Date   

[ANNOUNCEMENT] Yocto Project 3.1.24 (dunfell-23.0.24) is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 3.1.24 (dunfell-23.0.24) Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/poky-dunfell-23.0.24.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.24/poky-dunfell-23.0.24.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Lee Chee Yang
chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-3.1.24 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: dunfell

Tag: yocto-3.1.24

Git Revision: 11f05ffddd0a7adf05b1c016f73b10ddfa2daa10

Release Artefact: poky-dunfell-23.0.24

sha: a773c3f936e7e3c6cb85e1eb99c0de04b19f4b9b0b26673c6b30a190f51ab1fb

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/poky-dunfell-23.0.24.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.24/poky-dunfell-23.0.24.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: dunfell

Tag: yocto-3.1.24

Git Revision: efb1a73a13907bed3acac8e06053aef3e2ef57f5

Release Artefact: oecore-dunfell-23.0.24

sha: f7540464153b77b865579f22a7a1145493fcaeb4e0aa1e7cd1c6f4cbcc2e2be5

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/oecore-dunfell-23.0.24.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.24/oecore-dunfell-23.0.24.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: dunfell

Tag: yocto-3.1.24

Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7

Release Artefact: meta-mingw-dunfell-23.0.24

sha: bf926a303097501e4d459a37f53f9b2c151b6d16e3133e7b74c958de86dd38cc

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/meta-mingw-dunfell-23.0.24.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.24/meta-mingw-dunfell-23.0.24.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: dunfell

Tag: yocto-3.1.24

Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac

Release Artefact: meta-gplv2-dunfell-23.0.24

sha: f6da9f118da528ce8ec5abb53621383c8c17902da00244b4733fe214b62fd925

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/meta-gplv2-dunfell-23.0.24.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.24/meta-gplv2-dunfell-23.0.24.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 1.46

Tag: yocto-3.1.24

Git Revision: a4cd5b0b4b355b7b75fb48c61289700e3e908b2a

Release Artefact: bitbake-dunfell-23.0.24

sha: 84eaad893afa3b564d7d2bdd3a742631dc416fb23b3dc0533e4f93ac04d570a0

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.24/bitbake-dunfell-23.0.24.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.24/bitbake-dunfell-23.0.24.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: dunfell

Tag: yocto-3.1.24

Git Revision: f4ef0e9c695207bde309434191b5d6d82149683c

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

apr-util: Fix CVE-2022-25147

apr: Fix CVE-2022-24963 CVE-2022-28331 CVE-2021-35940

bluez5: Ignore CVE-2022-39177

curl: Fix CVE-2022-43552

git: Fix CVE-2022-23521 CVE-2022-41903

git: Ignore CVE-2022-41953

glibc: Fix CVE-2023-0687

gnutls: Fix CVE-2023-0361

harfbuzz: Fix CVE-2023-25193

openssl: Fix CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286

qemu: fix CVE-2021-3929

shadow: ignore CVE-2016-15024

sudo: Fix CVE-2023-22809

tar: Fix CVE-2022-48303

tiff: Fix CVE-2022-3570 CVE-2022-3597 CVE-2022-3598 CVE-2022-3599 CVE-2022-3626 CVE-2022-3627 CVE-2022-3970 CVE-2022-48281 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804

vim: Fix CVE-2023-0433 CVE-2023-0512

 

 

- ---------------

Fixes

- ---------------

apr-util: Fix CFLAGS used in build

apr-util: Upgrade to 1.6.3

apr: Cache configure tests which use AC_TRY_RUN

apr: Fix to work with autoconf 2.70

apr: Use correct strerror_r implementation based on libc type

apr: Upgrade to 1.7.2

bitbake: cooker: Drop sre_constants usage

bitbake: runqueue: Avoid deadlock avoidance task graph corruption

bitbake: runqueue: Ensure deferred tasks are sorted by multiconfig

bitbake: runqueue: Fix issues with multiconfig deferred task deadlock messages

bitbake: runqueue: Fix multiconfig deferred task sstate validity caching issue

bitbake: runqueue: Handle deferred task rehashing in multiconfig builds

bitbake: runqueue: Improve multiconfig deferred task issues

build-appliance-image: Update to dunfell head revision

busybox: always start do_compile with orig config files

busybox: rm temporary files if do_compile was interrupted

classes/fs-uuid: Fix command output decoding issue

devshell: Do not add scripts/git-intercept to PATH

devtool/menuconfig: remove True option to getVar calls

documentation: update for 3.1.24

gcc: Fix inconsistent noexcept specifier for valarray in libstdc++

go: remove True option to getVar calls

image.bbclass: print all QA functions exceptions

image.bbclass: remove True option to getVarFlag calls

kernel-yocto: fix kernel-meta data detection

libc-locale: Fix on target locale generation

license_image: remove True option to getVar calls

linux-firmware: add yamato fw files to qcom-adreno-a2xx package

linux-firmware: properly set license for all Qualcomm firmware

linux-firmware: Upgrade to 20230210

linux: inherit pkgconfig in kernel.bbclass

make-mod-scripts: Ensure kernel build output is deterministic

meta: remove True option to getVar and getVarFlag calls (again)

nativesdk: Handle chown/chgrp calls in nativesdk do_install tasks

oeqa context.py: fix --target-ip comment to include ssh port number

oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal

oeqa/selftest/prservice: Improve debug output for failure

openssl: Upgrade to 1.1.1t

overview-manual: update patchwork instance URL

poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder

poky.conf: bump version for 3.1.24

profile-manual: update WireShark hyperlinks

qemu: Fix slirp determinism issue

quilt: fix intermittent failure in faildiff.test

quilt: use upstreamed faildiff.test fix

ref-manual: document SSTATE_EXCLUDEDEPS_SYSROOT

ref-system-requirements.rst: add AlmaLinux 8.7, Fedora 35, Fedora 36, and Ubuntu 22.04 to list of supported distros

vim: add missing pkgconfig inherit

vim: Upgrade to 9.0.1293

wireless-regdb: Upgrade to 2023.02.13


[ANNOUNCEMENT] Yocto Project 4.1.3 is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 4.1.3 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang Lee

chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-4.1.3 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/poky

Branch: langdale

Tag: yocto-4.1.3

Git Revision: 91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f

Release Artefact: poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f

sha: 94e4615eba651fe705436b29b854458be050cc39db936295f9d5eb7e85d3eff1

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: langdale

Tag: yocto-4.1.3

Git Revision: b995ea45773211bd7bdd60eabcc9bbffda6beb5c

Release Artefact: oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c

sha: 952e19361f205ee91b74e5caaa835d58fa6dd0d92ddaed50d4cd3f3fa56fab63

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/meta-mingw

Branch: langdale

Tag: yocto-4.1.3

Git Revision: b0067202db8573df3d23d199f82987cebe1bee2c

Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c

sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.2

Tag: yocto-4.1.3

Git Revision: 592ee222a1c6da42925fb56801f226884b6724ec

Release Artefact: bitbake-592ee222a1c6da42925fb56801f226884b6724ec

sha: 79c32f2ca66596132e32a45654ce0e9dd42b6b39186eff3540a9d6b499fe952c

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.3/bitbake-592ee222a1c6da42925fb56801f226884b6724ec.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/yocto-docs

Branch: langdale

Tag: yocto-4.1.3

Git Revision: 3de2ad1f8ff87aeec30088779267880306a0f31a

 

 

- ---------------

Contributors

- ---------------

Adrian Freihofer

Alejandro Hernandez Samaniego

Alex Kiernan

Alexander Kanavin

Alexis Lothoré

Anton Antonov

Antonin Godard

Armin Kuster

Arnout Vandecappelle

Benoît Mauduit

Bruce Ashfield

Carlos Alberto Lopez Perez

Changqing Li

Charlie Johnston

Chee Yang Lee

Chen Qi

Dmitry Baryshkov

Enguerrand de Ribaucourt

Etienne Cordonnier

Fawzi KHABER

Federico Pellegrin

Frank de Brabander

Harald Seiler

He Zhe

Jan Kircher

Jermain Horsman

Jose Quaresma

Joshua Watt

Kai Kang

Khem Raj

Louis Rannou

Luis

Marek Vasut

Markus Volk

Marta Rybczynska

Martin Jansa

Mateusz Marciniec

Mauro Queiros

Michael Halstead

Michael Opdenacker

Mikko Rapeli

Mingli Yu

Narpat Mali

Niko Mauno

Pavel Zhukov

Pawel Zalewski

Peter Kjellerstedt

Petr Kubizňák

Quentin Schulz

Randy MacLeod

Richard Purdie

Robert Joslyn

Rodolfo Quesada Zumbado

Ross Burton

Sakib Sajal

Sandeep Gundlupet Raju

Saul Wold

Siddharth Doshi

Steve Sakoman

Thomas Roos

Tobias Hagelborn

Ulrich Ölmann

Vivek Kumbhar

Wang Mingyu

Xiangyu Chen

leimaohui

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

apr-util: Fix CVE-2022-25147

apr: Fix CVE-2022-24963 CVE-2022-28331

bind: Fix CVE-2022-3094 CVE-2022-3736 CVE-2022-3924

curl: Fix CVE-2022-43551 CVE-2022-43552

dbus: Fix CVE-2022-42010 CVE-2022-42011 CVE-2022-42012

git: Fix CVE-2022-23521 CVE-2022-39253 CVE-2022-39260 CVE-2022-41903

git: ignore CVE-2022-41953

go: Fix CVE-2022-41717 CVE-2022-41720

grub2: Fix CVE-2022-2601 CVE-2022-3775

less: Fix CVE-2022-46663

libarchive: Fix CVE-2022-36227

libksba: Fix CVE-2022-47629

openssl: Fix CVE-2022-3996

pkgconf: Fix CVE-2023-24056

ppp: Fix CVE-2022-4603

sudo: Fix CVE-2023-22809

tar: Fix CVE-2022-48303

vim: Fix CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512

xserver-xorg: Fix CVE-2023-0494

xwayland: Fix CVE-2023-0494

 

 

- ---------------

Fixes

- ---------------

apr-util: Upgrade to 1.6.3

apr: Upgrade to 1.7.2

apt: fix do_package_qa failure

at: Change when files are copied

base.bbclass: Fix way to check ccache path

bblayers/makesetup: skip git repos that are submodules

bblayers/setupwriters/oe-setup-layers: create dir if not exists

bind: Upgrade to 9.18.11

bitbake-layers: fix a typo

bitbake: bb/utils: include SSL certificate paths in export_proxies

bitbake: fetch2/git: Clarify the meaning of namespace

bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata

bitbake: process: log odd unlink events with bitbake.sock

bitbake: server/process: Add bitbake.sock race handling

bitbake: siggen: Fix inefficient string concatenation

bootchart2: Fix usrmerge support

bsp-guide: fix broken git URLs and missing word

build-appliance-image: Update to langdale head revision

buildtools-tarball: set pkg-config search path

busybox: Fix depmod patch

busybox: always start do_compile with orig config files

busybox: rm temporary files if do_compile was interrupted

cairo: fix CVE patches assigned wrong CVE number

classes/fs-uuid: Fix command output decoding issue

classes/populate_sdk_base: Append cleandirs

classes: image: Set empty weak default IMAGE_LINGUAS

cml1: remove redundant addtask

core-image.bbclass: Fix missing leading whitespace with ':append'

createrepo-c: Include missing rpm/rpmstring.h

curl: don't enable debug builds

curl: fix dependencies when building with ldap/ldaps

cve-check: write the cve manifest to IMGDEPLOYDIR

cve-update-db-native: avoid incomplete updates

cve-update-db-native: show IP on failure

dbus: Upgrade to 1.14.6

dev-manual: common-tasks.rst: add link to FOSDEM 2023 video

dev-manual: fix old override syntax

devshell: Do not add scripts/git-intercept to PATH

devtool: fix devtool finish when gitmodules file is empty

devtool: process local files only for the main branch

dhcpcd: backport two patches to fix runtime error

dhcpcd: fix dhcpcd start failure on qemuppc64

diffutils: Upgrade to 3.9

ffmpeg: fix configure failure on noexec /tmp host

gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests

git: Upgrade to 2.37.6

glslang: branch rename master -> main

go: Upgrade to 1.19.4

gstreamer1.0 : Revert  "disable flaky gstbin:test_watch_for_state_change test" and Fix race conditions in gstbin tests with upstream solution

harfbuzz: remove bindir only if it exists

httpserver: add error handler that write to the logger

image.bbclass: print all QA functions exceptions

kernel-fitimage: Adjust order of dtb/dtbo files

kernel-fitimage: Allow user to select dtb when multiple dtb exists

kernel-yocto: fix kernel-meta data detection

kernel/linux-kernel-base: Fix kernel build artefact determinism issues

lib/buildstats: handle tasks that never finished

lib/oe/reproducible: Use git log without gpg signature

libarchive: Upgrade to 3.6.2

libc-locale: Fix on target locale generation

libgit2: Upgrade to 1.5.1

libjpeg-turbo: Upgrade to 2.1.5.1

libksba: Upgrade to 1.6.3

libpng: Enable NEON for aarch64 to enensure consistency with arm32.

librsvg: Only enable the Vala bindings if GObject Introspection is enabled

librsvg: enable vapi build

libseccomp: fix for the ptest result format

libseccomp: fix typo in DESCRIPTION

libssh2: Clean up ptest patch/coverage

libtirpc: Check if file exists before operating on it

libusb1: Link with latomic only if compiler has no atomic builtins

libusb1: Strip trailing whitespaces

linux-firmware: add yamato fw files to qcom-adreno-a2xx package

linux-firmware: properly set license for all Qualcomm firmware

linux-firmware: Upgrade to 20230210

linux-yocto/5.15: fix perf build with clang

linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off

linux-yocto/5.15: ltp and squashfs fixes

linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user copy

linux-yocto/5.15: Upgrade to v5.15.91

linux-yocto/5.19: fix perf build with clang

linux-yocto/5.19: powerpc: Fix reschedule bug in KUAP-unlocked user copy

lsof: fix old override syntax

lttng-modules: Fix for 5.10.163 kernel version

lttng-modules: fix for kernel 6.2+

lttng-modules: Upgrade to 2.13.8

lttng-tools: Upgrade to 2.13.9

make-mod-scripts: Ensure kernel build output is deterministic

manuals: update patchwork instance URL

mesa-gl: gallium is required when enabling x11

meta: remove True option to getVar and getVarFlag calls (again)

migration-guides: add release-notes for 4.0.7

native: Drop special variable handling

numactl: skip test case when target platform doesn't have 2 CPU node

oeqa context.py: fix --target-ip comment to include ssh port number

oeqa dump.py: add error counter and stop after 5 failures

oeqa qemurunner.py: add timeout to QMP calls

oeqa qemurunner.py: try to avoid reading one character at a time

oeqa qemurunner: read more data at a time from serial

oeqa ssh.py: add connection keep alive options to ssh client

oeqa ssh.py: fix hangs in run()

oeqa ssh.py: move output prints to new line

oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal

oeqa/rpm.py: Increase timeout and add debug output

oeqa/selftest/debuginfod: improve testcase

oeqa/selftest/locales: Add selftest for locale generation/presence

oeqa/selftest/resulttooltests: fix minor typo

openssl: Upgrade to 3.0.8

opkg: ensure opkg uses private gpg.conf when applying keys.

pango: Upgrade to 1.50.12

perf: Enable debug/source packaging

pkgconf: Upgrade to 1.9.4

poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder

poky.conf: bump version for 4.1.3

populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append'

profile-manual: update WireShark hyperlinks

ptest-packagelists.inc: Fix missing leading whitespace with ':append'

python3-pytest: depend on python3-tomli instead of python3-toml

quilt: fix intermittent failure in faildiff.test

quilt: use upstreamed faildiff.test fix

recipe_sanity: fix old override syntax

ref-manual: Fix invalid feature name

ref-manual: update DEV_PKG_DEPENDENCY in variables

ref-manual: variables.rst: fix broken hyperlink

rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively

runqemu: kill qemu if it hangs

rust: Do not use default compiler flags defined in CC crate

scons.bbclass: Make MAXLINELENGTH overridable

scons: Pass MAXLINELENGTH to scons invocation

sdkext/cases/devtool: pass a logger to HTTPService

selftest/virgl: use pkg-config from the host

spirv-headers/spirv-tools: set correct branch name

sstate.bbclass: Fetch non-existing local .sig files if needed

sstatesig: Improve output hash calculation

sudo: Upgrade to 1.9.12p2

system-requirements.rst: Add Fedora 36, AlmaLinux 8.7 & 9.1, and OpenSUSE 15.4 to list of supported distros

testimage: Fix error message to reflect new syntax

tiff: Add packageconfig knob for webp

toolchain-scripts: compatibility with unbound variable protection

uninative: Upgrade to 3.8.1 to include libgcc

update-alternatives: fix typos

vim: Upgrade to 9.0.1293

vulkan-samples: branch rename master -> main

wic: Fix usage of fstype=none in wic

wireless-regdb: Upgrade to 2023.02.13

xserver-xorg: Upgrade to 21.1.7

xwayland: Upgrade to 22.1.8

 

 


[ANNOUNCEMENT] Yocto Project 4.0.8 is Released

Lee Chee Yang
 

Hello

We are pleased to announce the Yocto Project 4.0.8 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


--------------------------

yocto-4.0.8 Release Notes

--------------------------

 

 

--------------------------

Repositories/Downloads

--------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/poky

Branch: kirkstone

Tag: yocto-4.0.8

Git Revision: a361fb3df9c87cf12963a9d785a9f99faa839222

Release Artefact: poky-a361fb3df9c87cf12963a9d785a9f99faa839222

sha: af4e8d64be27d3a408357c49b7952ce04c6d8bb0b9d7b50c48848d9355de7fc2

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: kirkstone

Tag: yocto-4.0.8

Git Revision: b20e2134daec33fbb8ce358d984751d887752bd5

Release Artefact: oecore-b20e2134daec33fbb8ce358d984751d887752bd5

sha: 63cce6f1caf8428eefc1471351ab024affc8a41d8d7777f525e3aa9ea454d2cd

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/meta-mingw

Branch: kirkstone

Tag: yocto-4.0.8

Git Revision: a90614a6498c3345704e9611f2842eb933dc51c1

Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1

sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/meta-gplv2

Branch: kirkstone

Tag: yocto-4.0.8

Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.0

Tag: yocto-4.0.8

Git Revision: 9bbdedc0ba7ca819b898e2a29a151d6a2014ca11

Release Artefact: bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11

sha: 8e724411f4df00737e81b33eb568f1f97d2a00d5364342c0a212c46abb7b005b

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/yocto-docs

Branch: kirkstone

Tag: yocto-4.0.8

Git Revision: 16ecbe028f2b9cc021267817a5413054e070b563

 

 

---------------

Contributors

---------------

Alejandro Hernandez Samaniego

Alexander Kanavin

Alexandre Belloni

Armin Kuster

Arnout Vandecappelle

Bruce Ashfield

Changqing Li

Etienne Cordonnier

Harald Seiler

Kai Kang

Khem Raj

Lee Chee Yang

Louis Rannou

Marek Vasut

Marius Kriegerowski

Mark Hatle

Martin Jansa

Mauro Queiros

Michael Opdenacker

Mikko Rapeli

Mingli Yu

Narpat Mali

Niko Mauno

Pawel Zalewski

Peter Kjellerstedt

Richard Purdie

Rodolfo Quesada Zumbado

Ross Burton

Sakib Sajal

Schmidt, Adriaan

Steve Sakoman

Thomas Roos

Ulrich Ölmann

Xiangyu Chen

 

 

---------------

Known Issues

---------------

N/A

 

 

---------------

Security Fixes

---------------

apr-util: fix CVE-2022-25147

apr: fix CVE-2022-24963 CVE-2022-28331 CVE-2021-35940

bind: fix CVE-2022-3094 CVE-2022-3736 CVE-2022-3924

git: ignore CVE-2022-41953

git: fix CVE-2022-23521 CVE-2022-41903

ppp: fix CVE-2022-4603

python3-certifi: fix CVE-2022-23491

sudo: fix CVE-2023-2280

tar: CVE-2022-48303

 

 

---------------

Fixes

---------------

Fix missing leading whitespace with ':append'

apr-util: upgrade to 1.6.3

apr: upgrade to 1.7.2

apt: fix do_package_qa failure

bind: upgrade to 9.18.11

bitbake: bb/utils: include SSL certificate paths in export_proxies

bitbake: bitbake-diffsigs: Make PEP8 compliant

bitbake: bitbake-diffsigs: break on first dependent task difference

bitbake: fetch2/git: Clarify the meaning of namespace

bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata

bitbake: fetch2/git: show SRCREV and git repo in error message about fixed SRCREV

bitbake: siggen: Fix inefficient string concatenation

bitbake: utils/ply: Update md5 to better report errors with hashlib

bootchart2: Fix usrmerge support

bsp-guide: fix broken git URLs and missing word

build-appliance-image: Update to kirkstone head revision

buildtools-tarball: set pkg-config search path

classes/fs-uuid: Fix command output decoding issue

dev-manual: common-tasks.rst: add link to FOSDEM 2023 video

dev-manual: fix old override syntax

devshell: Do not add scripts/git-intercept to PATH

devtool: fix devtool finish when gitmodules file is empty

diffutils: upgrade to 3.9

gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests

git: upgrade to 2.35.7

glslang: branch rename master -> main

httpserver: add error handler that write to the logger

image.bbclass: print all QA functions exceptions

kernel/linux-kernel-base: Fix kernel build artefact determinism issues

libc-locale: Fix on target locale generation

libgit2: upgrade to 1.4.5

libjpeg-turbo: upgrade to 2.1.5

libtirpc: Check if file exists before operating on it

libusb1: Link with latomic only if compiler has no atomic builtins

libusb1: Strip trailing whitespaces

linux-firmware: upgrade to 20230117

linux-yocto/5.15: update to v5.15.91

lsof: fix old override syntax

lttng-modules: Fix for 5.10.163 kernel version

lttng-tools: upgrade to 2.13.9

make-mod-scripts: Ensure kernel build output is deterministic

manuals: update patchwork instance URL

meta: remove True option to getVar and getVarFlag calls (again)

migration-guides: add release-notes for 4.0.7

native: Drop special variable handling

numactl: skip test case when target platform doesn't have 2 CPU node

oeqa context.py: fix --target-ip comment to include ssh port number

oeqa dump.py: add error counter and stop after 5 failures

oeqa qemurunner.py: add timeout to QMP calls

oeqa qemurunner.py: try to avoid reading one character at a time

oeqa qemurunner: read more data at a time from serial

oeqa ssh.py: add connection keep alive options to ssh client

oeqa ssh.py: move output prints to new line

oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal

oeqa/selftest/bbtests: Update message lookup for test_git_unpack_nonetwork_fail

oeqa/selftest/locales: Add selftest for locale generation/presence

poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder

poky.conf: bump version for 4.0.8

profile-manual: update WireShark hyperlinks

python3-pytest: depend on python3-tomli instead of python3-toml

qemu: fix compile error

quilt: fix intermittent failure in faildiff.test

quilt: use upstreamed faildiff.test fix

recipe_sanity: fix old override syntax

ref-manual: document SSTATE_EXCLUDEDEPS_SYSROOT

scons.bbclass: Make MAXLINELENGTH overridable

scons: Pass MAXLINELENGTH to scons invocation

sdkext/cases/devtool: pass a logger to HTTPService

spirv-headers: set correct branch name

sudo: upgrade to 1.9.12p2

system-requirements.rst: add Fedora 36 and AlmaLinux 8.7 to list of supported distros

testimage: Fix error message to reflect new syntax

update-alternatives: fix typos

vulkan-samples: branch rename master -> main

 


[ANNOUNCEMENT] Milestone 3 for Yocto Project 4.2 (yocto-4.2_M3) Now Available

Lee Chee Yang
 

Hello

We are pleased to announce the third milestone release for Yocto Project 4.2 (yocto-4.2_M3) is now available for download.

 

Download:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.2_M3


bitbake: 6bc65e6402a74c9a65e29333a7e0f1f85dcbcf58

meta-agl: 09135164a21a216c6e3e75d7decce896b92962f0

meta-arm: d5c024f1f5326fb19de33928acea34df4b58e9ba

meta-aws: c0d336fa28dfb75b71e403802f532723a619d9cb

meta-intel: d5ddfa0354fc6025bd2d42f56b70943429c06dd3

meta-mingw: 250617ffa524c082b848487359b9d045703d59c2

meta-openembedded: 3f2aee1b080e2f9ab2d0a7326581dad2f07ca6ef

meta-virtualization: 369749ad2947921d7452a31e7a4ce6eb0f8e8ccb

oecore: f6ac666c99da115ab4a214d24282978a06c36efa

poky: c45d58f003e8d8b323169ca9d479dc49c43a9974

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.2_M3/testreport.txt

 

Thank you.

 

Lee Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


[ANNOUNCEMENT] Yocto Project 3.1.23 (dunfell-23.0.23) is Released

Lee Chee Yang
 

Hi,

We are pleased to announce the Yocto Project 3.1.23 (dunfell-23.0.23) Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/poky-dunfell-23.0.23.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.23/poky-dunfell-23.0.23.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang Lee
chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-3.1.23 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: dunfell

Tag: yocto-3.1.23

Git Revision: aec83663aadc871354b441eef0a3a41eb3780b13

Release Artefact: poky-dunfell-23.0.23

sha: 53dad656bc3dfedd1f58d6fe4b7771dc696b9cdab3aa108232d2a05f47d90dd5

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/poky-dunfell-23.0.23.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.23/poky-dunfell-23.0.23.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: dunfell

Tag: yocto-3.1.23

Git Revision: daaee6fcb0d201f041678af433d8e1cd6f924d09

Release Artefact: oecore-dunfell-23.0.23

sha: 98aabb01fd40eac4067074b0c6ac716b5811c73411e97996e677e3e3c8b2e34b

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/oecore-dunfell-23.0.23.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.23/oecore-dunfell-23.0.23.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: dunfell

Tag: yocto-3.1.23

Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7

Release Artefact: meta-mingw-dunfell-23.0.23

sha: eccee0d65705857e07950c699263c28ec6eb17d5bbf228d6579e887fdce7a798

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/meta-mingw-dunfell-23.0.23.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.23/meta-mingw-dunfell-23.0.23.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: dunfell

Tag: yocto-3.1.23

Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac

Release Artefact: meta-gplv2-dunfell-23.0.23

sha: 5613b655f022f0bcf8e15d72bacf9fd94ed80f24577095a0e9345829df463860

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/meta-gplv2-dunfell-23.0.23.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.23/meta-gplv2-dunfell-23.0.23.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: dunfell

Tag: yocto-3.1.23

Git Revision: c16d364dbf68d2a500fecaf8d6e6d62b11475d9f

Release Artefact: bitbake-dunfell-23.0.23

sha: eea9dceeadca1af583237243475139b6faa8449e6147c87beefafdefd59a8e00

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.23/bitbake-dunfell-23.0.23.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.23/bitbake-dunfell-23.0.23.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: dunfell

Tag: yocto-3.1.23

Git Revision: 28f22e068aaf9598ac3426b35b6655102852590d

 

 

- ---------------

Known Issues

- ---------------

During testing of the release one well known qemuppc intermittent issue was observed but did not recur when the test was repeated.

 

 

- ---------------

Security Fixes

- ---------------

libsdl2: Fix for CVE-2022-4743

go: Fix CVE-2022-1962

vim: Fix CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288

xserver-xorg: Fix CVE-2022-4283 CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344

ffmpeg: Fix CVE-2022-3109

 

 

- ---------------

Fixes

- ---------------

Fix missing leading whitespace with ':append'

bitbake: bb/utils: include SSL certificate paths in export_proxies

bitbake: bitbake: fetch/git: use shlex.quote() to support spaces in SRC_URI url

bitbake: fetch2/git: Clarify the meaning of namespace

bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata

build-appliance-image: Update to dunfell head revision

cairo: fix CVE patches assigned wrong CVE number

cve-check: write the cve manifest to IMGDEPLOYDIR

cve-update-db-native: Allow to overrule the URL in a bbappend.

cve-update-db-native: add more logging when fetching

cve-update-db-native: avoid incomplete updates

cve-update-db-native: show IP on failure

devtool: Fix _copy_file() TypeError

devtool: fix devtool finish when gitmodules file is empty

documentation: update for 3.1.23

lib/oe/reproducible: Use git log without gpg signature

libtirpc: Check if file exists before operating on it

linux-firmware: upgrade to 20221214

linux-yocto/5.4: update to v5.4.230

lttng-modules: fix build with 5.4.229 kernel

lttng-modules: upgrade to 2.11.9

poky.conf: bump version for 3.1.23

python3: fix packaging of Windows distutils installer stubs

selftest/virgl: use pkg-config from the host

systemd: Consider PACKAGECONFIG in RRECOMMENDS

toolchain-scripts: compatibility with unbound variable protection

vim: upgrade to 9.0.1211


[ANNOUNCEMENT] Yocto Project 4.0.7 is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 4.0.7 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/poky-65dafea22018052fe7b2e17e6e4d7eb754224d38.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.7/poky-65dafea22018052fe7b2e17e6e4d7eb754224d38.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release

 

- --------------------------

yocto-4.0.7 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/poky

Branch: kirkstone

Tag: yocto-4.0.7

Git Revision: 65dafea22018052fe7b2e17e6e4d7eb754224d38

Release Artefact: poky-65dafea22018052fe7b2e17e6e4d7eb754224d38

sha: 6b1b67600b84503e2d5d29bcd6038547339f4f9413b830cd2408df825eda642d

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/poky-65dafea22018052fe7b2e17e6e4d7eb754224d38.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.7/poky-65dafea22018052fe7b2e17e6e4d7eb754224d38.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: kirkstone

Tag: yocto-4.0.7

Git Revision: a8c82902384f7430519a31732a4bb631f21693ac

Release Artefact: oecore-a8c82902384f7430519a31732a4bb631f21693ac

sha: 6f2dbc4ea1e388620ef77ac3a7bbb2b5956bb8bf9349b0c16cd7610e9996f5ea

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/oecore-a8c82902384f7430519a31732a4bb631f21693ac.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.7/oecore-a8c82902384f7430519a31732a4bb631f21693ac.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/meta-mingw

Branch: kirkstone

Tag: yocto-4.0.7

Git Revision: a90614a6498c3345704e9611f2842eb933dc51c1

Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1

sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.7/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/meta-gplv2

Branch: kirkstone

Tag: yocto-4.0.7

Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.7/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.0

Tag: yocto-4.0.7

Git Revision: 7e268c107bb0240d583d2c34e24a71e373382509

Release Artefact: bitbake-7e268c107bb0240d583d2c34e24a71e373382509

sha: c3e2899012358c95962c7a5c85cf98dc30c58eae0861c374124e96d9556bb901

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.7/bitbake-7e268c107bb0240d583d2c34e24a71e373382509.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.7/bitbake-7e268c107bb0240d583d2c34e24a71e373382509.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/yocto-docs

Branch: kirkstone

Tag: yocto-4.0.7

Git Revision: 5883e897c34f25401b358a597fb6e18d80f7f90b

 

 

- ---------------

Contributors

- ---------------

Alejandro Hernandez Samaniego

Alex Kiernan

Alex Stewart

Alexander Kanavin

Antonin Godard

Benoît Mauduit

Bhabu Bindu

Bruce Ashfield

Carlos Alberto Lopez Perez

Changqing Li

Chen Qi

Daniel Gomez

Florin Diaconescu

He Zhe

Hitendra Prajapati

Jagadeesh Krishnanjanappa

Jan Kircher

Jermain Horsman

Jose Quaresma

Joshua Watt

KARN JYE LAU

Kai Kang

Khem Raj

Luis

Marta Rybczynska

Martin Jansa

Mathieu Dubois-Briand

Michael Opdenacker

Narpat Mali

Ovidiu Panait

Pavel Zhukov

Peter Marko

Petr Kubizňák

Quentin Schulz

Randy MacLeod

Ranjitsinh Rathod

Richard Purdie

Robert Andersson

Ross Burton

Sandeep Gundlupet Raju

Saul Wold

Steve Sakoman

Vivek Kumbhar

Wang Mingyu

Xiangyu Chen

Yash Shinde

Yogita Urade

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

binutils: Fix CVE-2022-4285

curl: Fix CVE-2022-43551 CVE-2022-43552

ffmpeg: Fix CVE-2022-3109 CVE-2022-3341

go: Fix CVE-2022-41715 CVE-2022-41717

libX11: Fix CVE-2022-3554 CVE-2022-3555

libarchive: Fix CVE-2022-36227

libksba: Fix CVE-2022-47629

libpng: Fix CVE-2019-6129

libxml2: Fix CVE-2022-40303 CVE-2022-40304

openssl: Fix CVE-2022-3996

python3-git: Fix CVE-2022-24439

python3-setuptools: Fix CVE-2022-40897

python3-wheel: Fix CVE-2022-40898

qemu: Fix CVE-2022-4144

sqlite: Fix CVE-2022-46908

systemd: Fix CVE-2022-45873

vim: Fix CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0088

webkitgtk: Fix CVE-2022-32886 CVE-2022-32891 CVE-2022-32912

 

 

- ---------------

Fixes

- ---------------

Revert "gstreamer1.0: disable flaky gstbin:test_watch_for_state_change test"

at: Change when files are copied

baremetal-image: Avoid overriding qemu variables from IMAGE_CLASSES

base.bbclass: Fix way to check ccache path

bc: extend to nativesdk

bind: upgrade to 9.18.10

busybox: always start do_compile with orig config files

busybox: rm temporary files if do_compile was interrupted

cairo: fix CVE patches assigned wrong CVE number

cairo: update patch for CVE-2019-6461 with upstream solution

classes/create-spdx: Add SPDX_PRETTY option

classes: image: Set empty weak default IMAGE_LINGUAS

combo-layer: add sync-revs command

combo-layer: dont use bb.utils.rename

combo-layer: remove unused import

curl: Correct LICENSE from MIT-open-group to curl

cve-check: write the cve manifest to IMGDEPLOYDIR

cve-update-db-native: avoid incomplete updates

cve-update-db-native: show IP on failure

dbus: Add missing CVE product name

devtool/upgrade: correctly handle recipes where S is a subdir of upstream tree

devtool: process local files only for the main branch

dhcpcd: backport two patches to fix runtime error

docs: kernel-dev: faq: update tip on how to not include kernel in image

docs: migration-4.0: specify variable name change for kernel inclusion in image recipe

efibootmgr: update compilation with musl

externalsrc: fix lookup for .gitmodules

ffmpeg: refresh patches to apply cleanly

freetype:update mirror site.

gcc: Refactor linker patches and fix linker on arm with usrmerge

glibc: stable 2.35 branch updates.

go-crosssdk: avoid host contamination by GOCACHE

gstreamer1.0: Fix race conditions in gstbin tests

gstreamer1.0: upgrade to 1.20.5

gtk-icon-cache: Fix GTKIC_CMD if-else condition

harfbuzz: remove bindir only if it exists

kernel-fitimage: Adjust order of dtb/dtbo files

kernel-fitimage: Allow user to select dtb when multiple dtb exists

kernel.bbclass: remove empty module directories to prevent QA issues

lib/buildstats: fix parsing of trees with reduced_proc_pressure directories

lib/oe/reproducible: Use git log without gpg signature

libarchive: upgrade to 3.6.2

libepoxy: remove upstreamed patch

libksba: upgrade to 1.6.3

libnewt: upgrade to 0.52.23

libpng: upgrade to 1.6.39

libseccomp: fix typo in DESCRIPTION

libxcrypt-compat: upgrade to 4.4.33

libxml2: fix test data checksums

linux-firmware: upgrade to 20221214

linux-yocto/5.10: update to v5.10.160

linux-yocto/5.15: fix perf build with clang

linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off

linux-yocto/5.15: ltp and squashfs fixes

linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user copy

linux-yocto/5.15: update to v5.15.84

lsof: add update-alternatives logic

lttng-modules: upgrade to 2.13.8

manuals: add 4.0.5 and 4.0.6 release notes

manuals: document SPDX_PRETTY variable

mpfr: upgrade to 4.1.1

oeqa/concurrencytest: Add number of failures to summary output

oeqa/rpm.py: Increase timeout and add debug output

oeqa/selftest/externalsrc: add test for srctree_hash_files

openssh: remove RRECOMMENDS to rng-tools for sshd package

poky.conf: bump version for 4.0.7

python3: upgrade to 3.10.9

qemuboot.bbclass: make sure runqemu boots bundled initramfs kernel image

rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively

rm_work: adjust dependency to make do_rm_work_all depend on do_rm_work

ruby: merge .inc into .bb

ruby: upgrade to 3.1.3

selftest/virgl: use pkg-config from the host

systemd: backport another change from v252 to fix build with CVE-2022-45873.patch

tiff: Add packageconfig knob for webp

toolchain-scripts: compatibility with unbound variable protection

tzdata: upgrade to 2022g

valgrind: skip the boost_thread test on arm

vim: upgrade to 9.0.1211

webkitgtk: upgrade to 2.36.8

xserver-xorg: upgrade to 21.1.6

xwayland: libxshmfence is needed when dri3 is enabled

xwayland: upgrade to 22.1.7

yocto-check-layer: Allow OE-Core to be tested



[ANNOUNCEMENT] Milestone 2 for Yocto Project 4.2 (yocto-4.2_M2) Now Available

Lee Chee Yang
 

Hello

We are pleased to announce the second milestone release for Yocto Project 4.2 (yocto-4.2_M2) is now available for download.

 

Download:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.2_M2

 

bitbake: c19035e8e71c419c5688a86bfc9c946c96f638e8

meta-agl: 09135164a21a216c6e3e75d7decce896b92962f0

meta-arm: d8383c11f3f8220d2b989ec73604e5faff988299

meta-aws: 7b4f54b3e1f675e2033f6a589ac519e44e62b58b

meta-intel: b3c7d3ee44e4ab71df44b5be3c48d2f47d89d8a0

meta-mingw: 250617ffa524c082b848487359b9d045703d59c2

meta-openembedded: ceceffcb1e3ef4f9ba7708f77c27e30a7aea61e5

meta-virtualization: 31954471605ae3b41627a0ab7b0dcfe8c5851bd7

oecore: 493f2d163718d78560a2b3ad5d3c0fb34caae8c0

poky: 5e249ec855517765f4b99e8039cb888ffa09c211

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.2_M2/testreport.txt


Known Issue:


There is reproducibility issue in this milestone release build where kernel-devsrc and perf only reproduce correctly on the same host. This was introduced with the 6.1 kernel and there are fixes in master for the kernel-devsrc hostname issue. The perf issue is still being resolved but will be fixed before final release of 4.2.



Thank you.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


[ANNOUNCEMENT] Yocto Project 3.1.22 (dunfell-23.0.22) is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 3.1.22 (dunfell-23.0.22) Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/poky-dunfell-23.0.22.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.22/poky-dunfell-23.0.22.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang Lee chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-3.1.22 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: dunfell

Tag: yocto-3.1.22

Git Revision: 6b8a307b7843af23d189d7ffcecf32c05afac850

Release Artefact: poky-dunfell-23.0.22

sha: 67d9822ae28831cff3803087853694e77df06532af29c9e52e290d566b1875b6

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/poky-dunfell-23.0.22.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.22/poky-dunfell-23.0.22.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: dunfell

Tag: yocto-3.1.22

Git Revision: db81e3c7e7f1d4d9eba52ac35ac97627d0240b63

Release Artefact: oecore-dunfell-23.0.22

sha: 63e215da64bfd75bddba7400f0e61f4543a073f09ff8b9a109756a86af9dca7c

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/oecore-dunfell-23.0.22.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.22/oecore-dunfell-23.0.22.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: dunfell

Tag: yocto-3.1.22

Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7

Release Artefact: meta-mingw-dunfell-23.0.22

sha: 90745c497193ae8c79461d5c9d1311a4e130836c5a8b1648383a2cb7917abcf6

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/meta-mingw-dunfell-23.0.22.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.22/meta-mingw-dunfell-23.0.22.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: dunfell

Tag: yocto-3.1.22

Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac

Release Artefact: meta-gplv2-dunfell-23.0.22

sha: 84d52a013bb8425a76ccdd80b14dbf032b3cdcf2fb4ff7f8ac3456d30c035708

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/meta-gplv2-dunfell-23.0.22.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.22/meta-gplv2-dunfell-23.0.22.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: dunfell

Tag: yocto-3.1.22

Git Revision: e3db9c2e9eded3c5cb6040714a6054b44f6b3880

Release Artefact: bitbake-dunfell-23.0.22

sha: f7f15c66bf5076536622ad9c02b8c12052cce0d3cb4553342519e298973aa3ec

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.22/bitbake-dunfell-23.0.22.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.22/bitbake-dunfell-23.0.22.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: dunfell

Tag: yocto-3.1.22

Git Revision: 3dc2c423484585d04f586b721010c129571638c0

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

cairo: update patch for CVE-2019-6461 with upstream solution

curl: Fix CVE CVE-2022-35260

dropbear: Fix CVE-2021-36369

golang: Fix CVE-2021-33195 CVE-2021-33198 CVE-2021-44716 CVE-2022-24291 CVE-2022-28131 CVE-2022-28327 CVE-2022-41715 CVE-2022-41717

golang: ignore CVE-2021-33194 CVE-2021-41772 CVE-2022-29804 CVE-2022-30580 CVE-2022-30630

grub2: Fix CVE-2022-2601 CVE-2022-3775 CVE-2022-28735

libarchive: Fix CVE-2022-36227

libksba: Fix CVE-2022-47629

libtasn1: Fix CVE-2021-46848

libx11: Fix CVE-2022-3555

libxml2: Fix CVE-2022-40303 CVE-2022-40304

pixman: Fix CVE-2022-44638

ppp: Fix CVE-2022-4603

python3: Fix CVE-2022-37454 CVE-2022-45061

qemu: Fix CVE-2021-3507 CVE-2021-20196

rpm: Fix rpm CVE CVE-2021-3521

rsync: fix CVE-2022-29154

sudo: Fix CVE-2022-43995

sysstat: Fix CVE-2022-39377

systemd: Fix CVE-2022-3821

vim: Fix CVE-2022-3705 CVE-2022-4141

xserver-xorg: Fix CVE-2022-3550 CVE-2022-3551 CVE-2022-3553

 

- ---------------

Fixes

- ---------------

base.bbclass: Fix way to check ccache path

bc: extend to nativesdk

build-appliance-image: Update to dunfell head revision

classes: make TOOLCHAIN more permissive for kernel

dev-manual: update session about multiconfig

documentation: update for 3.1.22

externalsrc: fix lookup for .gitmodules

gcc: upgrade to v9.5

go-crosssdk: avoid host contamination by GOCACHE

kernel.bbclass: make KERNEL_DEBUG_TIMESTAMPS work at rebuild

kernel: improve transformation from KERNEL_IMAGETYPE_FOR_MAKE

lib/buildstats: fix parsing of trees with reduced_proc_pressure directories

linux-firmware: upgrade to 20221109

linux-yocto/5.4: update genericx86* machines to v5.4.219

linux-yocto/5.4: update to v5.4.228

maintainers: update gcc version to 9.5

mobile-broadband-provider-info: upgrade to 20221107

oeqa/rpm.py: Increase timeout and add debug output

oeqa/selftest/tinfoil: Add test for separate config_data with recipe_parse_file()

opkg: Set correct info_dir and status_file in opkg.conf

ovmf: fix gcc12 warning for device path handling

ovmf: fix gcc12 warning in GenFfs

ovmf: fix gcc12 warning in LzmaEnc

poky.conf: bump version for 3.1.22

psplash: consider the situation of psplash not exist for systemd

qemuboot.bbclass: make sure runqemu boots bundled initramfs kernel image

rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively

sstate: Account for reserved characters when shortening sstate filenames

sudo: Use specific BSD license variant

tzdata: update to 2022g

vim: upgrade to 9.0.0947



[ANNOUNCEMENT] Yocto Project 4.1.2 is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 4.1.2 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/poky-74c92e38c701e268406bb656b45ccd68471c217e.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/poky-74c92e38c701e268406bb656b45ccd68471c217e.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release

- --------------------------

yocto-4.1.2 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/poky

Branch: langdale

Tag: yocto-4.1.2

Git Revision: 74c92e38c701e268406bb656b45ccd68471c217e

Release Artefact: poky-74c92e38c701e268406bb656b45ccd68471c217e

sha: 06a2b304d0e928b62d81087797ae86115efe925c506bcb40c7d4747e14790bb0

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/poky-74c92e38c701e268406bb656b45ccd68471c217e.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/poky-74c92e38c701e268406bb656b45ccd68471c217e.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: langdale

Tag: yocto-4.1.2

Git Revision: 670f4f103b25897524d115c1f290ecae441fe4bd

Release Artefact: oecore-670f4f103b25897524d115c1f290ecae441fe4bd

sha: 09d77700e84efc738aef5713c5e86f19fa092f876d44b870789155cc1625ef04

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/oecore-670f4f103b25897524d115c1f290ecae441fe4bd.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/oecore-670f4f103b25897524d115c1f290ecae441fe4bd.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/meta-mingw

Branch: langdale

Tag: yocto-4.1.2

Git Revision: b0067202db8573df3d23d199f82987cebe1bee2c

Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c

sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.2

Tag: yocto-4.1.2

Git Revision: f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4

Release Artefact: bitbake-f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4

sha: 7faf97eca78afd3994e4e126e5f5908617408c340c6eff8cd7047e0b961e2d10

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.2/bitbake-f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.2/bitbake-f0f166aee766b4bb1f8cf8b35dfc7d406c75e6a4.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/yocto-docs

Branch: langdale

Tag: yocto-4.1.2

Git Revision: 30f5f9ece260fd600f0c0fa32fc2f1fc61cf7d1b

 

 

- ---------------

Contributors

- ---------------

Alejandro Hernandez Samaniego

Alex Kiernan

Alex Stewart

Alexander Kanavin

Alexey Smirnov

Bruce Ashfield

Carlos Alberto Lopez Perez

Chen Qi

Diego Sueiro

Dmitry Baryshkov

Enrico Jörns

Harald Seiler

Hitendra Prajapati

Jagadeesh Krishnanjanappa

Jose Quaresma

Joshua Watt

Kai Kang

Konrad Weihmann

Leon Anavi

Marek Vasut

Martin Jansa

Mathieu Dubois-Briand

Michael Opdenacker

Mikko Rapeli

Narpat Mali

Nathan Rossi

Niko Mauno

Ola x Nilsson

Ovidiu Panait

Pavel Zhukov

Peter Bergin

Peter Kjellerstedt

Peter Marko

Polampalli, Archana

Qiu, Zheng

Quentin Schulz

Randy MacLeod

Ranjitsinh Rathod

Ravula Adhitya Siddartha

Richard Purdie

Robert Andersson

Ross Burton

Ryan Eatmon

Sakib Sajal

Sandeep Gundlupet Raju

Sergei Zhmylev

Steve Sakoman

Tim Orling

Wang Mingyu

Xiangyu Chen

pgowda

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

sudo: Fix CVE-2022-43995

binutils: Fix CVE-2022-4285

cairo: update patch for CVE-2019-6461 with upstream solution

expat: Fix CVE-2022-43680

ffmpeg: Fix CVE-2022-3964 CVE-2022-3965

grub: Fix CVE-2022-28736

libarchive: Fix CVE-2022-36227

libpam: Fix CVE-2022-28321

libpng: Fix CVE-2019-6129

ruby: Fix CVE-2022-28738 CVE-2022-28739

tiff: Fix CVE-2022-3970

vim: Fix CVE-2022-4141

 

 

- ---------------

Fixes

- ---------------

Expand create-spdx class documentation

Expand cve-check class documentation

archiver: avoid using machine variable as it breaks multiconfig

babeltrace: Upgrade to 1.5.11

backport SPDX documentation and vulnerability improvements

baremetal-image: Avoid overriding qemu variables from IMAGE_CLASSES

bc: extend to nativesdk

bind: Upgrade to 9.18.9

bitbake.conf: Drop export of SOURCE_DATE_EPOCH_FALLBACK

bitbake: gitsm: Fix regression in gitsm submodule path parsing

bitbake: runqueue: Fix race issues around hash equivalence and sstate reuse

bluez5: Point hciattach bcm43xx firmware search path to /lib/firmware

build-appliance-image: Update to langdale head revision

cargo_common.bbclass: Fix typos

classes: make TOOLCHAIN more permissive for kernel

cmake: Upgrade to 3.24.2

combo-layer: add sync-revs command

combo-layer: dont use bb.utils.rename

combo-layer: remove unused import

common-tasks.rst: fix oeqa runtime test path

create-spdx: default share_src for shared sources

curl: Correct LICENSE from MIT-open-group to curl

dbus: Add missing CVE product name

devtool/upgrade: correctly handle recipes where S is a subdir of upstream tree

dhcpcd: fix to work with systemd

docs: kernel-dev: faq: update tip on how to not include kernel in image

docs: migration-4.0: specify variable name change for kernel inclusion in image recipe

expat: upgrade to 2.5.0

externalsrc: fix lookup for .gitmodules

ffmpeg: Upgrade to 5.1.2

gcc-shared-source: Fix source date epoch handling

gcc-source: Drop gengtype manipulation

gcc-source: Ensure deploy_source_date_epoch sstate hash doesn't change

gcc-source: Fix gengtypes race

gdk-pixbuf: Upgrade to 2.42.10

get_module_deps3.py: Check attribute '__file__'

glibc-tests: correctly pull in the actual tests when installing -ptest package

gnomebase.bbclass: return the whole version for tarball directory if it is a number

go-crosssdk: avoid host contamination by GOCACHE

go: Update reproducibility patch to fix panic errors

go: submit patch upstream

go: Upgrade to 1.19.3

gptfdisk: remove warning message from target system

groff: submit patches upstream

gstreamer1.0: Upgrade to 1.20.5

help2man: Upgrade to 1.49.3

insane: add codeload.github.com to src-uri-bad checkz

inetutils: Upgrade to 2.4

iso-codes: Upgrade to 4.12.0

kbd: Don't build tests

kea: submit patch upstream

kern-tools: integrate ZFS speedup patch

kernel.bbclass: Include randstruct seed assets in STAGING_KERNEL_BUILDDIR

kernel.bbclass: make KERNEL_DEBUG_TIMESTAMPS work at rebuild

kernel.bbclass: remove empty module directories to prevent QA issues

lib/buildstats: fix parsing of trees with reduced_proc_pressure directories

libdrm: Remove libdrm-kms package

libepoxy: convert to git

libepoxy: remove upstreamed patch

libepoxy: Upgrade to 1.5.10

libffi: submit patch upstream

libffi: Upgrade to 3.4.4

libical: Upgrade to 3.0.16

libnewt: Upgrade to 0.52.23

libsdl2: Upgrade to 2.24.2

libpng: Upgrade to 1.6.39

libuv: fixup SRC_URI

libxcrypt-compat: Upgrade to 4.4.33

libxcrypt: Upgrade to 4.4.30

libxml2: fix test data checksums

linux-firmware: add new fw file to ${PN}-qcom-adreno-a530

linux-firmware: don't put the firmware into the sysroot

linux-firmware: Upgrade to 20221109

linux-yocto/5.15: fix CONFIG_CRYPTO_CCM mismatch warnings

linux-yocto/5.15: update genericx86* machines to v5.15.72

linux-yocto/5.15: Upgrade to v5.15.78

linux-yocto/5.19: cfg: intel and vesa updates

linux-yocto/5.19: fix CONFIG_CRYPTO_CCM mismatch warnings

linux-yocto/5.19: fix elfutils run-backtrace-native-core ptest failure

linux-yocto/5.19: security.cfg: remove configs which have been dropped

linux-yocto/5.19: update genericx86* machines to v5.19.14

linux-yocto/5.19: Upgrade to v5.19.17

lsof: add update-alternatives logic

lttng-modules: Upgrade to 2.13.7

lttng-tools: submit determinism.patch upstream

manuals: add 4.0.5 and 4.0.6 release notes

mesa: do not rely on native llvm-config in target sysroot

mesa: Upgrade to 22.2.3

meta-selftest/staticids: add render group for systemd

mirrors.bbclass: update CPAN_MIRROR

mobile-broadband-provider-info: Upgrade to 20221107

mpfr: Upgrade to 4.1.1

mtd-utils: Upgrade to 2.1.5

oeqa/concurrencytest: Add number of failures to summary output

oeqa/runtime/dnf: rewrite test_dnf_installroot_usrmerge

oeqa/selftest/externalsrc: add test for srctree_hash_files

oeqa/selftest/lic_checksum: Cleanup changes to emptytest include

openssh: remove RRECOMMENDS to rng-tools for sshd package

opkg: Set correct info_dir and status_file in opkg.conf

opkg: Upgrade to 0.6.1

ovmf: correct patches status

package: Fix handling of minidebuginfo with newer binutils

pango: Make it build with ptest disabled

pango: replace a recipe fix with an upstream submitted patch

pango: Upgrade to 1.50.11

poky.conf: bump version for 4.1.2

psplash: consider the situation of psplash not exist for systemd

python3-mako: Upgrade to 1.2.3

qemu-helper-native: Correctly pass program name as argv[0]

qemu-helper-native: Re-write bridge helper as C program

qemu: Ensure libpng dependency is deterministic

qemuboot.bbclass: make sure runqemu boots bundled initramfs kernel image

resolvconf: make it work

rm_work: adjust dependency to make do_rm_work_all depend on do_rm_work

rm_work: exclude the SSTATETASKS from the rm_work tasks sinature

ruby: merge .inc into .bb

ruby: Upgrade to 3.1.3

rust: submit a rewritten version of crossbeam_atomic.patch upstream

sanity: Drop data finalize call

scripts: convert-overrides: Allow command-line customizations

selftest: add a copy of previous mtd-utils version to meta-selftest

socat: Upgrade to 1.7.4.4

sstate: Allow optimisation of do_deploy_archives task dependencies

sstatesig: emit more helpful error message when not finding sstate manifest

sstatesig: skip the rm_work task signature

sudo: Upgrade to 1.9.12p1

sysstat: Upgrade to 12.6.1

systemd: Consider PACKAGECONFIG in RRECOMMENDS

systemd: Make importd depend on glib-2.0 again

systemd: add group render to udev package

systemd: Upgrade to 251.8

tcl: correct patch status

tzdata: Upgrade to 2022g

vala: install vapigen-wrapper into /usr/bin/crosscripts and stage only that

valgrind: skip the boost_thread test on arm

vim: Upgrade to 9.0.0947

wic: make ext2/3/4 images reproducible

xwayland: libxshmfence is needed when dri3 is enabled

xwayland: Upgrade to 22.1.5

yocto-check-layer: Allow OE-Core to be tested


[ANNOUNCEMENT] Yocto Project 4.0.6 is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 4.0.6 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/poky-c4e08719a782fd4119eaf643907b80cebf57f88f.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/poky-c4e08719a782fd4119eaf643907b80cebf57f88f.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Lee Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-4.0.6 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/poky

Branch: kirkstone

Tag: yocto-4.0.6

Git Revision: c4e08719a782fd4119eaf643907b80cebf57f88f

Release Artefact: poky-c4e08719a782fd4119eaf643907b80cebf57f88f

sha: 2eb3b323dd2ccd25f9442bfbcbde82bc081fad5afd146a8e6dde439db24a99d4

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/poky-c4e08719a782fd4119eaf643907b80cebf57f88f.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/poky-c4e08719a782fd4119eaf643907b80cebf57f88f.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: kirkstone

Tag: yocto-4.0.6

Git Revision: 45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2

Release Artefact: oecore-45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2

sha: de8b443365927befe67cc443b60db57563ff0726377223f836a3f3971cf405ec

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/oecore-45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/oecore-45a8b4101b14453aa3020d3f2b8a76b4dc0ae3f2.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/meta-mingw

Branch: kirkstone

Tag: yocto-4.0.6

Git Revision: a90614a6498c3345704e9611f2842eb933dc51c1

Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1

sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/meta-gplv2

Branch: kirkstone

Tag: yocto-4.0.6

Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.0

Tag: yocto-4.0.6

Git Revision: 7e268c107bb0240d583d2c34e24a71e373382509

Release Artefact: bitbake-7e268c107bb0240d583d2c34e24a71e373382509

sha: c3e2899012358c95962c7a5c85cf98dc30c58eae0861c374124e96d9556bb901

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.6/bitbake-7e268c107bb0240d583d2c34e24a71e373382509.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.6/bitbake-7e268c107bb0240d583d2c34e24a71e373382509.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/yocto-docs

Branch: kirkstone

Tag: yocto-4.0.6

Git Revision: c10d65ef3bbdf4fe3abc03e3aef3d4ca8c2ad87f

 

 

- ---------------

Contributors

- ---------------

Alex Kiernan

Alexander Kanavin

Alexey Smirnov

Bartosz Golaszewski

Bernhard Rosenkränzer

Bhabu Bindu

Bruce Ashfield

Chee Yang Lee

Chen Qi

Christian Eggers

Claus Stovgaard

Diego Sueiro

Dmitry Baryshkov

Ed Tanous

Enrico Jörns

Etienne Cordonnier

Frank de Brabander

Harald Seiler

Hitendra Prajapati

Jan-Simon Moeller

Jeremy Puhlman

Joe Slater

John Edward Broadbent

Jose Quaresma

Joshua Watt

Kai Kang

Keiya Nobuta

Khem Raj

Konrad Weihmann

Leon Anavi

Liam Beguin

Marek Vasut

Mark Hatle

Martin Jansa

Michael Opdenacker

Mikko Rapeli

Narpat Mali

Nathan Rossi

Niko Mauno

Pavel Zhukov

Peter Kjellerstedt

Peter Marko

Polampalli, Archana

Qiu, Zheng

Ravula Adhitya Siddartha

Richard Purdie

Ross Burton

Sakib Sajal

Sean Anderson

Sergei Zhmylev

Steve Sakoman

Teoh Jay Shen

Thomas Perrot

Tim Orling

Vincent Davis Jr

Vivek Kumbhar

Vyacheslav Yurkov

Wang Mingyu

Xiangyu Chen

Zheng Qiu

ciarancourtney

wangmy

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

bash: Fix CVE-2022-3715

curl: Fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916

dbus: Fix CVE-2022-42010 CVE-2022-42011 CVE-2022-42012

dropbear: fix CVE-2021-36369

ffmpeg: Fix CVE-2022-3964 CVE-2022-3965

go: Fix CVE-2022-2880

grub2: Fix CVE-2022-2601 CVE-2022-3775 CVE-2022-28736

libarchive: Fix CVE-2022-36227

libpam: Fix CVE-2022-28321

libsndfile1: Fix CVE-2021-4156

lighttpd: Fix CVE-2022-41556

openssl: Fix CVE-2022-3358

pixman: Fix CVE-2022-44638

python3-mako: Fix CVE-2022-40023

python3: Fix CVE-2022-42919

qemu: Fix CVE-2022-3165

sysstat: Fix CVE-2022-39377

systemd: Fix CVE-2022-3821

tiff: Fix CVE-2022-2953 CVE-2022-3599 CVE-2022-3597 CVE-2022-3626 CVE-2022-3627 CVE-2022-3570 CVE-2022-3598 CVE-2022-3970

wayland: fix CVE-2021-3782

xserver-xorg: Fix CVE-2022-3550 CVE-2022-3551

 

 

- ---------------

Fixes

- ---------------

archiver: avoid using machine variable as it breaks multiconfig

babeltrace: upgrade to 1.5.11

bind: upgrade to 9.18.8

bitbake.conf: Drop export of SOURCE_DATE_EPOCH_FALLBACK

bitbake: gitsm: Fix regression in gitsm submodule path parsing

bitbake: runqueue: Fix race issues around hash equivalence and sstate reuse

bluez5: Point hciattach bcm43xx firmware search path to /lib/firmware

bluez5: add dbus to RDEPENDS

build-appliance-image: Update to kirkstone head revision

buildtools-tarball: export certificates to python and curl

cargo_common.bbclass: Fix typos

classes: make TOOLCHAIN more permissive for kernel

cmake-native: Fix host tool contamination (Bug: 14951)

common-tasks.rst: fix oeqa runtime test path

create-spdx.bbclass: remove unused SPDX_INCLUDE_PACKAGED

create-spdx: Remove ";name=..." for downloadLocation

create-spdx: default share_src for shared sources

cve-update-db-native: add timeout to urlopen() calls

dbus: upgrade to 1.14.4

dhcpcd: fix to work with systemd

expat: upgrade to 2.5.0

externalsrc.bbclass: Remove a trailing slash from ${B}

externalsrc.bbclass: fix git repo detection

externalsrc: git submodule--helper list unsupported

gcc-shared-source: Fix source date epoch handling

gcc-source: Drop gengtype manipulation

gcc-source: Ensure deploy_source_date_epoch sstate hash doesn't change

gcc-source: Fix gengtypes race

gdk-pixbuf: upgrade to 2.42.10

get_module_deps3.py: Check attribute '__file__'

glib-2.0: fix rare GFileInfo test case failure

glibc-locale: Do not INHIBIT_DEFAULT_DEPS

gnomebase.bbclass: return the whole version for tarball directory if it is a number

gnutls: Unified package names to lower-case

groff: submit patches upstream

gstreamer1.0-libav: fix errors with ffmpeg 5.x

gstreamer1.0: upgrade to 1.20.4

ifupdown: upgrade to 0.8.39

insane.bbclass: Allow hashlib version that only accepts on parameter

iso-codes: upgrade to 4.12.0

kea: submit patch upstream (fix-multilib-conflict.patch)

kern-tools: fix relative path processing

kern-tools: integrate ZFS speedup patch

kernel-yocto: improve fatal error messages of symbol_why.py

kernel.bbclass: Include randstruct seed assets in STAGING_KERNEL_BUILDDIR

kernel.bbclass: make KERNEL_DEBUG_TIMESTAMPS work at rebuild

kernel: Clear SYSROOT_DIRS instead of replacing sysroot_stage_all

libcap: upgrade to 2.66

libepoxy: convert to git

libepoxy: update to 1.5.10

libffi: submit patch upstream (0001-arm-sysv-reverted-clang-VFP-mitigation.patch )

libffi: upgrade to 3.4.4

libical: upgrade to 3.0.16

libksba: upgrade to 1.6.2

libuv: fixup SRC_URI

libxcrypt: upgrade to 4.4.30

lighttpd: upgrade to 1.4.67

linux-firmware: add new fw file to ${PN}-qcom-adreno-a530

linux-firmware: don't put the firmware into the sysroot

linux-firmware: package amdgpu firmware

linux-firmware: split rtl8761 firmware

linux-firmware: upgrade to 20221109

linux-yocto/5.10: update genericx86* machines to v5.10.149

linux-yocto/5.15: fix CONFIG_CRYPTO_CCM mismatch warnings

linux-yocto/5.15: update genericx86* machines to v5.15.72

linux-yocto/5.15: update to v5.15.78

ltp: backport clock_gettime04 fix from upstream

lttng-modules: upgrade to 2.13.7

lttng-tools: Upgrade to 2.13.8

lttng-tools: submit determinism.patch upstream

lttng-ust: upgrade to 2.13.5

meson: make wrapper options sub-command specific

meta-selftest/staticids: add render group for systemd

mirrors.bbclass: update CPAN_MIRROR

mirrors.bbclass: use shallow tarball for binutils-native

mobile-broadband-provider-info: upgrade 20220725 -> 20221107

mtd-utils: upgrade 2.1.4 -> 2.1.5

numactl: upgrade to 2.0.16

oe/packagemanager/rpm: don't leak file objects

oeqa/selftest/lic_checksum: Cleanup changes to emptytest include

oeqa/selftest/minidebuginfo: Create selftest for minidebuginfo

oeqa/selftest/tinfoil: Add test for separate config_data with recipe_parse_file()

openssl: Fix SSL_CERT_FILE to match ca-certs location

openssl: upgrade to 3.0.7

openssl: export necessary env vars in SDK

opkg-utils: use a git clone, not a dynamic snapshot

opkg: Set correct info_dir and status_file in opkg.conf

overlayfs: Allow not used mount points

ovmf: correct patches status

package: Fix handling of minidebuginfo with newer binutils

perf: Depend on native setuptools3

poky.conf: bump version for 4.0.6

psplash: add psplash-default in rdepends

psplash: consider the situation of psplash not exist for systemd

python3: advance to version 3.10.8

qemu-helper-native: Correctly pass program name as argv[0]

qemu-helper-native: Re-write bridge helper as C program

qemu-native: Add PACKAGECONFIG option for jack

qemu: add io_uring PACKAGECONFIG

quilt: backport a patch to address grep 3.8 failures

resolvconf: make it work

rm_work: exclude the SSTATETASKS from the rm_work tasks sinature

runqemu: Do not perturb script environment

runqemu: Fix gl-es argument from causing other arguments to be ignored

sanity: Drop data finalize call

sanity: check for GNU tar specifically

scripts/oe-check-sstate: cleanup

scripts/oe-check-sstate: force build to run for all targets, specifically populate_sysroot

scripts: convert-overrides: Allow command-line customizations

socat: upgrade to 1.7.4.4

SPDX and CVE documentation updates

sstate: Allow optimisation of do_deploy_archives task dependencies

sstatesig: emit more helpful error message when not finding sstate manifest

sstatesig: skip the rm_work task signature

sudo: upgrade to 1.9.12p1

systemd: Consider PACKAGECONFIG in RRECOMMENDS

systemd: add group render to udev package

tcl: correct patch status

tiff: refresh with devtool

tiff: add CVE tag to b258ed69a485a9cfb299d9f060eb2a46c54e5903.patch

u-boot: Remove duplicate inherit of cml1

uboot-sign: Fix using wrong KEY_REQ_ARGS

vala: install vapigen-wrapper into /usr/bin/crosscripts and stage only that

valgrind: remove most hidden tests for arm64

vim: Upgrade to 9.0.0947

vulkan-samples: add lfs=0 to SRC_URI to avoid git smudge errors in do_unpack

wic: honor the SOURCE_DATE_EPOCH in case of updated fstab

wic: make ext2/3/4 images reproducible

wic: swap partitions are not added to fstab

wpebackend-fdo: upgrade to 1.14.0

xserver-xorg: move some recommended dependencies in required

xwayland: upgrade to 22.1.5



[ANNOUNCEMENT] Milestone 1 for Yocto Project 4.2 (yocto-4.2_M1) Now Available

Lee Chee Yang
 

Hi,

We are pleased to announce the first milestone release for Yocto Project 4.2 (yocto-4.2_M1) is now available for download.

 

Download:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.2_M1

 

bitbake: 6709aedccbb2e7ddbb1b2e7e4893481a7b536436

meta-agl: e2c31ebda224bf6813ff861df9a51e8fc46944e5

meta-arm: 02b430d045b50d5e5cab9a52b786d1134ba17c19

meta-aws: da36bf8bc3f5a1cbb9396e8d28559c422cd96412

meta-intel: de59d48ad2ce88ebe331a8355e742fce7c3b428c

meta-mingw: 4a066511a944ec946efa7a4571029c992cf0ae00

meta-openembedded: 8c58f419c299fe3764482ebe4f366e25533ea23f

meta-virtualization: cb5dfda6f6d862a575f029ee8ded0bc3db6bc766

oecore: 96ff9baa8ead57504f40f362ed3a4aaa776d1b58

poky: 4d19594b8bdacde6d809d3f2a25cff7c5a42295e

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.2_M1/testreport.txt

 

Thank you.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


[ANNOUNCEMENT] Yocto Project 3.1.21 (dunfell-23.0.21) is Released

Lee Chee Yang
 

Hi

 

We are pleased to announce the Yocto Project 3.1.21 (dunfell-23.0.21) Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/poky-dunfell-23.0.21.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.21/poky-dunfell-23.0.21.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Lee Chee Yang  chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-3.1.21 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: dunfell

Tag: yocto-3.1.21

Git Revision: aa0073041806c9f417a33b0b7f747d2a86289eda

Release Artefact: poky-dunfell-23.0.21

sha: 2098fb04b9393e4a97f0662d6ff8795b11a49fdb61689183823179f5d07196a5

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/poky-dunfell-23.0.21.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.21/poky-dunfell-23.0.21.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: dunfell

Tag: yocto-3.1.21

Git Revision: 1ee082e979baaba871bbe1d91181bb04951faf3b

Release Artefact: oecore-dunfell-23.0.21

sha: 64e979cf53d17ffe7939ef9bc7387db1c1e47493acd00bff7e8a78d58f842eda

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/oecore-dunfell-23.0.21.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.21/oecore-dunfell-23.0.21.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: dunfell

Tag: yocto-3.1.21

Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7

Release Artefact: meta-mingw-dunfell-23.0.21

sha: a048087119afd3b14439b2ab279eb8275740532a2391108d2d15cef3c8441d0e

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/meta-mingw-dunfell-23.0.21.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.21/meta-mingw-dunfell-23.0.21.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: dunfell

Tag: yocto-3.1.21

Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac

Release Artefact: meta-gplv2-dunfell-23.0.21

sha: e339cfec23b68e8e7edf003017e65a17239e83ab598fd4d1e68c3c610d30f98f

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/meta-gplv2-dunfell-23.0.21.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.21/meta-gplv2-dunfell-23.0.21.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: dunfell

Tag: yocto-3.1.21

Git Revision: e3db9c2e9eded3c5cb6040714a6054b44f6b3880

Release Artefact: bitbake-dunfell-23.0.21

sha: a76a737ce98bc16e905875f8a643a8d8979dfa660adf7c943bbe4c7a7b093fd7

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.21/bitbake-dunfell-23.0.21.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.21/bitbake-dunfell-23.0.21.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: dunfell

Tag: yocto-3.1.21

Git Revision: 01d31151d5c4a87a466cb49b97eabf75cf47ed98

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

bluez: CVE-2022-3637

curl: Fix CVE-2022-32221

dhcp: Fix CVE-2022-2928 CVE-2022-2929

expat: Fix CVE-2022-43680

go: Fix CVE-2022-2879 CVE-2022-2880

libX11: Fix CVE-2022-3554

qemu: Fix CVE-2021-3750 CVE-2021-3638

 

 

- ---------------

Fixes

- ---------------

binutils: stable 2.34 branch updates

bitbake: tests/fetch: Allow handling of a file:// url within a submodule

bitbake: utils: Fix lockfile path length issues

bitbake: utils: Handle lockfile filenames that are too long for filesystems

bluez5: add dbus to RDEPENDS

build-appliance-image: Update to dunfell head revision

classes/kernel-fitimage: add ability to add additional signing options

coreutils: add openssl PACKAGECONFIG

cve-update-db-native: add timeout to urlopen() calls

dbus: upgrade to 1.12.24

dev-manual: fix reference to BitBake user manual

devtool: add HostKeyAlgorithms option to ssh and scp commands

documentation: update for 3.1.21

externalsrc.bbclass: fix git repo detection

externalsrc.bbclass: Remove a trailing slash from ${B}

externalsrc: git submodule--helper list unsupported

glibc : stable 2.31 branch updates.

linux-yocto/5.4: update to v5.4.219

openssl: upgrade to 1.1.1s

poky.conf: bump version for 3.1.21

python3: upgrade to 3.8.14

qemu: Add PACKAGECONFIG for rbd

qemu: Avoid accidental librdmacm linkage

qemu: Avoid accidental libvdeplug linkage

sanity: check for GNU tar specifically

selftest: skip virgl test on all Alma Linux

selftest: skip virgl test on ubuntu 22.04

tzdata: update to 2022d

uninative: Upgrade to 3.7 to work with glibc 2.36

vim: Upgrade to 9.0.0614

wic: swap partitions are not added to fstab



Yocto Project 4.1.1 is Released

Lee Chee Yang
 

Hi,

We are pleased to announce the Yocto Project 4.1.1 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Lee Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-4.1.1 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/poky

Branch: langdale

Tag: yocto-4.1.1

Git Revision: d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff

Release Artefact: poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff

sha: e92b694fbb74a26c7a875936dfeef4a13902f24b06127ee52f4d1c1e4b03ec24

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/poky-d3cda9a3e0837eb2ac5482f5f2bd8e55e874feff.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: langdale

Tag: yocto-4.1.1

Git Revision: 9237ffc4feee2dd6ff5bdd672072509ef9e82f6d

Release Artefact: oecore-9237ffc4feee2dd6ff5bdd672072509ef9e82f6d

sha: d73198aef576f0fca0d746f9d805b1762c19c31786bc3f7d7326dfb2ed6fc1be

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/oecore-9237ffc4feee2dd6ff5bdd672072509ef9e82f6d.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/oecore-9237ffc4feee2dd6ff5bdd672072509ef9e82f6d.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/meta-mingw

Branch: langdale

Tag: yocto-4.1.1

Git Revision: b0067202db8573df3d23d199f82987cebe1bee2c

Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c

sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.2

Tag: yocto-4.1.1

Git Revision: 138dd7883ee2c521900b29985b6d24a23d96563c

Release Artefact: bitbake-138dd7883ee2c521900b29985b6d24a23d96563c

sha: 5dc5aff4b4a801253c627cdaab6b1a0ceee2c531f1a6b166d85d1265a35d4be5

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1.1/bitbake-138dd7883ee2c521900b29985b6d24a23d96563c.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1.1/bitbake-138dd7883ee2c521900b29985b6d24a23d96563c.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/yocto-docs

Branch: yocto-4.1.1

Tag: yocto-4.1.1

Git Revision: 8e0841c3418caa227c66a60327db09dfbe72054a

 

 

- ---------------

Contributors

- ---------------

Adrian Freihofer

Alex Kiernan

Alexander Kanavin

Bartosz Golaszewski

Bernhard Rosenkränzer

Bruce Ashfield

Chen Qi

Christian Eggers

Claus Stovgaard

Ed Tanous

Etienne Cordonnier

Frank de Brabander

Hitendra Prajapati

Jan-Simon Moeller

Jeremy Puhlman

Johan Korsnes

Jon Mason

Jose Quaresma

Joshua Watt

Justin Bronder

Kai Kang

Keiya Nobuta

Khem Raj

Lee Chee Yang

Liam Beguin

Luca Boccassi

Mark Asselstine

Mark Hatle

Markus Volk

Martin Jansa

Michael Opdenacker

Ming Liu

Mingli Yu

Paul Eggleton

Peter Kjellerstedt

Qiu, Zheng

Quentin Schulz

Richard Purdie

Robert Joslyn

Ross Burton

Sean Anderson

Sergei Zhmylev

Steve Sakoman

Takayasu Ito

Teoh Jay Shen

Thomas Perrot

Tim Orling

Vincent Davis Jr

Vyacheslav Yurkov

ciarancourtney

wangmy

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

curl: Fix CVE-2022-32221 CVE-2022-35260 CVE-2022-42915 CVE-2022-42916

libx11: Fix CVE-2022-3554

lighttpd: Fix CVE-2022-41556

openssl: Fix CVE-2022-3358

pixman: Fix CVE-2022-44638

qemu: Fix CVE-2022-3165

sudo: Fix CVE-2022-43995

tiff: Fix CVE-2022-3599 CVE-2022-3597 CVE-2022-3626 CVE-2022-3627 CVE-2022-3570 CVE-2022-3598

xserver-xorg: Fix CVE-2022-3550 CVE-2022-3551

xserver-xorg: Ignore CVE-2022-3553

 

 

- ---------------

Fixes

- ---------------

Add 4.1 migration guide & release notes

bitbake: asyncrpc: serv: correct closed client socket detection

bitbake: bitbake-user-manual: details about variable flags starting with underscore

bitbake: bitbake: bitbake-layers: checkout layer(s) branch when clone exists

bitbake: bitbake: user-manual: inform about spaces in :remove

bitbake: doc: bitbake-user-manual: expand description of BB_PRESSURE_MAX variables

bitbake: fetch2/git: don't set core.fsyncobjectfiles=0

bitbake: tests/fetch: Allow handling of a file:// url within a submodule

bitbake: tests: bb.tests.fetch.URLHandle: add 2 new tests

bitbake: utils/ply: Update md5 to better report errors with hashlib

bluez5: add dbus to RDEPENDS

build-appliance-image: Update to langdale head revision

buildconf: compare abspath

buildtools-tarball: export certificates to python and curl

cmake-native: Fix host tool contamination

create-spdx.bbclass: remove unused SPDX_INCLUDE_PACKAGED

create-spdx: Remove ";name=..." for downloadLocation

cve-update-db-native: add timeout to urlopen() calls

dev-manual: common-tasks.rst: add reference to "do_clean" task

dev-manual: common-tasks.rst: add reference to "do_listtasks" task

docs: add support for langdale (4.1) release

dropbear: add pam to PACKAGECONFIG

externalsrc.bbclass: fix git repo detection

externalsrc.bbclass: Remove a trailing slash from ${B}

externalsrc: move back to classes

gcc: Allow -Wno-error=poison-system-directories to take effect

glib-2.0: fix rare GFileInfo test case failure

gnutls: Unified package names to lower-case

gnutls: upgrade 3.7.7 -> 3.7.8

grub: disable build on armv7ve/a with hardfp

gstreamer1.0-libav: fix errors with ffmpeg 5.x

ifupdown: upgrade 0.8.37 -> 0.8.39

insane.bbclass: Allow hashlib version that only accepts on parameter

install-buildtools: support buildtools-make-tarball and update to 4.1

kern-tools: fix relative path processing

kernel-fitimage: Use KERNEL_OUTPUT_DIR where appropriate

kernel-yocto: improve fatal error messages of symbol_why.py

kernel: Clear SYSROOT_DIRS instead of replacing sysroot_stage_all

libcap: upgrade 2.65 -> 2.66

libical: upgrade 3.0.14 -> 3.0.15

libksba: upgrade 1.6.0 -> 1.6.2

libsdl2: upgrade 2.24.0 -> 2.24.1

lighttpd: upgrade 1.4.66 -> 1.4.67

linux-firmware: package amdgpu firmware

linux-firmware: split rtl8761 firmware

linux-yocto/5.15: update to v5.15.72

linux-yocto/5.19: update to v5.19.14

linux-yocto: add efi entry for machine features

lttng-modules: upgrade 2.13.4 -> 2.13.5

lttng-ust: upgrade 2.13.4 -> 2.13.5

manuals: add reference to "do_configure" task

manuals: add reference to the "do_compile" task

manuals: add reference to the "do_install" task

manuals: add reference to the "do_kernel_configcheck" task

manuals: add reference to the "do_populate_sdk" task

manuals: add references to "do_package_write_*" tasks

manuals: add references to "do_populate_sysroot" task

manuals: add references to the "do_build" task

manuals: add references to the "do_bundle_initramfs" task

manuals: add references to the "do_cleanall" task

manuals: add references to the "do_deploy" task

manuals: add references to the "do_devshell" task

manuals: add references to the "do_fetch" task

manuals: add references to the "do_image" task

manuals: add references to the "do_kernel_configme" task

manuals: add references to the "do_package" task

manuals: add references to the "do_package_qa" task

manuals: add references to the "do_patch" task

manuals: add references to the "do_rootfs" task

manuals: add references to the "do_unpack" task

manuals: fix misc typos

manuals: improve initramfs details

manuals: updates for building on Windows (WSL 2)

mesa: only apply patch to fix ALWAYS_INLINE for native

mesa: update 22.2.0 -> 22.2.2

meson: make wrapper options sub-command specific

meson: upgrade 0.63.2 -> 0.63.3

migration guides: 3.4: remove spurious space in example

migration guides: add release notes for 4.0.4

migration-general: add section on using buildhistory

migration-guides/release-notes-4.1.rst: add more known issues

migration-guides/release-notes-4.1.rst: update Repositories / Downloads

migration-guides: add known issues for 4.1

migration-guides: add reference to the "do_shared_workdir" task

migration-guides: use contributor real name

migration-guides: use contributor real name

mirrors.bbclass: use shallow tarball for binutils-native

mtools: upgrade 4.0.40 -> 4.0.41

numactl: upgrade 2.0.15 -> 2.0.16

oe/packagemanager/rpm: don't leak file objects

openssl: export necessary env vars in SDK

openssl: Fix SSL_CERT_FILE to match ca-certs location

openssl: Upgrade 3.0.5 -> 3.0.7

opkg-utils: use a git clone, not a dynamic snapshot

overlayfs: Allow not used mount points

overview-manual: concepts.rst: add reference to "do_packagedata" task

overview-manual: concepts.rst: add reference to "do_populate_sdk_ext" task

overview-manual: concepts.rst: fix formating and add references

own-mirrors: add crate

pango: upgrade 1.50.9 -> 1.50.10

perf: Depend on native setuptools3

poky.conf: bump version for 4.1.1

poky.conf: remove Ubuntu 21.10

populate_sdk_base: ensure ptest-pkgs pulls in ptest-runner

psplash: add psplash-default in rdepends

qemu-native: Add PACKAGECONFIG option for jack

quilt: backport a patch to address grep 3.8 failures

ref-manual/faq.rst: update references to products built with OE / Yocto Project

ref-manual/variables.rst: clarify sentence

ref-manual: add a note to ssh-server-dropbear feature

ref-manual: add CVE_CHECK_SHOW_WARNINGS

ref-manual: add CVE_DB_UPDATE_INTERVAL

ref-manual: add DEV_PKG_DEPENDENCY

ref-manual: add DISABLE_STATIC

ref-manual: add FIT_PAD_ALG

ref-manual: add KERNEL_DEPLOY_DEPEND

ref-manual: add missing features

ref-manual: add MOUNT_BASE variable

ref-manual: add overlayfs class variables

ref-manual: add OVERLAYFS_ETC_EXPOSE_LOWER

ref-manual: add OVERLAYFS_QA_SKIP

ref-manual: add previous overlayfs-etc variables

ref-manual: add pypi class

ref-manual: add SDK_TOOLCHAIN_LANGS

ref-manual: add section for create-spdx class

ref-manual: add serial-autologin-root to IMAGE_FEATURES documentation

ref-manual: add UBOOT_MKIMAGE_KERNEL_TYPE

ref-manual: add WATCHDOG_TIMEOUT to variable glossary

ref-manual: add WIRELESS_DAEMON

ref-manual: classes.rst: add links to all references to a class

ref-manual: complementary package installation recommends

ref-manual: correct default for BUILDHISTORY_COMMIT

ref-manual: document new github-releases class

ref-manual: expand documentation on image-buildinfo class

ref-manual: faq.rst: reorganize into subsections, contents at top

ref-manual: remove reference to largefile in DISTRO_FEATURES

ref-manual: remove reference to testimage-auto class

ref-manual: system-requirements: Ubuntu 22.04 now supported

ref-manual: tasks.rst: add reference to the "do_image_complete" task

ref-manual: tasks.rst: add reference to the "do_kernel_checkout" task

ref-manual: tasks.rst: add reference to the "do_kernel_metadata" task

ref-manual: tasks.rst: add reference to the "do_validate_branches" task

ref-manual: tasks.rst: add references to the "do_cleansstate" task

ref-manual: update buildpaths QA check documentation

ref-manual: update pypi documentation for CVE_PRODUCT default in 4.1

ref-manual: variables.rst: add reference to "do_populate_lic" task

release-notes-4.1.rst remove bitbake-layers subcommand argument

runqemu: Do not perturb script environment

runqemu: Fix gl-es argument from causing other arguments to be ignored

rust-target-config: match riscv target names with what rust expects

rust: install rustfmt for riscv32 as well

sanity: check for GNU tar specifically

scripts/oe-check-sstate: cleanup

scripts/oe-check-sstate: force build to run for all targets, specifically populate_sysroot

sdk-manual: correct the bitbake target for a unified sysroot build

shadow: update 4.12.1 -> 4.12.3

systemd: add systemd-creds and systemd-cryptenroll to systemd-extra-utils

test-manual: fix typo in machine name

tiff: fix a typo for CVE-2022-2953.patch

u-boot: Add savedefconfig task

u-boot: Remove duplicate inherit of cml1

uboot-sign: Fix using wrong KEY_REQ_ARGS

Update documentation for classes split

vim: upgrade to 9.0.0820

vulkan-samples: add lfs=0 to SRC_URI to avoid git smudge errors in do_unpack

wic: honor the SOURCE_DATE_EPOCH in case of updated fstab

wic: swap partitions are not added to fstab

wpebackend-fdo: upgrade 1.12.1 -> 1.14.0

xserver-xorg: move some recommended dependencies in required

zlib: do out-of-tree builds

zlib: upgrade 1.2.12 -> 1.2.13

zlib: use .gz archive and set a PREMIRROR



[ANNOUNCEMENT] Yocto Project 4.0.5 is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 4.0.5 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-4.0.5 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: kirkstone

Tag: yocto-4.0.5

Git Revision: 2e79b199114b25d81bfaa029ccfb17676946d20d

Release Artefact: poky-2e79b199114b25d81bfaa029ccfb17676946d20d

sha: 7bcf3f901d4c5677fc95944ab096e9e306f4c758a658dde5befd16861ad2b8ea

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/poky-2e79b199114b25d81bfaa029ccfb17676946d20d.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: kirkstone

Tag: yocto-4.0.5

Git Revision: fbdf93f43ff4b876487e1f26752598ec8abcb46e

Release Artefact: oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e

sha: 2d9b5a8e9355b633bb57633cc8c2d319ba13fe4721f79204e61116b3faa6cbf1

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/oecore-fbdf93f43ff4b876487e1f26752598ec8abcb46e.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: kirkstone

Tag: yocto-4.0.5

Git Revision: a90614a6498c3345704e9611f2842eb933dc51c1

Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1

sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: kirkstone

Tag: yocto-4.0.5

Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.0

Tag: yocto-4.0.5

Git Revision: c90d57497b9bcd237c3ae810ee8edb5b0d2d575a

Release Artefact: bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a

sha: 5698d548ce179036e46a24f80b213124c8825a4f443fa1d6be7ab0f70b01a9ff

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.5/bitbake-c90d57497b9bcd237c3ae810ee8edb5b0d2d575a.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: kirkstone

Tag: yocto-4.0.5

Git Revision: 8c2f9f54e29781f4ee72e81eeaa12ceaa82dc2d3

 

 

- ---------------

Contributors

- ---------------

Adrian Freihofer

Alexander Kanavin

Alexandre Belloni

Bhabu Bindu

Bruce Ashfield

Chen Qi

Daniel McGregor

Denys Dmytriyenko

Dmitry Baryshkov

Florin Diaconescu

He Zhe

Joshua Watt

Khem Raj

Martin Jansa

Michael Halstead

Michael Opdenacker

Mikko Rapeli

Mingli Yu

Neil Horman

Pavel Zhukov

Richard Purdie

Robert Joslyn

Ross Burton

Ruiqiang Hao

Samuli Piippo

Steve Sakoman

Sundeep KOKKONDA

Teoh Jay Shen

Tim Orling

Virendra Thakur

Vyacheslav Yurkov

Xiangyu Chen

Yash Shinde

pgowda

wangmy

 

 

- ---------------

Known Issues

- ---------------

There are recent CVEs in key components such as openssl. They are not included in this release as it was built before the issues were known and fixes were available but these are now available on the kirkstone branch.

 

 

- ---------------

Security Fixes

- ---------------

qemu: fix CVE-2021-3611 CVE-2021-3750 CVE-2022-2962

binutils : Fix CVE-2022-38126 CVE-2022-38127 CVE-2022-38128

tiff: Fix CVE-2022-2867 CVE-2022-2868 CVE-2022-2869

inetutils: fix CVE-2022-39028

go: fix CVE-2022-27664

 

 

- ---------------

Fixes

- ---------------

Revert "gcc-cross-canadian: Add symlink to real-ld alongside other symlinks"

bind: upgrade to 9.18.7

binutils: stable 2.38 branch updates (dc2474e7)

bitbake: Fix npm to use https rather than http

bitbake: asyncrpc/client: Fix unix domain socket chdir race issues

bitbake: bitbake: Add copyright headers where missing

bitbake: gitsm: Error out if submodule refers to parent repo

bitbake: runqueue: Drop deadlock breaking force fail

bitbake: runqueue: Ensure deferred tasks are sorted by multiconfig

bitbake: runqueue: Improve deadlock warning messages

bitbake: siggen: Fix insufficent entropy in sigtask file names

bitbake: tests/fetch: Allow handling of a file:// url within a submodule

build-appliance-image: Update to kirkstone head revision (4a88ada)

busybox: add devmem 128-bit support

classes: files: Extend overlayfs-etc class

coreutils: add openssl PACKAGECONFIG

create-pull-request: don't switch the git remote protocol to git://

dev-manual: fix reference to BitBake user manual

expat: upgrade 2.4.8 -> 2.4.9

files: overlayfs-etc: refactor preinit template

gcc-cross-canadian: add default plugin linker

gcc: add arm-v9 support

git: upgrade 2.35.4 -> 2.35.5

glibc-locale: explicitly remove empty dirs in ${libdir}

glibc-tests: use += instead of :append

glibc: stable 2.35 branch updates.(8d125a1f)

go-native: switch from SRC_URI:append to SRC_URI +=

image_types_wic.bbclass: fix cross binutils dependency

kern-tools: allow 'y' or 'm' to avoid config audit warnings

kern-tools: fix queue processing in relative TOPDIR configurations

kernel-yocto: allow patch author date to be commit date

libpng: upgrade to 1.6.38

linux-firmware: package new Qualcomm firmware

linux-firmware: upgrade 20220708 -> 20220913

linux-libc-headers: switch from SRC_URI:append to SRC_URI +=

linux-yocto-dev: add qemuarm64

linux-yocto/5.10: update to v5.10.149

linux-yocto/5.15: cfg: fix ACPI warnings for -tiny

linux-yocto/5.15: update to v5.15.68

local.conf.sample: correct the location of public hashserv

ltp: Fix pread02 case trigger the glibc overflow detection

lttng-modules: Fix crash on powerpc64

lttng-tools: Disable on qemuriscv32

lttng-tools: Disable on riscv32

migration-guides: add 4.0.4 release notes

oeqa/runtime/dnf: fix typo

own-mirrors: add crate

perf: Fix for recent kernel upgrades

poky.conf: bump version for 4.0.5

poky.yaml.in: update version requirements

python3-rfc3986-validator: switch from SRC_URI:append to SRC_URI +=

python3: upgrade 3.10.4 -> 3.10.7

qemu: Backport patches from upstream to support float128 on qemu-ppc64

rpm: Remove -Wimplicit-function-declaration warnings

rpm: update to 4.17.1

rsync: update to 3.2.5

stress-cpu: disable float128 math on powerpc64 to avoid SIGILL

tune-neoversen2: support tune-neoversen2 base on armv9a

tzdata: update to 2022d

u-boot: switch from append to += in SRC_URI

uninative: Upgrade to 3.7 to work with glibc 2.36

vim: Upgrade to 9.0.0598

webkitgtk: Update to 2.36.7


[ANNOUNCEMENT] Yocto Project 4.1 is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 4.1 Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1/poky-5200799866b92259e855051112520006e1aaaac0.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1/poky-5200799866b92259e855051112520006e1aaaac0.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


Release notes for 4.1 (langdale)

- ---------------------------------

 

 

New Features / Enhancements in 4.1

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

- - Linux kernel 5.19, glibc 2.36 and ~260 other recipe upgrades

 

- - `make` 4.0 is now the minimum make version required on the build host.

  For host distros that do not provide it, this is included as part of the

  `buildtools-tarball`, and additionally a new `buildtools-make-tarball`

  has been introduced to provide this in particular for host distros with

  a broken make 4.x version. For more details see

  `ref-manual/system-requirements:required git, tar, python, make and gcc versions`.

 

- - New layer setup tooling:

 

  - New `scripts/oe-setup-layers` standalone script to restore the layer

    configuration from a json file

  - New `bitbake-layers create-layers-setup` command to save the

    layer configuration to a json file

  - New `bitbake-layers save-build-conf` command to save the active build

    configuration as a template into a layer

 

- - Rust-related enhancements:

 

  - Support for building rust for the target

  - Significant SDK toolchain build optimisation

  - Support for building native components in the SDK

  - Support `crate://` fetcher with `externalsrc`

 

- - New core recipes:

 

  - `buildtools-make-tarball`

  - `icon-naming-utils` (previously removed)

  - `musl-locales`

  - `python3-editables` (originally in meta-python)

  - `python3-hatch-vcs`

  - `python3-hatchling` (originally in meta-oe)

  - `python3-lxml` (originally in meta-python)

  - `python3-pathspec` (originally in meta-python)

  - `python3-picobuild`

  - `sato-icon-theme` (previously removed)

 

- - CVE checking enhancements:

 

  - New `CVE_DB_UPDATE_INTERVAL` variable to allow specifying the CVE database minimum update interval (and default to once per day)

  - Added JSON format to summary output

  - Added support for Ignored CVEs

  - Enable recursive CVE checking also for `do_populate_sdk`

  - New `CVE_CHECK_SHOW_WARNINGS` variable to disable unpatched CVE warning messages

  - The `pypi` class now defaults `CVE_PRODUCT` from `PYPI_PACKAGE`

  - Added current kernel CVEs to ignore list since we stay as close to the kernel stable releases as we can

  - Optimisations to avoid dependencies on fetching

 

- - Complementary package installation (as used in SDKs and images) no longer installs recommended packages, in order to avoid conflicts

- - Dependency of -dev package on main package is now an `RRECOMMENDS` and can be easily set via new `DEV_PKG_DEPENDENCY` variable

 

- - Support for CPU, I/O and memory pressure regulation in BitBake

- - Pressure data gathering in `buildstats` and rendering in `pybootchartgui`

 

- - New Picobuild system for lightweight Python PEP-517 build support in the `python_pep517` class

 

- - Many classes are now split into global and recipe contexts for better

  validation. For more information, see

  `Classes now split by usage context`.

 

- -  Architecture-specific enhancements:

 

   - arch-armv8-4a.inc: add tune include for armv8.4a

   - tune-neoversen2: support tune-neoversen2 base on armv9a

   - riscv: Add tunes for rv64 without compressed instructions

   - gnu-efi: enable for riscv64

   - shadow-securetty: allow ttyS4 for amd-snowyowl-64

 

- -  Kernel-related enhancements:

 

   - linux-yocto/5.15: cfg/xen: Move x86 configs to separate file

   - linux-yocto/5.15: Enabled MDIO bus config

   - linux-yocto: Enable mdio for qemu

   - linux-yocto/5.15: base: enable kernel crypto userspace API

   - kern-tools: allow 'y' or 'm' to avoid config audit warnings

   - kernel-yocto.bbclass: say what SRC_URI entry is being dropped

   - kernel.bbclass: Do not overwrite recipe's custom postinst

   - kmod: Enable xz support by default

   - Run depmod(wrapper) against each compiled kernel when multiple kernels are enabled

   - linux-yocto-tiny: enable qemuarmv5/qemuarm64

 

- -  wic Image Creator enhancements:

 

   - Added dependencies to support erofs

   - Added `fspassno` parameter to partition to allow specifying the value of the last column (`fs_passno`) in `/etc/fstab`.

   - bootimg-efi: added support for loading devicetree files

   - Added `none` fstype for custom image (for use in conjunction with `rawcopy`)

 

- -  SDK-related enhancements:

 

   - `Support for using the regular build system as an SDK`

   - `image-buildinfo` class now also writes build information to SDKs

   - New `SDK_TOOLCHAIN_LANGS` variable to control support of rust / go in SDK

  - rust-llvm: enabled nativesdk variant

   - python3-pluggy: enabled for native/nativesdk

 

- -  QEMU/runqemu enhancements:

 

   - qemux86-64: Allow higher tunes

   - runqemu: display host uptime when starting

   - runqemu: add `QB_KERNEL_CMDLINE` that can be set to "none" to avoid overriding kernel command line specified in dtb

 

- -  Image-related enhancements:

 

   - New variable `UBOOT_MKIMAGE_KERNEL_TYPE`

   - New variable `FIT_PAD_ALG` to control FIT image padding algorithm

   - New `KERNEL_DEPLOY_DEPEND` variable to allow disabling image dependency on deploying the kernel

   - image_types: isolate the write of UBI configuration to a `write_ubi_config` function that can be easily overridden

 

- - openssh: add support for config snippet includes to ssh and sshd

- - `create-spdx`: Add `SPDX_PRETTY` option

- - wpa-supplicant: build static library if not disabled via `DISABLE_STATIC`

- - wpa-supplicant: package dynamic modules

- - openssl: extract legacy provider module to a separate package

- - linux-firmware: split out ath3k firmware

- - linux-firmware: add support for building snapshots

- - eudev: create static-nodes in init script

- - udev-extraconf: new `MOUNT_BASE` variable allows configuring automount base directory

- - udev-extraconf/mount.sh: use partition labels in mountpoint paths

- - systemd: Set RebootWatchdogSec to 60s by default

- - systemd: systemd-systemctl: Support instance conf files during enable

- - weston.init: enable `xwayland` in weston.ini if `x11` is in `DISTRO_FEATURES`

- - New `npm_registry` Python module to enable caching with nodejs 16+

- - `npm`: replaced `npm pack` call with `tar czf` for nodejs 16+ compatibility and improved `do_configure` performance

- - Enabled `bin_package` class to work properly in the native case

- - Enabled `buildpaths` QA check as a warning by default

- - New `OVERLAYFS_ETC_EXPOSE_LOWER` to provide read-only access to the original `/etc` content with `overlayfs-etc`

- - New `OVERLAYFS_QA_SKIP` variable to allow skipping check on `overlayfs` mounts

- - New `PACKAGECONFIG` options for individual recipes:

 

   - apr: xsi-strerror

   - btrfs-tools: lzo

   - connman: iwd

   - coreutils: openssl

   - dropbear: enable-x11-forwarding

   - eudev: blkid, kmod, rule-generator

   - eudev: manpages, selinux

   - flac: avx, ogg

   - gnutls: fips

   - gstreamer1.0-plugins-bad: avtp

   - libsdl2: libusb

   - llvm: optviewer

   - mesa: vulkan, vulkan-beta, zink

   - perf: bfd

   - piglit: glx, opencl

   - python3: editline

   - qemu: bpf, brlapi, capstone, rdma, slirp, uring, vde

   - rpm: readline

   - ruby: capstone

   - systemd: no-dns-fallback, sysext

   - tiff: jbig

 

- - ptest enhancements in `curl`, `json-c`, `libgcrypt`, `libgpg-error`, `libxml2`

- - ptest compile/install functions now use `PARALLEL_MAKE` and `PARALLEL_MAKEINST` in ptest for significant speedup

- - New `TC_CXX_RUNTIME` variable to enable other layers to more easily control C++ runtime

- - Set `BB_DEFAULT_UMASK` using ??= to make it easier to override

- - Set `TCLIBC` and `TCMODE` using ??= to make them easier to override

- - squashfs-tools: build with lzo support by default

- - insane.bbclass: make `do_qa_staging` check shebang length for native scripts in all `SYSROOT_DIRS`

- - utils: Add `create_cmdline_shebang_wrapper` function to allow recipes to easily create a wrapper to fix long shebang lines

- - meson: provide relocation script and native/cross wrappers also for meson-native

- - meson.bbclass: add cython binary to cross/native toolchain config

- - New `musl-locales` recipe to provide a limited set of locale data for musl based systems

- - gobject-introspection: use `OBJDUMP` environment variable so that objdump tool can be picked up from the environment

- - The Python `zoneinfo` module is now split out to its own `python3-zoneinfo` package.

- - busybox: added devmem 128-bit support

- - vim: split xxd out into its own package

- - New `github-releases` class to consolidate version checks for github-based packages

- - `devtool reset` now preserves `workspace/sources` source trees in `workspace/attic/sources/` instead of leaving them in-place

- - scripts/patchreview: Add commit to stored json data

- - scripts/patchreview: Make json output human parsable

- - `wpa-supplicant` recipe now uses the upstream `defconfig` modified based upon `PACKAGECONFIG` instead of a stale `defconfig` file

- - bitbake: build: prefix the tasks with a timestamp in the log.task_order

- - bitbake: fetch2/osc: Add support to query latest revision

- - bitbake: utils: Pass lock argument in fileslocked

- - bitbake: utils: Add enable_loopback_networking()

 

 

Known Issues in 4.1

~~~~~~~~~~~~~~~~~~

 

- - The change to `migration-4.1-complementary-deps` means that images

  built with the `ptest-pkgs` `IMAGE_FEATURES` don’t automatically

  install `ptest-runner`, as that package is a recommendation of the

  individual `-ptest` packages.  This will be resolved in the next point

  release, and can be worked around by explicitly installing `ptest-runner`

  into the image.  Filed as https://bugzilla.yoctoproject.org/show_bug.cgi?id=14928 .

 

- - There is a known issue with eSDKs where sstate objects may be missing,

  resulting in packages being unavailable to install in the sysroot. This is due

  to image generation optimisations having unintended consequences in eSDK

  generation. This will be resolved in the next point release.  Filed as

  https://bugzilla.yoctoproject.org/show_bug.cgi?id=14626 , which also details the fix.

 

- - The change to `migration-4.1-classes-split` inadvertently moved the

  `externalsrc` class to `meta/classes-recipe`,

  when it is not recipe-specific and can also be used in a global context.  The

  class will be moved back to `meta/classes` in the next point release.  Filed

  as https://bugzilla.yoctoproject.org/show_bug.cgi?id=14940 .

 

 

Recipe License changes in 4.1

~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

The following corrections have been made to the LICENSE values set by recipes:

 

- - alsa-state: add GPL-2.0-or-later because of alsa-state-init file

- - git: add GPL-2.0-or-later & BSD-3-Clause & MIT & BSL-1.0 & LGPL-2.1-or-later due to embedded code

- - libgcrypt: dropped GPLv3 license after upstream changes

- - linux-firmware: correct license for ar3k firmware (specific "ar3k" license)

 

 

 

Security Fixes in 4.1

~~~~~~~~~~~~~~~~~~~~

 

- - bind: CVE-2022-1183, CVE-2022-2795, CVE-2022-2881, CVE-2022-2906, CVE-2022-3080, CVE-2022-38178

- - binutils: CVE-2019-1010204, CVE-2022-38126, CVE-2022-38127, CVE-2022-38128, CVE-2022-38533

- - busybox: CVE-2022-30065

- - connman: CVE-2022-32292, CVE-2022-32293

- - cups: CVE-2022-26691

- - e2fsprogs: CVE-2022-1304

- - expat: CVE-2022-40674

- - freetype: CVE-2022-27404

- - glibc: CVE-2022-39046

- - gnupg: CVE-2022-34903

- - grub2: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735

- - inetutils: CVE-2022-39028

- - libtirpc: CVE-2021-46828

- - libxml2: CVE-2016-3709 (ignored)

- - libxslt: CVE-2022-29824 (not applicable)

- - linux-yocto/5.15: CVE-2022-28796

- - logrotate: CVE-2022-1348

- - lua: CVE-2022-33099

- - nasm: CVE-2020-18974 (ignored)

- - ncurses: CVE-2022-29458`

- - openssl: CVE-2022-1292, CVE-2022-1343, CVE-2022-1434, CVE-2022-1473, CVE-2022-2068, CVE-2022-2274, CVE-2022-2097

- - python3: CVE-2015-20107 (ignored)`

- - qemu: CVE-2021-20255 (ignored), CVE-2019-12067 (ignored), CVE-2021-3507, CVE-2022-0216, CVE-2022-2962, CVE-2022-35414

- - rpm: CVE-2021-35937, CVE-2021-35938, CVE-2021-35939`

- - rsync: CVE-2022-29154`

- - subversion: CVE-2021-28544, CVE-2022-24070`

- - tiff: CVE-2022-1210 (not applicable), CVE-2022-1622, CVE-2022-1623 (invalid), CVE-2022-2056, CVE-2022-2057, CVE-2022-2058, CVE-2022-2953, CVE-2022-34526

- - unzip: CVE-2022-0529, CVE-2022-0530`

- - vim: CVE-2022-1381, CVE-2022-1420, CVE-2022-1621, CVE-2022-1629, CVE-2022-1674, CVE-2022-1733, CVE-2022-1735, CVE-2022-1769, CVE-2022-1771, CVE-2022-1785, CVE-2022-1796, CVE-2022-1927, CVE-2022-1942, CVE-2022-2257, CVE-2022-2264, CVE-2022-2284, CVE-2022-2285, CVE-2022-2286, CVE-2022-2287, CVE-2022-2816, CVE-2022-2817, CVE-2022-2819, CVE-2022-2845, CVE-2022-2849, CVE-2022-2862, CVE-2022-2874, CVE-2022-2889, CVE-2022-2980, CVE-2022-2946, CVE-2022-2982, CVE-2022-3099, CVE-2022-3134, CVE-2022-3234, CVE-2022-3278

- - zlib: CVE-2022-37434

 

 

 

 

 

Recipe Upgrades in 4.1

~~~~~~~~~~~~~~~~~~~~~

 

- - acpica 20211217 -> 20220331

- - adwaita-icon-theme 41.0 -> 42.0

- - alsa-lib 1.2.6.1 -> 1.2.7.2

- - alsa-plugins 1.2.6 -> 1.2.7.1

- - alsa-ucm-conf 1.2.6.3 -> 1.2.7.2

- - alsa-utils 1.2.6 -> 1.2.7

- - asciidoc 10.1.4 -> 10.2.0

- - at-spi2-core 2.42.0 -> 2.44.1

- - autoconf-archive 2022.02.11 -> 2022.09.03

- - base-passwd 3.5.29 -> 3.5.52

- - bind 9.18.5 -> 9.18.7

- - binutils 2.38 -> 2.39

- - boost 1.78.0 -> 1.80.0

- - boost-build-native 4.4.1 -> 1.80.0

- - btrfs-tools 5.16.2 -> 5.19.1

- - cargo 1.59.0 -> 1.63.0

- - ccache 4.6 -> 4.6.3

- - cmake 3.22.3 -> 3.24.0

- - cmake-native 3.22.3 -> 3.24.0

- - coreutils 9.0 -> 9.1

- - createrepo-c 0.19.0 -> 0.20.1

- - cross-localedef-native 2.35 -> 2.36

- - curl 7.82.0 -> 7.85.0

- - diffoscope 208 -> 221

- - dmidecode 3.3 -> 3.4

- - dnf 4.11.1 -> 4.14.0

- - dos2unix 7.4.2 -> 7.4.3

- - dpkg 1.21.4 -> 1.21.9

- - dropbear 2020.81 -> 2022.82

- - efibootmgr 17 -> 18

- - elfutils 0.186 -> 0.187

- - ell 0.50 -> 0.53

- - enchant2 2.3.2 -> 2.3.3

- - erofs-utils 1.4 -> 1.5

- - ethtool 5.16 -> 5.19

- - eudev 3.2.10 -> 3.2.11

- - ffmpeg 5.0.1 -> 5.1.1

- - file 5.41 -> 5.43

- - flac 1.3.4 -> 1.4.0

- - fontconfig 2.13.1 -> 2.14.0

- - freetype 2.11.1 -> 2.12.1

- - gcc 11.3.0 -> 12.2.0

- - gcompat 1.0.0+1.1+gitX (4d6a5156a6eb…) -> 1.0.0+1.1+gitX (c6921a1aa454…)

- - gdb 11.2 -> 12.1

- - ghostscript 9.55.0 -> 9.56.1

- - git 2.35.4 -> 2.37.3

- - glibc 2.35 -> 2.36

- - glslang 1.3.204.1 -> 1.3.216.0

- - gnu-config 20211108+gitX -> 20220525+gitX

- - gnu-efi 3.0.14 -> 3.0.15

- - gnutls 3.7.4 -> 3.7.7

- - go 1.17.13 -> 1.19

- - go-helloworld 0.1 (787a929d5a0d…) -> 0.1 (2e68773dfca0…)

- - gpgme 1.17.1 -> 1.18.0

- - gptfdisk 1.0.8 -> 1.0.9

- - harfbuzz 4.0.1 -> 5.1.0

- - hdparm 9.63 -> 9.64

- - help2man 1.49.1 -> 1.49.2

- - hwlatdetect 2.3 -> 2.4

- - icu 70.1 -> 71.1

- - inetutils 2.2 -> 2.3

- - init-system-helpers 1.62 -> 1.64

- - iproute2 5.17.0 -> 5.19.0

- - iptables 1.8.7 -> 1.8.8

- - iw 5.16 -> 5.19

- - json-c 0.15 -> 0.16

- - kbd 2.4.0 -> 2.5.1

- - kea 2.0.2 -> 2.2.0

- - kexec-tools 2.0.23 -> 2.0.25

- - kmod 29 -> 30

- - kmscube git (9f63f359fab1…) -> git (3bf6ee1a0233…)

- - less 600 -> 608

- - libaio 0.3.112 -> 0.3.113

- - libbsd 0.11.5 -> 0.11.6

- - libcap-ng 0.8.2 -> 0.8.3

- - libcap-ng-python 0.8.2 -> 0.8.3

- - libcgroup 2.0.2 -> 3.0.0

- - libcomps 0.1.18 -> 0.1.19

- - libdnf 0.66.0 -> 0.69.0

- - libdrm 2.4.110 -> 2.4.113

- - libevdev 1.12.1 -> 1.13.0

- - libfontenc 1.1.4 -> 1.1.6

- - libgcc 11.3.0 -> 12.2.0

- - libgcc-initial 11.3.0 -> 12.2.0

- - libgcrypt 1.9.4 -> 1.10.1

- - libgfortran 11.3.0 -> 12.2.0

- - libgit2 1.4.3 -> 1.5.0

- - libgpg-error 1.44 -> 1.45

- - libhandy 1.5.0 -> 1.6.3

- - libidn2 2.3.2 -> 2.3.3

- - libjitterentropy 3.4.0 -> 3.4.1

- - libmnl 1.0.4 -> 1.0.5

- - libnl 3.5.0 -> 3.7.0

- - libnotify 0.7.9 -> 0.8.1

- - libpipeline 1.5.5 -> 1.5.6

- - libproxy 0.4.17 -> 0.4.18

- - librepo 1.14.3 -> 1.14.5

- - librsvg 2.52.7 -> 2.54.5

- - libsdl2 2.0.20 -> 2.24.0

- - libseccomp 2.5.3 -> 2.5.4

- - libsndfile1 1.0.31 -> 1.1.0

- - libstd-rs 1.59.0 -> 1.63.0

- - libtirpc 1.3.2 -> 1.3.3

- - libubootenv 0.3.2 -> 0.3.3

- - libva 2.14.0 -> 2.15.0

- - libva-utils 2.14.0 -> 2.15.0

- - libx11 1.7.3.1 -> 1.8.1

- - libxau 1.0.9 -> 1.0.10

- - libxcb 1.14 -> 1.15

- - libxcursor 1.2.0 -> 1.2.1

- - libxcvt 0.1.1 -> 0.1.2

- - libxfont2 2.0.5 -> 2.0.6

- - libxvmc 1.0.12 -> 1.0.13

- - linux-libc-headers 5.16 -> 5.19

- - linux-yocto 5.10.143+gitX, 5.15.68+gitX -> 5.15.68+gitX, 5.19.9+gitX

- - linux-yocto-dev 5.18++gitX -> 5.19++gitX

- - linux-yocto-rt 5.10.143+gitX, 5.15.68+gitX -> 5.15.68+gitX, 5.19.9+gitX

- - linux-yocto-tiny 5.10.143+gitX, 5.15.68+gitX -> 5.15.68+gitX, 5.19.9+gitX

- - llvm 13.0.1 -> 14.0.6

- - lsof 4.94.0 -> 4.95.0

- - ltp 20220121 -> 20220527

- - lttng-tools 2.13.4 -> 2.13.8

- - lttng-ust 2.13.3 -> 2.13.4

- - mc 4.8.27 -> 4.8.28

- - mesa 22.0.3 -> 22.2.0

- - mesa-demos 8.4.0 -> 8.5.0

- - mesa-gl 22.0.3 -> 22.2.0

- - meson 0.61.3 -> 0.63.2

- - mmc-utils 0.1+gitX (b7e4d5a6ae99…) -> 0.1+gitX (d7b343fd2628…)

- - mpg123 1.29.3 -> 1.30.2

- - msmtp 1.8.20 -> 1.8.22

- - mtools 4.0.38 -> 4.0.40

- - musl 1.2.3+gitX (7a43f6fea908…) -> 1.2.3+gitX (37e18b7bf307…)

- - musl-obstack 1.1 -> 1.2

- - ncurses 6.3+20220423 (a0bc708bc695…) -> 6.3+20220423 (20db1fb41ec9…)

- - neard 0.16 -> 0.18

- - nettle 3.7.3 -> 3.8.1

- - nfs-utils 2.6.1 -> 2.6.2

- - nghttp2 1.47.0 -> 1.49.0

- - ninja 1.10.2 -> 1.11.1

- - numactl 2.0.14 -> 2.0.15

- - ofono 1.34 -> 2.0

- - opensbi 1.0 -> 1.1

- - openssh 8.9p1 -> 9.0p1

- - opkg 0.5.0 -> 0.6.0

- - ovmf edk2-stable202202 -> edk2-stable202205

- - pango 1.50.4 -> 1.50.9

- - parted 3.4 -> 3.5

- - patchelf 0.14.5 -> 0.15.0

- - pciutils 3.7.0 -> 3.8.0

- - perl 5.34.1 -> 5.36.0

- - perlcross 1.3.7 -> 1.4

- - piglit 1.0+gitrX (2f80c7cc9c02…) -> 1.0+gitrX (265896c86f90…)

- - pkgconf 1.8.0 -> 1.9.3

- - psmisc 23.4 -> 23.5

- - pulseaudio 15.0 -> 16.1

- - puzzles 0.0+gitX (c43a34fbfe43…) -> 0.0+gitX (8399cff6a3b9…)

- - python3 3.10.4 -> 3.10.6

- - python3-atomicwrites 1.4.0 -> 1.4.1

- - python3-attrs 21.4.0 -> 22.1.0

- - python3-babel 2.9.1 -> 2.10.3

- - python3-bcrypt 3.2.0 -> 3.2.2

- - python3-certifi 2021.10.8 -> 2022.9.14

- - python3-cffi 1.15.0 -> 1.15.1

- - python3-chardet 4.0.0 -> 5.0.0

- - python3-cryptography 36.0.2 -> 37.0.4

- - python3-cryptography-vectors 36.0.2 -> 37.0.4

- - python3-cython 0.29.28 -> 0.29.32

- - python3-dbusmock 0.27.3 -> 0.28.4

- - python3-docutils 0.18.1 -> 0.19

- - python3-dtschema 2022.1 -> 2022.8.3

- - python3-hypothesis 6.39.5 -> 6.54.5

- - python3-idna 3.3 -> 3.4

- - python3-imagesize 1.3.0 -> 1.4.1

- - python3-importlib-metadata 4.11.3 -> 4.12.0

- - python3-jinja2 3.1.1 -> 3.1.2

- - python3-jsonpointer 2.2 -> 2.3

- - python3-jsonschema 4.4.0 -> 4.9.1

- - python3-magic 0.4.25 -> 0.4.27

- - python3-mako 1.1.6 -> 1.2.2

- - python3-markdown 3.3.6 -> 3.4.1

- - python3-more-itertools 8.12.0 -> 8.14.0

- - python3-numpy 1.22.3 -> 1.23.3

- - python3-pbr 5.8.1 -> 5.10.0

- - python3-pip 22.0.3 -> 22.2.2

- - python3-psutil 5.9.0 -> 5.9.2

- - python3-pycryptodome 3.14.1 -> 3.15.0

- - python3-pycryptodomex 3.14.1 -> 3.15.0

- - python3-pyelftools 0.28 -> 0.29

- - python3-pygments 2.11.2 -> 2.13.0

- - python3-pygobject 3.42.0 -> 3.42.2

- - python3-pyparsing 3.0.7 -> 3.0.9

- - python3-pytest 7.1.1 -> 7.1.3

- - python3-pytest-subtests 0.7.0 -> 0.8.0

- - python3-pytz 2022.1 -> 2022.2.1

- - python3-requests 2.27.1 -> 2.28.1

- - python3-scons 4.3.0 -> 4.4.0

- - python3-semantic-version 2.9.0 -> 2.10.0

- - python3-setuptools 59.5.0 -> 65.0.2

- - python3-setuptools-scm 6.4.2 -> 7.0.5

- - python3-sphinx 4.4.0 -> 5.1.1

- - python3-sphinx-rtd-theme 0.5.0 -> 1.0.0

- - python3-typing-extensions 3.10.0.0 -> 4.3.0

- - python3-urllib3 1.26.9 -> 1.26.12

- - python3-webcolors 1.11.1 -> 1.12

- - python3-zipp 3.7.0 -> 3.8.1

- - qemu 6.2.0 -> 7.1.0

- - repo 2.22 -> 2.29.2

- - rpm 4.17.0 -> 4.18.0

- - rsync 3.2.3 -> 3.2.5

- - rt-tests 2.3 -> 2.4

- - rust 1.59.0 -> 1.63.0

- - rust-llvm 1.59.0 -> 1.63.0

- - sbc 1.5 -> 2.0

- - seatd 0.6.4 -> 0.7.0

- - shaderc 2022.1 -> 2022.2

- - shadow 4.11.1 -> 4.12.1

- - shared-mime-info 2.1 -> 2.2

- - slang 2.3.2 -> 2.3.3

- - speex 1.2.0 -> 1.2.1

- - speexdsp 1.2.0 -> 1.2.1

- - spirv-headers 1.3.204.1 -> 1.3.216.0

- - spirv-tools 1.3.204.1 -> 1.3.216.0

- - sqlite3 3.38.5 -> 3.39.3

- - squashfs-tools 4.5 -> 4.5.1

- - strace 5.16 -> 5.19

- - stress-ng 0.13.12 -> 0.14.03

- - sudo 1.9.10 -> 1.9.11p3

- - sysklogd 2.3.0 -> 2.4.4

- - sysstat 12.4.5 -> 12.6.0

- - systemd 250.5 -> 251.4

- - systemd-boot 250.5 -> 251.4

- - systemtap 4.6 -> 4.7

- - systemtap-native 4.6 -> 4.7

- - systemtap-uprobes 4.6 -> 4.7

- - sysvinit 3.01 -> 3.04

- - tiff 4.3.0 -> 4.4.0

- - tzcode-native 2022c -> 2022d

- - tzdata 2022c -> 2022d

- - u-boot 2022.01 -> 2022.07

- - u-boot-tools 2022.01 -> 2022.07

- - util-linux 2.37.4 -> 2.38.1

- - util-linux-libuuid 2.37.4 -> 2.38.1

- - valgrind 3.18.1 -> 3.19.0

- - vim 9.0.0541 -> 9.0.0598

- - vim-tiny 9.0.0541 -> 9.0.0598

- - virglrenderer 0.9.1 -> 0.10.3

- - vte 0.66.2 -> 0.68.0

- - vulkan-headers 1.3.204.1 -> 1.3.216.0

- - vulkan-loader 1.3.204.1 -> 1.3.216.0

- - vulkan-samples git (28ca2dad83ce…) -> git (74d45aace02d…)

- - vulkan-tools 1.3.204.1 -> 1.3.216.0

- - wayland 1.20.0 -> 1.21.0

- - wayland-protocols 1.25 -> 1.26

- - webkitgtk 2.36.5 -> 2.36.7

- - x264 r3039+gitX (5db6aa6cab1b…) -> r3039+gitX (baee400fa9ce…)

- - xauth 1.1.1 -> 1.1.2

- - xcb-proto 1.14.1 -> 1.15.2

- - xf86-video-cirrus 1.5.3 -> 1.6.0

- - xkeyboard-config 2.35.1 -> 2.36

- - xmlto 0.0.28 -> 0.0.28+0.0.29+gitX

- - xorgproto 2021.5 -> 2022.2

- - zlib 1.2.11 -> 1.2.12

 

 

 

Contributors to 4.1

~~~~~~~~~~~~~~~~~~

 

Thanks to the following people who contributed to this release:

 

- - Aatir Manzur

- - Ahmed Hossam

- - Alejandro Hernandez Samaniego

- - Alexander Kanavin

- - Alexandre Belloni

- - Alex Kiernan

- - Alex Stewart

- - Andrei Gherzan

- - Andrej Valek

- - Andrey Konovalov

- - Aníbal Limón

- - Anuj Mittal

- - Arkadiusz Drabczyk

- - Armin Kuster

- - Aryaman Gupta

- - Awais Belal

- - Beniamin Sandu

- - Bertrand Marquis

- - Bob Henz

- - Bruce Ashfield

- - Carlos Rafael Giani

- - Changhyeok Bae

- - Changqing Li

- - Chanho Park

- - Chen Qi

- - Christoph Lauer

- - Claudius Heine

- - Daiane Angolini

- - Daniel Gomez

- - Daniel McGregor

- - David Bagonyi

- - Davide Gardenal

- - Denys Dmytriyenko

- - Dmitry Baryshkov

- - Drew Moseley

- - Enrico Scholz

- - Ernst Sjöstrand

- - Etienne Cordonnier

- - Fabio Estevam

- - Federico Pellegrin

- - Felix Moessbauer

- - Ferry Toth

- - Florin Diaconescu

- - Gennaro Iorio

- - Grygorii Tertychnyi

- - Gunjan Gupta

- - Henning Schild

- - He Zhe

- - Hitendra Prajapati

- - Jack Mitchell

- - Jacob Kroon

- - Jan Kiszka

- - Jan Luebbe

- - Jan Vermaete

- - Jasper Orschulko

- - JeongBong Seo

- - Jeremy Puhlman

- - Jiaqing Zhao

- - Joerg Vehlow

- - Johan Korsnes

- - Johannes Schneider

- - John Edward Broadbent

- - Jon Mason

- - Jose Quaresma

- - Joshua Watt

- - Justin Bronder

- - Kai Kang

- - Kevin Hao

- - Khem Raj

- - Konrad Weihmann

- - Kory Maincent

- - Kristian Amlie

- - Lee Chee Yang

- - Lei Maohui

- - Leon Anavi

- - Luca Ceresoli

- - Lucas Stach

- - LUIS ENRIQUEZ

- - Marcel Ziswiler

- - Marius Kriegerowski

- - Mark Hatle

- - Markus Volk

- - Marta Rybczynska

- - Martin Beeger

- - Martin Jansa

- - Mateusz Marciniec

- - Mattias Jernberg

- - Matt Madison

- - Maxime Roussin-Bélanger

- - Michael Halstead

- - Michael Opdenacker

- - Mihai Lindner

- - Mikko Rapeli

- - Ming Liu

- - Mingli Yu

- - Muhammad Hamza

- - Naveen Saini

- - Neil Horman

- - Nick Potenski

- - Nicolas Dechesne

- - Niko Mauno

- - Ola x Nilsson

- - Otavio Salvador

- - Pascal Bach

- - Paul Eggleton

- - Paul Gortmaker

- - Paulo Neves

- - Pavel Zhukov

- - Peter Bergin

- - Peter Kjellerstedt

- - Peter Marko

- - Petr Vorel

- - Pgowda

- - Portia Stephens

- - Quentin Schulz

- - Rahul Kumar

- - Raju Kumar Pothuraju

- - Randy MacLeod

- - Raphael Teller

- - Rasmus Villemoes

- - Ricardo Salveti

- - Richard Purdie

- - Robert Joslyn

- - Robert Yang

- - Roland Hieber

- - Ross Burton

- - Rouven Czerwinski

- - Ruiqiang Hao

- - Russ Dill

- - Rusty Howell

- - Sakib Sajal

- - Samuli Piippo

- - Schmidt, Adriaan

- - Sean Anderson

- - Shruthi Ravichandran

- - Shubham Kulkarni

- - Simone Weiss

- - Sebastian Suesens

- - Stefan Herbrechtsmeier

- - Stefano Babic

- - Stefan Wiehler

- - Steve Sakoman

- - Sundeep KOKKONDA

- - Teoh Jay Shen

- - Thomas Epperson

- - Thomas Perrot

- - Thomas Roos

- - Tobias Schmidl

- - Tomasz Dziendzielski

- - Tom Hochstein

- - Tom Rini

- - Trevor Woerner

- - Ulrich Ölmann

- - Vyacheslav Yurkov

- - Wang Mingyu

- - William A. Kennington III

- - Xiaobing Luo

- - Xu Huan

- - Yang Xu

- - Yi Zhao

- - Yogesh Tyagi

- - Yongxin Liu

- - Yue Tao

- - Yulong (Kevin) Liu

- - Zach Welch

- - Zheng Ruoqin

- - Zoltán Böszörményi

 

 

 

Repositories / Downloads for 4.1

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: langdale

Tag: yocto-4.1

Git Revision: 5200799866b92259e855051112520006e1aaaac0

Release Artefact: poky-5200799866b92259e855051112520006e1aaaac0

sha: 9d9a2f7ecf2502f89f43bf45d63e6b61cdcb95ed1d75c8281372f550d809c823

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1/poky-5200799866b92259e855051112520006e1aaaac0.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1/poky-5200799866b92259e855051112520006e1aaaac0.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: langdale

Tag: yocto-4.1

Git Revision: 744a2277844ec9a384a9ca7dae2a634d5a0d3590

Release Artefact: oecore-744a2277844ec9a384a9ca7dae2a634d5a0d3590

sha: 34f1fd5bb83514bf0ec8ad7f8cce088a8e28677e1338db94c188283da704c663

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1/oecore-744a2277844ec9a384a9ca7dae2a634d5a0d3590.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1/oecore-744a2277844ec9a384a9ca7dae2a634d5a0d3590.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: langdale

Tag: yocto-4.1

Git Revision: b0067202db8573df3d23d199f82987cebe1bee2c

Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c

sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1/meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.2

Tag: yocto-4.1

Git Revision: 074da4c469d1f4177a1c5be72b9f3ccdfd379d67

Release Artefact: bitbake-074da4c469d1f4177a1c5be72b9f3ccdfd379d67

sha: e32c300e0c8522d8d49ef10aae473bd5f293202672eb9d38e90ed92594ed1fe8

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.1/bitbake-074da4c469d1f4177a1c5be72b9f3ccdfd379d67.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.1/bitbake-074da4c469d1f4177a1c5be72b9f3ccdfd379d67.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: langdale

Tag: yocto-4.1

Git Revision: 42d3e26a0d04bc5951e640b471686f347dc9b74a



[ANNOUNCEMENT] Yocto Project 3.1.20 (dunfell-23.0.20) is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 3.1.20 (dunfell-23.0.20) Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/poky-dunfell-23.0.20.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.20/poky-dunfell-23.0.20.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang Lee chee.yang.lee@...

Yocto Project Build and Release

- --------------------------

yocto-3.1.20 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: dunfell

Tag: yocto-3.1.20

Git Revision: 7f9b7f912e13451a4cd03b10a8090a5def68dc39

Release Artefact: poky-dunfell-23.0.20

sha: 98ac09e728f27c493fa7022cb0ef01352680c1b2771a9f6320d1b8060f0e0590

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/poky-dunfell-23.0.20.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.20/poky-dunfell-23.0.20.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: dunfell

Tag: yocto-3.1.20

Git Revision: dbad46a0079843b380cf3dda6008b12ab9526688

Release Artefact: oecore-dunfell-23.0.20

sha: 2bb87a293d3956da648419c313021a883fc9359753d5a662f11327a0d9318ede

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/oecore-dunfell-23.0.20.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.20/oecore-dunfell-23.0.20.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: dunfell

Tag: yocto-3.1.20

Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7

Release Artefact: meta-mingw-dunfell-23.0.20

sha: 1a90800d7a30c18048ad4699faa9d3e77d973826f363d42902e53356129616bc

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/meta-mingw-dunfell-23.0.20.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.20/meta-mingw-dunfell-23.0.20.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: dunfell

Tag: yocto-3.1.20

Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac

Release Artefact: meta-gplv2-dunfell-23.0.20

sha: 301b761c85af6f263922dfa2e91b7c15dd99d4f46bbfe0854c6dc9cc3e3f8aeb

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/meta-gplv2-dunfell-23.0.20.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.20/meta-gplv2-dunfell-23.0.20.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: dunfell

Tag: yocto-3.1.20

Git Revision: 048d682b031644fb9f0d41a489bacb873aa27bd7

Release Artefact: bitbake-dunfell-23.0.20

sha: 11deb2f5ab15f83abf6d8851c77a91cf66f1f07b00b3dda5e12fcde100343692

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.20/bitbake-dunfell-23.0.20.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.20/bitbake-dunfell-23.0.20.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: dunfell

Tag: yocto-3.1.20

Git Revision: 2359aff814f5faccffbf3cb2cd180979c248fc3c

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

bind: Fix CVE-2022-2795 CVE-2022-38177 CVE-2022-38178

binutils : CVE-2022-38533

bluez: CVE-2022-39176

connman: fix CVE-2022-32292 CVE-2022-32293

curl: fix CVE-2022-35252

expat: Fix CVE-2022-40674

gnutls: fix CVE-2021-4209

golang: ignore CVE-2022-29526 CVE-2022-30634

golang: fix CVE-2021-27918 CVE-2021-36221 CVE-2021-39293 CVE-2021-41771 CVE-2022-30629 CVE-2022-30631 CVE-2022-30632 CVE-2022-30633 CVE-2022-30635 CVE-2022-32148 CVE-2022-32189 CVE-2022-32190 CVE-2022-27664

gst-plugins-good: fix CVE-2022-1920 CVE-2022-1921 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 CVE-2022-2122

inetutils: Fix CVE-2022-39028

libarchive: Fix CVE-2021-31566 CVE-2021-23177

libtiff: Fix CVE-2022-34526

libxml2: fix for CVE-2016-3709

python3: Fix CVE-2021-28861

qemu: fix CVE-2020-13754 CVE-2021-3713 CVE-2021-3748 CVE-2021-3930 CVE-2021-4206 CVE-2021-4207 CVE-2022-0216

qemu: ignore CVE-2020-27661

sqlite3: Fix CVE-2020-35525 CVE-2020-35527 CVE-2021-20223 CVE-2022-35737

subversion: fix CVE-2021-28544

tiff: fix CVE-2022-1354 CVE-2022-1355 CVE-2022-2867 CVE-2022-2868 CVE-2022-2869

virglrenderer: fix CVE-2022-0135

 

 

- ---------------

Fixes

- ---------------

bitbake: bitbake: runqueue: add cpu/io pressure regulation

bitbake: bitbake: runqueue: add memory pressure regulation

bitbake: runqueue: Change pressure file warning to a note

bitbake: utils: Pass lock argument in fileslocked

build-appliance-image: Update to dunfell head revision

classes: cve-check: Get shared database lock

create-pull-request: don't switch the git remote protocol to git://

cryptodev-module: fix build with 5.11+ kernels

cve-check: Don't use f-strings

cve-check: close cursors as soon as possible

documentation: update for 3.1.20

licenses: Handle newer SPDX license names

linux-firmware: package new Qualcomm firmware

linux-firmware: package new Qualcomm firmware

linux-firmware: upgrade 20220708 -> 20220913

linux-yocto/5.4: update genericx86* machines to v5.4.205

linux-yocto/5.4: update to v5.4.213

mobile-broadband-provider-info: upgrade to 20220725

poky.conf: bump version for 3.1.20 release

qemu: Add PACKAGECONFIG for brlapi

qemu: Define libnfs PACKAGECONFIG

ref-manual: add numa to machine features

relocate_sdk.py: ensure interpreter size error causes relocation to fail

systemd: Add 'no-dns-fallback' PACKAGECONFIG option

systemd: Fix unwritable /var/lock when no sysvinit handling

tzdata: Update to 2022c

vim: Upgrade to 9.0.0598

wireless-regdb: upgrade to 2022.08.12


[ANNOUNCEMENT] Yocto Project 4.0.4 is Released

Lee Chee Yang
 

Hi

 

We are pleased to announce the Yocto Project 4.0.4 Release is now available for download.


http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/poky-d64bef1c7d713b92a51228e5ade945835e5a94a4.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.4/poky-d64bef1c7d713b92a51228e5ade945835e5a94a4.tar.bz2

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/RELEASENOTES

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/testreport.txt

Thank you for everyone's contributions to this release.

 

 

Chee Yang
chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-4.0.4 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: kirkstone

Tag: yocto-4.0.4

Git Revision: d64bef1c7d713b92a51228e5ade945835e5a94a4

Release Artefact: poky-d64bef1c7d713b92a51228e5ade945835e5a94a4

sha: b5e92506b31f88445755bad2f45978b747ad1a5bea66ca897370542df5f1e7db

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/poky-d64bef1c7d713b92a51228e5ade945835e5a94a4.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.4/poky-d64bef1c7d713b92a51228e5ade945835e5a94a4.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: kirkstone

Tag: yocto-4.0.4

Git Revision: f7766da462905ec67bf549d46b8017be36cd5b2a

Release Artefact: oecore-f7766da462905ec67bf549d46b8017be36cd5b2a

sha: ce0ac011474db5e5f0bb1be3fb97f890a02e46252a719dbcac5813268e48ff16

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/oecore-f7766da462905ec67bf549d46b8017be36cd5b2a.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.4/oecore-f7766da462905ec67bf549d46b8017be36cd5b2a.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: kirkstone

Tag: yocto-4.0.4

Git Revision: a90614a6498c3345704e9611f2842eb933dc51c1

Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1

sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.4/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: kirkstone

Tag: yocto-4.0.4

Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a

sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.4/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.0

Tag: yocto-4.0.4

Git Revision: ac576d6fad6bba0cfea931883f25264ea83747ca

Release Artefact: bitbake-ac576d6fad6bba0cfea931883f25264ea83747ca

sha: 526c2768874eeda61ade8c9ddb3113c90d36ef44a026d6690f02de6f3dd0ea12

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.4/bitbake-ac576d6fad6bba0cfea931883f25264ea83747ca.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-4.0.4/bitbake-ac576d6fad6bba0cfea931883f25264ea83747ca.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: kirkstone

Tag: yocto-4.0.4

Git Revision: f632dad24c39778f948014029e74db3c871d9d21

 

 

- ---------------

Contributors

- ---------------

Alejandro Hernandez Samaniego

Alex Stewart

Alexander Kanavin

Alexandre Belloni

Andrei Gherzan

Anuj Mittal

Aryaman Gupta

Awais Belal

Beniamin Sandu

Bertrand Marquis

Bruce Ashfield

Changqing Li

Chee Yang Lee

Daiane Angolini

Enrico Scholz

Ernst Sjöstrand

Gennaro Iorio

Hitendra Prajapati

Jacob Kroon

Jon Mason

Jose Quaresma

Joshua Watt

Kai Kang

Khem Raj

Kristian Amlie

LUIS ENRIQUEZ

Mark Hatle

Martin Beeger

Martin Jansa

Mateusz Marciniec

Michael Opdenacker

Mihai Lindner

Mikko Rapeli

Ming Liu

Ola x Nilsson

Otavio Salvador

Paul Eggleton

Pavel Zhukov

Peter Bergin

Peter Kjellerstedt

Peter Marko

Rajesh Dangi

Randy MacLeod

Rasmus Villemoes

Richard Purdie

Robert Joslyn

Roland Hieber

Ross Burton

Sakib Sajal

Shubham Kulkarni

Steve Sakoman

Ulrich Ölmann

Yang Xu

Yongxin Liu

ghassaneben

niko.mauno@...

pgowda

wangmy

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

binutils : fix CVE-2022-38533

curl: fix CVE-2022-35252

sqlite: fix CVE-2022-35737

grub2: fix CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735

u-boot: fix CVE-2022-30552 CVE-2022-33967

libxml2: Ignore CVE-2016-3709

libtiff: fix CVE-2022-34526

zlib: fix CVE-2022-37434

gnutls: fix CVE-2022-2509

u-boot: fix CVE-2022-33103

qemu: fix CVE-2021-3507 CVE-2021-3929 CVE-2021-4158 CVE-2022-0216 CVE-2022-0358

 

 

- ---------------

Fixes

- ---------------

apr: Cache configure tests which use AC_TRY_RUN

apr: Use correct strerror_r implementation based on libc type

apt: fix nativesdk-apt build failure during the second time build

archiver.bbclass: remove unsed do_deploy_archives[dirs]

archiver.bbclass: some recipes that uses the kernelsrc bbclass uses the shared source

autoconf: Fix strict prototype errors in generated tests

autoconf: Update K & R stype functions

bind: upgrade to 9.18.5

bitbake.conf: set BB_DEFAULT_UMASK using ??=

bitbake: ConfHandler/BBHandler: Improve comment error messages and add tests

bitbake: ConfHandler: Remove lingering close

bitbake: bb/utils: movefile: use the logger for printing

bitbake: bb/utils: remove: check the path again the expand python glob

bitbake: bitbake-user-manual: Correct description of the ??= operator

bitbake: bitbake-user-manual: npm fetcher: improve description of SRC_URI format

bitbake: bitbake: bitbake-user-manual: hashserv can be accessed on a dedicated domain

bitbake: bitbake: runqueue: add cpu/io pressure regulation

bitbake: bitbake: runqueue: add memory pressure regulation

bitbake: cooker: Drop sre_constants usage

bitbake: doc: bitbake-user-manual: add explicit target for crates fetcher

bitbake: doc: bitbake-user-manual: document npm and npmsw fetchers

bitbake: event.py: ignore exceptions from stdout and sterr operations in atexit

bitbake: fetch2: Ensure directory exists before creating symlink

bitbake: fetch2: gitsm: fix incorrect handling of git submodule relative urls

bitbake: runqueue: Change pressure file warning to a note

bitbake: runqueue: Fix unihash cache mismatch issues

bitbake: toaster: fix kirkstone version

bitbake: utils: Pass lock argument in fileslocked

bluez5: upgrade to 5.65

boost: fix install of fiber shared libraries

cairo: Adapt the license information based on what is being built

classes: cve-check: Get shared database lock

cmake: remove CMAKE_ASM_FLAGS variable in toolchain file

connman: Backports for security fixes

core-image.bbclass: Exclude openssh complementary packages

cracklib: Drop using register keyword

cracklib: upgrade to 2.9.8

create-spdx: Fix supplier field

create-spdx: handle links to inaccessible locations

create-spdx: ignore packing control files from ipk and deb

cve-check: Don't use f-strings

cve-check: close cursors as soon as possible

devtool/upgrade: catch bb.fetch2.decodeurl errors

devtool/upgrade: correctly clean up when recipe filename isn't yet known

devtool: error out when workspace is using old override syntax

ell: upgrade to 0.50

epiphany: upgrade to 42.4

externalsrc: Don't wipe out src dir when EXPORT_FUNCTIONS is used.

gcc-multilib-config: Fix i686 toolchain relocation issues

gcr: Define _GNU_SOURCE

gdk-pixbuf: upgrade to 2.42.9

glib-networking: upgrade to 2.72.2

go: upgrade to v1.17.13

insane.bbclass: Skip patches not in oe-core by full path

iso-codes: upgrade to 4.11.0

kernel-fitimage.bbclass: add padding algorithm property in config nodes

kernel-fitimage.bbclass: only package unique DTBs

kernel: Always set CC and LD for the kernel build

kernel: Use consistent make flags for menuconfig

lib:npm_registry: initial checkin

libatomic-ops: upgrade to 7.6.14

libcap: upgrade to 2.65

libjpeg-turbo: upgrade to 2.1.4

libpam: use /run instead of /var/run in systemd tmpfiles

libtasn1: upgrade to 4.19.0

liburcu: upgrade to 0.13.2

libwebp: upgrade to 1.2.4

libwpe: upgrade to 1.12.3

libxml2: Port gentest.py to Python-3

lighttpd: upgrade to 1.4.66

linux-yocto/5.10: update genericx86* machines to v5.10.135

linux-yocto/5.10: update to v5.10.137

linux-yocto/5.15: update genericx86* machines to v5.15.59

linux-yocto/5.15: update to v5.15.62

linux-yocto: Fix COMPATIBLE_MACHINE regex match

linux-yocto: prepend the the value with a space when append to KERNEL_EXTRA_ARGS

lttng-modules: fix 5.19+ build

lttng-modules: fix build against mips and v5.19 kernel

lttng-modules: fix build for kernel 5.10.137

lttng-modules: replace mips compaction fix with upstream change

lz4: upgrade to 1.9.4

maintainers: update opkg maintainer

meta: introduce UBOOT_MKIMAGE_KERNEL_TYPE

migration guides: add missing release notes

mobile-broadband-provider-info: upgrade to 20220725

nativesdk: Clear TUNE_FEATURES

npm: replace 'npm pack' call by 'tar czf'

npm: return content of 'package.json' in 'npm_pack'

npm: take 'version' directly from 'package.json'

npm: use npm_registry to cache package

oeqa/gotoolchain: put writable files in the Go module cache

oeqa/gotoolchain: set CGO_ENABLED=1

oeqa/parselogs: add qemuarmv5 arm-charlcd masking

oeqa/qemurunner: add run_serial() comment

oeqa/selftest: rename git.py to intercept.py

oeqa: qemurunner: Report UNIX Epoch timestamp on login

package_rpm: Do not replace square brackets in %files

packagegroup-self-hosted: update for strace

parselogs: Ignore xf86OpenConsole error

perf: Fix reproducibility issues with 5.19 onwards

pinentry: enable _XOPEN_SOURCE on musl for wchar usage in curses

poky.conf: add ubuntu-22.04 to tested distros

poky.conf: bump version for 4.0.4

pseudo: Update to include recent upstream minor fixes

python3-pip: Fix RDEPENDS after the update

ref-manual: add numa to machine features

relocate_sdk.py: ensure interpreter size error causes relocation to fail

rootfs-postcommands.bbclass: avoid moving ssh host keys if etc is writable

rootfs.py: dont try to list installed packages for baremetal images

rootfspostcommands.py: Cleanup subid backup files generated by shadow-utils

ruby: drop capstone support

runqemu: Add missing space on default display option

runqemu: display host uptime when starting

sanity: add a comment to ensure CONNECTIVITY_CHECK_URIS is correct

scripts/oe-setup-builddir: make it known where configurations come from

scripts/runqemu.README: fix typos and trailing whitespaces

selftest/wic: Tweak test case to not depend on kernel size

shadow: Avoid nss warning/error with musl

shadow: Enable subid support

system-requirements.rst: Add Ubuntu 22.04 to list of supported distros

systemd: Add 'no-dns-fallback' PACKAGECONFIG option

systemd: Fix unwritable /var/lock when no sysvinit handling

sysvinit-inittab/start_getty: Fix respawn too fast

tcp-wrappers: Fix implicit-function-declaration warnings

tzdata: upgrade to 2022b

util-linux: Remove --enable-raw from EXTRA_OECONF

vala: upgrade to 0.56.3

vim: Upgrade to 9.0.0453

watchdog: Include needed system header for function decls

webkitgtk: upgrade to 2.36.5

weston: upgrade to 10.0.2

wic/bootimg-efi: use cross objcopy when building unified kernel image

wic: add target tools to PATH when executing native commands

wic: depend on cross-binutils

wireless-regdb: upgrade to 2022.08.12

wpebackend-fdo: upgrade to 1.12.1

xinetd: Pass missing -D_GNU_SOURCE

xz: update to 5.2.6*



Re: [ANNOUNCEMENT] Milestone 3 for Yocto Project 4.1 (yocto-4.1_M3) Now Available

Konrad Weihmann
 

Hi all,

On 24.09.22 04:02, Lee Chee Yang wrote:
Hi
We are pleased to announce the third milestone release for Yocto Project 4.1 (yocto-4.1_M3) is now available for download.
Download:
http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.1_M3 <http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.1_M3>
bitbake: 6424f4b7e9c1ba8db81346e8b3a806dd035d4551
meta-agl: e4ea839db9c26e78175d61388c5408a79f6927dc
meta-arm: 261263a6701ab3530ff997643d08da502222ac20
meta-aws: a16f35a73bff26d9506f519451dc75034211d61b
meta-gplv2: 43bf0e8d5985945d19d01f94bfbbda420c4435f3
I thought the agreement was to stop promoting meta-gplv2?
Still I find it listed here - it somehow implies that this is still officially support, which everyone agreed it isn't

Can this be removed from the announcement template for the next releases? - just to avoid any future misunderstandings

meta-intel: 9d2820d4bf436924db845de28850a807f9fdef87
meta-mingw: 8327efb6334b9187fbaf7c871de4446c6863b3c5
meta-openembedded: 09e086812aab7ca6ee480fb625966e2318174345
meta-virtualization: 538e94e674dc1be0b0fee5da54083ca040b2f7b9
oecore: bf5968bce59d5e5c777407dba431be3aec012404
poky: 987e1503f733068d774ccf440b6f4e23e833571e
Full Test Report:
http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.1_M3/testreport.txt <http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.1_M3/testreport.txt>
Known Issue:
Wic “direct” imager plugin is causing duplicates/multiple root entries in fstab. This issue only happens on wic image. See bug 14865 for more information.
Thank you.
Chee Yang
chee.yang.lee@... <mailto:chee.yang.lee@...>
Yocto Project Build and Release


[ANNOUNCEMENT] Milestone 3 for Yocto Project 4.1 (yocto-4.1_M3) Now Available

Lee Chee Yang
 

Hi

 

We are pleased to announce the third milestone release for Yocto Project 4.1 (yocto-4.1_M3) is now available for download.

 

Download:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.1_M3

 

bitbake: 6424f4b7e9c1ba8db81346e8b3a806dd035d4551

meta-agl: e4ea839db9c26e78175d61388c5408a79f6927dc

meta-arm: 261263a6701ab3530ff997643d08da502222ac20

meta-aws: a16f35a73bff26d9506f519451dc75034211d61b

meta-gplv2: 43bf0e8d5985945d19d01f94bfbbda420c4435f3

meta-intel: 9d2820d4bf436924db845de28850a807f9fdef87

meta-mingw: 8327efb6334b9187fbaf7c871de4446c6863b3c5

meta-openembedded: 09e086812aab7ca6ee480fb625966e2318174345

meta-virtualization: 538e94e674dc1be0b0fee5da54083ca040b2f7b9

oecore: bf5968bce59d5e5c777407dba431be3aec012404

poky: 987e1503f733068d774ccf440b6f4e23e833571e

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-4.1_M3/testreport.txt

 

Known Issue:


Wic “direct” imager plugin is causing duplicates/multiple root entries in fstab. This issue only happens on wic image. See bug 14865 for more information.

Thank you.

 

Chee Yang

chee.yang.lee@...

Yocto Project Build and Release


Yocto Project 3.1.19 (dunfell-23.0.19) is Released

Lee Chee Yang
 

Hi

We are pleased to announce the Yocto Project 3.1.19 (dunfell-23.0.19) Release is now available for download.

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2

 

A gpg signed version of these release notes is available at:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/RELEASENOTES

 

Full Test Report:

 

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/testreport.txt

 

Thank you for everyone's contributions to this release.

 

Chee Yang Lee chee.yang.lee@...

Yocto Project Build and Release


- --------------------------

yocto-3.1.19 Release Notes

- --------------------------

 

 

- --------------------------

Repositories/Downloads

- --------------------------

 

Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: dunfell

Tag: yocto-3.1.19

Git Revision: 4aad5914efe9789755789856882aac53de6c4ed3

Release Artefact: poky-dunfell-23.0.19

sha: d60e2b374e8fbb2560493a163b87f0e215795daa92d812252995af9365bd53f0

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2

 

Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: dunfell

Tag: yocto-3.1.19

Git Revision: a3cba15142e98177119ef36c09f553d09acf35ef

Release Artefact: oecore-dunfell-23.0.19

sha: 08e66325f4e59df61790fa577626caf9fa0895db12c55407b95728916ea7597b

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/oecore-dunfell-23.0.19.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/oecore-dunfell-23.0.19.tar.bz2

 

Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: dunfell

Tag: yocto-3.1.19

Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7

Release Artefact: meta-mingw-dunfell-23.0.19

sha: ce55e5a82c51537b3900127f83c8239c7fc914a2f04ac3c8e6994cde881aeafc

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/meta-mingw-dunfell-23.0.19.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/meta-mingw-dunfell-23.0.19.tar.bz2

 

Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: dunfell

Tag: yocto-3.1.19

Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac

Release Artefact: meta-gplv2-dunfell-23.0.19

sha: 04dc6ed5adf36b13da082cba8abf5760069c07b91590389cfce33f2b852d6d3d

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/meta-gplv2-dunfell-23.0.19.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/meta-gplv2-dunfell-23.0.19.tar.bz2

 

Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: dunfell

Tag: yocto-3.1.19

Git Revision: 17be38290d1e971cd89785e6bf44caef0a6416f8

Release Artefact: bitbake-dunfell-23.0.19

sha: 5b6550fa76d59cb63ee15747db2c7441286a2f8d2d5296126ce4d86bbb189bea

Download Locations:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/bitbake-dunfell-23.0.19.tar.bz2

http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/bitbake-dunfell-23.0.19.tar.bz2

 

Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: dunfell

Tag: yocto-3.1.19

Git Revision: 95e030ec74f69eccabcc97737c8a93fd7629f9d9

 

 

- ---------------

Known Issues

- ---------------

N/A

 

 

- ---------------

Security Fixes

- ---------------

gdk-pixbuf: Fix CVE-2021-46829

gnupg: Fix CVE-2022-34903

gnutls: Fix CVE-2022-2509

grub2: Fix CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28736

libTiff: Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058

libjpeg-turbo: Fix CVE-2021-46822

libtirpc: Fix CVE-2021-46828

qemu: Fix CVE-2020-27821 CVE-2022-35414

zlib: Fix CVE-2022-37434

 

 

- ---------------

Fixes

- ---------------

bin_package: install into base_prefix

bitbake: fetch2/wget: Update user-agent

build-appliance-image: Update to dunfell head revision

cve_check: skip remote patches that haven't been fetched when searching for CVE tags

documentation: update for 3.1.19 release

gstreamer1.0: use the correct meson option for the capabilities

initscripts: run umountnfs as a KILL script

insane: Fix buildpaths test to work with special devices

kernel-arch: Fix buildpaths leaking into external module compiles

kernel-fitimage.bbclass: add padding algorithm property in config nodes

libmodule-build-perl: Use env utility to find perl interpreter

libxml2: Port gentest.py to Python-3

linux-firmware: update 20220610 -> 20220708

linux-firwmare: restore WHENCE_CHKSUM variable

linux-yocto/5.4: update to v5.4.209

openssh: Add openssh-sftp-server to openssh RDEPENDS

poky.conf: bump version for 3.1.19 release

rootfs-postcommands.bbclass: move host-user-contaminated.txt to ${S}

selftest: skip virgl test on fedora 36

vim: Upgrade to 9.0.0115