Release notes for Yocto-4.0.15 (Kirkstone)

Security Fixes in Yocto-4.0.15

avahi: Fix CVE-2023-1981, CVE-2023-38469, CVE-2023-38470, CVE-2023-38471, CVE-2023-38472 and CVE-2023-38473
binutils: Fix CVE-2022-47007, CVE-2022-47010 and CVE-2022-48064
bluez5: Fix CVE-2023-45866
ghostscript: Ignore GhostPCL CVE-2023-38560
gnutls: Fix CVE-2023-5981
go: Ignore CVE-2023-45283 and CVE-2023-45284
grub: Fix CVE-2023-4692 and CVE-2023-4693
gstreamer1.0-plugins-bad: Fix CVE-2023-44429
libsndfile: Fix CVE-2022-33065
libwebp: Fix CVE-2023-4863
openssl: Fix CVE-2023-5678
python3-cryptography: Fix CVE-2023-49083
qemu: Fix CVE-2023-1544
sudo: CVE-2023-42456 and CVE-2023-42465
tiff: Fix CVE-2023-41175
vim: Fix CVE-2023-46246, CVE-2023-48231, CVE-2023-48232, CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237 and CVE-2023-48706
xserver-xorg: Fix CVE-2023-5367 and CVE-2023-5380
xwayland: Fix CVE-2023-5367

Fixes in Yocto-4.0.15

bash: changes to SIGINT handler while waiting for a child
bitbake: Fix disk space monitoring on cephfs
bitbake: bitbake-getvar: Make –quiet work with –recipe
bitbake: runqueue.py: fix PSI check logic
bitbake: runqueue: Add pressure change logging
bitbake: runqueue: convert deferral messages from bb.note to bb.debug
bitbake: runqueue: fix PSI check calculation
bitbake: runqueue: show more pressure data
bitbake: runqueue: show number of currently running bitbake threads when pressure changes
bitbake: tinfoil: Do not fail when logging is disabled and full config is used
build-appliance-image: Update to kirkstone head revision
cve-check: don’t warn if a patch is remote
cve-check: slightly more verbose warning when adding the same package twice
cve-check: sort the package list in the JSON report
cve-exclusion_5.10.inc: update for 5.10.202
go: Fix issue in DNS resolver
goarch: Move Go architecture mapping to a library
gstreamer1.0-plugins-base: enable glx/opengl support
linux-yocto/5.10: update to v5.10.202
manuals: update class references
migration-guide: add release notes for 4.0.14
native: Clear TUNE_FEATURES/ABIEXTENSION
openssh: drop sudo from ptest dependencies
overview-manual: concepts: Add Bitbake Tasks Map
poky.conf: bump version for 4.0.15
python3-jinja2: Fixed ptest result output as per the standard
ref-manual: classes: explain cml1 class name
ref-manual: update SDK_NAME variable documentation
ref-manual: variables: add RECIPE_MAINTAINER
ref-manual: variables: document OEQA_REPRODUCIBLE_* variables
ref-manual: variables: mention new CDN for SSTATE_MIRRORS
rust-common: Set llvm-target correctly for cross SDK targets
rust-cross-canadian: Fix ordering of target json config generation
rust-cross/rust-common: Merge arm target handling code to fix cross-canadian
rust-cross: Simplfy the rust_gen_target calls
rust-llvm: Allow overriding LLVM target archs
sdk-manual: extensible.rst: remove instructions for using SDK functionality directly in a yocto build
sudo: upgrade to 1.9.15p2
systemtap_git: fix used uninitialized error
vim: Improve locale handling
vim: Upgrade to 9.0.2130
vim: use upstream generated .po files