1*4882a593Smuzhiyun.. SPDX-License-Identifier: CC-BY-SA-2.0-UK 2*4882a593Smuzhiyun 3*4882a593SmuzhiyunRelease notes for Yocto-4.0.8 (Kirkstone) 4*4882a593Smuzhiyun----------------------------------------- 5*4882a593Smuzhiyun 6*4882a593SmuzhiyunSecurity Fixes in Yocto-4.0.8 7*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 8*4882a593Smuzhiyun 9*4882a593Smuzhiyun- apr-util: Fix :cve:`2022-25147` 10*4882a593Smuzhiyun- apr: Fix :cve:`2022-24963`, :cve:`2022-28331` and :cve:`2021-35940` 11*4882a593Smuzhiyun- bind: Fix :cve:`2022-3094`, :cve:`2022-3736` and :cve:`2022-3924` 12*4882a593Smuzhiyun- git: Ignore :cve:`2022-41953` 13*4882a593Smuzhiyun- git: Fix :cve:`2022-23521` and :cve:`2022-41903` 14*4882a593Smuzhiyun- libgit2: Fix :cve:`2023-22742` 15*4882a593Smuzhiyun- ppp: Fix :cve:`2022-4603` 16*4882a593Smuzhiyun- python3-certifi: Fix :cve:`2022-23491` 17*4882a593Smuzhiyun- sudo: Fix :cve:`2023-22809` 18*4882a593Smuzhiyun- tar: Fix :cve:`2022-48303` 19*4882a593Smuzhiyun 20*4882a593Smuzhiyun 21*4882a593SmuzhiyunFixes in Yocto-4.0.8 22*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~ 23*4882a593Smuzhiyun 24*4882a593Smuzhiyun- core-image.bbclass: Fix missing leading whitespace with ':append' 25*4882a593Smuzhiyun- populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append' 26*4882a593Smuzhiyun- ptest-packagelists.inc: Fix missing leading whitespace with ':append' 27*4882a593Smuzhiyun- apr-util: upgrade to 1.6.3 28*4882a593Smuzhiyun- apr: upgrade to 1.7.2 29*4882a593Smuzhiyun- apt: fix do_package_qa failure 30*4882a593Smuzhiyun- bind: upgrade to 9.18.11 31*4882a593Smuzhiyun- bitbake: bb/utils: include SSL certificate paths in export_proxies 32*4882a593Smuzhiyun- bitbake: bitbake-diffsigs: Make PEP8 compliant 33*4882a593Smuzhiyun- bitbake: bitbake-diffsigs: break on first dependent task difference 34*4882a593Smuzhiyun- bitbake: fetch2/git: Clarify the meaning of namespace 35*4882a593Smuzhiyun- bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata 36*4882a593Smuzhiyun- bitbake: fetch2/git: show SRCREV and git repo in error message about fixed SRCREV 37*4882a593Smuzhiyun- bitbake: siggen: Fix inefficient string concatenation 38*4882a593Smuzhiyun- bitbake: utils/ply: Update md5 to better report errors with hashlib 39*4882a593Smuzhiyun- bootchart2: Fix usrmerge support 40*4882a593Smuzhiyun- bsp-guide: fix broken git URLs and missing word 41*4882a593Smuzhiyun- build-appliance-image: Update to kirkstone head revision 42*4882a593Smuzhiyun- buildtools-tarball: set pkg-config search path 43*4882a593Smuzhiyun- classes/fs-uuid: Fix command output decoding issue 44*4882a593Smuzhiyun- dev-manual: common-tasks.rst: add link to FOSDEM 2023 video 45*4882a593Smuzhiyun- dev-manual: fix old override syntax 46*4882a593Smuzhiyun- devshell: Do not add scripts/git-intercept to PATH 47*4882a593Smuzhiyun- devtool: fix devtool finish when gitmodules file is empty 48*4882a593Smuzhiyun- diffutils: upgrade to 3.9 49*4882a593Smuzhiyun- gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests 50*4882a593Smuzhiyun- git: upgrade to 2.35.7 51*4882a593Smuzhiyun- glslang: branch rename master -> main 52*4882a593Smuzhiyun- httpserver: add error handler that write to the logger 53*4882a593Smuzhiyun- image.bbclass: print all QA functions exceptions 54*4882a593Smuzhiyun- kernel/linux-kernel-base: Fix kernel build artefact determinism issues 55*4882a593Smuzhiyun- libc-locale: Fix on target locale generation 56*4882a593Smuzhiyun- libgit2: upgrade to 1.4.5 57*4882a593Smuzhiyun- libjpeg-turbo: upgrade to 2.1.5 58*4882a593Smuzhiyun- libtirpc: Check if file exists before operating on it 59*4882a593Smuzhiyun- libusb1: Link with latomic only if compiler has no atomic builtins 60*4882a593Smuzhiyun- libusb1: Strip trailing whitespaces 61*4882a593Smuzhiyun- linux-firmware: upgrade to 20230117 62*4882a593Smuzhiyun- linux-yocto/5.15: update to v5.15.91 63*4882a593Smuzhiyun- lsof: fix old override syntax 64*4882a593Smuzhiyun- lttng-modules: Fix for 5.10.163 kernel version 65*4882a593Smuzhiyun- lttng-tools: upgrade to 2.13.9 66*4882a593Smuzhiyun- make-mod-scripts: Ensure kernel build output is deterministic 67*4882a593Smuzhiyun- manuals: update patchwork instance URL 68*4882a593Smuzhiyun- meta: remove True option to getVar and getVarFlag calls (again) 69*4882a593Smuzhiyun- migration-guides: add release-notes for 4.0.7 70*4882a593Smuzhiyun- native: Drop special variable handling 71*4882a593Smuzhiyun- numactl: skip test case when target platform doesn't have 2 CPU node 72*4882a593Smuzhiyun- oeqa context.py: fix --target-ip comment to include ssh port number 73*4882a593Smuzhiyun- oeqa dump.py: add error counter and stop after 5 failures 74*4882a593Smuzhiyun- oeqa qemurunner.py: add timeout to QMP calls 75*4882a593Smuzhiyun- oeqa qemurunner.py: try to avoid reading one character at a time 76*4882a593Smuzhiyun- oeqa qemurunner: read more data at a time from serial 77*4882a593Smuzhiyun- oeqa ssh.py: add connection keep alive options to ssh client 78*4882a593Smuzhiyun- oeqa ssh.py: move output prints to new line 79*4882a593Smuzhiyun- oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal 80*4882a593Smuzhiyun- oeqa/selftest/bbtests: Update message lookup for test_git_unpack_nonetwork_fail 81*4882a593Smuzhiyun- oeqa/selftest/locales: Add selftest for locale generation/presence 82*4882a593Smuzhiyun- poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder 83*4882a593Smuzhiyun- poky.conf: bump version for 4.0.8 84*4882a593Smuzhiyun- profile-manual: update WireShark hyperlinks 85*4882a593Smuzhiyun- python3-pytest: depend on python3-tomli instead of python3-toml 86*4882a593Smuzhiyun- qemu: fix compile error 87*4882a593Smuzhiyun- quilt: fix intermittent failure in faildiff.test 88*4882a593Smuzhiyun- quilt: use upstreamed faildiff.test fix 89*4882a593Smuzhiyun- recipe_sanity: fix old override syntax 90*4882a593Smuzhiyun- ref-manual: document SSTATE_EXCLUDEDEPS_SYSROOT 91*4882a593Smuzhiyun- scons.bbclass: Make MAXLINELENGTH overridable 92*4882a593Smuzhiyun- scons: Pass MAXLINELENGTH to scons invocation 93*4882a593Smuzhiyun- sdkext/cases/devtool: pass a logger to HTTPService 94*4882a593Smuzhiyun- spirv-headers: set correct branch name 95*4882a593Smuzhiyun- sudo: upgrade to 1.9.12p2 96*4882a593Smuzhiyun- system-requirements.rst: add Fedora 36 and AlmaLinux 8.7 to list of supported distros 97*4882a593Smuzhiyun- testimage: Fix error message to reflect new syntax 98*4882a593Smuzhiyun- update-alternatives: fix typos 99*4882a593Smuzhiyun- vulkan-samples: branch rename master -> main 100*4882a593Smuzhiyun 101*4882a593Smuzhiyun 102*4882a593SmuzhiyunKnown Issues in Yocto-4.0.8 103*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~~~~~~~~ 104*4882a593Smuzhiyun 105*4882a593Smuzhiyun- N/A 106*4882a593Smuzhiyun 107*4882a593Smuzhiyun 108*4882a593SmuzhiyunContributors to Yocto-4.0.8 109*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~~~~~~~~ 110*4882a593Smuzhiyun 111*4882a593Smuzhiyun- Alejandro Hernandez Samaniego 112*4882a593Smuzhiyun- Alexander Kanavin 113*4882a593Smuzhiyun- Alexandre Belloni 114*4882a593Smuzhiyun- Armin Kuster 115*4882a593Smuzhiyun- Arnout Vandecappelle 116*4882a593Smuzhiyun- Bruce Ashfield 117*4882a593Smuzhiyun- Changqing Li 118*4882a593Smuzhiyun- Chee Yang Lee 119*4882a593Smuzhiyun- Etienne Cordonnier 120*4882a593Smuzhiyun- Harald Seiler 121*4882a593Smuzhiyun- Kai Kang 122*4882a593Smuzhiyun- Khem Raj 123*4882a593Smuzhiyun- Lee Chee Yang 124*4882a593Smuzhiyun- Louis Rannou 125*4882a593Smuzhiyun- Marek Vasut 126*4882a593Smuzhiyun- Marius Kriegerowski 127*4882a593Smuzhiyun- Mark Hatle 128*4882a593Smuzhiyun- Martin Jansa 129*4882a593Smuzhiyun- Mauro Queiros 130*4882a593Smuzhiyun- Michael Opdenacker 131*4882a593Smuzhiyun- Mikko Rapeli 132*4882a593Smuzhiyun- Mingli Yu 133*4882a593Smuzhiyun- Narpat Mali 134*4882a593Smuzhiyun- Niko Mauno 135*4882a593Smuzhiyun- Pawel Zalewski 136*4882a593Smuzhiyun- Peter Kjellerstedt 137*4882a593Smuzhiyun- Richard Purdie 138*4882a593Smuzhiyun- Rodolfo Quesada Zumbado 139*4882a593Smuzhiyun- Ross Burton 140*4882a593Smuzhiyun- Sakib Sajal 141*4882a593Smuzhiyun- Schmidt, Adriaan 142*4882a593Smuzhiyun- Steve Sakoman 143*4882a593Smuzhiyun- Thomas Roos 144*4882a593Smuzhiyun- Ulrich Ölmann 145*4882a593Smuzhiyun- Xiangyu Chen 146*4882a593Smuzhiyun 147*4882a593Smuzhiyun 148*4882a593SmuzhiyunRepositories / Downloads for Yocto-4.0.8 149*4882a593Smuzhiyun~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 150*4882a593Smuzhiyun 151*4882a593Smuzhiyunpoky 152*4882a593Smuzhiyun 153*4882a593Smuzhiyun- Repository Location: :yocto_git:`/poky` 154*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` 155*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.8 </poky/log/?h=yocto-4.0.8>` 156*4882a593Smuzhiyun- Git Revision: :yocto_git:`a361fb3df9c87cf12963a9d785a9f99faa839222 </poky/commit/?id=a361fb3df9c87cf12963a9d785a9f99faa839222>` 157*4882a593Smuzhiyun- Release Artefact: poky-a361fb3df9c87cf12963a9d785a9f99faa839222 158*4882a593Smuzhiyun- sha: af4e8d64be27d3a408357c49b7952ce04c6d8bb0b9d7b50c48848d9355de7fc2 159*4882a593Smuzhiyun- Download Locations: 160*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2 161*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2 162*4882a593Smuzhiyun 163*4882a593Smuzhiyunopenembedded-core 164*4882a593Smuzhiyun 165*4882a593Smuzhiyun- Repository Location: :oe_git:`/openembedded-core` 166*4882a593Smuzhiyun- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` 167*4882a593Smuzhiyun- Tag: :oe_git:`yocto-4.0.8 </openembedded-core/log/?h=yocto-4.0.8>` 168*4882a593Smuzhiyun- Git Revision: :oe_git:`b20e2134daec33fbb8ce358d984751d887752bd5 </openembedded-core/commit/?id=b20e2134daec33fbb8ce358d984751d887752bd5>` 169*4882a593Smuzhiyun- Release Artefact: oecore-b20e2134daec33fbb8ce358d984751d887752bd5 170*4882a593Smuzhiyun- sha: 63cce6f1caf8428eefc1471351ab024affc8a41d8d7777f525e3aa9ea454d2cd 171*4882a593Smuzhiyun- Download Locations: 172*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2 173*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2 174*4882a593Smuzhiyun 175*4882a593Smuzhiyunmeta-mingw 176*4882a593Smuzhiyun 177*4882a593Smuzhiyun- Repository Location: :yocto_git:`/meta-mingw` 178*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` 179*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.8 </meta-mingw/log/?h=yocto-4.0.8>` 180*4882a593Smuzhiyun- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>` 181*4882a593Smuzhiyun- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1 182*4882a593Smuzhiyun- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302 183*4882a593Smuzhiyun- Download Locations: 184*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 185*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 186*4882a593Smuzhiyun 187*4882a593Smuzhiyunmeta-gplv2 188*4882a593Smuzhiyun 189*4882a593Smuzhiyun- Repository Location: :yocto_git:`/meta-gplv2` 190*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` 191*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.8 </meta-gplv2/log/?h=yocto-4.0.8>` 192*4882a593Smuzhiyun- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` 193*4882a593Smuzhiyun- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a 194*4882a593Smuzhiyun- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d 195*4882a593Smuzhiyun- Download Locations: 196*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 197*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 198*4882a593Smuzhiyun 199*4882a593Smuzhiyunbitbake 200*4882a593Smuzhiyun 201*4882a593Smuzhiyun- Repository Location: :oe_git:`/bitbake` 202*4882a593Smuzhiyun- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` 203*4882a593Smuzhiyun- Tag: :oe_git:`yocto-4.0.8 </bitbake/log/?h=yocto-4.0.8>` 204*4882a593Smuzhiyun- Git Revision: :oe_git:`9bbdedc0ba7ca819b898e2a29a151d6a2014ca11 </bitbake/commit/?id=9bbdedc0ba7ca819b898e2a29a151d6a2014ca11>` 205*4882a593Smuzhiyun- Release Artefact: bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11 206*4882a593Smuzhiyun- sha: 8e724411f4df00737e81b33eb568f1f97d2a00d5364342c0a212c46abb7b005b 207*4882a593Smuzhiyun- Download Locations: 208*4882a593Smuzhiyun http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2 209*4882a593Smuzhiyun http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2 210*4882a593Smuzhiyun 211*4882a593Smuzhiyunyocto-docs 212*4882a593Smuzhiyun 213*4882a593Smuzhiyun- Repository Location: :yocto_git:`/yocto-docs` 214*4882a593Smuzhiyun- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` 215*4882a593Smuzhiyun- Tag: :yocto_git:`yocto-4.0.8 </yocto-docs/log/?h=yocto-4.0.8>` 216*4882a593Smuzhiyun- Git Revision: :yocto_git:`16ecbe028f2b9cc021267817a5413054e070b563 </yocto-docs/commit/?id=16ecbe028f2b9cc021267817a5413054e070b563>` 217*4882a593Smuzhiyun 218