release-notes-4.2.3.rst 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.2.3 (Mickledore)
  3. ------------------------------------------
  4. Security Fixes in Yocto-4.2.3
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - bind: Fix :cve_nist:`2023-2828` and :cve_nist:`2023-2911`
  7. - cups: Fix :cve_nist:`2023-34241`
  8. - dmidecode: Fix :cve_nist:`2023-30630`
  9. - erofs-utils: Fix :cve_nist:`2023-33551` and :cve_nist:`2023-33552`
  10. - ghostscript: Fix :cve_nist:`2023-36664`
  11. - go: Fix :cve_mitre:`2023-24531`
  12. - libarchive: ignore :cve_nist:`2023-30571`
  13. - libjpeg-turbo: Fix :cve_nist:`2023-2804`
  14. - libx11: Fix :cve_nist:`2023-3138`
  15. - ncurses: Fix :cve_nist:`2023-29491`
  16. - openssh: Fix :cve_nist:`2023-38408`
  17. - python3-certifi: Fix :cve_nist:`2023-37920`
  18. - python3-requests: Fix :cve_nist:`2023-32681`
  19. - python3: Ignore :cve_nist:`2023-36632`
  20. - qemu: fix :cve_nist:`2023-0330`, :cve_mitre:`2023-2861`, :cve_mitre:`2023-3255` and :cve_mitre:`2023-3301`
  21. - ruby: Fix :cve_nist:`2023-36617`
  22. - vim: Fix :cve_nist:`2023-2609` and :cve_nist:`2023-2610`
  23. - webkitgtk: Fix :cve_nist:`2023-27932` and :cve_nist:`2023-27954`
  24. Fixes in Yocto-4.2.3
  25. ~~~~~~~~~~~~~~~~~~~~
  26. - acpica: Update :term:`SRC_URI`
  27. - automake: fix buildtest patch
  28. - baremetal-helloworld: Fix race condition
  29. - bind: upgrade to v9.18.17
  30. - binutils: stable 2.40 branch updates
  31. - build-appliance-image: Update to mickledore head revision
  32. - cargo.bbclass: set up cargo environment in common do_compile
  33. - conf.py: add macro for Mitre CVE links
  34. - curl: ensure all ptest failures are caught
  35. - cve-update-nvd2-native: actually use API keys
  36. - cve-update-nvd2-native: fix cvssV3 metrics
  37. - cve-update-nvd2-native: handle all configuration nodes, not just first
  38. - cve-update-nvd2-native: increase retry count
  39. - cve-update-nvd2-native: log a little more
  40. - cve-update-nvd2-native: retry all errors and sleep between retries
  41. - cve-update-nvd2-native: use exact times, don't truncate
  42. - dev-manual: wic.rst: Update native tools build command
  43. - devtool/upgrade: raise an error if extracting source produces more than one directory
  44. - diffutils: upgrade to 3.10
  45. - docs: ref-manual: terms: fix typos in :term:`SPDX` term
  46. - file: fix the way path is written to environment-setup.d
  47. - file: return wrapper to fix builds when file is in buildtools-tarball
  48. - freetype: upgrade to 2.13.1
  49. - gcc-testsuite: Fix ppc cpu specification
  50. - gcc: don't pass --enable-standard-branch-protection
  51. - glibc-locale: use stricter matching for metapackages' runtime dependencies
  52. - glibc-testsuite: Fix network restrictions causing test failures
  53. - glibc/check-test-wrapper: don't emit warnings from ssh
  54. - go: upgrade to 1.20.6
  55. - gstreamer1.0: upgrade to 1.22.4
  56. - ifupdown: install missing directories
  57. - kernel-module-split add systemd modulesloaddir and modprobedir config
  58. - kernel-module-split: install config modules directories only when they are needed
  59. - kernel-module-split: make autoload and probeconf distribution specific
  60. - kernel-module-split: use context manager to open files
  61. - kernel: Fix path comparison in kernel staging dir symlinking
  62. - kernel: config modules directories are handled by kernel-module-split
  63. - kernel: don't fail if Modules.symvers doesn't exist
  64. - libassuan: upgrade to 2.5.6
  65. - libksba: upgrade to 1.6.4
  66. - libnss-nis: upgrade to 3.2
  67. - libproxy: fetch from git
  68. - libwebp: upgrade to 1.3.1
  69. - libx11: upgrade to 1.8.6
  70. - libxcrypt: fix hard-coded ".so" extension
  71. - linux-firmware : Add firmware of RTL8822 serie
  72. - linux-firmware: Fix mediatek mt7601u firmware path
  73. - linux-firmware: package firmare for Dragonboard 410c
  74. - linux-firmware: split platform-specific Adreno shaders to separate packages
  75. - linux-firmware: upgrade to 20230625
  76. - linux-yocto/5.15: update to v5.15.124
  77. - linux-yocto/6.1: cfg: update ima.cfg to match current meta-integrity
  78. - linux-yocto/6.1: upgrade to v6.1.38
  79. - ltp: Add kernel loopback module dependency
  80. - ltp: add :term:`RDEPENDS` on findutils
  81. - lttng-ust: upgrade to 2.13.6
  82. - machine/arch-arm64: add -mbranch-protection=standard
  83. - maintainers.inc: Modify email address
  84. - mdadm: add util-linux-blockdev ptest dependency
  85. - mdadm: fix 07revert-inplace ptest
  86. - mdadm: fix segfaults when running ptests
  87. - mdadm: fix util-linux ptest dependency
  88. - mdadm: re-add mdadm-ptest to PTESTS_SLOW
  89. - mdadm: skip running known broken ptests
  90. - meson.bbclass: Point to llvm-config from native sysroot
  91. - migration-guides: add release notes for 4.0.10
  92. - migration-guides: add release notes for 4.0.11
  93. - migration-guides: add release notes for 4.2.2
  94. - oeqa/runtime/cases/rpm: fix wait_for_no_process_for_user failure case
  95. - oeqa/runtime/ltp: Increase ltp test output timeout
  96. - oeqa/selftest/devtool: add unit test for "devtool add -b"
  97. - oeqa/ssh: Further improve process exit handling
  98. - oeqa/target/ssh: Ensure EAGAIN doesn't truncate output
  99. - oeqa/utils/nfs: allow requesting non-udp ports
  100. - openssh: upgrade to 9.3p2
  101. - openssl: add PERLEXTERNAL path to test its existence
  102. - openssl: use a glob on the PERLEXTERNAL to track updates on the path
  103. - opkg-utils: upgrade to 0.6.2
  104. - opkg: upgrade to 0.6.2
  105. - pkgconf: update :term:`SRC_URI`
  106. - poky.conf: bump version for 4.2.3 release
  107. - poky.conf: update :term:`SANITY_TESTED_DISTROS` to match autobuilder
  108. - ptest-runner: Pull in parallel test fixes and output handling
  109. - python3-certifi: upgrade to 2023.7.22
  110. - python3: fix missing comma in get_module_deps3.py
  111. - recipetool: Fix inherit in created -native* recipes
  112. - ref-manual: LTS releases now supported for 4 years
  113. - ref-manual: document image-specific variant of :term:`INCOMPATIBLE_LICENSE`
  114. - ref-manual: releases.svg: updates
  115. - resulttool/resultutils: allow index generation despite corrupt json
  116. - rootfs-postcommands.bbclass: Revert "add post func remove_unused_dnf_log_lock"
  117. - rootfs: Add debugfs package db file copy and cleanup
  118. - rootfs_rpm: don't depend on opkg-native for update-alternatives
  119. - rpm: Pick debugfs package db files/dirs explicitly
  120. - rust-common.bbclass: move musl-specific linking fix from rust-source.inc
  121. - scripts/oe-setup-builddir: copy conf-notes.txt to build dir
  122. - scripts/resulttool: add mention about new detected tests
  123. - selftest/cases/glibc.py: fix the override syntax
  124. - selftest/cases/glibc.py: increase the memory for testing
  125. - selftest/cases/glibc.py: switch to using NFS over TCP
  126. - shadow-sysroot: add license information
  127. - systemd-systemctl: fix errors in instance name expansion
  128. - taglib: upgrade to 1.13.1
  129. - target/ssh: Ensure exit code set for commands
  130. - tcf-agent: upgrade to 1.8.0
  131. - testimage/oeqa: Drop testimage_dump_host functionality
  132. - tiff: upgrade to 4.5.1
  133. - uboot-extlinux-config.bbclass: fix old override syntax in comment
  134. - util-linux: add alternative links for ipcs,ipcrm
  135. - vim: upgrade to 9.0.1592
  136. - webkitgtk: upgrade to 2.38.6
  137. - weston: Cleanup and fix x11 and xwayland dependencies
  138. Known Issues in Yocto-4.2.3
  139. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  140. - N/A
  141. Contributors to Yocto-4.2.3
  142. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  143. - Alejandro Hernandez Samaniego
  144. - Alex Kiernan
  145. - Alexander Kanavin
  146. - Alexis Lothoré
  147. - Andrej Valek
  148. - Anuj Mittal
  149. - Archana Polampalli
  150. - BELOUARGA Mohamed
  151. - Benjamin Bouvier
  152. - Bruce Ashfield
  153. - Changqing Li
  154. - Chen Qi
  155. - Daniel Semkowicz
  156. - Dmitry Baryshkov
  157. - Enrico Scholz
  158. - Etienne Cordonnier
  159. - Joe Slater
  160. - Joel Stanley
  161. - Jose Quaresma
  162. - Julien Stephan
  163. - Kai Kang
  164. - Khem Raj
  165. - Lee Chee Yang
  166. - Marek Vasut
  167. - Mark Hatle
  168. - Michael Halstead
  169. - Michael Opdenacker
  170. - Mingli Yu
  171. - Narpat Mali
  172. - Oleksandr Hnatiuk
  173. - Ovidiu Panait
  174. - Peter Marko
  175. - Quentin Schulz
  176. - Richard Purdie
  177. - Ross Burton
  178. - Sanjana
  179. - Sakib Sajal
  180. - Staffan Rydén
  181. - Steve Sakoman
  182. - Stéphane Veyret
  183. - Sudip Mukherjee
  184. - Thomas Roos
  185. - Tom Hochstein
  186. - Trevor Gamblin
  187. - Wang Mingyu
  188. - Yi Zhao
  189. - Yoann Congal
  190. - Yogita Urade
  191. - Yuta Hayama
  192. Repositories / Downloads for Yocto-4.2.3
  193. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  194. poky
  195. - Repository Location: :yocto_git:`/poky`
  196. - Branch: :yocto_git:`mickledore </poky/log/?h=mickledore>`
  197. - Tag: :yocto_git:`yocto-4.2.3 </poky/log/?h=yocto-4.2.3>`
  198. - Git Revision: :yocto_git:`aa63b25cbe25d89ab07ca11ee72c17cab68df8de </poky/commit/?id=aa63b25cbe25d89ab07ca11ee72c17cab68df8de>`
  199. - Release Artefact: poky-aa63b25cbe25d89ab07ca11ee72c17cab68df8de
  200. - sha: 9e2b40fc25f7984b3227126ec9b8aa68d3747c8821fb7bf8cb635fc143f894c3
  201. - Download Locations:
  202. http://downloads.yoctoproject.org/releases/yocto/yocto-4.2.3/poky-aa63b25cbe25d89ab07ca11ee72c17cab68df8de.tar.bz2
  203. http://mirrors.kernel.org/yocto/yocto/yocto-4.2.3/poky-aa63b25cbe25d89ab07ca11ee72c17cab68df8de.tar.bz2
  204. openembedded-core
  205. - Repository Location: :oe_git:`/openembedded-core`
  206. - Branch: :oe_git:`mickledore </openembedded-core/log/?h=mickledore>`
  207. - Tag: :oe_git:`yocto-4.2.3 </openembedded-core/log/?h=yocto-4.2.3>`
  208. - Git Revision: :oe_git:`7e3489c0c5970389c8a239dc7b367bcadf554eb5 </openembedded-core/commit/?id=7e3489c0c5970389c8a239dc7b367bcadf554eb5>`
  209. - Release Artefact: oecore-7e3489c0c5970389c8a239dc7b367bcadf554eb5
  210. - sha: 68620aca7c9db6b9a65d9853cacff4e60578f0df39e3e37114e062e1667ba724
  211. - Download Locations:
  212. http://downloads.yoctoproject.org/releases/yocto/yocto-4.2.3/oecore-7e3489c0c5970389c8a239dc7b367bcadf554eb5.tar.bz2
  213. http://mirrors.kernel.org/yocto/yocto/yocto-4.2.3/oecore-7e3489c0c5970389c8a239dc7b367bcadf554eb5.tar.bz2
  214. meta-mingw
  215. - Repository Location: :yocto_git:`/meta-mingw`
  216. - Branch: :yocto_git:`mickledore </meta-mingw/log/?h=mickledore>`
  217. - Tag: :yocto_git:`yocto-4.2.3 </meta-mingw/log/?h=yocto-4.2.3>`
  218. - Git Revision: :yocto_git:`92258028e1b5664a9f832541d5c4f6de0bd05e07 </meta-mingw/commit/?id=92258028e1b5664a9f832541d5c4f6de0bd05e07>`
  219. - Release Artefact: meta-mingw-92258028e1b5664a9f832541d5c4f6de0bd05e07
  220. - sha: ee081460b5dff4fb8dd4869ce5631718dbaaffbede9532b879b854c18f1b3f5d
  221. - Download Locations:
  222. http://downloads.yoctoproject.org/releases/yocto/yocto-4.2.3/meta-mingw-92258028e1b5664a9f832541d5c4f6de0bd05e07.tar.bz2
  223. http://mirrors.kernel.org/yocto/yocto/yocto-4.2.3/meta-mingw-92258028e1b5664a9f832541d5c4f6de0bd05e07.tar.bz2
  224. bitbake
  225. - Repository Location: :oe_git:`/bitbake`
  226. - Branch: :oe_git:`2.4 </bitbake/log/?h=2.4>`
  227. - Tag: :oe_git:`yocto-4.2.3 </bitbake/log/?h=yocto-4.2.3>`
  228. - Git Revision: :oe_git:`08033b63ae442c774bd3fce62844eac23e6882d7 </bitbake/commit/?id=08033b63ae442c774bd3fce62844eac23e6882d7>`
  229. - Release Artefact: bitbake-08033b63ae442c774bd3fce62844eac23e6882d7
  230. - sha: 1d070c133bfb6502ac04befbf082cbfda7582c8b1c48296a788384352e5061fd
  231. - Download Locations:
  232. http://downloads.yoctoproject.org/releases/yocto/yocto-4.2.3/bitbake-08033b63ae442c774bd3fce62844eac23e6882d7.tar.bz2
  233. http://mirrors.kernel.org/yocto/yocto/yocto-4.2.3/bitbake-08033b63ae442c774bd3fce62844eac23e6882d7.tar.bz2
  234. yocto-docs
  235. - Repository Location: :yocto_git:`/yocto-docs`
  236. - Branch: :yocto_git:`mickledore </yocto-docs/log/?h=mickledore>`
  237. - Tag: :yocto_git:`yocto-4.2.3 </yocto-docs/log/?h=yocto-4.2.3>`
  238. - Git Revision: :yocto_git:`8e6752a9e55d16f3713e248b37f9d4d2745a2375 </yocto-docs/commit/?id=8e6752a9e55d16f3713e248b37f9d4d2745a2375>`