqemu: Improve testcase failure handling
lib/oe/utils: Improve multiprocess_lauch exception handling
oeqa/oelib/path: don't leak temporary directories
oeqa/selftest/context: Improve log file handling
oeqa/selftest/buildoptions: Ensure diskmon tests run consistently
oeqa/selftest/buildoptions: Improve ccache test
oeqa/qemurunner: Remove resource python warnings
oeqa/utils/commands: Avoid log message duplication
oeqa/utils/qemurunner: Fix python ResourceWarning for unclosed file
oeqa/utils/commands: Add extra qemu failure logging
oeqa/selftest/buildoptions: Improve ccache test failure output
oeqa/selftest/case: Use bb.utils.remove() instead of shutil.remove()
oeqa/selftest/signing: Use do_populate_lic target instead of do_package
oeqa/selftest/signing: Allow tests not to need gpg on the host
oeqa/selftest/signing: Skip tests if gpg isn't found
scripts/runqemu: Improve lockfile handling for python with close_fd=True
scripts/runqemu: Tidy up lock handling code
scripts/runqemu: Replace subprocess.run() for compatibilty
bitbake: bitbake-user-manual: Added "usehead" parameter.
bitbake: main: Don't use print() directly, use logger
bitbake: process: Flush key output to logs
bitbake: fetch2/svn: Fix SVN repository concurrent update race
bitbake: runqueue: Ensure disk monitor is started when no setscene tasks are run
bitbake: server/process: Fix ConnectionRefusedError tracebacks
bitbake: fetch2: Avoid warning about incorrect character escaping in regex
gstreamer1.0-vaapi: downgrade vaapisink to marginal rank
bitbake: tests/fetch: Update after recent gitsm message changes
bitbake: cooker: Fix multiconfig dependencies
bitbake: fetch/git: fix AttributeError in shallow extraction logic
sanity: Add check for WSL
oeqa/utils/httpserver: Rework to avoid hangs and improve logging
openssl-1.1.1: remove build path from version info
busybox: make busybox.links.{suid, nosuid} reproducible
shadow: improve reproducibility by hard-coding shell path
oeqa/selftest/recipetool: Fix problems from changing upstream source
image-buildinfo,oeqa/selftest/containerimage: Ensure image-buildinfo doesn't break tests
valgrind: drop mips n32 support
oeqa/selftest: Standardize json logging output directory
glibc: make ld-2.28.so reproducible on arm
base.bbclass: avoid 'find -ignore_readdir_race -delete'
bitbake: server/process: Fix unclosed socket warnings upon server connection refused
bitbake: siggen: Correct format argument substitution
bitbake: fetch: Also export GIT_SSH environment variable
bitbake: bitbake: toaster: allow OE_ROOT to be provided through environment
bitbake: fetch2/gitsm.py: Fix the references when the module and path are different
bitbake: fetch2/gitsm.py: Disable branch checking on submodules
perf: Disable libunwind for ARC & RISCV64
apt: update SRC_URI
archiver: Drop unwanted directories
scripts/autobuilder-worker-prereq-tests: adjust max_user_watches
meta: Use double colon for chown OWNER:GROUP
wic: use explicit errno import
oeqa/selftest: Add test for Yocto source mirror functionality/completeness
libgpg-error: Support build for native on ppc64/ppc64le hosts
v86d: Make cross compilation working on more architectures
oe-init-buildenv/base: Relax python version checks in favour of HOSTTOOLS manipulation
oeqa/runtime/ptest: Inject results+logs into stored json results file
crosssdk: Remove usage of host flags for cross-compilation
go: Change from TARGET_ARCH to TUNE_PKGARCH
go-dep: disable PTEST_ENABLED for mips and mips64
python3: add python3-venv to the python3-modules RDEPENDS
python3: Fix python3-pyvenv run-time dependency
gdbm: fix ptest failure
pixman: Trim license info extracted from pixman-matrix.c
libgpg-error: Trim license info extracted from init.c & gpg-error.h.in
apr-util: Trim license info extracted from apu_version.h
apr: Trim license info extracted from apr_lib.h
common-licenses: Correct the FreeType license text
reproducible_build: update do_deploy_source_date_epoch commment
elfutils: 0.173 -> 0.174
tzdata: update to 2018g
tzcode-native: update to 2018g
bitbake: bitbake-user-manual: Added hard-spacing to "_remove" example.