Release notes for 4.0.1 (kirkstone)

Security Fixes in 4.0.1

linux-yocto/5.15: fix CVE-2022-28796
python3: ignore CVE-2015-20107
e2fsprogs: fix CVE-2022-1304
lua: fix CVE-2022-28805
busybox: fix CVE-2022-28391

Fixes in 4.0.1

abi_version/sstate: Bump hashequiv and sstate versions due to git changes
apt: add apt selftest to test signed package feeds
apt: upgrade 2.4.4 -> 2.4.5
arch-armv8-2a.inc: fix a typo in TUNEVALID variable
babeltrace: Disable warnings as errors
base: Avoid circular references to our own scripts
base: Drop git intercept
build-appliance-image: Update to kirkstone head revision
build-appliance: Switch to kirkstone branch
buildtools-tarball: Only add cert envvars if certs are included
busybox: Use base_bindir instead of hardcoding /bin path
cases/buildepoxy.py: fix typo
create-spdx: delete virtual/kernel dependency to fix FreeRTOS build
create-spdx: fix error when symlink cannot be created
cve-check: add JSON format to summary output
cve-check: fix symlinks where link and output path are equal
cve-check: no need to depend on the fetch task
cve-update-db-native: let the user to drive the update interval
cve-update-db-native: update the CVE database once a day only
cve_check: skip remote patches that haven’t been fetched when searching for CVE tags
dev-manual: add command used to add the signed-off-by line.
devshell.bbclass: Allow devshell & pydevshell to use the network
docs: conf.py: fix cve extlinks caption for sphinx <4.0
docs: migration-guides: migration-3.4: mention that hardcoded password are supported if hashed
docs: migration-guides: release-notes-4.0: fix risc-v typo
docs: migration-guides: release-notes-4.0: replace kernel placeholder with correct recipe name
docs: ref-manual: variables: add hashed password example in EXTRA_USERS_PARAMS
docs: set_versions.py: add information about obsolescence of a release
docs: set_versions.py: fix latest release of a branch being shown twice in switchers.js
docs: set_versions.py: fix latest version of an active release shown as obsolete
docs: set_versions.py: mark as obsolete only branches and old tags from obsolete releases
docs: sphinx-static: switchers.js.in: do not mark branches as outdated
docs: sphinx-static: switchers.js.in: fix broken switcher for branches
docs: sphinx-static: switchers.js.in: improve obsolete version detection
docs: sphinx-static: switchers.js.in: remove duplicate for outdated versions
docs: sphinx-static: switchers.js.in: rename all_versions to switcher_versions
docs: update Bitbake objects.inv location for master branch
documentation/brief-yoctoprojectqs: add directory for local.conf
gcompat: Fix build when usrmerge distro feature is enabled
git: correct license
git: upgrade 2.35.2 -> 2.35.3
glib: upgrade 2.72.0 -> 2.72.1
glibc: ptest: Fix glibc-tests package issue
gnupg: Disable FORTIFY_SOURCES on mips
go.bbclass: disable the use of the default configuration file
gstreamer1.0-plugins-bad: drop patch
gstreamer1.0-plugins-good: Fix libsoup dependency
gstreamer1.0: Minor documentation addition
install/devshell: Introduce git intercept script due to fakeroot issues
kernel-yocto.bbclass: Fixup do_kernel_configcheck usage of KMETA
libc-glibc: Use libxcrypt to provide virtual/crypt
libgit2: upgrade 1.4.2 -> 1.4.3
libsoup: upgrade 3.0.5 -> 3.0.6
libusb1: upgrade 1.0.25 -> 1.0.26
linux-firmware: correct license for ar3k firmware
linux-firmware: upgrade 20220310 -> 20220411
linux-yocto/5.10: base: enable kernel crypto userspace API
linux-yocto/5.10: update to v5.10.112
linux-yocto/5.15: arm: poky-tiny cleanup and fixes
linux-yocto/5.15: base: enable kernel crypto userspace API
linux-yocto/5.15: fix -standard kernel build issue
linux-yocto/5.15: fix ppc boot
linux-yocto/5.15: fix qemuarm graphical boot
linux-yocto/5.15: kasan: fix BUG: sleeping function called from invalid context
linux-yocto/5.15: netfilter: conntrack: avoid useless indirection during conntrack destruction
linux-yocto/5.15: update to v5.15.36
linux-yocto: enable powerpc-debug fragment
mdadm: Drop clang specific cflags
migration-3.4: add missing entry on EXTRA_USERS_PARAMS
migration-guides: add release notes for 4.0
migration-guides: complete migration guide for 4.0
migration-guides: release-notes-4.0: mention LTS release
migration-guides: release-notes-4.0: update ‘Repositories / Downloads’ section
migration-guides: stop including documents with “.. include”
musl: Fix build when usrmerge distro feature is enabled
ncurses: use COPYING file
neard: Switch SRC_URI to git repo
oeqa/selftest: add test for git working correctly inside pseudo
openssl: minor security upgrade 3.0.2 -> 3.0.3
package.bbclass: Prevent perform_packagecopy from removing /sysroot-only
package: Ensure we track whether PRSERV was active or not
package_manager: fix missing dependency on gnupg when signing deb package feeds
poky-tiny: enable qemuarmv5/qemuarm64 and cleanups
poky.conf: bump version for 4.0.1 release
qemu.bbclass: Extend ppc/ppc64 extra options
qemuarm64: use virtio pci interfaces
qemuarmv5: use arm-versatile-926ejs KMACHINE
ref-manual: Add XZ_THREADS and XZ_MEMLIMIT
ref-manual: add KERNEL_DEBUG_TIMESTAMPS
ref-manual: add ZSTD_THREADS
ref-manual: add a note about hard-coded passwords
ref-manual: add empty-dirs QA check and QA_EMPTY_DIRS*
ref-manual: add mention of vendor filtering to CVE_PRODUCT
ref-manual: mention wildcarding support in INCOMPATIBLE_LICENSE
releases: update for yocto 4.0
rootfs-postcommands: fix symlinks where link and output path are equal
ruby: upgrade 3.1.1 -> 3.1.2
sanity: skip make 4.2.1 warning for debian
scripts/git: Ensure we don’t have circular references
scripts: Make git intercept global
seatd: Disable overflow warning as error on ppc64/musl
selftest/lic_checksum: Add test for filename containing space
set_versions: update for 4.0 release
staging: Ensure we filter out ourselves
strace: fix ptest failure in landlock
subversion: upgrade to 1.14.2
systemd-boot: remove outdated EFI_LD comment
systemtap: Fix build with gcc-12
terminal.py: Restore error output from Terminal
u-boot: Correct the SRC_URI
u-boot: Inherit pkgconfig
update_udev_hwdb: fix multilib issue with systemd
util-linux: Create u-a symlink for findfs utility
virgl: skip headless test on alma 8.6
webkitgtk: adjust patch status
wic: do not use PARTLABEL for msdos partition tables
wireless-regdb: upgrade 2022.02.18 -> 2022.04.08
xserver-xorg: Fix build with gcc12
yocto-bsps: update to v5.15.36