Release notes for Yocto-4.0.16 (Kirkstone)
Security Fixes in Yocto-4.0.16
cpio: Fix CVE-2023-7207
curl: Revert “curl: Backport fix CVE-2023-32001”
curl: Fix CVE-2023-46218
dropbear:Fix CVE-2023-48795
ffmpeg: Fix CVE-2022-3964 and CVE-2022-3965
ghostscript: Fix CVE-2023-46751
gnutls: Fix CVE-2024-0553 and CVE-2024-0567
go: Fix CVE-2023-39326
openssh: Fix CVE-2023-48795, CVE-2023-51384 and CVE-2023-51385
openssl: Fix CVE-2023-6129 and CVE-2023-6237
pam: Fix CVE-2024-22365
perl: Fix CVE-2023-47038
qemu: Fix CVE-2023-5088
sqlite3: Fix CVE-2023-7104
systemd: Fix CVE-2023-7008
tiff: Fix CVE-2023-6228
xserver-xorg: Fix CVE-2023-6377, CVE-2023-6478, CVE-2023-6816, CVE-2024-0229, CVE-2024-0408, CVE-2024-0409, CVE-2024-21885 and CVE-2024-21886
zlib: Ignore CVE-2023-6992
Fixes in Yocto-4.0.16
bitbake: asyncrpc: Add context manager API
bitbake: data: Add missing dependency handling of remove operator
bitbake: lib/bb: Add workaround for libgcc issues with python 3.8 and 3.9
bitbake: toastergui: verify that an existing layer path is given
build-appliance-image: Update to kirkstone head revision
contributor-guide: add License-Update tag
contributor-guide: fix command option
contributor-guide: use “apt” instead of “aptitude”
cpio: upgrade to 2.14
cve-update-nvd2-native: faster requests with API keys
cve-update-nvd2-native: increase the delay between subsequent request failures
cve-update-nvd2-native: make number of fetch attemtps configurable
cve-update-nvd2-native: remove unused variable CVE_SOCKET_TIMEOUT
dev-manual: Discourage the use of SRC_URI[md5sum]
dev-manual: layers: update link to YP Compatible form
dev-manual: runtime-testing: fix test module name
dev-manual: start.rst: update use of Download page
docs:what-i-wish-id-known.rst: fix URL
docs: document VSCode extension
docs:brief-yoctoprojectqs:index.rst: align variable order with default local.conf
docs:migration-guides: add release notes for 4.0.15
docs:migration-guides: release 3.5 is actually 4.0
elfutils: Disable stringop-overflow warning for build host
externalsrc: Ensure SRCREV is processed before accessing SRC_URI
linux-firmware: upgrade to 20231030
manuals: Add CONVERSION_CMD definition
manuals: Add UBOOT_BINARY, extend UBOOT_CONFIG
perl: upgrade to 5.34.3
poky.conf: bump version for 4.0.16
pybootchartgui: fix 2 SyntaxWarnings
python3-ptest: skip test_storlines
ref-manual: Fix reference to MIRRORS/PREMIRRORS defaults
ref-manual: classes: remove insserv bbclass
ref-manual: releases.svg: update nanbield release status
ref-manual: resources: sync with master branch
ref-manual: update tested and supported distros
test-manual: add links to python unittest
test-manual: add or improve hyperlinks
test-manual: explicit or fix file paths
test-manual: resource updates
test-manual: text and formatting fixes
test-manual: use working example
testimage: Exclude wtmp from target-dumper commands
testimage: drop target_dumper, host_dumper, and monitor_dumper
tzdata: Upgrade to 2023d
Known Issues in Yocto-4.0.16
N/A
Contributors to Yocto-4.0.16
Aatir Manzur
Archana Polampalli
Dhairya Nagodra
Dmitry Baryshkov
Enguerrand de Ribaucourt
Hitendra Prajapati
Insu Park
Joshua Watt
Justin Bronder
Jörg Sommer
Khem Raj
Lee Chee Yang
mark.yang
Marta Rybczynska
Martin Jansa
Maxin B. John
Michael Opdenacker
Paul Barker
Peter Kjellerstedt
Peter Marko
Poonam Jadhav
Richard Purdie
Shubham Kulkarni
Simone Weiß
Soumya Sambu
Sourav Pramanik
Steve Sakoman
Trevor Gamblin
Vijay Anusuri
Vivek Kumbhar
Yoann Congal
Yogita Urade
Repositories / Downloads for Yocto-4.0.16
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: kirkstone
Tag: yocto-4.0.16
Git Revision: 54af8c5e80ebf63707ef4e51cc9d374f716da603
Release Artefact: poky-54af8c5e80ebf63707ef4e51cc9d374f716da603
sha: a53ec3a661cf56ca40c0fbf1500288c2c20abe94896d66a572bc5ccf5d92e9d6
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/poky-54af8c5e80ebf63707ef4e51cc9d374f716da603.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/poky-54af8c5e80ebf63707ef4e51cc9d374f716da603.tar.bz2
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: kirkstone
Tag: yocto-4.0.16
Git Revision: a744a897f0ea7d34c31c024c13031221f9a85f24
Release Artefact: oecore-a744a897f0ea7d34c31c024c13031221f9a85f24
sha: 8c2bc9487597b0caa9f5a1d72b18cfcd1ddc7e6d91f0f051313563d6af95aeec
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/oecore-a744a897f0ea7d34c31c024c13031221f9a85f24.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/oecore-a744a897f0ea7d34c31c024c13031221f9a85f24.tar.bz2
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: kirkstone
Tag: yocto-4.0.16
Git Revision: f6b38ce3c90e1600d41c2ebb41e152936a0357d7
Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7
sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
meta-gplv2
Repository Location: https://git.yoctoproject.org/meta-gplv2
Branch: kirkstone
Tag: yocto-4.0.16
Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.0
Tag: yocto-4.0.16
Git Revision: ee090484cc25d760b8c20f18add17b5eff485b40
Release Artefact: bitbake-ee090484cc25d760b8c20f18add17b5eff485b40
sha: 479e3a57ae9fbc2aa95292a7554caeef113bbfb28c226ed19547b8dde1c95314
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.16/bitbake-ee090484cc25d760b8c20f18add17b5eff485b40.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.16/bitbake-ee090484cc25d760b8c20f18add17b5eff485b40.tar.bz2
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: kirkstone
Tag: yocto-4.0.16
Git Revision: aba67b58711019a6ba439b2b77337f813ed799ac