Release notes for Yocto-5.0.4 (Scarthgap)
Security Fixes in Yocto-5.0.4
apr: Fix CVE-2023-49582
curl: Ignore CVE-2024-32928
curl: Fix CVE-2024-7264
expat: Fix CVE-2024-45490, CVE-2024-45491 and CVE-2024-45492
ffmpeg: Fix CVE-2023-50008 and CVE-2024-32230
libpcap: Fix CVE-2023-7256 and CVE-2024-8006
libyaml: Ignore CVE-2024-35325 and CVE-2024-35326
openssl: Fix CVE-2024-5535 and CVE-2024-6119
python3-certifi: Fix CVE-2024-39689
python3-setuptools: Fix CVE-2024-6345
python3: Fix CVE-2024-6232, CVE-2024-7592, CVE-2024-8088 and CVE-2024-27034
qemu: Fix CVE-2024-4467 and CVE-2024-7409
ruby: Fix CVE-2024-27282
tiff: Fix CVE-2024-7006
vim: Fix CVE-2024-41957, CVE-2024-41965, CVE-2024-43374, CVE-2024-43790 and CVE-2024-43802
Fixes in Yocto-5.0.4
apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch
apr: upgrade to 1.7.5
bind: Fix build with the httpstats package config enabled
bitbake: data_smart: Improve performance for VariableHistory
bluez5: remove redundant patch for MAX_INPUT
build-appliance-image: Update to scarthgap head revision
buildhistory: Fix intermittent package file list creation
buildhistory: Restoring files from preserve list
buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage
busybox: Fix cut with “-s” flag
create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc
cups: upgrade to 2.4.10
dejagnu: Fix LICENSE (change to GPL-3.0-only)
doc: features: describe distribution feature pni-name
doc: features: remove duplicate word in distribution feature ext2
expat: upgrade to 2.6.3
expect-native: fix do_compile failure with gcc-14
gcc: Fix spurious ‘/’ in GLIBC_DYNAMIC_LINKER on microblaze
gcr: Fix LICENSE (change to LGPL-2.0-only)
glibc: fix fortran header file conflict for arm
go: upgrade to 1.22.6
gstreamer1.0: disable flaky baseparser tests
image_types.bbclass: Use –force also with lz4,lzop
initramfs-framework: fix typos
iw: Fix LICENSE (change to ISC)
libadwaita: upgrade to 1.5.2
libcap-ng: update SRC_URI
libdnf: upgrade to 0.73.2
libedit: Make docs generation deterministic
libgfortran.inc: fix nativesdk-libgfortran dependencies
librsvg: don’t try to run target code at build time
linux-firmware: add a package for ath12k firmware
llvm: Enable libllvm for native build
maintainers.inc: add maintainer for python(-setuptools, -smmap, -subunit, -testtools)
mc: fix source URL
migration-guide: add release notes for 4.0.20 and 5.0.3
oeqa/postactions: fix exception handling
oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM)
oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems
oeqa/runtime/ssh: check for all errors at the end
oeqa/runtime/ssh: increase the number of attempts
oeqa/selftest/reproducibile: Explicitly list virtual targets
oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies
openssh: add backported header file include
openssl: upgrade to 3.2.3
os-release: Fix VERSION_CODENAME in case it is empty
poky.conf: bump version for 5.0.4
populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported.
python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc
python3-pycryptodome(x): use python_setuptools_build_meta build class
python3: upgrade to 3.12.6
python3: skip readline limited history tests
qemu: backport patches to fix riscv64 build failure
qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath
ref-manual: fix typo and move SYSROOT_DIRS example
ruby: Make docs generation deterministic
systemd: Mitigate /var/log type mismatch issue
systemd: Mitigate /var/tmp type mismatch issue
tiff: Fix LICENSE (change to libtiff)
u-boot.inc: Refactor do_* steps into functions that can be overridden
udev-extraconf: Add collect flag to mount
unzip: Fix LICENSE (change to Info-ZIP)
util-linux: Add PACKAGECONFIG option (libmount-mountfd-support) to mitigate rootfs remount error
vim: upgrade to 9.1.0698
weston-init: fix weston not starting when xwayland is enabled
wireless-regdb: upgrade to 2024.07.04
wpa-supplicant: upgrade to 2.11
xserver-xorg: mark CVE-2023-5574 as unpatched when xvfb enabled
yocto-uninative: Update to 4.6 for glibc 2.40
zip: Fix LICENSE (change to Info-ZIP)
Known Issues in Yocto-5.0.4
N/A
Contributors to Yocto-5.0.4
Alban Bedel
Alexander Kanavin
Alexis Lothoré
Archana Polampalli
Ashish Sharma
Bartosz Golaszewski
Benjamin Szőke
Changqing Li
Chen Qi
Colin McAllister
Daniel Semkowicz
Dmitry Baryshkov
Gauthier HADERER
Guðni Már Gilbert
Jon Mason
Jose Quaresma
Jörg Sommer
Kai Kang
Khem Raj
Lee Chee Yang
Mark Hatle
Martin Jansa
Matthias Pritschet
Michael Halstead
Mingli Yu
Niko Mauno
Pedro Ferreira
Peter Marko
Quentin Schulz
Richard Purdie
Robert Yang
Ross Burton
Ryan Eatmon
Siddharth Doshi
Simone Weiß
Soumya Sambu
Steve Sakoman
Trevor Gamblin
Ulrich Ölmann
Vijay Anusuri
Wang Mingyu
Weisser, Pascal.ext
Yogita Urade
Repositories / Downloads for Yocto-5.0.4
poky
Repository Location: https://git.yoctoproject.org/poky
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: 2034fc38eb4e63984d9bd6b260aa1bf95ce562e4
Release Artefact: poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4
sha: 697ed099793d6c86d5ffe590e96f99689bd28dcb2d4451dc4585496fa4a20400
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2
openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: f888dd911529a828820799a7a1b75dfd3a44847c
Release Artefact: oecore-f888dd911529a828820799a7a1b75dfd3a44847c
sha: 93cb4c3c8e0f77edab20814d155847dc3452c6b083e3dd9c7a801e80a7e4d228
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2
meta-mingw
Repository Location: https://git.yoctoproject.org/meta-mingw
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: acbba477893ef87388effc4679b7f40ee49fc852
Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852
sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2
bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 2.8
Tag: yocto-5.0.4
Git Revision: d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3
Release Artefact: bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3
sha: d873f4d3a471d26680dc39200d8f3851a6863f15daa9bed978ba31b930f9a1c1
Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2
yocto-docs
Repository Location: https://git.yoctoproject.org/yocto-docs
Branch: scarthgap
Tag: yocto-5.0.4
Git Revision: d71081dd14a9d75ace4d1c62472374f37b4a888d