release-notes-4.0.18.rst 8.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.0.18 (Kirkstone)
  3. ------------------------------------------
  4. Security Fixes in Yocto-4.0.18
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - curl: Fix :cve_nist:`2024-2398`
  7. - expat: fix :cve_nist:`2023-52426` and :cve_nist:`2024-28757`
  8. - libssh2: fix :cve_nist:`2023-48795`
  9. - ncurses: Fix :cve_nist:`2023-50495`
  10. - nghttp2: Fix :cve_nist:`2024-28182` and :cve_nist:`2023-44487`
  11. - openssh: Ignore :cve_nist:`2023-51767`
  12. - openssl: Fix :cve_nist:`2024-2511`
  13. - perl: Ignore :cve_nist:`2023-47100`
  14. - python3-cryptography: Fix :cve_nist:`2024-26130`
  15. - python3-urllib3: Fix :cve_nist:`2023-45803`
  16. - qemu: Fix :cve_nist:`2023-6683`
  17. - ruby: fix :cve_mitre:`2024-27281`
  18. - rust: Ignore :cve_nist:`2024-24576`
  19. - tiff: Fix :cve_nist:`2023-52356` and :cve_nist:`2023-6277`
  20. - xserver-xorg: Fix :cve_nist:`2024-31080` and :cve_nist:`2024-31081`
  21. - xwayland: Fix :cve_nist:`2023-6816`, :cve_nist:`2024-0408` and :cve_nist:`2024-0409`
  22. Fixes in Yocto-4.0.18
  23. ~~~~~~~~~~~~~~~~~~~~~
  24. - build-appliance-image: Update to kirkstone head revision
  25. - common-licenses: backport LGPL-3.0-with-zeromq-exception license
  26. - contributor-guide: add notes for tests
  27. - contributor-guide: be more specific about meta-* trees
  28. - cups: fix typo in :cve_nist:`2023-32360` backport patch
  29. - cve-update-nvd2-native: Add an age threshold for incremental update
  30. - cve-update-nvd2-native: Fix CVE configuration update
  31. - cve-update-nvd2-native: Fix typo in comment
  32. - cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
  33. - cve-update-nvd2-native: Remove rejected CVE from database
  34. - cve-update-nvd2-native: nvd_request_next: Improve comment
  35. - dev-manual: improve descriptions of 'bitbake -S printdiff'
  36. - dev-manual: packages: fix capitalization
  37. - docs: conf.py: properly escape backslashes for latex_elements
  38. - gcc: Backport sanitizer fix for 32-bit ALSR
  39. - glibc: Fix subscript typos for get_nscd_addresses
  40. - kernel-dev: join mkdir commands with -p
  41. - linux-firmware: Upgrade to 20240220
  42. - manuals: add initial sphinx-lint support
  43. - manuals: add initial stylechecks with Vale
  44. - manuals: document VIRTUAL-RUNTIME variables
  45. - manuals: fix duplicate "stylecheck" target
  46. - manuals: fix incorrect double backticks
  47. - manuals: fix trailing spaces
  48. - manuals: refer to new yocto-patches mailing list wherever appropriate
  49. - manuals: remove tab characters
  50. - manuals: replace hyphens with em dashes
  51. - manuals: use "manual page(s)"
  52. - migration-guides: add release notes for 4.0.17
  53. - poky.conf: bump version for 4.0.18
  54. - profile-manual: usage.rst: fix reference to bug report
  55. - profile-manual: usage.rst: formatting fixes
  56. - profile-manual: usage.rst: further style improvements
  57. - python3-urllib3: Upgrade to v1.26.18
  58. - ref-manual: add documentation of the variable :term:`SPDX_NAMESPACE_PREFIX`
  59. - ref-manual: tasks: do_cleanall: recommend using '-f' instead
  60. - ref-manual: tasks: do_cleansstate: recommend using '-f' instead for a shared sstate
  61. - ref-manual: variables: adding multiple groups in :term:`GROUPADD_PARAM`
  62. - ref-manual: variables: correct sdk installation default path
  63. - stress-ng: avoid calling sync during do_compile
  64. - systemd: Fix vlan qos mapping
  65. - tcl: Add a way to skip ptests
  66. - tcl: skip async and event tests in run-ptest
  67. - tcl: skip timing-dependent tests in run-ptest
  68. - valgrind: skip intermittently failing ptest
  69. - wireless-regdb: Upgrade to 2024.01.23
  70. - yocto-uninative: Update to 4.4 for glibc 2.39
  71. Known Issues in Yocto-4.0.18
  72. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  73. - N/A
  74. Contributors to Yocto-4.0.18
  75. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  76. - Alex Kiernan
  77. - Alex Stewart
  78. - Alexander Kanavin
  79. - BELOUARGA Mohamed
  80. - Claus Stovgaard
  81. - Colin McAllister
  82. - Geoff Parker
  83. - Haitao Liu
  84. - Harish Sadineni
  85. - Johan Bezem
  86. - Jonathan GUILLOT
  87. - Jörg Sommer
  88. - Khem Raj
  89. - Lee Chee Yang
  90. - Luca Ceresoli
  91. - Martin Jansa
  92. - Meenali Gupta
  93. - Michael Halstead
  94. - Michael Opdenacker
  95. - Peter Marko
  96. - Quentin Schulz
  97. - Ross Burton
  98. - Sana Kazi
  99. - Simone Weiß
  100. - Soumya Sambu
  101. - Steve Sakoman
  102. - Tan Wen Yan
  103. - Vijay Anusuri
  104. - Wang Mingyu
  105. - Yoann Congal
  106. - Yogita Urade
  107. - Zahir Hussain
  108. Repositories / Downloads for Yocto-4.0.18
  109. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  110. poky
  111. - Repository Location: :yocto_git:`/poky`
  112. - Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
  113. - Tag: :yocto_git:`yocto-4.0.18 </poky/log/?h=yocto-4.0.18>`
  114. - Git Revision: :yocto_git:`31751bba1c789f15f574773a659b8017d7bcf440 </poky/commit/?id=31751bba1c789f15f574773a659b8017d7bcf440>`
  115. - Release Artefact: poky-31751bba1c789f15f574773a659b8017d7bcf440
  116. - sha: 72d5aa65c3c37766ebc24b212740272c1d52342468548f9c070241d3522ad2ca
  117. - Download Locations:
  118. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/poky-31751bba1c789f15f574773a659b8017d7bcf440.tar.bz2
  119. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/poky-31751bba1c789f15f574773a659b8017d7bcf440.tar.bz2
  120. openembedded-core
  121. - Repository Location: :oe_git:`/openembedded-core`
  122. - Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
  123. - Tag: :oe_git:`yocto-4.0.18 </openembedded-core/log/?h=yocto-4.0.18>`
  124. - Git Revision: :oe_git:`b7182571242dc4e23e5250a449d90348e62a6abc </openembedded-core/commit/?id=b7182571242dc4e23e5250a449d90348e62a6abc>`
  125. - Release Artefact: oecore-b7182571242dc4e23e5250a449d90348e62a6abc
  126. - sha: 6f257e50c10ebae673dcf61a833b3270db6d22781f02f6794a370aac839f1020
  127. - Download Locations:
  128. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/oecore-b7182571242dc4e23e5250a449d90348e62a6abc.tar.bz2
  129. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/oecore-b7182571242dc4e23e5250a449d90348e62a6abc.tar.bz2
  130. meta-mingw
  131. - Repository Location: :yocto_git:`/meta-mingw`
  132. - Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
  133. - Tag: :yocto_git:`yocto-4.0.18 </meta-mingw/log/?h=yocto-4.0.18>`
  134. - Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>`
  135. - Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7
  136. - sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25
  137. - Download Locations:
  138. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
  139. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
  140. meta-gplv2
  141. - Repository Location: :yocto_git:`/meta-gplv2`
  142. - Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
  143. - Tag: :yocto_git:`yocto-4.0.18 </meta-gplv2/log/?h=yocto-4.0.18>`
  144. - Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
  145. - Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
  146. - sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
  147. - Download Locations:
  148. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  149. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  150. bitbake
  151. - Repository Location: :oe_git:`/bitbake`
  152. - Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
  153. - Tag: :oe_git:`yocto-4.0.18 </bitbake/log/?h=yocto-4.0.18>`
  154. - Git Revision: :oe_git:`40fd5f4eef7460ca67f32cfce8e229e67e1ff607 </bitbake/commit/?id=40fd5f4eef7460ca67f32cfce8e229e67e1ff607>`
  155. - Release Artefact: bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607
  156. - sha: 5d20a0e4c5d0fce44bd84778168714a261a30a4b83f67c88df3b8a7e7115e444
  157. - Download Locations:
  158. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607.tar.bz2
  159. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607.tar.bz2
  160. yocto-docs
  161. - Repository Location: :yocto_git:`/yocto-docs`
  162. - Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
  163. - Tag: :yocto_git:`yocto-4.0.18 </yocto-docs/log/?h=yocto-4.0.18>`
  164. - Git Revision: :yocto_git:`fd1423141e7458ba557db465c171b0b4e9063987 </yocto-docs/commit/?id=fd1423141e7458ba557db465c171b0b4e9063987>`