Patrick Williams | 705982a | 2024-01-12 09:51:57 -0600 | [diff] [blame] | 1 | .. SPDX-License-Identifier: CC-BY-SA-2.0-UK |
| 2 | |
| 3 | Release notes for Yocto-4.3.2 (Nanbield) |
| 4 | ---------------------------------------- |
| 5 | |
| 6 | Security Fixes in Yocto-4.3.2 |
| 7 | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| 8 | |
| 9 | - avahi: Fix :cve:`2023-1981`, :cve:`2023-38469`, :cve:`2023-38470`, :cve:`2023-38471`, :cve:`2023-38472` and :cve:`2023-38473` |
| 10 | - curl: Fix :cve:`2023-46218` |
| 11 | - ghostscript: Fix :cve:`2023-46751` |
| 12 | - grub: fix :cve:`2023-4692` and :cve:`2023-4693` |
| 13 | - gstreamer1.0: Fix :cve_mitre:`2023-44446` |
| 14 | - linux-yocto/6.1: Ignore :cve_mitre:`2023-39197`, :cve:`2023-39198`, :cve:`2023-5090`, :cve:`2023-5633`, :cve:`2023-6111`, :cve:`2023-6121` and :cve:`2023-6176` |
| 15 | - linux-yocto/6.5: Ignore :cve:`2022-44034`, :cve_mitre:`2023-39197`, :cve:`2023-39198`, :cve:`2023-5972`, :cve:`2023-6039`, :cve:`2023-6111` and :cve:`2023-6176` |
| 16 | - perl: fix :cve:`2023-47100` |
| 17 | - python3-urllib3: Fix :cve:`2023-45803` |
| 18 | - rust: Fix :cve:`2023-40030` |
| 19 | - vim: Fix :cve:`2023-48231`, :cve:`2023-48232`, :cve:`2023-48233`, :cve:`2023-48234`, :cve:`2023-48235`, :cve:`2023-48236` and :cve:`2023-48237` |
| 20 | - xserver-xorg: Fix :cve:`2023-5367` and :cve:`2023-5380` |
| 21 | - xwayland: Fix :cve:`2023-5367` |
| 22 | |
| 23 | |
| 24 | Fixes in Yocto-4.3.2 |
| 25 | ~~~~~~~~~~~~~~~~~~~~ |
| 26 | |
| 27 | - base-passwd: Upgrade to 3.6.2 |
| 28 | - bind: Upgrade to 9.18.20 |
| 29 | - binutils: stable 2.41 branch updates |
| 30 | - bitbake: command: Make parseRecipeFile() handle virtual recipes correctly |
| 31 | - bitbake: lib/bb: Add workaround for libgcc issues with python 3.8 and 3.9 |
| 32 | - bitbake: toastergui: verify that an existing layer path is given |
| 33 | - bluez5: fix connection for ps5/dualshock controllers |
| 34 | - build-appliance-image: Update to nanbield head revision |
| 35 | - cmake: Upgrade to 3.27.7 |
| 36 | - contributor-guide: add License-Update tag |
| 37 | - contributor-guide: fix command option |
| 38 | - cups: Add root,sys,wheel to system groups |
| 39 | - cve-update-nvd2-native: faster requests with API keys |
| 40 | - cve-update-nvd2-native: increase the delay between subsequent request failures |
| 41 | - cve-update-nvd2-native: make number of fetch attemtps configurable |
| 42 | - cve-update-nvd2-native: remove unused variable CVE_SOCKET_TIMEOUT |
| 43 | - dev-manual: Discourage the use of SRC_URI[md5sum] |
| 44 | - dev-manual: layers: update link to YP Compatible form |
| 45 | - dev-manual: runtime-testing: fix test module name |
| 46 | - devtool: finish/update-recipe: restrict mode srcrev to recipes fetched from SCM |
| 47 | - devtool: fix update-recipe dry-run mode |
| 48 | - ell: Upgrade to 0.60 |
| 49 | - enchant2: Upgrade to 2.6.2 |
| 50 | - ghostscript: Upgrade to 10.02.1 |
| 51 | - glib-2.0: Upgrade to 2.78.1 |
| 52 | - glibc: stable 2.38 branch updates |
| 53 | - gstreamer1.0: Upgrade to 1.22.7 |
| 54 | - gtk: Add rdepend on printbackend for cups |
| 55 | - harfbuzz: Upgrade to 8.2.2 |
| 56 | - json-c: fix icecc compilation |
| 57 | - kern-tools: bump :term:`SRCREV` for queue processing changes |
| 58 | - kern-tools: make lower context patches reproducible |
| 59 | - kern-tools: update :term:`SRCREV` to include SECURITY.md file |
| 60 | - kernel-arch: use ccache only for compiler |
| 61 | - kernel-yocto: improve metadata patching |
| 62 | - lib/oe/buildcfg.py: Include missing import |
| 63 | - lib/oe/buildcfg.py: Remove unused parameter |
| 64 | - lib/oe/patch: ensure os.chdir restoring always happens |
| 65 | - lib/oe/path: Deploy files can start only with a dot |
| 66 | - libgcrypt: Upgrade to 1.10.3 |
| 67 | - libjpeg-turbo: Upgrade to 3.0.1 |
| 68 | - libnewt: Upgrade to 0.52.24 |
| 69 | - libnsl2: Upgrade to 2.0.1 |
| 70 | - libsolv: Upgrade to 0.7.26 |
| 71 | - libxslt: Upgrade to 1.1.39 |
| 72 | - linux-firmware: add audio topology symlink to the X13's audio package |
| 73 | - linux-firmware: add missing depenencies on license packages |
| 74 | - linux-firmware: add new fw file to ${PN}-rtl8821 |
| 75 | - linux-firmware: add notice file to sdm845 modem firmware |
| 76 | - linux-firmware: create separate packages |
| 77 | - linux-firmware: package Qualcomm Venus 6.0 firmware |
| 78 | - linux-firmware: package Robotics RB5 sensors DSP firmware |
| 79 | - linux-firmware: package firmware for Qualcomm Adreno a702 |
| 80 | - linux-firmware: package firmware for Qualcomm QCM2290 / QRB4210 |
| 81 | - linux-firmware: Upgrade to 20231030 |
| 82 | - linux-yocto-rt/6.1: update to -rt18 |
| 83 | - linux-yocto/6.1: cfg: restore CONFIG_DEVMEM |
| 84 | - linux-yocto/6.1: drop removed IMA option |
| 85 | - linux-yocto/6.1: Upgrade to v6.1.68 |
| 86 | - linux-yocto/6.5: cfg: restore CONFIG_DEVMEM |
| 87 | - linux-yocto/6.5: cfg: split runtime and symbol debug |
| 88 | - linux-yocto/6.5: drop removed IMA option |
| 89 | - linux-yocto/6.5: fix AB-INT: QEMU kernel panic: No irq handler for vector |
| 90 | - linux-yocto/6.5: Upgrade to v6.5.13 |
| 91 | - linux/cve-exclusion6.1: Update to latest kernel point release |
| 92 | - log4cplus: Upgrade to 2.1.1 |
| 93 | - lsb-release: use https for :term:`UPSTREAM_CHECK_URI` |
| 94 | - manuals: brief-yoctoprojectqs: align variable order with default local.conf |
| 95 | - manuals: fix URL |
| 96 | - meson: use correct targets for rust binaries |
| 97 | - migration-guide: add release notes for 4.0.14, 4.0.15, 4.2.4, 4.3.1 |
| 98 | - migration-guides: release 3.5 is actually 4.0 |
| 99 | - migration-guides: reword fix in release-notes-4.3.1 |
| 100 | - msmtp: Upgrade to 1.8.25 |
| 101 | - oeqa/selftest/tinfoil: Add tests that parse virtual recipes |
| 102 | - openssl: improve handshake test error reporting |
| 103 | - package_ipk: Fix Source: field variable dependency |
| 104 | - patchtest: shorten patch signed-off-by test output |
| 105 | - perf: lift :term:`TARGET_CC_ARCH` modification out of security_flags.inc |
| 106 | - perl: Upgrade to 5.38.2 |
| 107 | - perlcross: Upgrade to 1.5.2 |
| 108 | - poky.conf: bump version for 4.3.2 release |
| 109 | - python3-ptest: skip test_storlines |
| 110 | - python3-urllib3: Upgrade to 2.0.7 |
| 111 | - qemu: Upgrade to 8.1.2 |
| 112 | - ref-manual: Fix reference to MIRRORS/PREMIRRORS defaults |
| 113 | - ref-manual: releases.svg: update nanbield release status |
| 114 | - useradd_base: sed -i destroys symlinks |
| 115 | - rootfs-postcommands: sed -i destroys symlinks |
| 116 | - sstate: Ensure sstate searches update file mtime |
| 117 | - strace: backport fix for so_peerpidfd-test |
| 118 | - systemd-boot: Fix build issues on armv7a-linux |
| 119 | - systemd-compat-units.bb: fix postinstall script |
| 120 | - systemd: fix DynamicUser issue |
| 121 | - systemd: update :term:`LICENSE` statement |
| 122 | - tcl: skip async and event tests in run-ptest |
| 123 | - tcl: skip timing-dependent tests in run-ptest |
| 124 | - test-manual: add links to python unittest |
| 125 | - test-manual: add or improve hyperlinks |
| 126 | - test-manual: explicit or fix file paths |
| 127 | - test-manual: resource updates |
| 128 | - test-manual: text and formatting fixes |
| 129 | - test-manual: use working example |
| 130 | - testimage: Drop target_dumper and most of monitor_dumper |
| 131 | - testimage: Exclude wtmp from target-dumper commands |
| 132 | - tzdata: Upgrade to 2023d |
| 133 | - update_gtk_icon_cache: Fix for GTK4-only builds |
| 134 | - useradd_base: Fix sed command line for passwd-expire |
| 135 | - vim: Upgrade to 9.0.2130 |
| 136 | - xserver-xorg: Upgrade to 21.1.9 |
| 137 | - xwayland: Upgrade to 23.2.2 |
| 138 | |
| 139 | |
| 140 | Known Issues in Yocto-4.3.2 |
| 141 | ~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| 142 | |
| 143 | - N/A |
| 144 | |
| 145 | Contributors to Yocto-4.3.2 |
| 146 | ~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| 147 | |
| 148 | - Adam Johnston |
| 149 | - Alexander Kanavin |
| 150 | - Anuj Mittal |
| 151 | - Bastian Krause |
| 152 | - Bruce Ashfield |
| 153 | - Chen Qi |
| 154 | - Deepthi Hemraj |
| 155 | - Dhairya Nagodra |
| 156 | - Dmitry Baryshkov |
| 157 | - Fahad Arslan |
| 158 | - Javier Tia |
| 159 | - Jermain Horsman |
| 160 | - Joakim Tjernlund |
| 161 | - Julien Stephan |
| 162 | - Justin Bronder |
| 163 | - Khem Raj |
| 164 | - Lee Chee Yang |
| 165 | - Marco Felsch |
| 166 | - Markus Volk |
| 167 | - Marta Rybczynska |
| 168 | - Massimiliano Minella |
| 169 | - Michael Opdenacker |
| 170 | - Paul Barker |
| 171 | - Peter Kjellerstedt |
| 172 | - Peter Marko |
| 173 | - Randy MacLeod |
| 174 | - Rasmus Villemoes |
| 175 | - Richard Purdie |
| 176 | - Ross Burton |
| 177 | - Shubham Kulkarni |
| 178 | - Simone Weiß |
| 179 | - Steve Sakoman |
| 180 | - Sundeep KOKKONDA |
| 181 | - Tim Orling |
| 182 | - Trevor Gamblin |
| 183 | - Vijay Anusuri |
| 184 | - Viswanath Kraleti |
| 185 | - Vyacheslav Yurkov |
| 186 | - Wang Mingyu |
| 187 | - William Lyu |
| 188 | - Zoltán Böszörményi |
| 189 | |
| 190 | Repositories / Downloads for Yocto-4.3.2 |
| 191 | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| 192 | |
| 193 | poky |
| 194 | |
| 195 | - Repository Location: :yocto_git:`/poky` |
| 196 | - Branch: :yocto_git:`nanbield </poky/log/?h=nanbield>` |
| 197 | - Tag: :yocto_git:`yocto-4.3.2 </poky/log/?h=yocto-4.3.2>` |
| 198 | - Git Revision: :yocto_git:`f768ffb8916feb6542fcbe3e946cbf30e247b151 </poky/commit/?id=f768ffb8916feb6542fcbe3e946cbf30e247b151>` |
| 199 | - Release Artefact: poky-f768ffb8916feb6542fcbe3e946cbf30e247b151 |
| 200 | - sha: 21ca1695d70aba9b4bd8626d160111feab76206883cd14fe41eb024692bdfd7b |
| 201 | - Download Locations: |
| 202 | http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/poky-f768ffb8916feb6542fcbe3e946cbf30e247b151.tar.bz2 |
| 203 | http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/poky-f768ffb8916feb6542fcbe3e946cbf30e247b151.tar.bz2 |
| 204 | |
| 205 | openembedded-core |
| 206 | |
| 207 | - Repository Location: :oe_git:`/openembedded-core` |
| 208 | - Branch: :oe_git:`nanbield </openembedded-core/log/?h=nanbield>` |
| 209 | - Tag: :oe_git:`yocto-4.3.2 </openembedded-core/log/?h=yocto-4.3.2>` |
| 210 | - Git Revision: :oe_git:`ff595b937d37d2315386aebf315cea719e2362ea </openembedded-core/commit/?id=ff595b937d37d2315386aebf315cea719e2362ea>` |
| 211 | - Release Artefact: oecore-ff595b937d37d2315386aebf315cea719e2362ea |
| 212 | - sha: a7c6332dc0e09ecc08221e78b11151e8e2a3fd9fa3eaad96a4c03b67012bfb97 |
| 213 | - Download Locations: |
| 214 | http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/oecore-ff595b937d37d2315386aebf315cea719e2362ea.tar.bz2 |
| 215 | http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/oecore-ff595b937d37d2315386aebf315cea719e2362ea.tar.bz2 |
| 216 | |
| 217 | meta-mingw |
| 218 | |
| 219 | - Repository Location: :yocto_git:`/meta-mingw` |
| 220 | - Branch: :yocto_git:`nanbield </meta-mingw/log/?h=nanbield>` |
| 221 | - Tag: :yocto_git:`yocto-4.3.2 </meta-mingw/log/?h=yocto-4.3.2>` |
| 222 | - Git Revision: :yocto_git:`49617a253e09baabbf0355bc736122e9549c8ab2 </meta-mingw/commit/?id=49617a253e09baabbf0355bc736122e9549c8ab2>` |
| 223 | - Release Artefact: meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2 |
| 224 | - sha: 2225115b73589cdbf1e491115221035c6a61679a92a93b2a3cf761ff87bf4ecc |
| 225 | - Download Locations: |
| 226 | http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2 |
| 227 | http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2 |
| 228 | |
| 229 | bitbake |
| 230 | |
| 231 | - Repository Location: :oe_git:`/bitbake` |
| 232 | - Branch: :oe_git:`2.6 </bitbake/log/?h=2.6>` |
| 233 | - Tag: :oe_git:`yocto-4.3.2 </bitbake/log/?h=yocto-4.3.2>` |
| 234 | - Git Revision: :oe_git:`72bf75f0b2e7f36930185e18a1de8277ce7045d8 </bitbake/commit/?id=72bf75f0b2e7f36930185e18a1de8277ce7045d8>` |
| 235 | - Release Artefact: bitbake-72bf75f0b2e7f36930185e18a1de8277ce7045d8 |
| 236 | - sha: 0b6ccd4796ccd211605090348a3d4378358c839ae1bb4c35964d0f36f2663187 |
| 237 | - Download Locations: |
| 238 | http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/bitbake-72bf75f0b2e7f36930185e18a1de8277ce7045d8.tar.bz2 |
| 239 | http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/bitbake-72bf75f0b2e7f36930185e18a1de8277ce7045d8.tar.bz2 |
| 240 | |
| 241 | yocto-docs |
| 242 | |
| 243 | - Repository Location: :yocto_git:`/yocto-docs` |
| 244 | - Branch: :yocto_git:`nanbield </yocto-docs/log/?h=nanbield>` |
| 245 | - Tag: :yocto_git:`yocto-4.3.2 </yocto-docs/log/?h=yocto-4.3.2>` |
| 246 | - Git Revision: :yocto_git:`fac88b9e80646a68b31975c915a718a9b6b2b439 </yocto-docs/commit/?id=fac88b9e80646a68b31975c915a718a9b6b2b439>` |
| 247 | |