1.. SPDX-License-Identifier: CC-BY-SA-2.0-UK 2 3Release notes for Yocto-4.1.1 (Langdale) 4---------------------------------------- 5 6Security Fixes in Yocto-4.1.1 7~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 8 9- curl: Fix :cve:`2022-32221`, :cve:`2022-35260`, :cve:`2022-42915` and :cve:`2022-42916` 10- libx11: Fix :cve:`2022-3554` 11- lighttpd: Fix :cve:`2022-41556` 12- openssl: Fix :cve:`2022-3358`, :cve:`2022-3602` and :cve:`2022-3786` 13- pixman: Fix :cve:`2022-44638` 14- qemu: Fix :cve:`2022-3165` 15- sudo: Fix :cve:`2022-43995` 16- tiff: Fix :cve:`2022-3599`, :cve:`2022-3597`, :cve:`2022-3626`, :cve:`2022-3627`, :cve:`2022-3570` and :cve:`2022-3598` 17- xserver-xorg: Fix :cve:`2022-3550` and :cve:`2022-3551` 18- xserver-xorg: Ignore :cve:`2022-3553` 19 20 21Fixes in Yocto-4.1.1 22~~~~~~~~~~~~~~~~~~~~ 23 24- Add 4.1 migration guide & release notes 25- bitbake: asyncrpc: serv: correct closed client socket detection 26- bitbake: bitbake-user-manual: details about variable flags starting with underscore 27- bitbake: bitbake: bitbake-layers: checkout layer(s) branch when clone exists 28- bitbake: bitbake: user-manual: inform about spaces in :remove 29- bitbake: doc: bitbake-user-manual: expand description of BB_PRESSURE_MAX variables 30- bitbake: fetch2/git: don't set core.fsyncobjectfiles=0 31- bitbake: tests/fetch: Allow handling of a file:// url within a submodule 32- bitbake: tests: bb.tests.fetch.URLHandle: add 2 new tests 33- bitbake: utils/ply: Update md5 to better report errors with hashlib 34- bluez5: add dbus to :term:`RDEPENDS` 35- build-appliance-image: Update to langdale head revision 36- buildconf: compare abspath 37- buildtools-tarball: export certificates to python and curl 38- cmake-native: Fix host tool contamination 39- create-spdx.bbclass: remove unused SPDX_INCLUDE_PACKAGED 40- create-spdx: Remove ";name=..." for downloadLocation 41- cve-update-db-native: add timeout to urlopen() calls 42- dev-manual: common-tasks.rst: add reference to "do_clean" task 43- dev-manual: common-tasks.rst: add reference to "do_listtasks" task 44- docs: add support for langdale (4.1) release 45- dropbear: add pam to :term:`PACKAGECONFIG` 46- externalsrc.bbclass: fix git repo detection 47- externalsrc.bbclass: Remove a trailing slash from ${B} 48- externalsrc: move back to classes 49- gcc: Allow -Wno-error=poison-system-directories to take effect 50- glib-2.0: fix rare GFileInfo test case failure 51- gnutls: Unified package names to lower-case 52- gnutls: upgrade 3.7.7 -> 3.7.8 53- grub: disable build on armv7ve/a with hardfp 54- gstreamer1.0-libav: fix errors with ffmpeg 5.x 55- ifupdown: upgrade 0.8.37 -> 0.8.39 56- insane.bbclass: Allow hashlib version that only accepts on parameter 57- install-buildtools: support buildtools-make-tarball and update to 4.1 58- kern-tools: fix relative path processing 59- kernel-fitimage: Use KERNEL_OUTPUT_DIR where appropriate 60- kernel-yocto: improve fatal error messages of symbol_why.py 61- kernel: Clear :term:`SYSROOT_DIRS` instead of replacing sysroot_stage_all 62- libcap: upgrade 2.65 -> 2.66 63- libical: upgrade 3.0.14 -> 3.0.15 64- libksba: upgrade 1.6.0 -> 1.6.2 65- libsdl2: upgrade 2.24.0 -> 2.24.1 66- lighttpd: upgrade 1.4.66 -> 1.4.67 67- linux-firmware: package amdgpu firmware 68- linux-firmware: split rtl8761 firmware 69- linux-yocto/5.15: update to v5.15.72 70- linux-yocto/5.19: update to v5.19.14 71- linux-yocto: add efi entry for machine features 72- lttng-modules: upgrade 2.13.4 -> 2.13.5 73- lttng-ust: upgrade 2.13.4 -> 2.13.5 74- manuals: add reference to "do_configure" task 75- manuals: add reference to the "do_compile" task 76- manuals: add reference to the "do_install" task 77- manuals: add reference to the "do_kernel_configcheck" task 78- manuals: add reference to the "do_populate_sdk" task 79- manuals: add references to "do_package_write_*" tasks 80- manuals: add references to "do_populate_sysroot" task 81- manuals: add references to the "do_build" task 82- manuals: add references to the "do_bundle_initramfs" task 83- manuals: add references to the "do_cleanall" task 84- manuals: add references to the "do_deploy" task 85- manuals: add references to the "do_devshell" task 86- manuals: add references to the "do_fetch" task 87- manuals: add references to the "do_image" task 88- manuals: add references to the "do_kernel_configme" task 89- manuals: add references to the "do_package" task 90- manuals: add references to the "do_package_qa" task 91- manuals: add references to the "do_patch" task 92- manuals: add references to the "do_rootfs" task 93- manuals: add references to the "do_unpack" task 94- manuals: fix misc typos 95- manuals: improve initramfs details 96- manuals: updates for building on Windows (WSL 2) 97- mesa: only apply patch to fix ALWAYS_INLINE for native 98- mesa: update 22.2.0 -> 22.2.2 99- meson: make wrapper options sub-command specific 100- meson: upgrade 0.63.2 -> 0.63.3 101- migration guides: 3.4: remove spurious space in example 102- migration guides: add release notes for 4.0.4 103- migration-general: add section on using buildhistory 104- migration-guides/release-notes-4.1.rst: add more known issues 105- migration-guides/release-notes-4.1.rst: update Repositories / Downloads 106- migration-guides: add known issues for 4.1 107- migration-guides: add reference to the "do_shared_workdir" task 108- migration-guides: use contributor real name 109- migration-guides: use contributor real name 110- mirrors.bbclass: use shallow tarball for binutils-native 111- mtools: upgrade 4.0.40 -> 4.0.41 112- numactl: upgrade 2.0.15 -> 2.0.16 113- oe/packagemanager/rpm: don't leak file objects 114- openssl: export necessary env vars in SDK 115- openssl: Fix SSL_CERT_FILE to match ca-certs location 116- openssl: Upgrade 3.0.5 -> 3.0.7 117- opkg-utils: use a git clone, not a dynamic snapshot 118- overlayfs: Allow not used mount points 119- overview-manual: concepts.rst: add reference to "do_packagedata" task 120- overview-manual: concepts.rst: add reference to "do_populate_sdk_ext" task 121- overview-manual: concepts.rst: fix formating and add references 122- own-mirrors: add crate 123- pango: upgrade 1.50.9 -> 1.50.10 124- perf: Depend on native setuptools3 125- poky.conf: bump version for 4.1.1 126- poky.conf: remove Ubuntu 21.10 127- populate_sdk_base: ensure ptest-pkgs pulls in ptest-runner 128- psplash: add psplash-default in rdepends 129- qemu-native: Add :term:`PACKAGECONFIG` option for jack 130- quilt: backport a patch to address grep 3.8 failures 131- ref-manual/faq.rst: update references to products built with OE / Yocto Project 132- ref-manual/variables.rst: clarify sentence 133- ref-manual: add a note to ssh-server-dropbear feature 134- ref-manual: add :term:`CVE_CHECK_SHOW_WARNINGS` 135- ref-manual: add :term:`CVE_DB_UPDATE_INTERVAL` 136- ref-manual: add :term:`DEV_PKG_DEPENDENCY` 137- ref-manual: add :term:`DISABLE_STATIC` 138- ref-manual: add :term:`FIT_PAD_ALG` 139- ref-manual: add :term:`KERNEL_DEPLOY_DEPEND` 140- ref-manual: add missing features 141- ref-manual: add :term:`MOUNT_BASE` variable 142- ref-manual: add overlayfs class variables 143- ref-manual: add :term:`OVERLAYFS_ETC_EXPOSE_LOWER` 144- ref-manual: add :term:`OVERLAYFS_QA_SKIP` 145- ref-manual: add previous overlayfs-etc variables 146- ref-manual: add pypi class 147- ref-manual: add :term:`SDK_TOOLCHAIN_LANGS` 148- ref-manual: add section for create-spdx class 149- ref-manual: add serial-autologin-root to :term:`IMAGE_FEATURES` documentation 150- ref-manual: add :term:`UBOOT_MKIMAGE_KERNEL_TYPE` 151- ref-manual: add :term:`WATCHDOG_TIMEOUT` to variable glossary 152- ref-manual: add :term:`WIRELESS_DAEMON` 153- ref-manual: classes.rst: add links to all references to a class 154- ref-manual: complementary package installation recommends 155- ref-manual: correct default for :term:`BUILDHISTORY_COMMIT` 156- ref-manual: document new github-releases class 157- ref-manual: expand documentation on image-buildinfo class 158- ref-manual: faq.rst: reorganize into subsections, contents at top 159- ref-manual: remove reference to largefile in :term:`DISTRO_FEATURES` 160- ref-manual: remove reference to testimage-auto class 161- ref-manual: system-requirements: Ubuntu 22.04 now supported 162- ref-manual: tasks.rst: add reference to the "do_image_complete" task 163- ref-manual: tasks.rst: add reference to the "do_kernel_checkout" task 164- ref-manual: tasks.rst: add reference to the "do_kernel_metadata" task 165- ref-manual: tasks.rst: add reference to the "do_validate_branches" task 166- ref-manual: tasks.rst: add references to the "do_cleansstate" task 167- ref-manual: update buildpaths QA check documentation 168- ref-manual: update pypi documentation for :term:`CVE_PRODUCT` default in 4.1 169- ref-manual: variables.rst: add reference to "do_populate_lic" task 170- release-notes-4.1.rst remove bitbake-layers subcommand argument 171- runqemu: Do not perturb script environment 172- runqemu: Fix gl-es argument from causing other arguments to be ignored 173- rust-target-config: match riscv target names with what rust expects 174- rust: install rustfmt for riscv32 as well 175- sanity: check for GNU tar specifically 176- scripts/oe-check-sstate: cleanup 177- scripts/oe-check-sstate: force build to run for all targets, specifically populate_sysroot 178- sdk-manual: correct the bitbake target for a unified sysroot build 179- shadow: update 4.12.1 -> 4.12.3 180- systemd: add systemd-creds and systemd-cryptenroll to systemd-extra-utils 181- test-manual: fix typo in machine name 182- tiff: fix a typo for :cve:`2022-2953`.patch 183- u-boot: Add savedefconfig task 184- u-boot: Remove duplicate inherit of cml1 185- uboot-sign: Fix using wrong KEY_REQ_ARGS 186- Update documentation for classes split 187- vim: upgrade to 9.0.0820 188- vulkan-samples: add lfs=0 to :term:`SRC_URI` to avoid git smudge errors in do_unpack 189- wic: honor the :term:`SOURCE_DATE_EPOCH` in case of updated fstab 190- wic: swap partitions are not added to fstab 191- wpebackend-fdo: upgrade 1.12.1 -> 1.14.0 192- xserver-xorg: move some recommended dependencies in required 193- zlib: do out-of-tree builds 194- zlib: upgrade 1.2.12 -> 1.2.13 195- zlib: use .gz archive and set a PREMIRROR 196 197 198Known Issues in Yocto-4.1.1 199~~~~~~~~~~~~~~~~~~~~~~~~~~~ 200 201- N/A 202 203 204 205Contributors to Yocto-4.1.1 206~~~~~~~~~~~~~~~~~~~~~~~~~~~ 207 208- Adrian Freihofer 209- Alex Kiernan 210- Alexander Kanavin 211- Bartosz Golaszewski 212- Bernhard Rosenkränzer 213- Bruce Ashfield 214- Chen Qi 215- Christian Eggers 216- Claus Stovgaard 217- Ed Tanous 218- Etienne Cordonnier 219- Frank de Brabander 220- Hitendra Prajapati 221- Jan-Simon Moeller 222- Jeremy Puhlman 223- Johan Korsnes 224- Jon Mason 225- Jose Quaresma 226- Joshua Watt 227- Justin Bronder 228- Kai Kang 229- Keiya Nobuta 230- Khem Raj 231- Lee Chee Yang 232- Liam Beguin 233- Luca Boccassi 234- Mark Asselstine 235- Mark Hatle 236- Markus Volk 237- Martin Jansa 238- Michael Opdenacker 239- Ming Liu 240- Mingli Yu 241- Paul Eggleton 242- Peter Kjellerstedt 243- Qiu, Zheng 244- Quentin Schulz 245- Richard Purdie 246- Robert Joslyn 247- Ross Burton 248- Sean Anderson 249- Sergei Zhmylev 250- Steve Sakoman 251- Takayasu Ito 252- Teoh Jay Shen 253- Thomas Perrot 254- Tim Orling 255- Vincent Davis Jr 256- Vyacheslav Yurkov 257- Ciaran Courtney 258- Wang Mingyu 259 260 261Repositories / Downloads for Yocto-4.1.1 262~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 263 264poky 265 266- Repository Location: :yocto_git:`/poky` 267- Branch: :yocto_git:`langdale </poky/log/?h=langdale>` 268- Tag: :yocto_git:`yocto-4.1.1 </poky/log/?h=yocto-4.1.1>` 269- Git Revision: :yocto_git:`d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff </poky/commit/?id=d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff>` 270- Release Artefact: poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff 271- sha: e92b694fbb74a26c7a875936dfeef4a13902f24b06127ee52f4d1c1e4b03ec24 272- Download Locations: 273 http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff.tar.bz2 274 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff.tar.bz2 275 276openembedded-core 277 278- Repository Location: :oe_git:`/openembedded-core` 279- Branch: :oe_git:`langdale </openembedded-core/log/?h=langdale>` 280- Tag: :oe_git:`yocto-4.1.1 </openembedded-core/log/?h=yocto-4.1.1>` 281- Git Revision: :oe_git:`9237ffc4feee2dd6ff5bdd672072509ef9e82f6d </openembedded-core/commit/?id=9237ffc4feee2dd6ff5bdd672072509ef9e82f6d>` 282- Release Artefact: oecore-9237ffc4feee2dd6ff5bdd672072509ef9e82f6d 283- sha: d73198aef576f0fca0d746f9d805b1762c19c31786bc3f7d7326dfb2ed6fc1be 284- Download Locations: 285 http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/oecore-9237ffc4feee2dd6ff5bdd672072509ef9e82f6d.tar.bz2 286 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/oecore-9237ffc4feee2dd6ff5bdd672072509ef9e82f6d.tar.bz2 287 288meta-mingw 289 290- Repository Location: :yocto_git:`/meta-mingw` 291- Branch: :yocto_git:`langdale </meta-mingw/log/?h=langdale>` 292- Tag: :yocto_git:`yocto-4.1.1 </meta-mingw/log/?h=yocto-4.1.1>` 293- Git Revision: :yocto_git:`b0067202db8573df3d23d199f82987cebe1bee2c </meta-mingw/commit/?id=b0067202db8573df3d23d199f82987cebe1bee2c>` 294- Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c 295- sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366 296- Download Locations: 297 http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2 298 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2 299 300bitbake 301 302- Repository Location: :oe_git:`/bitbake` 303- Branch: :oe_git:`2.2 </bitbake/log/?h=2.2>` 304- Tag: :oe_git:`yocto-4.1.1 </bitbake/log/?h=yocto-4.1.1>` 305- Git Revision: :oe_git:`138dd7883ee2c521900b29985b6d24a23d96563c </bitbake/commit/?id=138dd7883ee2c521900b29985b6d24a23d96563c>` 306- Release Artefact: bitbake-138dd7883ee2c521900b29985b6d24a23d96563c 307- sha: 5dc5aff4b4a801253c627cdaab6b1a0ceee2c531f1a6b166d85d1265a35d4be5 308- Download Locations: 309 http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/bitbake-138dd7883ee2c521900b29985b6d24a23d96563c.tar.bz2 310 http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/bitbake-138dd7883ee2c521900b29985b6d24a23d96563c.tar.bz2 311 312yocto-docs 313 314- Repository Location: :yocto_git:`/yocto-docs` 315- Branch: :yocto_git:`langdale </yocto-docs/log/?h=langdale>` 316- Tag: :yocto_git:`yocto-4.1.1 </yocto-docs/log/?h=yocto-4.1.1>` 317- Git Revision: :yocto_git:`8e0841c3418caa227c66a60327db09dfbe72054a </yocto-docs/commit/?id=8e0841c3418caa227c66a60327db09dfbe72054a>` 318 319 320