release-notes-4.1.3.rst 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.1.3 (Langdale)
  3. ----------------------------------------
  4. Security Fixes in Yocto-4.1.3
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - apr-util: Fix :cve_nist:`2022-25147`
  7. - apr: Fix :cve_nist:`2022-24963` and :cve_nist:`2022-28331`
  8. - bind: Fix :cve_nist:`2022-3094`, :cve_nist:`2022-3736` and :cve_nist:`2022-3924`
  9. - curl: Fix :cve_nist:`2022-43551` and :cve_nist:`2022-43552`
  10. - dbus: Fix :cve_nist:`2022-42010`, :cve_nist:`2022-42011` and :cve_nist:`2022-42012`
  11. - git: Fix :cve_nist:`2022-23521`, :cve_nist:`2022-39253`, :cve_nist:`2022-39260` and :cve_nist:`2022-41903`
  12. - git: Ignore :cve_nist:`2022-41953`
  13. - go: Fix :cve_nist:`2022-41717` and :cve_nist:`2022-41720`
  14. - grub2: Fix :cve_nist:`2022-2601` and :cve_nist:`2022-3775`
  15. - less: Fix :cve_nist:`2022-46663`
  16. - libarchive: Fix :cve_nist:`2022-36227`
  17. - libksba: Fix :cve_nist:`2022-47629`
  18. - openssl: Fix :cve_nist:`2022-3996`
  19. - pkgconf: Fix :cve_nist:`2023-24056`
  20. - ppp: Fix :cve_nist:`2022-4603`
  21. - sudo: Fix :cve_nist:`2023-22809`
  22. - tar: Fix :cve_nist:`2022-48303`
  23. - vim: Fix :cve_nist:`2023-0049`, :cve_nist:`2023-0051`, :cve_nist:`2023-0054`, :cve_nist:`2023-0288`, :cve_nist:`2023-0433` and :cve_nist:`2023-0512`
  24. - xserver-xorg: Fix :cve_mitre:`2023-0494`
  25. - xwayland: Fix :cve_mitre:`2023-0494`
  26. Fixes in Yocto-4.1.3
  27. ~~~~~~~~~~~~~~~~~~~~
  28. - apr-util: Upgrade to 1.6.3
  29. - apr: Upgrade to 1.7.2
  30. - apt: fix do_package_qa failure
  31. - at: Change when files are copied
  32. - base.bbclass: Fix way to check ccache path
  33. - bblayers/makesetup: skip git repos that are submodules
  34. - bblayers/setupwriters/oe-setup-layers: create dir if not exists
  35. - bind: Upgrade to 9.18.11
  36. - bitbake-layers: fix a typo
  37. - bitbake: bb/utils: include SSL certificate paths in export_proxies
  38. - bitbake: fetch2/git: Clarify the meaning of namespace
  39. - bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata
  40. - bitbake: process: log odd unlink events with bitbake.sock
  41. - bitbake: server/process: Add bitbake.sock race handling
  42. - bitbake: siggen: Fix inefficient string concatenation
  43. - bootchart2: Fix usrmerge support
  44. - bsp-guide: fix broken git URLs and missing word
  45. - build-appliance-image: Update to langdale head revision
  46. - buildtools-tarball: set pkg-config search path
  47. - busybox: Fix depmod patch
  48. - busybox: always start do_compile with orig config files
  49. - busybox: rm temporary files if do_compile was interrupted
  50. - cairo: fix CVE patches assigned wrong CVE number
  51. - classes/fs-uuid: Fix command output decoding issue
  52. - classes/populate_sdk_base: Append cleandirs
  53. - classes: image: Set empty weak default IMAGE_LINGUAS
  54. - cml1: remove redundant addtask
  55. - core-image.bbclass: Fix missing leading whitespace with ':append'
  56. - createrepo-c: Include missing rpm/rpmstring.h
  57. - curl: don't enable debug builds
  58. - curl: fix dependencies when building with ldap/ldaps
  59. - cve-check: write the cve manifest to IMGDEPLOYDIR
  60. - cve-update-db-native: avoid incomplete updates
  61. - cve-update-db-native: show IP on failure
  62. - dbus: Upgrade to 1.14.6
  63. - dev-manual: common-tasks.rst: add link to FOSDEM 2023 video
  64. - dev-manual: fix old override syntax
  65. - devshell: Do not add scripts/git-intercept to PATH
  66. - devtool: fix devtool finish when gitmodules file is empty
  67. - devtool: process local files only for the main branch
  68. - dhcpcd: backport two patches to fix runtime error
  69. - dhcpcd: fix dhcpcd start failure on qemuppc64
  70. - diffutils: Upgrade to 3.9
  71. - ffmpeg: fix configure failure on noexec /tmp host
  72. - gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests
  73. - git: Upgrade to 2.37.6
  74. - glslang: branch rename master -> main
  75. - go: Upgrade to 1.19.4
  76. - gstreamer1.0 : Revert "disable flaky gstbin:test_watch_for_state_change test" and Fix race conditions in gstbin tests with upstream solution
  77. - harfbuzz: remove bindir only if it exists
  78. - httpserver: add error handler that write to the logger
  79. - image.bbclass: print all QA functions exceptions
  80. - kernel-fitimage: Adjust order of dtb/dtbo files
  81. - kernel-fitimage: Allow user to select dtb when multiple dtb exists
  82. - kernel-yocto: fix kernel-meta data detection
  83. - kernel/linux-kernel-base: Fix kernel build artefact determinism issues
  84. - lib/buildstats: handle tasks that never finished
  85. - lib/oe/reproducible: Use git log without gpg signature
  86. - libarchive: Upgrade to 3.6.2
  87. - libc-locale: Fix on target locale generation
  88. - libgit2: Upgrade to 1.5.1
  89. - libjpeg-turbo: Upgrade to 2.1.5.1
  90. - libksba: Upgrade to 1.6.3
  91. - libpng: Enable NEON for aarch64 to enensure consistency with arm32.
  92. - librsvg: Only enable the Vala bindings if GObject Introspection is enabled
  93. - librsvg: enable vapi build
  94. - libseccomp: fix for the ptest result format
  95. - libseccomp: fix typo in DESCRIPTION
  96. - libssh2: Clean up ptest patch/coverage
  97. - libtirpc: Check if file exists before operating on it
  98. - libusb1: Link with latomic only if compiler has no atomic builtins
  99. - libusb1: Strip trailing whitespaces
  100. - linux-firmware: add yamato fw files to qcom-adreno-a2xx package
  101. - linux-firmware: properly set license for all Qualcomm firmware
  102. - linux-firmware: Upgrade to 20230210
  103. - linux-yocto/5.15: fix perf build with clang
  104. - linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off
  105. - linux-yocto/5.15: ltp and squashfs fixes
  106. - linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user copy
  107. - linux-yocto/5.15: Upgrade to v5.15.91
  108. - linux-yocto/5.19: fix perf build with clang
  109. - linux-yocto/5.19: powerpc: Fix reschedule bug in KUAP-unlocked user copy
  110. - lsof: fix old override syntax
  111. - lttng-modules: Fix for 5.10.163 kernel version
  112. - lttng-modules: fix for kernel 6.2+
  113. - lttng-modules: Upgrade to 2.13.8
  114. - lttng-tools: Upgrade to 2.13.9
  115. - make-mod-scripts: Ensure kernel build output is deterministic
  116. - manuals: update patchwork instance URL
  117. - mesa-gl: gallium is required when enabling x11
  118. - meta: remove True option to getVar and getVarFlag calls (again)
  119. - migration-guides: add release-notes for 4.0.7
  120. - native: Drop special variable handling
  121. - numactl: skip test case when target platform doesn't have 2 CPU node
  122. - oeqa context.py: fix --target-ip comment to include ssh port number
  123. - oeqa dump.py: add error counter and stop after 5 failures
  124. - oeqa qemurunner.py: add timeout to QMP calls
  125. - oeqa qemurunner.py: try to avoid reading one character at a time
  126. - oeqa qemurunner: read more data at a time from serial
  127. - oeqa ssh.py: add connection keep alive options to ssh client
  128. - oeqa ssh.py: fix hangs in run()
  129. - oeqa ssh.py: move output prints to new line
  130. - oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal
  131. - oeqa/rpm.py: Increase timeout and add debug output
  132. - oeqa/selftest/debuginfod: improve testcase
  133. - oeqa/selftest/locales: Add selftest for locale generation/presence
  134. - oeqa/selftest/resulttooltests: fix minor typo
  135. - openssl: Upgrade to 3.0.8
  136. - opkg: ensure opkg uses private gpg.conf when applying keys.
  137. - pango: Upgrade to 1.50.12
  138. - perf: Enable debug/source packaging
  139. - pkgconf: Upgrade to 1.9.4
  140. - poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder
  141. - poky.conf: bump version for 4.1.3
  142. - populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append'
  143. - profile-manual: update WireShark hyperlinks
  144. - ptest-packagelists.inc: Fix missing leading whitespace with ':append'
  145. - python3-pytest: depend on python3-tomli instead of python3-toml
  146. - quilt: fix intermittent failure in faildiff.test
  147. - quilt: use upstreamed faildiff.test fix
  148. - recipe_sanity: fix old override syntax
  149. - ref-manual: Fix invalid feature name
  150. - ref-manual: update DEV_PKG_DEPENDENCY in variables
  151. - ref-manual: variables.rst: fix broken hyperlink
  152. - rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively
  153. - runqemu: kill qemu if it hangs
  154. - rust: Do not use default compiler flags defined in CC crate
  155. - scons.bbclass: Make MAXLINELENGTH overridable
  156. - scons: Pass MAXLINELENGTH to scons invocation
  157. - sdkext/cases/devtool: pass a logger to HTTPService
  158. - selftest/virgl: use pkg-config from the host
  159. - spirv-headers/spirv-tools: set correct branch name
  160. - sstate.bbclass: Fetch non-existing local .sig files if needed
  161. - sstatesig: Improve output hash calculation
  162. - sudo: Upgrade to 1.9.12p2
  163. - system-requirements.rst: Add Fedora 36, AlmaLinux 8.7 & 9.1, and OpenSUSE 15.4 to list of supported distros
  164. - testimage: Fix error message to reflect new syntax
  165. - tiff: Add packageconfig knob for webp
  166. - toolchain-scripts: compatibility with unbound variable protection
  167. - uninative: Upgrade to 3.8.1 to include libgcc
  168. - update-alternatives: fix typos
  169. - vim: Upgrade to 9.0.1293
  170. - vulkan-samples: branch rename master -> main
  171. - wic: Fix usage of fstype=none in wic
  172. - wireless-regdb: Upgrade to 2023.02.13
  173. - xserver-xorg: Upgrade to 21.1.7
  174. - xwayland: Upgrade to 22.1.8
  175. Known Issues in Yocto-4.1.3
  176. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  177. - N/A
  178. Contributors to Yocto-4.1.3
  179. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  180. - Adrian Freihofer
  181. - Alejandro Hernandez Samaniego
  182. - Alex Kiernan
  183. - Alexander Kanavin
  184. - Alexis Lothoré
  185. - Anton Antonov
  186. - Antonin Godard
  187. - Armin Kuster
  188. - Arnout Vandecappelle
  189. - Benoît Mauduit
  190. - Bruce Ashfield
  191. - Carlos Alberto Lopez Perez
  192. - Changqing Li
  193. - Charlie Johnston
  194. - Chee Yang Lee
  195. - Chen Qi
  196. - Dmitry Baryshkov
  197. - Enguerrand de Ribaucourt
  198. - Etienne Cordonnier
  199. - Fawzi KHABER
  200. - Federico Pellegrin
  201. - Frank de Brabander
  202. - Harald Seiler
  203. - He Zhe
  204. - Jan Kircher
  205. - Jermain Horsman
  206. - Jose Quaresma
  207. - Joshua Watt
  208. - Kai Kang
  209. - Khem Raj
  210. - Lei Maohui
  211. - Louis Rannou
  212. - Luis
  213. - Marek Vasut
  214. - Markus Volk
  215. - Marta Rybczynska
  216. - Martin Jansa
  217. - Mateusz Marciniec
  218. - Mauro Queiros
  219. - Michael Halstead
  220. - Michael Opdenacker
  221. - Mikko Rapeli
  222. - Mingli Yu
  223. - Narpat Mali
  224. - Niko Mauno
  225. - Pavel Zhukov
  226. - Pawel Zalewski
  227. - Peter Kjellerstedt
  228. - Petr Kubizňák
  229. - Quentin Schulz
  230. - Randy MacLeod
  231. - Richard Purdie
  232. - Robert Joslyn
  233. - Rodolfo Quesada Zumbado
  234. - Ross Burton
  235. - Sakib Sajal
  236. - Sandeep Gundlupet Raju
  237. - Saul Wold
  238. - Siddharth Doshi
  239. - Steve Sakoman
  240. - Thomas Roos
  241. - Tobias Hagelborn
  242. - Ulrich Ölmann
  243. - Vivek Kumbhar
  244. - Wang Mingyu
  245. - Xiangyu Chen
  246. Repositories / Downloads for Yocto-4.1.3
  247. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  248. poky
  249. - Repository Location: :yocto_git:`/poky`
  250. - Branch: :yocto_git:`langdale </poky/log/?h=langdale>`
  251. - Tag: :yocto_git:`yocto-4.1.3 </poky/log/?h=yocto-4.1.3>`
  252. - Git Revision: :yocto_git:`91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f </poky/commit/?id=91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f>`
  253. - Release Artefact: poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f
  254. - sha: 94e4615eba651fe705436b29b854458be050cc39db936295f9d5eb7e85d3eff1
  255. - Download Locations:
  256. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2
  257. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2
  258. openembedded-core
  259. - Repository Location: :oe_git:`/openembedded-core`
  260. - Branch: :oe_git:`langdale </openembedded-core/log/?h=langdale>`
  261. - Tag: :oe_git:`yocto-4.1.3 </openembedded-core/log/?h=yocto-4.1.3>`
  262. - Git Revision: :oe_git:`b995ea45773211bd7bdd60eabcc9bbffda6beb5c </openembedded-core/commit/?id=b995ea45773211bd7bdd60eabcc9bbffda6beb5c>`
  263. - Release Artefact: oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c
  264. - sha: 952e19361f205ee91b74e5caaa835d58fa6dd0d92ddaed50d4cd3f3fa56fab63
  265. - Download Locations:
  266. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2
  267. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2
  268. meta-mingw
  269. - Repository Location: :yocto_git:`/meta-mingw`
  270. - Branch: :yocto_git:`langdale </meta-mingw/log/?h=langdale>`
  271. - Tag: :yocto_git:`yocto-4.1.3 </meta-mingw/log/?h=yocto-4.1.3>`
  272. - Git Revision: :yocto_git:`b0067202db8573df3d23d199f82987cebe1bee2c </meta-mingw/commit/?id=b0067202db8573df3d23d199f82987cebe1bee2c>`
  273. - Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c
  274. - sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366
  275. - Download Locations:
  276. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
  277. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2
  278. bitbake
  279. - Repository Location: :oe_git:`/bitbake`
  280. - Branch: :oe_git:`2.2 </bitbake/log/?h=2.2>`
  281. - Tag: :oe_git:`yocto-4.1.3 </bitbake/log/?h=yocto-4.1.3>`
  282. - Git Revision: :oe_git:`592ee222a1c6da42925fb56801f226884b6724ec </bitbake/commit/?id=592ee222a1c6da42925fb56801f226884b6724ec>`
  283. - Release Artefact: bitbake-592ee222a1c6da42925fb56801f226884b6724ec
  284. - sha: 79c32f2ca66596132e32a45654ce0e9dd42b6b39186eff3540a9d6b499fe952c
  285. - Download Locations:
  286. http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2
  287. http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2
  288. yocto-docs
  289. - Repository Location: :yocto_git:`/yocto-docs`
  290. - Branch: :yocto_git:`langdale </yocto-docs/log/?h=langdale>`
  291. - Tag: :yocto_git:`yocto-4.1.3 </yocto-docs/log/?h=yocto-4.1.3>`
  292. - Git Revision: :yocto_git:`3de2ad1f8ff87aeec30088779267880306a0f31a </yocto-docs/commit/?id=3de2ad1f8ff87aeec30088779267880306a0f31a>`