release-notes-4.1.4.rst 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.1.4 (Langdale)
  3. ----------------------------------------
  4. Security Fixes in Yocto-4.1.4
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - cve-extra-exclusions/linux-yocto: Ignore :cve_nist:`2020-27784`, :cve_nist:`2021-3669`, :cve_nist:`2021-3759`, :cve_nist:`2021-4218`, :cve_nist:`2022-0480`, :cve_nist:`2022-1184`, :cve_nist:`2022-1462`, :cve_nist:`2022-2308`, :cve_nist:`2022-2327`, :cve_nist:`2022-26365`, :cve_nist:`2022-2663`, :cve_nist:`2022-2785`, :cve_nist:`2022-3176`, :cve_nist:`2022-33740`, :cve_nist:`2022-33741`, :cve_nist:`2022-33742`, :cve_nist:`2022-3526`, :cve_nist:`2022-3563`, :cve_nist:`2022-3621`, :cve_nist:`2022-3623`, :cve_nist:`2022-3624`, :cve_nist:`2022-3625`, :cve_nist:`2022-3629`, :cve_nist:`2022-3630`, :cve_nist:`2022-3633`, :cve_nist:`2022-3635`, :cve_nist:`2022-3636`, :cve_nist:`2022-3637`, :cve_nist:`2022-3646` and :cve_nist:`2022-3649`
  7. - cve-extra-exclusions/linux-yocto 5.15: Ignore :cve_nist:`2022-3435`, :cve_nist:`2022-3534`, :cve_nist:`2022-3564`, :cve_nist:`2022-3564`, :cve_nist:`2022-3619`, :cve_nist:`2022-3640`, :cve_nist:`2022-42895`, :cve_nist:`2022-42896`, :cve_nist:`2022-4382`, :cve_nist:`2023-0266` and :cve_nist:`2023-0394`
  8. - epiphany: Fix :cve_nist:`2023-26081`
  9. - git: Ignore :cve_nist:`2023-22743`
  10. - go: Fix :cve_nist:`2022-41722`, :cve_nist:`2022-41723`, :cve_nist:`2022-41724`, :cve_nist:`2022-41725` and :cve_nist:`2023-24532`
  11. - harfbuzz: Fix :cve_nist:`2023-25193`
  12. - libmicrohttpd: Fix :cve_nist:`2023-27371`
  13. - libxml2: Fix :cve_nist:`2022-40303` and :cve_nist:`2022-40304`
  14. - openssl: Fix :cve_nist:`2023-0464`, :cve_nist:`2023-0465` and :cve_nist:`2023-0466`
  15. - python3-setuptools: Fix :cve_nist:`2022-40897`
  16. - qemu: Fix :cve_nist:`2022-4144`
  17. - screen: Fix :cve_nist:`2023-24626`
  18. - shadow: Ignore :cve_nist:`2016-15024`
  19. - tiff: Fix :cve_nist:`2022-48281`, :cve_nist:`2023-0795`, :cve_nist:`2023-0796`, :cve_nist:`2023-0797`, :cve_nist:`2023-0798`, :cve_nist:`2023-0799`, :cve_nist:`2023-0800`, :cve_nist:`2023-0801`, :cve_nist:`2023-0802`, :cve_nist:`2023-0803` and :cve_nist:`2023-0804`
  20. - vim: Fix :cve_nist:`2023-1127`, :cve_nist:`2023-1170`, :cve_nist:`2023-1175`, :cve_nist:`2023-1264` and :cve_nist:`2023-1355`
  21. - xdg-utils: Fix :cve_nist:`2022-4055`
  22. - xserver-xorg: Fix for :cve_nist:`2023-1393`
  23. Fixes in Yocto-4.1.4
  24. ~~~~~~~~~~~~~~~~~~~~
  25. - apt: re-enable version check
  26. - base-files: Drop localhost.localdomain from hosts file
  27. - binutils: Fix nativesdk ld.so search
  28. - bitbake: bin/utils: Ensure locale en_US.UTF-8 is available on the system
  29. - bitbake: cookerdata: Drop dubious exception handling code
  30. - bitbake: cookerdata: Improve early exception handling
  31. - bitbake: cookerdata: Remove incorrect SystemExit usage
  32. - bitbake: fetch/git: Fix local clone url to make it work with repo
  33. - bitbake: toaster: Add refreshed oe-core and poky fixtures
  34. - bitbake: toaster: fixtures/README: django 1.8 -> 3.2
  35. - bitbake: toaster: fixtures/gen_fixtures.py: update branches
  36. - bitbake: utils: Allow to_boolean to support int values
  37. - bmap-tools: switch to main branch
  38. - build-appliance-image: Update to langdale head revision
  39. - buildtools-tarball: Handle spaces within user $PATH
  40. - busybox: move hwclock init earlier in startup
  41. - cargo.bbclass: use offline mode for building
  42. - cpio: Fix wrong CRC with ASCII CRC for large files
  43. - cracklib: update github branch to 'main'
  44. - cups: add/fix web interface packaging
  45. - cups: check :term:`PACKAGECONFIG` for pam feature
  46. - cups: use BUILDROOT instead of DESTDIR
  47. - cve-check: Fix false negative version issue
  48. - devtool/upgrade: do not delete the workspace/recipes directory
  49. - dhcpcd: Fix install conflict when enable multilib.
  50. - ffmpeg: fix build failure when vulkan is enabled
  51. - filemap.py: enforce maximum of 4kb block size
  52. - gcc-shared-source: do not use ${S}/.. in deploy_source_date_epoch
  53. - glibc: Add missing binutils dependency
  54. - go: upgrade to 1.19.7
  55. - image_types: fix multiubi var init
  56. - image_types: fix vname var init in multiubi_mkfs() function
  57. - iso-codes: upgrade to 4.13.0
  58. - kernel-devsrc: fix mismatched compiler warning
  59. - lib/oe/gpg_sign.py: Avoid race when creating .sig files in detach_sign
  60. - lib/resulttool: fix typo breaking resulttool log --ptest
  61. - libcomps: Fix callback function prototype for PyCOMPS_hash
  62. - libdnf: upgrade to 0.70.0
  63. - libgit2: update license information
  64. - libmicrohttpd: upgrade to 0.9.76
  65. - linux-yocto-rt/5.15: upgrade to -rt59
  66. - linux-yocto/5.15: upgrade to v5.15.108
  67. - linux: inherit pkgconfig in kernel.bbclass
  68. - lttng-modules: upgrade to v2.13.9
  69. - lua: Fix install conflict when enable multilib.
  70. - mdadm: Fix raid0, 06wrmostly and 02lineargrow tests
  71. - mesa-demos: packageconfig weston should have a dependency on wayland-protocols
  72. - meson: Fix wrapper handling of implicit setup command
  73. - meson: remove obsolete RPATH stripping patch
  74. - migration-guides: update release notes
  75. - oeqa ping.py: avoid busylooping failing ping command
  76. - oeqa ping.py: fail test if target IP address has not been set
  77. - oeqa rtc.py: skip if read-only-rootfs
  78. - oeqa/runtime: clean up deprecated backslash expansion
  79. - oeqa/sdk: Improve Meson test
  80. - oeqa/selftest/cases/package.py: adding unittest for package rename conflicts
  81. - oeqa/selftest/cases/runqemu: update imports
  82. - oeqa/selftest/prservice: Improve debug output for failure
  83. - oeqa/selftest/reproducible: Split different packages from missing packages output
  84. - oeqa/selftest: OESelftestTestContext: convert relative to full path when newbuilddir is provided
  85. - oeqa/targetcontrol: do not set dump_host_cmds redundantly
  86. - oeqa/targetcontrol: fix misspelled RuntimeError
  87. - oeqa/targetcontrol: remove unused imports
  88. - oeqa/utils/commands: fix usage of undefined EPIPE
  89. - oeqa/utils/commands: remove unused imports
  90. - oeqa/utils/qemurunner: replace hard-coded user 'root' in debug output
  91. - oeqs/selftest: OESelftestTestContext: replace the os.environ after subprocess.check_output
  92. - package.bbclass: check packages name conflict in do_package
  93. - pango: upgrade to 1.50.13
  94. - piglit: Fix build time dependency
  95. - poky.conf: bump version for 4.1.4
  96. - populate_sdk_base: add zip options
  97. - populate_sdk_ext: Handle spaces within user $PATH
  98. - pybootchart: Fix extents handling to account for cpu/io/mem pressure changes
  99. - pybootchartui: Fix python syntax issue
  100. - report-error: catch Nothing :term:`PROVIDES` error
  101. - rpm: Fix hdr_hash function prototype
  102. - run-postinsts: Set dependency for ldconfig to avoid boot issues
  103. - runqemu: respect :term:`IMAGE_LINK_NAME`
  104. - runqemu: Revert "workaround for APIC hang on pre 4.15 kernels on qemux86q"
  105. - scripts/lib/buildstats: handle top-level build_stats not being complete
  106. - selftest/recipetool: Stop test corrupting tinfoil class
  107. - selftest/runtime_test/virgl: Disable for all Rocky Linux
  108. - selftest: devtool: set :term:`BB_HASHSERVE_UPSTREAM` when setting :term:`SSTATE_MIRRORS`
  109. - selftest: runqemu: better check for ROOTFS: in the log
  110. - selftest: runqemu: use better error message when asserts fail
  111. - shadow: Fix can not print full login timeout message
  112. - staging/multilib: Fix manifest corruption
  113. - staging: Separate out different multiconfig manifests
  114. - sudo: upgrade to 1.9.13p3
  115. - systemd.bbclass: Add /usr/lib/systemd to searchpaths as well
  116. - systemd: add group sgx to udev package
  117. - systemd: fix wrong nobody-group assignment
  118. - timezone: use 'tz' subdir instead of ${WORKDIR} directly
  119. - toolchain-scripts: Handle spaces within user $PATH
  120. - tzcode-native: fix build with gcc-13 on host
  121. - tzdata: upgrade to 2023c
  122. - tzdata: use separate :term:`B` instead of :term:`WORKDIR` for zic output
  123. - u-boot: Map arm64 into map for u-boot dts installation
  124. - uninative: Upgrade to 3.9 to include glibc 2.37
  125. - vala: Fix install conflict when enable multilib.
  126. - vim: add missing pkgconfig inherit
  127. - vim: set modified-by to the recipe :term:`MAINTAINER`
  128. - vim: upgrade to 9.0.1429
  129. - xcb-proto: Fix install conflict when enable multilib.
  130. Known Issues in Yocto-4.1.4
  131. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  132. - N/A
  133. Contributors to Yocto-4.1.4
  134. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  135. - Alexander Kanavin
  136. - Andrew Geissler
  137. - Arturo Buzarra
  138. - Bhabu Bindu
  139. - Bruce Ashfield
  140. - Carlos Alberto Lopez Perez
  141. - Chee Yang Lee
  142. - Chris Elledge
  143. - Christoph Lauer
  144. - Dmitry Baryshkov
  145. - Enrico Jörns
  146. - Fawzi KHABER
  147. - Frank de Brabander
  148. - Frederic Martinsons
  149. - Geoffrey GIRY
  150. - Hitendra Prajapati
  151. - Jose Quaresma
  152. - Kenfe-Mickael Laventure
  153. - Khem Raj
  154. - Marek Vasut
  155. - Martin Jansa
  156. - Michael Halstead
  157. - Michael Opdenacker
  158. - Mikko Rapeli
  159. - Ming Liu
  160. - Mingli Yu
  161. - Narpat Mali
  162. - Pavel Zhukov
  163. - Peter Marko
  164. - Piotr Łobacz
  165. - Randy MacLeod
  166. - Richard Purdie
  167. - Robert Yang
  168. - Romuald JEANNE
  169. - Romuald Jeanne
  170. - Ross Burton
  171. - Siddharth
  172. - Siddharth Doshi
  173. - Soumya
  174. - Steve Sakoman
  175. - Sudip Mukherjee
  176. - Tim Orling
  177. - Tobias Hagelborn
  178. - Tom Hochstein
  179. - Trevor Woerner
  180. - Wang Mingyu
  181. - Xiangyu Chen
  182. - Zoltan Boszormenyi
  183. Repositories / Downloads for Yocto-4.1.4
  184. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  185. poky
  186. - Repository Location: :yocto_git:`/poky`
  187. - Branch: :yocto_git:`langdale </poky/log/?h=langdale>`
  188. - Tag: :yocto_git:`yocto-4.1.4 </poky/log/?h=yocto-4.1.4>`
  189. - Git Revision: :yocto_git:`3e95f268ce04b49ba6731fd4bbc53b1693c21963 </poky/commit/?id=3e95f268ce04b49ba6731fd4bbc53b1693c21963>`
  190. - Release Artefact: poky-3e95f268ce04b49ba6731fd4bbc53b1693c21963
  191. - sha: 54798c4b519f5e11f409e1fd074bea1bc0a1b80672aa60dddbac772c8e4d838b
  192. - Download Locations:
  193. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.4/poky-3e95f268ce04b49ba6731fd4bbc53b1693c21963.tar.bz2
  194. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.4/poky-3e95f268ce04b49ba6731fd4bbc53b1693c21963.tar.bz2
  195. openembedded-core
  196. - Repository Location: :oe_git:`/openembedded-core`
  197. - Branch: :oe_git:`langdale </openembedded-core/log/?h=langdale>`
  198. - Tag: :oe_git:`yocto-4.1.4 </openembedded-core/log/?h=yocto-4.1.4>`
  199. - Git Revision: :oe_git:`78211cda40eb018a3aa535c75b61e87337236628 </openembedded-core/commit/?id=78211cda40eb018a3aa535c75b61e87337236628>`
  200. - Release Artefact: oecore-78211cda40eb018a3aa535c75b61e87337236628
  201. - sha: 1303d836bae54c438c64d6b9f068eb91c32be4cc1779e89d0f2d915a55d59b15
  202. - Download Locations:
  203. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.4/oecore-78211cda40eb018a3aa535c75b61e87337236628.tar.bz2
  204. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.4/oecore-78211cda40eb018a3aa535c75b61e87337236628.tar.bz2
  205. meta-mingw
  206. - Repository Location: :yocto_git:`/meta-mingw`
  207. - Branch: :yocto_git:`langdale </meta-mingw/log/?h=langdale>`
  208. - Tag: :yocto_git:`yocto-4.1.4 </meta-mingw/log/?h=yocto-4.1.4>`
  209. - Git Revision: :yocto_git:`b0067202db8573df3d23d199f82987cebe1bee2c </meta-mingw/commit/?id=b0067202db8573df3d23d199f82987cebe1bee2c>`
  210. - Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c
  211. - sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366
  212. - Download Locations:
  213. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.4/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
  214. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.4/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
  215. bitbake
  216. - Repository Location: :oe_git:`/bitbake`
  217. - Branch: :oe_git:`2.2 </bitbake/log/?h=2.2>`
  218. - Tag: :oe_git:`yocto-4.1.4 </bitbake/log/?h=yocto-4.1.4>`
  219. - Git Revision: :oe_git:`5b105e76dd7de3b9a25b17b397f2c12c80048894 </bitbake/commit/?id=5b105e76dd7de3b9a25b17b397f2c12c80048894>`
  220. - Release Artefact: bitbake-5b105e76dd7de3b9a25b17b397f2c12c80048894
  221. - sha: 2cd6448138816f5a906f9927c6b6fdc5cf24981ef32b6402312f52ca490edb4f
  222. - Download Locations:
  223. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.4/bitbake-5b105e76dd7de3b9a25b17b397f2c12c80048894.tar.bz2
  224. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.4/bitbake-5b105e76dd7de3b9a25b17b397f2c12c80048894.tar.bz2
  225. yocto-docs
  226. - Repository Location: :yocto_git:`/yocto-docs`
  227. - Branch: :yocto_git:`langdale </yocto-docs/log/?h=langdale>`
  228. - Tag: :yocto_git:`yocto-4.1.4 </yocto-docs/log/?h=yocto-4.1.4>`
  229. - Git Revision: :yocto_git:`da685fc5e69d49728e3ffd6c4d623e7e1745059d </yocto-docs/commit/?id=da685fc5e69d49728e3ffd6c4d623e7e1745059d>`