Release notes for Yocto-4.1.2 (Langdale)

Security Fixes in Yocto-4.1.2

sudo: Fix CVE-2022-43995
binutils: Fix CVE-2022-4285
cairo: update patch for CVE-2019-6461 with upstream solution
expat: Fix CVE-2022-43680
ffmpeg: Fix CVE-2022-3964 and CVE-2022-3965
grub: Fix CVE-2022-28736
libarchive: Fix CVE-2022-36227
libpam: Fix CVE-2022-28321
libpng: Fix CVE-2019-6129
ruby: Fix CVE-2022-28738 and CVE-2022-28739
tiff: Fix CVE-2022-3970
vim: Fix CVE-2022-4141

Fixes in Yocto-4.1.2

Expand create-spdx class documentation
Expand cve-check class documentation
archiver: avoid using machine variable as it breaks multiconfig
babeltrace: Upgrade to 1.5.11
backport SPDX documentation and vulnerability improvements
baremetal-image: Avoid overriding qemu variables from IMAGE_CLASSES
bc: extend to nativesdk
bind: Upgrade to 9.18.9
bitbake.conf: Drop export of SOURCE_DATE_EPOCH_FALLBACK
bitbake: gitsm: Fix regression in gitsm submodule path parsing
bitbake: runqueue: Fix race issues around hash equivalence and sstate reuse
bluez5: Point hciattach bcm43xx firmware search path to /lib/firmware
build-appliance-image: Update to langdale head revision
cargo_common.bbclass: Fix typos
classes: make TOOLCHAIN more permissive for kernel
cmake: Upgrade to 3.24.2
combo-layer: add sync-revs command
combo-layer: dont use bb.utils.rename
combo-layer: remove unused import
common-tasks.rst: fix oeqa runtime test path
create-spdx: default share_src for shared sources
curl: Correct LICENSE from MIT-open-group to curl
dbus: Add missing CVE product name
devtool/upgrade: correctly handle recipes where S is a subdir of upstream tree
dhcpcd: fix to work with systemd
docs: kernel-dev: faq: update tip on how to not include kernel in image
docs: migration-4.0: specify variable name change for kernel inclusion in image recipe
expat: upgrade to 2.5.0
externalsrc: fix lookup for .gitmodules
ffmpeg: Upgrade to 5.1.2
gcc-shared-source: Fix source date epoch handling
gcc-source: Drop gengtype manipulation
gcc-source: Ensure deploy_source_date_epoch sstate hash doesn’t change
gcc-source: Fix gengtypes race
gdk-pixbuf: Upgrade to 2.42.10
get_module_deps3.py: Check attribute ‘__file__’
glibc-tests: correctly pull in the actual tests when installing -ptest package
gnomebase.bbclass: return the whole version for tarball directory if it is a number
go-crosssdk: avoid host contamination by GOCACHE
go: Update reproducibility patch to fix panic errors
go: submit patch upstream
go: Upgrade to 1.19.3
gptfdisk: remove warning message from target system
groff: submit patches upstream
gstreamer1.0: Upgrade to 1.20.5
help2man: Upgrade to 1.49.3
insane: add codeload.github.com to src-uri-bad checkz
inetutils: Upgrade to 2.4
iso-codes: Upgrade to 4.12.0
kbd: Don’t build tests
kea: submit patch upstream
kern-tools: integrate ZFS speedup patch
kernel.bbclass: Include randstruct seed assets in STAGING_KERNEL_BUILDDIR
kernel.bbclass: make KERNEL_DEBUG_TIMESTAMPS work at rebuild
kernel.bbclass: remove empty module directories to prevent QA issues
lib/buildstats: fix parsing of trees with reduced_proc_pressure directories
libdrm: Remove libdrm-kms package
libepoxy: convert to git
libepoxy: remove upstreamed patch
libepoxy: Upgrade to 1.5.10
libffi: submit patch upstream
libffi: Upgrade to 3.4.4
libical: Upgrade to 3.0.16
libnewt: Upgrade to 0.52.23
libsdl2: Upgrade to 2.24.2
libpng: Upgrade to 1.6.39
libuv: fixup SRC_URI
libxcrypt-compat: Upgrade to 4.4.33
libxcrypt: Upgrade to 4.4.30
libxml2: fix test data checksums
linux-firmware: add new fw file to ${PN}-qcom-adreno-a530
linux-firmware: don’t put the firmware into the sysroot
linux-firmware: Upgrade to 20221109
linux-yocto/5.15: fix CONFIG_CRYPTO_CCM mismatch warnings
linux-yocto/5.15: update genericx86* machines to v5.15.72
linux-yocto/5.15: Upgrade to v5.15.78
linux-yocto/5.19: cfg: intel and vesa updates
linux-yocto/5.19: fix CONFIG_CRYPTO_CCM mismatch warnings
linux-yocto/5.19: fix elfutils run-backtrace-native-core ptest failure
linux-yocto/5.19: security.cfg: remove configs which have been dropped
linux-yocto/5.19: update genericx86* machines to v5.19.14
linux-yocto/5.19: Upgrade to v5.19.17
lsof: add update-alternatives logic
lttng-modules: Upgrade to 2.13.7
lttng-tools: submit determinism.patch upstream
manuals: add 4.0.5 and 4.0.6 release notes
mesa: do not rely on native llvm-config in target sysroot
mesa: Upgrade to 22.2.3
meta-selftest/staticids: add render group for systemd
mirrors.bbclass: update CPAN_MIRROR
mobile-broadband-provider-info: Upgrade to 20221107
mpfr: Upgrade to 4.1.1
mtd-utils: Upgrade to 2.1.5
oeqa/concurrencytest: Add number of failures to summary output
oeqa/runtime/dnf: rewrite test_dnf_installroot_usrmerge
oeqa/selftest/externalsrc: add test for srctree_hash_files
oeqa/selftest/lic_checksum: Cleanup changes to emptytest include
openssh: remove RRECOMMENDS to rng-tools for sshd package
opkg: Set correct info_dir and status_file in opkg.conf
opkg: Upgrade to 0.6.1
ovmf: correct patches status
package: Fix handling of minidebuginfo with newer binutils
pango: Make it build with ptest disabled
pango: replace a recipe fix with an upstream submitted patch
pango: Upgrade to 1.50.11
poky.conf: bump version for 4.1.2
psplash: consider the situation of psplash not exist for systemd
python3-mako: Upgrade to 1.2.3
qemu-helper-native: Correctly pass program name as argv[0]
qemu-helper-native: Re-write bridge helper as C program
qemu: Ensure libpng dependency is deterministic
qemuboot.bbclass: make sure runqemu boots bundled initramfs kernel image
resolvconf: make it work
rm_work: adjust dependency to make do_rm_work_all depend on do_rm_work
rm_work: exclude the SSTATETASKS from the rm_work tasks sinature
ruby: merge .inc into .bb
ruby: Upgrade to 3.1.3
rust: submit a rewritten version of crossbeam_atomic.patch upstream
sanity: Drop data finalize call
scripts: convert-overrides: Allow command-line customizations
selftest: add a copy of previous mtd-utils version to meta-selftest
socat: Upgrade to 1.7.4.4
sstate: Allow optimisation of do_deploy_archives task dependencies
sstatesig: emit more helpful error message when not finding sstate manifest
sstatesig: skip the rm_work task signature
sudo: Upgrade to 1.9.12p1
sysstat: Upgrade to 12.6.1
systemd: Consider PACKAGECONFIG in RRECOMMENDS
systemd: Make importd depend on glib-2.0 again
systemd: add group render to udev package
systemd: Upgrade to 251.8
tcl: correct patch status
tzdata: Upgrade to 2022g
vala: install vapigen-wrapper into /usr/bin/crosscripts and stage only that
valgrind: skip the boost_thread test on arm
vim: Upgrade to 9.0.0947
wic: make ext2/3/4 images reproducible
xwayland: libxshmfence is needed when dri3 is enabled
xwayland: Upgrade to 22.1.5
yocto-check-layer: Allow OE-Core to be tested