blob: ea0280b03c2ed3cfb8cfb150bf5222d389029002 [file] [log] [blame]
Patrick Williams7784c422022-11-17 07:29:11 -06001Release notes for Yocto-4.0.5 (Kirkstone)
2-----------------------------------------
3
4Security Fixes in Yocto-4.0.5
5~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
6
7- qemu: fix :cve:`2021-3750`, :cve:`2021-3611` and :cve:`2022-2962`
8- binutils : fix :cve:`2022-38126`, :cve:`2022-38127` and :cve:`2022-38128`
9- tff: fix :cve:`2022-2867`, :cve:`2022-2868` and :cve:`2022-2869`
10- inetutils: fix :cve:`2022-39028`
11- go: fix :cve:`2022-27664`
12
13Fixes in Yocto-4.0.5
14~~~~~~~~~~~~~~~~~~~~
15
16- Revert "gcc-cross-canadian: Add symlink to real-ld alongside other symlinks"
17- bind: upgrade to 9.18.7
18- binutils: stable 2.38 branch updates (dc2474e7)
19- bitbake: Fix npm to use https rather than http
20- bitbake: asyncrpc/client: Fix unix domain socket chdir race issues
21- bitbake: bitbake: Add copyright headers where missing
22- bitbake: gitsm: Error out if submodule refers to parent repo
23- bitbake: runqueue: Drop deadlock breaking force fail
24- bitbake: runqueue: Ensure deferred tasks are sorted by multiconfig
25- bitbake: runqueue: Improve deadlock warning messages
26- bitbake: siggen: Fix insufficent entropy in sigtask file names
27- bitbake: tests/fetch: Allow handling of a file:// url within a submodule
28- build-appliance-image: Update to kirkstone head revision (4a88ada)
29- busybox: add devmem 128-bit support
30- classes: files: Extend overlayfs-etc class
31- coreutils: add openssl PACKAGECONFIG
32- create-pull-request: don't switch the git remote protocol to git://
33- dev-manual: fix reference to BitBake user manual
34- expat: upgrade 2.4.8 -> 2.4.9
35- files: overlayfs-etc: refactor preinit template
36- gcc-cross-canadian: add default plugin linker
37- gcc: add arm-v9 support
38- git: upgrade 2.35.4 -> 2.35.5
39- glibc-locale: explicitly remove empty dirs in ${libdir}
40- glibc-tests: use += instead of :append
41- glibc: stable 2.35 branch updates.(8d125a1f)
42- go-native: switch from SRC_URI:append to SRC_URI +=
43- image_types_wic.bbclass: fix cross binutils dependency
44- kern-tools: allow 'y' or 'm' to avoid config audit warnings
45- kern-tools: fix queue processing in relative TOPDIR configurations
46- kernel-yocto: allow patch author date to be commit date
47- libpng: upgrade to 1.6.38
48- linux-firmware: package new Qualcomm firmware
49- linux-firmware: upgrade 20220708 -> 20220913
50- linux-libc-headers: switch from SRC_URI:append to SRC_URI +=
51- linux-yocto-dev: add qemuarm64
52- linux-yocto/5.10: update to v5.10.149
53- linux-yocto/5.15: cfg: fix ACPI warnings for -tiny
54- linux-yocto/5.15: update to v5.15.68
55- local.conf.sample: correct the location of public hashserv
56- ltp: Fix pread02 case trigger the glibc overflow detection
57- lttng-modules: Fix crash on powerpc64
58- lttng-tools: Disable on qemuriscv32
59- lttng-tools: Disable on riscv32
60- migration-guides: add 4.0.4 release notes
61- oeqa/runtime/dnf: fix typo
62- own-mirrors: add crate
63- perf: Fix for recent kernel upgrades
64- poky.conf: bump version for 4.0.5
65- poky.yaml.in: update version requirements
66- python3-rfc3986-validator: switch from SRC_URI:append to SRC_URI +=
67- python3: upgrade 3.10.4 -> 3.10.7
68- qemu: Backport patches from upstream to support float128 on qemu-ppc64
69- rpm: Remove -Wimplicit-function-declaration warnings
70- rpm: update to 4.17.1
71- rsync: update to 3.2.5
72- stress-cpu: disable float128 math on powerpc64 to avoid SIGILL
73- tune-neoversen2: support tune-neoversen2 base on armv9a
74- tzdata: update to 2022d
75- u-boot: switch from append to += in SRC_URI
76- uninative: Upgrade to 3.7 to work with glibc 2.36
77- vim: Upgrade to 9.0.0598
78- webkitgtk: Update to 2.36.7
79
80
81Known Issues in Yocto-4.0.5
82~~~~~~~~~~~~~~~~~~~~~~~~~~~
83
84- There are recent CVEs in key components such as openssl. They are not included in this release as it was built before the issues were known and fixes were available but these are now available on the kirkstone branch.
85
86
87Contributors to Yocto-4.0.5
88~~~~~~~~~~~~~~~~~~~~~~~~~~~
89
90- Adrian Freihofer
91- Alexander Kanavin
92- Alexandre Belloni
93- Bhabu Bindu
94- Bruce Ashfield
95- Chen Qi
96- Daniel McGregor
97- Denys Dmytriyenko
98- Dmitry Baryshkov
99- Florin Diaconescu
100- He Zhe
101- Joshua Watt
102- Khem Raj
103- Martin Jansa
104- Michael Halstead
105- Michael Opdenacker
106- Mikko Rapeli
107- Mingli Yu
108- Neil Horman
109- Pavel Zhukov
110- Richard Purdie
111- Robert Joslyn
112- Ross Burton
113- Ruiqiang Hao
114- Samuli Piippo
115- Steve Sakoman
116- Sundeep KOKKONDA
117- Teoh Jay Shen
118- Tim Orling
119- Virendra Thakur
120- Vyacheslav Yurkov
121- Xiangyu Chen
122- Yash Shinde
123- pgowda
124- Wang Mingyu
125
126
127Repositories / Downloads for Yocto-4.0.5
128~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
129
130poky
131
132- Repository Location: :yocto_git:`/poky`
133- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
134- Tag: :yocto_git:`yocto-4.0.5 </poky/log/?h=yocto-4.0.5>`
135- Git Revision: :yocto_git:`2e79b199114b25d81bfaa029ccfb17676946d20d </poky/commit/?id=2e79b199114b25d81bfaa029ccfb17676946d20d>`
136- Release Artefact: poky-2e79b199114b25d81bfaa029ccfb17676946d20d
137- sha: 7bcf3f901d4c5677fc95944ab096e9e306f4c758a658dde5befd16861ad2b8ea
138- Download Locations:
139 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2
140 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2
141
142openembedded-core
143
144- Repository Location: :oe_git:`/openembedded-core`
145- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
146- Tag: :oe_git:`yocto-4.0.5 </openembedded-core/log/?h=yocto-4.0.5>`
147- Git Revision: :oe_git:`fbdf93f43ff4b876487e1f26752598ec8abcb46e </openembedded-core/commit/?id=fbdf93f43ff4b876487e1f26752598ec8abcb46e>`
148- Release Artefact: oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e
149- sha: 2d9b5a8e9355b633bb57633cc8c2d319ba13fe4721f79204e61116b3faa6cbf1
150- Download Locations:
151 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2
152 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2
153
154meta-mingw
155
156- Repository Location: :yocto_git:`/meta-mingw`
157- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
158- Tag: :yocto_git:`yocto-4.0.5 </meta-mingw/log/?h=yocto-4.0.5>`
159- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
160- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
161- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
162- Download Locations:
163 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
164 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
165
166meta-gplv2
167
168- Repository Location: :yocto_git:`/meta-gplv2`
169- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
170- Tag: :yocto_git:`yocto-4.0.5 </meta-gplv2/log/?h=yocto-4.0.5>`
171- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
172- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
173- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
174- Download Locations:
175 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
176 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
177
178bitbake
179
180- Repository Location: :oe_git:`/bitbake`
181- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
182- Tag: :oe_git:`yocto-4.0.5 </bitbake/log/?h=yocto-4.0.5>`
183- Git Revision: :oe_git:`c90d57497b9bcd237c3ae810ee8edb5b0d2d575a </bitbake/commit/?id=c90d57497b9bcd237c3ae810ee8edb5b0d2d575a>`
184- Release Artefact: bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a
185- sha: 5698d548ce179036e46a24f80b213124c8825a4f443fa1d6be7ab0f70b01a9ff
186- Download Locations:
187 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2
188 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2
189
190yocto-docs
191
192- Repository Location: :yocto_git:`/yocto-docs`
193- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
194- Tag: :yocto_git:`yocto-4.0.5 </yocto-docs/log/?h=yocto-4.0.5>`
195- Git Revision: :yocto_git:`8c2f9f54e29781f4ee72e81eeaa12ceaa82dc2d3 </yocto-docs/commit/?id=8c2f9f54e29781f4ee72e81eeaa12ceaa82dc2d3>`
196