Release notes for Yocto-5.0.4 (Scarthgap)
Security Fixes in Yocto-5.0.4
- apr: Fix CVE-2023-49582 
- curl: Ignore CVE-2024-32928 
- curl: Fix CVE-2024-7264 
- expat: Fix CVE-2024-45490, CVE-2024-45491 and CVE-2024-45492 
- ffmpeg: Fix CVE-2023-50008 and CVE-2024-32230 
- libpcap: Fix CVE-2023-7256 and CVE-2024-8006 
- libyaml: Ignore CVE-2024-35325 and CVE-2024-35326 
- openssl: Fix CVE-2024-5535 and CVE-2024-6119 
- python3-certifi: Fix CVE-2024-39689 
- python3-setuptools: Fix CVE-2024-6345 
- python3: Fix CVE-2024-6232, CVE-2024-7592, CVE-2024-8088 and CVE-2024-27034 
- qemu: Fix CVE-2024-4467 and CVE-2024-7409 
- ruby: Fix CVE-2024-27282 
- tiff: Fix CVE-2024-7006 
- vim: Fix CVE-2024-41957, CVE-2024-41965, CVE-2024-43374, CVE-2024-43790 and CVE-2024-43802 
Fixes in Yocto-5.0.4
- apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch 
- apr: upgrade to 1.7.5 
- bind: Fix build with the httpstats package config enabled 
- bitbake: data_smart: Improve performance for VariableHistory 
- bluez5: remove redundant patch for MAX_INPUT 
- build-appliance-image: Update to scarthgap head revision 
- buildhistory: Fix intermittent package file list creation 
- buildhistory: Restoring files from preserve list 
- buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage 
- busybox: Fix cut with “-s” flag 
- create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc 
- cups: upgrade to 2.4.10 
- dejagnu: Fix LICENSE (change to GPL-3.0-only) 
- doc: features: describe distribution feature pni-name 
- doc: features: remove duplicate word in distribution feature ext2 
- expat: upgrade to 2.6.3 
- expect-native: fix do_compile failure with gcc-14 
- gcc: Fix spurious ‘/’ in GLIBC_DYNAMIC_LINKER on microblaze 
- gcr: Fix LICENSE (change to LGPL-2.0-only) 
- glibc: fix fortran header file conflict for arm 
- go: upgrade to 1.22.6 
- gstreamer1.0: disable flaky baseparser tests 
- image_types.bbclass: Use –force also with lz4,lzop 
- initramfs-framework: fix typos 
- iw: Fix LICENSE (change to ISC) 
- libadwaita: upgrade to 1.5.2 
- libcap-ng: update SRC_URI 
- libdnf: upgrade to 0.73.2 
- libedit: Make docs generation deterministic 
- libgfortran.inc: fix nativesdk-libgfortran dependencies 
- librsvg: don’t try to run target code at build time 
- linux-firmware: add a package for ath12k firmware 
- llvm: Enable libllvm for native build 
- maintainers.inc: add maintainer for python(-setuptools, -smmap, -subunit, -testtools) 
- mc: fix source URL 
- migration-guide: add release notes for 4.0.20 and 5.0.3 
- oeqa/postactions: fix exception handling 
- oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM) 
- oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems 
- oeqa/runtime/ssh: check for all errors at the end 
- oeqa/runtime/ssh: increase the number of attempts 
- oeqa/selftest/reproducibile: Explicitly list virtual targets 
- oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies 
- openssh: add backported header file include 
- openssl: upgrade to 3.2.3 
- os-release: Fix VERSION_CODENAME in case it is empty 
- poky.conf: bump version for 5.0.4 
- populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported. 
- python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc 
- python3-pycryptodome(x): use python_setuptools_build_meta build class 
- python3: upgrade to 3.12.6 
- python3: skip readline limited history tests 
- qemu: backport patches to fix riscv64 build failure 
- qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath 
- ref-manual: fix typo and move SYSROOT_DIRS example 
- ruby: Make docs generation deterministic 
- systemd: Mitigate /var/log type mismatch issue 
- systemd: Mitigate /var/tmp type mismatch issue 
- tiff: Fix LICENSE (change to libtiff) 
- u-boot.inc: Refactor do_* steps into functions that can be overridden 
- udev-extraconf: Add collect flag to mount 
- unzip: Fix LICENSE (change to Info-ZIP) 
- util-linux: Add PACKAGECONFIG option (libmount-mountfd-support) to mitigate rootfs remount error 
- vim: upgrade to 9.1.0698 
- weston-init: fix weston not starting when xwayland is enabled 
- wireless-regdb: upgrade to 2024.07.04 
- wpa-supplicant: upgrade to 2.11 
- xserver-xorg: mark CVE-2023-5574 as unpatched when xvfb enabled 
- yocto-uninative: Update to 4.6 for glibc 2.40 
- zip: Fix LICENSE (change to Info-ZIP) 
Known Issues in Yocto-5.0.4
- N/A 
Contributors to Yocto-5.0.4
- Alban Bedel 
- Alexander Kanavin 
- Alexis Lothoré 
- Archana Polampalli 
- Ashish Sharma 
- Bartosz Golaszewski 
- Benjamin Szőke 
- Changqing Li 
- Chen Qi 
- Colin McAllister 
- Daniel Semkowicz 
- Dmitry Baryshkov 
- Gauthier HADERER 
- Guðni Már Gilbert 
- Jon Mason 
- Jose Quaresma 
- Jörg Sommer 
- Kai Kang 
- Khem Raj 
- Lee Chee Yang 
- Mark Hatle 
- Martin Jansa 
- Matthias Pritschet 
- Michael Halstead 
- Mingli Yu 
- Niko Mauno 
- Pedro Ferreira 
- Peter Marko 
- Quentin Schulz 
- Richard Purdie 
- Robert Yang 
- Ross Burton 
- Ryan Eatmon 
- Siddharth Doshi 
- Simone Weiß 
- Soumya Sambu 
- Steve Sakoman 
- Trevor Gamblin 
- Ulrich Ölmann 
- Vijay Anusuri 
- Wang Mingyu 
- Weisser, Pascal.ext 
- Yogita Urade 
Repositories / Downloads for Yocto-5.0.4
poky
- Repository Location: https://git.yoctoproject.org/poky 
- Branch: scarthgap 
- Tag: yocto-5.0.4 
- Git Revision: 2034fc38eb4e63984d9bd6b260aa1bf95ce562e4 
- Release Artefact: poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4 
- sha: 697ed099793d6c86d5ffe590e96f99689bd28dcb2d4451dc4585496fa4a20400 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2 
openembedded-core
- Repository Location: https://git.openembedded.org/openembedded-core 
- Branch: scarthgap 
- Tag: yocto-5.0.4 
- Git Revision: f888dd911529a828820799a7a1b75dfd3a44847c 
- Release Artefact: oecore-f888dd911529a828820799a7a1b75dfd3a44847c 
- sha: 93cb4c3c8e0f77edab20814d155847dc3452c6b083e3dd9c7a801e80a7e4d228 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2 
meta-mingw
- Repository Location: https://git.yoctoproject.org/meta-mingw 
- Branch: scarthgap 
- Tag: yocto-5.0.4 
- Git Revision: acbba477893ef87388effc4679b7f40ee49fc852 
- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 
- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 
bitbake
- Repository Location: https://git.openembedded.org/bitbake 
- Branch: 2.8 
- Tag: yocto-5.0.4 
- Git Revision: d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3 
- Release Artefact: bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3 
- sha: d873f4d3a471d26680dc39200d8f3851a6863f15daa9bed978ba31b930f9a1c1 
- Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2 
yocto-docs
- Repository Location: https://git.yoctoproject.org/yocto-docs 
- Branch: scarthgap 
- Tag: yocto-5.0.4 
- Git Revision: d71081dd14a9d75ace4d1c62472374f37b4a888d