.. SPDX-License-Identifier: CC-BY-SA-2.0-UK

Release notes for Yocto-4.0.16 (Kirkstone)
------------------------------------------

Security Fixes in Yocto-4.0.16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-  cpio: Fix :cve_mitre:`2023-7207`
-  curl: Revert "curl: Backport fix CVE-2023-32001"
-  curl: Fix :cve:`2023-46218`
-  dropbear:Fix :cve:`2023-48795`
-  ffmpeg: Fix :cve:`2022-3964` and :cve:`2022-3965`
-  ghostscript: Fix :cve:`2023-46751`
-  gnutls: Fix :cve:`2024-0553` and :cve:`2024-0567`
-  go: Fix :cve:`2023-39326`
-  openssh: Fix :cve:`2023-48795`, :cve:`2023-51384` and :cve:`2023-51385`
-  openssl: Fix :cve:`2023-6129` and :cve_mitre:`2023-6237`
-  pam: Fix :cve_mitre:`2024-22365`
-  perl: Fix :cve:`2023-47038`
-  qemu: Fix :cve:`2023-5088`
-  sqlite3: Fix :cve:`2023-7104`
-  systemd: Fix :cve:`2023-7008`
-  tiff: Fix :cve:`2023-6228`
-  xserver-xorg: Fix :cve:`2023-6377`, :cve:`2023-6478`, :cve:`2023-6816`, :cve_mitre:`2024-0229`, :cve:`2024-0408`, :cve:`2024-0409`, :cve_mitre:`2024-21885` and :cve_mitre:`2024-21886`
-  zlib: Ignore :cve:`2023-6992`


Fixes in Yocto-4.0.16
~~~~~~~~~~~~~~~~~~~~~

-  bitbake: asyncrpc: Add context manager API
-  bitbake: data: Add missing dependency handling of remove operator
-  bitbake: lib/bb: Add workaround for libgcc issues with python 3.8 and 3.9
-  bitbake: toastergui: verify that an existing layer path is given
-  build-appliance-image: Update to kirkstone head revision
-  contributor-guide: add License-Update tag
-  contributor-guide: fix command option
-  contributor-guide: use "apt" instead of "aptitude"
-  cpio: upgrade to 2.14
-  cve-update-nvd2-native: faster requests with API keys
-  cve-update-nvd2-native: increase the delay between subsequent request failures
-  cve-update-nvd2-native: make number of fetch attemtps configurable
-  cve-update-nvd2-native: remove unused variable CVE_SOCKET_TIMEOUT
-  dev-manual: Discourage the use of SRC_URI[md5sum]
-  dev-manual: layers: update link to YP Compatible form
-  dev-manual: runtime-testing: fix test module name
-  dev-manual: start.rst: update use of Download page
-  docs:what-i-wish-id-known.rst: fix URL
-  docs: document VSCode extension
-  docs:brief-yoctoprojectqs:index.rst: align variable order with default local.conf
-  docs:migration-guides: add release notes for 4.0.15
-  docs:migration-guides: release 3.5 is actually 4.0
-  elfutils: Disable stringop-overflow warning for build host
-  externalsrc: Ensure :term:`SRCREV` is processed before accessing :term:`SRC_URI`
-  linux-firmware: upgrade to 20231030
-  manuals: Add :term:`CONVERSION_CMD` definition
-  manuals: Add :term:`UBOOT_BINARY`, extend :term:`UBOOT_CONFIG`
-  perl: upgrade to 5.34.3
-  poky.conf: bump version for 4.0.16
-  pybootchartgui: fix 2 SyntaxWarnings
-  python3-ptest: skip test_storlines
-  ref-manual: Fix reference to MIRRORS/PREMIRRORS defaults
-  ref-manual: classes: remove insserv bbclass
-  ref-manual: releases.svg: update nanbield release status
-  ref-manual: resources: sync with master branch
-  ref-manual: update tested and supported distros
-  test-manual: add links to python unittest
-  test-manual: add or improve hyperlinks
-  test-manual: explicit or fix file paths
-  test-manual: resource updates
-  test-manual: text and formatting fixes
-  test-manual: use working example
-  testimage: Exclude wtmp from target-dumper commands
-  testimage: drop target_dumper, host_dumper, and monitor_dumper
-  tzdata: Upgrade to 2023d


Known Issues in Yocto-4.0.16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- N/A


Contributors to Yocto-4.0.16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-  Aatir Manzur
-  Archana Polampalli
-  Dhairya Nagodra
-  Dmitry Baryshkov
-  Enguerrand de Ribaucourt
-  Hitendra Prajapati
-  Insu Park
-  Joshua Watt
-  Justin Bronder
-  Jörg Sommer
-  Khem Raj
-  Lee Chee Yang
-  mark.yang
-  Marta Rybczynska
-  Martin Jansa
-  Maxin B. John
-  Michael Opdenacker
-  Paul Barker
-  Peter Kjellerstedt
-  Peter Marko
-  Poonam Jadhav
-  Richard Purdie
-  Shubham Kulkarni
-  Simone Weiß
-  Soumya Sambu
-  Sourav Pramanik
-  Steve Sakoman
-  Trevor Gamblin
-  Vijay Anusuri
-  Vivek Kumbhar
-  Yoann Congal
-  Yogita Urade


Repositories / Downloads for Yocto-4.0.16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

poky

-  Repository Location: :yocto_git:`/poky`
-  Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.16 </poky/log/?h=yocto-4.0.16>`
-  Git Revision: :yocto_git:`54af8c5e80ebf63707ef4e51cc9d374f716da603 </poky/commit/?id=54af8c5e80ebf63707ef4e51cc9d374f716da603>`
-  Release Artefact: poky-54af8c5e80ebf63707ef4e51cc9d374f716da603
-  sha: a53ec3a661cf56ca40c0fbf1500288c2c20abe94896d66a572bc5ccf5d92e9d6
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/poky-54af8c5e80ebf63707ef4e51cc9d374f716da603.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/poky-54af8c5e80ebf63707ef4e51cc9d374f716da603.tar.bz2

openembedded-core

-  Repository Location: :oe_git:`/openembedded-core`
-  Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
-  Tag:  :oe_git:`yocto-4.0.16 </openembedded-core/log/?h=yocto-4.0.16>`
-  Git Revision: :oe_git:`a744a897f0ea7d34c31c024c13031221f9a85f24 </openembedded-core/commit/?id=a744a897f0ea7d34c31c024c13031221f9a85f24>`
-  Release Artefact: oecore-a744a897f0ea7d34c31c024c13031221f9a85f24
-  sha: 8c2bc9487597b0caa9f5a1d72b18cfcd1ddc7e6d91f0f051313563d6af95aeec
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/oecore-a744a897f0ea7d34c31c024c13031221f9a85f24.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/oecore-a744a897f0ea7d34c31c024c13031221f9a85f24.tar.bz2

meta-mingw

-  Repository Location: :yocto_git:`/meta-mingw`
-  Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.16 </meta-mingw/log/?h=yocto-4.0.16>`
-  Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>`
-  Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7
-  sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2

meta-gplv2

-  Repository Location: :yocto_git:`/meta-gplv2`
-  Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.16 </meta-gplv2/log/?h=yocto-4.0.16>`
-  Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
-  Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
-  sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

bitbake

-  Repository Location: :oe_git:`/bitbake`
-  Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
-  Tag:  :oe_git:`yocto-4.0.16 </bitbake/log/?h=yocto-4.0.16>`
-  Git Revision: :oe_git:`ee090484cc25d760b8c20f18add17b5eff485b40 </bitbake/commit/?id=ee090484cc25d760b8c20f18add17b5eff485b40>`
-  Release Artefact: bitbake-ee090484cc25d760b8c20f18add17b5eff485b40
-  sha: 479e3a57ae9fbc2aa95292a7554caeef113bbfb28c226ed19547b8dde1c95314
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/bitbake-ee090484cc25d760b8c20f18add17b5eff485b40.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/bitbake-ee090484cc25d760b8c20f18add17b5eff485b40.tar.bz2

yocto-docs

-  Repository Location: :yocto_git:`/yocto-docs`
-  Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
-  Tag: :yocto_git:`yocto-4.0.16 </yocto-docs/log/?h=yocto-4.0.16>`
-  Git Revision: :yocto_git:`aba67b58711019a6ba439b2b77337f813ed799ac </yocto-docs/commit/?id=aba67b58711019a6ba439b2b77337f813ed799ac>`