Release notes for Yocto-4.3.1 (Nanbield)
Security Fixes in Yocto-4.3.1
- libsndfile1: Fix CVE-2022-33065 
- libxml2: Ignore CVE-2023-45322 
- linux-yocto/6.1: Ignore CVE-2020-27418, CVE-2023-31085, CVE-2023-34324, CVE-2023-39189, CVE-2023-39192, CVE-2023-39193, CVE-2023-39194, CVE-2023-4244, CVE-2023-42754, CVE-2023-42756, CVE-2023-44466, CVE-2023-4563, CVE-2023-45862, CVE-2023-45863, CVE-2023-45871, CVE-2023-45898, CVE-2023-4732, CVE-2023-5158, CVE-2023-5197 and CVE-2023-5345 
- linux-yocto/6.5: Ignore CVE-2020-27418, CVE-2023-1193, CVE-2023-39191, CVE-2023-39194, CVE-2023-40791, CVE-2023-44466, CVE-2023-45862, CVE-2023-45863, CVE-2023-4610 and CVE-2023-4732 
- openssl: Fix CVE-2023-5363 
- pixman: Ignore CVE-2023-37769 
- vim: Fix CVE-2023-46246 
- zlib: Ignore CVE-2023-45853 
Fixes in Yocto-4.3.1
- baremetal-helloworld: Pull in fix for race condition on x86-64 
- base: Ensure recipes using mercurial-native have certificates 
- bb-matrix-plot.sh: Show underscores correctly in labels 
- bin_package.bbclass: revert “Inhibit the default dependencies” 
- bitbake: SECURITY.md: add file 
- brief-yoctoprojectqs: use new CDN mirror for sstate 
- bsp-guide: bsp.rst: update beaglebone example 
- bsp-guide: bsp: skip Intel machines no longer supported in Poky 
- build-appliance-image: Update to nanbield head revision 
- contributor-guide: add patchtest section 
- contributor-guide: clarify patchtest usage 
- cve-check: don’t warn if a patch is remote 
- cve-check: slightly more verbose warning when adding the same package twice 
- cve-check: sort the package list in the JSON report 
- dev-manual: add security team processes 
- dev-manual: extend the description of CVE patch preparation 
- dev-manual: layers: Add notes about layer.conf 
- dev-manual: new-recipe.rst: add missing parenthesis to “Patching Code” section 
- dev-manual: start.rst: remove obsolete reference 
- dev-manual: wic: update “wic list images” output 
- docs: add support for nanbield (4.3) release 
- documentation.conf: drop SERIAL_CONSOLES_CHECK 
- ell: Upgrade to 0.59 
- glib-2.0: Remove unnecessary assignement 
- goarch: Move Go architecture mapping to a library 
- kernel-arch: drop CCACHE from KERNEL_STRIP definition 
- kernel.bbclass: Use strip utility used for kernel build in do_package 
- layer.conf: Switch layer to nanbield series only 
- libsdl2: upgrade to 2.28.4 
- linux-yocto: make sure the pahole-native available before do_kernel_configme 
- llvm: Upgrade to 17.0.3 
- machine: drop obsolete SERIAL_CONSOLES_CHECK 
- manuals: correct “yocto-linux” by “linux-yocto” 
- manuals: improve description of CVE_STATUS and CVE_STATUS_GROUPS 
- manuals: Remove references to apm in MACHINE_FEATURES 
- manuals: update linux-yocto append examples 
- manuals: update list of supported machines 
- migration-4.3: additional migration items 
- migration-4.3: adjustments to existing text 
- migration-4.3: remove some unnecessary items 
- migration-guides: QEMU_USE_SLIRP variable removed 
- migration-guides: add BitBake changes 
- migration-guides: add debian 12 to newly supported distros 
- migration-guides: add kernel notes 
- migration-guides: add testing notes 
- migration-guides: add utility notes 
- migration-guides: edgerouter machine removed 
- migration-guides: enabling SPDX only for Poky, not a global default 
- migration-guides: fix empty sections 
- migration-guides: further updates for 4.3 
- migration-guides: further updates for release 4.3 
- migration-guides: git recipes reword 
- migration-guides: mention CDN 
- migration-guides: mention LLVM 17 
- migration-guides: mention runqemu change in serial port management 
- migration-guides: packaging changes 
- migration-guides: remove SERIAL_CONSOLES_CHECK 
- migration-guides: remove non-notable change 
- migration-guides: updates for 4.3 
- oeqa/selftest/debuginfod: improve selftest 
- oeqa/selftest/devtool: abort if a local workspace already exist 
- oeqa/ssh: Handle SSHCall timeout error code 
- openssl: Upgrade to 3.1.4 
- overview-manual: concepts: Add Bitbake Tasks Map 
- patchtest-send-results: add In-Reply-To 
- patchtest-send-results: check max line length, simplify responses 
- patchtest-send-results: fix sender parsing 
- patchtest-send-results: improve subject line 
- patchtest-send-results: send results to submitter 
- patchtest/selftest: add XSKIP, update test files 
- patchtest: disable merge test 
- patchtest: fix lic_files_chksum test regex 
- patchtest: make pylint tests compatible with 3.x 
- patchtest: reduce checksum test output length 
- patchtest: remove test for CVE tag in mbox 
- patchtest: remove unused imports 
- patchtest: rework license checksum tests 
- patchtest: shorten test result outputs 
- patchtest: simplify test directory structure 
- patchtest: skip merge test if not targeting master 
- patchtest: test regardless of mergeability 
- perl: fix intermittent test failure 
- poky.conf: bump version for 4.3.1 release 
- profile-manual: aesthetic cleanups 
- ref-manual: Add documentation for the unimplemented-ptest QA warning 
- ref-manual: Fix PACKAGECONFIG term and add an example 
- ref-manual: Warn about COMPATIBLE_MACHINE skipping native recipes 
- ref-manual: add systemd-resolved to distro features 
- ref-manual: classes: explain cml1 class name 
- ref-manual: document KERNEL_LOCALVERSION 
- ref-manual: document KERNEL_STRIP 
- ref-manual: document MESON_TARGET 
- ref-manual: document cargo_c class 
- ref-manual: remove semicolons from - *PROCESS_COMMANDvariables
- ref-manual: update SDK_NAME variable documentation 
- ref-manual: variables: add RECIPE_MAINTAINER 
- ref-manual: variables: add RECIPE_SYSROOT and RECIPE_SYSROOT_NATIVE 
- ref-manual: variables: add TOOLCHAIN_OPTIONS variable 
- ref-manual: variables: add example for SYSROOT_DIRS variable 
- ref-manual: variables: document OEQA_REPRODUCIBLE_TEST_PACKAGE 
- ref-manual: variables: mention new CDN for SSTATE_MIRRORS 
- ref-manual: variables: provide no-match example for COMPATIBLE_MACHINE 
- ref-manual: variables: remove SERIAL_CONSOLES_CHECK 
- release-notes-4.3: add CVEs, recipe upgrades, license changes, contributors 
- release-notes-4.3: add Repositories / Downloads section 
- release-notes-4.3: feature additions 
- release-notes-4.3: fix some typos 
- release-notes-4.3: move new classes to Rust section 
- release-notes-4.3: remove the Distribution section 
- release-notes-4.3: tweaks to existing text 
- sdk-manual: appendix-obtain: improve and update descriptions 
- test-manual: reproducible-builds: stop mentioning LTO bug 
- vim: Improve locale handling 
- vim: Upgrade to 9.0.2068 
- vim: use upstream generated .po files 
Known Issues in Yocto-4.3.1
- N/A 
Contributors to Yocto-4.3.1
- Alejandro Hernandez Samaniego 
- Alex Stewart 
- Archana Polampalli 
- Arne Schwerdt 
- BELHADJ SALEM Talel 
- Dmitry Baryshkov 
- Eero Aaltonen 
- Joshua Watt 
- Julien Stephan 
- Jérémy Rosen 
- Khem Raj 
- Lee Chee Yang 
- Marta Rybczynska 
- Max Krummenacher 
- Michael Halstead 
- Michael Opdenacker 
- Paul Eggleton 
- Peter Kjellerstedt 
- Peter Marko 
- Quentin Schulz 
- Richard Purdie 
- Robert P. J. Day 
- Ross Burton 
- Rouven Czerwinski 
- Steve Sakoman 
- Trevor Gamblin 
- Wang Mingyu 
- William Lyu 
- Xiangyu Chen 
- luca fancellu 
Repositories / Downloads for Yocto-4.3.1
poky
- Repository Location: https://git.yoctoproject.org/poky 
- Branch: nanbield 
- Tag: yocto-4.3.1 
- Git Revision: bf9f2f6f60387b3a7cd570919cef6c4570edcb82 
- Release Artefact: poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82 
- sha: 9b4351159d728fec2b63a50f1ac15edc412e2d726e9180a40afc06051fadb922 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2 
openembedded-core
- Repository Location: https://git.openembedded.org/openembedded-core 
- Branch: nanbield 
- Tag: yocto-4.3.1 
- Git Revision: cce77e8e79c860f4ef0ac4a86b9375bf87507360 
- Release Artefact: oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360 
- sha: e6cde08e7c549f57a67d833a36cdb942648fba81558dc8b0e65332d2a2c023cc 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2 
meta-mingw
- Repository Location: https://git.yoctoproject.org/meta-mingw 
- Branch: nanbield 
- Tag: yocto-4.3.1 
- Git Revision: 49617a253e09baabbf0355bc736122e9549c8ab2 
- Release Artefact: meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2 
- sha: 2225115b73589cdbf1e491115221035c6a61679a92a93b2a3cf761ff87bf4ecc 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2 
bitbake
- Repository Location: https://git.openembedded.org/bitbake 
- Branch: 2.6 
- Tag: yocto-4.3.1 
- Git Revision: 936fcec41efacc4ce988c81882a9ae6403702bea 
- Release Artefact: bitbake-936fcec41efacc4ce988c81882a9ae6403702bea 
- sha: efbdd5fe7f29227a3fd26d6a08a368bf8215083a588b4d23f3adf35044897520 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2 
yocto-docs
- Repository Location: https://git.yoctoproject.org/yocto-docs 
- Branch: nanbield 
- Tag: yocto-4.3.1 
- Git Revision: 6b98a6164263298648e89b5a5ae1260a58f1bb35