release-notes-4.1.2.rst 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.1.2 (Langdale)
  3. ----------------------------------------
  4. Security Fixes in Yocto-4.1.2
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - sudo: Fix :cve_nist:`2022-43995`
  7. - binutils: Fix :cve_nist:`2022-4285`
  8. - cairo: update patch for :cve_nist:`2019-6461` with upstream solution
  9. - expat: Fix :cve_nist:`2022-43680`
  10. - ffmpeg: Fix :cve_nist:`2022-3964` and :cve_nist:`2022-3965`
  11. - grub: Fix :cve_nist:`2022-28736`
  12. - libarchive: Fix :cve_nist:`2022-36227`
  13. - libpam: Fix :cve_nist:`2022-28321`
  14. - libpng: Fix :cve_nist:`2019-6129`
  15. - ruby: Fix :cve_nist:`2022-28738` and :cve_nist:`2022-28739`
  16. - tiff: Fix :cve_nist:`2022-3970`
  17. - vim: Fix :cve_nist:`2022-4141`
  18. Fixes in Yocto-4.1.2
  19. ~~~~~~~~~~~~~~~~~~~~
  20. - Expand create-spdx class documentation
  21. - Expand cve-check class documentation
  22. - archiver: avoid using machine variable as it breaks multiconfig
  23. - babeltrace: Upgrade to 1.5.11
  24. - backport SPDX documentation and vulnerability improvements
  25. - baremetal-image: Avoid overriding qemu variables from IMAGE_CLASSES
  26. - bc: extend to nativesdk
  27. - bind: Upgrade to 9.18.9
  28. - bitbake.conf: Drop export of SOURCE_DATE_EPOCH_FALLBACK
  29. - bitbake: gitsm: Fix regression in gitsm submodule path parsing
  30. - bitbake: runqueue: Fix race issues around hash equivalence and sstate reuse
  31. - bluez5: Point hciattach bcm43xx firmware search path to /lib/firmware
  32. - build-appliance-image: Update to langdale head revision
  33. - cargo_common.bbclass: Fix typos
  34. - classes: make TOOLCHAIN more permissive for kernel
  35. - cmake: Upgrade to 3.24.2
  36. - combo-layer: add sync-revs command
  37. - combo-layer: dont use bb.utils.rename
  38. - combo-layer: remove unused import
  39. - common-tasks.rst: fix oeqa runtime test path
  40. - create-spdx: default share_src for shared sources
  41. - curl: Correct LICENSE from MIT-open-group to curl
  42. - dbus: Add missing CVE product name
  43. - devtool/upgrade: correctly handle recipes where S is a subdir of upstream tree
  44. - dhcpcd: fix to work with systemd
  45. - docs: kernel-dev: faq: update tip on how to not include kernel in image
  46. - docs: migration-4.0: specify variable name change for kernel inclusion in image recipe
  47. - expat: upgrade to 2.5.0
  48. - externalsrc: fix lookup for .gitmodules
  49. - ffmpeg: Upgrade to 5.1.2
  50. - gcc-shared-source: Fix source date epoch handling
  51. - gcc-source: Drop gengtype manipulation
  52. - gcc-source: Ensure deploy_source_date_epoch sstate hash doesn't change
  53. - gcc-source: Fix gengtypes race
  54. - gdk-pixbuf: Upgrade to 2.42.10
  55. - get_module_deps3.py: Check attribute '__file__'
  56. - glibc-tests: correctly pull in the actual tests when installing -ptest package
  57. - gnomebase.bbclass: return the whole version for tarball directory if it is a number
  58. - go-crosssdk: avoid host contamination by GOCACHE
  59. - go: Update reproducibility patch to fix panic errors
  60. - go: submit patch upstream
  61. - go: Upgrade to 1.19.3
  62. - gptfdisk: remove warning message from target system
  63. - groff: submit patches upstream
  64. - gstreamer1.0: Upgrade to 1.20.5
  65. - help2man: Upgrade to 1.49.3
  66. - insane: add codeload.github.com to src-uri-bad checkz
  67. - inetutils: Upgrade to 2.4
  68. - iso-codes: Upgrade to 4.12.0
  69. - kbd: Don't build tests
  70. - kea: submit patch upstream
  71. - kern-tools: integrate ZFS speedup patch
  72. - kernel.bbclass: Include randstruct seed assets in STAGING_KERNEL_BUILDDIR
  73. - kernel.bbclass: make KERNEL_DEBUG_TIMESTAMPS work at rebuild
  74. - kernel.bbclass: remove empty module directories to prevent QA issues
  75. - lib/buildstats: fix parsing of trees with reduced_proc_pressure directories
  76. - libdrm: Remove libdrm-kms package
  77. - libepoxy: convert to git
  78. - libepoxy: remove upstreamed patch
  79. - libepoxy: Upgrade to 1.5.10
  80. - libffi: submit patch upstream
  81. - libffi: Upgrade to 3.4.4
  82. - libical: Upgrade to 3.0.16
  83. - libnewt: Upgrade to 0.52.23
  84. - libsdl2: Upgrade to 2.24.2
  85. - libpng: Upgrade to 1.6.39
  86. - libuv: fixup SRC_URI
  87. - libxcrypt-compat: Upgrade to 4.4.33
  88. - libxcrypt: Upgrade to 4.4.30
  89. - libxml2: fix test data checksums
  90. - linux-firmware: add new fw file to ${PN}-qcom-adreno-a530
  91. - linux-firmware: don't put the firmware into the sysroot
  92. - linux-firmware: Upgrade to 20221109
  93. - linux-yocto/5.15: fix CONFIG_CRYPTO_CCM mismatch warnings
  94. - linux-yocto/5.15: update genericx86* machines to v5.15.72
  95. - linux-yocto/5.15: Upgrade to v5.15.78
  96. - linux-yocto/5.19: cfg: intel and vesa updates
  97. - linux-yocto/5.19: fix CONFIG_CRYPTO_CCM mismatch warnings
  98. - linux-yocto/5.19: fix elfutils run-backtrace-native-core ptest failure
  99. - linux-yocto/5.19: security.cfg: remove configs which have been dropped
  100. - linux-yocto/5.19: update genericx86* machines to v5.19.14
  101. - linux-yocto/5.19: Upgrade to v5.19.17
  102. - lsof: add update-alternatives logic
  103. - lttng-modules: Upgrade to 2.13.7
  104. - lttng-tools: submit determinism.patch upstream
  105. - manuals: add 4.0.5 and 4.0.6 release notes
  106. - mesa: do not rely on native llvm-config in target sysroot
  107. - mesa: Upgrade to 22.2.3
  108. - meta-selftest/staticids: add render group for systemd
  109. - mirrors.bbclass: update CPAN_MIRROR
  110. - mobile-broadband-provider-info: Upgrade to 20221107
  111. - mpfr: Upgrade to 4.1.1
  112. - mtd-utils: Upgrade to 2.1.5
  113. - oeqa/concurrencytest: Add number of failures to summary output
  114. - oeqa/runtime/dnf: rewrite test_dnf_installroot_usrmerge
  115. - oeqa/selftest/externalsrc: add test for srctree_hash_files
  116. - oeqa/selftest/lic_checksum: Cleanup changes to emptytest include
  117. - openssh: remove RRECOMMENDS to rng-tools for sshd package
  118. - opkg: Set correct info_dir and status_file in opkg.conf
  119. - opkg: Upgrade to 0.6.1
  120. - ovmf: correct patches status
  121. - package: Fix handling of minidebuginfo with newer binutils
  122. - pango: Make it build with ptest disabled
  123. - pango: replace a recipe fix with an upstream submitted patch
  124. - pango: Upgrade to 1.50.11
  125. - poky.conf: bump version for 4.1.2
  126. - psplash: consider the situation of psplash not exist for systemd
  127. - python3-mako: Upgrade to 1.2.3
  128. - qemu-helper-native: Correctly pass program name as argv[0]
  129. - qemu-helper-native: Re-write bridge helper as C program
  130. - qemu: Ensure libpng dependency is deterministic
  131. - qemuboot.bbclass: make sure runqemu boots bundled initramfs kernel image
  132. - resolvconf: make it work
  133. - rm_work: adjust dependency to make do_rm_work_all depend on do_rm_work
  134. - rm_work: exclude the SSTATETASKS from the rm_work tasks sinature
  135. - ruby: merge .inc into .bb
  136. - ruby: Upgrade to 3.1.3
  137. - rust: submit a rewritten version of crossbeam_atomic.patch upstream
  138. - sanity: Drop data finalize call
  139. - scripts: convert-overrides: Allow command-line customizations
  140. - selftest: add a copy of previous mtd-utils version to meta-selftest
  141. - socat: Upgrade to 1.7.4.4
  142. - sstate: Allow optimisation of do_deploy_archives task dependencies
  143. - sstatesig: emit more helpful error message when not finding sstate manifest
  144. - sstatesig: skip the rm_work task signature
  145. - sudo: Upgrade to 1.9.12p1
  146. - sysstat: Upgrade to 12.6.1
  147. - systemd: Consider PACKAGECONFIG in RRECOMMENDS
  148. - systemd: Make importd depend on glib-2.0 again
  149. - systemd: add group render to udev package
  150. - systemd: Upgrade to 251.8
  151. - tcl: correct patch status
  152. - tzdata: Upgrade to 2022g
  153. - vala: install vapigen-wrapper into /usr/bin/crosscripts and stage only that
  154. - valgrind: skip the boost_thread test on arm
  155. - vim: Upgrade to 9.0.0947
  156. - wic: make ext2/3/4 images reproducible
  157. - xwayland: libxshmfence is needed when dri3 is enabled
  158. - xwayland: Upgrade to 22.1.5
  159. - yocto-check-layer: Allow OE-Core to be tested
  160. Known Issues in Yocto-4.1.2
  161. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  162. - N/A
  163. Contributors to Yocto-4.1.2
  164. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  165. - Alejandro Hernandez Samaniego
  166. - Alex Kiernan
  167. - Alex Stewart
  168. - Alexander Kanavin
  169. - Alexey Smirnov
  170. - Bruce Ashfield
  171. - Carlos Alberto Lopez Perez
  172. - Chen Qi
  173. - Diego Sueiro
  174. - Dmitry Baryshkov
  175. - Enrico Jörns
  176. - Harald Seiler
  177. - Hitendra Prajapati
  178. - Jagadeesh Krishnanjanappa
  179. - Jose Quaresma
  180. - Joshua Watt
  181. - Kai Kang
  182. - Konrad Weihmann
  183. - Leon Anavi
  184. - Marek Vasut
  185. - Martin Jansa
  186. - Mathieu Dubois-Briand
  187. - Michael Opdenacker
  188. - Mikko Rapeli
  189. - Narpat Mali
  190. - Nathan Rossi
  191. - Niko Mauno
  192. - Ola x Nilsson
  193. - Ovidiu Panait
  194. - Pavel Zhukov
  195. - Peter Bergin
  196. - Peter Kjellerstedt
  197. - Peter Marko
  198. - Polampalli, Archana
  199. - Qiu, Zheng
  200. - Quentin Schulz
  201. - Randy MacLeod
  202. - Ranjitsinh Rathod
  203. - Ravula Adhitya Siddartha
  204. - Richard Purdie
  205. - Robert Andersson
  206. - Ross Burton
  207. - Ryan Eatmon
  208. - Sakib Sajal
  209. - Sandeep Gundlupet Raju
  210. - Sergei Zhmylev
  211. - Steve Sakoman
  212. - Tim Orling
  213. - Wang Mingyu
  214. - Xiangyu Chen
  215. - pgowda
  216. Repositories / Downloads for Yocto-4.1.2
  217. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  218. poky
  219. - Repository Location: :yocto_git:`/poky`
  220. - Branch: :yocto_git:`langdale </poky/log/?h=langdale>`
  221. - Tag: :yocto_git:`yocto-4.1.2 </poky/log/?h=yocto-4.1.2>`
  222. - Git Revision: :yocto_git:`74c92e38c701e268406bb656b45ccd68471c217e </poky/commit/?id=74c92e38c701e268406bb656b45ccd68471c217e>`
  223. - Release Artefact: poky-74c92e38c701e268406bb656b45ccd68471c217e
  224. - sha: 06a2b304d0e928b62d81087797ae86115efe925c506bcb40c7d4747e14790bb0
  225. - Download Locations:
  226. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/poky-74c92e38c701e268406bb656b45ccd68471c217e.tar.bz2
  227. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/poky-74c92e38c701e268406bb656b45ccd68471c217e.tar.bz2
  228. openembedded-core
  229. - Repository Location: :oe_git:`/openembedded-core`
  230. - Branch: :oe_git:`langdale </openembedded-core/log/?h=langdale>`
  231. - Tag: :oe_git:`yocto-4.1.2 </openembedded-core/log/?h=yocto-4.1.2>`
  232. - Git Revision: :oe_git:`670f4f103b25897524d115c1f290ecae441fe4bd </openembedded-core/commit/?id=670f4f103b25897524d115c1f290ecae441fe4bd>`
  233. - Release Artefact: oecore-670f4f103b25897524d115c1f290ecae441fe4bd
  234. - sha: 09d77700e84efc738aef5713c5e86f19fa092f876d44b870789155cc1625ef04
  235. - Download Locations:
  236. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/oecore-670f4f103b25897524d115c1f290ecae441fe4bd.tar.bz2
  237. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/oecore-670f4f103b25897524d115c1f290ecae441fe4bd.tar.bz2
  238. meta-mingw
  239. - Repository Location: :yocto_git:`/meta-mingw`
  240. - Branch: :yocto_git:`langdale </meta-mingw/log/?h=langdale>`
  241. - Tag: :yocto_git:`yocto-4.1.2 </meta-mingw/log/?h=yocto-4.1.2>`
  242. - Git Revision: :yocto_git:`b0067202db8573df3d23d199f82987cebe1bee2c </meta-mingw/commit/?id=b0067202db8573df3d23d199f82987cebe1bee2c>`
  243. - Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c
  244. - sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366
  245. - Download Locations:
  246. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
  247. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
  248. bitbake
  249. - Repository Location: :oe_git:`/bitbake`
  250. - Branch: :oe_git:`2.2 </bitbake/log/?h=2.2>`
  251. - Tag: :oe_git:`yocto-4.1.2 </bitbake/log/?h=yocto-4.1.2>`
  252. - Git Revision: :oe_git:`f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4 </bitbake/commit/?id=f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4>`
  253. - Release Artefact: bitbake-f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4
  254. - sha: 7faf97eca78afd3994e4e126e5f5908617408c340c6eff8cd7047e0b961e2d10
  255. - Download Locations:
  256. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/bitbake-f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4.tar.bz2
  257. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/bitbake-f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4.tar.bz2
  258. yocto-docs
  259. - Repository Location: :yocto_git:`/yocto-docs`
  260. - Branch: :yocto_git:`langdale </yocto-docs/log/?h=langdale>`
  261. - Tag: :yocto_git:`yocto-4.1.2 </yocto-docs/log/?h=yocto-4.1.2>`
  262. - Git Revision: :yocto_git:`30f5f9ece260fd600f0c0fa32fc2f1fc61cf7d1b </yocto-docs/commit/?id=30f5f9ece260fd600f0c0fa32fc2f1fc61cf7d1b>`