Release notes for Yocto-5.1.1 (Styhead)
Security Fixes in Yocto-5.1.1
go: Fix CVE-2024-34155, CVE-2024-34156 and CVE-2024-34158
linux-yocto/6.6: Fix CVE-2023-52917, CVE-2024-46735, CVE-2024-46737, CVE-2024-46738, CVE-2024-46739, CVE-2024-46740, CVE-2024-46741, CVE-2024-46742, CVE-2024-46743, CVE-2024-46744, CVE-2024-46746, CVE-2024-46747, CVE-2024-46749, CVE-2024-46750, CVE-2024-46755, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46759, CVE-2024-46760, CVE-2024-46761, CVE-2024-46762, CVE-2024-46763, CVE-2024-46765, CVE-2024-46768, CVE-2024-46770, CVE-2024-46771, CVE-2024-46773, CVE-2024-46776, CVE-2024-46777, CVE-2024-46780, CVE-2024-46781, CVE-2024-46782, CVE-2024-46783, CVE-2024-46784, CVE-2024-46785, CVE-2024-46786, CVE-2024-46787, CVE-2024-46788, CVE-2024-46791, CVE-2024-46794, CVE-2024-46795, CVE-2024-46796, CVE-2024-46797, CVE-2024-46798, CVE-2024-46800, CVE-2024-46822, CVE-2024-46825, CVE-2024-46826, CVE-2024-46827, CVE-2024-46828, CVE-2024-46829, CVE-2024-46830, CVE-2024-46831, CVE-2024-46832, CVE-2024-46835, CVE-2024-46836, CVE-2024-46838, CVE-2024-46840, CVE-2024-46843, CVE-2024-46844, CVE-2024-46845, CVE-2024-46846, CVE-2024-46847, CVE-2024-46848, CVE-2024-46849, CVE-2024-46852, CVE-2024-46853, CVE-2024-46854, CVE-2024-46855, CVE-2024-46857, CVE-2024-46858, CVE-2024-46859, CVE-2024-46860, CVE-2024-46861, CVE-2024-46863, CVE-2024-46864, CVE-2024-47663, CVE-2024-47664, CVE-2024-47665, CVE-2024-47666, CVE-2024-47667, CVE-2024-47668, CVE-2024-47669, CVE-2024-47670, CVE-2024-47671, CVE-2024-47672, CVE-2024-47673, CVE-2024-47674, CVE-2024-47675, CVE-2024-47678, CVE-2024-47679, CVE-2024-47681, CVE-2024-47682, CVE-2024-47683, CVE-2024-47684, CVE-2024-47685, CVE-2024-47686, CVE-2024-47688, CVE-2024-47689, CVE-2024-47690, CVE-2024-47691, CVE-2024-47692, CVE-2024-47693, CVE-2024-47695, CVE-2024-47696, CVE-2024-47697, CVE-2024-47698, CVE-2024-47699, CVE-2024-47700, CVE-2024-47701, CVE-2024-47705, CVE-2024-47706, CVE-2024-47707, CVE-2024-47710, CVE-2024-47712, CVE-2024-47713, CVE-2024-47714, CVE-2024-47715, CVE-2024-47716, CVE-2024-47718, CVE-2024-47719, CVE-2024-47720, CVE-2024-47723, CVE-2024-47727, CVE-2024-47728, CVE-2024-47730, CVE-2024-47731, CVE-2024-47734, CVE-2024-47735, CVE-2024-47737, CVE-2024-47738, CVE-2024-47739, CVE-2024-47741, CVE-2024-47742, CVE-2024-47743, CVE-2024-47744, CVE-2024-47745, CVE-2024-47747, CVE-2024-47748, CVE-2024-47749, CVE-2024-47750, CVE-2024-47751, CVE-2024-47752, CVE-2024-47753, CVE-2024-47754, CVE-2024-47757, CVE-2024-49850, CVE-2024-49851, CVE-2024-49852, CVE-2024-49853, CVE-2024-49854, CVE-2024-49855, CVE-2024-49856, CVE-2024-49858, CVE-2024-49859, CVE-2024-49860, CVE-2024-49861 and CVE-2024-49862
linux-yocto/6.10: Fix CVE-2023-52917, CVE-2024-46714, CVE-2024-46719, CVE-2024-46720, CVE-2024-46721, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46725, CVE-2024-46726, CVE-2024-46727, CVE-2024-46728, CVE-2024-46730, CVE-2024-46731, CVE-2024-46732, CVE-2024-46735, CVE-2024-46737, CVE-2024-46738, CVE-2024-46739, CVE-2024-46740, CVE-2024-46741, CVE-2024-46742, CVE-2024-46743, CVE-2024-46744, CVE-2024-46746, CVE-2024-46747, CVE-2024-46749, CVE-2024-46750, CVE-2024-46751, CVE-2024-46755, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46759, CVE-2024-46760, CVE-2024-46761, CVE-2024-46762, CVE-2024-46763, CVE-2024-46765, CVE-2024-46766, CVE-2024-46768, CVE-2024-46769, CVE-2024-46770, CVE-2024-46771, CVE-2024-46772, CVE-2024-46773, CVE-2024-46774, CVE-2024-46775, CVE-2024-46776, CVE-2024-46777, CVE-2024-46778, CVE-2024-46779, CVE-2024-46780, CVE-2024-46781, CVE-2024-46782, CVE-2024-46783, CVE-2024-46784, CVE-2024-46785, CVE-2024-46786, CVE-2024-46787, CVE-2024-46788, CVE-2024-46789, CVE-2024-46790, CVE-2024-46791, CVE-2024-46792, CVE-2024-46793, CVE-2024-46794, CVE-2024-46795, CVE-2024-46796, CVE-2024-46797, CVE-2024-46798, CVE-2024-46799, CVE-2024-46800, CVE-2024-46801, CVE-2024-46802, CVE-2024-46803, CVE-2024-46804, CVE-2024-46805, CVE-2024-46806, CVE-2024-46807, CVE-2024-46808, CVE-2024-46809, CVE-2024-46810, CVE-2024-46811, CVE-2024-46812, CVE-2024-46813, CVE-2024-46814, CVE-2024-46815, CVE-2024-46816, CVE-2024-46817, CVE-2024-46818, CVE-2024-46819, CVE-2024-46820, CVE-2024-46821, CVE-2024-46822, CVE-2024-46823, CVE-2024-46824, CVE-2024-46825, CVE-2024-46826, CVE-2024-46827, CVE-2024-46828, CVE-2024-46829, CVE-2024-46830, CVE-2024-46831, CVE-2024-46832, CVE-2024-46833, CVE-2024-46834, CVE-2024-46835, CVE-2024-46836, CVE-2024-46837, CVE-2024-46838, CVE-2024-46840, CVE-2024-46841, CVE-2024-46842, CVE-2024-46843, CVE-2024-46844, CVE-2024-46845, CVE-2024-46846, CVE-2024-46847, CVE-2024-46848, CVE-2024-46849, CVE-2024-46850, CVE-2024-46851, CVE-2024-46852, CVE-2024-46853, CVE-2024-46854, CVE-2024-46855, CVE-2024-46856, CVE-2024-46857, CVE-2024-46858, CVE-2024-46859, CVE-2024-46860, CVE-2024-46861, CVE-2024-46862, CVE-2024-46863, CVE-2024-46864, CVE-2024-46866, CVE-2024-46867, CVE-2024-46868, CVE-2024-46869, CVE-2024-46870, CVE-2024-46871, CVE-2024-47658, CVE-2024-47659, CVE-2024-47660, CVE-2024-47661, CVE-2024-47662, CVE-2024-47663, CVE-2024-47664, CVE-2024-47665, CVE-2024-47666, CVE-2024-47667, CVE-2024-47668, CVE-2024-47669, CVE-2024-47670, CVE-2024-47671, CVE-2024-47672, CVE-2024-47673, CVE-2024-47674, CVE-2024-47675, CVE-2024-47676, CVE-2024-47677, CVE-2024-47678, CVE-2024-47679, CVE-2024-47680, CVE-2024-47681, CVE-2024-47682, CVE-2024-47683, CVE-2024-47684, CVE-2024-47685, CVE-2024-47686, CVE-2024-47687, CVE-2024-47688, CVE-2024-47689, CVE-2024-47690, CVE-2024-47691, CVE-2024-47692, CVE-2024-47693, CVE-2024-47695, CVE-2024-47696, CVE-2024-47697, CVE-2024-47698, CVE-2024-47699, CVE-2024-47700, CVE-2024-47701, CVE-2024-47702, CVE-2024-47703, CVE-2024-47704, CVE-2024-47705, CVE-2024-47706, CVE-2024-47707, CVE-2024-47710, CVE-2024-47712, CVE-2024-47713, CVE-2024-47714, CVE-2024-47715, CVE-2024-47716, CVE-2024-47717, CVE-2024-47718, CVE-2024-47719, CVE-2024-47720, CVE-2024-47721, CVE-2024-47723, CVE-2024-47724, CVE-2024-47727, CVE-2024-47728, CVE-2024-47730, CVE-2024-47731, CVE-2024-47732, CVE-2024-47733, CVE-2024-47734, CVE-2024-47735, CVE-2024-47736, CVE-2024-47737, CVE-2024-47738, CVE-2024-47739, CVE-2024-47741, CVE-2024-47742, CVE-2024-47743, CVE-2024-47744, CVE-2024-47745, CVE-2024-47746, CVE-2024-47747, CVE-2024-47748, CVE-2024-47749, CVE-2024-47750, CVE-2024-47751, CVE-2024-47752, CVE-2024-47753, CVE-2024-47754, CVE-2024-47757, CVE-2024-49850, CVE-2024-49851, CVE-2024-49852, CVE-2024-49853, CVE-2024-49854, CVE-2024-49855, CVE-2024-49856, CVE-2024-49858, CVE-2024-49859, CVE-2024-49860, CVE-2024-49861, CVE-2024-49862, CVE-2024-49863, CVE-2024-49864, CVE-2024-49866, CVE-2024-49867, CVE-2024-49868, CVE-2024-49870, CVE-2024-49871, CVE-2024-49874 and CVE-2024-49875
orc: Fix CVE-2024-40897 (follow-up fix)
vim: Fix CVE-2024-45306 and CVE-2024-47814
wpa-supplicant: Ignore CVE-2024-5290
xserver-xorg: Fix CVE-2024-9632
xwayland: Fix CVE-2024-9632
Fixes in Yocto-5.1.1
binutils: Add missing perl modules to RDEPENDS for nativsdk variant
binutils: Fix binutils mingw packaging
bitbake.conf: Mark VOLATILE_LOG_DIR & VOLATILE_TMP_DIR as obsolete
bitbake: Remove custom exception backtrace formatting
bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM
bitbake: fetch2/git: Use quote from shlex, not pipes
bitbake: fetch2: don’t try to preserve all attributes when unpacking files
bitbake: fetch2: use persist_data context managers
bitbake: fetch/wget: Increase timeout to 100s from 30s
bitbake: gitsm: Add call_process_submodules() to remove duplicated code
bitbake: gitsm: Remove downloads/tmpdir when failed
bitbake: persist_data: close connection in SQLTable __exit__
bitbake: tests/fetch: Update GoModTest and GoModGitTest
bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab
bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab
bluez: Fix mesh builds on musl
build-appliance-image: Update to styhead head revision
cml1.bbclass: do_diffconfig: Don’t override .config with .config.orig
contributor-guide: Remove duplicated words
cve-check: add field “modified” to JSON report
cve-check: add support for cvss v4.0
cve-check: do not skip cve status description after :
cve-check: fix malformed cve status description with : characters
dev-manual: add bblock documentation
dev-manual: bblock: use warning block instead of attention
dev-manual: document how to provide confs from layer.conf
documentation: features: describe distribution feature pni-name
documentation; features: remove duplicate word in distribution feature ext2
documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint
documentation: Makefile: add support for xelatex
documentation: Makefile: publish pdf and epub versions too
documentation: Makefile: remove inkscape, replace by rsvg-convert
documentation: README: add instruction to run Vale on a subset
documentation: Replace VOLATILE_LOG_DIR with FILESYSTEM_PERMS_TABLES
documentation: Replace VOLATILE_TMP_DIR with FILESYSTEM_PERMS_TABLES
documentation: add a download page for epub and pdf
documentation: conf.py: add a bitbake_git extlink
documentation: conf.py: rename :cve: role to :cve_nist:
documentation: sphinx-static/switchers.js.in: do not refer to URL_ROOT anymore
documentation: styles: vocabularies: Yocto: add sstate
e2fsprogs: removed ‘sed -u’ option
efi-bootdisk.wks: Increase overhead-factor to avoid test failures
ffmpeg: Add “libswresample libavcodec” to CVE_PRODUCT
ffmpeg: Disable asm optimizations on x86
ffmpeg: fix packaging examples
ffmpeg: nasm is x86 only, so only DEPEND if x86
ffmpeg: no need for textrel INSANE_SKIP
gcc-source: Fix racing on building gcc-source-14.2.0 and lib32-gcc-source-14.2.0
gcc: add a backport patch to fix an issue with tzdata 2024b
git: upgrade to 2.46.1
glib-2.0: fix glib-2.0 ptest failure when upgrading tzdata2024b
glibc: Fix missing randomness in __gen_tempname
glibc: stable 2.40 branch updates
go: upgrade to 1.22.8
groff: fix rare build race in hdtbl
icu: update patch Upstream-Status
image.bbclass: Drop support for ImageQAFailed exceptions in image_qa
json-c: avoid ptest failure caused by valgrind
kexec-tools: update COMPATIBLE_HOST because of makedumpfile
kmscube: Upgrade to latest revision (b2f97f53e0..)
lib/oe/package-manager: skip processing installed-pkgs with empty globs
libevdev: upgrade to 1.13.3
libgfortran: fix buildpath QA issue
libpam: use libdir in conditional
linux-yocto/6.6: update to v6.6.54
linux-yocto/6.10: bsp/genericarm64: disable ARM64_SME
linux-yocto/6.10: cfg: gpio: allow to re-enable the deprecated GPIO sysfs interface
linux-yocto/6.10: genericarm64.cfg: enable CONFIG_DMA_CMA
linux-yocto/6.10: update to v6.10.14
linux-yocto: Enable l2tp drivers when ptest featuee is on
lsb-release: fix Distro Codename shell escaping
migration-guides/release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure
migration-guides/release-notes-5.0: NO_OUTPUT -> NO_COLOR
migration-guides/release-notes-5.1: add beaglebone-yocto parselogs test oeqa failure
migration-guides/release-notes-5.1: document added python3-libarchive-c ptest
migration-guides/release-notes-5.1: document fixed _test_devtool_add_git_url test
migration-guides/release-notes-5.1: document oeqa/selftest envvars change
migration-guides/release-notes-5.1: document spirv-tools reproducibility
migration-guides/release-notes-5.1: fix spdx bullet point
migration-guides/release-notes-5.1: update for several section
migration-guides/release-notes-5.1: update release note for styhead
migration-guides: 5.1: fix titles
migration-guides: add release notes for 4.0.21 and 4.0.22
oeqa/postactions: Fix archive retrieval from target
oeqa/runtime/ssh: Fix incorrect timeout fix
oeqa/runtime/ssh: Rework ssh timeout
oeqa/selftest/gcc: Fix kex exchange identification error
oeqa/selftest: Update the BB_HASHSERVE_UPSTREAM
openssl: Fix SDK environment script to avoid unbound variable
orc: upgrade to 0.4.40
overview-manual: concepts: add details on package splitting
ovmf-native: remove .pyc files from install
package_rpm: Check if file exists before open()
package_rpm: restrict rpm to 4 threads
package_rpm: use zstd’s default compression level
poky.conf: bump version for 5.1.1
pseudo: Fix envp bug and add posix_spawn wrapper
python3-maturin: sort external libs in wheel files
python3-setuptools: Add “python:setuptools” to CVE_PRODUCT
qemu: Fix build on musl/riscv64
qemurunner: Clean up serial_lock handling
ref-manual: add missing CVE_CHECK manifest variables
ref-manual: add missing EXTERNAL_KERNEL_DEVICETREE variable
ref-manual: add missing OPKGBUILDCMD variable
ref-manual: add missing TESTIMAGE_FAILED_QA_ARTIFACTS
ref-manual: add missing image manifest variables
ref-manual: add missing nospdx class
ref-manual: add missing variable PRSERV_UPSTREAM
ref-manual: add mission pep517-backend sanity check
ref-manual: add new RECIPE_UPGRADE_EXTRA_TASKS variable
ref-manual: add new retain class and variables
ref-manual: add new vex class
ref-manual: devtool-reference: document missing commands
ref-manual: devtool-reference: refresh example outputs
ref-manual: drop TCLIBCAPPEND variable
ref-manual: drop siteconfig class
ref-manual: faq: add q&a on class appends
ref-manual: fix ordering of insane checks list
ref-manual: merge patch-status-* to patch-status
ref-manual: release-process: add a reference to the doc’s release
ref-manual: release-process: refresh the current LTS releases
ref-manual: release-process: update releases.svg
ref-manual: release-process: update releases.svg with month after “Current”
ref-manual: structure.rst: document missing tmp/ dirs
ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables
rootfs-postcommands.bbclass: make opkg status reproducible
scripts/install-buildtools: Update to 5.1
selftest/sstatetests: run CDN mirror check only once
shadow: use update-alternatives to handle groups.1
strace: download release tarballs from GitHub
systemd: fix broken links for sysvinit-compatible commands
tcl: skip io-13.6 test case
toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails
tune-cortexa32: set tune feature as armv8a
tzdata/tzcode-native: upgrade to 2024b
uboot-sign: fix concat_dtb arguments
udev-extraconf: fix network.sh script did not configure hotplugged interfaces
util-linux: Add findmnt to the bash completion RDEPENDS
vim: Upgrade to 9.1.0764
virglrenderer: Add patch to fix -int-conversion build issue
weston: Add missing runtime dependency on freerdp
weston: backport patch to allow neatvnc < v0.9.0
wireless-regdb: upgrade to 2024.10.07
xserver-xorg: upgrade to 21.1.14
xwayland: upgrade to 24.1.4
Known Issues in Yocto-5.1.1
N/A
Contributors to Yocto-5.1.1
Aditya Tayade
Alban Bedel
Aleksandar Nikolic
Alexander Kanavin
Antonin Godard
Bruce Ashfield
Chen Qi
Chris Laplante
Christian Lindeberg
Claus Stovgaard
Clayton Casciato
Daniel McGregor
Deepthi Hemraj
Harish Sadineni
Hiago De Franco
Hongxu Jia
Jagadeesh Krishnanjanappa
Jinfeng Wang
Jonas Gorski
Jose Quaresma
Joshua Watt
Julien Stephan
Jörg Sommer
Kai Kang
Katawann
Khem Raj
Lee Chee Yang
Markus Volk
Martin Jansa
Mathieu Dubois-Briand
Michael Opdenacker
Mikko Rapeli
Niko Mauno
Ola x Nilsson
Pavel Zhukov
Peter Kjellerstedt
Peter Marko
Purushottam Choudhary
Regis Dargent
Richard Purdie
Robert Yang
Rohini Sangam
Ross Burton
Sergei Zhmylev
Shunsuke Tokumoto
Steve Sakoman
Talel BELHAJSALEM
Tom Hochstein
Vijay Anusuri
Wang Mingyu
Yi Zhao
Yoann Congal
Zahir Hussain
Repositories / Downloads for Yocto-5.1.1
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: styhead
Tag: yocto-5.1.1
Git Revision: 7e081bd98fdc5435e850d1df79a5e0f1e30293d0
Release Artefact: poky-7e081bd98fdc5435e850d1df79a5e0f1e30293d0
sha: 1ae688856bcd4aa2d1a14c2659217143cc2050151a8c194b99e6b472b0a99710
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/poky-7e081bd98fdc5435e850d1df79a5e0f1e30293d0.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/poky-7e081bd98fdc5435e850d1df79a5e0f1e30293d0.tar.bz2
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: styhead
Tag: yocto-5.1.1
Git Revision: b511d0146a2e8f316f4aecc90c853215674013ea
Release Artefact: oecore-b511d0146a2e8f316f4aecc90c853215674013ea
sha: 71eb36bf898b3eb5a7a79c2f1c057755405740e82b21a57ac540cebc1337e151
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/oecore-b511d0146a2e8f316f4aecc90c853215674013ea.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/oecore-b511d0146a2e8f316f4aecc90c853215674013ea.tar.bz2
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: styhead
Tag: yocto-5.1.1
Git Revision: 77fe18d4f8ec34501045c5d92ce7e13b1bd129e9
Release Artefact: meta-mingw-77fe18d4f8ec34501045c5d92ce7e13b1bd129e9
sha: 4c7f8100a3675d9863e51825def3df5b263ffc81cd57bae26eedbc156d771534
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/meta-mingw-77fe18d4f8ec34501045c5d92ce7e13b1bd129e9.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/meta-mingw-77fe18d4f8ec34501045c5d92ce7e13b1bd129e9.tar.bz2
bitbake
Repository Location: https://git.openembedded.org/bitbake/
Branch: 2.10
Tag: yocto-5.1.1
Git Revision: 9602a684568910fd333ffce907fa020ad3661c26
Release Artefact: bitbake-9602a684568910fd333ffce907fa020ad3661c26
sha: 8f5304b7a71cf7ad5dc8e5ee8bbfc041780bd402712f314d2c3c8be79c89a526
Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.1.1/bitbake-9602a684568910fd333ffce907fa020ad3661c26.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.1.1/bitbake-9602a684568910fd333ffce907fa020ad3661c26.tar.bz2
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: styhead
Tag: yocto-5.1.1
Git Revision: 8288c8cae7fe7303e89d8ed286de91fc26ce6cc3