migration guides: add missing release notes

(From yocto-docs rev: 23d3687c4cf71e878619a7bd7b95a9df944ca76c)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Michael Opdenacker
2022-08-29 18:17:08 +02:00
committed by Richard Purdie
parent b051dc5d4f
commit e0c806a65c
7 changed files with 1215 additions and 0 deletions

View File

@@ -7,4 +7,6 @@ Release 3.4 (honister)
release-notes-3.4
release-notes-3.4.1
release-notes-3.4.2
release-notes-3.4.3
release-notes-3.4.4

View File

@@ -5,3 +5,6 @@ Release 4.0 (kirkstone)
migration-4.0
release-notes-4.0
release-notes-4.0.1
release-notes-4.0.2
release-notes-4.0.3

View File

@@ -0,0 +1,197 @@
Release notes for 3.4.3 (honister)
----------------------------------
Security Fixes in 3.4.3
~~~~~~~~~~~~~~~~~~~~~~~
- ghostscript: fix :cve:`2021-3781`
- ghostscript: fix :cve:`2021-45949`
- tiff: Add backports for two CVEs from upstream (:cve:`2022-0561` & :cve:`2022-0562`)
- gcc : Fix :cve:`2021-46195`
- virglrenderer: fix `CVE-2022-0135 <https://security-tracker.debian.org/tracker/CVE-2022-0135>`__ and `CVE-2022-0175 <https://security-tracker.debian.org/tracker/CVE-2022-0175>`__
- binutils: Add fix for :cve:`2021-45078`
Fixes in 3.4.3
~~~~~~~~~~~~~~
- Revert "cve-check: add lockfile to task"
- asciidoc: update git repository
- bitbake: build: Tweak exception handling for setscene tasks
- bitbake: contrib: Fix hash server Dockerfile dependencies
- bitbake: cooker: Improve parsing failure from handled exception usability
- bitbake: data_smart: Fix overrides file/line message additions
- bitbake: fetch2: ssh: username and password are optional
- bitbake: tests/fetch: Handle upstream master -> main branch change
- bitbake: utils: Ensure shell function failure in python logging is correct
- build-appliance-image: Update to honister head revision
- build-appliance-image: Update to honister head revision
- coreutils: remove obsolete ignored CVE list
- crate-fetch: fix setscene failures
- cups: Add --with-dbusdir to EXTRA_OECONF for deterministic build
- cve-check: create directory of CVE_CHECK_MANIFEST before copy
- cve-check: get_cve_info should open the database read-only
- default-distrovars.inc: Switch connectivity check to a yoctoproject.org page
- depmodwrapper-cross: add config directory option
- devtool: deploy-target: Remove stripped binaries in pseudo context
- devtool: explicitly set main or master branches in upgrades when available
- docs: fix hardcoded link warning messages
- documentation: conf.py: update for 3.4.2
- documentation: prepare for 3.4.3 release
- expat: Upgrade to 2.4.7
- gcc-target: fix glob to remove gcc-<version> binary
- gcsections: add nativesdk-cairo to exclude list
- go: update to 1.16.15
- gst-devtools: 1.18.5 -> 1.18.6
- gst-examples: 1.18.5 -> 1.18.6
- gstreamer1.0-libav: 1.18.5 -> 1.18.6
- gstreamer1.0-omx: 1.18.5 -> 1.18.6
- gstreamer1.0-plugins-bad: 1.18.5 -> 1.18.6
- gstreamer1.0-plugins-base: 1.18.5 -> 1.18.6
- gstreamer1.0-plugins-good: 1.18.5 -> 1.18.6
- gstreamer1.0-plugins-ugly: 1.18.5 -> 1.18.6
- gstreamer1.0-python: 1.18.5 -> 1.18.6
- gstreamer1.0-rtsp-server: 1.18.5 -> 1.18.6
- gstreamer1.0-vaapi: 1.18.5 -> 1.18.6
- gstreamer1.0: 1.18.5 -> 1.18.6
- harfbuzz: upgrade 2.9.0 -> 2.9.1
- initramfs-framework: unmount automounts before switch_root
- kernel-devsrc: do not copy Module.symvers file during install
- libarchive : update to 3.5.3
- libpcap: Disable DPDK explicitly
- libxml-parser-perl: Add missing RDEPENDS
- linux-firmware: upgrade 20211216 -> 20220209
- linux-yocto/5.10: Fix ramoops/ftrace
- linux-yocto/5.10: features/zram: remove CONFIG_ZRAM_DEF_COMP
- linux-yocto/5.10: fix dssall build error with binutils 2.3.8
- linux-yocto/5.10: ppc/riscv: fix build with binutils 2.3.8
- linux-yocto/5.10: update genericx86* machines to v5.10.99
- linux-yocto/5.10: update to v5.10.103
- mc: fix build if ncurses have been configured without wide characters
- oeqa/buildtools: Switch to our webserver instead of example.com
- patch.py: Prevent git repo reinitialization
- perl: Improve and update module RPDEPENDS
- poky.conf: bump version for 3.4.3 honister release
- qemuboot: Fix build error if UNINATIVE_LOADER is unset
- quilt: Disable external sendmail for deterministic build
- recipetool: Fix circular reference in SRC_URI
- releases: update to include 3.3.5
- releases: update to include 3.4.2
- rootfs-postcommands: amend systemd_create_users add user to group check
- ruby: update 3.0.2 -> 3.0.3
- scripts/runqemu-ifdown: Don't treat the last iptables command as special
- sdk: fix search for dynamic loader
- selftest: recipetool: Correct the URI for socat
- sstate: inside the threadedpool don't write to the shared localdata
- uninative: Upgrade to 3.5
- util-linux: upgrade to 2.37.4
- vim: Update to 8.2.4524 for further CVE fixes
- wic: Use custom kernel path if provided
- wireless-regdb: upgrade 2021.08.28 -> 2022.02.18
- zip: modify when match.S is built
Contributors to 3.4.3
~~~~~~~~~~~~~~~~~~~~~
- Alexander Kanavin
- Anuj Mittal
- Bill Pittman
- Bruce Ashfield
- Chee Yang Lee
- Christian Eggers
- Daniel Gomez
- Daniel Müller
- Daniel Wagenknecht
- Florian Amstutz
- Joe Slater
- Jose Quaresma
- Justin Bronder
- Lee Chee Yang
- Michael Halstead
- Michael Opdenacker
- Oleksandr Ocheretnyi
- Oleksandr Suvorov
- Pavel Zhukov
- Peter Kjellerstedt
- Richard Purdie
- Robert Yang
- Ross Burton
- Sakib Sajal
- Saul Wold
- Sean Anderson
- Stefan Herbrechtsmeier
- Tamizharasan Kumar
- Tean Cunningham
- Zoltán Böszörményi
- pgowda
- wangmy
Repositories / Downloads for 3.4.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: https://git.yoctoproject.org/poky/
- Branch: :yocto_git:`honister </poky/log/?h=honister>`
- Tag: `yocto-3.4.3 <https://git.yoctoproject.org/poky/tag/?h=yocto-3.4.3>`__
- Git Revision: :yocto_git:`ee68ae307fd951b9de6b31dc6713ea29186b7749 </poky/commit/?id=ee68ae307fd951b9de6b31dc6713ea29186b7749>`
- Release Artefact: poky-ee68ae307fd951b9de6b31dc6713ea29186b7749
- sha: 92c3d73c3e74f0e1d5c2ab2836ce3a3accbe47772cea70df3755845e0db1379b
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/poky-ee68ae307fd951b9de6b31dc6713ea29186b7749.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/poky-ee68ae307fd951b9de6b31dc6713ea29186b7749.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`honister </openembedded-core/log/?h=honister>`
- Tag: :oe_git:`yocto-3.4.3 </openembedded-core/tag/?h=yocto-3.4.3>`
- Git Revision: :oe_git:`ebca8f3ac9372b7ebb3d39e8f7f930b63b481448 </openembedded-core/commit/?id=ebca8f3ac9372b7ebb3d39e8f7f930b63b481448>`
- Release Artefact: oecore-ebca8f3ac9372b7ebb3d39e8f7f930b63b481448
- sha: f28e503f6f6c0bcd9192dbd528f8e3c7bcea504c089117e0094d9a4f315f4b9f
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/oecore-ebca8f3ac9372b7ebb3d39e8f7f930b63b481448.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/oecore-ebca8f3ac9372b7ebb3d39e8f7f930b63b481448.tar.bz2
meta-mingw
- Repository Location: https://git.yoctoproject.org/meta-mingw
- Branch: :yocto_git:`honister </meta-mingw/log/?h=honister>`
- Tag: :yocto_git:`yocto-3.4.3 </meta-mingw/tag/?h=yocto-3.4.3>`
- Git Revision: :yocto_git:`f5d761cbd5c957e4405c5d40b0c236d263c916a8 </meta-mingw/commit/?id=f5d761cbd5c957e4405c5d40b0c236d263c916a8>`
- Release Artefact: meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8
- sha: d4305d638ef80948584526c8ca386a8cf77933dffb8a3b8da98d26a5c40fcc11
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2
meta-gplv2
- Repository Location: https://git.yoctoproject.org/meta-gplv2
- Branch: :yocto_git:`honister </meta-gplv2/log/?h=honister>`
- Tag: :yocto_git:`yocto-3.4.3 </meta-gplv2/tag/?h=yocto-3.4.3>`
- Git Revision: :yocto_git:`f04e4369bf9dd3385165281b9fa2ed1043b0e400 </meta-gplv2/commit/?id=f04e4369bf9dd3385165281b9fa2ed1043b0e400>`
- Release Artefact: meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400
- sha: ef8e2b1ec1fb43dbee4ff6990ac736315c7bc2d8c8e79249e1d337558657d3fe
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`1.52 </bitbake/log/?h=1.52>`
- Tag: :oe_git:`yocto-3.4.3 </bitbake/tag/?h=yocto-3.4.3>`
- Git Revision: :oe_git:`43dcb2b2a2b95a5c959be57bca94fb7190ea6257 </bitbake/commit/?id=43dcb2b2a2b95a5c959be57bca94fb7190ea6257>`
- Release Artefact: bitbake-43dcb2b2a2b95a5c959be57bca94fb7190ea6257
- sha: 92497ff97fed81dcc6d3e202969fb63ca983a8f5d9d91cafc6aee88312f79cf9
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/bitbake-43dcb2b2a2b95a5c959be57bca94fb7190ea6257.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/bitbake-43dcb2b2a2b95a5c959be57bca94fb7190ea6257.tar.bz2
yocto-docs
- Repository Location: https://git.yoctoproject.org/yocto-docs
- Branch: :yocto_git:`honister </yocto-docs/log/?h=honister>`
- Tag: :yocto_git:`yocto-3.4.3 </yocto-docs/tag/?h=yocto-3.4.3>`
- Git Revision: :yocto_git:`15f46f97d9cad558c19fc1dc19cfbe3720271d04 </yocto-docs/commit/?15f46f97d9cad558c19fc1dc19cfbe3720271d04>`

View File

@@ -0,0 +1,155 @@
Release notes for 3.4.4 (honister)
----------------------------------
Security Fixes in 3.4.4
~~~~~~~~~~~~~~~~~~~~~~~
- tiff: fix :cve:`2022-0865`, :cve:`2022-0891`, :cve:`2022-0907`, :cve:`2022-0908`, :cve:`2022-0909` and :cve:`2022-0924`
- xz: fix `CVE-2022-1271 <https://security-tracker.debian.org/tracker/CVE-2022-1271>`__
- unzip: fix `CVE-2021-4217 <https://security-tracker.debian.org/tracker/CVE-2021-4217>`__
- zlib: fix :cve:`2018-25032`
- grub: ignore :cve:`2021-46705`
Fixes in 3.4.4
~~~~~~~~~~~~~~
- alsa-tools: Ensure we install correctly
- bitbake.conf: mark all directories as safe for git to read
- bitbake: knotty: display active tasks when printing keepAlive() message
- bitbake: knotty: reduce keep-alive timeout from 5000s (83 minutes) to 10 minutes
- bitbake: server/process: Disable gc around critical section
- bitbake: server/xmlrpcserver: Add missing xmlrpcclient import
- bitbake: toaster: Fix IMAGE_INSTALL issues with _append vs :append
- bitbake: toaster: fixtures replace gatesgarth
- build-appliance-image: Update to honister head revision
- conf.py/poky.yaml: Move version information to poky.yaml and read in conf.py
- conf/machine: fix QEMU x86 sound options
- devupstream: fix handling of SRC_URI
- documentation: update for 3.4.4 release
- externalsrc/devtool: Fix to work with fixed export funcition flags handling
- gmp: add missing COPYINGv3
- gnu-config: update SRC_URI
- libxml2: fix CVE-2022-23308 regression
- libxml2: move to gitlab.gnome.org
- libxml2: update to 2.9.13
- libxshmfence: Correct LICENSE to HPND
- license_image.bbclass: close package.manifest file
- linux-firmware: correct license for ar3k firmware
- linux-firmware: upgrade 20220310 -> 20220411
- linux-yocto-rt/5.10: update to -rt61
- linux-yocto/5.10: cfg/debug: add configs for kcsan
- linux-yocto/5.10: split vtpm for more granular inclusion
- linux-yocto/5.10: update to v5.10.109
- linux-yocto: nohz_full boot arg fix
- oe-pkgdata-util: Adapt to the new variable override syntax
- oeqa/selftest/devtool: ensure Git username is set before upgrade tests
- poky.conf: bump version for 3.4.4 release
- pseudo: Add patch to workaround paths with crazy lengths
- pseudo: Fix handling of absolute links
- sanity: Add warning for local hasheqiv server with remote sstate mirrors
- scripts/runqemu: Fix memory limits for qemux86-64
- shadow-native: Simplify and fix syslog disable patch
- tiff: Add marker for CVE-2022-1056 being fixed
- toaster: Fix broken overrides usage
- u-boot: Inherit pkgconfig
- uninative: Upgrade to 3.6 with gcc 12 support
- vim: Upgrade 8.2.4524 -> 8.2.4681
- virglrenderer: update SRC_URI
- webkitgtk: update to 2.32.4
- wireless-regdb: upgrade 2022.02.18 -> 2022.04.08
Known Issues
~~~~~~~~~~~~
There were a couple of known autobuilder intermittent bugs that occurred during release testing but these are not regressions in the release.
Contributors to 3.4.4
~~~~~~~~~~~~~~~~~~~~~
- Alexandre Belloni
- Anuj Mittal
- Bruce Ashfield
- Chee Yang Lee
- Dmitry Baryshkov
- Joe Slater
- Konrad Weihmann
- Martin Jansa
- Michael Opdenacker
- Minjae Kim
- Peter Kjellerstedt
- Ralph Siemsen
- Richard Purdie
- Ross Burton
- Tim Orling
- wangmy
- zhengruoqin
Repositories / Downloads for 3.4.4
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: https://git.yoctoproject.org/poky/
- Branch: :yocto_git:`honister </poky/log/?h=honister>`
- Tag: `yocto-3.4.4 <https://git.yoctoproject.org/poky/tag/?h=yocto-3.4.4>`__
- Git Revision: :yocto_git:`780eeec8851950ee6ac07a2a398ba937206bd2e4 </poky/commit/?id=780eeec8851950ee6ac07a2a398ba937206bd2e4>`
- Release Artefact: poky-780eeec8851950ee6ac07a2a398ba937206bd2e4
- sha: 09558927064454ec2492da376156b716d9fd14aae57196435d742db7bfdb4b95
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.4/poky-780eeec8851950ee6ac07a2a398ba937206bd2e4.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.4/poky-780eeec8851950ee6ac07a2a398ba937206bd2e4.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`honister </openembedded-core/log/?h=honister>`
- Tag: :oe_git:`yocto-3.4.4 </openembedded-core/tag/?h=yocto-3.4.4>`
- Git Revision: :oe_git:`1a6f5e27249afb6fb4d47c523b62b5dd2482a69d </openembedded-core/commit/?id=1a6f5e27249afb6fb4d47c523b62b5dd2482a69d>`
- Release Artefact: oecore-1a6f5e27249afb6fb4d47c523b62b5dd2482a69d
- sha: b8354ca457756384139a579b9e51f1ba854013c99add90c0c4c6ef68421fede5
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.4/oecore-1a6f5e27249afb6fb4d47c523b62b5dd2482a69d.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.4/oecore-1a6f5e27249afb6fb4d47c523b62b5dd2482a69d.tar.bz2
meta-mingw
- Repository Location: https://git.yoctoproject.org/meta-mingw
- Branch: :yocto_git:`honister </meta-mingw/log/?h=honister>`
- Tag: :yocto_git:`yocto-3.4.4 </meta-mingw/tag/?h=yocto-3.4.4>`
- Git Revision: :yocto_git:`f5d761cbd5c957e4405c5d40b0c236d263c916a8 </meta-mingw/commit/?id=f5d761cbd5c957e4405c5d40b0c236d263c916a8>`
- Release Artefact: meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8
- sha: d4305d638ef80948584526c8ca386a8cf77933dffb8a3b8da98d26a5c40fcc11
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.4/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.4/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2
meta-gplv2
- Repository Location: https://git.yoctoproject.org/meta-gplv2
- Branch: :yocto_git:`honister </meta-gplv2/log/?h=honister>`
- Tag: :yocto_git:`yocto-3.4.4 </meta-gplv2/tag/?h=yocto-3.4.4>`
- Git Revision: :yocto_git:`f04e4369bf9dd3385165281b9fa2ed1043b0e400 </meta-gplv2/commit/?id=f04e4369bf9dd3385165281b9fa2ed1043b0e400>`
- Release Artefact: meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400
- sha: ef8e2b1ec1fb43dbee4ff6990ac736315c7bc2d8c8e79249e1d337558657d3fe
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.4/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.4/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`1.52 </bitbake/log/?h=1.52>`
- Tag: :oe_git:`yocto-3.4.4 </bitbake/tag/?h=yocto-3.4.3>`
- Git Revision: :oe_git:`c2d8f9b2137bd4a98eb0f51519493131773e7517 </bitbake/commit/?id=c2d8f9b2137bd4a98eb0f51519493131773e7517>`
- Release Artefact: bitbake-c2d8f9b2137bd4a98eb0f51519493131773e7517
- sha: a8b6217f2d63975bbf49f430e11046608023ee2827faa893b15d9a0d702cf833
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.4/bitbake-c2d8f9b2137bd4a98eb0f51519493131773e7517.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-3.4.4/bitbake-c2d8f9b2137bd4a98eb0f51519493131773e7517.tar.bz2
yocto-docs
- Repository Location: https://git.yoctoproject.org/yocto-docs
- Branch: :yocto_git:`honister </yocto-docs/log/?h=honister>`
- Tag: :yocto_git:`yocto-3.4.4 </yocto-docs/tag/?h=yocto-3.4.4>`
- Git Revision: :yocto_git:`5ead7d39aaf9044078dff27f462e29a8e31d89e4 </yocto-docs/commit/?5ead7d39aaf9044078dff27f462e29a8e31d89e4>`

View File

@@ -0,0 +1,248 @@
Release notes for 4.0.1 (kirkstone)
-----------------------------------
Security Fixes in 4.0.1
~~~~~~~~~~~~~~~~~~~~~~~
- linux-yocto/5.15: fix :cve:`2022-28796`
- python3: ignore :cve:`2015-20107`
- e2fsprogs: fix :cve:`2022-1304`
- lua: fix :cve:`2022-28805`
- busybox: fix :cve:`2022-28391`
Fixes in 4.0.1
~~~~~~~~~~~~~~
- abi_version/sstate: Bump hashequiv and sstate versions due to git changes
- apt: add apt selftest to test signed package feeds
- apt: upgrade 2.4.4 -> 2.4.5
- arch-armv8-2a.inc: fix a typo in TUNEVALID variable
- babeltrace: Disable warnings as errors
- base: Avoid circular references to our own scripts
- base: Drop git intercept
- build-appliance-image: Update to kirkstone head revision
- build-appliance: Switch to kirkstone branch
- buildtools-tarball: Only add cert envvars if certs are included
- busybox: Use base_bindir instead of hardcoding /bin path
- cases/buildepoxy.py: fix typo
- create-spdx: delete virtual/kernel dependency to fix FreeRTOS build
- create-spdx: fix error when symlink cannot be created
- cve-check: add JSON format to summary output
- cve-check: fix symlinks where link and output path are equal
- cve-check: no need to depend on the fetch task
- cve-update-db-native: let the user to drive the update interval
- cve-update-db-native: update the CVE database once a day only
- cve_check: skip remote patches that haven't been fetched when searching for CVE tags
- dev-manual: add command used to add the signed-off-by line.
- devshell.bbclass: Allow devshell & pydevshell to use the network
- docs: conf.py: fix cve extlinks caption for sphinx <4.0
- docs: migration-guides: migration-3.4: mention that hardcoded password are supported if hashed
- docs: migration-guides: release-notes-4.0: fix risc-v typo
- docs: migration-guides: release-notes-4.0: replace kernel placeholder with correct recipe name
- docs: ref-manual: variables: add hashed password example in EXTRA_USERS_PARAMS
- docs: set_versions.py: add information about obsolescence of a release
- docs: set_versions.py: fix latest release of a branch being shown twice in switchers.js
- docs: set_versions.py: fix latest version of an active release shown as obsolete
- docs: set_versions.py: mark as obsolete only branches and old tags from obsolete releases
- docs: sphinx-static: switchers.js.in: do not mark branches as outdated
- docs: sphinx-static: switchers.js.in: fix broken switcher for branches
- docs: sphinx-static: switchers.js.in: improve obsolete version detection
- docs: sphinx-static: switchers.js.in: remove duplicate for outdated versions
- docs: sphinx-static: switchers.js.in: rename all_versions to switcher_versions
- docs: update Bitbake objects.inv location for master branch
- documentation/brief-yoctoprojectqs: add directory for local.conf
- gcompat: Fix build when usrmerge distro feature is enabled
- git: correct license
- git: upgrade 2.35.2 -> 2.35.3
- glib: upgrade 2.72.0 -> 2.72.1
- glibc: ptest: Fix glibc-tests package issue
- gnupg: Disable FORTIFY_SOURCES on mips
- go.bbclass: disable the use of the default configuration file
- gstreamer1.0-plugins-bad: drop patch
- gstreamer1.0-plugins-good: Fix libsoup dependency
- gstreamer1.0: Minor documentation addition
- install/devshell: Introduce git intercept script due to fakeroot issues
- kernel-yocto.bbclass: Fixup do_kernel_configcheck usage of KMETA
- libc-glibc: Use libxcrypt to provide virtual/crypt
- libgit2: upgrade 1.4.2 -> 1.4.3
- libsoup: upgrade 3.0.5 -> 3.0.6
- libusb1: upgrade 1.0.25 -> 1.0.26
- linux-firmware: correct license for ar3k firmware
- linux-firmware: upgrade 20220310 -> 20220411
- linux-yocto/5.10: base: enable kernel crypto userspace API
- linux-yocto/5.10: update to v5.10.112
- linux-yocto/5.15: arm: poky-tiny cleanup and fixes
- linux-yocto/5.15: base: enable kernel crypto userspace API
- linux-yocto/5.15: fix -standard kernel build issue
- linux-yocto/5.15: fix ppc boot
- linux-yocto/5.15: fix qemuarm graphical boot
- linux-yocto/5.15: kasan: fix BUG: sleeping function called from invalid context
- linux-yocto/5.15: netfilter: conntrack: avoid useless indirection during conntrack destruction
- linux-yocto/5.15: update to v5.15.36
- linux-yocto: enable powerpc-debug fragment
- mdadm: Drop clang specific cflags
- migration-3.4: add missing entry on EXTRA_USERS_PARAMS
- migration-guides: add release notes for 4.0
- migration-guides: complete migration guide for 4.0
- migration-guides: release-notes-4.0: mention LTS release
- migration-guides: release-notes-4.0: update 'Repositories / Downloads' section
- migration-guides: stop including documents with ".. include"
- musl: Fix build when usrmerge distro feature is enabled
- ncurses: use COPYING file
- neard: Switch SRC_URI to git repo
- oeqa/selftest: add test for git working correctly inside pseudo
- openssl: minor security upgrade 3.0.2 -> 3.0.3
- package.bbclass: Prevent perform_packagecopy from removing /sysroot-only
- package: Ensure we track whether PRSERV was active or not
- package_manager: fix missing dependency on gnupg when signing deb package feeds
- poky-tiny: enable qemuarmv5/qemuarm64 and cleanups
- poky.conf: bump version for 4.0.1 release
- qemu.bbclass: Extend ppc/ppc64 extra options
- qemuarm64: use virtio pci interfaces
- qemuarmv5: use arm-versatile-926ejs KMACHINE
- ref-manual: Add XZ_THREADS and XZ_MEMLIMIT
- ref-manual: add KERNEL_DEBUG_TIMESTAMPS
- ref-manual: add ZSTD_THREADS
- ref-manual: add a note about hard-coded passwords
- ref-manual: add empty-dirs QA check and QA_EMPTY_DIRS*
- ref-manual: add mention of vendor filtering to CVE_PRODUCT
- ref-manual: mention wildcarding support in INCOMPATIBLE_LICENSE
- releases: update for yocto 4.0
- rootfs-postcommands: fix symlinks where link and output path are equal
- ruby: upgrade 3.1.1 -> 3.1.2
- sanity: skip make 4.2.1 warning for debian
- scripts/git: Ensure we don't have circular references
- scripts: Make git intercept global
- seatd: Disable overflow warning as error on ppc64/musl
- selftest/lic_checksum: Add test for filename containing space
- set_versions: update for 4.0 release
- staging: Ensure we filter out ourselves
- strace: fix ptest failure in landlock
- subversion: upgrade to 1.14.2
- systemd-boot: remove outdated EFI_LD comment
- systemtap: Fix build with gcc-12
- terminal.py: Restore error output from Terminal
- u-boot: Correct the SRC_URI
- u-boot: Inherit pkgconfig
- update_udev_hwdb: fix multilib issue with systemd
- util-linux: Create u-a symlink for findfs utility
- virgl: skip headless test on alma 8.6
- webkitgtk: adjust patch status
- wic: do not use PARTLABEL for msdos partition tables
- wireless-regdb: upgrade 2022.02.18 -> 2022.04.08
- xserver-xorg: Fix build with gcc12
- yocto-bsps: update to v5.15.36
Contributors to 4.0.1
~~~~~~~~~~~~~~~~~~~~~
- Abongwa Amahnui Bonalais
- Alexander Kanavin
- Bruce Ashfield
- Carlos Rafael Giani
- Chen Qi
- Davide Gardenal
- Dmitry Baryshkov
- Ferry Toth
- Henning Schild
- Jon Mason
- Justin Bronder
- Kai Kang
- Khem Raj
- Konrad Weihmann
- Lee Chee Yang
- Marta Rybczynska
- Martin Jansa
- Matt Madison
- Michael Halstead
- Michael Opdenacker
- Naveen Saini
- Nicolas Dechesne
- Paul Eggleton
- Paul Gortmaker
- Paulo Neves
- Peter Kjellerstedt
- Peter Marko
- Pgowda
- Portia
- Quentin Schulz
- Rahul Kumar
- Richard Purdie
- Robert Joslyn
- Robert Yang
- Roland Hieber
- Ross Burton
- Russ Dill
- Steve Sakoman
- wangmy
- zhengruoqin
Repositories / Downloads for 4.0.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: https://git.yoctoproject.org/git/poky
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.1 </poky/tag/?h=yocto-4.0.1>`
- Git Revision: :yocto_git:`8c489602f218bcf21de0d3c9f8cf620ea5f06430 </poky/commit/?id=8c489602f218bcf21de0d3c9f8cf620ea5f06430>`
- Release Artefact: poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430
- sha: 65c545a316bd8efb13ae1358eeccc8953543be908008103b51f7f90aed960d00
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.1 </openembedded-core/tag/?h=yocto-4.0>`
- Git Revision: :oe_git:`cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee </openembedded-core/commit/?id=cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee>`
- Release Artefact: oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee
- sha: 43981b8fad82f601618a133dffbec839524f0d0a055efc3d8f808cbfd811ab17
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee.tar.bz2
meta-mingw
- Repository Location: https://git.yoctoproject.org/git/meta-mingw
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.1 </meta-mingw/tag/?h=yocto-4.0.1>`
- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
meta-gplv2
- Repository Location: https://git.yoctoproject.org/git/meta-gplv2
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.1 </meta-gplv2/tag/?h=yocto-4.0.1>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-mingw/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0 </bitbake/tag/?h=yocto-4.0>`
- Git Revision: :oe_git:`59c16ae6c55c607c56efd2287537a1b97ba2bf52 </bitbake/commit/?id=59c16ae6c55c607c56efd2287537a1b97ba2bf52>`
- Release Artefact: bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52
- sha: 3ae466c31f738fc45c3d7c6f665952d59f01697f2667ea42f0544d4298dd6ef0
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52.tar.bz2,
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52.tar.bz2
yocto-docs
- Repository Location: https://git.yoctoproject.org/git/yocto-docs
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.1 </yocto-docs/tag/?h=yocto-4.0>`
- Git Revision: :yocto_git:`4ec9df3336a425719a9a35532504731ce56984ca </yocto-docs/commit/?id=4ec9df3336a425719a9a35532504731ce56984ca>`

View File

@@ -0,0 +1,296 @@
Release notes for Yocto-4.0.2 (Kirkstone)
-----------------------------------------
Security Fixes in Yocto-4.0.2
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- libxslt: Mark :cve:`2022-29824` as not applying
- tiff: Add jbig PACKAGECONFIG and clarify IGNORE :cve:`2022-1210`
- tiff: mark :cve:`2022-1622` and :cve:`2022-1623` as invalid
- pcre2:fix :cve:`2022-1586` Out-of-bounds read
- curl: fix :cve:`2022-22576`, :cve:`2022-27775`, :cve:`2022-27776`, :cve:`2022-27774`, :cve:`2022-30115`, :cve:`2022-27780`, :cve:`2022-27781`, :cve:`2022-27779` and :cve:`2022-27782`
- qemu: fix :cve:`2021-4206` and :cve:`2021-4207`
- freetype: fix :cve:`2022-27404`, :cve:`2022-27405` and :cve:`2022-27406`
Fixes in Yocto-4.0.2
~~~~~~~~~~~~~~~~~~~~
- alsa-plugins: fix libavtp vs. avtp packageconfig
- archiver: don't use machine variables in shared recipes
- archiver: use bb.note instead of echo
- baremetal-image: fix broken symlink in do_rootfs
- base-passwd: Disable shell for default users
- bash: submit patch upstream
- bind: upgrade 9.18.1 -> 9.18.2
- binutils: Bump to latest 2.38 release branch
- bitbake.conf: Make TCLIBC and TCMODE lazy assigned
- bitbake: build: Add clean_stamp API function to allow removal of task stamps
- bitbake: data: Do not depend on vardepvalueexclude flag
- bitbake: fetch2/osc: Small fixes for osc fetcher
- bitbake: server/process: Fix logging issues where only the first message was displayed
- build-appliance-image: Update to kirkstone head revision
- buildhistory.bbclass: fix shell syntax when using dash
- cairo: Add missing GPLv3 license checksum entry
- classes: rootfs-postcommands: add skip option to overlayfs_qa_check
- cronie: upgrade 1.6.0 -> 1.6.1
- cups: upgrade 2.4.1 -> 2.4.2
- cve-check.bbclass: Added do_populate_sdk[recrdeptask].
- cve-check: Add helper for symlink handling
- cve-check: Allow warnings to be disabled
- cve-check: Fix report generation
- cve-check: Only include installed packages for rootfs manifest
- cve-check: add support for Ignored CVEs
- cve-check: fix return type in check_cves
- cve-check: move update_symlinks to a library
- cve-check: write empty fragment files in the text mode
- cve-extra-exclusions: Add kernel CVEs
- cve-update-db-native: make it possible to disable database updates
- devtool: Fix _copy_file() TypeError
- e2fsprogs: add alternatives handling of lsattr as well
- e2fsprogs: update upstream status
- efivar: add musl libc compatibility
- epiphany: upgrade 42.0 -> 42.2
- ffmpeg: upgrade 5.0 -> 5.0.1
- fribidi: upgrade 1.0.11 -> 1.0.12
- gcc-cross-canadian: Add nativesdk-zstd dependency
- gcc-source: Fix incorrect task dependencies from ${B}
- gcc: Upgrade to 11.3 release
- gcc: depend on zstd-native
- git: fix override syntax in RDEPENDS
- glib-2.0: upgrade 2.72.1 -> 2.72.2
- glibc: Drop make-native dependency
- go: upgrade 1.17.8 -> 1.17.10
- gst-devtools: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-libav: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-omx: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-plugins-bad: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-plugins-base: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-plugins-good: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-plugins-ugly: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-python: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-rtsp-server: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0-vaapi: upgrade 1.20.1 -> 1.20.2
- gstreamer1.0: upgrade 1.20.1 -> 1.20.2
- gtk+3: upgrade 3.24.33 -> 3.24.34
- gtk-doc: Fix potential shebang overflow on gtkdoc-mkhtml2
- image.bbclass: allow overriding dependency on virtual/kernel:do_deploy
- insane.bbclass: make sure to close .patch files
- iso-codes: upgrade 4.9.0 -> 4.10.0
- kernel-yocto.bbclass: Reset to exiting on non-zero return code at end of task
- libcgroup: upgrade 2.0.1 -> 2.0.2
- liberror-perl: Update sstate/equiv versions to clean cache
- libinput: upgrade 1.19.3 -> 1.19.4
- libpcre2: upgrade 10.39 -> 10.40
- librepo: upgrade 1.14.2 -> 1.14.3
- libseccomp: Add missing files for ptests
- libseccomp: Correct LIC_FILES_CHKSUM
- libxkbcommon: upgrade 1.4.0 -> 1.4.1
- libxml2: Upgrade 2.9.13 -> 2.9.14
- license.bbclass: Bound beginline and endline in copy_license_files()
- license_image.bbclass: Make QA errors fail the build
- linux-firmware: add support for building snapshots
- linux-firmware: package new Qualcomm firmware
- linux-firmware: replace mkdir by install
- linux-firmware: split ath3k firmware
- linux-firmware: upgrade to 20220610
- linux-yocto/5.10: update to v5.10.119
- linux-yocto/5.15: Enable MDIO bus config
- linux-yocto/5.15: bpf: explicitly disable unpriv eBPF by default
- linux-yocto/5.15: cfg/xen: Move x86 configs to separate file
- linux-yocto/5.15: update to v5.15.44
- local.conf.sample: Update sstate url to new 'all' path
- logrotate: upgrade 3.19.0 -> 3.20.1
- lttng-modules: Fix build failure for 5.10.119+ and 5.15.44+ kernel
- lttng-modules: fix build against 5.18-rc7+
- lttng-modules: fix shell syntax
- lttng-ust: upgrade 2.13.2 -> 2.13.3
- lzo: Add further info to a patch and mark as Inactive-Upstream
- makedevs: Don't use COPYING.patch just to add license file into ${S}
- manuals: switch to the sstate mirror shared between all versions
- mesa.inc: package 00-radv-defaults.conf
- mesa: backport a patch to support compositors without zwp_linux_dmabuf_v1 again
- mesa: upgrade to 22.0.3
- meson.bbclass: add cython binary to cross/native toolchain config
- mmc-utils: upgrade to latest revision
- mobile-broadband-provider-info: upgrade 20220315 -> 20220511
- ncurses: update to patchlevel 20220423
- oeqa/selftest/cve_check: add tests for Ignored and partial reports
- oeqa/selftest/cve_check: add tests for recipe and image reports
- oescripts: change compare logic in OEListPackageconfigTests
- openssl: Backport fix for ptest cert expiry
- overlayfs: add docs about skipping QA check & service dependencies
- ovmf: Fix native build with gcc-12
- patch.py: make sure that patches/series file exists before quilt pop
- pciutils: avoid lspci conflict with busybox
- perl: Add dependency on make-native to avoid race issues
- perl: Fix build with gcc-12
- poky.conf: bump version for 4.0.2
- popt: fix override syntax in RDEPENDS
- pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE
- python3: Ensure stale empty python module directories don't break the build
- python3: Remove problematic paths from sysroot files
- python3: fix reproducibility issue with python3-core
- python3: use built-in distutils for ptest, rather than setuptools' 'fork'
- python: Avoid shebang overflow on python-config.py
- rootfs-postcommands.bbclass: correct comments
- rootfs.py: close kernel_abi_ver_file
- rootfs.py: find .ko.zst kernel modules
- rust-common: Drop LLVM_TARGET and simplify
- rust-common: Ensure sstate signatures have correct dependencues for do_rust_gen_targets
- rust-common: Fix for target definitions returning 'NoneType' for arm
- rust-common: Fix native signature dependency issues
- rust-common: Fix sstate signatures between arm hf and non-hf
- sanity: Don't warn about make 4.2.1 for mint
- sanity: Switch to make 4.0 as a minimum version
- sed: Specify shell for "nobody" user in run-ptest
- selftest/imagefeatures/overlayfs: Always append to DISTRO_FEATURES
- selftest/multiconfig: Test that multiconfigs in separate layers works
- sqlite3: upgrade to 3.38.5
- staging.bbclass: process direct dependencies in deterministic order
- staging: Fix rare sysroot corruption issue
- strace: Don't run ptest as "nobody"
- systemd: Correct 0001-pass-correct-parameters-to-getdents64.patch
- systemd: Correct path returned in sd_path_lookup()
- systemd: Document future actions needed for set of musl patches
- systemd: Drop 0001-test-parse-argument-Include-signal.h.patch
- systemd: Drop 0002-don-t-use-glibc-specific-qsort_r.patch
- systemd: Drop 0016-Hide-__start_BUS_ERROR_MAP-and-__stop_BUS_ERROR_MAP.patch
- systemd: Drop redundant musl patches
- systemd: Fix build regression with latest update
- systemd: Remove __compare_fn_t type in musl-specific patch
- systemd: Update patch status
- systemd: systemd-systemctl: Support instance conf files during enable
- systemd: update ``0008-add-missing-FTW_-macros-for-musl.patch``
- systemd: upgrade 250.4 -> 250.5
- uboot-sign: Fix potential index error issues
- valgrind: submit arm patches upstream
- vim: Upgrade to 8.2.5083
- webkitgtk: upgrade to 2.36.3
- wic/plugins/rootfs: Fix permissions when splitting rootfs folders across partitions
- xwayland: upgrade 22.1.0 -> 22.1.1
- xxhash: fix build with gcc 12
- zip/unzip: mark all submittable patches as Inactive-Upstream
Known Issues in Yocto-4.0.2
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- There were build failures at the autobuilder due to a known scp issue on Fedora-36 hosts.
Contributors to Yocto-4.0.2
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Alex Kiernan
- Alexander Kanavin
- Aryaman Gupta
- Bruce Ashfield
- Claudius Heine
- Davide Gardenal
- Dmitry Baryshkov
- Ernst Sjöstrand
- Felix Moessbauer
- Gunjan Gupta
- He Zhe
- Hitendra Prajapati
- Jack Mitchell
- Jeremy Puhlman
- Jiaqing Zhao
- Joerg Vehlow
- Jose Quaresma
- Kai Kang
- Khem Raj
- Konrad Weihmann
- Marcel Ziswiler
- Markus Volk
- Marta Rybczynska
- Martin Jansa
- Michael Opdenacker
- Mingli Yu
- Naveen Saini
- Nick Potenski
- Paulo Neves
- Pavel Zhukov
- Peter Kjellerstedt
- Rasmus Villemoes
- Richard Purdie
- Robert Joslyn
- Ross Burton
- Samuli Piippo
- Sean Anderson
- Stefan Wiehler
- Steve Sakoman
- Sundeep Kokkonda
- Tomasz Dziendzielski
- Xiaobing Luo
- Yi Zhao
- leimaohui
- wangmy
Repositories / Downloads for Yocto-4.0.2
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: https://git.yoctoproject.org/git/poky
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.2 </poky/log/?h=yocto-4.0.2>`
- Git Revision: :yocto_git:`a5ea426b1da472fc8549459fff3c1b8c6e02f4b5 </poky/commit/?id=a5ea426b1da472fc8549459fff3c1b8c6e02f4b5>`
- Release Artefact: poky-a5ea426b1da472fc8549459fff3c1b8c6e02f4b5
- sha: 474ddfacfed6661be054c161597a1a5273188dfe021b31d6156955d93c6b7359
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.2/poky-a5ea426b1da472fc8549459fff3c1b8c6e02f4b5.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.2/poky-a5ea426b1da472fc8549459fff3c1b8c6e02f4b5.tar.bz2
openembedded-core
- Repository Location: https://git.openembedded.org/openembedded-core
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.2 </openembedded-core/log/?h=yocto-4.0.2>`
- Git Revision: :oe_git:`eea52e0c3d24c79464f4afdbc3c397e1cb982231 </openembedded-core/commit/?id=eea52e0c3d24c79464f4afdbc3c397e1cb982231>`
- Release Artefact: oecore-eea52e0c3d24c79464f4afdbc3c397e1cb982231
- sha: 252d5c2c2db7e14e7365fcc69d32075720b37d629894bae36305eba047a39907
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.2/oecore-eea52e0c3d24c79464f4afdbc3c397e1cb982231.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.2/oecore-eea52e0c3d24c79464f4afdbc3c397e1cb982231.tar.bz2
meta-mingw
- Repository Location: https://git.yoctoproject.org/git/meta-mingw
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.2 </meta-mingw/log/?h=yocto-4.0.2>`
- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.2/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.2/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
meta-gplv2
- Repository Location: https://git.yoctoproject.org/git/meta-gplv2
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.2 </meta-gplv2/log/?h=yocto-4.0.2>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.2/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.2/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: https://git.openembedded.org/bitbake
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.2 </bitbake/log/?h=yocto-4.0.2>`
- Git Revision: :oe_git:`b8fd6f5d9959d27176ea016c249cf6d35ac8ba03 </bitbake/commit/?id=b8fd6f5d9959d27176ea016c249cf6d35ac8ba03>`
- Release Artefact: bitbake-b8fd6f5d9959d27176ea016c249cf6d35ac8ba03
- sha: 373818b1dee2c502264edf654d6d8f857b558865437f080e02d5ba6bb9e72cc3
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.2/bitbake-b8fd6f5d9959d27176ea016c249cf6d35ac8ba03.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.2/bitbake-b8fd6f5d9959d27176ea016c249cf6d35ac8ba03.tar.bz2
yocto-docs
- Repository Location: https://git.yoctoproject.org/git/yocto-docs
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.2 </yocto-docs/log/?h=yocto-4.0.2>`
- Git Revision: :yocto_git:`662294dccd028828d5c7e9fd8f5c8e14df53df4b </yocto-docs/commit/?id=662294dccd028828d5c7e9fd8f5c8e14df53df4b>`

View File

@@ -0,0 +1,314 @@
Release notes for Yocto-4.0.3 (Kirkstone)
-----------------------------------------
Security Fixes in Yocto-4.0.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: fix :cve:`2019-1010204`
- busybox: fix :cve:`2022-30065`
- cups: ignore :cve:`2022-26691`
- curl: Fix :cve:`2022-32205`, :cve:`2022-32206`, :cve:`2022-32207` and :cve:`2022-32208`
- dpkg: fix :cve:`2022-1664`
- ghostscript: fix :cve:`2022-2085`
- harfbuzz: fix :cve:`2022-33068`
- libtirpc: fix :cve:`2021-46828`
- lua: fix :cve:`2022-33099`
- nasm: ignore :cve:`2020-18974`
- qemu: fix :cve:`2022-35414`
- qemu: ignore :cve:`2021-20255` and :cve:`2019-12067`
- tiff: fix :cve:`2022-1354`, :cve:`2022-1355`, :cve:`2022-2056`, :cve:`2022-2057` and :cve:`2022-2058`
- u-boot: fix :cve:`2022-34835`
- unzip: fix :cve:`2022-0529` and :cve:`2022-0530`
Fixes in Yocto-4.0.3
~~~~~~~~~~~~~~~~~~~~
- alsa-state: correct license
- at: take tarballs from debian
- base.bbclass: Correct the test for obsolete license exceptions
- base/reproducible: Change Source Date Epoch generation methods
- bin_package: install into base_prefix
- bind: Remove legacy python3 PACKAGECONFIG code
- bind: upgrade to 9.18.4
- binutils: stable 2.38 branch updates
- build-appliance-image: Update to kirkstone head revision
- cargo_common.bbclass: enable bitbake vendoring for externalsrc
- coreutils: Tweak packaging variable names for coreutils-dev
- curl: backport openssl fix CN check error code
- cve-check: hook cleanup to the BuildCompleted event, not CookerExit
- cve-extra-exclusions: Clean up and ignore three CVEs (2xqemu and nasm)
- devtool: finish: handle patching when S points to subdir of a git repo
- devtool: ignore pn- overrides when determining SRC_URI overrides
- docs: BB_HASHSERVE_UPSTREAM: update to new host
- dropbear: break dependency on base package for -dev package
- efivar: fix import functionality
- encodings: update to 1.0.6
- epiphany: upgrade to 42.3
- externalsrc.bbclass: support crate fetcher on externalsrc
- font-util: update 1.3.2 -> 1.3.3
- gcc-runtime: Fix build when using gold
- gcc-runtime: Fix missing MLPREFIX in debug mappings
- gcc-runtime: Pass -nostartfiles when building dummy libstdc++.so
- gcc: Backport a fix for gcc bug 105039
- git: upgrade to v2.35.4
- glib-2.0: upgrade to 2.72.3
- glib-networking: upgrade to 2.72.1
- glibc : stable 2.35 branch updates
- glibc-tests: Avoid reproducibility issues
- glibc-tests: not clear BBCLASSEXTEND
- glibc: revert one upstream change to work around broken DEBUG_BUILD build
- glibc: stable 2.35 branch updates
- gnupg: upgrade to 2.3.7
- go: upgrade to v1.17.12
- gobject-introspection-data: Disable cache for g-ir-scanner
- gperf: Add a patch to work around reproducibility issues
- gperf: Switch to upstream patch
- gst-devtools: upgrade to 1.20.3
- gstreamer1.0-libav: upgrade to 1.20.3
- gstreamer1.0-omx: upgrade to 1.20.3
- gstreamer1.0-plugins-bad: upgrade to 1.20.3
- gstreamer1.0-plugins-base: upgrade to 1.20.3
- gstreamer1.0-plugins-good: upgrade to 1.20.3
- gstreamer1.0-plugins-ugly: upgrade to 1.20.3
- gstreamer1.0-python: upgrade to 1.20.3
- gstreamer1.0-rtsp-server: upgrade to 1.20.3
- gstreamer1.0-vaapi: upgrade to 1.20.3
- gstreamer1.0: upgrade to 1.20.3
- gtk-doc: Remove hardcoded buildpath
- harfbuzz: Fix compilation with clang
- initramfs-framework: move storage mounts to actual rootfs
- initscripts: run umountnfs as a KILL script
- insane.bbclass: host-user-contaminated: Correct per package home path
- insane: Fix buildpaths test to work with special devices
- kernel-arch: Fix buildpaths leaking into external module compiles
- kernel-devsrc: fix reproducibility and buildpaths QA warning
- kernel-devsrc: ppc32: fix reproducibility
- kernel-uboot.bbclass: Use vmlinux.initramfs when INITRAMFS_IMAGE_BUNDLE set
- kernel.bbclass: pass LD also in savedefconfig
- libffi: fix native build being not portable
- libgcc: Fix standalone target builds with usrmerge distro feature
- libmodule-build-perl: Use env utility to find perl interpreter
- libsoup: upgrade to 3.0.7
- libuv: upgrade to 1.44.2
- linux-firmware: upgrade to 20220708
- linux-firwmare: restore WHENCE_CHKSUM variable
- linux-yocto-rt/5.15: update to -rt48 (and fix -stable merge)
- linux-yocto/5.10: fix build_OID_registry/conmakehash buildpaths warning
- linux-yocto/5.10: fix buildpaths issue with gen-mach-types
- linux-yocto/5.10: fix buildpaths issue with pnmtologo
- linux-yocto/5.10: update to v5.10.135
- linux-yocto/5.15: drop obselete GPIO sysfs ABI
- linux-yocto/5.15: fix build_OID_registry buildpaths warning
- linux-yocto/5.15: fix buildpaths issue with gen-mach-types
- linux-yocto/5.15: fix buildpaths issue with pnmtologo
- linux-yocto/5.15: fix qemuppc buildpaths warning
- linux-yocto/5.15: fix reproducibility issues
- linux-yocto/5.15: update to v5.15.59
- log4cplus: upgrade to 2.0.8
- lttng-modules: Fix build failure for kernel v5.15.58
- lttng-modules: upgrade to 2.13.4
- lua: Fix multilib buildpath reproducibility issues
- mkfontscale: upgrade to 1.2.2
- oe-selftest-image: Ensure the image has sftp as well as dropbear
- oe-selftest: devtool: test modify git recipe building from a subdir
- oeqa/runtime/scp: Disable scp test for dropbear
- oeqa/runtime: add test that the kernel has CONFIG_PREEMPT_RT enabled
- oeqa/sdk: drop the nativesdk-python 2.x test
- openssh: Add openssh-sftp-server to openssh RDEPENDS
- openssh: break dependency on base package for -dev package
- openssl: update to 3.0.5
- package.bbclass: Avoid stripping signed kernel modules in splitdebuginfo
- package.bbclass: Fix base directory for debugsource files when using externalsrc
- package.bbclass: Fix kernel source handling when not using externalsrc
- package_manager/ipk: do not pipe stderr to stdout
- packagegroup-core-ssh-dropbear: Add openssh-sftp-server recommendation
- patch: handle if S points to a subdirectory of a git repo
- perf: fix reproducibility in 5.19+
- perf: fix reproduciblity in older releases of Linux
- perf: sort-pmuevents: really keep array terminators
- perl: don't install Makefile.old into perl-ptest
- poky.conf: bump version for 4.0.3
- pulseaudio: add m4-native to DEPENDS
- python3: Backport patch to fix an issue in subinterpreters
- qemu: Add PACKAGECONFIG for brlapi
- qemu: Avoid accidental librdmacm linkage
- qemu: Avoid accidental libvdeplug linkage
- qemu: Fix slirp determinism issue
- qemu: add PACKAGECONFIG for capstone
- recipetool/devtool: Fix python egg whitespace issues in PACKAGECONFIG
- ref-manual: variables: remove sphinx directive from literal block
- rootfs-postcommands.bbclass: move host-user-contaminated.txt to ${S}
- ruby: add PACKAGECONFIG for capstone
- rust: fix issue building cross-canadian tools for aarch64 on x86_64
- sanity.bbclass: Add ftps to accepted URI protocols for mirrors sanity
- selftest/runtime_test/virgl: Disable for all almalinux
- sstatesig: Include all dependencies in SPDX task signatures
- strace: set COMPATIBLE_HOST for riscv32
- systemd: Added base_bindir into pkg_postinst:udev-hwdb.
- udev-extraconf/initrdscripts/parted: Rename mount.blacklist -> mount.ignorelist
- udev-extraconf/mount.sh: add LABELs to mountpoints
- udev-extraconf/mount.sh: ignore lvm in automount
- udev-extraconf/mount.sh: only mount devices on hotplug
- udev-extraconf/mount.sh: save mount name in our tmp filecache
- udev-extraconf: fix some systemd automount issues
- udev-extraconf: force systemd-udevd to use shared MountFlags
- udev-extraconf: let automount base directory configurable
- udev-extraconf:mount.sh: fix a umount issue
- udev-extraconf:mount.sh: fix path mismatching issues
- vala: Fix on target wrapper buildpaths issue
- vala: upgrade to 0.56.2
- vim: upgrade to 9.0.0063
- waffle: correctly request wayland-scanner executable
- webkitgtk: upgrade to 2.36.4
- weston: upgrade to 10.0.1
- wic/plugins/rootfs: Fix NameError for 'orig_path'
- wic: fix WicError message
- wireless-regdb: upgrade to 2022.06.06
- xdpyinfo: upgrade to 1.3.3
- xev: upgrade to 1.2.5
- xf86-input-synaptics: upgrade to 1.9.2
- xmodmap: upgrade to 1.0.11
- xorg-app: Tweak handling of compression changes in SRC_URI
- xserver-xorg: upgrade to 21.1.4
- xwayland: upgrade to 22.1.3
- yocto-bsps/5.10: fix buildpaths issue with gen-mach-types
- yocto-bsps/5.10: fix buildpaths issue with pnmtologo
- yocto-bsps/5.15: fix buildpaths issue with gen-mach-types
- yocto-bsps/5.15: fix buildpaths issue with pnmtologo
- yocto-bsps: buildpaths fixes
- yocto-bsps: update to v5.10.130
- yocto-bsps: buildpaths fixes
- yocto-bsps: update to v5.15.54
Known Issues in Yocto-4.0.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Ahmed Hossam
- Alejandro Hernandez Samaniego
- Alex Kiernan
- Alexander Kanavin
- Bruce Ashfield
- Chanho Park
- Christoph Lauer
- David Bagonyi
- Dmitry Baryshkov
- He Zhe
- Hitendra Prajapati
- Jose Quaresma
- Joshua Watt
- Kai Kang
- Khem Raj
- Lee Chee Yang
- Lucas Stach
- Markus Volk
- Martin Jansa
- Maxime Roussin-Bélanger
- Michael Opdenacker
- Mihai Lindner
- Ming Liu
- Mingli Yu
- Muhammad Hamza
- Naveen
- Pascal Bach
- Paul Eggleton
- Pavel Zhukov
- Peter Bergin
- Peter Kjellerstedt
- Peter Marko
- Pgowda
- Raju Kumar Pothuraju
- Richard Purdie
- Robert Joslyn
- Ross Burton
- Sakib Sajal
- Shruthi Ravichandran
- Steve Sakoman
- Sundeep Kokkonda
- Thomas Roos
- Tom Hochstein
- Wentao Zhang
- Yi Zhao
- Yue Tao
- gr embeter
- leimaohui
- wangmy
Repositories / Downloads for Yocto-4.0.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: https://git.yoctoproject.org/git/poky
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.3 </poky/log/?h=yocto-4.0.3>`
- Git Revision: :yocto_git:`387ab5f18b17c3af3e9e30dc58584641a70f359f </poky/commit/?id=387ab5f18b17c3af3e9e30dc58584641a70f359f>`
- Release Artefact: poky-387ab5f18b17c3af3e9e30dc58584641a70f359f
- sha: fe674186bdb0684313746caa9472134fc19e6f1443c274fe02c06cb1e675b404
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.3/poky-387ab5f18b17c3af3e9e30dc58584641a70f359f.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.3/poky-387ab5f18b17c3af3e9e30dc58584641a70f359f.tar.bz2
openembedded-core
- Repository Location: https://git.openembedded.org/openembedded-core
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.3 </openembedded-core/log/?h=yocto-4.0.3>`
- Git Revision: :oe_git:`2cafa6ed5f0aa9df5a120b6353755d56c7c7800d </openembedded-core/commit/?id=2cafa6ed5f0aa9df5a120b6353755d56c7c7800d>`
- Release Artefact: oecore-2cafa6ed5f0aa9df5a120b6353755d56c7c7800d
- sha: 5181d3e8118c6112936637f01a07308b715e0e3d12c7eba338556747dfcabe92
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.3/oecore-2cafa6ed5f0aa9df5a120b6353755d56c7c7800d.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.3/oecore-2cafa6ed5f0aa9df5a120b6353755d56c7c7800d.tar.bz2
meta-mingw
- Repository Location: https://git.yoctoproject.org/git/meta-mingw
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.3 </meta-mingw/log/?h=yocto-4.0.3>`
- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.3/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.3/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
meta-gplv2
- Repository Location: https://git.yoctoproject.org/git/meta-gplv2
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.3 </meta-gplv2/log/?h=yocto-4.0.3>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.3/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.3/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: https://git.openembedded.org/bitbake
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.3 </bitbake/log/?h=yocto-4.0.3>`
- Git Revision: :oe_git:`b8fd6f5d9959d27176ea016c249cf6d35ac8ba03 </bitbake/commit/?id=b8fd6f5d9959d27176ea016c249cf6d35ac8ba03>`
- Release Artefact: bitbake-b8fd6f5d9959d27176ea016c249cf6d35ac8ba03
- sha: 373818b1dee2c502264edf654d6d8f857b558865437f080e02d5ba6bb9e72cc3
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.3/bitbake-b8fd6f5d9959d27176ea016c249cf6d35ac8ba03.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.3/bitbake-b8fd6f5d9959d27176ea016c249cf6d35ac8ba03.tar.bz2
yocto-docs
- Repository Location: https://git.yoctoproject.org/git/yocto-docs
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.3 </yocto-docs/log/?h=yocto-4.0.3>`
- Git Revision: :yocto_git:`d9b3dcf65ef25c06f552482aba460dd16862bf96 </yocto-docs/commit/?id=d9b3dcf65ef25c06f552482aba460dd16862bf96>`