| .. SPDX-License-Identifier: CC-BY-SA-2.0-UK |
| |
| Release notes for Yocto-4.0.12 (Kirkstone) |
| ------------------------------------------ |
| |
| Security Fixes in Yocto-4.0.12 |
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| |
| - bind: Fix :cve:`2023-2828` and :cve:`2023-2911` |
| - cups: Fix :cve:`2023-34241` |
| - curl: Added :cve:`2023-28320` Follow-up patch |
| - dbus: Fix :cve:`2023-34969` |
| - dmidecode: fix :cve:`2023-30630` |
| - ghostscript: fix :cve:`2023-36664` |
| - go: fix :cve_mitre:`2023-24531`, :cve:`2023-24536`, :cve:`2023-29400`, :cve:`2023-29402`, :cve:`2023-29404`, :cve:`2023-29405` and :cve:`2023-29406` |
| - libarchive: Ignore :cve:`2023-30571` |
| - libcap: Fix :cve:`2023-2602` and :cve:`2023-2603` |
| - libjpeg-turbo: Fix :cve:`2023-2804` |
| - libpcre2: Fix :cve:`2022-41409` |
| - libtiff: fix :cve:`2023-26965` |
| - libwebp: Fix :cve:`2023-1999` |
| - libx11: Fix :cve:`2023-3138` |
| - libxpm: Fix :cve:`2022-44617` |
| - ninja: Ignore :cve:`2021-4336` |
| - openssh: Fix :cve:`2023-38408` |
| - openssl: Fix :cve:`2023-2975`, :cve:`2023-3446` and :cve:`2023-3817` |
| - perl: Fix :cve:`2023-31486` |
| - python3: Ignore :cve:`2023-36632` |
| - qemu: Fix :cve:`2023-0330`, :cve_mitre:`2023-2861`, :cve_mitre:`2023-3255` and :cve_mitre:`2023-3301` |
| - sqlite3: Fix :cve:`2023-36191` |
| - tiff: Fix :cve:`2023-0795`, :cve:`2023-0796`, :cve:`2023-0797`, :cve:`2023-0798`, :cve:`2023-0799`, :cve:`2023-25433`, :cve:`2023-25434` and :cve:`2023-25435` |
| - vim: :cve:`2023-2609` and :cve:`2023-2610` |
| |
| |
| Fixes in Yocto-4.0.12 |
| ~~~~~~~~~~~~~~~~~~~~~ |
| |
| - babeltrace2: Always use BFD linker when building tests with ld-is-lld distro feature |
| - babeltrace2: upgrade to 2.0.5 |
| - bitbake.conf: add unzstd in :term:`HOSTTOOLS` |
| - bitbake: bitbake-layers: initialize tinfoil before registering command line arguments |
| - bitbake: runqueue: Fix deferred task/multiconfig race issue |
| - blktrace: ask for python3 specifically |
| - build-appliance-image: Update to kirkstone head revision |
| - cmake: Fix CMAKE_SYSTEM_PROCESSOR setting for SDK |
| - connman: fix warning by specifying runstatedir at configure time |
| - cpio: Replace fix wrong CRC with ASCII CRC for large files with upstream backport |
| - cve-update-nvd2-native: actually use API keys |
| - cve-update-nvd2-native: always pass str for json.loads() |
| - cve-update-nvd2-native: fix cvssV3 metrics |
| - cve-update-nvd2-native: handle all configuration nodes, not just first |
| - cve-update-nvd2-native: increase retry count |
| - cve-update-nvd2-native: log a little more |
| - cve-update-nvd2-native: retry all errors and sleep between retries |
| - cve-update-nvd2-native: use exact times, don't truncate |
| - dbus: upgrade to 1.14.8 |
| - devtool: Fix the wrong variable in srcuri_entry |
| - diffutils: upgrade to 3.10 |
| - docs: ref-manual: terms: fix typos in :term:`SPDX` term |
| - fribidi: upgrade to 1.0.13 |
| - gcc: upgrade to v11.4 |
| - gcc-testsuite: Fix ppc cpu specification |
| - gcc: don't pass --enable-standard-branch-protection |
| - gcc: fix runpath errors in cc1 binary |
| - grub: submit determinism.patch upstream |
| - image_types: Fix reproducible builds for initramfs and UKI img |
| - kernel: add missing path to search for debug files |
| - kmod: remove unused ptest.patch |
| - layer.conf: Add missing dependency exclusion |
| - libassuan: upgrade to 2.5.6 |
| - libksba: upgrade to 1.6.4 |
| - libpng: Add ptest for libpng |
| - libxcrypt: fix build with perl-5.38 and use master branch |
| - libxcrypt: fix hard-coded ".so" extension |
| - libxpm: upgrade to 3.5.16 |
| - linux-firmware: upgrade to 20230515 |
| - linux-yocto/5.10: cfg: fix DECNET configuration warning |
| - linux-yocto/5.10: update to v5.10.185 |
| - linux-yocto/5.15: cfg: fix DECNET configuration warning |
| - linux-yocto/5.15: update to v5.15.120 |
| - logrotate: Do not create logrotate.status file |
| - lttng-ust: upgrade to 2.13.6 |
| - machine/arch-arm64: add -mbranch-protection=standard |
| - maintainers.inc: correct Carlos Rafael Giani's email address |
| - maintainers.inc: correct unassigned entries |
| - maintainers.inc: unassign Adrian Bunk from wireless-regdb |
| - maintainers.inc: unassign Alistair Francis from opensbi |
| - maintainers.inc: unassign Andreas Müller from itstool entry |
| - maintainers.inc: unassign Pascal Bach from cmake entry |
| - maintainers.inc: unassign Ricardo Neri from ovmf |
| - maintainers.inc: unassign Richard Weinberger from erofs-utils entry |
| - mdadm: fix 07revert-inplace ptest |
| - mdadm: fix segfaults when running ptests |
| - mdadm: fix util-linux ptest dependency |
| - mdadm: skip running known broken ptests |
| - meson.bbclass: Point to llvm-config from native sysroot |
| - meta: lib: oe: npm_registry: Add more safe caracters |
| - migration-guides: add release notes for 4.0.11 |
| - minicom: remove unused patch files |
| - mobile-broadband-provider-info: upgrade to 20230416 |
| - oe-depends-dot: Handle new format for task-depends.dot |
| - oeqa/runtime/cases/rpm: fix wait_for_no_process_for_user failure case |
| - oeqa/selftest/bbtests: add non-existent prefile/postfile tests |
| - oeqa/selftest/devtool: add unit test for "devtool add -b" |
| - openssl: Upgrade to 3.0.10 |
| - openssl: add PERLEXTERNAL path to test its existence |
| - openssl: use a glob on the PERLEXTERNAL to track updates on the path |
| - package.bbclass: moving field data process before variable process in process_pkgconfig |
| - pm-utils: fix multilib conflictions |
| - poky.conf: bump version for 4.0.12 |
| - psmisc: Set :term:`ALTERNATIVE` for pstree to resolve conflict with busybox |
| - pybootchartgui: show elapsed time for each task |
| - python3: fix missing comma in get_module_deps3.py |
| - python3: upgrade to 3.10.12 |
| - recipetool: Fix inherit in created -native* recipes |
| - ref-manual: add LTS and Mixin terms |
| - ref-manual: document image-specific variant of :term:`INCOMPATIBLE_LICENSE` |
| - ref-manual: release-process: update for LTS releases |
| - rust-llvm: backport a fix for build with gcc-13 |
| - scripts/runqemu: allocate unfsd ports in a way that doesn't race or clash with unrelated processes |
| - scripts/runqemu: split lock dir creation into a reusable function |
| - sdk.py: error out when moving file fails |
| - sdk.py: fix moving dnf contents |
| - selftest reproducible.py: support different build targets |
| - selftest/license: Exclude from world |
| - selftest/reproducible: Allow chose the package manager |
| - serf: upgrade to 1.3.10 |
| - strace: Disable failing test |
| - strace: Merge two similar patches |
| - strace: Update patches/tests with upstream fixes |
| - sysfsutils: fetch a supported fork from github |
| - systemd-systemctl: fix errors in instance name expansion |
| - systemd: Backport nspawn: make sure host root can write to the uidmapped mounts we prepare for the container payload |
| - tzdata: upgrade to 2023c |
| - uboot-extlinux-config.bbclass: fix old override syntax in comment |
| - unzip: fix configure check for cross compilation |
| - useradd-staticids.bbclass: improve error message |
| - util-linux: add alternative links for ipcs,ipcrm |
| - v86d: Improve kernel dependency |
| - vim: upgrade to 9.0.1592 |
| - wget: upgrade to 1.21.4 |
| - wic: Add dependencies for erofs-utils |
| - wireless-regdb: upgrade to 2023.05.03 |
| - xdpyinfo: upgrade to 1.3.4 |
| - zip: fix configure check by using _Static_assert |
| |
| |
| Known Issues in Yocto-4.0.12 |
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| |
| - N/A |
| |
| |
| Contributors to Yocto-4.0.12 |
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| |
| - Alberto Planas |
| - Alexander Kanavin |
| - Alexander Sverdlin |
| - Andrej Valek |
| - Archana Polampalli |
| - BELOUARGA Mohamed |
| - Benjamin Bouvier |
| - Bruce Ashfield |
| - Charlie Wu |
| - Chen Qi |
| - Etienne Cordonnier |
| - Fabien Mahot |
| - Frieder Paape |
| - Frieder Schrempf |
| - Heiko Thole |
| - Hitendra Prajapati |
| - Jermain Horsman |
| - Jose Quaresma |
| - Kai Kang |
| - Khem Raj |
| - Lee Chee Yang |
| - Marc Ferland |
| - Marek Vasut |
| - Martin Jansa |
| - Mauro Queiros |
| - Michael Opdenacker |
| - Mikko Rapeli |
| - Nikhil R |
| - Ovidiu Panait |
| - Peter Marko |
| - Poonam Jadhav |
| - Quentin Schulz |
| - Richard Purdie |
| - Ross Burton |
| - Rusty Howell |
| - Sakib Sajal |
| - Soumya Sambu |
| - Steve Sakoman |
| - Sundeep KOKKONDA |
| - Tim Orling |
| - Tom Hochstein |
| - Trevor Gamblin |
| - Vijay Anusuri |
| - Vivek Kumbhar |
| - Wang Mingyu |
| - Xiangyu Chen |
| - Yoann Congal |
| - Yogita Urade |
| - Yuta Hayama |
| |
| |
| Repositories / Downloads for Yocto-4.0.12 |
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| |
| poky |
| |
| - Repository Location: :yocto_git:`/poky` |
| - Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` |
| - Tag: :yocto_git:`yocto-4.0.12 </poky/log/?h=yocto-4.0.12>` |
| - Git Revision: :yocto_git:`d6b8790370500b99ca11f0d8a05c39b661ab2ba6 </poky/commit/?id=d6b8790370500b99ca11f0d8a05c39b661ab2ba6>` |
| - Release Artefact: poky-d6b8790370500b99ca11f0d8a05c39b661ab2ba6 |
| - sha: 35f0390e0c5a12f403ed471c0b1254c13cbb9d7c7b46e5a3538e63e36c1ac280 |
| - Download Locations: |
| http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/poky-d6b8790370500b99ca11f0d8a05c39b661ab2ba6.tar.bz2 |
| http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/poky-d6b8790370500b99ca11f0d8a05c39b661ab2ba6.tar.bz2 |
| |
| openembedded-core |
| |
| - Repository Location: :oe_git:`/openembedded-core` |
| - Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` |
| - Tag: :oe_git:`yocto-4.0.12 </openembedded-core/log/?h=yocto-4.0.12>` |
| - Git Revision: :oe_git:`e1a604db8d2cf8782038b4016cc2e2052467333b </openembedded-core/commit/?id=e1a604db8d2cf8782038b4016cc2e2052467333b>` |
| - Release Artefact: oecore-e1a604db8d2cf8782038b4016cc2e2052467333b |
| - sha: 8b302eb3f3ffe5643f88bc6e4ae8f9a5cda63544d67e04637ecc4197e9750a1d |
| - Download Locations: |
| http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/oecore-e1a604db8d2cf8782038b4016cc2e2052467333b.tar.bz2 |
| http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/oecore-e1a604db8d2cf8782038b4016cc2e2052467333b.tar.bz2 |
| |
| meta-mingw |
| |
| - Repository Location: :yocto_git:`/meta-mingw` |
| - Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` |
| - Tag: :yocto_git:`yocto-4.0.12 </meta-mingw/log/?h=yocto-4.0.12>` |
| - Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>` |
| - Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1 |
| - sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302 |
| - Download Locations: |
| http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 |
| http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 |
| |
| meta-gplv2 |
| |
| - Repository Location: :yocto_git:`/meta-gplv2` |
| - Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` |
| - Tag: :yocto_git:`yocto-4.0.12 </meta-gplv2/log/?h=yocto-4.0.12>` |
| - Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` |
| - Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a |
| - sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d |
| - Download Locations: |
| http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 |
| http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 |
| |
| bitbake |
| |
| - Repository Location: :oe_git:`/bitbake` |
| - Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` |
| - Tag: :oe_git:`yocto-4.0.12 </bitbake/log/?h=yocto-4.0.12>` |
| - Git Revision: :oe_git:`41b6684489d0261753344956042be2cc4adb0159 </bitbake/commit/?id=41b6684489d0261753344956042be2cc4adb0159>` |
| - Release Artefact: bitbake-41b6684489d0261753344956042be2cc4adb0159 |
| - sha: efa2b1c4d0be115ed3960750d1e4ed958771b2db6d7baee2d13ad386589376e8 |
| - Download Locations: |
| http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2 |
| http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2 |
| |
| yocto-docs |
| |
| - Repository Location: :yocto_git:`/yocto-docs` |
| - Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` |
| - Tag: :yocto_git:`yocto-4.0.12 </yocto-docs/log/?h=yocto-4.0.12>` |
| - Git Revision: :yocto_git:`4dfef81ac6164764c6541e39a9fef81d49227096 </yocto-docs/commit/?id=4dfef81ac6164764c6541e39a9fef81d49227096>` |
| |