1.. SPDX-License-Identifier: CC-BY-SA-2.0-UK 2 3Release notes for Yocto-4.0.8 (Kirkstone) 4----------------------------------------- 5 6Security Fixes in Yocto-4.0.8 7~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 8 9- apr-util: Fix :cve:`2022-25147` 10- apr: Fix :cve:`2022-24963`, :cve:`2022-28331` and :cve:`2021-35940` 11- bind: Fix :cve:`2022-3094`, :cve:`2022-3736` and :cve:`2022-3924` 12- git: Ignore :cve:`2022-41953` 13- git: Fix :cve:`2022-23521` and :cve:`2022-41903` 14- libgit2: Fix :cve:`2023-22742` 15- ppp: Fix :cve:`2022-4603` 16- python3-certifi: Fix :cve:`2022-23491` 17- sudo: Fix :cve:`2023-22809` 18- tar: Fix :cve:`2022-48303` 19 20 21Fixes in Yocto-4.0.8 22~~~~~~~~~~~~~~~~~~~~ 23 24- core-image.bbclass: Fix missing leading whitespace with ':append' 25- populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append' 26- ptest-packagelists.inc: Fix missing leading whitespace with ':append' 27- apr-util: upgrade to 1.6.3 28- apr: upgrade to 1.7.2 29- apt: fix do_package_qa failure 30- bind: upgrade to 9.18.11 31- bitbake: bb/utils: include SSL certificate paths in export_proxies 32- bitbake: bitbake-diffsigs: Make PEP8 compliant 33- bitbake: bitbake-diffsigs: break on first dependent task difference 34- bitbake: fetch2/git: Clarify the meaning of namespace 35- bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata 36- bitbake: fetch2/git: show SRCREV and git repo in error message about fixed SRCREV 37- bitbake: siggen: Fix inefficient string concatenation 38- bitbake: utils/ply: Update md5 to better report errors with hashlib 39- bootchart2: Fix usrmerge support 40- bsp-guide: fix broken git URLs and missing word 41- build-appliance-image: Update to kirkstone head revision 42- buildtools-tarball: set pkg-config search path 43- classes/fs-uuid: Fix command output decoding issue 44- dev-manual: common-tasks.rst: add link to FOSDEM 2023 video 45- dev-manual: fix old override syntax 46- devshell: Do not add scripts/git-intercept to PATH 47- devtool: fix devtool finish when gitmodules file is empty 48- diffutils: upgrade to 3.9 49- gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests 50- git: upgrade to 2.35.7 51- glslang: branch rename master -> main 52- httpserver: add error handler that write to the logger 53- image.bbclass: print all QA functions exceptions 54- kernel/linux-kernel-base: Fix kernel build artefact determinism issues 55- libc-locale: Fix on target locale generation 56- libgit2: upgrade to 1.4.5 57- libjpeg-turbo: upgrade to 2.1.5 58- libtirpc: Check if file exists before operating on it 59- libusb1: Link with latomic only if compiler has no atomic builtins 60- libusb1: Strip trailing whitespaces 61- linux-firmware: upgrade to 20230117 62- linux-yocto/5.15: update to v5.15.91 63- lsof: fix old override syntax 64- lttng-modules: Fix for 5.10.163 kernel version 65- lttng-tools: upgrade to 2.13.9 66- make-mod-scripts: Ensure kernel build output is deterministic 67- manuals: update patchwork instance URL 68- meta: remove True option to getVar and getVarFlag calls (again) 69- migration-guides: add release-notes for 4.0.7 70- native: Drop special variable handling 71- numactl: skip test case when target platform doesn't have 2 CPU node 72- oeqa context.py: fix --target-ip comment to include ssh port number 73- oeqa dump.py: add error counter and stop after 5 failures 74- oeqa qemurunner.py: add timeout to QMP calls 75- oeqa qemurunner.py: try to avoid reading one character at a time 76- oeqa qemurunner: read more data at a time from serial 77- oeqa ssh.py: add connection keep alive options to ssh client 78- oeqa ssh.py: move output prints to new line 79- oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal 80- oeqa/selftest/bbtests: Update message lookup for test_git_unpack_nonetwork_fail 81- oeqa/selftest/locales: Add selftest for locale generation/presence 82- poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder 83- poky.conf: bump version for 4.0.8 84- profile-manual: update WireShark hyperlinks 85- python3-pytest: depend on python3-tomli instead of python3-toml 86- qemu: fix compile error 87- quilt: fix intermittent failure in faildiff.test 88- quilt: use upstreamed faildiff.test fix 89- recipe_sanity: fix old override syntax 90- ref-manual: document SSTATE_EXCLUDEDEPS_SYSROOT 91- scons.bbclass: Make MAXLINELENGTH overridable 92- scons: Pass MAXLINELENGTH to scons invocation 93- sdkext/cases/devtool: pass a logger to HTTPService 94- spirv-headers: set correct branch name 95- sudo: upgrade to 1.9.12p2 96- system-requirements.rst: add Fedora 36 and AlmaLinux 8.7 to list of supported distros 97- testimage: Fix error message to reflect new syntax 98- update-alternatives: fix typos 99- vulkan-samples: branch rename master -> main 100 101 102Known Issues in Yocto-4.0.8 103~~~~~~~~~~~~~~~~~~~~~~~~~~~ 104 105- N/A 106 107 108Contributors to Yocto-4.0.8 109~~~~~~~~~~~~~~~~~~~~~~~~~~~ 110 111- Alejandro Hernandez Samaniego 112- Alexander Kanavin 113- Alexandre Belloni 114- Armin Kuster 115- Arnout Vandecappelle 116- Bruce Ashfield 117- Changqing Li 118- Chee Yang Lee 119- Etienne Cordonnier 120- Harald Seiler 121- Kai Kang 122- Khem Raj 123- Lee Chee Yang 124- Louis Rannou 125- Marek Vasut 126- Marius Kriegerowski 127- Mark Hatle 128- Martin Jansa 129- Mauro Queiros 130- Michael Opdenacker 131- Mikko Rapeli 132- Mingli Yu 133- Narpat Mali 134- Niko Mauno 135- Pawel Zalewski 136- Peter Kjellerstedt 137- Richard Purdie 138- Rodolfo Quesada Zumbado 139- Ross Burton 140- Sakib Sajal 141- Schmidt, Adriaan 142- Steve Sakoman 143- Thomas Roos 144- Ulrich Ölmann 145- Xiangyu Chen 146 147 148Repositories / Downloads for Yocto-4.0.8 149~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 150 151poky 152 153- Repository Location: :yocto_git:`/poky` 154- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` 155- Tag: :yocto_git:`yocto-4.0.8 </poky/log/?h=yocto-4.0.8>` 156- Git Revision: :yocto_git:`a361fb3df9c87cf12963a9d785a9f99faa839222 </poky/commit/?id=a361fb3df9c87cf12963a9d785a9f99faa839222>` 157- Release Artefact: poky-a361fb3df9c87cf12963a9d785a9f99faa839222 158- sha: af4e8d64be27d3a408357c49b7952ce04c6d8bb0b9d7b50c48848d9355de7fc2 159- Download Locations: 160 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2 161 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2 162 163openembedded-core 164 165- Repository Location: :oe_git:`/openembedded-core` 166- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` 167- Tag: :oe_git:`yocto-4.0.8 </openembedded-core/log/?h=yocto-4.0.8>` 168- Git Revision: :oe_git:`b20e2134daec33fbb8ce358d984751d887752bd5 </openembedded-core/commit/?id=b20e2134daec33fbb8ce358d984751d887752bd5>` 169- Release Artefact: oecore-b20e2134daec33fbb8ce358d984751d887752bd5 170- sha: 63cce6f1caf8428eefc1471351ab024affc8a41d8d7777f525e3aa9ea454d2cd 171- Download Locations: 172 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2 173 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2 174 175meta-mingw 176 177- Repository Location: :yocto_git:`/meta-mingw` 178- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` 179- Tag: :yocto_git:`yocto-4.0.8 </meta-mingw/log/?h=yocto-4.0.8>` 180- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>` 181- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1 182- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302 183- Download Locations: 184 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 185 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 186 187meta-gplv2 188 189- Repository Location: :yocto_git:`/meta-gplv2` 190- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` 191- Tag: :yocto_git:`yocto-4.0.8 </meta-gplv2/log/?h=yocto-4.0.8>` 192- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` 193- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a 194- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d 195- Download Locations: 196 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 197 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 198 199bitbake 200 201- Repository Location: :oe_git:`/bitbake` 202- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` 203- Tag: :oe_git:`yocto-4.0.8 </bitbake/log/?h=yocto-4.0.8>` 204- Git Revision: :oe_git:`9bbdedc0ba7ca819b898e2a29a151d6a2014ca11 </bitbake/commit/?id=9bbdedc0ba7ca819b898e2a29a151d6a2014ca11>` 205- Release Artefact: bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11 206- sha: 8e724411f4df00737e81b33eb568f1f97d2a00d5364342c0a212c46abb7b005b 207- Download Locations: 208 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2 209 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2 210 211yocto-docs 212 213- Repository Location: :yocto_git:`/yocto-docs` 214- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` 215- Tag: :yocto_git:`yocto-4.0.8 </yocto-docs/log/?h=yocto-4.0.8>` 216- Git Revision: :yocto_git:`16ecbe028f2b9cc021267817a5413054e070b563 </yocto-docs/commit/?id=16ecbe028f2b9cc021267817a5413054e070b563>` 217 218