1.. SPDX-License-Identifier: CC-BY-SA-2.0-UK 2 3Release notes for Yocto-4.0.5 (Kirkstone) 4----------------------------------------- 5 6Security Fixes in Yocto-4.0.5 7~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 8 9- qemu: fix :cve_nist:`2021-3750`, :cve_nist:`2021-3611` and :cve_nist:`2022-2962` 10- binutils : fix :cve_nist:`2022-38126`, :cve_nist:`2022-38127` and :cve_nist:`2022-38128` 11- tff: fix :cve_nist:`2022-2867`, :cve_nist:`2022-2868` and :cve_nist:`2022-2869` 12- inetutils: fix :cve_nist:`2022-39028` 13- go: fix :cve_nist:`2022-27664` 14 15Fixes in Yocto-4.0.5 16~~~~~~~~~~~~~~~~~~~~ 17 18- Revert "gcc-cross-canadian: Add symlink to real-ld alongside other symlinks" 19- bind: upgrade to 9.18.7 20- binutils: stable 2.38 branch updates (dc2474e7) 21- bitbake: Fix npm to use https rather than http 22- bitbake: asyncrpc/client: Fix unix domain socket chdir race issues 23- bitbake: bitbake: Add copyright headers where missing 24- bitbake: gitsm: Error out if submodule refers to parent repo 25- bitbake: runqueue: Drop deadlock breaking force fail 26- bitbake: runqueue: Ensure deferred tasks are sorted by multiconfig 27- bitbake: runqueue: Improve deadlock warning messages 28- bitbake: siggen: Fix insufficent entropy in sigtask file names 29- bitbake: tests/fetch: Allow handling of a file:// url within a submodule 30- build-appliance-image: Update to kirkstone head revision (4a88ada) 31- busybox: add devmem 128-bit support 32- classes: files: Extend overlayfs-etc class 33- coreutils: add openssl :term:`PACKAGECONFIG` 34- create-pull-request: don't switch the git remote protocol to git:// 35- dev-manual: fix reference to BitBake user manual 36- expat: upgrade 2.4.8 -> 2.4.9 37- files: overlayfs-etc: refactor preinit template 38- gcc-cross-canadian: add default plugin linker 39- gcc: add arm-v9 support 40- git: upgrade 2.35.4 -> 2.35.5 41- glibc-locale: explicitly remove empty dirs in ${libdir} 42- glibc-tests: use += instead of :append 43- glibc: stable 2.35 branch updates.(8d125a1f) 44- go-native: switch from SRC_URI:append to :term:`SRC_URI` += 45- image_types_wic.bbclass: fix cross binutils dependency 46- kern-tools: allow 'y' or 'm' to avoid config audit warnings 47- kern-tools: fix queue processing in relative :term:`TOPDIR` configurations 48- kernel-yocto: allow patch author date to be commit date 49- libpng: upgrade to 1.6.38 50- linux-firmware: package new Qualcomm firmware 51- linux-firmware: upgrade 20220708 -> 20220913 52- linux-libc-headers: switch from SRC_URI:append to :term:`SRC_URI` += 53- linux-yocto-dev: add qemuarm64 54- linux-yocto/5.10: update to v5.10.149 55- linux-yocto/5.15: cfg: fix ACPI warnings for -tiny 56- linux-yocto/5.15: update to v5.15.68 57- local.conf.sample: correct the location of public hashserv 58- ltp: Fix pread02 case trigger the glibc overflow detection 59- lttng-modules: Fix crash on powerpc64 60- lttng-tools: Disable on qemuriscv32 61- lttng-tools: Disable on riscv32 62- migration-guides: add 4.0.4 release notes 63- oeqa/runtime/dnf: fix typo 64- own-mirrors: add crate 65- perf: Fix for recent kernel upgrades 66- poky.conf: bump version for 4.0.5 67- poky.yaml.in: update version requirements 68- python3-rfc3986-validator: switch from SRC_URI:append to :term:`SRC_URI` += 69- python3: upgrade 3.10.4 -> 3.10.7 70- qemu: Backport patches from upstream to support float128 on qemu-ppc64 71- rpm: Remove -Wimplicit-function-declaration warnings 72- rpm: update to 4.17.1 73- rsync: update to 3.2.5 74- stress-cpu: disable float128 math on powerpc64 to avoid SIGILL 75- tune-neoversen2: support tune-neoversen2 base on armv9a 76- tzdata: update to 2022d 77- u-boot: switch from append to += in :term:`SRC_URI` 78- uninative: Upgrade to 3.7 to work with glibc 2.36 79- vim: Upgrade to 9.0.0598 80- webkitgtk: Update to 2.36.7 81 82 83Known Issues in Yocto-4.0.5 84~~~~~~~~~~~~~~~~~~~~~~~~~~~ 85 86- There are recent CVEs in key components such as openssl. They are not included in this release as it was built before the issues were known and fixes were available but these are now available on the kirkstone branch. 87 88 89Contributors to Yocto-4.0.5 90~~~~~~~~~~~~~~~~~~~~~~~~~~~ 91 92- Adrian Freihofer 93- Alexander Kanavin 94- Alexandre Belloni 95- Bhabu Bindu 96- Bruce Ashfield 97- Chen Qi 98- Daniel McGregor 99- Denys Dmytriyenko 100- Dmitry Baryshkov 101- Florin Diaconescu 102- He Zhe 103- Joshua Watt 104- Khem Raj 105- Martin Jansa 106- Michael Halstead 107- Michael Opdenacker 108- Mikko Rapeli 109- Mingli Yu 110- Neil Horman 111- Pavel Zhukov 112- Richard Purdie 113- Robert Joslyn 114- Ross Burton 115- Ruiqiang Hao 116- Samuli Piippo 117- Steve Sakoman 118- Sundeep KOKKONDA 119- Teoh Jay Shen 120- Tim Orling 121- Virendra Thakur 122- Vyacheslav Yurkov 123- Xiangyu Chen 124- Yash Shinde 125- pgowda 126- Wang Mingyu 127 128 129Repositories / Downloads for Yocto-4.0.5 130~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 131 132poky 133 134- Repository Location: :yocto_git:`/poky` 135- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` 136- Tag: :yocto_git:`yocto-4.0.5 </poky/log/?h=yocto-4.0.5>` 137- Git Revision: :yocto_git:`2e79b199114b25d81bfaa029ccfb17676946d20d </poky/commit/?id=2e79b199114b25d81bfaa029ccfb17676946d20d>` 138- Release Artefact: poky-2e79b199114b25d81bfaa029ccfb17676946d20d 139- sha: 7bcf3f901d4c5677fc95944ab096e9e306f4c758a658dde5befd16861ad2b8ea 140- Download Locations: 141 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2 142 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2 143 144openembedded-core 145 146- Repository Location: :oe_git:`/openembedded-core` 147- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` 148- Tag: :oe_git:`yocto-4.0.5 </openembedded-core/log/?h=yocto-4.0.5>` 149- Git Revision: :oe_git:`fbdf93f43ff4b876487e1f26752598ec8abcb46e </openembedded-core/commit/?id=fbdf93f43ff4b876487e1f26752598ec8abcb46e>` 150- Release Artefact: oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e 151- sha: 2d9b5a8e9355b633bb57633cc8c2d319ba13fe4721f79204e61116b3faa6cbf1 152- Download Locations: 153 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2 154 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2 155 156meta-mingw 157 158- Repository Location: :yocto_git:`/meta-mingw` 159- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` 160- Tag: :yocto_git:`yocto-4.0.5 </meta-mingw/log/?h=yocto-4.0.5>` 161- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>` 162- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1 163- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302 164- Download Locations: 165 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 166 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2 167 168meta-gplv2 169 170- Repository Location: :yocto_git:`/meta-gplv2` 171- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` 172- Tag: :yocto_git:`yocto-4.0.5 </meta-gplv2/log/?h=yocto-4.0.5>` 173- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` 174- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a 175- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d 176- Download Locations: 177 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 178 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 179 180bitbake 181 182- Repository Location: :oe_git:`/bitbake` 183- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` 184- Tag: :oe_git:`yocto-4.0.5 </bitbake/log/?h=yocto-4.0.5>` 185- Git Revision: :oe_git:`c90d57497b9bcd237c3ae810ee8edb5b0d2d575a </bitbake/commit/?id=c90d57497b9bcd237c3ae810ee8edb5b0d2d575a>` 186- Release Artefact: bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a 187- sha: 5698d548ce179036e46a24f80b213124c8825a4f443fa1d6be7ab0f70b01a9ff 188- Download Locations: 189 http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2 190 http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2 191 192yocto-docs 193 194- Repository Location: :yocto_git:`/yocto-docs` 195- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` 196- Tag: :yocto_git:`yocto-4.0.5 </yocto-docs/log/?h=yocto-4.0.5>` 197- Git Revision: :yocto_git:`8c2f9f54e29781f4ee72e81eeaa12ceaa82dc2d3 </yocto-docs/commit/?id=8c2f9f54e29781f4ee72e81eeaa12ceaa82dc2d3>` 198 199