.. SPDX-License-Identifier: CC-BY-SA-2.0-UK Release notes for Yocto-4.0.12 (Kirkstone) ------------------------------------------ Security Fixes in Yocto-4.0.12 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - bind: Fix :cve:`2023-2828` and :cve:`2023-2911` - cups: Fix :cve:`2023-34241` - curl: Added :cve:`2023-28320` Follow-up patch - dbus: Fix :cve:`2023-34969` - dmidecode: fix :cve:`2023-30630` - ghostscript: fix :cve:`2023-36664` - go: fix :cve_mitre:`2023-24531`, :cve:`2023-24536`, :cve:`2023-29400`, :cve:`2023-29402`, :cve:`2023-29404`, :cve:`2023-29405` and :cve:`2023-29406` - libarchive: Ignore :cve:`2023-30571` - libcap: Fix :cve:`2023-2602` and :cve:`2023-2603` - libjpeg-turbo: Fix :cve:`2023-2804` - libpcre2: Fix :cve:`2022-41409` - libtiff: fix :cve:`2023-26965` - libwebp: Fix :cve:`2023-1999` - libx11: Fix :cve:`2023-3138` - libxpm: Fix :cve:`2022-44617` - ninja: Ignore :cve:`2021-4336` - openssh: Fix :cve:`2023-38408` - openssl: Fix :cve:`2023-2975`, :cve:`2023-3446` and :cve:`2023-3817` - perl: Fix :cve:`2023-31486` - python3: Ignore :cve:`2023-36632` - qemu: Fix :cve:`2023-0330`, :cve_mitre:`2023-2861`, :cve_mitre:`2023-3255` and :cve_mitre:`2023-3301` - sqlite3: Fix :cve:`2023-36191` - tiff: Fix :cve:`2023-0795`, :cve:`2023-0796`, :cve:`2023-0797`, :cve:`2023-0798`, :cve:`2023-0799`, :cve:`2023-25433`, :cve:`2023-25434` and :cve:`2023-25435` - vim: :cve:`2023-2609` and :cve:`2023-2610` Fixes in Yocto-4.0.12 ~~~~~~~~~~~~~~~~~~~~~ - babeltrace2: Always use BFD linker when building tests with ld-is-lld distro feature - babeltrace2: upgrade to 2.0.5 - bitbake.conf: add unzstd in :term:`HOSTTOOLS` - bitbake: bitbake-layers: initialize tinfoil before registering command line arguments - bitbake: runqueue: Fix deferred task/multiconfig race issue - blktrace: ask for python3 specifically - build-appliance-image: Update to kirkstone head revision - cmake: Fix CMAKE_SYSTEM_PROCESSOR setting for SDK - connman: fix warning by specifying runstatedir at configure time - cpio: Replace fix wrong CRC with ASCII CRC for large files with upstream backport - cve-update-nvd2-native: actually use API keys - cve-update-nvd2-native: always pass str for json.loads() - cve-update-nvd2-native: fix cvssV3 metrics - cve-update-nvd2-native: handle all configuration nodes, not just first - cve-update-nvd2-native: increase retry count - cve-update-nvd2-native: log a little more - cve-update-nvd2-native: retry all errors and sleep between retries - cve-update-nvd2-native: use exact times, don't truncate - dbus: upgrade to 1.14.8 - devtool: Fix the wrong variable in srcuri_entry - diffutils: upgrade to 3.10 - docs: ref-manual: terms: fix typos in :term:`SPDX` term - fribidi: upgrade to 1.0.13 - gcc: upgrade to v11.4 - gcc-testsuite: Fix ppc cpu specification - gcc: don't pass --enable-standard-branch-protection - gcc: fix runpath errors in cc1 binary - grub: submit determinism.patch upstream - image_types: Fix reproducible builds for initramfs and UKI img - kernel: add missing path to search for debug files - kmod: remove unused ptest.patch - layer.conf: Add missing dependency exclusion - libassuan: upgrade to 2.5.6 - libksba: upgrade to 1.6.4 - libpng: Add ptest for libpng - libxcrypt: fix build with perl-5.38 and use master branch - libxcrypt: fix hard-coded ".so" extension - libxpm: upgrade to 3.5.16 - linux-firmware: upgrade to 20230515 - linux-yocto/5.10: cfg: fix DECNET configuration warning - linux-yocto/5.10: update to v5.10.185 - linux-yocto/5.15: cfg: fix DECNET configuration warning - linux-yocto/5.15: update to v5.15.120 - logrotate: Do not create logrotate.status file - lttng-ust: upgrade to 2.13.6 - machine/arch-arm64: add -mbranch-protection=standard - maintainers.inc: correct Carlos Rafael Giani's email address - maintainers.inc: correct unassigned entries - maintainers.inc: unassign Adrian Bunk from wireless-regdb - maintainers.inc: unassign Alistair Francis from opensbi - maintainers.inc: unassign Andreas Müller from itstool entry - maintainers.inc: unassign Pascal Bach from cmake entry - maintainers.inc: unassign Ricardo Neri from ovmf - maintainers.inc: unassign Richard Weinberger from erofs-utils entry - mdadm: fix 07revert-inplace ptest - mdadm: fix segfaults when running ptests - mdadm: fix util-linux ptest dependency - mdadm: skip running known broken ptests - meson.bbclass: Point to llvm-config from native sysroot - meta: lib: oe: npm_registry: Add more safe caracters - migration-guides: add release notes for 4.0.11 - minicom: remove unused patch files - mobile-broadband-provider-info: upgrade to 20230416 - oe-depends-dot: Handle new format for task-depends.dot - oeqa/runtime/cases/rpm: fix wait_for_no_process_for_user failure case - oeqa/selftest/bbtests: add non-existent prefile/postfile tests - oeqa/selftest/devtool: add unit test for "devtool add -b" - openssl: Upgrade to 3.0.10 - openssl: add PERLEXTERNAL path to test its existence - openssl: use a glob on the PERLEXTERNAL to track updates on the path - package.bbclass: moving field data process before variable process in process_pkgconfig - pm-utils: fix multilib conflictions - poky.conf: bump version for 4.0.12 - psmisc: Set :term:`ALTERNATIVE` for pstree to resolve conflict with busybox - pybootchartgui: show elapsed time for each task - python3: fix missing comma in get_module_deps3.py - python3: upgrade to 3.10.12 - recipetool: Fix inherit in created -native* recipes - ref-manual: add LTS and Mixin terms - ref-manual: document image-specific variant of :term:`INCOMPATIBLE_LICENSE` - ref-manual: release-process: update for LTS releases - rust-llvm: backport a fix for build with gcc-13 - scripts/runqemu: allocate unfsd ports in a way that doesn't race or clash with unrelated processes - scripts/runqemu: split lock dir creation into a reusable function - sdk.py: error out when moving file fails - sdk.py: fix moving dnf contents - selftest reproducible.py: support different build targets - selftest/license: Exclude from world - selftest/reproducible: Allow chose the package manager - serf: upgrade to 1.3.10 - strace: Disable failing test - strace: Merge two similar patches - strace: Update patches/tests with upstream fixes - sysfsutils: fetch a supported fork from github - systemd-systemctl: fix errors in instance name expansion - systemd: Backport nspawn: make sure host root can write to the uidmapped mounts we prepare for the container payload - tzdata: upgrade to 2023c - uboot-extlinux-config.bbclass: fix old override syntax in comment - unzip: fix configure check for cross compilation - useradd-staticids.bbclass: improve error message - util-linux: add alternative links for ipcs,ipcrm - v86d: Improve kernel dependency - vim: upgrade to 9.0.1592 - wget: upgrade to 1.21.4 - wic: Add dependencies for erofs-utils - wireless-regdb: upgrade to 2023.05.03 - xdpyinfo: upgrade to 1.3.4 - zip: fix configure check by using _Static_assert Known Issues in Yocto-4.0.12 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - N/A Contributors to Yocto-4.0.12 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Alberto Planas - Alexander Kanavin - Alexander Sverdlin - Andrej Valek - Archana Polampalli - BELOUARGA Mohamed - Benjamin Bouvier - Bruce Ashfield - Charlie Wu - Chen Qi - Etienne Cordonnier - Fabien Mahot - Frieder Paape - Frieder Schrempf - Heiko Thole - Hitendra Prajapati - Jermain Horsman - Jose Quaresma - Kai Kang - Khem Raj - Lee Chee Yang - Marc Ferland - Marek Vasut - Martin Jansa - Mauro Queiros - Michael Opdenacker - Mikko Rapeli - Nikhil R - Ovidiu Panait - Peter Marko - Poonam Jadhav - Quentin Schulz - Richard Purdie - Ross Burton - Rusty Howell - Sakib Sajal - Soumya Sambu - Steve Sakoman - Sundeep KOKKONDA - Tim Orling - Tom Hochstein - Trevor Gamblin - Vijay Anusuri - Vivek Kumbhar - Wang Mingyu - Xiangyu Chen - Yoann Congal - Yogita Urade - Yuta Hayama Repositories / Downloads for Yocto-4.0.12 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ poky - Repository Location: :yocto_git:`/poky` - Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` - Tag: :yocto_git:`yocto-4.0.12 </poky/log/?h=yocto-4.0.12>` - Git Revision: :yocto_git:`d6b8790370500b99ca11f0d8a05c39b661ab2ba6 </poky/commit/?id=d6b8790370500b99ca11f0d8a05c39b661ab2ba6>` - Release Artefact: poky-d6b8790370500b99ca11f0d8a05c39b661ab2ba6 - sha: 35f0390e0c5a12f403ed471c0b1254c13cbb9d7c7b46e5a3538e63e36c1ac280 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/poky-d6b8790370500b99ca11f0d8a05c39b661ab2ba6.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/poky-d6b8790370500b99ca11f0d8a05c39b661ab2ba6.tar.bz2 openembedded-core - Repository Location: :oe_git:`/openembedded-core` - Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` - Tag: :oe_git:`yocto-4.0.12 </openembedded-core/log/?h=yocto-4.0.12>` - Git Revision: :oe_git:`e1a604db8d2cf8782038b4016cc2e2052467333b </openembedded-core/commit/?id=e1a604db8d2cf8782038b4016cc2e2052467333b>` - Release Artefact: oecore-e1a604db8d2cf8782038b4016cc2e2052467333b - sha: 8b302eb3f3ffe5643f88bc6e4ae8f9a5cda63544d67e04637ecc4197e9750a1d - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/oecore-e1a604db8d2cf8782038b4016cc2e2052467333b.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/oecore-e1a604db8d2cf8782038b4016cc2e2052467333b.tar.bz2 meta-mingw - Repository Location: :yocto_git:`/meta-mingw` - Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` - Tag: :yocto_git:`yocto-4.0.12 </meta-mingw/log/?h=yocto-4.0.12>` - Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>` - Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1 - sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 meta-gplv2 - Repository Location: :yocto_git:`/meta-gplv2` - Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` - Tag: :yocto_git:`yocto-4.0.12 </meta-gplv2/log/?h=yocto-4.0.12>` - Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` - Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a - sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 bitbake - Repository Location: :oe_git:`/bitbake` - Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` - Tag: :oe_git:`yocto-4.0.12 </bitbake/log/?h=yocto-4.0.12>` - Git Revision: :oe_git:`41b6684489d0261753344956042be2cc4adb0159 </bitbake/commit/?id=41b6684489d0261753344956042be2cc4adb0159>` - Release Artefact: bitbake-41b6684489d0261753344956042be2cc4adb0159 - sha: efa2b1c4d0be115ed3960750d1e4ed958771b2db6d7baee2d13ad386589376e8 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.12/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.12/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2 yocto-docs - Repository Location: :yocto_git:`/yocto-docs` - Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` - Tag: :yocto_git:`yocto-4.0.12 </yocto-docs/log/?h=yocto-4.0.12>` - Git Revision: :yocto_git:`4dfef81ac6164764c6541e39a9fef81d49227096 </yocto-docs/commit/?id=4dfef81ac6164764c6541e39a9fef81d49227096>`