2019年4月25日付けで、Yocto2.5.3(Sumo)のリリースがアナウンスされています。
2019/03/27にコミットされたものがQAを経てのリリースとなっています。

本日（日本時間2019年5月7日 14:30)現在、git で　branch sumo で指定したものは
リリース日以降にoeqa/resulttool/wic 関連のアップデートが行われています。

本リリースの詳細は以下のURLにてご確認ください。
https://lists.yoctoproject.org/pipermail/yocto-announce/2019-April/00015...

---------------
Known Issues
---------------
Bug 13191 - [Test Case 1439] Build Failure after adding or removing packages with and without dependencies
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13191

Bug 12991 - [Bug] [2.6 M4 RC1][Build-Appliance] Bitbake build-appliance-image getting failed during building image due to webkitgtk package.
https://bugzilla.yoctoproject.org/show_bug.cgi?id=12991

---------------
Security Fixes
---------------
busybox: backport fix for issues introduced by CVE-2011-5325.patch
systemd: fix CVE-2019-6454
systemd: fix CVE-2018-6954
systemd: Security fix CVE-2018-16866
systemd: Security fix CVE-2018-16865
systemd: Security fix CVE-2018-16864
systemd: fix CVE-2018-15688
systemd: fix CVE-2018-15687
systemd: fix CVE-2018-15686

---------------
Fixes
---------------
build-appliance-image: Update to sumo head revision
oeqa/utils/gitarchive: Handle case where parent is only on origin
build-appliance-image: Update to sumo head revision
poky.conf: Bump version for 2.5.3 sumo release
yocto-uninative: Update to 2.4
oe-build-perf-report/gitarchive: Move common useful functions to library
scripts/oe-git-archive: Separate out functionality to library function
oe-build-perf-report: Fix missing buildstats comparisions
oe-build-perf-report: Improve branch comparision handling
oe-build-perf-report: Allow commits from different branches
oe-build-perf-report: Allow branch without hostname
resulttool/manualexecution: To output right test case id
resulttool/report: Enable roll-up report for a commit
scripts/resulttool: Enable manual result store and regression
resulttool/regression: Ensure regressoin results are sorted
resulttool/store: Fix missing variable causing testresult corruption
resulttool/report: Ensure ptest results are sorted
resulttool/report: Ensure test suites with no results show up on the report
resulttool/report: Handle missing metadata sections more cleanly
resulttool/store: Handle results files for multiple revisions
resulttool/resultutils: Avoids tracebacks for missing logs
resulttool: Improvements to allow integration to the autobuilder
scripts/resulttool: enable manual execution and result creation
resulttool: enable merge, store, report and regression analysis
lttng-tools: update to 2.9.11
lttng-modules: update to 2.10.9
lttng-ust: update to 2.10.3
coreutils: 8.29: fix native build
logrotate.py: restore /etc/logrotate.d/wtmp
systemd: Fix typo in root home variable.
oeqa/runtime/dnf: Fix test error when static libs are enabled
run-postinsts: for dpkg/opkg, do not rely on /etc/*-postinsts
ref-manual: Fixed SRC_URI cut-and-paste error.
bitbake: COW: Fix StopIteration warning
bitbake: utils: add optional callback to edit_bblayers_conf()
bitbake: process: Rewrite multiple connection handling
bitbake: process: Handle EWOULDBLOCK in socket connect
bitbake: process.py: Set socket timeout to 10 seconds
bitbake: server/process: Ensure socket has a timeout set
bitbake: cooker: Add some timing debug messages to the server startup
bitbake: server/process: Increase server startup time delay
bitbake: bitbake-diffsigs: Support recursive deps with signature files
bitbake: bitbake-diffsigs: Merge with bitbake-dumpsig
bitbake: server/process: Show last 60 lines of the log if the server didn't start
bitbake: server/process: Show the last 60 log lines, not the last 10
bitbake: server/process: print a message when no logfile
bitbake: server/process: Make lockfile handling clearer
bitbake: layerindex: don't use shell=True when cloning
bitbake: fetch: don't use shell=True when listing ar files
package_rpm/archiver: Apply bandaid to src.rpm creation
archiver/package_rpm: Fix the worst src.rpm generation race
libtool-cross: Handle ccache sstate 'infection' issues
libtool: Fix patch status tag
libtool: Fix problem with libtoolize in multilib installations
multilib_script: Add support for multilib scripts
image_types: use cpio-native to build cpio images
cpio: fix crash when appending to archives
oe-selftest: devtool: Support meta being a symbolic link
oe-selftest: devtool: avoid parallel races by using temporary copy of core Only add uninative and checksum if inherited uninative class
oeqa/utils/httpserver: Rework to avoid hangs and improve logging
oeqa/runtime/dnf: Make sure test_dnf_install does not skipped
perl: add testdepends for ssh
oeqa: rationalise Perl tests
oeqa/utils/buildproject: Only clean files if we've done something
oeqa/selftest/runqemu: Enable kvm when QEMU_USE_KVM is set oeqa/qemu & runtime: qemu do not need ip input from external
oeqa/runtime/cases: Improve dependencies of kernel/gcc/build tests
oeqa/runtime/cases: Improve test dependency information
oeqa/runtime/python: clean up Python test
oeqa/runtime/cases/python: use python 3 rather than python 2
runqemu-gen-tapdevs: Allow run --help without sudo
runqemu: clean up subprocess usage
oeqa/runtime/cases/rpm.py: change to use base-passwd-doc
oeqa: replace Alex Kanavin's @intel email address with a personal one
oeqa: make it work for multiple users
meta/classes/testimage.bbclass: Only validate IMAGE_FSTYPES when is QEMU
testimage.bbclass: remove boot parameter systemd.log_target
testimage: Add possibility to pass parmeters to qemu
testimage: Add support for slirp
testimage: Enable autorunning of the package manager testsuites
testimage: Further cleanup DEFAULT_TEST_SUITES
testimage: Simplfy DEFAULT_TEST_SUITES logic
runtime/dnf: Add new dnf test cases
kernel: don't assign the build user/host
oeqa: Fix for QEMU_USE_KVM
patch: reproducibility: Fix host umask leakage
scripts/oe-git-archive: fix non-existent key referencing error
package.bbclass: fix python unclosed file ResourceWarning
package: Rework PACKAGELOCK based upon sstate for do_packagedata
testimage.bbclass: fix qemu_use_kvm handling
testimage/testsdk/selftest: Avoid platform.distro_identifier deprecation warnings
oeqa/utils/qemurunner: set timeout to 60s for run_serial
tzdata/tzcode-native: update to 2018i
tzcode-native: update to 2018g
tzdata: update to 2018g
oeqa/utils/qemurunner: Print output when failed to login
busybox: Put klogd/syslogd alternative links in syslog package overview-manual, mega-manual: Updated Package Feeds diagram
ref-manual: Typo found and fixed.
dev-manual: Updated clone and checkout examples.
brief-yoctoprojectqs: Updated clone and checkout example.
documentation: Updates to support a 2.5.3 release:
bitbake: bitbake-user-manual: Fixed section head typo brief-yoctoprojectqs, dev-manual: Updated poky clone examples.
poky.ent: Updated release date to "January 2019".
Documentation: Updated dates for 2.5.2 release.
testsdk: Improvements to the json logging
testimage: Improvements to the json logging
oeqa/selftest/esdk: Fix typo causing test failure
default-versions.inc: Make PREFERRED_VERSION_openssl* overwritable
oeqa/selftest/esdk: Ensure parent directory exists
image-buildinfo,oeqa/selftest/containerimage: Ensure image-buildinfo doesn't break tests
oeqa/utils/metadata: Allow to function without the git module
oeqa/selftest: Standardize json logging output directory
oeqa/selftest: Improvements to the json logging
testsdk.bbclass: write testresult to json files
testimage.bbclass: write testresult to json files
oeqa/selftest/context: write testresult to json files
oeqa/runner: Sort the test result output by result class
oeqa/runner: Always show a summary of success/fail/error/skip counts
oeqa/runtime/ptest: Inject results+logs into stored json results file
oeqa/core/runner: write testresult to json files
oeqa/core/runner: refactor for OEQA to write json testresult
oeqa: Remove xmlrunner
oeqa/runner: Simplify code
oeqa/core/threaded: Remove in favour of using concurrenttests
oeqa/runner: Ensure we don't print misleading results output
oeqa/core/runner: Improve test case comparision
oeqa/selftest/context: Improve log file handling
oeqa/utils/qemurunner.py: Fix python regex warnings
oeqa/selftest/context: Replace deprecated imp module usage
oeqa/utils/commands: Avoid unclosed file warnings
oeqa/loader: Fix deprecation warning
oeqa/selftest/esdk: run selftest inside workdir not /tmp
oeqa: don't litter /tmp with temporary directories
oeqa/utils/qemurunner: Avoid tracebacks on closed files
oeqa/selftest/runqemu: Improve testcase failure handling
oeqa/oelib/path: don't leak temporary directories
oeqa/selftest/buildoptions: Ensure diskmon tests run consistently
oeqa/selftest/buildoptions: Improve ccache test
oeqa/qemurunner: Remove resource python warnings
oeqa/utils/commands: Avoid log message duplication
oeqa/utils/qemurunner: Fix python ResourceWarning for unclosed file
oeqa/utils/commands: Add extra qemu failure logging
oeqa/selftest/buildoptions: Improve ccache test failure output
oeqa/selftest/case: Use bb.utils.remove() instead of shutil.remove()
oeqa/selftest/signing: Use do_populate_lic target instead of do_package
oeqa/selftest/signing: Allow tests not to need gpg on the host
oeqa/selftest/signing: Skip tests if gpg isn't found
scripts/runqemu: Improve lockfile handling for python with close_fd=True
scripts/runqemu: Tidy up lock handling code
scripts/runqemu: Replace subprocess.run() for compatibilty
documentation: Prepared for 2.5.2 document release
bitbake: bitbake-user-manual: Added "usehead" parameter.
bitbake: main: Don't use print() directly, use logger
bitbake: process: Flush key output to logs
bitbake: runqueue: Ensure disk monitor is started when no setscene tasks are run
bitbake: server/process: Fix ConnectionRefusedError tracebacks
bitbake: lib/bb/server: Avoid UnboundLocalError traceback
bitbake: server/process: Fix unclosed socket warnings upon server connection refused