1.. SPDX-License-Identifier: CC-BY-SA-2.0-UK 2 3Release notes for 3.4.2 (honister) 4---------------------------------- 5 6Security Fixes in 3.4.2 7~~~~~~~~~~~~~~~~~~~~~~~ 8 9- tiff: backport fix for :cve:`2022-22844` 10- glibc : Fix :cve:`2021-3999` 11- glibc : Fix :cve:`2021-3998` 12- glibc : Fix :cve:`2022-23219` 13- glibc : Fix :cve:`2022-23218` 14- lighttpd: backport a fix for :cve:`2022-22707` 15- speex: fix :cve:`2020-23903` 16- linux-yocto/5.10: amdgpu: updates for :cve:`2021-42327` 17- libsndfile1: fix :cve:`2021-4156` 18- xserver-xorg: whitelist two CVEs 19- grub2: fix :cve:`2021-3981` 20- xserver-xorg: update :term:`CVE_PRODUCT` 21- binutils: :cve:`2021-42574` 22- gcc: Fix :cve:`2021-42574` 23- gcc: Fix :cve:`2021-35465` 24- cve-extra-exclusions: add db CVEs to exclusion list 25- gcc: Add :cve:`2021-37322` to the list of CVEs to ignore 26- bind: fix :cve:`2021-25219` 27- openssh: fix :cve:`2021-41617` 28- ncurses: fix :cve:`2021-39537` 29- vim: fix :cve:`2021-3968` and :cve:`2021-3973` 30- vim: fix :cve:`2021-3927` and :cve:`2021-3928` 31- gmp: fix :cve:`2021-43618` 32 33Fixes in 3.4.2 34~~~~~~~~~~~~~~ 35 36- build-appliance-image: Update to honister head revision 37- poky.conf: bump version for 3.4.2 release 38- libxml2: Backport python3-lxml workaround patch 39- core-image-sato-sdk: allocate more memory when in qemu 40- vim: upgrade to patch 4269 41- vim: update to include latest CVE fixes 42- expat: upgrade to 2.4.4 43- libusb1: correct :term:`SRC_URI` 44- yocto-check-layer: add debug output for the layers that were found 45- linux-firmware: Add CLM blob to linux-firmware-bcm4373 package 46- linux-yocto/5.10: update to v5.10.93 47- icu: fix make_icudata dependencies 48- sstate: Improve failure to obtain archive message/handling 49- insane.bbclass: Correct package_qa_check_empty_dirs() 50- sstate: A third fix for for touching files inside pseudo 51- kernel: introduce python3-dtschema-wrapper 52- vim: upgrade to 8.2 patch 3752 53- bootchart2: Add missing python3-math dependency 54- socat: update :term:`SRC_URI` 55- pigz: fix one failure of command "unpigz -l" 56- linux-yocto/5.14: update genericx86* machines to v5.14.21 57- linux-yocto/5.10: update genericx86* machines to v5.10.87 58- go: upgrade 1.16.10 -> 1.16.13 59- linux-yocto/5.10/cfg: add kcov feature fragment 60- linux-yocto/5.14: fix arm 32bit -rt warnings 61- oeqa/sstate: Fix allarch samesigs test 62- rootfs-postcommands.bbclass: Make two comments use the new variable syntax 63- cve-check: add lockfile to task 64- lib/oe/reproducible: correctly set .git location when recursively looking for git repos 65- epiphany: Update 40.3 -> 40.6 66- scripts/buildhistory-diff: drop use of distutils 67- scripts: Update to use exec_module() instead of load_module() 68- vulkan-loader: inherit pkgconfig 69- webkitgtk: Add reproducibility fix 70- openssl: Add reproducibility fix 71- rpm: remove tmp folder created during install 72- package_manager: ipk: Fix host manifest generation 73- bitbake: utils: Update to use exec_module() instead of load_module() 74- linux-yocto: add libmpc-native to :term:`DEPENDS` 75- ref-manual: fix patch documentation 76- bitbake: tests/fetch: Drop gnu urls from wget connectivity test 77- bitbake: fetch: npm: Use temporary file for empty user config 78- bitbake: fetch: npm: Quote destdir in run chmod command 79- bitbake: process: Do not mix stderr with stdout 80- xserver-xorg: upgrade 1.20.13 -> 1.20.14 81- python3-pyelftools: Depend on debugger, pprint 82- linux-firmware: upgrade 20211027 -> 20211216 83- oeqa/selftest/bbtests: Use YP sources mirror instead of GNU 84- systemd: Fix systemd-journal-gateway user/groups 85- license.bbclass: implement ast.NodeVisitor.visit_Constant 86- oe/license: implement ast.NodeVisitor.visit_Constant 87- packagedata.py: silence a DeprecationWarning 88- uboot-sign: fix the concatenation when multiple U-BOOT configurations are specified 89- runqemu: check the qemu PID has been set before kill()ing it 90- selftest/devtool: Check branch in git fetch 91- recipetool: Set master branch only as fallback 92- kern-tools: bug fixes and kgit-gconfig 93- linux-yocto-rt/5.10: update to -rt56 94- linux-yocto/5.14: update to v5.14.21 95- python3: upgrade 3.9.7 -> 3.9.9 96- bitbake: lib/pyinotify.py: Remove deprecated module asyncore 97- updates for recent releases 98- libdrm: upgrade 2.4.108 -> 2.4.109 99- patch.py: Initialize git repo before patching 100- boost: Fix build on arches with no atomics 101- boost: allow searching for python310 102- recipetool: extend curl detection when creating recipes 103- recipetool: handle GitLab URLs like we do GitHub 104- README.OE-Core.md: update URLs 105- libtool: change the default AR_FLAGS from "cru" to "cr" 106- libtool: Update patchset to match those submitted upstream 107- scripts/checklayer/common.py: Fixed a minor grammatical error 108- oeqa/parselogs: Fix quoting 109- oeqa/utils/dump: Fix typo 110- systemd: update 249.6 -> 249.7 111- glibc: Fix i586/c3 support 112- wic: support rootdev identified by partition label 113- buildhistory: Fix srcrevs output 114- classes/crate-fetch: Ensure crate fetcher is available 115- rootfs-postcommands: update systemd_create_users 116- classes/meson: Add optional rust definitions 117- rust-cross: Replace :term:`TARGET_ARCH` with :term:`TUNE_PKGARCH` 118- maintainers.inc: fix up rust-cross entry 119- rust-cross: Fix directory not deleted for race glibc vs. musl 120- wic: use shutil.which 121- bitbake: data_smart.py: Skip old override syntax checking for anonymous functions 122- documentation: conf.py: fix version of bitbake objects.inv 123- updates for release 3.3.4 124 125Contributors to 3.4.2 126~~~~~~~~~~~~~~~~~~~~~ 127 128- Alexander Kanavin 129- Alexandre Belloni 130- Anton Mikanovich 131- Anuj Mittal 132- Bruce Ashfield 133- Carlos Rafael Giani 134- Chaitanya Vadrevu 135- Changqing Li 136- Dhruva Gole 137- Florian Amstutz 138- Joshua Watt 139- Kai Kang 140- Khairul Rohaizzat Jamaluddin 141- Khem Raj 142- Konrad Weihmann 143- Kory Maincent 144- Li Wang 145- Marek Vasut 146- Markus Volk 147- Martin Jansa 148- Max Krummenacher 149- Michael Opdenacker 150- Mingli Yu 151- Oleksiy Obitotskyy 152- Pavel Zhukov 153- Peter Kjellerstedt 154- Pgowda 155- Quentin Schulz 156- Richard Purdie 157- Robert Yang 158- Ross Burton 159- Rudolf J Streif 160- Sakib Sajal 161- Samuli Piippo 162- Schmidt, Adriaan 163- Stefan Herbrechtsmeier 164- Steve Sakoman 165- Sundeep KOKKONDA 166- Teoh Jay Shen 167- Thomas Perrot 168- Tim Orling 169- Vyacheslav Yurkov 170- Yongxin Liu 171- pgowda 172- Wang Mingyu 173 174Repositories / Downloads for 3.4.2 175~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 176 177poky 178 179- Repository Location: :yocto_git:`/poky` 180- Branch: :yocto_git:`honister </poky/log/?h=honister>` 181- Tag: :yocto_git:`yocto-3.4.2 </poky/tag/?h=yocto-3.4.2>` 182- Git Revision: :yocto_git:`e0ab08bb6a32916b457d221021e7f402ffa36b1a </poky/commit/?id=e0ab08bb6a32916b457d221021e7f402ffa36b1a>` 183- Release Artefact: poky-e0ab08bb6a32916b457d221021e7f402ffa36b1a 184- sha: 8580dc5067ee426fe347a0d0f7a74c29ba539120bbe8438332339a9c8bce00fd 185- Download Locations: 186 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/poky-e0ab08bb6a32916b457d221021e7f402ffa36b1a.tar.bz2, 187 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/poky-e0ab08bb6a32916b457d221021e7f402ffa36b1a.tar.bz2 188 189openembedded-core 190 191- Repository Location: :oe_git:`/openembedded-core` 192- Branch: :oe_git:`honister </openembedded-core/log/?h=honister>` 193- Tag: :oe_git:`yocto-3.4.2 </openembedded-core/tag/?h=yocto-3.4.2>` 194- Git Revision: :oe_git:`418a9c4c31615a9e3e011fc2b21fb7154bc6c93a </openembedded-core/commit/?id=418a9c4c31615a9e3e011fc2b21fb7154bc6c93a>` 195- Release Artefact: oecore-418a9c4c31615a9e3e011fc2b21fb7154bc6c93a 196- sha: f2ca94a5a7ec669d4c208d1729930dfc1b917846dbb2393d01d6d5856fcbc6de 197- Download Locations: 198 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/oecore-418a9c4c31615a9e3e011fc2b21fb7154bc6c93a.tar.bz2, 199 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/oecore-418a9c4c31615a9e3e011fc2b21fb7154bc6c93a.tar.bz2 200 201meta-mingw 202 203- Repository Location: :yocto_git:`meta-mingw` 204- Branch: :yocto_git:`honister </meta-mingw/log/?h=honister>` 205- Tag: :yocto_git:`yocto-3.4.2 </meta-mingw/tag/?h=yocto-3.4.2>` 206- Git Revision: :yocto_git:`f5d761cbd5c957e4405c5d40b0c236d263c916a8 </meta-mingw/commit/?id=f5d761cbd5c957e4405c5d40b0c236d263c916a8>` 207- Release Artefact: meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8 208- sha: d4305d638ef80948584526c8ca386a8cf77933dffb8a3b8da98d26a5c40fcc11 209- Download Locations: 210 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2, 211 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2 212 213meta-gplv2 214 215- Repository Location: :yocto_git:`/meta-gplv2` 216- Branch: :yocto_git:`honister </meta-gplv2/log/?h=honister>` 217- Tag: :yocto_git:`yocto-3.4.2 </meta-gplv2/tag/?h=yocto-3.4.2>` 218- Git Revision: :yocto_git:`f04e4369bf9dd3385165281b9fa2ed1043b0e400 </meta-gplv2/commit/?id=f04e4369bf9dd3385165281b9fa2ed1043b0e400>` 219- Release Artefact: meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400 220- sha: ef8e2b1ec1fb43dbee4ff6990ac736315c7bc2d8c8e79249e1d337558657d3fe 221- Download Locations: 222 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2, 223 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2 224 225bitbake 226 227- Repository Location: :oe_git:`/bitbake` 228- Branch: :oe_git:`1.52 </bitbake/log/?h=1.52>` 229- Tag: :oe_git:`yocto-3.4.2 </bitbake/tag/?h=yocto-3.4.2>` 230- Git Revision: :oe_git:`c039182c79e2ccc54fff5d7f4f266340014ca6e0 </bitbake/commit/?id=c039182c79e2ccc54fff5d7f4f266340014ca6e0>` 231- Release Artefact: bitbake-c039182c79e2ccc54fff5d7f4f266340014ca6e0 232- sha: bd80297f8d8aa40cbcc8a3d4e23a5223454b305350adf34cd29b5fb65c1b4c52 233- Download Locations: 234 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.2/bitbake-c039182c79e2ccc54fff5d7f4f266340014ca6e0.tar.bz2, 235 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.2/bitbake-c039182c79e2ccc54fff5d7f4f266340014ca6e0.tar.bz2 236 237yocto-docs 238 239- Repository Location: :yocto_git:`/yocto-docs` 240- Branch: :yocto_git:`honister </yocto-docs/log/?h=honister>` 241- Tag: :yocto_git:`yocto-3.4.2 </yocto-docs/tag/?h=yocto-3.4.2>` 242- Git Revision: :yocto_git:`3061d3d62054a5c3b9e16bfce4bcd186fa7a23d2` </yocto-docs/commit/?3061d3d62054a5c3b9e16bfce4bcd186fa7a23d2>` 243