1.. SPDX-License-Identifier: CC-BY-SA-2.0-UK 2 3Release notes for 3.4.3 (honister) 4---------------------------------- 5 6Security Fixes in 3.4.3 7~~~~~~~~~~~~~~~~~~~~~~~ 8 9- ghostscript: fix :cve:`2021-3781` 10- ghostscript: fix :cve:`2021-45949` 11- tiff: Add backports for two CVEs from upstream (:cve:`2022-0561` & :cve:`2022-0562`) 12- gcc : Fix :cve:`2021-46195` 13- virglrenderer: fix `CVE-2022-0135 <https://security-tracker.debian.org/tracker/CVE-2022-0135>`__ and `CVE-2022-0175 <https://security-tracker.debian.org/tracker/CVE-2022-0175>`__ 14- binutils: Add fix for :cve:`2021-45078` 15 16 17Fixes in 3.4.3 18~~~~~~~~~~~~~~ 19 20- Revert "cve-check: add lockfile to task" 21- asciidoc: update git repository 22- bitbake: build: Tweak exception handling for setscene tasks 23- bitbake: contrib: Fix hash server Dockerfile dependencies 24- bitbake: cooker: Improve parsing failure from handled exception usability 25- bitbake: data_smart: Fix overrides file/line message additions 26- bitbake: fetch2: ssh: username and password are optional 27- bitbake: tests/fetch: Handle upstream master -> main branch change 28- bitbake: utils: Ensure shell function failure in python logging is correct 29- build-appliance-image: Update to honister head revision 30- build-appliance-image: Update to honister head revision 31- coreutils: remove obsolete ignored CVE list 32- crate-fetch: fix setscene failures 33- cups: Add --with-dbusdir to :term:`EXTRA_OECONF` for deterministic build 34- cve-check: create directory of CVE_CHECK_MANIFEST before copy 35- cve-check: get_cve_info should open the database read-only 36- default-distrovars.inc: Switch connectivity check to a yoctoproject.org page 37- depmodwrapper-cross: add config directory option 38- devtool: deploy-target: Remove stripped binaries in pseudo context 39- devtool: explicitly set main or master branches in upgrades when available 40- docs: fix hardcoded link warning messages 41- documentation: conf.py: update for 3.4.2 42- documentation: prepare for 3.4.3 release 43- expat: Upgrade to 2.4.7 44- gcc-target: fix glob to remove gcc-<version> binary 45- gcsections: add nativesdk-cairo to exclude list 46- go: update to 1.16.15 47- gst-devtools: 1.18.5 -> 1.18.6 48- gst-examples: 1.18.5 -> 1.18.6 49- gstreamer1.0-libav: 1.18.5 -> 1.18.6 50- gstreamer1.0-omx: 1.18.5 -> 1.18.6 51- gstreamer1.0-plugins-bad: 1.18.5 -> 1.18.6 52- gstreamer1.0-plugins-base: 1.18.5 -> 1.18.6 53- gstreamer1.0-plugins-good: 1.18.5 -> 1.18.6 54- gstreamer1.0-plugins-ugly: 1.18.5 -> 1.18.6 55- gstreamer1.0-python: 1.18.5 -> 1.18.6 56- gstreamer1.0-rtsp-server: 1.18.5 -> 1.18.6 57- gstreamer1.0-vaapi: 1.18.5 -> 1.18.6 58- gstreamer1.0: 1.18.5 -> 1.18.6 59- harfbuzz: upgrade 2.9.0 -> 2.9.1 60- initramfs-framework: unmount automounts before switch_root 61- kernel-devsrc: do not copy Module.symvers file during install 62- libarchive : update to 3.5.3 63- libpcap: Disable DPDK explicitly 64- libxml-parser-perl: Add missing :term:`RDEPENDS` 65- linux-firmware: upgrade 20211216 -> 20220209 66- linux-yocto/5.10: Fix ramoops/ftrace 67- linux-yocto/5.10: features/zram: remove CONFIG_ZRAM_DEF_COMP 68- linux-yocto/5.10: fix dssall build error with binutils 2.3.8 69- linux-yocto/5.10: ppc/riscv: fix build with binutils 2.3.8 70- linux-yocto/5.10: update genericx86* machines to v5.10.99 71- linux-yocto/5.10: update to v5.10.103 72- mc: fix build if ncurses have been configured without wide characters 73- oeqa/buildtools: Switch to our webserver instead of example.com 74- patch.py: Prevent git repo reinitialization 75- perl: Improve and update module RPDEPENDS 76- poky.conf: bump version for 3.4.3 honister release 77- qemuboot: Fix build error if UNINATIVE_LOADER is unset 78- quilt: Disable external sendmail for deterministic build 79- recipetool: Fix circular reference in :term:`SRC_URI` 80- releases: update to include 3.3.5 81- releases: update to include 3.4.2 82- rootfs-postcommands: amend systemd_create_users add user to group check 83- ruby: update 3.0.2 -> 3.0.3 84- scripts/runqemu-ifdown: Don't treat the last iptables command as special 85- sdk: fix search for dynamic loader 86- selftest: recipetool: Correct the URI for socat 87- sstate: inside the threadedpool don't write to the shared localdata 88- uninative: Upgrade to 3.5 89- util-linux: upgrade to 2.37.4 90- vim: Update to 8.2.4524 for further CVE fixes 91- wic: Use custom kernel path if provided 92- wireless-regdb: upgrade 2021.08.28 -> 2022.02.18 93- zip: modify when match.S is built 94 95Contributors to 3.4.3 96~~~~~~~~~~~~~~~~~~~~~ 97 98- Alexander Kanavin 99- Anuj Mittal 100- Bill Pittman 101- Bruce Ashfield 102- Chee Yang Lee 103- Christian Eggers 104- Daniel Gomez 105- Daniel Müller 106- Daniel Wagenknecht 107- Florian Amstutz 108- Joe Slater 109- Jose Quaresma 110- Justin Bronder 111- Lee Chee Yang 112- Michael Halstead 113- Michael Opdenacker 114- Oleksandr Ocheretnyi 115- Oleksandr Suvorov 116- Pavel Zhukov 117- Peter Kjellerstedt 118- Richard Purdie 119- Robert Yang 120- Ross Burton 121- Sakib Sajal 122- Saul Wold 123- Sean Anderson 124- Stefan Herbrechtsmeier 125- Tamizharasan Kumar 126- Tean Cunningham 127- Zoltán Böszörményi 128- pgowda 129- Wang Mingyu 130 131Repositories / Downloads for 3.4.3 132~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 133 134poky 135 136- Repository Location: :yocto_git:`/poky` 137- Branch: :yocto_git:`honister </poky/log/?h=honister>` 138- Tag: :yocto_git:`yocto-3.4.3 </poky/tag/?h=yocto-3.4.3>` 139- Git Revision: :yocto_git:`ee68ae307fd951b9de6b31dc6713ea29186b7749 </poky/commit/?id=ee68ae307fd951b9de6b31dc6713ea29186b7749>` 140- Release Artefact: poky-ee68ae307fd951b9de6b31dc6713ea29186b7749 141- sha: 92c3d73c3e74f0e1d5c2ab2836ce3a3accbe47772cea70df3755845e0db1379b 142- Download Locations: 143 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/poky-ee68ae307fd951b9de6b31dc6713ea29186b7749.tar.bz2, 144 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/poky-ee68ae307fd951b9de6b31dc6713ea29186b7749.tar.bz2 145 146openembedded-core 147 148- Repository Location: :oe_git:`/openembedded-core` 149- Branch: :oe_git:`honister </openembedded-core/log/?h=honister>` 150- Tag: :oe_git:`yocto-3.4.3 </openembedded-core/tag/?h=yocto-3.4.3>` 151- Git Revision: :oe_git:`ebca8f3ac9372b7ebb3d39e8f7f930b63b481448 </openembedded-core/commit/?id=ebca8f3ac9372b7ebb3d39e8f7f930b63b481448>` 152- Release Artefact: oecore-ebca8f3ac9372b7ebb3d39e8f7f930b63b481448 153- sha: f28e503f6f6c0bcd9192dbd528f8e3c7bcea504c089117e0094d9a4f315f4b9f 154- Download Locations: 155 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/oecore-ebca8f3ac9372b7ebb3d39e8f7f930b63b481448.tar.bz2, 156 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/oecore-ebca8f3ac9372b7ebb3d39e8f7f930b63b481448.tar.bz2 157 158meta-mingw 159 160- Repository Location: :yocto_git:`/meta-mingw` 161- Branch: :yocto_git:`honister </meta-mingw/log/?h=honister>` 162- Tag: :yocto_git:`yocto-3.4.3 </meta-mingw/tag/?h=yocto-3.4.3>` 163- Git Revision: :yocto_git:`f5d761cbd5c957e4405c5d40b0c236d263c916a8 </meta-mingw/commit/?id=f5d761cbd5c957e4405c5d40b0c236d263c916a8>` 164- Release Artefact: meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8 165- sha: d4305d638ef80948584526c8ca386a8cf77933dffb8a3b8da98d26a5c40fcc11 166- Download Locations: 167 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2, 168 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/meta-mingw-f5d761cbd5c957e4405c5d40b0c236d263c916a8.tar.bz2 169 170meta-gplv2 171 172- Repository Location: :yocto_git:`/meta-gplv2` 173- Branch: :yocto_git:`honister </meta-gplv2/log/?h=honister>` 174- Tag: :yocto_git:`yocto-3.4.3 </meta-gplv2/tag/?h=yocto-3.4.3>` 175- Git Revision: :yocto_git:`f04e4369bf9dd3385165281b9fa2ed1043b0e400 </meta-gplv2/commit/?id=f04e4369bf9dd3385165281b9fa2ed1043b0e400>` 176- Release Artefact: meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400 177- sha: ef8e2b1ec1fb43dbee4ff6990ac736315c7bc2d8c8e79249e1d337558657d3fe 178- Download Locations: 179 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2, 180 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/meta-gplv2-f04e4369bf9dd3385165281b9fa2ed1043b0e400.tar.bz2 181 182bitbake 183 184- Repository Location: :oe_git:`/bitbake` 185- Branch: :oe_git:`1.52 </bitbake/log/?h=1.52>` 186- Tag: :oe_git:`yocto-3.4.3 </bitbake/tag/?h=yocto-3.4.3>` 187- Git Revision: :oe_git:`43dcb2b2a2b95a5c959be57bca94fb7190ea6257 </bitbake/commit/?id=43dcb2b2a2b95a5c959be57bca94fb7190ea6257>` 188- Release Artefact: bitbake-43dcb2b2a2b95a5c959be57bca94fb7190ea6257 189- sha: 92497ff97fed81dcc6d3e202969fb63ca983a8f5d9d91cafc6aee88312f79cf9 190- Download Locations: 191 http://downloads.yoctoproject.org/releases/yocto/yocto-3.4.3/bitbake-43dcb2b2a2b95a5c959be57bca94fb7190ea6257.tar.bz2, 192 http://mirrors.kernel.org/yocto/yocto/yocto-3.4.3/bitbake-43dcb2b2a2b95a5c959be57bca94fb7190ea6257.tar.bz2 193 194yocto-docs 195 196- Repository Location: :yocto_git:`/yocto-docs` 197- Branch: :yocto_git:`honister </yocto-docs/log/?h=honister>` 198- Tag: :yocto_git:`yocto-3.4.3 </yocto-docs/tag/?h=yocto-3.4.3>` 199- Git Revision: :yocto_git:`15f46f97d9cad558c19fc1dc19cfbe3720271d04 </yocto-docs/commit/?15f46f97d9cad558c19fc1dc19cfbe3720271d04>` 200