release-notes-4.0.21.rst 9.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.0.21 (Kirkstone)
  3. ------------------------------------------
  4. Security Fixes in Yocto-4.0.21
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - bind: Fix :cve_nist:`2024-4076`, :cve_nist:`2024-1737`, :cve_nist:`2024-0760` and :cve_nist:`2024-1975`
  7. - apr: Fix :cve_nist:`2023-49582`
  8. - busybox: Fix :cve_nist:`2023-42363`, :cve_nist:`2023-42364`, :cve_nist:`2023-42365`, :cve_nist:`2023-42366` and :cve_nist:`2021-42380`
  9. - curl: Ignore :cve_nist:`2024-32928`
  10. - curl: Fix :cve_nist:`2024-7264`
  11. - ghostscript: Fix :cve_nist:`2024-29506`, :cve_nist:`2024-29509` and :cve_nist:`2024-29511`
  12. - go: Fix :cve_nist:`2024-24789` and :cve_nist:`2024-24791`
  13. - gtk+3: Fix :cve_nist:`2024-6655`
  14. - libarchive: Ignore :cve_nist:`2024-37407`
  15. - libyaml: Ignore :cve_nist:`2024-35325`, :cve_nist:`2024-35326` and :cve_nist:`2024-35328`
  16. - linux-yocto/5.15: Fix :cve_nist:`2022-48772`, :cve_nist:`2024-35972`, :cve_nist:`2024-35984`, :cve_nist:`2024-35990`, :cve_nist:`2024-35997`, :cve_nist:`2024-36008`, :cve_nist:`2024-36270`, :cve_nist:`2024-36489`, :cve_nist:`2024-36897`, :cve_nist:`2024-36938`, :cve_nist:`2024-36965`, :cve_nist:`2024-36967`, :cve_nist:`2024-36969`, :cve_nist:`2024-36971`, :cve_nist:`2024-36978`, :cve_nist:`2024-38546`, :cve_nist:`2024-38547`, :cve_nist:`2024-38549`, :cve_nist:`2024-38552`, :cve_nist:`2024-38555`, :cve_nist:`2024-38571`, :cve_nist:`2024-38583`, :cve_nist:`2024-38591`, :cve_nist:`2024-38597`, :cve_nist:`2024-38598`, :cve_nist:`2024-38600`, :cve_nist:`2024-38627`, :cve_nist:`2024-38633`, :cve_nist:`2024-38661`, :cve_nist:`2024-38662`, :cve_nist:`2024-38780`, :cve_nist:`2024-39277`, :cve_nist:`2024-39292`, :cve_nist:`2024-39301`, :cve_nist:`2024-39466`, :cve_nist:`2024-39468`, :cve_nist:`2024-39471`, :cve_nist:`2024-39475`, :cve_nist:`2024-39476`, :cve_nist:`2024-39480`, :cve_nist:`2024-39482`, :cve_nist:`2024-39484`, :cve_nist:`2024-39487`, :cve_nist:`2024-39489`, :cve_nist:`2024-39493`, :cve_nist:`2024-39495`, :cve_nist:`2024-39506`, :cve_nist:`2024-40902`, :cve_nist:`2024-40911`, :cve_nist:`2024-40912`, :cve_nist:`2024-40932`, :cve_nist:`2024-40934`, :cve_nist:`2024-40954`, :cve_nist:`2024-40956`, :cve_nist:`2024-40957`, :cve_nist:`2024-40958`, :cve_nist:`2024-40959`, :cve_nist:`2024-40960`, :cve_nist:`2024-40961`, :cve_nist:`2024-40967`, :cve_nist:`2024-40970`, :cve_nist:`2024-40980`, :cve_nist:`2024-40981`, :cve_nist:`2024-40994`, :cve_nist:`2024-40995`, :cve_nist:`2024-41000`, :cve_nist:`2024-41002`, :cve_nist:`2024-41006`, :cve_nist:`2024-41007`, :cve_nist:`2024-41046`, :cve_nist:`2024-41049`, :cve_nist:`2024-41055`, :cve_nist:`2024-41064`, :cve_nist:`2024-41070`, :cve_nist:`2024-41073`, :cve_nist:`2024-41087`, :cve_nist:`2024-41089`, :cve_nist:`2024-41092`, :cve_nist:`2024-41093`, :cve_nist:`2024-41095`, :cve_nist:`2024-41097`, :cve_nist:`2024-42068`, :cve_nist:`2024-42070`, :cve_nist:`2024-42076`, :cve_nist:`2024-42077`, :cve_nist:`2024-42080`, :cve_nist:`2024-42082`, :cve_nist:`2024-42085`, :cve_nist:`2024-42090`, :cve_nist:`2024-42093`, :cve_nist:`2024-42094`, :cve_nist:`2024-42101`, :cve_nist:`2024-42102`, :cve_nist:`2024-42104`, :cve_nist:`2024-42109`, :cve_nist:`2024-42140`, :cve_nist:`2024-42148`, :cve_nist:`2024-42152`, :cve_nist:`2024-42153`, :cve_nist:`2024-42154`, :cve_nist:`2024-42157`, :cve_nist:`2024-42161`, :cve_nist:`2024-42223`, :cve_nist:`2024-42224`, :cve_nist:`2024-42225`, :cve_nist:`2024-42229`, :cve_nist:`2024-42232`, :cve_nist:`2024-42236`, :cve_nist:`2024-42244` and :cve_nist:`2024-42247`
  17. - llvm: Fix :cve_nist:`2023-46049` and :cve_nist:`2024-31852`
  18. - ofono: fix :cve_nist:`2023-2794`
  19. - orc: Fix :cve_nist:`2024-40897`
  20. - python3-certifi: Fix :cve_nist:`2024-39689`
  21. - python3-jinja2: Fix :cve_nist:`2024-34064`
  22. - python3: Fix :cve_nist:`2024-8088`
  23. - qemu: Fix :cve_nist:`2024-7409`
  24. - ruby: Fix for :cve_nist:`2024-27282`
  25. - tiff: Fix :cve_nist:`2024-7006`
  26. - vim: Fix :cve_nist:`2024-22667`, :cve_nist:`2024-41957`, :cve_nist:`2024-41965` and :cve_nist:`2024-43374`
  27. - wpa-supplicant: Fix :cve_nist:`2023-52160`
  28. Fixes in Yocto-4.0.21
  29. ~~~~~~~~~~~~~~~~~~~~~
  30. - apr: upgrade to 1.7.5
  31. - bind: Upgrade to 9.18.28
  32. - bitbake: data_smart: Improve performance for VariableHistory
  33. - build-appliance-image: Update to kirkstone head revision
  34. - cryptodev-module: Fix build for linux 5.10.220
  35. - gcc-runtime: remove bashism
  36. - grub: fs/fat: Don't error when mtime is 0
  37. - image_types.bbclass: Use --force also with lz4,lzop
  38. - libsoup: fix compile error on centos7
  39. - linux-yocto/5.15: upgrade to v5.15.164
  40. - lttng-modules: Upgrade to 2.13.14
  41. - migration-guide: add release notes for 4.0.20
  42. - orc: upgrade to 0.4.39
  43. - poky.conf: bump version for 4.0.21
  44. - python3-jinja2: upgrade to 3.1.4
  45. - python3-pycryptodome(x): use python_setuptools_build_meta build class
  46. - python3: add PACKAGECONFIG[editline]
  47. - ref-manual: fix typo and move :term:`SYSROOT_DIRS` example
  48. - sqlite3: CVE_ID correction for :cve_nist:`2023-7104` as patched
  49. - sqlite3: Rename patch for :cve_nist:`2022-35737`
  50. - uboot-sign: Fix index error in concat_dtb_helper() with multiple configs
  51. - vim: upgrade to 9.1.0682
  52. - wireless-regdb: upgrade to 2024.07.04
  53. Known Issues in Yocto-4.0.21
  54. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  55. - N/A
  56. Contributors to Yocto-4.0.21
  57. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  58. - Archana Polampalli
  59. - Ashish Sharma
  60. - Bruce Ashfield
  61. - Deepthi Hemraj
  62. - Divya Chellam
  63. - Florian Amstutz
  64. - Guocai He
  65. - Hitendra Prajapati
  66. - Hugo SIMELIERE
  67. - Lee Chee Yang
  68. - Leon Anavi
  69. - Matthias Pritschet
  70. - Ming Liu
  71. - Niko Mauno
  72. - Peter Marko
  73. - Robert Yang
  74. - Rohini Sangam
  75. - Ross Burton
  76. - Siddharth Doshi
  77. - Soumya Sambu
  78. - Steve Sakoman
  79. - Vijay Anusuri
  80. - Vrushti Dabhi
  81. - Wang Mingyu
  82. - Yogita Urade
  83. Repositories / Downloads for Yocto-4.0.21
  84. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  85. poky
  86. - Repository Location: :yocto_git:`/poky`
  87. - Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
  88. - Tag: :yocto_git:`yocto-4.0.21 </poky/log/?h=yocto-4.0.21>`
  89. - Git Revision: :yocto_git:`4cdc553814640851cce85f84ee9c0b58646cd33b </poky/commit/?id=4cdc553814640851cce85f84ee9c0b58646cd33b>`
  90. - Release Artefact: poky-4cdc553814640851cce85f84ee9c0b58646cd33b
  91. - sha: 460e3a4ede491a9b66c5d262cd9498d5bcca1f2d880885342b08dc32b967f33d
  92. - Download Locations:
  93. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/poky-4cdc553814640851cce85f84ee9c0b58646cd33b.tar.bz2
  94. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/poky-4cdc553814640851cce85f84ee9c0b58646cd33b.tar.bz2
  95. openembedded-core
  96. - Repository Location: :oe_git:`/openembedded-core`
  97. - Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
  98. - Tag: :oe_git:`yocto-4.0.21 </openembedded-core/log/?h=yocto-4.0.21>`
  99. - Git Revision: :oe_git:`c40a3fec49942ac6d25ba33e57e801a550e252c9 </openembedded-core/commit/?id=c40a3fec49942ac6d25ba33e57e801a550e252c9>`
  100. - Release Artefact: oecore-c40a3fec49942ac6d25ba33e57e801a550e252c9
  101. - sha: afc2aaf312f9fb2590ae006615557ec605c98eff42bc380a1b2d6e39cfdf8930
  102. - Download Locations:
  103. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/oecore-c40a3fec49942ac6d25ba33e57e801a550e252c9.tar.bz2
  104. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/oecore-c40a3fec49942ac6d25ba33e57e801a550e252c9.tar.bz2
  105. meta-mingw
  106. - Repository Location: :yocto_git:`/meta-mingw`
  107. - Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
  108. - Tag: :yocto_git:`yocto-4.0.21 </meta-mingw/log/?h=yocto-4.0.21>`
  109. - Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>`
  110. - Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7
  111. - sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25
  112. - Download Locations:
  113. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
  114. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
  115. meta-gplv2
  116. - Repository Location: :yocto_git:`/meta-gplv2`
  117. - Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
  118. - Tag: :yocto_git:`yocto-4.0.21 </meta-gplv2/log/?h=yocto-4.0.21>`
  119. - Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
  120. - Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
  121. - sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
  122. - Download Locations:
  123. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  124. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  125. bitbake
  126. - Repository Location: :oe_git:`/bitbake`
  127. - Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
  128. - Tag: :oe_git:`yocto-4.0.21 </bitbake/log/?h=yocto-4.0.21>`
  129. - Git Revision: :oe_git:`ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1 </bitbake/commit/?id=ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1>`
  130. - Release Artefact: bitbake-ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1
  131. - sha: 1cb102f4c8dbd067f0262072e4e629ec7cb423103111ccdde75a09fcb8f55e5f
  132. - Download Locations:
  133. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/bitbake-ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1.tar.bz2
  134. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/bitbake-ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1.tar.bz2
  135. yocto-docs
  136. - Repository Location: :yocto_git:`/yocto-docs`
  137. - Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
  138. - Tag: :yocto_git:`yocto-4.0.21 </yocto-docs/log/?h=yocto-4.0.21>`
  139. - Git Revision: :yocto_git:`512025edd9b3b6b8d0938b35bb6188c9f3b7f17d </yocto-docs/commit/?id=512025edd9b3b6b8d0938b35bb6188c9f3b7f17d>`