314 lines
13 KiB
ReStructuredText
314 lines
13 KiB
ReStructuredText
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
|
|
|
|
Release notes for Yocto-4.0.6 (Kirkstone)
|
|
-----------------------------------------
|
|
|
|
Security Fixes in Yocto-4.0.6
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- bash: Fix :cve:`2022-3715`
|
|
- curl: Fix :cve:`2022-32221`, :cve:`2022-42915` and :cve:`2022-42916`
|
|
- dbus: Fix :cve:`2022-42010`, :cve:`2022-42011` and :cve:`2022-42012`
|
|
- dropbear: Fix :cve:`2021-36369`
|
|
- ffmpeg: Fix :cve:`2022-3964`, :cve:`2022-3965`
|
|
- go: Fix :cve:`2022-2880`
|
|
- grub2: Fix :cve:`2022-2601`, :cve:`2022-3775` and :cve:`2022-28736`
|
|
- libarchive: Fix :cve:`2022-36227`
|
|
- libpam: Fix :cve:`2022-28321`
|
|
- libsndfile1: Fix :cve:`2021-4156`
|
|
- lighttpd: Fix :cve:`2022-41556`
|
|
- openssl: Fix :cve:`2022-3358`
|
|
- pixman: Fix :cve:`2022-44638`
|
|
- python3-mako: Fix :cve:`2022-40023`
|
|
- python3: Fix :cve:`2022-42919`
|
|
- qemu: Fix :cve:`2022-3165`
|
|
- sysstat: Fix :cve:`2022-39377`
|
|
- systemd: Fix :cve:`2022-3821`
|
|
- tiff: Fix :cve:`2022-2953`, :cve:`2022-3599`, :cve:`2022-3597`, :cve:`2022-3626`, :cve:`2022-3627`, :cve:`2022-3570`, :cve:`2022-3598` and :cve:`2022-3970`
|
|
- vim: Fix :cve:`2022-3352`, :cve:`2022-3705` and :cve:`2022-4141`
|
|
- wayland: Fix :cve:`2021-3782`
|
|
- xserver-xorg: Fix :cve:`2022-3550` and :cve:`2022-3551`
|
|
|
|
|
|
Fixes in Yocto-4.0.6
|
|
~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- archiver: avoid using machine variable as it breaks multiconfig
|
|
- babeltrace: upgrade to 1.5.11
|
|
- bind: upgrade to 9.18.8
|
|
- bitbake.conf: Drop export of SOURCE_DATE_EPOCH_FALLBACK
|
|
- bitbake: gitsm: Fix regression in gitsm submodule path parsing
|
|
- bitbake: runqueue: Fix race issues around hash equivalence and sstate reuse
|
|
- bluez5: Point hciattach bcm43xx firmware search path to /lib/firmware
|
|
- bluez5: add dbus to RDEPENDS
|
|
- build-appliance-image: Update to kirkstone head revision
|
|
- buildtools-tarball: export certificates to python and curl
|
|
- cargo_common.bbclass: Fix typos
|
|
- classes: make TOOLCHAIN more permissive for kernel
|
|
- cmake-native: Fix host tool contamination (Bug: 14951)
|
|
- common-tasks.rst: fix oeqa runtime test path
|
|
- create-spdx.bbclass: remove unused SPDX_INCLUDE_PACKAGED
|
|
- create-spdx: Remove ";name=..." for downloadLocation
|
|
- create-spdx: default share_src for shared sources
|
|
- cve-update-db-native: add timeout to urlopen() calls
|
|
- dbus: upgrade to 1.14.4
|
|
- dhcpcd: fix to work with systemd
|
|
- expat: upgrade to 2.5.0
|
|
- externalsrc.bbclass: Remove a trailing slash from ${B}
|
|
- externalsrc.bbclass: fix git repo detection
|
|
- externalsrc: git submodule--helper list unsupported
|
|
- gcc-shared-source: Fix source date epoch handling
|
|
- gcc-source: Drop gengtype manipulation
|
|
- gcc-source: Ensure deploy_source_date_epoch sstate hash doesn't change
|
|
- gcc-source: Fix gengtypes race
|
|
- gdk-pixbuf: upgrade to 2.42.10
|
|
- get_module_deps3.py: Check attribute '__file__'
|
|
- glib-2.0: fix rare GFileInfo test case failure
|
|
- glibc-locale: Do not INHIBIT_DEFAULT_DEPS
|
|
- gnomebase.bbclass: return the whole version for tarball directory if it is a number
|
|
- gnutls: Unified package names to lower-case
|
|
- groff: submit patches upstream
|
|
- gstreamer1.0-libav: fix errors with ffmpeg 5.x
|
|
- gstreamer1.0: upgrade to 1.20.4
|
|
- ifupdown: upgrade to 0.8.39
|
|
- insane.bbclass: Allow hashlib version that only accepts on parameter
|
|
- iso-codes: upgrade to 4.12.0
|
|
- kea: submit patch upstream (fix-multilib-conflict.patch)
|
|
- kern-tools: fix relative path processing
|
|
- kern-tools: integrate ZFS speedup patch
|
|
- kernel-yocto: improve fatal error messages of symbol_why.py
|
|
- kernel.bbclass: Include randstruct seed assets in STAGING_KERNEL_BUILDDIR
|
|
- kernel.bbclass: make KERNEL_DEBUG_TIMESTAMPS work at rebuild
|
|
- kernel: Clear SYSROOT_DIRS instead of replacing sysroot_stage_all
|
|
- libcap: upgrade to 2.66
|
|
- libepoxy: convert to git
|
|
- libepoxy: update to 1.5.10
|
|
- libffi: submit patch upstream (0001-arm-sysv-reverted-clang-VFP-mitigation.patch )
|
|
- libffi: upgrade to 3.4.4
|
|
- libical: upgrade to 3.0.16
|
|
- libksba: upgrade to 1.6.2
|
|
- libuv: fixup SRC_URI
|
|
- libxcrypt: upgrade to 4.4.30
|
|
- lighttpd: upgrade to 1.4.67
|
|
- linux-firmware: add new fw file to ${PN}-qcom-adreno-a530
|
|
- linux-firmware: don't put the firmware into the sysroot
|
|
- linux-firmware: package amdgpu firmware
|
|
- linux-firmware: split rtl8761 firmware
|
|
- linux-firmware: upgrade to 20221109
|
|
- linux-yocto/5.10: update genericx86* machines to v5.10.149
|
|
- linux-yocto/5.15: fix CONFIG_CRYPTO_CCM mismatch warnings
|
|
- linux-yocto/5.15: update genericx86* machines to v5.15.72
|
|
- linux-yocto/5.15: update to v5.15.78
|
|
- ltp: backport clock_gettime04 fix from upstream
|
|
- lttng-modules: upgrade to 2.13.7
|
|
- lttng-tools: Upgrade to 2.13.8
|
|
- lttng-tools: submit determinism.patch upstream
|
|
- lttng-ust: upgrade to 2.13.5
|
|
- meson: make wrapper options sub-command specific
|
|
- meta-selftest/staticids: add render group for systemd
|
|
- mirrors.bbclass: update CPAN_MIRROR
|
|
- mirrors.bbclass: use shallow tarball for binutils-native
|
|
- mobile-broadband-provider-info: upgrade 20220725 -> 20221107
|
|
- mtd-utils: upgrade 2.1.4 -> 2.1.5
|
|
- numactl: upgrade to 2.0.16
|
|
- oe/packagemanager/rpm: don't leak file objects
|
|
- oeqa/selftest/lic_checksum: Cleanup changes to emptytest include
|
|
- oeqa/selftest/minidebuginfo: Create selftest for minidebuginfo
|
|
- oeqa/selftest/tinfoil: Add test for separate config_data with recipe_parse_file()
|
|
- openssl: Fix SSL_CERT_FILE to match ca-certs location
|
|
- openssl: upgrade to 3.0.7
|
|
- openssl: export necessary env vars in SDK
|
|
- opkg-utils: use a git clone, not a dynamic snapshot
|
|
- opkg: Set correct info_dir and status_file in opkg.conf
|
|
- overlayfs: Allow not used mount points
|
|
- ovmf: correct patches status
|
|
- package: Fix handling of minidebuginfo with newer binutils
|
|
- perf: Depend on native setuptools3
|
|
- poky.conf: bump version for 4.0.6
|
|
- psplash: add psplash-default in rdepends
|
|
- psplash: consider the situation of psplash not exist for systemd
|
|
- python3: advance to version 3.10.8
|
|
- qemu-helper-native: Correctly pass program name as argv[0]
|
|
- qemu-helper-native: Re-write bridge helper as C program
|
|
- qemu-native: Add PACKAGECONFIG option for jack
|
|
- qemu: add io_uring PACKAGECONFIG
|
|
- quilt: backport a patch to address grep 3.8 failures
|
|
- resolvconf: make it work
|
|
- rm_work: exclude the SSTATETASKS from the rm_work tasks sinature
|
|
- runqemu: Do not perturb script environment
|
|
- runqemu: Fix gl-es argument from causing other arguments to be ignored
|
|
- sanity: Drop data finalize call
|
|
- sanity: check for GNU tar specifically
|
|
- scripts/oe-check-sstate: cleanup
|
|
- scripts/oe-check-sstate: force build to run for all targets, specifically populate_sysroot
|
|
- scripts: convert-overrides: Allow command-line customizations
|
|
- socat: upgrade to 1.7.4.4
|
|
- SPDX and CVE documentation updates
|
|
- sstate: Allow optimisation of do_deploy_archives task dependencies
|
|
- sstatesig: emit more helpful error message when not finding sstate manifest
|
|
- sstatesig: skip the rm_work task signature
|
|
- sudo: upgrade to 1.9.12p1
|
|
- systemd: Consider PACKAGECONFIG in RRECOMMENDS
|
|
- systemd: add group render to udev package
|
|
- tcl: correct patch status
|
|
- tiff: refresh with devtool
|
|
- tiff: add CVE tag to b258ed69a485a9cfb299d9f060eb2a46c54e5903.patch
|
|
- u-boot: Remove duplicate inherit of cml1
|
|
- uboot-sign: Fix using wrong KEY_REQ_ARGS
|
|
- vala: install vapigen-wrapper into /usr/bin/crosscripts and stage only that
|
|
- valgrind: remove most hidden tests for arm64
|
|
- vim: Upgrade to 9.0.0947
|
|
- vulkan-samples: add lfs=0 to SRC_URI to avoid git smudge errors in do_unpack
|
|
- wic: honor the SOURCE_DATE_EPOCH in case of updated fstab
|
|
- wic: make ext2/3/4 images reproducible
|
|
- wic: swap partitions are not added to fstab
|
|
- wpebackend-fdo: upgrade to 1.14.0
|
|
- xserver-xorg: move some recommended dependencies in required
|
|
- xwayland: upgrade to 22.1.5
|
|
|
|
|
|
Known Issues in Yocto-4.0.6
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- N/A
|
|
|
|
|
|
Contributors to Yocto-4.0.6
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- Alex Kiernan
|
|
- Alexander Kanavin
|
|
- Alexey Smirnov
|
|
- Bartosz Golaszewski
|
|
- Bernhard Rosenkränzer
|
|
- Bhabu Bindu
|
|
- Bruce Ashfield
|
|
- Chee Yang Lee
|
|
- Chen Qi
|
|
- Christian Eggers
|
|
- Claus Stovgaard
|
|
- Diego Sueiro
|
|
- Dmitry Baryshkov
|
|
- Ed Tanous
|
|
- Enrico Jörns
|
|
- Etienne Cordonnier
|
|
- Frank de Brabander
|
|
- Harald Seiler
|
|
- Hitendra Prajapati
|
|
- Jan-Simon Moeller
|
|
- Jeremy Puhlman
|
|
- Joe Slater
|
|
- John Edward Broadbent
|
|
- Jose Quaresma
|
|
- Joshua Watt
|
|
- Kai Kang
|
|
- Keiya Nobuta
|
|
- Khem Raj
|
|
- Konrad Weihmann
|
|
- Leon Anavi
|
|
- Liam Beguin
|
|
- Marek Vasut
|
|
- Mark Hatle
|
|
- Martin Jansa
|
|
- Michael Opdenacker
|
|
- Mikko Rapeli
|
|
- Narpat Mali
|
|
- Nathan Rossi
|
|
- Niko Mauno
|
|
- Pavel Zhukov
|
|
- Peter Kjellerstedt
|
|
- Peter Marko
|
|
- Polampalli, Archana
|
|
- Qiu, Zheng
|
|
- Ravula Adhitya Siddartha
|
|
- Richard Purdie
|
|
- Ross Burton
|
|
- Sakib Sajal
|
|
- Sean Anderson
|
|
- Sergei Zhmylev
|
|
- Steve Sakoman
|
|
- Teoh Jay Shen
|
|
- Thomas Perrot
|
|
- Tim Orling
|
|
- Vincent Davis Jr
|
|
- Vivek Kumbhar
|
|
- Vyacheslav Yurkov
|
|
- Wang Mingyu
|
|
- Xiangyu Chen
|
|
- Zheng Qiu
|
|
- Ciaran Courtney
|
|
- Wang Mingyu
|
|
|
|
|
|
Repositories / Downloads for Yocto-4.0.6
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
poky
|
|
|
|
- Repository Location: :yocto_git:`/poky`
|
|
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
|
|
- Tag: :yocto_git:`yocto-4.0.6 </poky/log/?h=yocto-4.0.6>`
|
|
- Git Revision: :yocto_git:`c4e08719a782fd4119eaf643907b80cebf57f88f </poky/commit/?id=c4e08719a782fd4119eaf643907b80cebf57f88f>`
|
|
- Release Artefact: poky-c4e08719a782fd4119eaf643907b80cebf57f88f
|
|
- sha: 2eb3b323dd2ccd25f9442bfbcbde82bc081fad5afd146a8e6dde439db24a99d4
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/poky-c4e08719a782fd4119eaf643907b80cebf57f88f.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/poky-c4e08719a782fd4119eaf643907b80cebf57f88f.tar.bz2
|
|
|
|
openembedded-core
|
|
|
|
- Repository Location: :oe_git:`/openembedded-core`
|
|
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
|
|
- Tag: :oe_git:`yocto-4.0.6 </openembedded-core/log/?h=yocto-4.0.6>`
|
|
- Git Revision: :oe_git:`45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2 </openembedded-core/commit/?id=45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2>`
|
|
- Release Artefact: oecore-45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2
|
|
- sha: de8b443365927befe67cc443b60db57563ff0726377223f836a3f3971cf405ec
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/oecore-45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/oecore-45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2.tar.bz2
|
|
|
|
meta-mingw
|
|
|
|
- Repository Location: :yocto_git:`/meta-mingw`
|
|
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
|
|
- Tag: :yocto_git:`yocto-4.0.6 </meta-mingw/log/?h=yocto-4.0.6>`
|
|
- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
|
|
- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
|
|
- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
|
|
|
|
meta-gplv2
|
|
|
|
- Repository Location: :yocto_git:`/meta-gplv2`
|
|
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
|
|
- Tag: :yocto_git:`yocto-4.0.6 </meta-gplv2/log/?h=yocto-4.0.6>`
|
|
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
|
|
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
|
|
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
|
|
|
|
bitbake
|
|
|
|
- Repository Location: :oe_git:`/bitbake`
|
|
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
|
|
- Tag: :oe_git:`yocto-4.0.6 </bitbake/log/?h=yocto-4.0.6>`
|
|
- Git Revision: :oe_git:`7e268c107bb0240d583d2c34e24a71e373382509 </bitbake/commit/?id=7e268c107bb0240d583d2c34e24a71e373382509>`
|
|
- Release Artefact: bitbake-7e268c107bb0240d583d2c34e24a71e373382509
|
|
- sha: c3e2899012358c95962c7a5c85cf98dc30c58eae0861c374124e96d9556bb901
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/bitbake-7e268c107bb0240d583d2c34e24a71e373382509.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/bitbake-7e268c107bb0240d583d2c34e24a71e373382509.tar.bz2
|
|
|
|
yocto-docs
|
|
|
|
- Repository Location: :yocto_git:`/yocto-docs`
|
|
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
|
|
- Tag: :yocto_git:`yocto-4.0.6 </yocto-docs/log/?h=yocto-4.0.6>`
|
|
- Git Revision: :yocto_git:`c10d65ef3bbdf4fe3abc03e3aef3d4ca8c2ad87f </yocto-docs/commit/?id=c10d65ef3bbdf4fe3abc03e3aef3d4ca8c2ad87f>`
|
|
|
|
|