Release notes for Yocto-5.1.1 (Styhead)
Security Fixes in Yocto-5.1.1
- go: Fix CVE-2024-34155, CVE-2024-34156 and CVE-2024-34158 
- linux-yocto/6.6: Fix CVE-2023-52917, CVE-2024-46735, CVE-2024-46737, CVE-2024-46738, CVE-2024-46739, CVE-2024-46740, CVE-2024-46741, CVE-2024-46742, CVE-2024-46743, CVE-2024-46744, CVE-2024-46746, CVE-2024-46747, CVE-2024-46749, CVE-2024-46750, CVE-2024-46755, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46759, CVE-2024-46760, CVE-2024-46761, CVE-2024-46762, CVE-2024-46763, CVE-2024-46765, CVE-2024-46768, CVE-2024-46770, CVE-2024-46771, CVE-2024-46773, CVE-2024-46776, CVE-2024-46777, CVE-2024-46780, CVE-2024-46781, CVE-2024-46782, CVE-2024-46783, CVE-2024-46784, CVE-2024-46785, CVE-2024-46786, CVE-2024-46787, CVE-2024-46788, CVE-2024-46791, CVE-2024-46794, CVE-2024-46795, CVE-2024-46796, CVE-2024-46797, CVE-2024-46798, CVE-2024-46800, CVE-2024-46822, CVE-2024-46825, CVE-2024-46826, CVE-2024-46827, CVE-2024-46828, CVE-2024-46829, CVE-2024-46830, CVE-2024-46831, CVE-2024-46832, CVE-2024-46835, CVE-2024-46836, CVE-2024-46838, CVE-2024-46840, CVE-2024-46843, CVE-2024-46844, CVE-2024-46845, CVE-2024-46846, CVE-2024-46847, CVE-2024-46848, CVE-2024-46849, CVE-2024-46852, CVE-2024-46853, CVE-2024-46854, CVE-2024-46855, CVE-2024-46857, CVE-2024-46858, CVE-2024-46859, CVE-2024-46860, CVE-2024-46861, CVE-2024-46863, CVE-2024-46864, CVE-2024-47663, CVE-2024-47664, CVE-2024-47665, CVE-2024-47666, CVE-2024-47667, CVE-2024-47668, CVE-2024-47669, CVE-2024-47670, CVE-2024-47671, CVE-2024-47672, CVE-2024-47673, CVE-2024-47674, CVE-2024-47675, CVE-2024-47678, CVE-2024-47679, CVE-2024-47681, CVE-2024-47682, CVE-2024-47683, CVE-2024-47684, CVE-2024-47685, CVE-2024-47686, CVE-2024-47688, CVE-2024-47689, CVE-2024-47690, CVE-2024-47691, CVE-2024-47692, CVE-2024-47693, CVE-2024-47695, CVE-2024-47696, CVE-2024-47697, CVE-2024-47698, CVE-2024-47699, CVE-2024-47700, CVE-2024-47701, CVE-2024-47705, CVE-2024-47706, CVE-2024-47707, CVE-2024-47710, CVE-2024-47712, CVE-2024-47713, CVE-2024-47714, CVE-2024-47715, CVE-2024-47716, CVE-2024-47718, CVE-2024-47719, CVE-2024-47720, CVE-2024-47723, CVE-2024-47727, CVE-2024-47728, CVE-2024-47730, CVE-2024-47731, CVE-2024-47734, CVE-2024-47735, CVE-2024-47737, CVE-2024-47738, CVE-2024-47739, CVE-2024-47741, CVE-2024-47742, CVE-2024-47743, CVE-2024-47744, CVE-2024-47745, CVE-2024-47747, CVE-2024-47748, CVE-2024-47749, CVE-2024-47750, CVE-2024-47751, CVE-2024-47752, CVE-2024-47753, CVE-2024-47754, CVE-2024-47757, CVE-2024-49850, CVE-2024-49851, CVE-2024-49852, CVE-2024-49853, CVE-2024-49854, CVE-2024-49855, CVE-2024-49856, CVE-2024-49858, CVE-2024-49859, CVE-2024-49860, CVE-2024-49861 and CVE-2024-49862 
- linux-yocto/6.10: Fix CVE-2023-52917, CVE-2024-46714, CVE-2024-46719, CVE-2024-46720, CVE-2024-46721, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46725, CVE-2024-46726, CVE-2024-46727, CVE-2024-46728, CVE-2024-46730, CVE-2024-46731, CVE-2024-46732, CVE-2024-46735, CVE-2024-46737, CVE-2024-46738, CVE-2024-46739, CVE-2024-46740, CVE-2024-46741, CVE-2024-46742, CVE-2024-46743, CVE-2024-46744, CVE-2024-46746, CVE-2024-46747, CVE-2024-46749, CVE-2024-46750, CVE-2024-46751, CVE-2024-46755, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46759, CVE-2024-46760, CVE-2024-46761, CVE-2024-46762, CVE-2024-46763, CVE-2024-46765, CVE-2024-46766, CVE-2024-46768, CVE-2024-46769, CVE-2024-46770, CVE-2024-46771, CVE-2024-46772, CVE-2024-46773, CVE-2024-46774, CVE-2024-46775, CVE-2024-46776, CVE-2024-46777, CVE-2024-46778, CVE-2024-46779, CVE-2024-46780, CVE-2024-46781, CVE-2024-46782, CVE-2024-46783, CVE-2024-46784, CVE-2024-46785, CVE-2024-46786, CVE-2024-46787, CVE-2024-46788, CVE-2024-46789, CVE-2024-46790, CVE-2024-46791, CVE-2024-46792, CVE-2024-46793, CVE-2024-46794, CVE-2024-46795, CVE-2024-46796, CVE-2024-46797, CVE-2024-46798, CVE-2024-46799, CVE-2024-46800, CVE-2024-46801, CVE-2024-46802, CVE-2024-46803, CVE-2024-46804, CVE-2024-46805, CVE-2024-46806, CVE-2024-46807, CVE-2024-46808, CVE-2024-46809, CVE-2024-46810, CVE-2024-46811, CVE-2024-46812, CVE-2024-46813, CVE-2024-46814, CVE-2024-46815, CVE-2024-46816, CVE-2024-46817, CVE-2024-46818, CVE-2024-46819, CVE-2024-46820, CVE-2024-46821, CVE-2024-46822, CVE-2024-46823, CVE-2024-46824, CVE-2024-46825, CVE-2024-46826, CVE-2024-46827, CVE-2024-46828, CVE-2024-46829, CVE-2024-46830, CVE-2024-46831, CVE-2024-46832, CVE-2024-46833, CVE-2024-46834, CVE-2024-46835, CVE-2024-46836, CVE-2024-46837, CVE-2024-46838, CVE-2024-46840, CVE-2024-46841, CVE-2024-46842, CVE-2024-46843, CVE-2024-46844, CVE-2024-46845, CVE-2024-46846, CVE-2024-46847, CVE-2024-46848, CVE-2024-46849, CVE-2024-46850, CVE-2024-46851, CVE-2024-46852, CVE-2024-46853, CVE-2024-46854, CVE-2024-46855, CVE-2024-46856, CVE-2024-46857, CVE-2024-46858, CVE-2024-46859, CVE-2024-46860, CVE-2024-46861, CVE-2024-46862, CVE-2024-46863, CVE-2024-46864, CVE-2024-46866, CVE-2024-46867, CVE-2024-46868, CVE-2024-46869, CVE-2024-46870, CVE-2024-46871, CVE-2024-47658, CVE-2024-47659, CVE-2024-47660, CVE-2024-47661, CVE-2024-47662, CVE-2024-47663, CVE-2024-47664, CVE-2024-47665, CVE-2024-47666, CVE-2024-47667, CVE-2024-47668, CVE-2024-47669, CVE-2024-47670, CVE-2024-47671, CVE-2024-47672, CVE-2024-47673, CVE-2024-47674, CVE-2024-47675, CVE-2024-47676, CVE-2024-47677, CVE-2024-47678, CVE-2024-47679, CVE-2024-47680, CVE-2024-47681, CVE-2024-47682, CVE-2024-47683, CVE-2024-47684, CVE-2024-47685, CVE-2024-47686, CVE-2024-47687, CVE-2024-47688, CVE-2024-47689, CVE-2024-47690, CVE-2024-47691, CVE-2024-47692, CVE-2024-47693, CVE-2024-47695, CVE-2024-47696, CVE-2024-47697, CVE-2024-47698, CVE-2024-47699, CVE-2024-47700, CVE-2024-47701, CVE-2024-47702, CVE-2024-47703, CVE-2024-47704, CVE-2024-47705, CVE-2024-47706, CVE-2024-47707, CVE-2024-47710, CVE-2024-47712, CVE-2024-47713, CVE-2024-47714, CVE-2024-47715, CVE-2024-47716, CVE-2024-47717, CVE-2024-47718, CVE-2024-47719, CVE-2024-47720, CVE-2024-47721, CVE-2024-47723, CVE-2024-47724, CVE-2024-47727, CVE-2024-47728, CVE-2024-47730, CVE-2024-47731, CVE-2024-47732, CVE-2024-47733, CVE-2024-47734, CVE-2024-47735, CVE-2024-47736, CVE-2024-47737, CVE-2024-47738, CVE-2024-47739, CVE-2024-47741, CVE-2024-47742, CVE-2024-47743, CVE-2024-47744, CVE-2024-47745, CVE-2024-47746, CVE-2024-47747, CVE-2024-47748, CVE-2024-47749, CVE-2024-47750, CVE-2024-47751, CVE-2024-47752, CVE-2024-47753, CVE-2024-47754, CVE-2024-47757, CVE-2024-49850, CVE-2024-49851, CVE-2024-49852, CVE-2024-49853, CVE-2024-49854, CVE-2024-49855, CVE-2024-49856, CVE-2024-49858, CVE-2024-49859, CVE-2024-49860, CVE-2024-49861, CVE-2024-49862, CVE-2024-49863, CVE-2024-49864, CVE-2024-49866, CVE-2024-49867, CVE-2024-49868, CVE-2024-49870, CVE-2024-49871, CVE-2024-49874 and CVE-2024-49875 
- orc: Fix CVE-2024-40897 (follow-up fix) 
- vim: Fix CVE-2024-45306 and CVE-2024-47814 
- wpa-supplicant: Ignore CVE-2024-5290 
- xserver-xorg: Fix CVE-2024-9632 
- xwayland: Fix CVE-2024-9632 
Fixes in Yocto-5.1.1
- binutils: Add missing perl modules to RDEPENDS for nativsdk variant 
- binutils: Fix binutils mingw packaging 
- bitbake.conf: Mark VOLATILE_LOG_DIR & VOLATILE_TMP_DIR as obsolete 
- bitbake: Remove custom exception backtrace formatting 
- bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM 
- bitbake: fetch2/git: Use quote from shlex, not pipes 
- bitbake: fetch2: don’t try to preserve all attributes when unpacking files 
- bitbake: fetch2: use persist_data context managers 
- bitbake: fetch/wget: Increase timeout to 100s from 30s 
- bitbake: gitsm: Add call_process_submodules() to remove duplicated code 
- bitbake: gitsm: Remove downloads/tmpdir when failed 
- bitbake: persist_data: close connection in SQLTable __exit__ 
- bitbake: tests/fetch: Update GoModTest and GoModGitTest 
- bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab 
- bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab 
- bluez: Fix mesh builds on musl 
- build-appliance-image: Update to styhead head revision 
- cml1.bbclass: do_diffconfig: Don’t override .config with .config.orig 
- contributor-guide: Remove duplicated words 
- cve-check: add field “modified” to JSON report 
- cve-check: add support for cvss v4.0 
- cve-check: do not skip cve status description after : 
- cve-check: fix malformed cve status description with : characters 
- dev-manual: add bblock documentation 
- dev-manual: bblock: use warning block instead of attention 
- dev-manual: document how to provide confs from layer.conf 
- documentation: features: describe distribution feature pni-name 
- documentation; features: remove duplicate word in distribution feature ext2 
- documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint 
- documentation: Makefile: add support for xelatex 
- documentation: Makefile: publish pdf and epub versions too 
- documentation: Makefile: remove inkscape, replace by rsvg-convert 
- documentation: README: add instruction to run Vale on a subset 
- documentation: Replace VOLATILE_LOG_DIR with FILESYSTEM_PERMS_TABLES 
- documentation: Replace VOLATILE_TMP_DIR with FILESYSTEM_PERMS_TABLES 
- documentation: add a download page for epub and pdf 
- documentation: conf.py: add a bitbake_git extlink 
- documentation: conf.py: rename :cve: role to :cve_nist: 
- documentation: sphinx-static/switchers.js.in: do not refer to URL_ROOT anymore 
- documentation: styles: vocabularies: Yocto: add sstate 
- e2fsprogs: removed ‘sed -u’ option 
- efi-bootdisk.wks: Increase overhead-factor to avoid test failures 
- ffmpeg: Add “libswresample libavcodec” to CVE_PRODUCT 
- ffmpeg: Disable asm optimizations on x86 
- ffmpeg: fix packaging examples 
- ffmpeg: nasm is x86 only, so only DEPEND if x86 
- ffmpeg: no need for textrel INSANE_SKIP 
- gcc-source: Fix racing on building gcc-source-14.2.0 and lib32-gcc-source-14.2.0 
- gcc: add a backport patch to fix an issue with tzdata 2024b 
- git: upgrade to 2.46.1 
- glib-2.0: fix glib-2.0 ptest failure when upgrading tzdata2024b 
- glibc: Fix missing randomness in __gen_tempname 
- glibc: stable 2.40 branch updates 
- go: upgrade to 1.22.8 
- groff: fix rare build race in hdtbl 
- icu: update patch Upstream-Status 
- image.bbclass: Drop support for ImageQAFailed exceptions in image_qa 
- json-c: avoid ptest failure caused by valgrind 
- kexec-tools: update COMPATIBLE_HOST because of makedumpfile 
- kmscube: Upgrade to latest revision (b2f97f53e0..) 
- lib/oe/package-manager: skip processing installed-pkgs with empty globs 
- libevdev: upgrade to 1.13.3 
- libgfortran: fix buildpath QA issue 
- libpam: use libdir in conditional 
- linux-yocto/6.6: update to v6.6.54 
- linux-yocto/6.10: bsp/genericarm64: disable ARM64_SME 
- linux-yocto/6.10: cfg: gpio: allow to re-enable the deprecated GPIO sysfs interface 
- linux-yocto/6.10: genericarm64.cfg: enable CONFIG_DMA_CMA 
- linux-yocto/6.10: update to v6.10.14 
- linux-yocto: Enable l2tp drivers when ptest featuee is on 
- lsb-release: fix Distro Codename shell escaping 
- migration-guides/release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure 
- migration-guides/release-notes-5.0: NO_OUTPUT -> NO_COLOR 
- migration-guides/release-notes-5.1: add beaglebone-yocto parselogs test oeqa failure 
- migration-guides/release-notes-5.1: document added python3-libarchive-c ptest 
- migration-guides/release-notes-5.1: document fixed _test_devtool_add_git_url test 
- migration-guides/release-notes-5.1: document oeqa/selftest envvars change 
- migration-guides/release-notes-5.1: document spirv-tools reproducibility 
- migration-guides/release-notes-5.1: fix spdx bullet point 
- migration-guides/release-notes-5.1: update for several section 
- migration-guides/release-notes-5.1: update release note for styhead 
- migration-guides: 5.1: fix titles 
- migration-guides: add release notes for 4.0.21 and 4.0.22 
- oeqa/postactions: Fix archive retrieval from target 
- oeqa/runtime/ssh: Fix incorrect timeout fix 
- oeqa/runtime/ssh: Rework ssh timeout 
- oeqa/selftest/gcc: Fix kex exchange identification error 
- oeqa/selftest: Update the BB_HASHSERVE_UPSTREAM 
- openssl: Fix SDK environment script to avoid unbound variable 
- orc: upgrade to 0.4.40 
- overview-manual: concepts: add details on package splitting 
- ovmf-native: remove .pyc files from install 
- package_rpm: Check if file exists before open() 
- package_rpm: restrict rpm to 4 threads 
- package_rpm: use zstd’s default compression level 
- poky.conf: bump version for 5.1.1 
- pseudo: Fix envp bug and add posix_spawn wrapper 
- python3-maturin: sort external libs in wheel files 
- python3-setuptools: Add “python:setuptools” to CVE_PRODUCT 
- qemu: Fix build on musl/riscv64 
- qemurunner: Clean up serial_lock handling 
- ref-manual: add missing CVE_CHECK manifest variables 
- ref-manual: add missing EXTERNAL_KERNEL_DEVICETREE variable 
- ref-manual: add missing OPKGBUILDCMD variable 
- ref-manual: add missing TESTIMAGE_FAILED_QA_ARTIFACTS 
- ref-manual: add missing image manifest variables 
- ref-manual: add missing nospdx class 
- ref-manual: add missing variable PRSERV_UPSTREAM 
- ref-manual: add mission pep517-backend sanity check 
- ref-manual: add new RECIPE_UPGRADE_EXTRA_TASKS variable 
- ref-manual: add new retain class and variables 
- ref-manual: add new vex class 
- ref-manual: devtool-reference: document missing commands 
- ref-manual: devtool-reference: refresh example outputs 
- ref-manual: drop TCLIBCAPPEND variable 
- ref-manual: drop siteconfig class 
- ref-manual: faq: add q&a on class appends 
- ref-manual: fix ordering of insane checks list 
- ref-manual: merge patch-status-* to patch-status 
- ref-manual: release-process: add a reference to the doc’s release 
- ref-manual: release-process: refresh the current LTS releases 
- ref-manual: release-process: update releases.svg 
- ref-manual: release-process: update releases.svg with month after “Current” 
- ref-manual: structure.rst: document missing tmp/ dirs 
- ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables 
- rootfs-postcommands.bbclass: make opkg status reproducible 
- scripts/install-buildtools: Update to 5.1 
- selftest/sstatetests: run CDN mirror check only once 
- shadow: use update-alternatives to handle groups.1 
- strace: download release tarballs from GitHub 
- systemd: fix broken links for sysvinit-compatible commands 
- tcl: skip io-13.6 test case 
- toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails 
- tune-cortexa32: set tune feature as armv8a 
- tzdata/tzcode-native: upgrade to 2024b 
- uboot-sign: fix concat_dtb arguments 
- udev-extraconf: fix network.sh script did not configure hotplugged interfaces 
- util-linux: Add findmnt to the bash completion RDEPENDS 
- vim: Upgrade to 9.1.0764 
- virglrenderer: Add patch to fix -int-conversion build issue 
- weston: Add missing runtime dependency on freerdp 
- weston: backport patch to allow neatvnc < v0.9.0 
- wireless-regdb: upgrade to 2024.10.07 
- xserver-xorg: upgrade to 21.1.14 
- xwayland: upgrade to 24.1.4 
Known Issues in Yocto-5.1.1
- N/A 
Contributors to Yocto-5.1.1
- Aditya Tayade 
- Alban Bedel 
- Aleksandar Nikolic 
- Alexander Kanavin 
- Antonin Godard 
- Bruce Ashfield 
- Chen Qi 
- Chris Laplante 
- Christian Lindeberg 
- Claus Stovgaard 
- Clayton Casciato 
- Daniel McGregor 
- Deepthi Hemraj 
- Harish Sadineni 
- Hiago De Franco 
- Hongxu Jia 
- Jagadeesh Krishnanjanappa 
- Jinfeng Wang 
- Jonas Gorski 
- Jose Quaresma 
- Joshua Watt 
- Julien Stephan 
- Jörg Sommer 
- Kai Kang 
- Katawann 
- Khem Raj 
- Lee Chee Yang 
- Markus Volk 
- Martin Jansa 
- Mathieu Dubois-Briand 
- Michael Opdenacker 
- Mikko Rapeli 
- Niko Mauno 
- Ola x Nilsson 
- Pavel Zhukov 
- Peter Kjellerstedt 
- Peter Marko 
- Purushottam Choudhary 
- Regis Dargent 
- Richard Purdie 
- Robert Yang 
- Rohini Sangam 
- Ross Burton 
- Sergei Zhmylev 
- Shunsuke Tokumoto 
- Steve Sakoman 
- Talel BELHAJSALEM 
- Tom Hochstein 
- Vijay Anusuri 
- Wang Mingyu 
- Yi Zhao 
- Yoann Congal 
- Zahir Hussain 
Repositories / Downloads for Yocto-5.1.1
poky
- Repository Location: https://git.yoctoproject.org/poky 
- Branch: styhead 
- Tag: yocto-5.1.1 
- Git Revision: 7e081bd98fdc5435e850d1df79a5e0f1e30293d0 
- Release Artefact: poky-7e081bd98fdc5435e850d1df79a5e0f1e30293d0 
- sha: 1ae688856bcd4aa2d1a14c2659217143cc2050151a8c194b99e6b472b0a99710 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/poky-7e081bd98fdc5435e850d1df79a5e0f1e30293d0.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/poky-7e081bd98fdc5435e850d1df79a5e0f1e30293d0.tar.bz2 
openembedded-core
- Repository Location: https://git.openembedded.org/openembedded-core 
- Branch: styhead 
- Tag: yocto-5.1.1 
- Git Revision: b511d0146a2e8f316f4aecc90c853215674013ea 
- Release Artefact: oecore-b511d0146a2e8f316f4aecc90c853215674013ea 
- sha: 71eb36bf898b3eb5a7a79c2f1c057755405740e82b21a57ac540cebc1337e151 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/oecore-b511d0146a2e8f316f4aecc90c853215674013ea.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/oecore-b511d0146a2e8f316f4aecc90c853215674013ea.tar.bz2 
meta-mingw
- Repository Location: https://git.yoctoproject.org/meta-mingw 
- Branch: styhead 
- Tag: yocto-5.1.1 
- Git Revision: 77fe18d4f8ec34501045c5d92ce7e13b1bd129e9 
- Release Artefact: meta-mingw-77fe18d4f8ec34501045c5d92ce7e13b1bd129e9 
- sha: 4c7f8100a3675d9863e51825def3df5b263ffc81cd57bae26eedbc156d771534 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/meta-mingw-77fe18d4f8ec34501045c5d92ce7e13b1bd129e9.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/meta-mingw-77fe18d4f8ec34501045c5d92ce7e13b1bd129e9.tar.bz2 
bitbake
- Repository Location: https://git.openembedded.org/bitbake/ 
- Branch: 2.10 
- Tag: yocto-5.1.1 
- Git Revision: 9602a684568910fd333ffce907fa020ad3661c26 
- Release Artefact: bitbake-9602a684568910fd333ffce907fa020ad3661c26 
- sha: 8f5304b7a71cf7ad5dc8e5ee8bbfc041780bd402712f314d2c3c8be79c89a526 
- Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/bitbake-9602a684568910fd333ffce907fa020ad3661c26.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/bitbake-9602a684568910fd333ffce907fa020ad3661c26.tar.bz2 
yocto-docs
- Repository Location: https://git.yoctoproject.org/yocto-docs 
- Branch: styhead 
- Tag: yocto-5.1.1 
- Git Revision: 8288c8cae7fe7303e89d8ed286de91fc26ce6cc3