release-notes-4.3.1.rst 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.3.1 (Nanbield)
  3. ----------------------------------------
  4. Security Fixes in Yocto-4.3.1
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - libsndfile1: Fix :cve_nist:`2022-33065`
  7. - libxml2: Ignore :cve_nist:`2023-45322`
  8. - linux-yocto/6.1: Ignore :cve_nist:`2020-27418`, :cve_nist:`2023-31085`, :cve_mitre:`2023-34324`, :cve_nist:`2023-39189`, :cve_nist:`2023-39192`, :cve_nist:`2023-39193`, :cve_nist:`2023-39194`, :cve_nist:`2023-4244`, :cve_nist:`2023-42754`, :cve_nist:`2023-42756`, :cve_nist:`2023-44466`, :cve_nist:`2023-4563`, :cve_nist:`2023-45862`, :cve_nist:`2023-45863`, :cve_nist:`2023-45871`, :cve_nist:`2023-45898`, :cve_nist:`2023-4732`, :cve_nist:`2023-5158`, :cve_nist:`2023-5197` and :cve_nist:`2023-5345`
  9. - linux-yocto/6.5: Ignore :cve_nist:`2020-27418`, :cve_nist:`2023-1193`, :cve_nist:`2023-39191`, :cve_nist:`2023-39194`, :cve_nist:`2023-40791`, :cve_nist:`2023-44466`, :cve_nist:`2023-45862`, :cve_nist:`2023-45863`, :cve_nist:`2023-4610` and :cve_nist:`2023-4732`
  10. - openssl: Fix :cve_nist:`2023-5363`
  11. - pixman: Ignore :cve_nist:`2023-37769`
  12. - vim: Fix :cve_nist:`2023-46246`
  13. - zlib: Ignore :cve_nist:`2023-45853`
  14. Fixes in Yocto-4.3.1
  15. ~~~~~~~~~~~~~~~~~~~~
  16. - baremetal-helloworld: Pull in fix for race condition on x86-64
  17. - base: Ensure recipes using mercurial-native have certificates
  18. - bb-matrix-plot.sh: Show underscores correctly in labels
  19. - bin_package.bbclass: revert "Inhibit the default dependencies"
  20. - bitbake: SECURITY.md: add file
  21. - brief-yoctoprojectqs: use new CDN mirror for sstate
  22. - bsp-guide: bsp.rst: update beaglebone example
  23. - bsp-guide: bsp: skip Intel machines no longer supported in Poky
  24. - build-appliance-image: Update to nanbield head revision
  25. - contributor-guide: add patchtest section
  26. - contributor-guide: clarify patchtest usage
  27. - cve-check: don't warn if a patch is remote
  28. - cve-check: slightly more verbose warning when adding the same package twice
  29. - cve-check: sort the package list in the JSON report
  30. - dev-manual: add security team processes
  31. - dev-manual: extend the description of CVE patch preparation
  32. - dev-manual: layers: Add notes about layer.conf
  33. - dev-manual: new-recipe.rst: add missing parenthesis to "Patching Code" section
  34. - dev-manual: start.rst: remove obsolete reference
  35. - dev-manual: wic: update "wic list images" output
  36. - docs: add support for nanbield (4.3) release
  37. - documentation.conf: drop SERIAL_CONSOLES_CHECK
  38. - ell: Upgrade to 0.59
  39. - glib-2.0: Remove unnecessary assignement
  40. - goarch: Move Go architecture mapping to a library
  41. - kernel-arch: drop CCACHE from :term:`KERNEL_STRIP` definition
  42. - kernel.bbclass: Use strip utility used for kernel build in do_package
  43. - layer.conf: Switch layer to nanbield series only
  44. - libsdl2: upgrade to 2.28.4
  45. - linux-yocto: make sure the pahole-native available before do_kernel_configme
  46. - llvm: Upgrade to 17.0.3
  47. - machine: drop obsolete SERIAL_CONSOLES_CHECK
  48. - manuals: correct "yocto-linux" by "linux-yocto"
  49. - manuals: improve description of :term:`CVE_STATUS` and :term:`CVE_STATUS_GROUPS`
  50. - manuals: Remove references to apm in :term:`MACHINE_FEATURES`
  51. - manuals: update linux-yocto append examples
  52. - manuals: update list of supported machines
  53. - migration-4.3: additional migration items
  54. - migration-4.3: adjustments to existing text
  55. - migration-4.3: remove some unnecessary items
  56. - migration-guides: QEMU_USE_SLIRP variable removed
  57. - migration-guides: add BitBake changes
  58. - migration-guides: add debian 12 to newly supported distros
  59. - migration-guides: add kernel notes
  60. - migration-guides: add testing notes
  61. - migration-guides: add utility notes
  62. - migration-guides: edgerouter machine removed
  63. - migration-guides: enabling :term:`SPDX` only for Poky, not a global default
  64. - migration-guides: fix empty sections
  65. - migration-guides: further updates for 4.3
  66. - migration-guides: further updates for release 4.3
  67. - migration-guides: git recipes reword
  68. - migration-guides: mention CDN
  69. - migration-guides: mention LLVM 17
  70. - migration-guides: mention runqemu change in serial port management
  71. - migration-guides: packaging changes
  72. - migration-guides: remove SERIAL_CONSOLES_CHECK
  73. - migration-guides: remove non-notable change
  74. - migration-guides: updates for 4.3
  75. - oeqa/selftest/debuginfod: improve selftest
  76. - oeqa/selftest/devtool: abort if a local workspace already exist
  77. - oeqa/ssh: Handle SSHCall timeout error code
  78. - openssl: Upgrade to 3.1.4
  79. - overview-manual: concepts: Add Bitbake Tasks Map
  80. - patchtest-send-results: add In-Reply-To
  81. - patchtest-send-results: check max line length, simplify responses
  82. - patchtest-send-results: fix sender parsing
  83. - patchtest-send-results: improve subject line
  84. - patchtest-send-results: send results to submitter
  85. - patchtest/selftest: add XSKIP, update test files
  86. - patchtest: disable merge test
  87. - patchtest: fix lic_files_chksum test regex
  88. - patchtest: make pylint tests compatible with 3.x
  89. - patchtest: reduce checksum test output length
  90. - patchtest: remove test for CVE tag in mbox
  91. - patchtest: remove unused imports
  92. - patchtest: rework license checksum tests
  93. - patchtest: shorten test result outputs
  94. - patchtest: simplify test directory structure
  95. - patchtest: skip merge test if not targeting master
  96. - patchtest: test regardless of mergeability
  97. - perl: fix intermittent test failure
  98. - poky.conf: bump version for 4.3.1 release
  99. - profile-manual: aesthetic cleanups
  100. - ref-manual: Add documentation for the unimplemented-ptest QA warning
  101. - ref-manual: Fix :term:`PACKAGECONFIG` term and add an example
  102. - ref-manual: Warn about :term:`COMPATIBLE_MACHINE` skipping native recipes
  103. - ref-manual: add systemd-resolved to distro features
  104. - ref-manual: classes: explain cml1 class name
  105. - ref-manual: document :term:`KERNEL_LOCALVERSION`
  106. - ref-manual: document :term:`KERNEL_STRIP`
  107. - ref-manual: document :term:`MESON_TARGET`
  108. - ref-manual: document cargo_c class
  109. - ref-manual: remove semicolons from ``*PROCESS_COMMAND`` variables
  110. - ref-manual: update :term:`SDK_NAME` variable documentation
  111. - ref-manual: variables: add :term:`RECIPE_MAINTAINER`
  112. - ref-manual: variables: add :term:`RECIPE_SYSROOT` and :term:`RECIPE_SYSROOT_NATIVE`
  113. - ref-manual: variables: add :term:`TOOLCHAIN_OPTIONS` variable
  114. - ref-manual: variables: add example for :term:`SYSROOT_DIRS` variable
  115. - ref-manual: variables: document :term:`OEQA_REPRODUCIBLE_TEST_PACKAGE`
  116. - ref-manual: variables: mention new CDN for :term:`SSTATE_MIRRORS`
  117. - ref-manual: variables: provide no-match example for :term:`COMPATIBLE_MACHINE`
  118. - ref-manual: variables: remove SERIAL_CONSOLES_CHECK
  119. - release-notes-4.3: add CVEs, recipe upgrades, license changes, contributors
  120. - release-notes-4.3: add Repositories / Downloads section
  121. - release-notes-4.3: feature additions
  122. - release-notes-4.3: fix some typos
  123. - release-notes-4.3: move new classes to Rust section
  124. - release-notes-4.3: remove the Distribution section
  125. - release-notes-4.3: tweaks to existing text
  126. - sdk-manual: appendix-obtain: improve and update descriptions
  127. - test-manual: reproducible-builds: stop mentioning LTO bug
  128. - vim: Improve locale handling
  129. - vim: Upgrade to 9.0.2068
  130. - vim: use upstream generated .po files
  131. Known Issues in Yocto-4.3.1
  132. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  133. - N/A
  134. Contributors to Yocto-4.3.1
  135. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  136. - Alejandro Hernandez Samaniego
  137. - Alex Stewart
  138. - Archana Polampalli
  139. - Arne Schwerdt
  140. - BELHADJ SALEM Talel
  141. - Dmitry Baryshkov
  142. - Eero Aaltonen
  143. - Joshua Watt
  144. - Julien Stephan
  145. - Jérémy Rosen
  146. - Khem Raj
  147. - Lee Chee Yang
  148. - Marta Rybczynska
  149. - Max Krummenacher
  150. - Michael Halstead
  151. - Michael Opdenacker
  152. - Paul Eggleton
  153. - Peter Kjellerstedt
  154. - Peter Marko
  155. - Quentin Schulz
  156. - Richard Purdie
  157. - Robert P. J. Day
  158. - Ross Burton
  159. - Rouven Czerwinski
  160. - Steve Sakoman
  161. - Trevor Gamblin
  162. - Wang Mingyu
  163. - William Lyu
  164. - Xiangyu Chen
  165. - luca fancellu
  166. Repositories / Downloads for Yocto-4.3.1
  167. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  168. poky
  169. - Repository Location: :yocto_git:`/poky`
  170. - Branch: :yocto_git:`nanbield </poky/log/?h=nanbield>`
  171. - Tag: :yocto_git:`yocto-4.3.1 </poky/log/?h=yocto-4.3.1>`
  172. - Git Revision: :yocto_git:`bf9f2f6f60387b3a7cd570919cef6c4570edcb82 </poky/commit/?id=bf9f2f6f60387b3a7cd570919cef6c4570edcb82>`
  173. - Release Artefact: poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82
  174. - sha: 9b4351159d728fec2b63a50f1ac15edc412e2d726e9180a40afc06051fadb922
  175. - Download Locations:
  176. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2
  177. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2
  178. openembedded-core
  179. - Repository Location: :oe_git:`/openembedded-core`
  180. - Branch: :oe_git:`nanbield </openembedded-core/log/?h=nanbield>`
  181. - Tag: :oe_git:`yocto-4.3.1 </openembedded-core/log/?h=yocto-4.3.1>`
  182. - Git Revision: :oe_git:`cce77e8e79c860f4ef0ac4a86b9375bf87507360 </openembedded-core/commit/?id=cce77e8e79c860f4ef0ac4a86b9375bf87507360>`
  183. - Release Artefact: oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360
  184. - sha: e6cde08e7c549f57a67d833a36cdb942648fba81558dc8b0e65332d2a2c023cc
  185. - Download Locations:
  186. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2
  187. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2
  188. meta-mingw
  189. - Repository Location: :yocto_git:`/meta-mingw`
  190. - Branch: :yocto_git:`nanbield </meta-mingw/log/?h=nanbield>`
  191. - Tag: :yocto_git:`yocto-4.3.1 </meta-mingw/log/?h=yocto-4.3.1>`
  192. - Git Revision: :yocto_git:`49617a253e09baabbf0355bc736122e9549c8ab2 </meta-mingw/commit/?id=49617a253e09baabbf0355bc736122e9549c8ab2>`
  193. - Release Artefact: meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2
  194. - sha: 2225115b73589cdbf1e491115221035c6a61679a92a93b2a3cf761ff87bf4ecc
  195. - Download Locations:
  196. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2
  197. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2
  198. bitbake
  199. - Repository Location: :oe_git:`/bitbake`
  200. - Branch: :oe_git:`2.6 </bitbake/log/?h=2.6>`
  201. - Tag: :oe_git:`yocto-4.3.1 </bitbake/log/?h=yocto-4.3.1>`
  202. - Git Revision: :oe_git:`936fcec41efacc4ce988c81882a9ae6403702bea </bitbake/commit/?id=936fcec41efacc4ce988c81882a9ae6403702bea>`
  203. - Release Artefact: bitbake-936fcec41efacc4ce988c81882a9ae6403702bea
  204. - sha: efbdd5fe7f29227a3fd26d6a08a368bf8215083a588b4d23f3adf35044897520
  205. - Download Locations:
  206. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2
  207. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2
  208. yocto-docs
  209. - Repository Location: :yocto_git:`/yocto-docs`
  210. - Branch: :yocto_git:`nanbield </yocto-docs/log/?h=nanbield>`
  211. - Tag: :yocto_git:`yocto-4.3.1 </yocto-docs/log/?h=yocto-4.3.1>`
  212. - Git Revision: :yocto_git:`6b98a6164263298648e89b5a5ae1260a58f1bb35 </yocto-docs/commit/?id=6b98a6164263298648e89b5a5ae1260a58f1bb35>`