Release notes for Yocto-4.3.3 (Nanbield)

Security Fixes in Yocto-4.3.3

curl: Fix CVE-2023-46219
glibc: Ignore fixed CVE-2023-0687 and CVE-2023-5156
linux-yocto/6.1: Ignore CVE-2022-48619, CVE-2023-4610, CVE-2023-5178, CVE-2023-5972, CVE-2023-6040, CVE-2023-6531, CVE-2023-6546, CVE-2023-6622, CVE-2023-6679, CVE-2023-6817, CVE-2023-6931, CVE-2023-6932, CVE-2023-7192, CVE-2024-0193 and CVE-2024-0443
linux-yocto/6.1: Fix CVE-2023-1193, CVE-2023-51779, CVE-2023-51780, CVE-2023-51781, CVE-2023-51782 and CVE-2023-6606
qemu: Fix CVE-2023-3019
shadow: Fix CVE-2023-4641
sqlite3: Fix CVE-2024-0232
sqlite3: drop obsolete CVE ignore CVE-2023-36191
sudo: Fix CVE-2023-42456 and CVE-2023-42465
tiff: Fix CVE-2023-6277
xwayland: Fix CVE-2023-6377 and CVE-2023-6478

Fixes in Yocto-4.3.3

aspell: upgrade to 0.60.8.1
avahi: update URL for new project location
base-passwd: upgrade to 3.6.3
bitbake: asyncrpc: Add context manager API
bitbake: toaster/toastergui: Bug-fix verify given layer path only if import/add local layer
build-appliance-image: Update to nanbield head revision
classes-global/sstate: Fix variable typo
cmake: Unset CMAKE_CXX_IMPLICIT_INCLUDE_DIRECTORIES
contributor-guide: fix lore URL
contributor-guide: use “apt” instead of “aptitude”
create-spdx-2.2: combine spdx can try to write before dir creation
curl: Disable test 1091 due to intermittent failures
curl: Disable two intermittently failing tests
dev-manual: gen-tapdevs need iptables installed
dev-manual: start.rst: Update use of Download page
dev-manual: update license manifest path
devtool: deploy: provide max_process to strip_execs
devtool: modify: Handle recipes with a menuconfig task correctly
docs: document VSCode extension
dtc: preserve version also from shallow git clones
elfutils: Update license information
glib-2.0: upgrade to 2.78.3
glibc-y2038-tests: do not run tests using 32 bit time APIs
go: upgrade to 1.20.12
grub: fs/fat: Don’t error when mtime is 0
gstreamer1.0: upgrade to 1.22.8
icon-naming-utils: take tarball from debian
kea: upgrade to 2.4.1
lib/prservice: Improve lock handling robustness
libadwaita: upgrade to 1.4.2
libatomic-ops: upgrade to 7.8.2
libva-utils: upgrade to 2.20.1
linux-firmware: Change bnx2 packaging
linux-firmware: Create bnx2x subpackage
linux-firmware: Fix the linux-firmware-bcm4373 FILES variable
linux-firmware: Package iwlwifi .pnvm files
linux-yocto/6.1: security/cfg: add configs to harden protection
linux-yocto/6.1: update to v6.1.73
meta/documentation.conf: fix do_menuconfig description
migration-guide: add release notes for 4.0.16
migration-guide: add release notes for 4.3.2
ncurses: Fix - tty is hung after reset
nfs-utils: Update Upstream-Status
nfs-utils: upgrade to 2.6.4
oeqa/selftest/prservice: Improve test robustness
package.py: OEHasPackage: Add MLPREFIX to packagename
poky.conf: bump version for 4.3.3 release
pseudo: Update to pull in syncfs probe fix
python3-license-expression: Fix the ptest failure
qemu.bbclass: fix a python TypeError
qemu: upgrade to 8.1.4
ref-manual: Add UBOOT_BINARY, extend UBOOT_CONFIG
ref-manual: classes: remove insserv bbclass
ref-manual: update tested and supported distros
release-notes-4.3: fix spacing
rootfs.py: check depmodwrapper execution result
rpcbind: Specify state directory under /run
scripts/runqemu: fix regex escape sequences
sqlite3: upgrade to 3.43.2
sstate: Fix dir ownership issues in SSTATE_DIR
sudo: upgrade to 1.9.15p5
tcl: Fix prepending to run-ptest script
uninative-tarball.xz - reproducibility fix
xwayland: upgrade to 23.2.3
zstd: fix LICENSE statement