release-notes-4.0.1.rst 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for 4.0.1 (kirkstone)
  3. -----------------------------------
  4. Security Fixes in 4.0.1
  5. ~~~~~~~~~~~~~~~~~~~~~~~
  6. - linux-yocto/5.15: fix :cve:`2022-28796`
  7. - python3: ignore :cve:`2015-20107`
  8. - e2fsprogs: fix :cve:`2022-1304`
  9. - lua: fix :cve:`2022-28805`
  10. - busybox: fix :cve:`2022-28391`
  11. Fixes in 4.0.1
  12. ~~~~~~~~~~~~~~
  13. - abi_version/sstate: Bump hashequiv and sstate versions due to git changes
  14. - apt: add apt selftest to test signed package feeds
  15. - apt: upgrade 2.4.4 -> 2.4.5
  16. - arch-armv8-2a.inc: fix a typo in TUNEVALID variable
  17. - babeltrace: Disable warnings as errors
  18. - base: Avoid circular references to our own scripts
  19. - base: Drop git intercept
  20. - build-appliance-image: Update to kirkstone head revision
  21. - build-appliance: Switch to kirkstone branch
  22. - buildtools-tarball: Only add cert envvars if certs are included
  23. - busybox: Use base_bindir instead of hardcoding /bin path
  24. - cases/buildepoxy.py: fix typo
  25. - create-spdx: delete virtual/kernel dependency to fix FreeRTOS build
  26. - create-spdx: fix error when symlink cannot be created
  27. - cve-check: add JSON format to summary output
  28. - cve-check: fix symlinks where link and output path are equal
  29. - cve-check: no need to depend on the fetch task
  30. - cve-update-db-native: let the user to drive the update interval
  31. - cve-update-db-native: update the CVE database once a day only
  32. - cve_check: skip remote patches that haven't been fetched when searching for CVE tags
  33. - dev-manual: add command used to add the signed-off-by line.
  34. - devshell.bbclass: Allow devshell & pydevshell to use the network
  35. - docs: conf.py: fix cve extlinks caption for sphinx <4.0
  36. - docs: migration-guides: migration-3.4: mention that hardcoded password are supported if hashed
  37. - docs: migration-guides: release-notes-4.0: fix risc-v typo
  38. - docs: migration-guides: release-notes-4.0: replace kernel placeholder with correct recipe name
  39. - docs: ref-manual: variables: add hashed password example in :term:`EXTRA_USERS_PARAMS`
  40. - docs: set_versions.py: add information about obsolescence of a release
  41. - docs: set_versions.py: fix latest release of a branch being shown twice in switchers.js
  42. - docs: set_versions.py: fix latest version of an active release shown as obsolete
  43. - docs: set_versions.py: mark as obsolete only branches and old tags from obsolete releases
  44. - docs: sphinx-static: switchers.js.in: do not mark branches as outdated
  45. - docs: sphinx-static: switchers.js.in: fix broken switcher for branches
  46. - docs: sphinx-static: switchers.js.in: improve obsolete version detection
  47. - docs: sphinx-static: switchers.js.in: remove duplicate for outdated versions
  48. - docs: sphinx-static: switchers.js.in: rename all_versions to switcher_versions
  49. - docs: update Bitbake objects.inv location for master branch
  50. - documentation/brief-yoctoprojectqs: add directory for local.conf
  51. - gcompat: Fix build when usrmerge distro feature is enabled
  52. - git: correct license
  53. - git: upgrade 2.35.2 -> 2.35.3
  54. - glib: upgrade 2.72.0 -> 2.72.1
  55. - glibc: ptest: Fix glibc-tests package issue
  56. - gnupg: Disable FORTIFY_SOURCES on mips
  57. - go.bbclass: disable the use of the default configuration file
  58. - gstreamer1.0-plugins-bad: drop patch
  59. - gstreamer1.0-plugins-good: Fix libsoup dependency
  60. - gstreamer1.0: Minor documentation addition
  61. - install/devshell: Introduce git intercept script due to fakeroot issues
  62. - kernel-yocto.bbclass: Fixup do_kernel_configcheck usage of KMETA
  63. - libc-glibc: Use libxcrypt to provide virtual/crypt
  64. - libgit2: upgrade 1.4.2 -> 1.4.3
  65. - libsoup: upgrade 3.0.5 -> 3.0.6
  66. - libusb1: upgrade 1.0.25 -> 1.0.26
  67. - linux-firmware: correct license for ar3k firmware
  68. - linux-firmware: upgrade 20220310 -> 20220411
  69. - linux-yocto/5.10: base: enable kernel crypto userspace API
  70. - linux-yocto/5.10: update to v5.10.112
  71. - linux-yocto/5.15: arm: poky-tiny cleanup and fixes
  72. - linux-yocto/5.15: base: enable kernel crypto userspace API
  73. - linux-yocto/5.15: fix -standard kernel build issue
  74. - linux-yocto/5.15: fix ppc boot
  75. - linux-yocto/5.15: fix qemuarm graphical boot
  76. - linux-yocto/5.15: kasan: fix BUG: sleeping function called from invalid context
  77. - linux-yocto/5.15: netfilter: conntrack: avoid useless indirection during conntrack destruction
  78. - linux-yocto/5.15: update to v5.15.36
  79. - linux-yocto: enable powerpc-debug fragment
  80. - mdadm: Drop clang specific cflags
  81. - migration-3.4: add missing entry on :term:`EXTRA_USERS_PARAMS`
  82. - migration-guides: add release notes for 4.0
  83. - migration-guides: complete migration guide for 4.0
  84. - migration-guides: release-notes-4.0: mention LTS release
  85. - migration-guides: release-notes-4.0: update 'Repositories / Downloads' section
  86. - migration-guides: stop including documents with ".. include"
  87. - musl: Fix build when usrmerge distro feature is enabled
  88. - ncurses: use COPYING file
  89. - neard: Switch :term:`SRC_URI` to git repo
  90. - oeqa/selftest: add test for git working correctly inside pseudo
  91. - openssl: minor security upgrade 3.0.2 -> 3.0.3
  92. - package.bbclass: Prevent perform_packagecopy from removing /sysroot-only
  93. - package: Ensure we track whether PRSERV was active or not
  94. - package_manager: fix missing dependency on gnupg when signing deb package feeds
  95. - poky-tiny: enable qemuarmv5/qemuarm64 and cleanups
  96. - poky.conf: bump version for 4.0.1 release
  97. - qemu.bbclass: Extend ppc/ppc64 extra options
  98. - qemuarm64: use virtio pci interfaces
  99. - qemuarmv5: use arm-versatile-926ejs :term:`KMACHINE`
  100. - ref-manual: Add :term:`XZ_THREADS` and :term:`XZ_MEMLIMIT`
  101. - ref-manual: add :term:`KERNEL_DEBUG_TIMESTAMPS`
  102. - ref-manual: add :term:`ZSTD_THREADS`
  103. - ref-manual: add a note about hard-coded passwords
  104. - ref-manual: add empty-dirs QA check and QA_EMPTY_DIRS*
  105. - ref-manual: add mention of vendor filtering to :term:`CVE_PRODUCT`
  106. - ref-manual: mention wildcarding support in :term:`INCOMPATIBLE_LICENSE`
  107. - releases: update for yocto 4.0
  108. - rootfs-postcommands: fix symlinks where link and output path are equal
  109. - ruby: upgrade 3.1.1 -> 3.1.2
  110. - sanity: skip make 4.2.1 warning for debian
  111. - scripts/git: Ensure we don't have circular references
  112. - scripts: Make git intercept global
  113. - seatd: Disable overflow warning as error on ppc64/musl
  114. - selftest/lic_checksum: Add test for filename containing space
  115. - set_versions: update for 4.0 release
  116. - staging: Ensure we filter out ourselves
  117. - strace: fix ptest failure in landlock
  118. - subversion: upgrade to 1.14.2
  119. - systemd-boot: remove outdated EFI_LD comment
  120. - systemtap: Fix build with gcc-12
  121. - terminal.py: Restore error output from Terminal
  122. - u-boot: Correct the :term:`SRC_URI`
  123. - u-boot: Inherit pkgconfig
  124. - update_udev_hwdb: fix multilib issue with systemd
  125. - util-linux: Create u-a symlink for findfs utility
  126. - virgl: skip headless test on alma 8.6
  127. - webkitgtk: adjust patch status
  128. - wic: do not use PARTLABEL for msdos partition tables
  129. - wireless-regdb: upgrade 2022.02.18 -> 2022.04.08
  130. - xserver-xorg: Fix build with gcc12
  131. - yocto-bsps: update to v5.15.36
  132. Contributors to 4.0.1
  133. ~~~~~~~~~~~~~~~~~~~~~
  134. - Abongwa Amahnui Bonalais
  135. - Alexander Kanavin
  136. - Bruce Ashfield
  137. - Carlos Rafael Giani
  138. - Chen Qi
  139. - Davide Gardenal
  140. - Dmitry Baryshkov
  141. - Ferry Toth
  142. - Henning Schild
  143. - Jon Mason
  144. - Justin Bronder
  145. - Kai Kang
  146. - Khem Raj
  147. - Konrad Weihmann
  148. - Lee Chee Yang
  149. - Marta Rybczynska
  150. - Martin Jansa
  151. - Matt Madison
  152. - Michael Halstead
  153. - Michael Opdenacker
  154. - Naveen Saini
  155. - Nicolas Dechesne
  156. - Paul Eggleton
  157. - Paul Gortmaker
  158. - Paulo Neves
  159. - Peter Kjellerstedt
  160. - Peter Marko
  161. - Pgowda
  162. - Portia
  163. - Quentin Schulz
  164. - Rahul Kumar
  165. - Richard Purdie
  166. - Robert Joslyn
  167. - Robert Yang
  168. - Roland Hieber
  169. - Ross Burton
  170. - Russ Dill
  171. - Steve Sakoman
  172. - Wang Mingyu
  173. - Zheng Ruoqin
  174. Repositories / Downloads for 4.0.1
  175. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  176. poky
  177. - Repository Location: :yocto_git:`/poky`
  178. - Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
  179. - Tag: :yocto_git:`yocto-4.0.1 </poky/tag/?h=yocto-4.0.1>`
  180. - Git Revision: :yocto_git:`8c489602f218bcf21de0d3c9f8cf620ea5f06430 </poky/commit/?id=8c489602f218bcf21de0d3c9f8cf620ea5f06430>`
  181. - Release Artefact: poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430
  182. - sha: 65c545a316bd8efb13ae1358eeccc8953543be908008103b51f7f90aed960d00
  183. - Download Locations:
  184. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430.tar.bz2,
  185. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430.tar.bz2
  186. openembedded-core
  187. - Repository Location: :oe_git:`/openembedded-core`
  188. - Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
  189. - Tag: :oe_git:`yocto-4.0.1 </openembedded-core/tag/?h=yocto-4.0>`
  190. - Git Revision: :oe_git:`cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee </openembedded-core/commit/?id=cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee>`
  191. - Release Artefact: oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee
  192. - sha: 43981b8fad82f601618a133dffbec839524f0d0a055efc3d8f808cbfd811ab17
  193. - Download Locations:
  194. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee.tar.bz2,
  195. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee.tar.bz2
  196. meta-mingw
  197. - Repository Location: :yocto_git:`/meta-mingw`
  198. - Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
  199. - Tag: :yocto_git:`yocto-4.0.1 </meta-mingw/tag/?h=yocto-4.0.1>`
  200. - Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
  201. - Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
  202. - sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
  203. - Download Locations:
  204. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
  205. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
  206. meta-gplv2
  207. - Repository Location: :yocto_git:`/meta-gplv2`
  208. - Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
  209. - Tag: :yocto_git:`yocto-4.0.1 </meta-gplv2/tag/?h=yocto-4.0.1>`
  210. - Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-mingw/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
  211. - Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
  212. - sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
  213. - Download Locations:
  214. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  215. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  216. bitbake
  217. - Repository Location: :oe_git:`/bitbake`
  218. - Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
  219. - Tag: :oe_git:`yocto-4.0 </bitbake/tag/?h=yocto-4.0>`
  220. - Git Revision: :oe_git:`59c16ae6c55c607c56efd2287537a1b97ba2bf52 </bitbake/commit/?id=59c16ae6c55c607c56efd2287537a1b97ba2bf52>`
  221. - Release Artefact: bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52
  222. - sha: 3ae466c31f738fc45c3d7c6f665952d59f01697f2667ea42f0544d4298dd6ef0
  223. - Download Locations:
  224. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52.tar.bz2,
  225. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52.tar.bz2
  226. yocto-docs
  227. - Repository Location: :yocto_git:`/yocto-docs`
  228. - Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
  229. - Tag: :yocto_git:`yocto-4.0.1 </yocto-docs/tag/?h=yocto-4.0>`
  230. - Git Revision: :yocto_git:`4ec9df3336a425719a9a35532504731ce56984ca </yocto-docs/commit/?id=4ec9df3336a425719a9a35532504731ce56984ca>`