.. SPDX-License-Identifier: CC-BY-SA-2.0-UK Release notes for Yocto-4.1.3 (Langdale) ---------------------------------------- Security Fixes in Yocto-4.1.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - apr-util: Fix :cve:`2022-25147` - apr: Fix :cve:`2022-24963` and :cve:`2022-28331` - bind: Fix :cve:`2022-3094`, :cve:`2022-3736` and :cve:`2022-3924` - curl: Fix :cve:`2022-43551` and :cve:`2022-43552` - dbus: Fix :cve:`2022-42010`, :cve:`2022-42011` and :cve:`2022-42012` - git: Fix :cve:`2022-23521`, :cve:`2022-39253`, :cve:`2022-39260` and :cve:`2022-41903` - git: Ignore :cve:`2022-41953` - go: Fix :cve:`2022-41717` and :cve:`2022-41720` - grub2: Fix :cve:`2022-2601` and :cve:`2022-3775` - less: Fix :cve:`2022-46663` - libarchive: Fix :cve:`2022-36227` - libksba: Fix :cve:`2022-47629` - openssl: Fix :cve:`2022-3996` - pkgconf: Fix :cve:`2023-24056` - ppp: Fix :cve:`2022-4603` - sudo: Fix :cve:`2023-22809` - tar: Fix :cve:`2022-48303` - vim: Fix :cve:`2023-0049`, :cve:`2023-0051`, :cve:`2023-0054`, :cve:`2023-0288`, :cve:`2023-0433` and :cve:`2023-0512` - xserver-xorg: Fix :cve_mitre:`2023-0494` - xwayland: Fix :cve_mitre:`2023-0494` Fixes in Yocto-4.1.3 ~~~~~~~~~~~~~~~~~~~~ - apr-util: Upgrade to 1.6.3 - apr: Upgrade to 1.7.2 - apt: fix do_package_qa failure - at: Change when files are copied - base.bbclass: Fix way to check ccache path - bblayers/makesetup: skip git repos that are submodules - bblayers/setupwriters/oe-setup-layers: create dir if not exists - bind: Upgrade to 9.18.11 - bitbake-layers: fix a typo - bitbake: bb/utils: include SSL certificate paths in export_proxies - bitbake: fetch2/git: Clarify the meaning of namespace - bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata - bitbake: process: log odd unlink events with bitbake.sock - bitbake: server/process: Add bitbake.sock race handling - bitbake: siggen: Fix inefficient string concatenation - bootchart2: Fix usrmerge support - bsp-guide: fix broken git URLs and missing word - build-appliance-image: Update to langdale head revision - buildtools-tarball: set pkg-config search path - busybox: Fix depmod patch - busybox: always start do_compile with orig config files - busybox: rm temporary files if do_compile was interrupted - cairo: fix CVE patches assigned wrong CVE number - classes/fs-uuid: Fix command output decoding issue - classes/populate_sdk_base: Append cleandirs - classes: image: Set empty weak default IMAGE_LINGUAS - cml1: remove redundant addtask - core-image.bbclass: Fix missing leading whitespace with ':append' - createrepo-c: Include missing rpm/rpmstring.h - curl: don't enable debug builds - curl: fix dependencies when building with ldap/ldaps - cve-check: write the cve manifest to IMGDEPLOYDIR - cve-update-db-native: avoid incomplete updates - cve-update-db-native: show IP on failure - dbus: Upgrade to 1.14.6 - dev-manual: common-tasks.rst: add link to FOSDEM 2023 video - dev-manual: fix old override syntax - devshell: Do not add scripts/git-intercept to PATH - devtool: fix devtool finish when gitmodules file is empty - devtool: process local files only for the main branch - dhcpcd: backport two patches to fix runtime error - dhcpcd: fix dhcpcd start failure on qemuppc64 - diffutils: Upgrade to 3.9 - ffmpeg: fix configure failure on noexec /tmp host - gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests - git: Upgrade to 2.37.6 - glslang: branch rename master -> main - go: Upgrade to 1.19.4 - gstreamer1.0 : Revert "disable flaky gstbin:test_watch_for_state_change test" and Fix race conditions in gstbin tests with upstream solution - harfbuzz: remove bindir only if it exists - httpserver: add error handler that write to the logger - image.bbclass: print all QA functions exceptions - kernel-fitimage: Adjust order of dtb/dtbo files - kernel-fitimage: Allow user to select dtb when multiple dtb exists - kernel-yocto: fix kernel-meta data detection - kernel/linux-kernel-base: Fix kernel build artefact determinism issues - lib/buildstats: handle tasks that never finished - lib/oe/reproducible: Use git log without gpg signature - libarchive: Upgrade to 3.6.2 - libc-locale: Fix on target locale generation - libgit2: Upgrade to 1.5.1 - libjpeg-turbo: Upgrade to 2.1.5.1 - libksba: Upgrade to 1.6.3 - libpng: Enable NEON for aarch64 to enensure consistency with arm32. - librsvg: Only enable the Vala bindings if GObject Introspection is enabled - librsvg: enable vapi build - libseccomp: fix for the ptest result format - libseccomp: fix typo in DESCRIPTION - libssh2: Clean up ptest patch/coverage - libtirpc: Check if file exists before operating on it - libusb1: Link with latomic only if compiler has no atomic builtins - libusb1: Strip trailing whitespaces - linux-firmware: add yamato fw files to qcom-adreno-a2xx package - linux-firmware: properly set license for all Qualcomm firmware - linux-firmware: Upgrade to 20230210 - linux-yocto/5.15: fix perf build with clang - linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off - linux-yocto/5.15: ltp and squashfs fixes - linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user copy - linux-yocto/5.15: Upgrade to v5.15.91 - linux-yocto/5.19: fix perf build with clang - linux-yocto/5.19: powerpc: Fix reschedule bug in KUAP-unlocked user copy - lsof: fix old override syntax - lttng-modules: Fix for 5.10.163 kernel version - lttng-modules: fix for kernel 6.2+ - lttng-modules: Upgrade to 2.13.8 - lttng-tools: Upgrade to 2.13.9 - make-mod-scripts: Ensure kernel build output is deterministic - manuals: update patchwork instance URL - mesa-gl: gallium is required when enabling x11 - meta: remove True option to getVar and getVarFlag calls (again) - migration-guides: add release-notes for 4.0.7 - native: Drop special variable handling - numactl: skip test case when target platform doesn't have 2 CPU node - oeqa context.py: fix --target-ip comment to include ssh port number - oeqa dump.py: add error counter and stop after 5 failures - oeqa qemurunner.py: add timeout to QMP calls - oeqa qemurunner.py: try to avoid reading one character at a time - oeqa qemurunner: read more data at a time from serial - oeqa ssh.py: add connection keep alive options to ssh client - oeqa ssh.py: fix hangs in run() - oeqa ssh.py: move output prints to new line - oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal - oeqa/rpm.py: Increase timeout and add debug output - oeqa/selftest/debuginfod: improve testcase - oeqa/selftest/locales: Add selftest for locale generation/presence - oeqa/selftest/resulttooltests: fix minor typo - openssl: Upgrade to 3.0.8 - opkg: ensure opkg uses private gpg.conf when applying keys. - pango: Upgrade to 1.50.12 - perf: Enable debug/source packaging - pkgconf: Upgrade to 1.9.4 - poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder - poky.conf: bump version for 4.1.3 - populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append' - profile-manual: update WireShark hyperlinks - ptest-packagelists.inc: Fix missing leading whitespace with ':append' - python3-pytest: depend on python3-tomli instead of python3-toml - quilt: fix intermittent failure in faildiff.test - quilt: use upstreamed faildiff.test fix - recipe_sanity: fix old override syntax - ref-manual: Fix invalid feature name - ref-manual: update DEV_PKG_DEPENDENCY in variables - ref-manual: variables.rst: fix broken hyperlink - rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively - runqemu: kill qemu if it hangs - rust: Do not use default compiler flags defined in CC crate - scons.bbclass: Make MAXLINELENGTH overridable - scons: Pass MAXLINELENGTH to scons invocation - sdkext/cases/devtool: pass a logger to HTTPService - selftest/virgl: use pkg-config from the host - spirv-headers/spirv-tools: set correct branch name - sstate.bbclass: Fetch non-existing local .sig files if needed - sstatesig: Improve output hash calculation - sudo: Upgrade to 1.9.12p2 - system-requirements.rst: Add Fedora 36, AlmaLinux 8.7 & 9.1, and OpenSUSE 15.4 to list of supported distros - testimage: Fix error message to reflect new syntax - tiff: Add packageconfig knob for webp - toolchain-scripts: compatibility with unbound variable protection - uninative: Upgrade to 3.8.1 to include libgcc - update-alternatives: fix typos - vim: Upgrade to 9.0.1293 - vulkan-samples: branch rename master -> main - wic: Fix usage of fstype=none in wic - wireless-regdb: Upgrade to 2023.02.13 - xserver-xorg: Upgrade to 21.1.7 - xwayland: Upgrade to 22.1.8 Known Issues in Yocto-4.1.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - N/A Contributors to Yocto-4.1.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Adrian Freihofer - Alejandro Hernandez Samaniego - Alex Kiernan - Alexander Kanavin - Alexis Lothoré - Anton Antonov - Antonin Godard - Armin Kuster - Arnout Vandecappelle - Benoît Mauduit - Bruce Ashfield - Carlos Alberto Lopez Perez - Changqing Li - Charlie Johnston - Chee Yang Lee - Chen Qi - Dmitry Baryshkov - Enguerrand de Ribaucourt - Etienne Cordonnier - Fawzi KHABER - Federico Pellegrin - Frank de Brabander - Harald Seiler - He Zhe - Jan Kircher - Jermain Horsman - Jose Quaresma - Joshua Watt - Kai Kang - Khem Raj - Lei Maohui - Louis Rannou - Luis - Marek Vasut - Markus Volk - Marta Rybczynska - Martin Jansa - Mateusz Marciniec - Mauro Queiros - Michael Halstead - Michael Opdenacker - Mikko Rapeli - Mingli Yu - Narpat Mali - Niko Mauno - Pavel Zhukov - Pawel Zalewski - Peter Kjellerstedt - Petr Kubizňák - Quentin Schulz - Randy MacLeod - Richard Purdie - Robert Joslyn - Rodolfo Quesada Zumbado - Ross Burton - Sakib Sajal - Sandeep Gundlupet Raju - Saul Wold - Siddharth Doshi - Steve Sakoman - Thomas Roos - Tobias Hagelborn - Ulrich Ölmann - Vivek Kumbhar - Wang Mingyu - Xiangyu Chen Repositories / Downloads for Yocto-4.1.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ poky - Repository Location: :yocto_git:`/poky` - Branch: :yocto_git:`langdale </poky/log/?h=langdale>` - Tag: :yocto_git:`yocto-4.1.3 </poky/log/?h=yocto-4.1.3>` - Git Revision: :yocto_git:`91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f </poky/commit/?id=91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f>` - Release Artefact: poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f - sha: 94e4615eba651fe705436b29b854458be050cc39db936295f9d5eb7e85d3eff1 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2 openembedded-core - Repository Location: :oe_git:`/openembedded-core` - Branch: :oe_git:`langdale </openembedded-core/log/?h=langdale>` - Tag: :oe_git:`yocto-4.1.3 </openembedded-core/log/?h=yocto-4.1.3>` - Git Revision: :oe_git:`b995ea45773211bd7bdd60eabcc9bbffda6beb5c </openembedded-core/commit/?id=b995ea45773211bd7bdd60eabcc9bbffda6beb5c>` - Release Artefact: oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c - sha: 952e19361f205ee91b74e5caaa835d58fa6dd0d92ddaed50d4cd3f3fa56fab63 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2 meta-mingw - Repository Location: :yocto_git:`/meta-mingw` - Branch: :yocto_git:`langdale </meta-mingw/log/?h=langdale>` - Tag: :yocto_git:`yocto-4.1.3 </meta-mingw/log/?h=yocto-4.1.3>` - Git Revision: :yocto_git:`b0067202db8573df3d23d199f82987cebe1bee2c </meta-mingw/commit/?id=b0067202db8573df3d23d199f82987cebe1bee2c>` - Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c - sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2 bitbake - Repository Location: :oe_git:`/bitbake` - Branch: :oe_git:`2.2 </bitbake/log/?h=2.2>` - Tag: :oe_git:`yocto-4.1.3 </bitbake/log/?h=yocto-4.1.3>` - Git Revision: :oe_git:`592ee222a1c6da42925fb56801f226884b6724ec </bitbake/commit/?id=592ee222a1c6da42925fb56801f226884b6724ec>` - Release Artefact: bitbake-592ee222a1c6da42925fb56801f226884b6724ec - sha: 79c32f2ca66596132e32a45654ce0e9dd42b6b39186eff3540a9d6b499fe952c - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2 yocto-docs - Repository Location: :yocto_git:`/yocto-docs` - Branch: :yocto_git:`langdale </yocto-docs/log/?h=langdale>` - Tag: :yocto_git:`yocto-4.1.3 </yocto-docs/log/?h=yocto-4.1.3>` - Git Revision: :yocto_git:`3de2ad1f8ff87aeec30088779267880306a0f31a </yocto-docs/commit/?id=3de2ad1f8ff87aeec30088779267880306a0f31a>`