1Release notes for Yocto-4.0.5 (Kirkstone) 2----------------------------------------- 3 4Security Fixes in Yocto-4.0.5 5~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 6 7- qemu: fix :cve:`2021-3750`, :cve:`2021-3611` and :cve:`2022-2962` 8- binutils : fix :cve:`2022-38126`, :cve:`2022-38127` and :cve:`2022-38128` 9- tff: fix :cve:`2022-2867`, :cve:`2022-2868` and :cve:`2022-2869` 10- inetutils: fix :cve:`2022-39028` 11- go: fix :cve:`2022-27664` 12 13Fixes in Yocto-4.0.5 14~~~~~~~~~~~~~~~~~~~~ 15 16- Revert "gcc-cross-canadian: Add symlink to real-ld alongside other symlinks" 17- bind: upgrade to 9.18.7 18- binutils: stable 2.38 branch updates (dc2474e7) 19- bitbake: Fix npm to use https rather than http 20- bitbake: asyncrpc/client: Fix unix domain socket chdir race issues 21- bitbake: bitbake: Add copyright headers where missing 22- bitbake: gitsm: Error out if submodule refers to parent repo 23- bitbake: runqueue: Drop deadlock breaking force fail 24- bitbake: runqueue: Ensure deferred tasks are sorted by multiconfig 25- bitbake: runqueue: Improve deadlock warning messages 26- bitbake: siggen: Fix insufficent entropy in sigtask file names 27- bitbake: tests/fetch: Allow handling of a file:// url within a submodule 28- build-appliance-image: Update to kirkstone head revision (4a88ada) 29- busybox: add devmem 128-bit support 30- classes: files: Extend overlayfs-etc class 31- coreutils: add openssl PACKAGECONFIG 32- create-pull-request: don't switch the git remote protocol to git:// 33- dev-manual: fix reference to BitBake user manual 34- expat: upgrade 2.4.8 -> 2.4.9 35- files: overlayfs-etc: refactor preinit template 36- gcc-cross-canadian: add default plugin linker 37- gcc: add arm-v9 support 38- git: upgrade 2.35.4 -> 2.35.5 39- glibc-locale: explicitly remove empty dirs in ${libdir} 40- glibc-tests: use += instead of :append 41- glibc: stable 2.35 branch updates.(8d125a1f) 42- go-native: switch from SRC_URI:append to SRC_URI += 43- image_types_wic.bbclass: fix cross binutils dependency 44- kern-tools: allow 'y' or 'm' to avoid config audit warnings 45- kern-tools: fix queue processing in relative TOPDIR configurations 46- kernel-yocto: allow patch author date to be commit date 47- libpng: upgrade to 1.6.38 48- linux-firmware: package new Qualcomm firmware 49- linux-firmware: upgrade 20220708 -> 20220913 50- linux-libc-headers: switch from SRC_URI:append to SRC_URI += 51- linux-yocto-dev: add qemuarm64 52- linux-yocto/5.10: update to v5.10.149 53- linux-yocto/5.15: cfg: fix ACPI warnings for -tiny 54- linux-yocto/5.15: update to v5.15.68 55- local.conf.sample: correct the location of public hashserv 56- ltp: Fix pread02 case trigger the glibc overflow detection 57- lttng-modules: Fix crash on powerpc64 58- lttng-tools: Disable on qemuriscv32 59- lttng-tools: Disable on riscv32 60- migration-guides: add 4.0.4 release notes 61- oeqa/runtime/dnf: fix typo 62- own-mirrors: add crate 63- perf: Fix for recent kernel upgrades 64- poky.conf: bump version for 4.0.5 65- poky.yaml.in: update version requirements 66- python3-rfc3986-validator: switch from SRC_URI:append to SRC_URI += 67- python3: upgrade 3.10.4 -> 3.10.7 68- qemu: Backport patches from upstream to support float128 on qemu-ppc64 69- rpm: Remove -Wimplicit-function-declaration warnings 70- rpm: update to 4.17.1 71- rsync: update to 3.2.5 72- stress-cpu: disable float128 math on powerpc64 to avoid SIGILL 73- tune-neoversen2: support tune-neoversen2 base on armv9a 74- tzdata: update to 2022d 75- u-boot: switch from append to += in SRC_URI 76- uninative: Upgrade to 3.7 to work with glibc 2.36 77- vim: Upgrade to 9.0.0598 78- webkitgtk: Update to 2.36.7 79 80 81Known Issues in Yocto-4.0.5 82~~~~~~~~~~~~~~~~~~~~~~~~~~~ 83 84- There are recent CVEs in key components such as openssl. They are not included in this release as it was built before the issues were known and fixes were available but these are now available on the kirkstone branch. 85 86 87Contributors to Yocto-4.0.5 88~~~~~~~~~~~~~~~~~~~~~~~~~~~ 89 90- Adrian Freihofer 91- Alexander Kanavin 92- Alexandre Belloni 93- Bhabu Bindu 94- Bruce Ashfield 95- Chen Qi 96- Daniel McGregor 97- Denys Dmytriyenko 98- Dmitry Baryshkov 99- Florin Diaconescu 100- He Zhe 101- Joshua Watt 102- Khem Raj 103- Martin Jansa 104- Michael Halstead 105- Michael Opdenacker 106- Mikko Rapeli 107- Mingli Yu 108- Neil Horman 109- Pavel Zhukov 110- Richard Purdie 111- Robert Joslyn 112- Ross Burton 113- Ruiqiang Hao 114- Samuli Piippo 115- Steve Sakoman 116- Sundeep KOKKONDA 117- Teoh Jay Shen 118- Tim Orling 119- Virendra Thakur 120- Vyacheslav Yurkov 121- Xiangyu Chen 122- Yash Shinde 123- pgowda 124- Wang Mingyu 125 126 127Repositories / Downloads for Yocto-4.0.5 128~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 129 130poky 131 132- Repository Location: :yocto_git:`/poky` 133- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` 134- Tag: :yocto_git:`yocto-4.0.5 </poky/log/?h=yocto-4.0.5>` 135- Git Revision: :yocto_git:`2e79b199114b25d81bfaa029ccfb17676946d20d </poky/commit/?id=2e79b199114b25d81bfaa029ccfb17676946d20d>` 136- Release Artefact: poky-2e79b199114b25d81bfaa029ccfb17676946d20d 137- sha: 7bcf3f901d4c5677fc95944ab096e9e306f4c758a658dde5befd16861ad2b8ea 138- Download Locations: 139 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2 140 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2 141 142openembedded-core 143 144- Repository Location: :oe_git:`/openembedded-core` 145- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` 146- Tag: :oe_git:`yocto-4.0.5 </openembedded-core/log/?h=yocto-4.0.5>` 147- Git Revision: :oe_git:`fbdf93f43ff4b876487e1f26752598ec8abcb46e </openembedded-core/commit/?id=fbdf93f43ff4b876487e1f26752598ec8abcb46e>` 148- Release Artefact: oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e 149- sha: 2d9b5a8e9355b633bb57633cc8c2d319ba13fe4721f79204e61116b3faa6cbf1 150- Download Locations: 151 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2 152 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2 153 154meta-mingw 155 156- Repository Location: :yocto_git:`/meta-mingw` 157- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` 158- Tag: :yocto_git:`yocto-4.0.5 </meta-mingw/log/?h=yocto-4.0.5>` 159- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>` 160- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1 161- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302 162- Download Locations: 163 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 164 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 165 166meta-gplv2 167 168- Repository Location: :yocto_git:`/meta-gplv2` 169- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` 170- Tag: :yocto_git:`yocto-4.0.5 </meta-gplv2/log/?h=yocto-4.0.5>` 171- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` 172- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a 173- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d 174- Download Locations: 175 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 176 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 177 178bitbake 179 180- Repository Location: :oe_git:`/bitbake` 181- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` 182- Tag: :oe_git:`yocto-4.0.5 </bitbake/log/?h=yocto-4.0.5>` 183- Git Revision: :oe_git:`c90d57497b9bcd237c3ae810ee8edb5b0d2d575a </bitbake/commit/?id=c90d57497b9bcd237c3ae810ee8edb5b0d2d575a>` 184- Release Artefact: bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a 185- sha: 5698d548ce179036e46a24f80b213124c8825a4f443fa1d6be7ab0f70b01a9ff 186- Download Locations: 187 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2 188 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2 189 190yocto-docs 191 192- Repository Location: :yocto_git:`/yocto-docs` 193- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` 194- Tag: :yocto_git:`yocto-4.0.5 </yocto-docs/log/?h=yocto-4.0.5>` 195- Git Revision: :yocto_git:`8c2f9f54e29781f4ee72e81eeaa12ceaa82dc2d3 </yocto-docs/commit/?id=8c2f9f54e29781f4ee72e81eeaa12ceaa82dc2d3>` 196 197