blob: d8474cda6881f1766575a2f2abd4ea324fdeff71 [file] [log] [blame]
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-4.1.3 (Langdale)
----------------------------------------
Security Fixes in Yocto-4.1.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- apr-util: Fix :cve:`2022-25147`
- apr: Fix :cve:`2022-24963` and :cve:`2022-28331`
- bind: Fix :cve:`2022-3094`, :cve:`2022-3736` and :cve:`2022-3924`
- curl: Fix :cve:`2022-43551` and :cve:`2022-43552`
- dbus: Fix :cve:`2022-42010`, :cve:`2022-42011` and :cve:`2022-42012`
- git: Fix :cve:`2022-23521`, :cve:`2022-39253`, :cve:`2022-39260` and :cve:`2022-41903`
- git: Ignore :cve:`2022-41953`
- go: Fix :cve:`2022-41717` and :cve:`2022-41720`
- grub2: Fix :cve:`2022-2601` and :cve:`2022-3775`
- less: Fix :cve:`2022-46663`
- libarchive: Fix :cve:`2022-36227`
- libksba: Fix :cve:`2022-47629`
- openssl: Fix :cve:`2022-3996`
- pkgconf: Fix :cve:`2023-24056`
- ppp: Fix :cve:`2022-4603`
- sudo: Fix :cve:`2023-22809`
- tar: Fix :cve:`2022-48303`
- vim: Fix :cve:`2023-0049`, :cve:`2023-0051`, :cve:`2023-0054`, :cve:`2023-0288`, :cve:`2023-0433` and :cve:`2023-0512`
- xserver-xorg: Fix :cve_mitre:`2023-0494`
- xwayland: Fix :cve_mitre:`2023-0494`
Fixes in Yocto-4.1.3
~~~~~~~~~~~~~~~~~~~~
- apr-util: Upgrade to 1.6.3
- apr: Upgrade to 1.7.2
- apt: fix do_package_qa failure
- at: Change when files are copied
- base.bbclass: Fix way to check ccache path
- bblayers/makesetup: skip git repos that are submodules
- bblayers/setupwriters/oe-setup-layers: create dir if not exists
- bind: Upgrade to 9.18.11
- bitbake-layers: fix a typo
- bitbake: bb/utils: include SSL certificate paths in export_proxies
- bitbake: fetch2/git: Clarify the meaning of namespace
- bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata
- bitbake: process: log odd unlink events with bitbake.sock
- bitbake: server/process: Add bitbake.sock race handling
- bitbake: siggen: Fix inefficient string concatenation
- bootchart2: Fix usrmerge support
- bsp-guide: fix broken git URLs and missing word
- build-appliance-image: Update to langdale head revision
- buildtools-tarball: set pkg-config search path
- busybox: Fix depmod patch
- busybox: always start do_compile with orig config files
- busybox: rm temporary files if do_compile was interrupted
- cairo: fix CVE patches assigned wrong CVE number
- classes/fs-uuid: Fix command output decoding issue
- classes/populate_sdk_base: Append cleandirs
- classes: image: Set empty weak default IMAGE_LINGUAS
- cml1: remove redundant addtask
- core-image.bbclass: Fix missing leading whitespace with ':append'
- createrepo-c: Include missing rpm/rpmstring.h
- curl: don't enable debug builds
- curl: fix dependencies when building with ldap/ldaps
- cve-check: write the cve manifest to IMGDEPLOYDIR
- cve-update-db-native: avoid incomplete updates
- cve-update-db-native: show IP on failure
- dbus: Upgrade to 1.14.6
- dev-manual: common-tasks.rst: add link to FOSDEM 2023 video
- dev-manual: fix old override syntax
- devshell: Do not add scripts/git-intercept to PATH
- devtool: fix devtool finish when gitmodules file is empty
- devtool: process local files only for the main branch
- dhcpcd: backport two patches to fix runtime error
- dhcpcd: fix dhcpcd start failure on qemuppc64
- diffutils: Upgrade to 3.9
- ffmpeg: fix configure failure on noexec /tmp host
- gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests
- git: Upgrade to 2.37.6
- glslang: branch rename master -> main
- go: Upgrade to 1.19.4
- gstreamer1.0 : Revert "disable flaky gstbin:test_watch_for_state_change test" and Fix race conditions in gstbin tests with upstream solution
- harfbuzz: remove bindir only if it exists
- httpserver: add error handler that write to the logger
- image.bbclass: print all QA functions exceptions
- kernel-fitimage: Adjust order of dtb/dtbo files
- kernel-fitimage: Allow user to select dtb when multiple dtb exists
- kernel-yocto: fix kernel-meta data detection
- kernel/linux-kernel-base: Fix kernel build artefact determinism issues
- lib/buildstats: handle tasks that never finished
- lib/oe/reproducible: Use git log without gpg signature
- libarchive: Upgrade to 3.6.2
- libc-locale: Fix on target locale generation
- libgit2: Upgrade to 1.5.1
- libjpeg-turbo: Upgrade to 2.1.5.1
- libksba: Upgrade to 1.6.3
- libpng: Enable NEON for aarch64 to enensure consistency with arm32.
- librsvg: Only enable the Vala bindings if GObject Introspection is enabled
- librsvg: enable vapi build
- libseccomp: fix for the ptest result format
- libseccomp: fix typo in DESCRIPTION
- libssh2: Clean up ptest patch/coverage
- libtirpc: Check if file exists before operating on it
- libusb1: Link with latomic only if compiler has no atomic builtins
- libusb1: Strip trailing whitespaces
- linux-firmware: add yamato fw files to qcom-adreno-a2xx package
- linux-firmware: properly set license for all Qualcomm firmware
- linux-firmware: Upgrade to 20230210
- linux-yocto/5.15: fix perf build with clang
- linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off
- linux-yocto/5.15: ltp and squashfs fixes
- linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user copy
- linux-yocto/5.15: Upgrade to v5.15.91
- linux-yocto/5.19: fix perf build with clang
- linux-yocto/5.19: powerpc: Fix reschedule bug in KUAP-unlocked user copy
- lsof: fix old override syntax
- lttng-modules: Fix for 5.10.163 kernel version
- lttng-modules: fix for kernel 6.2+
- lttng-modules: Upgrade to 2.13.8
- lttng-tools: Upgrade to 2.13.9
- make-mod-scripts: Ensure kernel build output is deterministic
- manuals: update patchwork instance URL
- mesa-gl: gallium is required when enabling x11
- meta: remove True option to getVar and getVarFlag calls (again)
- migration-guides: add release-notes for 4.0.7
- native: Drop special variable handling
- numactl: skip test case when target platform doesn't have 2 CPU node
- oeqa context.py: fix --target-ip comment to include ssh port number
- oeqa dump.py: add error counter and stop after 5 failures
- oeqa qemurunner.py: add timeout to QMP calls
- oeqa qemurunner.py: try to avoid reading one character at a time
- oeqa qemurunner: read more data at a time from serial
- oeqa ssh.py: add connection keep alive options to ssh client
- oeqa ssh.py: fix hangs in run()
- oeqa ssh.py: move output prints to new line
- oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal
- oeqa/rpm.py: Increase timeout and add debug output
- oeqa/selftest/debuginfod: improve testcase
- oeqa/selftest/locales: Add selftest for locale generation/presence
- oeqa/selftest/resulttooltests: fix minor typo
- openssl: Upgrade to 3.0.8
- opkg: ensure opkg uses private gpg.conf when applying keys.
- pango: Upgrade to 1.50.12
- perf: Enable debug/source packaging
- pkgconf: Upgrade to 1.9.4
- poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder
- poky.conf: bump version for 4.1.3
- populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append'
- profile-manual: update WireShark hyperlinks
- ptest-packagelists.inc: Fix missing leading whitespace with ':append'
- python3-pytest: depend on python3-tomli instead of python3-toml
- quilt: fix intermittent failure in faildiff.test
- quilt: use upstreamed faildiff.test fix
- recipe_sanity: fix old override syntax
- ref-manual: Fix invalid feature name
- ref-manual: update DEV_PKG_DEPENDENCY in variables
- ref-manual: variables.rst: fix broken hyperlink
- rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively
- runqemu: kill qemu if it hangs
- rust: Do not use default compiler flags defined in CC crate
- scons.bbclass: Make MAXLINELENGTH overridable
- scons: Pass MAXLINELENGTH to scons invocation
- sdkext/cases/devtool: pass a logger to HTTPService
- selftest/virgl: use pkg-config from the host
- spirv-headers/spirv-tools: set correct branch name
- sstate.bbclass: Fetch non-existing local .sig files if needed
- sstatesig: Improve output hash calculation
- sudo: Upgrade to 1.9.12p2
- system-requirements.rst: Add Fedora 36, AlmaLinux 8.7 & 9.1, and OpenSUSE 15.4 to list of supported distros
- testimage: Fix error message to reflect new syntax
- tiff: Add packageconfig knob for webp
- toolchain-scripts: compatibility with unbound variable protection
- uninative: Upgrade to 3.8.1 to include libgcc
- update-alternatives: fix typos
- vim: Upgrade to 9.0.1293
- vulkan-samples: branch rename master -> main
- wic: Fix usage of fstype=none in wic
- wireless-regdb: Upgrade to 2023.02.13
- xserver-xorg: Upgrade to 21.1.7
- xwayland: Upgrade to 22.1.8
Known Issues in Yocto-4.1.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.1.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Adrian Freihofer
- Alejandro Hernandez Samaniego
- Alex Kiernan
- Alexander Kanavin
- Alexis Lothoré
- Anton Antonov
- Antonin Godard
- Armin Kuster
- Arnout Vandecappelle
- Benoît Mauduit
- Bruce Ashfield
- Carlos Alberto Lopez Perez
- Changqing Li
- Charlie Johnston
- Chee Yang Lee
- Chen Qi
- Dmitry Baryshkov
- Enguerrand de Ribaucourt
- Etienne Cordonnier
- Fawzi KHABER
- Federico Pellegrin
- Frank de Brabander
- Harald Seiler
- He Zhe
- Jan Kircher
- Jermain Horsman
- Jose Quaresma
- Joshua Watt
- Kai Kang
- Khem Raj
- Lei Maohui
- Louis Rannou
- Luis
- Marek Vasut
- Markus Volk
- Marta Rybczynska
- Martin Jansa
- Mateusz Marciniec
- Mauro Queiros
- Michael Halstead
- Michael Opdenacker
- Mikko Rapeli
- Mingli Yu
- Narpat Mali
- Niko Mauno
- Pavel Zhukov
- Pawel Zalewski
- Peter Kjellerstedt
- Petr Kubizňák
- Quentin Schulz
- Randy MacLeod
- Richard Purdie
- Robert Joslyn
- Rodolfo Quesada Zumbado
- Ross Burton
- Sakib Sajal
- Sandeep Gundlupet Raju
- Saul Wold
- Siddharth Doshi
- Steve Sakoman
- Thomas Roos
- Tobias Hagelborn
- Ulrich Ölmann
- Vivek Kumbhar
- Wang Mingyu
- Xiangyu Chen
Repositories / Downloads for Yocto-4.1.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`langdale </poky/log/?h=langdale>`
- Tag: :yocto_git:`yocto-4.1.3 </poky/log/?h=yocto-4.1.3>`
- Git Revision: :yocto_git:`91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f </poky/commit/?id=91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f>`
- Release Artefact: poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f
- sha: 94e4615eba651fe705436b29b854458be050cc39db936295f9d5eb7e85d3eff1
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`langdale </openembedded-core/log/?h=langdale>`
- Tag: :oe_git:`yocto-4.1.3 </openembedded-core/log/?h=yocto-4.1.3>`
- Git Revision: :oe_git:`b995ea45773211bd7bdd60eabcc9bbffda6beb5c </openembedded-core/commit/?id=b995ea45773211bd7bdd60eabcc9bbffda6beb5c>`
- Release Artefact: oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c
- sha: 952e19361f205ee91b74e5caaa835d58fa6dd0d92ddaed50d4cd3f3fa56fab63
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`langdale </meta-mingw/log/?h=langdale>`
- Tag: :yocto_git:`yocto-4.1.3 </meta-mingw/log/?h=yocto-4.1.3>`
- Git Revision: :yocto_git:`b0067202db8573df3d23d199f82987cebe1bee2c </meta-mingw/commit/?id=b0067202db8573df3d23d199f82987cebe1bee2c>`
- Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c
- sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.2 </bitbake/log/?h=2.2>`
- Tag: :oe_git:`yocto-4.1.3 </bitbake/log/?h=yocto-4.1.3>`
- Git Revision: :oe_git:`592ee222a1c6da42925fb56801f226884b6724ec </bitbake/commit/?id=592ee222a1c6da42925fb56801f226884b6724ec>`
- Release Artefact: bitbake-592ee222a1c6da42925fb56801f226884b6724ec
- sha: 79c32f2ca66596132e32a45654ce0e9dd42b6b39186eff3540a9d6b499fe952c
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`langdale </yocto-docs/log/?h=langdale>`
- Tag: :yocto_git:`yocto-4.1.3 </yocto-docs/log/?h=yocto-4.1.3>`
- Git Revision: :yocto_git:`3de2ad1f8ff87aeec30088779267880306a0f31a </yocto-docs/commit/?id=3de2ad1f8ff87aeec30088779267880306a0f31a>`