release-notes-3.4.2.rst 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for 3.4.2 (honister)
  3. ----------------------------------
  4. Security Fixes in 3.4.2
  5. ~~~~~~~~~~~~~~~~~~~~~~~
  6. - tiff: backport fix for :cve:`2022-22844`
  7. - glibc : Fix :cve:`2021-3999`
  8. - glibc : Fix :cve:`2021-3998`
  9. - glibc : Fix :cve:`2022-23219`
  10. - glibc : Fix :cve:`2022-23218`
  11. - lighttpd: backport a fix for :cve:`2022-22707`
  12. - speex: fix :cve:`2020-23903`
  13. - linux-yocto/5.10: amdgpu: updates for :cve:`2021-42327`
  14. - libsndfile1: fix :cve:`2021-4156`
  15. - xserver-xorg: whitelist two CVEs
  16. - grub2: fix :cve:`2021-3981`
  17. - xserver-xorg: update :term:`CVE_PRODUCT`
  18. - binutils: :cve:`2021-42574`
  19. - gcc: Fix :cve:`2021-42574`
  20. - gcc: Fix :cve:`2021-35465`
  21. - cve-extra-exclusions: add db CVEs to exclusion list
  22. - gcc: Add :cve:`2021-37322` to the list of CVEs to ignore
  23. - bind: fix :cve:`2021-25219`
  24. - openssh: fix :cve:`2021-41617`
  25. - ncurses: fix :cve:`2021-39537`
  26. - vim: fix :cve:`2021-3968` and :cve:`2021-3973`
  27. - vim: fix :cve:`2021-3927` and :cve:`2021-3928`
  28. - gmp: fix :cve:`2021-43618`
  29. Fixes in 3.4.2
  30. ~~~~~~~~~~~~~~
  31. - build-appliance-image: Update to honister head revision
  32. - poky.conf: bump version for 3.4.2 release
  33. - libxml2: Backport python3-lxml workaround patch
  34. - core-image-sato-sdk: allocate more memory when in qemu
  35. - vim: upgrade to patch 4269
  36. - vim: update to include latest CVE fixes
  37. - expat: upgrade to 2.4.4
  38. - libusb1: correct :term:`SRC_URI`
  39. - yocto-check-layer: add debug output for the layers that were found
  40. - linux-firmware: Add CLM blob to linux-firmware-bcm4373 package
  41. - linux-yocto/5.10: update to v5.10.93
  42. - icu: fix make_icudata dependencies
  43. - sstate: Improve failure to obtain archive message/handling
  44. - insane.bbclass: Correct package_qa_check_empty_dirs()
  45. - sstate: A third fix for for touching files inside pseudo
  46. - kernel: introduce python3-dtschema-wrapper
  47. - vim: upgrade to 8.2 patch 3752
  48. - bootchart2: Add missing python3-math dependency
  49. - socat: update :term:`SRC_URI`
  50. - pigz: fix one failure of command "unpigz -l"
  51. - linux-yocto/5.14: update genericx86* machines to v5.14.21
  52. - linux-yocto/5.10: update genericx86* machines to v5.10.87
  53. - go: upgrade 1.16.10 -> 1.16.13
  54. - linux-yocto/5.10/cfg: add kcov feature fragment
  55. - linux-yocto/5.14: fix arm 32bit -rt warnings
  56. - oeqa/sstate: Fix allarch samesigs test
  57. - rootfs-postcommands.bbclass: Make two comments use the new variable syntax
  58. - cve-check: add lockfile to task
  59. - lib/oe/reproducible: correctly set .git location when recursively looking for git repos
  60. - epiphany: Update 40.3 -> 40.6
  61. - scripts/buildhistory-diff: drop use of distutils
  62. - scripts: Update to use exec_module() instead of load_module()
  63. - vulkan-loader: inherit pkgconfig
  64. - webkitgtk: Add reproducibility fix
  65. - openssl: Add reproducibility fix
  66. - rpm: remove tmp folder created during install
  67. - package_manager: ipk: Fix host manifest generation
  68. - bitbake: utils: Update to use exec_module() instead of load_module()
  69. - linux-yocto: add libmpc-native to :term:`DEPENDS`
  70. - ref-manual: fix patch documentation
  71. - bitbake: tests/fetch: Drop gnu urls from wget connectivity test
  72. - bitbake: fetch: npm: Use temporary file for empty user config
  73. - bitbake: fetch: npm: Quote destdir in run chmod command
  74. - bitbake: process: Do not mix stderr with stdout
  75. - xserver-xorg: upgrade 1.20.13 -> 1.20.14
  76. - python3-pyelftools: Depend on debugger, pprint
  77. - linux-firmware: upgrade 20211027 -> 20211216
  78. - oeqa/selftest/bbtests: Use YP sources mirror instead of GNU
  79. - systemd: Fix systemd-journal-gateway user/groups
  80. - license.bbclass: implement ast.NodeVisitor.visit_Constant
  81. - oe/license: implement ast.NodeVisitor.visit_Constant
  82. - packagedata.py: silence a DeprecationWarning
  83. - uboot-sign: fix the concatenation when multiple U-BOOT configurations are specified
  84. - runqemu: check the qemu PID has been set before kill()ing it
  85. - selftest/devtool: Check branch in git fetch
  86. - recipetool: Set master branch only as fallback
  87. - kern-tools: bug fixes and kgit-gconfig
  88. - linux-yocto-rt/5.10: update to -rt56
  89. - linux-yocto/5.14: update to v5.14.21
  90. - python3: upgrade 3.9.7 -> 3.9.9
  91. - bitbake: lib/pyinotify.py: Remove deprecated module asyncore
  92. - updates for recent releases
  93. - libdrm: upgrade 2.4.108 -> 2.4.109
  94. - patch.py: Initialize git repo before patching
  95. - boost: Fix build on arches with no atomics
  96. - boost: allow searching for python310
  97. - recipetool: extend curl detection when creating recipes
  98. - recipetool: handle GitLab URLs like we do GitHub
  99. - README.OE-Core.md: update URLs
  100. - libtool: change the default AR_FLAGS from "cru" to "cr"
  101. - libtool: Update patchset to match those submitted upstream
  102. - scripts/checklayer/common.py: Fixed a minor grammatical error
  103. - oeqa/parselogs: Fix quoting
  104. - oeqa/utils/dump: Fix typo
  105. - systemd: update 249.6 -> 249.7
  106. - glibc: Fix i586/c3 support
  107. - wic: support rootdev identified by partition label
  108. - buildhistory: Fix srcrevs output
  109. - classes/crate-fetch: Ensure crate fetcher is available
  110. - rootfs-postcommands: update systemd_create_users
  111. - classes/meson: Add optional rust definitions
  112. - rust-cross: Replace :term:`TARGET_ARCH` with :term:`TUNE_PKGARCH`
  113. - maintainers.inc: fix up rust-cross entry
  114. - rust-cross: Fix directory not deleted for race glibc vs. musl
  115. - wic: use shutil.which
  116. - bitbake: data_smart.py: Skip old override syntax checking for anonymous functions
  117. - documentation: conf.py: fix version of bitbake objects.inv
  118. - updates for release 3.3.4
  119. Contributors to 3.4.2
  120. ~~~~~~~~~~~~~~~~~~~~~
  121. - Alexander Kanavin
  122. - Alexandre Belloni
  123. - Anton Mikanovich
  124. - Anuj Mittal
  125. - Bruce Ashfield
  126. - Carlos Rafael Giani
  127. - Chaitanya Vadrevu
  128. - Changqing Li
  129. - Dhruva Gole
  130. - Florian Amstutz
  131. - Joshua Watt
  132. - Kai Kang
  133. - Khairul Rohaizzat Jamaluddin
  134. - Khem Raj
  135. - Konrad Weihmann
  136. - Kory Maincent
  137. - Li Wang
  138. - Marek Vasut
  139. - Markus Volk
  140. - Martin Jansa
  141. - Max Krummenacher
  142. - Michael Opdenacker
  143. - Mingli Yu
  144. - Oleksiy Obitotskyy
  145. - Pavel Zhukov
  146. - Peter Kjellerstedt
  147. - Pgowda
  148. - Quentin Schulz
  149. - Richard Purdie
  150. - Robert Yang
  151. - Ross Burton
  152. - Rudolf J Streif
  153. - Sakib Sajal
  154. - Samuli Piippo
  155. - Schmidt, Adriaan
  156. - Stefan Herbrechtsmeier
  157. - Steve Sakoman
  158. - Sundeep KOKKONDA
  159. - Teoh Jay Shen
  160. - Thomas Perrot
  161. - Tim Orling
  162. - Vyacheslav Yurkov
  163. - Yongxin Liu
  164. - pgowda
  165. - Wang Mingyu
  166. Repositories / Downloads for 3.4.2
  167. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  168. poky
  169. - Repository Location: :yocto_git:`/poky`
  170. - Branch: :yocto_git:`honister </poky/log/?h=honister>`
  171. - Tag: :yocto_git:`yocto-3.4.2 </poky/tag/?h=yocto-3.4.2>`
  172. - Git Revision: :yocto_git:`e0ab08bb6a32916b457d221021e7f402ffa36b1a </poky/commit/?id=e0ab08bb6a32916b457d221021e7f402ffa36b1a>`
  173. - Release Artefact: poky-e0ab08bb6a32916b457d221021e7f402ffa36b1a
  174. - sha: 8580dc5067ee426fe347a0d0f7a74c29ba539120bbe8438332339a9c8bce00fd
  175. - Download Locations:
  176. http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/poky-e0ab08bb6a32916b457d221021e7f402ffa36b1a.tar.bz2,
  177. http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/poky-e0ab08bb6a32916b457d221021e7f402ffa36b1a.tar.bz2
  178. openembedded-core
  179. - Repository Location: :oe_git:`/openembedded-core`
  180. - Branch: :oe_git:`honister </openembedded-core/log/?h=honister>`
  181. - Tag: :oe_git:`yocto-3.4.2 </openembedded-core/tag/?h=yocto-3.4.2>`
  182. - Git Revision: :oe_git:`418a9c4c31615a9e3e011fc2b21fb7154bc6c93a </openembedded-core/commit/?id=418a9c4c31615a9e3e011fc2b21fb7154bc6c93a>`
  183. - Release Artefact: oecore-418a9c4c31615a9e3e011fc2b21fb7154bc6c93a
  184. - sha: f2ca94a5a7ec669d4c208d1729930dfc1b917846dbb2393d01d6d5856fcbc6de
  185. - Download Locations:
  186. http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/oecore-418a9c4c31615a9e3e011fc2b21fb7154bc6c93a.tar.bz2,
  187. http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/oecore-418a9c4c31615a9e3e011fc2b21fb7154bc6c93a.tar.bz2
  188. meta-mingw
  189. - Repository Location: :yocto_git:`meta-mingw`
  190. - Branch: :yocto_git:`honister </meta-mingw/log/?h=honister>`
  191. - Tag: :yocto_git:`yocto-3.4.2 </meta-mingw/tag/?h=yocto-3.4.2>`
  192. - Git Revision: :yocto_git:`f5d761cbd5c957e4405c5d40b0c236d263c916a8 </meta-mingw/commit/?id=f5d761cbd5c957e4405c5d40b0c236d263c916a8>`
  193. - Release Artefact: meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8
  194. - sha: d4305d638ef80948584526c8ca386a8cf77933dffb8a3b8da98d26a5c40fcc11
  195. - Download Locations:
  196. http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2,
  197. http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2
  198. meta-gplv2
  199. - Repository Location: :yocto_git:`/meta-gplv2`
  200. - Branch: :yocto_git:`honister </meta-gplv2/log/?h=honister>`
  201. - Tag: :yocto_git:`yocto-3.4.2 </meta-gplv2/tag/?h=yocto-3.4.2>`
  202. - Git Revision: :yocto_git:`f04e4369bf9dd3385165281b9fa2ed1043b0e400 </meta-gplv2/commit/?id=f04e4369bf9dd3385165281b9fa2ed1043b0e400>`
  203. - Release Artefact: meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400
  204. - sha: ef8e2b1ec1fb43dbee4ff6990ac736315c7bc2d8c8e79249e1d337558657d3fe
  205. - Download Locations:
  206. http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2,
  207. http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2
  208. bitbake
  209. - Repository Location: :oe_git:`/bitbake`
  210. - Branch: :oe_git:`1.52 </bitbake/log/?h=1.52>`
  211. - Tag: :oe_git:`yocto-3.4.2 </bitbake/tag/?h=yocto-3.4.2>`
  212. - Git Revision: :oe_git:`c039182c79e2ccc54fff5d7f4f266340014ca6e0 </bitbake/commit/?id=c039182c79e2ccc54fff5d7f4f266340014ca6e0>`
  213. - Release Artefact: bitbake-c039182c79e2ccc54fff5d7f4f266340014ca6e0
  214. - sha: bd80297f8d8aa40cbcc8a3d4e23a5223454b305350adf34cd29b5fb65c1b4c52
  215. - Download Locations:
  216. http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/bitbake-c039182c79e2ccc54fff5d7f4f266340014ca6e0.tar.bz2,
  217. http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/bitbake-c039182c79e2ccc54fff5d7f4f266340014ca6e0.tar.bz2
  218. yocto-docs
  219. - Repository Location: :yocto_git:`/yocto-docs`
  220. - Branch: :yocto_git:`honister </yocto-docs/log/?h=honister>`
  221. - Tag: :yocto_git:`yocto-3.4.2 </yocto-docs/tag/?h=yocto-3.4.2>`
  222. - Git Revision: :yocto_git:`3061d3d62054a5c3b9e16bfce4bcd186fa7a23d2` </yocto-docs/commit/?3061d3d62054a5c3b9e16bfce4bcd186fa7a23d2>`