Release notes for 4.0.1 (kirkstone)

Security Fixes in 4.0.1

Fixes in 4.0.1

  • abi_version/sstate: Bump hashequiv and sstate versions due to git changes

  • apt: add apt selftest to test signed package feeds

  • apt: upgrade 2.4.4 -> 2.4.5

  • arch-armv8-2a.inc: fix a typo in TUNEVALID variable

  • babeltrace: Disable warnings as errors

  • base: Avoid circular references to our own scripts

  • base: Drop git intercept

  • build-appliance-image: Update to kirkstone head revision

  • build-appliance: Switch to kirkstone branch

  • buildtools-tarball: Only add cert envvars if certs are included

  • busybox: Use base_bindir instead of hardcoding /bin path

  • cases/buildepoxy.py: fix typo

  • create-spdx: delete virtual/kernel dependency to fix FreeRTOS build

  • create-spdx: fix error when symlink cannot be created

  • cve-check: add JSON format to summary output

  • cve-check: fix symlinks where link and output path are equal

  • cve-check: no need to depend on the fetch task

  • cve-update-db-native: let the user to drive the update interval

  • cve-update-db-native: update the CVE database once a day only

  • cve_check: skip remote patches that haven’t been fetched when searching for CVE tags

  • dev-manual: add command used to add the signed-off-by line.

  • devshell.bbclass: Allow devshell & pydevshell to use the network

  • docs: conf.py: fix cve extlinks caption for sphinx <4.0

  • docs: migration-guides: migration-3.4: mention that hardcoded password are supported if hashed

  • docs: migration-guides: release-notes-4.0: fix risc-v typo

  • docs: migration-guides: release-notes-4.0: replace kernel placeholder with correct recipe name

  • docs: ref-manual: variables: add hashed password example in EXTRA_USERS_PARAMS

  • docs: set_versions.py: add information about obsolescence of a release

  • docs: set_versions.py: fix latest release of a branch being shown twice in switchers.js

  • docs: set_versions.py: fix latest version of an active release shown as obsolete

  • docs: set_versions.py: mark as obsolete only branches and old tags from obsolete releases

  • docs: sphinx-static: switchers.js.in: do not mark branches as outdated

  • docs: sphinx-static: switchers.js.in: fix broken switcher for branches

  • docs: sphinx-static: switchers.js.in: improve obsolete version detection

  • docs: sphinx-static: switchers.js.in: remove duplicate for outdated versions

  • docs: sphinx-static: switchers.js.in: rename all_versions to switcher_versions

  • docs: update Bitbake objects.inv location for master branch

  • documentation/brief-yoctoprojectqs: add directory for local.conf

  • gcompat: Fix build when usrmerge distro feature is enabled

  • git: correct license

  • git: upgrade 2.35.2 -> 2.35.3

  • glib: upgrade 2.72.0 -> 2.72.1

  • glibc: ptest: Fix glibc-tests package issue

  • gnupg: Disable FORTIFY_SOURCES on mips

  • go.bbclass: disable the use of the default configuration file

  • gstreamer1.0-plugins-bad: drop patch

  • gstreamer1.0-plugins-good: Fix libsoup dependency

  • gstreamer1.0: Minor documentation addition

  • install/devshell: Introduce git intercept script due to fakeroot issues

  • kernel-yocto.bbclass: Fixup do_kernel_configcheck usage of KMETA

  • libc-glibc: Use libxcrypt to provide virtual/crypt

  • libgit2: upgrade 1.4.2 -> 1.4.3

  • libsoup: upgrade 3.0.5 -> 3.0.6

  • libusb1: upgrade 1.0.25 -> 1.0.26

  • linux-firmware: correct license for ar3k firmware

  • linux-firmware: upgrade 20220310 -> 20220411

  • linux-yocto/5.10: base: enable kernel crypto userspace API

  • linux-yocto/5.10: update to v5.10.112

  • linux-yocto/5.15: arm: poky-tiny cleanup and fixes

  • linux-yocto/5.15: base: enable kernel crypto userspace API

  • linux-yocto/5.15: fix -standard kernel build issue

  • linux-yocto/5.15: fix ppc boot

  • linux-yocto/5.15: fix qemuarm graphical boot

  • linux-yocto/5.15: kasan: fix BUG: sleeping function called from invalid context

  • linux-yocto/5.15: netfilter: conntrack: avoid useless indirection during conntrack destruction

  • linux-yocto/5.15: update to v5.15.36

  • linux-yocto: enable powerpc-debug fragment

  • mdadm: Drop clang specific cflags

  • migration-3.4: add missing entry on EXTRA_USERS_PARAMS

  • migration-guides: add release notes for 4.0

  • migration-guides: complete migration guide for 4.0

  • migration-guides: release-notes-4.0: mention LTS release

  • migration-guides: release-notes-4.0: update ‘Repositories / Downloads’ section

  • migration-guides: stop including documents with “.. include”

  • musl: Fix build when usrmerge distro feature is enabled

  • ncurses: use COPYING file

  • neard: Switch SRC_URI to git repo

  • oeqa/selftest: add test for git working correctly inside pseudo

  • openssl: minor security upgrade 3.0.2 -> 3.0.3

  • package.bbclass: Prevent perform_packagecopy from removing /sysroot-only

  • package: Ensure we track whether PRSERV was active or not

  • package_manager: fix missing dependency on gnupg when signing deb package feeds

  • poky-tiny: enable qemuarmv5/qemuarm64 and cleanups

  • poky.conf: bump version for 4.0.1 release

  • qemu.bbclass: Extend ppc/ppc64 extra options

  • qemuarm64: use virtio pci interfaces

  • qemuarmv5: use arm-versatile-926ejs KMACHINE

  • ref-manual: Add XZ_THREADS and XZ_MEMLIMIT

  • ref-manual: add KERNEL_DEBUG_TIMESTAMPS

  • ref-manual: add ZSTD_THREADS

  • ref-manual: add a note about hard-coded passwords

  • ref-manual: add empty-dirs QA check and QA_EMPTY_DIRS*

  • ref-manual: add mention of vendor filtering to CVE_PRODUCT

  • ref-manual: mention wildcarding support in INCOMPATIBLE_LICENSE

  • releases: update for yocto 4.0

  • rootfs-postcommands: fix symlinks where link and output path are equal

  • ruby: upgrade 3.1.1 -> 3.1.2

  • sanity: skip make 4.2.1 warning for debian

  • scripts/git: Ensure we don’t have circular references

  • scripts: Make git intercept global

  • seatd: Disable overflow warning as error on ppc64/musl

  • selftest/lic_checksum: Add test for filename containing space

  • set_versions: update for 4.0 release

  • staging: Ensure we filter out ourselves

  • strace: fix ptest failure in landlock

  • subversion: upgrade to 1.14.2

  • systemd-boot: remove outdated EFI_LD comment

  • systemtap: Fix build with gcc-12

  • terminal.py: Restore error output from Terminal

  • u-boot: Correct the SRC_URI

  • u-boot: Inherit pkgconfig

  • update_udev_hwdb: fix multilib issue with systemd

  • util-linux: Create u-a symlink for findfs utility

  • virgl: skip headless test on alma 8.6

  • webkitgtk: adjust patch status

  • wic: do not use PARTLABEL for msdos partition tables

  • wireless-regdb: upgrade 2022.02.18 -> 2022.04.08

  • xserver-xorg: Fix build with gcc12

  • yocto-bsps: update to v5.15.36

Contributors to 4.0.1

  • Abongwa Amahnui Bonalais

  • Alexander Kanavin

  • Bruce Ashfield

  • Carlos Rafael Giani

  • Chen Qi

  • Davide Gardenal

  • Dmitry Baryshkov

  • Ferry Toth

  • Henning Schild

  • Jon Mason

  • Justin Bronder

  • Kai Kang

  • Khem Raj

  • Konrad Weihmann

  • Lee Chee Yang

  • Marta Rybczynska

  • Martin Jansa

  • Matt Madison

  • Michael Halstead

  • Michael Opdenacker

  • Naveen Saini

  • Nicolas Dechesne

  • Paul Eggleton

  • Paul Gortmaker

  • Paulo Neves

  • Peter Kjellerstedt

  • Peter Marko

  • Pgowda

  • Portia

  • Quentin Schulz

  • Rahul Kumar

  • Richard Purdie

  • Robert Joslyn

  • Robert Yang

  • Roland Hieber

  • Ross Burton

  • Russ Dill

  • Steve Sakoman

  • Wang Mingyu

  • Zheng Ruoqin

Repositories / Downloads for 4.0.1

poky

openembedded-core

meta-mingw

meta-gplv2

bitbake

yocto-docs