1*4882a593SmuzhiyunRelease notes for 4.0.1 (kirkstone) 2*4882a593Smuzhiyun----------------------------------- 3*4882a593Smuzhiyun 4*4882a593SmuzhiyunSecurity Fixes in 4.0.1 5*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~~~~ 6*4882a593Smuzhiyun 7*4882a593Smuzhiyun- linux-yocto/5.15: fix :cve:`2022-28796` 8*4882a593Smuzhiyun- python3: ignore :cve:`2015-20107` 9*4882a593Smuzhiyun- e2fsprogs: fix :cve:`2022-1304` 10*4882a593Smuzhiyun- lua: fix :cve:`2022-28805` 11*4882a593Smuzhiyun- busybox: fix :cve:`2022-28391` 12*4882a593Smuzhiyun 13*4882a593SmuzhiyunFixes in 4.0.1 14*4882a593Smuzhiyun~~~~~~~~~~~~~~ 15*4882a593Smuzhiyun 16*4882a593Smuzhiyun- abi_version/sstate: Bump hashequiv and sstate versions due to git changes 17*4882a593Smuzhiyun- apt: add apt selftest to test signed package feeds 18*4882a593Smuzhiyun- apt: upgrade 2.4.4 -> 2.4.5 19*4882a593Smuzhiyun- arch-armv8-2a.inc: fix a typo in TUNEVALID variable 20*4882a593Smuzhiyun- babeltrace: Disable warnings as errors 21*4882a593Smuzhiyun- base: Avoid circular references to our own scripts 22*4882a593Smuzhiyun- base: Drop git intercept 23*4882a593Smuzhiyun- build-appliance-image: Update to kirkstone head revision 24*4882a593Smuzhiyun- build-appliance: Switch to kirkstone branch 25*4882a593Smuzhiyun- buildtools-tarball: Only add cert envvars if certs are included 26*4882a593Smuzhiyun- busybox: Use base_bindir instead of hardcoding /bin path 27*4882a593Smuzhiyun- cases/buildepoxy.py: fix typo 28*4882a593Smuzhiyun- create-spdx: delete virtual/kernel dependency to fix FreeRTOS build 29*4882a593Smuzhiyun- create-spdx: fix error when symlink cannot be created 30*4882a593Smuzhiyun- cve-check: add JSON format to summary output 31*4882a593Smuzhiyun- cve-check: fix symlinks where link and output path are equal 32*4882a593Smuzhiyun- cve-check: no need to depend on the fetch task 33*4882a593Smuzhiyun- cve-update-db-native: let the user to drive the update interval 34*4882a593Smuzhiyun- cve-update-db-native: update the CVE database once a day only 35*4882a593Smuzhiyun- cve_check: skip remote patches that haven't been fetched when searching for CVE tags 36*4882a593Smuzhiyun- dev-manual: add command used to add the signed-off-by line. 37*4882a593Smuzhiyun- devshell.bbclass: Allow devshell & pydevshell to use the network 38*4882a593Smuzhiyun- docs: conf.py: fix cve extlinks caption for sphinx <4.0 39*4882a593Smuzhiyun- docs: migration-guides: migration-3.4: mention that hardcoded password are supported if hashed 40*4882a593Smuzhiyun- docs: migration-guides: release-notes-4.0: fix risc-v typo 41*4882a593Smuzhiyun- docs: migration-guides: release-notes-4.0: replace kernel placeholder with correct recipe name 42*4882a593Smuzhiyun- docs: ref-manual: variables: add hashed password example in EXTRA_USERS_PARAMS 43*4882a593Smuzhiyun- docs: set_versions.py: add information about obsolescence of a release 44*4882a593Smuzhiyun- docs: set_versions.py: fix latest release of a branch being shown twice in switchers.js 45*4882a593Smuzhiyun- docs: set_versions.py: fix latest version of an active release shown as obsolete 46*4882a593Smuzhiyun- docs: set_versions.py: mark as obsolete only branches and old tags from obsolete releases 47*4882a593Smuzhiyun- docs: sphinx-static: switchers.js.in: do not mark branches as outdated 48*4882a593Smuzhiyun- docs: sphinx-static: switchers.js.in: fix broken switcher for branches 49*4882a593Smuzhiyun- docs: sphinx-static: switchers.js.in: improve obsolete version detection 50*4882a593Smuzhiyun- docs: sphinx-static: switchers.js.in: remove duplicate for outdated versions 51*4882a593Smuzhiyun- docs: sphinx-static: switchers.js.in: rename all_versions to switcher_versions 52*4882a593Smuzhiyun- docs: update Bitbake objects.inv location for master branch 53*4882a593Smuzhiyun- documentation/brief-yoctoprojectqs: add directory for local.conf 54*4882a593Smuzhiyun- gcompat: Fix build when usrmerge distro feature is enabled 55*4882a593Smuzhiyun- git: correct license 56*4882a593Smuzhiyun- git: upgrade 2.35.2 -> 2.35.3 57*4882a593Smuzhiyun- glib: upgrade 2.72.0 -> 2.72.1 58*4882a593Smuzhiyun- glibc: ptest: Fix glibc-tests package issue 59*4882a593Smuzhiyun- gnupg: Disable FORTIFY_SOURCES on mips 60*4882a593Smuzhiyun- go.bbclass: disable the use of the default configuration file 61*4882a593Smuzhiyun- gstreamer1.0-plugins-bad: drop patch 62*4882a593Smuzhiyun- gstreamer1.0-plugins-good: Fix libsoup dependency 63*4882a593Smuzhiyun- gstreamer1.0: Minor documentation addition 64*4882a593Smuzhiyun- install/devshell: Introduce git intercept script due to fakeroot issues 65*4882a593Smuzhiyun- kernel-yocto.bbclass: Fixup do_kernel_configcheck usage of KMETA 66*4882a593Smuzhiyun- libc-glibc: Use libxcrypt to provide virtual/crypt 67*4882a593Smuzhiyun- libgit2: upgrade 1.4.2 -> 1.4.3 68*4882a593Smuzhiyun- libsoup: upgrade 3.0.5 -> 3.0.6 69*4882a593Smuzhiyun- libusb1: upgrade 1.0.25 -> 1.0.26 70*4882a593Smuzhiyun- linux-firmware: correct license for ar3k firmware 71*4882a593Smuzhiyun- linux-firmware: upgrade 20220310 -> 20220411 72*4882a593Smuzhiyun- linux-yocto/5.10: base: enable kernel crypto userspace API 73*4882a593Smuzhiyun- linux-yocto/5.10: update to v5.10.112 74*4882a593Smuzhiyun- linux-yocto/5.15: arm: poky-tiny cleanup and fixes 75*4882a593Smuzhiyun- linux-yocto/5.15: base: enable kernel crypto userspace API 76*4882a593Smuzhiyun- linux-yocto/5.15: fix -standard kernel build issue 77*4882a593Smuzhiyun- linux-yocto/5.15: fix ppc boot 78*4882a593Smuzhiyun- linux-yocto/5.15: fix qemuarm graphical boot 79*4882a593Smuzhiyun- linux-yocto/5.15: kasan: fix BUG: sleeping function called from invalid context 80*4882a593Smuzhiyun- linux-yocto/5.15: netfilter: conntrack: avoid useless indirection during conntrack destruction 81*4882a593Smuzhiyun- linux-yocto/5.15: update to v5.15.36 82*4882a593Smuzhiyun- linux-yocto: enable powerpc-debug fragment 83*4882a593Smuzhiyun- mdadm: Drop clang specific cflags 84*4882a593Smuzhiyun- migration-3.4: add missing entry on EXTRA_USERS_PARAMS 85*4882a593Smuzhiyun- migration-guides: add release notes for 4.0 86*4882a593Smuzhiyun- migration-guides: complete migration guide for 4.0 87*4882a593Smuzhiyun- migration-guides: release-notes-4.0: mention LTS release 88*4882a593Smuzhiyun- migration-guides: release-notes-4.0: update 'Repositories / Downloads' section 89*4882a593Smuzhiyun- migration-guides: stop including documents with ".. include" 90*4882a593Smuzhiyun- musl: Fix build when usrmerge distro feature is enabled 91*4882a593Smuzhiyun- ncurses: use COPYING file 92*4882a593Smuzhiyun- neard: Switch SRC_URI to git repo 93*4882a593Smuzhiyun- oeqa/selftest: add test for git working correctly inside pseudo 94*4882a593Smuzhiyun- openssl: minor security upgrade 3.0.2 -> 3.0.3 95*4882a593Smuzhiyun- package.bbclass: Prevent perform_packagecopy from removing /sysroot-only 96*4882a593Smuzhiyun- package: Ensure we track whether PRSERV was active or not 97*4882a593Smuzhiyun- package_manager: fix missing dependency on gnupg when signing deb package feeds 98*4882a593Smuzhiyun- poky-tiny: enable qemuarmv5/qemuarm64 and cleanups 99*4882a593Smuzhiyun- poky.conf: bump version for 4.0.1 release 100*4882a593Smuzhiyun- qemu.bbclass: Extend ppc/ppc64 extra options 101*4882a593Smuzhiyun- qemuarm64: use virtio pci interfaces 102*4882a593Smuzhiyun- qemuarmv5: use arm-versatile-926ejs KMACHINE 103*4882a593Smuzhiyun- ref-manual: Add XZ_THREADS and XZ_MEMLIMIT 104*4882a593Smuzhiyun- ref-manual: add KERNEL_DEBUG_TIMESTAMPS 105*4882a593Smuzhiyun- ref-manual: add ZSTD_THREADS 106*4882a593Smuzhiyun- ref-manual: add a note about hard-coded passwords 107*4882a593Smuzhiyun- ref-manual: add empty-dirs QA check and QA_EMPTY_DIRS* 108*4882a593Smuzhiyun- ref-manual: add mention of vendor filtering to CVE_PRODUCT 109*4882a593Smuzhiyun- ref-manual: mention wildcarding support in INCOMPATIBLE_LICENSE 110*4882a593Smuzhiyun- releases: update for yocto 4.0 111*4882a593Smuzhiyun- rootfs-postcommands: fix symlinks where link and output path are equal 112*4882a593Smuzhiyun- ruby: upgrade 3.1.1 -> 3.1.2 113*4882a593Smuzhiyun- sanity: skip make 4.2.1 warning for debian 114*4882a593Smuzhiyun- scripts/git: Ensure we don't have circular references 115*4882a593Smuzhiyun- scripts: Make git intercept global 116*4882a593Smuzhiyun- seatd: Disable overflow warning as error on ppc64/musl 117*4882a593Smuzhiyun- selftest/lic_checksum: Add test for filename containing space 118*4882a593Smuzhiyun- set_versions: update for 4.0 release 119*4882a593Smuzhiyun- staging: Ensure we filter out ourselves 120*4882a593Smuzhiyun- strace: fix ptest failure in landlock 121*4882a593Smuzhiyun- subversion: upgrade to 1.14.2 122*4882a593Smuzhiyun- systemd-boot: remove outdated EFI_LD comment 123*4882a593Smuzhiyun- systemtap: Fix build with gcc-12 124*4882a593Smuzhiyun- terminal.py: Restore error output from Terminal 125*4882a593Smuzhiyun- u-boot: Correct the SRC_URI 126*4882a593Smuzhiyun- u-boot: Inherit pkgconfig 127*4882a593Smuzhiyun- update_udev_hwdb: fix multilib issue with systemd 128*4882a593Smuzhiyun- util-linux: Create u-a symlink for findfs utility 129*4882a593Smuzhiyun- virgl: skip headless test on alma 8.6 130*4882a593Smuzhiyun- webkitgtk: adjust patch status 131*4882a593Smuzhiyun- wic: do not use PARTLABEL for msdos partition tables 132*4882a593Smuzhiyun- wireless-regdb: upgrade 2022.02.18 -> 2022.04.08 133*4882a593Smuzhiyun- xserver-xorg: Fix build with gcc12 134*4882a593Smuzhiyun- yocto-bsps: update to v5.15.36 135*4882a593Smuzhiyun 136*4882a593SmuzhiyunContributors to 4.0.1 137*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~~ 138*4882a593Smuzhiyun 139*4882a593Smuzhiyun- Abongwa Amahnui Bonalais 140*4882a593Smuzhiyun- Alexander Kanavin 141*4882a593Smuzhiyun- Bruce Ashfield 142*4882a593Smuzhiyun- Carlos Rafael Giani 143*4882a593Smuzhiyun- Chen Qi 144*4882a593Smuzhiyun- Davide Gardenal 145*4882a593Smuzhiyun- Dmitry Baryshkov 146*4882a593Smuzhiyun- Ferry Toth 147*4882a593Smuzhiyun- Henning Schild 148*4882a593Smuzhiyun- Jon Mason 149*4882a593Smuzhiyun- Justin Bronder 150*4882a593Smuzhiyun- Kai Kang 151*4882a593Smuzhiyun- Khem Raj 152*4882a593Smuzhiyun- Konrad Weihmann 153*4882a593Smuzhiyun- Lee Chee Yang 154*4882a593Smuzhiyun- Marta Rybczynska 155*4882a593Smuzhiyun- Martin Jansa 156*4882a593Smuzhiyun- Matt Madison 157*4882a593Smuzhiyun- Michael Halstead 158*4882a593Smuzhiyun- Michael Opdenacker 159*4882a593Smuzhiyun- Naveen Saini 160*4882a593Smuzhiyun- Nicolas Dechesne 161*4882a593Smuzhiyun- Paul Eggleton 162*4882a593Smuzhiyun- Paul Gortmaker 163*4882a593Smuzhiyun- Paulo Neves 164*4882a593Smuzhiyun- Peter Kjellerstedt 165*4882a593Smuzhiyun- Peter Marko 166*4882a593Smuzhiyun- Pgowda 167*4882a593Smuzhiyun- Portia 168*4882a593Smuzhiyun- Quentin Schulz 169*4882a593Smuzhiyun- Rahul Kumar 170*4882a593Smuzhiyun- Richard Purdie 171*4882a593Smuzhiyun- Robert Joslyn 172*4882a593Smuzhiyun- Robert Yang 173*4882a593Smuzhiyun- Roland Hieber 174*4882a593Smuzhiyun- Ross Burton 175*4882a593Smuzhiyun- Russ Dill 176*4882a593Smuzhiyun- Steve Sakoman 177*4882a593Smuzhiyun- wangmy 178*4882a593Smuzhiyun- zhengruoqin 179*4882a593Smuzhiyun 180*4882a593SmuzhiyunRepositories / Downloads for 4.0.1 181*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 182*4882a593Smuzhiyun 183*4882a593Smuzhiyunpoky 184*4882a593Smuzhiyun 185*4882a593Smuzhiyun- Repository Location: https://git.yoctoproject.org/git/poky 186*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` 187*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.1 </poky/tag/?h=yocto-4.0.1>` 188*4882a593Smuzhiyun- Git Revision: :yocto_git:`8c489602f218bcf21de0d3c9f8cf620ea5f06430 </poky/commit/?id=8c489602f218bcf21de0d3c9f8cf620ea5f06430>` 189*4882a593Smuzhiyun- Release Artefact: poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430 190*4882a593Smuzhiyun- sha: 65c545a316bd8efb13ae1358eeccc8953543be908008103b51f7f90aed960d00 191*4882a593Smuzhiyun- Download Locations: 192*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430.tar.bz2, 193*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/poky-8c489602f218bcf21de0d3c9f8cf620ea5f06430.tar.bz2 194*4882a593Smuzhiyun 195*4882a593Smuzhiyunopenembedded-core 196*4882a593Smuzhiyun 197*4882a593Smuzhiyun- Repository Location: :oe_git:`/openembedded-core` 198*4882a593Smuzhiyun- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` 199*4882a593Smuzhiyun- Tag: :oe_git:`yocto-4.0.1 </openembedded-core/tag/?h=yocto-4.0>` 200*4882a593Smuzhiyun- Git Revision: :oe_git:`cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee </openembedded-core/commit/?id=cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee>` 201*4882a593Smuzhiyun- Release Artefact: oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee 202*4882a593Smuzhiyun- sha: 43981b8fad82f601618a133dffbec839524f0d0a055efc3d8f808cbfd811ab17 203*4882a593Smuzhiyun- Download Locations: 204*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee.tar.bz2, 205*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/oecore-cb8647c08959abb1d6b7c2b3a34b4b415f66d7ee.tar.bz2 206*4882a593Smuzhiyun 207*4882a593Smuzhiyunmeta-mingw 208*4882a593Smuzhiyun 209*4882a593Smuzhiyun- Repository Location: https://git.yoctoproject.org/git/meta-mingw 210*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` 211*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.1 </meta-mingw/tag/?h=yocto-4.0.1>` 212*4882a593Smuzhiyun- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>` 213*4882a593Smuzhiyun- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1 214*4882a593Smuzhiyun- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302 215*4882a593Smuzhiyun- Download Locations: 216*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 217*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 218*4882a593Smuzhiyun 219*4882a593Smuzhiyunmeta-gplv2 220*4882a593Smuzhiyun 221*4882a593Smuzhiyun- Repository Location: https://git.yoctoproject.org/git/meta-gplv2 222*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` 223*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.1 </meta-gplv2/tag/?h=yocto-4.0.1>` 224*4882a593Smuzhiyun- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-mingw/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` 225*4882a593Smuzhiyun- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a 226*4882a593Smuzhiyun- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d 227*4882a593Smuzhiyun- Download Locations: 228*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 229*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 230*4882a593Smuzhiyun 231*4882a593Smuzhiyunbitbake 232*4882a593Smuzhiyun 233*4882a593Smuzhiyun- Repository Location: :oe_git:`/bitbake` 234*4882a593Smuzhiyun- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` 235*4882a593Smuzhiyun- Tag: :oe_git:`yocto-4.0 </bitbake/tag/?h=yocto-4.0>` 236*4882a593Smuzhiyun- Git Revision: :oe_git:`59c16ae6c55c607c56efd2287537a1b97ba2bf52 </bitbake/commit/?id=59c16ae6c55c607c56efd2287537a1b97ba2bf52>` 237*4882a593Smuzhiyun- Release Artefact: bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52 238*4882a593Smuzhiyun- sha: 3ae466c31f738fc45c3d7c6f665952d59f01697f2667ea42f0544d4298dd6ef0 239*4882a593Smuzhiyun- Download Locations: 240*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.1/bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52.tar.bz2, 241*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.1/bitbake-59c16ae6c55c607c56efd2287537a1b97ba2bf52.tar.bz2 242*4882a593Smuzhiyun 243*4882a593Smuzhiyunyocto-docs 244*4882a593Smuzhiyun 245*4882a593Smuzhiyun- Repository Location: https://git.yoctoproject.org/git/yocto-docs 246*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` 247*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.1 </yocto-docs/tag/?h=yocto-4.0>` 248*4882a593Smuzhiyun- Git Revision: :yocto_git:`4ec9df3336a425719a9a35532504731ce56984ca </yocto-docs/commit/?id=4ec9df3336a425719a9a35532504731ce56984ca>` 249