release-notes-4.0.9.rst 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.0.9 (Kirkstone)
  3. -----------------------------------------
  4. Security Fixes in Yocto-4.0.9
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - binutils: Fix :cve_nist:`2023-22608`
  7. - curl: Fix :cve_nist:`2023-23914`, :cve_nist:`2023-23915` and :cve_nist:`2023-23916`
  8. - epiphany: Fix :cve_nist:`2023-26081`
  9. - git: Ignore :cve_nist:`2023-22743`
  10. - glibc: Fix :cve_nist:`2023-0687`
  11. - gnutls: Fix :cve_nist:`2023-0361`
  12. - go: Fix :cve_nist:`2022-2879`, :cve_nist:`2022-41720` and :cve_nist:`2022-41723`
  13. - harfbuzz: Fix :cve_nist:`2023-25193`
  14. - less: Fix :cve_nist:`2022-46663`
  15. - libmicrohttpd: Fix :cve_nist:`2023-27371`
  16. - libsdl2: Fix :cve_nist:`2022-4743`
  17. - openssl: Fix :cve_nist:`2022-3996`, :cve_nist:`2023-0464`, :cve_nist:`2023-0465` and :cve_nist:`2023-0466`
  18. - pkgconf: Fix :cve_nist:`2023-24056`
  19. - python3: Fix :cve_nist:`2023-24329`
  20. - shadow: Ignore :cve_nist:`2016-15024`
  21. - systemd: Fix :cve_nist:`2022-4415`
  22. - tiff: Fix :cve_nist:`2023-0800`, :cve_nist:`2023-0801`, :cve_nist:`2023-0802`, :cve_nist:`2023-0803` and :cve_nist:`2023-0804`
  23. - vim: Fix :cve_nist:`2023-0433`, :cve_nist:`2023-0512`, :cve_nist:`2023-1127`, :cve_nist:`2023-1170`, :cve_nist:`2023-1175`, :cve_nist:`2023-1264` and :cve_nist:`2023-1355`
  24. - xserver-xorg: Fix :cve_nist:`2023-0494`
  25. - xwayland: Fix :cve_nist:`2023-0494`
  26. Fixes in Yocto-4.0.9
  27. ~~~~~~~~~~~~~~~~~~~~
  28. - base-files: Drop localhost.localdomain from hosts file
  29. - binutils: Fix nativesdk ld.so search
  30. - bitbake: cookerdata: Drop dubious exception handling code
  31. - bitbake: cookerdata: Improve early exception handling
  32. - bitbake: cookerdata: Remove incorrect SystemExit usage
  33. - bitbake: fetch/git: Fix local clone url to make it work with repo
  34. - bitbake: utils: Allow to_boolean to support int values
  35. - bmap-tools: switch to main branch
  36. - buildtools-tarball: Handle spaces within user $PATH
  37. - busybox: Fix depmod patch
  38. - cracklib: update github branch to 'main'
  39. - cups: add/fix web interface packaging
  40. - cups: check PACKAGECONFIG for pam feature
  41. - cups: use BUILDROOT instead of DESTDIR
  42. - curl: fix dependencies when building with ldap/ldaps
  43. - cve-check: Fix false negative version issue
  44. - dbus: upgrade to 1.14.6
  45. - devtool/upgrade: do not delete the workspace/recipes directory
  46. - dhcpcd: Fix install conflict when enable multilib.
  47. - dhcpcd: fix dhcpcd start failure on qemuppc64
  48. - gcc-shared-source: do not use ${S}/.. in deploy_source_date_epoch
  49. - glibc: Add missing binutils dependency
  50. - image_types: fix multiubi var init
  51. - iso-codes: upgrade to 4.13.0
  52. - json-c: Add ptest for json-c
  53. - kernel-yocto: fix kernel-meta data detection
  54. - lib/buildstats: handle tasks that never finished
  55. - lib/resulttool: fix typo breaking resulttool log --ptest
  56. - libjpeg-turbo: upgrade to 2.1.5.1
  57. - libmicrohttpd: upgrade to 0.9.76
  58. - libseccomp: fix for the ptest result format
  59. - libssh2: Clean up ptest patch/coverage
  60. - linux-firmware: add yamato fw files to qcom-adreno-a2xx package
  61. - linux-firmware: properly set license for all Qualcomm firmware
  62. - linux-firmware: upgrade to 20230210
  63. - linux-yocto-rt/5.15: update to -rt59
  64. - linux-yocto/5.10: upgrade to v5.10.175
  65. - linux-yocto/5.15: upgrade to v5.15.103
  66. - linux: inherit pkgconfig in kernel.bbclass
  67. - lttng-modules: fix for kernel 6.2+
  68. - lttng-modules: upgrade to v2.13.9
  69. - lua: Fix install conflict when enable multilib.
  70. - mdadm: Fix raid0, 06wrmostly and 02lineargrow tests
  71. - meson: Fix wrapper handling of implicit setup command
  72. - migration-guides: add 4.0.8 release notes
  73. - nghttp2: never build python bindings
  74. - oeqa rtc.py: skip if read-only-rootfs
  75. - oeqa ssh.py: fix hangs in run()
  76. - oeqa/sdk: Improve Meson test
  77. - oeqa/selftest/prservice: Improve debug output for failure
  78. - oeqa/selftest/resulttooltests: fix minor typo
  79. - openssl: upgrade to 3.0.8
  80. - package.bbclase: Add check for /build in copydebugsources()
  81. - patchelf: replace a rejected patch with an equivalent uninative.bbclass tweak
  82. - poky.conf: bump version for 4.0.9
  83. - populate_sdk_ext: Handle spaces within user $PATH
  84. - pybootchartui: Fix python syntax issue
  85. - python3-git: fix indent error
  86. - python3-setuptools-rust-native: Add direct dependency of native python3 modules
  87. - qemu: Revert "fix :cve_nist:`2021-3507`" as not applicable for qemu 6.2
  88. - rsync: Add missing prototypes to function declarations
  89. - rsync: Turn on -pedantic-errors at the end of 'configure'
  90. - runqemu: kill qemu if it hangs
  91. - scripts/lib/buildstats: handle top-level build_stats not being complete
  92. - selftest/recipetool: Stop test corrupting tinfoil class
  93. - selftest/runtime_test/virgl: Disable for all Rocky Linux
  94. - selftest: devtool: set BB_HASHSERVE_UPSTREAM when setting SSTATE_MIRROR
  95. - sstatesig: Improve output hash calculation
  96. - staging/multilib: Fix manifest corruption
  97. - staging: Separate out different multiconfig manifests
  98. - sudo: update 1.9.12p2 -> 1.9.13p3
  99. - systemd.bbclass: Add /usr/lib/systemd to searchpaths as well
  100. - systemd: add group sgx to udev package
  101. - systemd: fix wrong nobody-group assignment
  102. - timezone: use 'tz' subdir instead of ${WORKDIR} directly
  103. - toolchain-scripts: Handle spaces within user $PATH
  104. - tzcode-native: fix build with gcc-13 on host
  105. - tzdata: use separate B instead of WORKDIR for zic output
  106. - uninative: upgrade to 3.9 to include libgcc and glibc 2.37
  107. - vala: Fix install conflict when enable multilib.
  108. - vim: add missing pkgconfig inherit
  109. - vim: set modified-by to the recipe MAINTAINER
  110. - vim: upgrade to 9.0.1429
  111. - wic: Fix usage of fstype=none in wic
  112. - wireless-regdb: upgrade to 2023.02.13
  113. - xserver-xorg: upgrade to 21.1.7
  114. - xwayland: upgrade to 22.1.8
  115. Known Issues in Yocto-4.0.9
  116. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  117. - N/A
  118. Contributors to Yocto-4.0.9
  119. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  120. - Alexander Kanavin
  121. - Alexis Lothoré
  122. - Bruce Ashfield
  123. - Changqing Li
  124. - Chee Yang Lee
  125. - Dmitry Baryshkov
  126. - Federico Pellegrin
  127. - Geoffrey GIRY
  128. - Hitendra Prajapati
  129. - Hongxu Jia
  130. - Joe Slater
  131. - Kai Kang
  132. - Kenfe-Mickael Laventure
  133. - Khem Raj
  134. - Martin Jansa
  135. - Mateusz Marciniec
  136. - Michael Halstead
  137. - Michael Opdenacker
  138. - Mikko Rapeli
  139. - Ming Liu
  140. - Mingli Yu
  141. - Narpat Mali
  142. - Pavel Zhukov
  143. - Pawan Badganchi
  144. - Peter Marko
  145. - Piotr Łobacz
  146. - Poonam Jadhav
  147. - Randy MacLeod
  148. - Richard Purdie
  149. - Robert Yang
  150. - Romuald Jeanne
  151. - Ross Burton
  152. - Sakib Sajal
  153. - Saul Wold
  154. - Shubham Kulkarni
  155. - Siddharth Doshi
  156. - Simone Weiss
  157. - Steve Sakoman
  158. - Tim Orling
  159. - Tom Hochstein
  160. - Trevor Woerner
  161. - Ulrich Ölmann
  162. - Vivek Kumbhar
  163. - Wang Mingyu
  164. - Xiangyu Chen
  165. - Yash Shinde
  166. Repositories / Downloads for Yocto-4.0.9
  167. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  168. poky
  169. - Repository Location: :yocto_git:`/poky`
  170. - Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
  171. - Tag: :yocto_git:`yocto-4.0.9 </poky/log/?h=yocto-4.0.9>`
  172. - Git Revision: :yocto_git:`09def309f91929f47c6cce386016ccb777bd2cfc </poky/commit/?id=09def309f91929f47c6cce386016ccb777bd2cfc>`
  173. - Release Artefact: poky-09def309f91929f47c6cce386016ccb777bd2cfc
  174. - sha: 5c7ce209c8a6b37ec2898e5ca21858234d91999c11fa862880ba98e8bde62f63
  175. - Download Locations:
  176. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.9/poky-09def309f91929f47c6cce386016ccb777bd2cfc.tar.bz2
  177. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.9/poky-09def309f91929f47c6cce386016ccb777bd2cfc.tar.bz2
  178. openembedded-core
  179. - Repository Location: :oe_git:`/openembedded-core`
  180. - Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
  181. - Tag: :oe_git:`yocto-4.0.9 </openembedded-core/log/?h=yocto-4.0.9>`
  182. - Git Revision: :oe_git:`ff4b57ffff903a93b710284c7c7f916ddd74712f </openembedded-core/commit/?id=ff4b57ffff903a93b710284c7c7f916ddd74712f>`
  183. - Release Artefact: oecore-ff4b57ffff903a93b710284c7c7f916ddd74712f
  184. - sha: 726778ffc291136db1704316b196de979f68df9f96476b785e1791957fbb66b3
  185. - Download Locations:
  186. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.9/oecore-ff4b57ffff903a93b710284c7c7f916ddd74712f.tar.bz2
  187. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.9/oecore-ff4b57ffff903a93b710284c7c7f916ddd74712f.tar.bz2
  188. meta-mingw
  189. - Repository Location: :yocto_git:`/meta-mingw`
  190. - Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
  191. - Tag: :yocto_git:`yocto-4.0.9 </meta-mingw/log/?h=yocto-4.0.9>`
  192. - Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
  193. - Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
  194. - sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
  195. - Download Locations:
  196. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.9/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
  197. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.9/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
  198. meta-gplv2
  199. - Repository Location: :yocto_git:`/meta-gplv2`
  200. - Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
  201. - Tag: :yocto_git:`yocto-4.0.9 </meta-gplv2/log/?h=yocto-4.0.9>`
  202. - Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
  203. - Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
  204. - sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
  205. - Download Locations:
  206. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.9/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  207. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.9/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
  208. bitbake
  209. - Repository Location: :oe_git:`/bitbake`
  210. - Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
  211. - Tag: :oe_git:`yocto-4.0.9 </bitbake/log/?h=yocto-4.0.9>`
  212. - Git Revision: :oe_git:`2802adb572eb73a3eb2725a74a9bbdaafc543fa7 </bitbake/commit/?id=2802adb572eb73a3eb2725a74a9bbdaafc543fa7>`
  213. - Release Artefact: bitbake-2802adb572eb73a3eb2725a74a9bbdaafc543fa7
  214. - sha: 5c6e713b5e26b3835c0773095c7a1bc1f8affa28316b33597220ed86f1f1b643
  215. - Download Locations:
  216. http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.9/bitbake-2802adb572eb73a3eb2725a74a9bbdaafc543fa7.tar.bz2
  217. http://mirrors.kernel.org/yocto/yocto/yocto-4.0.9/bitbake-2802adb572eb73a3eb2725a74a9bbdaafc543fa7.tar.bz2
  218. yocto-docs
  219. - Repository Location: :yocto_git:`/yocto-docs`
  220. - Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
  221. - Tag: :yocto_git:`yocto-4.0.9 </yocto-docs/log/?h=yocto-4.0.9>`
  222. - Git Revision: :yocto_git:`86d0b38a97941ad52b1af220c7b801a399d50e93 </yocto-docs/commit/?id=86d0b38a97941ad52b1af220c7b801a399d50e93>`