release-notes-4.3.2.rst 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247
  1. .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
  2. Release notes for Yocto-4.3.2 (Nanbield)
  3. ----------------------------------------
  4. Security Fixes in Yocto-4.3.2
  5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  6. - avahi: Fix :cve_nist:`2023-1981`, :cve_nist:`2023-38469`, :cve_nist:`2023-38470`, :cve_nist:`2023-38471`, :cve_nist:`2023-38472` and :cve_nist:`2023-38473`
  7. - curl: Fix :cve_nist:`2023-46218`
  8. - ghostscript: Fix :cve_nist:`2023-46751`
  9. - grub: fix :cve_nist:`2023-4692` and :cve_nist:`2023-4693`
  10. - gstreamer1.0: Fix :cve_mitre:`2023-44446`
  11. - linux-yocto/6.1: Ignore :cve_mitre:`2023-39197`, :cve_nist:`2023-39198`, :cve_nist:`2023-5090`, :cve_nist:`2023-5633`, :cve_nist:`2023-6111`, :cve_nist:`2023-6121` and :cve_nist:`2023-6176`
  12. - linux-yocto/6.5: Ignore :cve_nist:`2022-44034`, :cve_mitre:`2023-39197`, :cve_nist:`2023-39198`, :cve_nist:`2023-5972`, :cve_nist:`2023-6039`, :cve_nist:`2023-6111` and :cve_nist:`2023-6176`
  13. - perl: fix :cve_nist:`2023-47100`
  14. - python3-urllib3: Fix :cve_nist:`2023-45803`
  15. - rust: Fix :cve_nist:`2023-40030`
  16. - vim: Fix :cve_nist:`2023-48231`, :cve_nist:`2023-48232`, :cve_nist:`2023-48233`, :cve_nist:`2023-48234`, :cve_nist:`2023-48235`, :cve_nist:`2023-48236` and :cve_nist:`2023-48237`
  17. - xserver-xorg: Fix :cve_nist:`2023-5367` and :cve_nist:`2023-5380`
  18. - xwayland: Fix :cve_nist:`2023-5367`
  19. Fixes in Yocto-4.3.2
  20. ~~~~~~~~~~~~~~~~~~~~
  21. - base-passwd: Upgrade to 3.6.2
  22. - bind: Upgrade to 9.18.20
  23. - binutils: stable 2.41 branch updates
  24. - bitbake: command: Make parseRecipeFile() handle virtual recipes correctly
  25. - bitbake: lib/bb: Add workaround for libgcc issues with python 3.8 and 3.9
  26. - bitbake: toastergui: verify that an existing layer path is given
  27. - bluez5: fix connection for ps5/dualshock controllers
  28. - build-appliance-image: Update to nanbield head revision
  29. - cmake: Upgrade to 3.27.7
  30. - contributor-guide: add License-Update tag
  31. - contributor-guide: fix command option
  32. - cups: Add root,sys,wheel to system groups
  33. - cve-update-nvd2-native: faster requests with API keys
  34. - cve-update-nvd2-native: increase the delay between subsequent request failures
  35. - cve-update-nvd2-native: make number of fetch attemtps configurable
  36. - cve-update-nvd2-native: remove unused variable CVE_SOCKET_TIMEOUT
  37. - dev-manual: Discourage the use of SRC_URI[md5sum]
  38. - dev-manual: layers: update link to YP Compatible form
  39. - dev-manual: runtime-testing: fix test module name
  40. - devtool: finish/update-recipe: restrict mode srcrev to recipes fetched from SCM
  41. - devtool: fix update-recipe dry-run mode
  42. - ell: Upgrade to 0.60
  43. - enchant2: Upgrade to 2.6.2
  44. - ghostscript: Upgrade to 10.02.1
  45. - glib-2.0: Upgrade to 2.78.1
  46. - glibc: stable 2.38 branch updates
  47. - gstreamer1.0: Upgrade to 1.22.7
  48. - gtk: Add rdepend on printbackend for cups
  49. - harfbuzz: Upgrade to 8.2.2
  50. - json-c: fix icecc compilation
  51. - kern-tools: bump :term:`SRCREV` for queue processing changes
  52. - kern-tools: make lower context patches reproducible
  53. - kern-tools: update :term:`SRCREV` to include SECURITY.md file
  54. - kernel-arch: use ccache only for compiler
  55. - kernel-yocto: improve metadata patching
  56. - lib/oe/buildcfg.py: Include missing import
  57. - lib/oe/buildcfg.py: Remove unused parameter
  58. - lib/oe/patch: ensure os.chdir restoring always happens
  59. - lib/oe/path: Deploy files can start only with a dot
  60. - libgcrypt: Upgrade to 1.10.3
  61. - libjpeg-turbo: Upgrade to 3.0.1
  62. - libnewt: Upgrade to 0.52.24
  63. - libnsl2: Upgrade to 2.0.1
  64. - libsolv: Upgrade to 0.7.26
  65. - libxslt: Upgrade to 1.1.39
  66. - linux-firmware: add audio topology symlink to the X13's audio package
  67. - linux-firmware: add missing depenencies on license packages
  68. - linux-firmware: add new fw file to ${PN}-rtl8821
  69. - linux-firmware: add notice file to sdm845 modem firmware
  70. - linux-firmware: create separate packages
  71. - linux-firmware: package Qualcomm Venus 6.0 firmware
  72. - linux-firmware: package Robotics RB5 sensors DSP firmware
  73. - linux-firmware: package firmware for Qualcomm Adreno a702
  74. - linux-firmware: package firmware for Qualcomm QCM2290 / QRB4210
  75. - linux-firmware: Upgrade to 20231030
  76. - linux-yocto-rt/6.1: update to -rt18
  77. - linux-yocto/6.1: cfg: restore CONFIG_DEVMEM
  78. - linux-yocto/6.1: drop removed IMA option
  79. - linux-yocto/6.1: Upgrade to v6.1.68
  80. - linux-yocto/6.5: cfg: restore CONFIG_DEVMEM
  81. - linux-yocto/6.5: cfg: split runtime and symbol debug
  82. - linux-yocto/6.5: drop removed IMA option
  83. - linux-yocto/6.5: fix AB-INT: QEMU kernel panic: No irq handler for vector
  84. - linux-yocto/6.5: Upgrade to v6.5.13
  85. - linux/cve-exclusion6.1: Update to latest kernel point release
  86. - log4cplus: Upgrade to 2.1.1
  87. - lsb-release: use https for :term:`UPSTREAM_CHECK_URI`
  88. - manuals: brief-yoctoprojectqs: align variable order with default local.conf
  89. - manuals: fix URL
  90. - meson: use correct targets for rust binaries
  91. - migration-guide: add release notes for 4.0.14, 4.0.15, 4.2.4, 4.3.1
  92. - migration-guides: release 3.5 is actually 4.0
  93. - migration-guides: reword fix in release-notes-4.3.1
  94. - msmtp: Upgrade to 1.8.25
  95. - oeqa/selftest/tinfoil: Add tests that parse virtual recipes
  96. - openssl: improve handshake test error reporting
  97. - package_ipk: Fix Source: field variable dependency
  98. - patchtest: shorten patch signed-off-by test output
  99. - perf: lift :term:`TARGET_CC_ARCH` modification out of security_flags.inc
  100. - perl: Upgrade to 5.38.2
  101. - perlcross: Upgrade to 1.5.2
  102. - poky.conf: bump version for 4.3.2 release
  103. - python3-ptest: skip test_storlines
  104. - python3-urllib3: Upgrade to 2.0.7
  105. - qemu: Upgrade to 8.1.2
  106. - ref-manual: Fix reference to MIRRORS/PREMIRRORS defaults
  107. - ref-manual: releases.svg: update nanbield release status
  108. - useradd_base: sed -i destroys symlinks
  109. - rootfs-postcommands: sed -i destroys symlinks
  110. - sstate: Ensure sstate searches update file mtime
  111. - strace: backport fix for so_peerpidfd-test
  112. - systemd-boot: Fix build issues on armv7a-linux
  113. - systemd-compat-units.bb: fix postinstall script
  114. - systemd: fix DynamicUser issue
  115. - systemd: update :term:`LICENSE` statement
  116. - tcl: skip async and event tests in run-ptest
  117. - tcl: skip timing-dependent tests in run-ptest
  118. - test-manual: add links to python unittest
  119. - test-manual: add or improve hyperlinks
  120. - test-manual: explicit or fix file paths
  121. - test-manual: resource updates
  122. - test-manual: text and formatting fixes
  123. - test-manual: use working example
  124. - testimage: Drop target_dumper and most of monitor_dumper
  125. - testimage: Exclude wtmp from target-dumper commands
  126. - tzdata: Upgrade to 2023d
  127. - update_gtk_icon_cache: Fix for GTK4-only builds
  128. - useradd_base: Fix sed command line for passwd-expire
  129. - vim: Upgrade to 9.0.2130
  130. - xserver-xorg: Upgrade to 21.1.9
  131. - xwayland: Upgrade to 23.2.2
  132. Known Issues in Yocto-4.3.2
  133. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  134. - N/A
  135. Contributors to Yocto-4.3.2
  136. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  137. - Adam Johnston
  138. - Alexander Kanavin
  139. - Anuj Mittal
  140. - Bastian Krause
  141. - Bruce Ashfield
  142. - Chen Qi
  143. - Deepthi Hemraj
  144. - Dhairya Nagodra
  145. - Dmitry Baryshkov
  146. - Fahad Arslan
  147. - Javier Tia
  148. - Jermain Horsman
  149. - Joakim Tjernlund
  150. - Julien Stephan
  151. - Justin Bronder
  152. - Khem Raj
  153. - Lee Chee Yang
  154. - Marco Felsch
  155. - Markus Volk
  156. - Marta Rybczynska
  157. - Massimiliano Minella
  158. - Michael Opdenacker
  159. - Paul Barker
  160. - Peter Kjellerstedt
  161. - Peter Marko
  162. - Randy MacLeod
  163. - Rasmus Villemoes
  164. - Richard Purdie
  165. - Ross Burton
  166. - Shubham Kulkarni
  167. - Simone Weiß
  168. - Steve Sakoman
  169. - Sundeep KOKKONDA
  170. - Tim Orling
  171. - Trevor Gamblin
  172. - Vijay Anusuri
  173. - Viswanath Kraleti
  174. - Vyacheslav Yurkov
  175. - Wang Mingyu
  176. - William Lyu
  177. - Zoltán Böszörményi
  178. Repositories / Downloads for Yocto-4.3.2
  179. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  180. poky
  181. - Repository Location: :yocto_git:`/poky`
  182. - Branch: :yocto_git:`nanbield </poky/log/?h=nanbield>`
  183. - Tag: :yocto_git:`yocto-4.3.2 </poky/log/?h=yocto-4.3.2>`
  184. - Git Revision: :yocto_git:`f768ffb8916feb6542fcbe3e946cbf30e247b151 </poky/commit/?id=f768ffb8916feb6542fcbe3e946cbf30e247b151>`
  185. - Release Artefact: poky-f768ffb8916feb6542fcbe3e946cbf30e247b151
  186. - sha: 21ca1695d70aba9b4bd8626d160111feab76206883cd14fe41eb024692bdfd7b
  187. - Download Locations:
  188. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/poky-f768ffb8916feb6542fcbe3e946cbf30e247b151.tar.bz2
  189. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/poky-f768ffb8916feb6542fcbe3e946cbf30e247b151.tar.bz2
  190. openembedded-core
  191. - Repository Location: :oe_git:`/openembedded-core`
  192. - Branch: :oe_git:`nanbield </openembedded-core/log/?h=nanbield>`
  193. - Tag: :oe_git:`yocto-4.3.2 </openembedded-core/log/?h=yocto-4.3.2>`
  194. - Git Revision: :oe_git:`ff595b937d37d2315386aebf315cea719e2362ea </openembedded-core/commit/?id=ff595b937d37d2315386aebf315cea719e2362ea>`
  195. - Release Artefact: oecore-ff595b937d37d2315386aebf315cea719e2362ea
  196. - sha: a7c6332dc0e09ecc08221e78b11151e8e2a3fd9fa3eaad96a4c03b67012bfb97
  197. - Download Locations:
  198. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/oecore-ff595b937d37d2315386aebf315cea719e2362ea.tar.bz2
  199. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/oecore-ff595b937d37d2315386aebf315cea719e2362ea.tar.bz2
  200. meta-mingw
  201. - Repository Location: :yocto_git:`/meta-mingw`
  202. - Branch: :yocto_git:`nanbield </meta-mingw/log/?h=nanbield>`
  203. - Tag: :yocto_git:`yocto-4.3.2 </meta-mingw/log/?h=yocto-4.3.2>`
  204. - Git Revision: :yocto_git:`49617a253e09baabbf0355bc736122e9549c8ab2 </meta-mingw/commit/?id=49617a253e09baabbf0355bc736122e9549c8ab2>`
  205. - Release Artefact: meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2
  206. - sha: 2225115b73589cdbf1e491115221035c6a61679a92a93b2a3cf761ff87bf4ecc
  207. - Download Locations:
  208. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2
  209. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2
  210. bitbake
  211. - Repository Location: :oe_git:`/bitbake`
  212. - Branch: :oe_git:`2.6 </bitbake/log/?h=2.6>`
  213. - Tag: :oe_git:`yocto-4.3.2 </bitbake/log/?h=yocto-4.3.2>`
  214. - Git Revision: :oe_git:`72bf75f0b2e7f36930185e18a1de8277ce7045d8 </bitbake/commit/?id=72bf75f0b2e7f36930185e18a1de8277ce7045d8>`
  215. - Release Artefact: bitbake-72bf75f0b2e7f36930185e18a1de8277ce7045d8
  216. - sha: 0b6ccd4796ccd211605090348a3d4378358c839ae1bb4c35964d0f36f2663187
  217. - Download Locations:
  218. http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.2/bitbake-72bf75f0b2e7f36930185e18a1de8277ce7045d8.tar.bz2
  219. http://mirrors.kernel.org/yocto/yocto/yocto-4.3.2/bitbake-72bf75f0b2e7f36930185e18a1de8277ce7045d8.tar.bz2
  220. yocto-docs
  221. - Repository Location: :yocto_git:`/yocto-docs`
  222. - Branch: :yocto_git:`nanbield </yocto-docs/log/?h=nanbield>`
  223. - Tag: :yocto_git:`yocto-4.3.2 </yocto-docs/log/?h=yocto-4.3.2>`
  224. - Git Revision: :yocto_git:`fac88b9e80646a68b31975c915a718a9b6b2b439 </yocto-docs/commit/?id=fac88b9e80646a68b31975c915a718a9b6b2b439>`