Release notes for Yocto-4.3.1 (Nanbield)
Security Fixes in Yocto-4.3.1
libsndfile1: Fix CVE-2022-33065
libxml2: Ignore CVE-2023-45322
linux-yocto/6.1: Ignore CVE-2020-27418, CVE-2023-31085, CVE-2023-34324, CVE-2023-39189, CVE-2023-39192, CVE-2023-39193, CVE-2023-39194, CVE-2023-4244, CVE-2023-42754, CVE-2023-42756, CVE-2023-44466, CVE-2023-4563, CVE-2023-45862, CVE-2023-45863, CVE-2023-45871, CVE-2023-45898, CVE-2023-4732, CVE-2023-5158, CVE-2023-5197 and CVE-2023-5345
linux-yocto/6.5: Ignore CVE-2020-27418, CVE-2023-1193, CVE-2023-39191, CVE-2023-39194, CVE-2023-40791, CVE-2023-44466, CVE-2023-45862, CVE-2023-45863, CVE-2023-4610 and CVE-2023-4732
openssl: Fix CVE-2023-5363
pixman: Ignore CVE-2023-37769
vim: Fix CVE-2023-46246
zlib: Ignore CVE-2023-45853
Fixes in Yocto-4.3.1
baremetal-helloworld: Pull in fix for race condition on x86-64
base: Ensure recipes using mercurial-native have certificates
bb-matrix-plot.sh: Show underscores correctly in labels
bin_package.bbclass: revert “Inhibit the default dependencies”
bitbake: SECURITY.md: add file
brief-yoctoprojectqs: use new CDN mirror for sstate
bsp-guide: bsp.rst: update beaglebone example
bsp-guide: bsp: skip Intel machines no longer supported in Poky
build-appliance-image: Update to nanbield head revision
contributor-guide: add patchtest section
contributor-guide: clarify patchtest usage
cve-check: don’t warn if a patch is remote
cve-check: slightly more verbose warning when adding the same package twice
cve-check: sort the package list in the JSON report
dev-manual: add security team processes
dev-manual: extend the description of CVE patch preparation
dev-manual: layers: Add notes about layer.conf
dev-manual: new-recipe.rst: add missing parenthesis to “Patching Code” section
dev-manual: start.rst: remove obsolete reference
dev-manual: wic: update “wic list images” output
docs: add support for nanbield (4.3) release
documentation.conf: drop SERIAL_CONSOLES_CHECK
ell: Upgrade to 0.59
glib-2.0: Remove unnecessary assignement
goarch: Move Go architecture mapping to a library
kernel-arch: drop CCACHE from KERNEL_STRIP definition
kernel.bbclass: Use strip utility used for kernel build in do_package
layer.conf: Switch layer to nanbield series only
libsdl2: upgrade to 2.28.4
linux-yocto: make sure the pahole-native available before do_kernel_configme
llvm: Upgrade to 17.0.3
machine: drop obsolete SERIAL_CONSOLES_CHECK
manuals: correct “yocto-linux” by “linux-yocto”
manuals: improve description of CVE_STATUS and CVE_STATUS_GROUPS
manuals: Remove references to apm in MACHINE_FEATURES
manuals: update linux-yocto append examples
manuals: update list of supported machines
migration-4.3: additional migration items
migration-4.3: adjustments to existing text
migration-4.3: remove some unnecessary items
migration-guides: QEMU_USE_SLIRP variable removed
migration-guides: add BitBake changes
migration-guides: add debian 12 to newly supported distros
migration-guides: add kernel notes
migration-guides: add testing notes
migration-guides: add utility notes
migration-guides: edgerouter machine removed
migration-guides: enabling SPDX only for Poky, not a global default
migration-guides: fix empty sections
migration-guides: further updates for 4.3
migration-guides: further updates for release 4.3
migration-guides: git recipes reword
migration-guides: mention CDN
migration-guides: mention LLVM 17
migration-guides: mention runqemu change in serial port management
migration-guides: packaging changes
migration-guides: remove SERIAL_CONSOLES_CHECK
migration-guides: remove non-notable change
migration-guides: updates for 4.3
oeqa/selftest/debuginfod: improve selftest
oeqa/selftest/devtool: abort if a local workspace already exist
oeqa/ssh: Handle SSHCall timeout error code
openssl: Upgrade to 3.1.4
overview-manual: concepts: Add Bitbake Tasks Map
patchtest-send-results: add In-Reply-To
patchtest-send-results: check max line length, simplify responses
patchtest-send-results: fix sender parsing
patchtest-send-results: improve subject line
patchtest-send-results: send results to submitter
patchtest/selftest: add XSKIP, update test files
patchtest: disable merge test
patchtest: fix lic_files_chksum test regex
patchtest: make pylint tests compatible with 3.x
patchtest: reduce checksum test output length
patchtest: remove test for CVE tag in mbox
patchtest: remove unused imports
patchtest: rework license checksum tests
patchtest: shorten test result outputs
patchtest: simplify test directory structure
patchtest: skip merge test if not targeting master
patchtest: test regardless of mergeability
perl: fix intermittent test failure
poky.conf: bump version for 4.3.1 release
profile-manual: aesthetic cleanups
ref-manual: Add documentation for the unimplemented-ptest QA warning
ref-manual: Fix PACKAGECONFIG term and add an example
ref-manual: Warn about COMPATIBLE_MACHINE skipping native recipes
ref-manual: add systemd-resolved to distro features
ref-manual: classes: explain cml1 class name
ref-manual: document KERNEL_LOCALVERSION
ref-manual: document KERNEL_STRIP
ref-manual: document MESON_TARGET
ref-manual: document cargo_c class
ref-manual: remove semicolons from
*PROCESS_COMMAND
variablesref-manual: update SDK_NAME variable documentation
ref-manual: variables: add RECIPE_MAINTAINER
ref-manual: variables: add RECIPE_SYSROOT and RECIPE_SYSROOT_NATIVE
ref-manual: variables: add TOOLCHAIN_OPTIONS variable
ref-manual: variables: add example for SYSROOT_DIRS variable
ref-manual: variables: document OEQA_REPRODUCIBLE_TEST_PACKAGE
ref-manual: variables: mention new CDN for SSTATE_MIRRORS
ref-manual: variables: provide no-match example for COMPATIBLE_MACHINE
ref-manual: variables: remove SERIAL_CONSOLES_CHECK
release-notes-4.3: add CVEs, recipe upgrades, license changes, contributors
release-notes-4.3: add Repositories / Downloads section
release-notes-4.3: feature additions
release-notes-4.3: fix some typos
release-notes-4.3: move new classes to Rust section
release-notes-4.3: remove the Distribution section
release-notes-4.3: tweaks to existing text
sdk-manual: appendix-obtain: improve and update descriptions
test-manual: reproducible-builds: stop mentioning LTO bug
vim: Improve locale handling
vim: Upgrade to 9.0.2068
vim: use upstream generated .po files
Known Issues in Yocto-4.3.1
N/A
Contributors to Yocto-4.3.1
Alejandro Hernandez Samaniego
Alex Stewart
Archana Polampalli
Arne Schwerdt
BELHADJ SALEM Talel
Dmitry Baryshkov
Eero Aaltonen
Joshua Watt
Julien Stephan
Jérémy Rosen
Khem Raj
Lee Chee Yang
Marta Rybczynska
Max Krummenacher
Michael Halstead
Michael Opdenacker
Paul Eggleton
Peter Kjellerstedt
Peter Marko
Quentin Schulz
Richard Purdie
Robert P. J. Day
Ross Burton
Rouven Czerwinski
Steve Sakoman
Trevor Gamblin
Wang Mingyu
William Lyu
Xiangyu Chen
luca fancellu
Repositories / Downloads for Yocto-4.3.1
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: nanbield
Tag: yocto-4.3.1
Git Revision: bf9f2f6f60387b3a7cd570919cef6c4570edcb82
Release Artefact: poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82
sha: 9b4351159d728fec2b63a50f1ac15edc412e2d726e9180a40afc06051fadb922
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: nanbield
Tag: yocto-4.3.1
Git Revision: cce77e8e79c860f4ef0ac4a86b9375bf87507360
Release Artefact: oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360
sha: e6cde08e7c549f57a67d833a36cdb942648fba81558dc8b0e65332d2a2c023cc
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: nanbield
Tag: yocto-4.3.1
Git Revision: 49617a253e09baabbf0355bc736122e9549c8ab2
Release Artefact: meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2
sha: 2225115b73589cdbf1e491115221035c6a61679a92a93b2a3cf761ff87bf4ecc
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2
bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.6
Tag: yocto-4.3.1
Git Revision: 936fcec41efacc4ce988c81882a9ae6403702bea
Release Artefact: bitbake-936fcec41efacc4ce988c81882a9ae6403702bea
sha: efbdd5fe7f29227a3fd26d6a08a368bf8215083a588b4d23f3adf35044897520
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: nanbield
Tag: yocto-4.3.1
Git Revision: 6b98a6164263298648e89b5a5ae1260a58f1bb35