Hello,

The latest release of the Yocto Project 2.2.3 (morty-16.0.3) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.3/poky-morty-16.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.3/poky-morty-16.0.3.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.3/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW06_-_2018-02-08_-_Full_Point_Release_Test_Cycle_2.2.3_rc2

Thank you to everyone for your contributions to this release!

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...


------------------
yocto-2.2.3 Errata
------------------

Release Name: eclipse-poky-neon-morty-16.0.3
Branch: neon/morty
Tag: neon/morty-16.0.3
Hash: f4d0e8a939e2e34bea910b251f5d5087180733c3
md5: 96baf616a1bc8abba1157cc1b7c8cb6b
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.3/eclipse-poky-neon-morty-16.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.3/eclipse-poky-neon-morty-16.0.3.tar.bz2

Release Name: eclipse-poky-oxygen-morty-16.0.3
Branch: oxygen/morty
Tag: oxygen/morty-16.0.3
Hash: 126e707a6de212feeaaf093edc170aaa74192ce7
md5: 41702878b4259aff66ae01bac70d554d
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.3/eclipse-poky-oxygen-morty-16.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.3/eclipse-poky-oxygen-morty-16.0.3.tar.bz2

Release Name: meta-qt3-morty-16.0.3
Branch: morty
Tag: morty-16.0.3
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: cf296376970262bff5527957e6e78121
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.3/meta-qt3-morty-16.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.3/meta-qt3-morty-16.0.3.tar.bz2

Release Name: meta-qt4-morty-16.0.3
Branch: morty
Tag: morty-16.0.3
Hash: f389368dc86e745df14cab9eeb9a94bc02bd273e
md5: 6a66289eadc6b22ad1a83861b44f7375
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.3/meta-qt4-morty-16.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.3/meta-qt4-morty-16.0.3.tar.bz2

Release Name: poky-morty-16.0.3
Branch: morty
Tag: morty-16.0.3
Hash: e6626951501cdf8c5516ad42fd585894f19c2327
md5: 5889497ed1947b7e927b5135fdf1adb8
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.3/poky-morty-16.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.3/poky-morty-16.0.3.tar.bz2


-------------
Known Issues
-------------
N/A

--------------
Security Fixes
--------------
glib.inc: set CVE_PRODUCT to glib
glibc-common.inc: set CVE_PRODUCT to glibc
sqlite3.inc: set CVE_PRODUCT to sqlite
python.inc: set CVE_PRODUCT to python
icu.inc: set CVE_PRODUCT to international_components_for_unicode
bluez5.inc: set CVE_PRODUCT to bluez
acpid.inc: set CVE_PRODUCT to acpid2
binutils: CVE-2017-15938
binutils: CVE-2017-15024
binutils: CVE-2017-14729
binutils: CVE-2017-9955
binutils: CVE-2017-9954
binutils: CVE-2017-9745
binutils: CVE-2017-9756
binutils: CVE-2017-9755
binutils: CVE-2017-9753_and_CVE-2017-9754
binutils: CVE-2017-9752
binutils: CVE-2017-9750
binutils: CVE-2017-9747
binutils: CVE-2017-9748
binutils: CVE-2017-9746
binutils: CVE-2017-9749
binutils: CVE-2017-9751
binutils: CVE-2017-7299
binutils: CVE-2017-8398
binutils: CVE-2017-8394
binutils: CVE-2017-8421
binutils: CVE-2017-8396
binutils: CVE-2017-8397
binutils: CVE-2017-8395
binutils: CVE-2017-8393
binutils: CVE-2017-7304
binutils: CVE-2017-7303
binutils: CVE-2017-7302
binutils: CVE-2017-7301
binutils: CVE-2017-7227
binutils: CVE-2017-7225
binutils: CVE-2017-7224
binutils: CVE-2017-7223
binutils: CVE-2017-12450_12452_12453_12454_12456
binutils: CVE-2017-12451
binutils: CVE-2017-12449, CVE-2017_12455, CVE-2017-12457, CVE-2017-12458, CVE-2017-12459
binutils: CVE-2017-12448
binutils: CVE-2017-7226
binutils: Security Fix CVE-2017-9041
binutils: Security fix for CVE-2017-9040 and 2017-9042
binutils: Security Fix CVE-2017-9039
binutis: Security fix CVE-2017-9038
binutis: Security fix CVE-2017-7614
glibc: CVE-2017-15670
glibc: Security fix for CVE-2017-8804
glibc: Fix CVE-2017-1000366
glibc: Fix CVE-2015-5180
zlib: Fix CVE-2016-9843
zlib: Fix CVE-2016-9842
zlib: Fix CVE-2016-9841
zlib: Fix CVE-2016-9840
ruby: Security fix for CVE-2017-14064
ruby: Security fix for CVE-2017-14033
ruby: Security fix for CVE-2017-9229
ruby: Secruity fix for CVE-2017-9226
ruby: Security fix for CVE-2017-9228
ruby: Security fix for CVE-2017-9227
ruby: Security fix for CVE-2016-7798
curl: Security fix for CVE-2017-1000101
curl: Security fix for CVE-2017-1000100
curl: Security fix for CVE-2016-9586
curl: Security fix for CVE-2016-8624
curl: Security fix for CVE-2016-8617
curl: Security fix for CVE-2016-8623
curl: Security fix for CVE-2016-8621
curl: Security fix for CVE-2016-8620
curl: Security fix for CVE-2016-8619
curl: Security fix for CVE-2016-8618
curl: Security fix for CVE-2016-8615
tiff: Security fix for CVE-2017-7593
tiff: Security fix for CVE-2017-7602
tiff: Security fix for CVE-2017-7601
tiff: Security fix for CVE-2017-7598
tiff: Security fix for CVE-2017-7596
tiff: Security fix for CVE-2017-7595
tiff: Security fix for CVE-2017-7594
tiff: Security fix for CVE-2017-7592
tiff: Security fix for CVE-2016-10270
tiff: Security fix for CVE-2016-10269
tiff: Security fix CVE-2016-10267
tiff: Security fix CVE-2016-10266
tiff: Security fix CVE-2016-10268
tiff: Secruity fix CVE-2016-10093
tiff: Security fix for CVE-2016-10271
libtiff: Security Advisory - libtiff - CVE-2017-5225
linux-yotoc/4.1: update to 4.1.43 plus CVE-2017-1000251
linux-yotoc/4.8: update to 4.8.25 plus CVE-2017-1000251
linux-yotoc/4.4: update to 4.4.87 plus CVE-2017-1000251
lunux-yocto/4.8: update to 4.8.25 plus bluetooth: CVE-2017-1000251
linux-yocto/4.4: update to 4.4.87 plus bluetooth: CVE-2017-1000251
linux-yocto/4.1: update to 4.1.43 plus bluetooth CVE-2017-1000251
bluez5: fix out-of-bounds access in SDP server (CVE-2017-1000250)

-----
Fixes
-----
cmake: avoid configure failures if CFLAGS contains -Wstrict-prototypes
Fix seg-fault in the linker when examining a corrupt binary.
local.conf.sample: Weakly set BB_DISKMON_DIRS
bitbake: toaster: remove cut and paste cruft
bitbake: toaster: move sqlite database to TOASTER_DIR
bitbake: toaster: bin/toaster whitelist TOASTER_DIR
bitbake: fetch2: Do not fail to create symbolic links if they already exist
bitbake: bitbake-layers: fix layerindex-fetch for Python 3
build-appliance-image: Update to morty head revision
populate_sdk_ext: Use prebuilt uninative tarball
uninative: Handle futex hangs caused by glibc version mismatches
gnu-efi: Support musl-x32 build
gnu-efi: copy header files for x32 build
gnu-efi: ignore arch mismatch for x32
gnu-efi: build 64-bit for x32
nspr: Fix build error due to missing stdint.h> include
adwaita-icon-theme: add a patch to speed up the do_install() task
grub: Fix build with gcc7
grub: Fix build with glibc 2.25
systemd: fixes mips64 login issue
python3: do not hardcode "lib" into site-packages search path
cross-localedef-native: Include locale_t.h
fontconfig: Fix namespace conflicts with glibc
documentation: Updated manual revision history table
build-appliance-image: Update to morty head revision
poky: Bump distro version to 2.2.3
neon: fix fetch error
byacc: Fix fetch error
mesa: fix SRC_URI
ppp: include netinet/in.h before linux/in.h in pppoe.h
linux-yocto/4.8: update to v4.8.26
python-3.3-multilib.patch: Fixes getpath on multilib configurations
tcf-agent: Fix daemon termination
tcf-agent: kill with USR2 in systemd stop
opkg: fix conffile errors in 'opkg status' calls
coreutils_6.9: fix musl compilation
coreutils_6.9: Disable broken man pages
gmp_4.2.1: prevent calls to mpn_add_nc() if HAVE_NATIVE_mpn_sub_nc is false
libevdev: add libcheck dependency
tiff: Security fixes
ruby: fix build of ruby-native with gcc7
documentation: Updated Doc set to 2.2.3
bitbake: Replace deprecated git branch parameter "--set-upstream"
wpa_supplicant: fix WPA2 key replay security bug
hostap-utils: use w1.fi for SRC_URI
diffstat: use HTTP mirror for SRC_URI
v86d: take tarball from debian
libpng: lsb version 1.2.56 url fix
libpng: use SourceForge mirror
sign_rpm.bbclass: force rpm serial signing
selftest/cases/signing: ignore removal errors when cleaning temporary gpg directory
linux-yocto/4.1: fix gcc7 compilation and v4.1.39
kernel.bbclass: fix KERNEL_IMAGETYPE(S) for Image.gz
bitbake: toaster/highlight.pack.js: Fix corrupted file
bitbake: toaster: Remove prettify
devtool.py: update testcase Ids in morty
image.bbclass: Sorted ctypes to avoid basehash error
glibc-locale: add runtime dependency on glibc
neard: Fix parallel build issue
oeqa/selftest: Drop http sstate sharing
selftest/eSDK.py: Cleanup when there is an error in setUpClass
oeqa/selftest: Adds test case for sdk-update eSDK
selftest/eSDK.py: fix sstate dir not found error

The second milestone release for Yocto Project 2.5 (yocto-2.5_M2) is available for download now.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.5_M2/

eclipse-poky-neon 731e346f2187a3c6b44af72ef75d4d5029b54d9c
eclipse-poky-oxygen ccf940d787ba3cf91092a07e18fbd52c5ef7d303
meta-qt3 f33b73a9563f2dfdfd0ee37b61d65d90197a456f
meta-qt4 f313dbee2ac3d5fcc9801407947d3cb6cfb90b5d
poky 385944254d0ef88bd6450a221a54cbcb40020b42

Test report:

https://wiki.yoctoproject.org/wiki/WW07_-_2018-02-14-_Full_Test_Cycle_-_2.5_M2_rc1

Thank you.

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...

The first milestone release for Yocto Project 2.5 (yocto-2.5_M1) is available for download now.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.5_M1/

eclipse-poky-neon 83e0083ef3a71e10039ace7d18057dddc154408b
eclipse-poky-oxygen 126e707a6de212feeaaf093edc170aaa74192ce7
meta-qt3 f33b73a9563f2dfdfd0ee37b61d65d90197a456f
meta-qt4 f313dbee2ac3d5fcc9801407947d3cb6cfb90b5d
poky f2b03953b28755277437641645669396f285919a

Test report:

https://wiki.yoctoproject.org/wiki/WW03_-_2018-1-18-_Full_Test_Cycle_-_2.5_M1_rc3

Thank you.

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...

Hello,

The latest release of the Yocto Project 2.4.1 (rocko-18.0.1) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.4.1/poky-rocko-18.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4.1/poky-rocko-18.0.1.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.4.1/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW51_-_2017-12-21-_Full_Test_Cycle_-_2.4.1_rc1

Thank you to everyone for your contributions to this release!

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...


------------------
yocto-2.4.1 Errata
------------------

Release Name: eclipse-poky-neon-rocko-18.0.1
Branch: rocko
Tag: rocko-18.0.1
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: e60acf5e3804f4f1c2bf00aa5a185931 eclipse-poky-neon-rocko-18.0.1.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4.1/eclipse-poky-neon-rocko-18.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4.1/eclipse-poky-neon-rocko-18.0.1.tar.bz2

Release Name: eclipse-poky-oxygen-rocko-18.0.1
Branch: rocko
Tag: rocko-18.0.1
Hash: 126e707a6de212feeaaf093edc170aaa74192ce7
md5: 5691fe17276e8c9932b8d384569d07da eclipse-poky-oxygen-rocko-18.0.1.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4.1/eclipse-poky-oxygen-rocko-18.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4.1/eclipse-poky-oxygen-rocko-18.0.1.tar.bz2

Release Name: meta-qt3-rocko-18.0.1
Branch: rocko
Tag: rocko-18.0.1
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: 5cb7e7218605001c06072592b72502f1 meta-qt3-rocko-18.0.1.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4.1/meta-qt3-rocko-18.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4.1/meta-qt3-rocko-18.0.1.tar.bz2

Release Name: meta-qt4-rocko-18.0.1
Branch: rocko
Tag: rocko-18.0.1
Hash: f313dbee2ac3d5fcc9801407947d3cb6cfb90b5d
md5: defef8f6b49b5b622f094deb2e47514b meta-qt4-rocko-18.0.1.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4.1/meta-qt4-rocko-18.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4.1/meta-qt4-rocko-18.0.1.tar.bz2

Release Name: poky-rocko-18.0.1
Branch: rocko
Tag: rocko-18.0.1
Hash: c2b641c8a0c4fd71fcb477d788a740c2c26cddce
md5: 8790dcd97f8a594987d419eeefadef8b poky-rocko-18.0.1.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4.1/poky-rocko-18.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4.1/poky-rocko-18.0.1.tar.bz2

---------------
Known Issues
---------------
N/A

--------------
Security Fixes
--------------
icu: CVE-2017-14952
curl: Security Advisory - curl - CVE-2017-1000254

-----
Fixes
-----
oeqa/runtime/buildcpio: Use our own mirror for source
binutils: Convert SRC_URI and SRCREV to weak defines
binutils: update to 2.29.1
acpica: fix build with x32
boost: fix build with x32 and musl
runqemu: Add workaround for APIC hang on pre 4.15 kernels on qemux86
glib-2.0: Add python3 modules required by gdbus-codegen
lib/oe/patch: add missing import
bmap-tools: fix RDEPENDS and update SRC_URI
rm_work: remove debugging statements
kernel-fitimage: Fix bad image type replacement for aarch64
image-live.bbclass: add MLPREFIX to core-image-minimal-initramfs
image-live.bbclass: print warn when initramfs is invalid
wic: Fix a path to a psuedo state directory (PSEUDO_LOCALSTATEDIR).
waf.bbclass: explicitly pass bindir and libdir if supported
kernel.bbclass: Fix do_sizecheck behaviour
image_types: btrfs use sparse file creation
rm_work: Handle race with -inital tasks
linux-yocto/4.12: CQM and kmemleak fixes
linux-yocto/4.12: common-pc*: enable X2APIC by default
linux-yocto/4.12: update to v.4.12.18
linux-yocto/4.12: bug fixes and feature backports
linux-yocto/4.x: configuration updates
linux-yocto/4.12: ipv4 stable backport and config changes
linux-yocto/4.12: bug fixes and VRF feature addition
linux-yocto/4.12: update to v4.12.16
systemd: fix segfault when terminating systemd --test
recipetool: create: fix conflict between SRCREV and tag
libxslt: use HTTP instead of FTP in SRC_URI
ovmf: Fix build failure for PARALLEL_MAKE with no space
kernel-yocto: ensure that only a single defconfig is processed
kernel-yocto: Stop the build if defconfig is missing
kernel-yocto: ensure sccs variable is set when using KBUILD_DEFCONFIG
linux-yocto/4.9: update to v4.9.65
linux-yocto/4.12: iwlwifi calltrace fixes and configuration warning cleanups
linux-yocto/4.9: update to v4.9.61
rootfs-postcommands.bbclass: ensure that rootfs gets mounted ro
connman.inc: do not check IMAGE_FEATURES
templates/layer.conf: remove backslash to enable bbappend setting
systemd: allow dots in arguments to template units
package_manager: force dnf to refresh the cache
meta-selftest: fix upstream version checks for devtool test recipes
mtd-utils: fix flash_eraseall installation conflict
wpa-supplicant: add a missing WPA_COMMON_CTRL_IFACE definition
update-alternatives.bbclass: refuse to manage SysV init scripts
Revert "classes: Fix alternatives and rc.d ordering"
initscripts: rrecommend initscripts-functions
lsbinitscripts: don't use update-alternatives
initscripts: don't use update-alternatives
sysklogd: don't use update-alternatives
install*.sh: add short sleep after parted commands
init-install: fix grub-install command
initramfs-module-install: Remove allarch and FILESEXTRAPATHS
initramfs-framework: add install module
initramfs-module-install-efi: update summary
initramfs-module-install-efi: point to original copy and delete new file
wic: support filesystem label for rawcopy
openssl: fix runtime errors with Thumb2 when using binutils 2.29
openssl: Upgrade 1.1.0f -> 1.1.0g
openssl10: fix runtime errors with Thumb2 when using binutils 2.29
openssl10: Upgrade 1.0.2l -> 1.0.2m
python[3]-setuptools: inherit setuptools
local.conf.sample: Weakly set BB_DISKMON_DIRS
documentation: Prepped manual set for a 2.4.1 point release
bitbake: toaster: add 'nobuild' option to Toaster
bitbake: toaster: landing page show cmdline capture
bitbake: toaster: enable custom env support for shell calls
bitbake: toaster: some recipe events do not include packages
bitbake: toaster: update Toaster for Django 1.11
bitbake: toaster: unset BBPATH before starting bbserver for backwards compatibility
populate_sdk_ext: Use prebuilt uninative tarball
makefile: Removed "yocto-environment.png" from tar list of mega-manual
ref-manual: Fixed redundant link for "build system"
ref-manual: Added new terms to Yocto Project Terms section.
dev-manual: Updated bitbake-layers overview section.
ref-manual: 2.4 Migration Revisions
ref-manual: 2.4 Migration Revisions
build-appliance: Fix branch name
build-appliance-image: Update to rocko head revision
poky: Update to version 2.4.1
go: ensure use of BUILD_CC when building bootstrap tools
go: Use right dynamic linker on musl
Revert "go: Fix build with PIE on musl"
bitbake: tinfoil: Ensure we clean up loggers
bitbake: event: Ensure we clean up loggers
bitbake: tests/fetch: Add ftp test url
bitbake: tests/fetch: use subtests in the wget tests
bitbake: tests/fetch: Switch gnu.org urls from ftp -> http/https
bitbake: bitbake: be more explicit when warning about locale choice
bitbake: tests/fetch: skip network tests the idiomatic way
bitbake: fetch2: Fix missing logger import in repo fetcher
gstreamer1.0-plugins: disable introspection on mips64
sudo: improve reproducibility
x11perf: improve reproducibility
grub-efi_2.02.bb: improve reproducibility
libnsl2: fix installed-vs-shipped QA issue
nss: pay attention to CFLAGS
qemu.inc: let linux-yocto-rt also provide nfs server kernel module
systemd: fix duplication of CACHED_CONFIGUREVARS
systemd: use consistent indenting and coding style in do_install()
systemd: sort PACKAGECONFIG options
systemd: use consistent approach for musl PACKAGECONFIG options
systemd: remove musl specific control of ldconfig PACKAGECONFIG
tclibc-musl.inc: disable ldconfig distro feature
runqemu: print command search result when not found
runqemu: Also specialcase resolution of '.' to the file's location
image_types: Add debugging code to ext4 fs creation
qemurunner: Simplify binary data handling
qemuboot: Improve relative path handling
runqemu: Improve relative path handling in qemuconf files
qemu: Add patch to avoid qemuppc boot hangs
runqemu: Ensure we process all tap devices
base: add automatic dependency on xz-native for .txz SRC_URI
net-tools: correctly set COPTS and LOPTS
recipetool: create: fix failure handling included dicts
linux-firmware: Remove iwlwifi-8000C-19 SRC_URI
gcc: backport patch to fix miscompilation on mips64
gcc7: Fix unaligned STRD issue on ARM
lttng-modules: Upgrade to 2.9.5 release
sbc: fix license
sbc: move examples to their own package
ca-certificates: Add /etc to SYSROOT_DIRS
go: Fix build with PIE on musl
dhcp: fix build issue with libxml2 support
dhcp: use ${BPN} instead of ${PN} for user
package_ipk.bbclass: handle only whitespace in PACKAGE_EXCLUDE
initramfs-live-install: Add aarch64 arch to COMPATIBLE_HOST.
base.bbclass: increase indent in get_layers_branch_rev() and buildcfg_vars()
lib/oe/recipeutils: fix line splitting in patch_recipe_*
lib/oe/recipeutils: fix find_layerdir() to return absolute paths
recipetool: ignore incidental kernel module source
recipetool: pass absolute source tree path to plugins
systemd: Fix build with musl/mips64
oeqa/runner: Pass the value of buffer, don't force to True
oeqa: Markup further tests for stdout/stderr buffering
testimage: Ensure full logs are shown for failures
maintainers.inc: add Otavio Salvador for go-dep
maintainers.inc: add Khem Raj for libmnl
gtk-doc.bbclass: correctly make the list of directories with shared libraries
oeqa/target/ssh: Drop command/output logging to debug level
oeqa: Clean up logger handling
testimage: Pass the logger into OERuntimeTestContextExecutor.getTarget()
oeqa/qemurunner: Use logger.debug, not logger.info
oeqa/targetcontrol: Drop unused get_target_controller function
oeqa/runqemu: Only show stdout/stderr upon test failure
qemurunner: Ensure logging handler is removed
systemd: Fix build on musl
e2fsprogs-ptest: improve reproducibility
oe-build-perf-report-email.py: add images as MIME objects
gobject-introspection: improve reproducibility
wic: Update canned-wks for systemd to use UUID everywhere
wic: When using --use-uuid make sure that we update the fstab with PARTUUID
systemctl-native: add target.wants to target regex
dpkg: use snapshot.debian.org
curl_7.54.1.bb: improve reproducibility
systemd: remove useless options for mips4
rpm: remove --sysroot from macros on target
libsolv: fix a kernel-devsrc installation issue
grub_2.02.bb: improve reproducibility
python: add PACKAGECONFIG for Berkeley DB module
db: change types to avoid headers changing between architectures
bash-completion: remove rfkill file that util-linux provides
sshcontrol.py: in copy_to() always use scp
masterimage.py: rename parameter "params" in start() to "extra_bootparams"
masterimage.py: fix stop()
masterimage.py: fix issue with calling reboot on masterimage/DUT
selftest/imagefeatures: add basic test for useradd-staticids
oeqa/core/loader: Make _built_modules_dict() support packages correctly
oeqa/selftest/runtime_test: use console in postinst_rootfs_and_boot
image.bbclass: let do_image depend on do_populate_lic of EXTRA_IMAGEDEPENDS
externalsrc: fix ExpansionError if the source dir does not exist yet
image.bbclass: Fix 'vardepsexclude' mechanism for image_cmd_${FSTYPE}
useradd-staticids: explain how to fix the the problem
useradd-staticids: skip recipes without static IDs
feature-arm-vfp.inc: drop unnecessary extra space from TUNE_CCARGS
maintainers.inc: update maintainership
oeqa/selftest/runtime_test: fix postinst_rootfs_and_boot
lib/oe/sstatesig: fix wildcard matching wrong task signature files
nativesdk-packagegroup-sdk-host: remove redundant LICENSE
oeqa/selftest/runtime: force empty root password, use helpers to access qemu
wic: misc.py: Use mmd from mtools instead of syslinux
goarch: There is no GOARCH defined for mips64-n32
kexec-tools: add systemd support for kdump
lib/oe/terminal.py: use an absolute path to execute oe-gnome-terminal-phonehome
useradd.bbclass: print a warn when useradd not found
bind: Convert from ftp to https urls
runqemu: correct rootfs setup to boot an ide hddimg
tzdata: update 2017c
tzcode-native: update to 2017c
qemurunner: fix bad indentation in serial login
util-linux-ptest: various fixes
wic: misc.py: Added more mtools binaries
mdadm: Fix build with gcc < 7
openssl: force soft link to avoid rare race
nettle-ptest: fix a failing test
gawk-ptest: fix a failing test
tcl: remove host path from tclConfig.sh
elfutils: Fix missing library on linker cmdline
perl-native: Provide correct lddlflags
curl: add 'enable-ares' packageconfig option
linux-yocto/4.12: ide:ide-cd: fix kernel panic resulting from missing scsi_req_init
linux-yocto/4.12: configuration fragment updates
linux-yocto/4.9: update to v4.9.57
kern-tools: make fuzzy matching optional
linux-yocto/4.12: stable backports and bug fixes
linux-yocto/4.12: update to v4.12.14
linux-yocto/4.4: update to v4.4.93
linux-yocto/4.12: configuration and feature updates
rng-tools: Fix crazy defaults
oe-buildenv-internal: Fix finding build directory
wic: add 'part-name' argument for naming GPT partitions
bitbake: main: Give a user readable error if we can't locate topdir
bitbake: cooker: fix watching directories with Python 3.6+
bitbake: bitbake: Update version to 1.36.0 for stable release
ref-manual: Updates to "Image Generation" section.
dev-manual, kernel-dev: Replaced yocto-layers with bitbake-layers command
ref-manual: First draft of the 2.4 Migration section
documentation: Updated title page notes and author group
ref-manual, mega-manual: Updated Index of Releases figure
ref-manual, mega-manual: Updated example source repo figure
ref-manual: Updated "Build Image" section for do_image<type>[depends]
sdk-manual: Updated title page note for manual information.
sdk-manual: Minor wording update in title page note.
ref-manual: Updated links to the sdk-manual
yocto-project-qs: Updated references to the sdk-manual
kernel-dev: Updated links to the SDK manual.
sdk-manual: Changed name of the manual.
dev-manual: Updated links to SDK manual.
sdk-manual: Split the Eclipse section into a separate chapter
ref-manual: Added links for do_image and do_image_complete tasks
ref-manual: Replaced "vmdk" with "wic.vmdk"
dev-manual: Updated run QEMU basic syntax step
ref-manual: Updated EFI_PROVIDER variable description
ref-manual: Cleaned up multiple notes for the IMAGE_FSTYPES variable
ref-manual: Clarified build history as creating a single commit per build.
dev-manual: Changed location of maintainers.inc file to meta/conf
dev-manual: Removed a couple instances of "meta-yocto"
ref-manual: Removed "unsafe-references-in-scripts" test from insane class
mega-manual: Added new dev-manual title .PNG file to Figures folder.
mega-manual: Updated author line.
mega-manual.sed: Changed title of dev-manual.
yocto-project-qs: Minor edits for readability
dev-manual: Updated title .PNG file
documentation: Updates to change dev-manual title
yocto-project-qs: Changed links to dev-manual due to title changing.
toaster-manual: Fixed external links
sdk-manual: Fixed two links to changed dev-manual title.
sdk-manual: Converted external links to internal and fixed dev-title link
sdk-manual: Converted external links to internal links.
sdk-manual: Fixed links to dev-manual for changed dev-manual title.
sdk-manual: Fixed link to dev-manual for new title of dev-manual.
ref-manual: Converted external links to internal and fixed dev-manual links
ref-manual: Converted 4 external links to internal links.
ref-manual: Updated links to dev-manual.
ref-manual: Converted two external links to internal links.
ref-manual: Fixed dev-manual links.
ref-manual: Converted two external links to internal links.
ref-manual: Fixed internal links and links to dev-manual
ref-manual: Fixed two internal links.
ref-manual: Fixed local links and links to dev-manual
ref-manual: Changed dev-manual title and fixed links
ref-manual: Fixed "Oe-Core" links and links to dev-manual.
ref-manual: Fixed "Oe-Core" reference links.
ref-manual: Fixed links for "Oe-Core" term.
kernel-dev: Updated dev-manual title
bsp-guide: Changed dev-manual title name
toaster-manual: Updated "Defining the Default Distro and Other Values"

Hello,

The latest release of the Yocto Project 2.3.3 (pyro-17.0.3) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.3/poky-pyro-17.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.3/poky-pyro-17.0.3.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.3/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW51_-_2017-12-20-_Full_Test_Cycle_-_2.3.3_rc1

Thank you to everyone for your contributions to this release!

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...


------------------
yocto-2.3.3 Errata
------------------

Release Name: eclipse-poky-neon-pyro-17.0.3
Branch: pyro
Tag: pyro-17.0.3
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: d6720856accbf2352f2af096a623b916 eclipse-poky-neon-pyro-17.0.3.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.3/eclipse-poky-neon-pyro-17.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.3/eclipse-poky-neon-pyro-17.0.3.tar.bz2

Release Name: eclipse-poky-oxygen-pyro-17.0.3
Branch: pyro
Tag: pyro-17.0.3
Hash: 126e707a6de212feeaaf093edc170aaa74192ce7
md5: 76fafcbc3e6652056a12de050652143d eclipse-poky-oxygen-pyro-17.0.3.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.3/eclipse-poky-oxygen-pyro-17.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.3/eclipse-poky-oxygen-pyro-17.0.3.tar.bz2

Release Name: meta-qt3-pyro-17.0.3
Branch: pyro
Tag: pyro-17.0.3
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: 9fc77e78dda20002c522f4bc17fab3a5 meta-qt3-pyro-17.0.3.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.3/meta-qt3-pyro-17.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.3/meta-qt3-pyro-17.0.3.tar.bz2

Release Name: meta-qt4-pyro-17.0.3
Branch: pyro
Tag: pyro-17.0.3
Hash: 88989ae3abe98b30089e7518d3adabe990c40a10
md5: e32fa92d28944161e168ed1c4b4e73cf meta-qt4-pyro-17.0.3.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.3/meta-qt4-pyro-17.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.3/meta-qt4-pyro-17.0.3.tar.bz2

Release Name: poky-pyro-17.0.3
Branch: pyro
Tag: pyro-17.0.3
Hash: 022df4653576c72752156bef8fda0e1aa46733d2
md5: e9f90fc73e26ba613a78a755d600029d poky-pyro-17.0.3.tar.bz2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.3/poky-pyro-17.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.3/poky-pyro-17.0.3.tar.bz2

---------------
Known Issues
---------------
N/A

--------------
Security Fixes
--------------
bluez5: fix out-of-bounds access in SDP server (CVE-2017-1000250)
binutls: Security fixes for CVE-2017-9955, CVE-2017-9954, CVE-2017-9756, CVE-2017-9755, CVE-2017-9753, CVE-2017-9752, CVE-2017-9751, CVE-2017-9750, CVE-2017-9749, CVE-2017-9748, CVE-2017-9747, CVE-2017-9746, CVE-2017-9745, CVE-2017-9744, CVE-2017-9742, CVE-2017-9040, CVE-2017-9042, CVE-2017-9039, CVE-2017-9038, CVE-2017-9044, CVE-2017-8421, CVE-2017-8398, CVE-2017-8396, CVE-2017-8397, CVE-2017-8395, CVE-2017-8394, CVE-2017-8393, CVE-2017-7614, CVE-2017-7223
ruby: Security fixed for CVE-2017-14064
curl: Security fix for CVE-2017-1000101 and CVE-2017-1000100
tiff: Security fixes for CVE-2017-7593, CVE-2017-7602, CVE-2017-7601, CVE-2017-7598, CVE-2017-7596, CVE-2017-7595, CVE-2017-7594, CVE-2017-7592, CVE-2016-10270, CVE-2016-10269, CVE-2016-10267, CVE-2016-10266, CVE-2016-10268, CVE-2016-10093, CVE-2016-10271
linuux-yocto/4.1: update to 4.1.43 plus bluetooth CVE-2017-1000251
linux-yocto/4.9: bluetooth: CVE-2017-1000251
linux-yocto/4.4: bluetooth: CVE-2017-1000251
linux-yocto/4.10: bluetooth: CVE-2017-1000251

------
Fixes
------
ovmf: Fix build with gcc7
portmaper: checkuri fails.
linux-firmware: Remove iwlwifi-8000C-19 SRC_URI
diffstat: use HTTP mirror for SRC_URI
liburi-perl: update SRC_URI to yoctoproject mirror
v86d: take tarball from debian
staging.bbclass: handle postinst-useradd-* fixmes
runqemu: Add workaround for APIC hang on pre 4.15 kernels on qemux86
cross.bbclass: Remove usage of host flags for cross-compilation
archiver: preserve sysroot paths in configured mode
archiver: avoid archiving source for glibc-locale
archiver.bbclass: adapt do_unpack_and_patch to RSS
archiver.bbclass: fix do_ar_original error for matchbox-desktop
archiver.bbclass: do not cause kernel rebuilds
archiver.bbclass: various fixes for original+diff mode
archiver.bbclass: enhance do_ar_recipe task signature
archiver: Escape recipe name in regex
classes: drop image dependencies on TOPDIR variable
image.bbclass: drop initramfs bundle related code
local.conf.sample: Weakly set BB_DISKMON_DIRS
documenation: Prepared docs for a 2.3.3 point release
build-appliance-image: Update to pyro head revision
poky: Update version to 2.3.3
cross-localedef-native: Include locale_t.h
glibc_2.25: fix building for x86 with -Os (or -fno-omit-frame-pointer)
weston: add patch to set pitch correctly for subsampled textures
lib/oe/terminal.py: use an absolute path to execute oe-gnome-terminal-phonehome
gcc: Use libssp_nonshared linker specs only for ppc/musl
dpkg: Add missing RDEPENDS for dpkg-perl
dpkg: Fix perl modules by moving them to the versioned perl directory
cpan-base.bbclass: Move PERLVERSION and get_perl_version to a new file
populate_sdk_ext: Use prebuilt uninative tarball
bitbake: toaster: allow dots in user path names
bitbake: toaster: reserve HEAD from imported layers
valgrind: enable on mips soft-float
oeqa/sdk: Replace buildiptables for buildlzip tests
oeqa/runtime: Replace buildiptables for buildlzip on runtime tests
image_types.bbclass: Make u-boot signed images more versatile
openssh: Fix key generation with systemd
json-c: backport patch to fix gcc7 compilation
useradd-staticids: don't create username-group if gid is specified
curl: enable threaded resolver
kernel-fitimage: support MIPS (compressed)
kernel-uboot: support compressed kernel on MIPS
kernel-uimage: optimise UBOOT_ENTRYSYMBOL support
kernel-fitimage: unbreak UBOOT_ENTRYSYMBOL support
kernel-fitimage: sanitize dtb section name (unbreak MIPS)
kernel-uimage.bbclass: Fix up generation of uImage from vmlinux
ca-certificates: Fix postinst dependency issues
debianutils: Add a native version (for run-parts)
copyleft_filter.bbclass: restore possiblity to filter on type
selftest/archiver: only execute deploy_archives task
selftest/archiver: add tests for recipe type filtering
openssh: allow to override OpenSSL HostKeys when read-only-rootfs
busybox: add backported patch to support iproute 'scope'
busybox: fix a linking issue
gdb: fix gdbserver not working in musl/mips context
oe-pkgdata-util: package-info: Allow extra variables to be displayed
binutils: apply mingw fix only for binutils-cross-canadian
oe-build-perf-report: use correct x-axis max value in html charts
oe-build-perf-report: allow slashes in {branch} field in tag names
oe-build-perf-report: accept parenthesis in tag names
oeqa/selftest/recipetool: use stable tarball for recipetool create test
wic: accept '-' in bitbake variables
useradd: don't override pseudo environment
bitbake: tests/fetch: handle network failures gracefully
bitbake: bitbake: Fix return value checks from subprocess.call()'s
bitbake: Replace deprecated git branch parameter "--set-upstream"
goarch.bbclass: Replace logic for setting GOARM
wpa_supplicant: fix WPA2 key replay security bug
bitbake: toaster/highlight.pack.js: Fix corrupted file
bitbake: toaster: Remove prettify
image.bbclass: Sorted ctypes to avoid basehash error
bitbake: cooker: add BB_CMDLINE to enable access to UI command line with memres
linux-yocto/4.1: generix86* bsp fix perf issue with gcc >=7
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.1
meta-yocto-bsp: bump 4.1 to latest linux stable kernel for the non-x86 BSPs
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.9
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.10
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.4
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.1
gcc-6.3.inc: Use ucontext_t not struct ucontext.
libproxy: use stable download URL
linux-yocto/4.9: update to v4.9.49
linux-yocto/4.4: update to v4.4.87
(PRE)MIRRORS: fix pattern for npm:// without slash
waffle: fix REQUIRED_DISTRO_FEATURES and PACKAGECONFIG virtual/libgl dependencies
rootfs-postcommands: add test for unsatisfied RRECOMMENDS
rootfs-postcommands: remove empty line
rootfs-postcommands.bbclass: Filter out dangling symlinks in ssh_allow_empty_password()
alsa-utils: Do not hardcode path to /lib/udev
package_rpm.bbclass: disable generation of .build-id links
package_rpm.bbclass: use multithreaded xz compression
rpm: allow arch-dependent binaries in noarch packages
bitbake: cooker.py: Fix layer priority processing
bitbake: toaster: recipe links broken for default layers
bitbake: toaster: edit column list not sorted
bitbake: toaster: set default pokydirname if no external layers
bitbake: toaster: debug message for lists layers missing separators
bitbake: toaster: Order column in Tasks selectable
bitbake: toaster: display error when the fstype select is empty
bitbake: cooker: ensure monkey-patching in collect_bbfiles() gets undone on error
bitbake: cooker: fix watching empty directories
bitbake: cooker: Track directories searched for bbappend/bb files
bitbake.conf: add bzr to HOSTTOOLS_NONFATAL
glibc-locale: add runtime dependency on glibc

We are pleased to announce the meta-intel 8.0 layer for the Yocto Project 2.4 “rocko" release is now available for download.

Tracy Graydon
Intel Corporation

---------------------
8.0-rocko-2.4 ERRATA
---------------------

Release Name: meta-intel-8.0-rocko-2.4
Repo: git://git.yoctoproject.org/meta-intel
Branch: rocko
Tag: 8.0-rocko-2.4
Hash: d68dda959b5bf6f90aa8e5c2f027be324bb68e14
md5: 59a9222e18fcec970b8c84a88fdcd83d
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/meta-intel-8.0-rocko-2.4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/meta-intel-8.0-rocko-2.4.tar.bz2

----------------------
Features/Enhancements
----------------------

Full Yocto Project Compatible - v2
Implementation of Secureboot
Added Out of Tree modules for both iwlwifi-backports and ixgbe
(Ethernet) drivers
Move DPDK, QAT and TLK sections out of meta-intel and created independant layers

See CHANGELOG for additional details

-------------
Known Issues
-------------

12287 - You can only install from one console at a time.

--------------
Security Fixes
--------------
linux-intel: Bump SRCREV - CVE-2017-1000251
linux-yocto/4.4: update to 4.4.87 and fix CVE-2017-1000251

-----
Fixes
-----
layer.conf: Bump Layer due to removal of meta-tlk
meta-tlk: Move to standalone layer
lttng-modules: Fix SRC_URI for Yocto Layer Compatibility
Revert "linux-intel: blacklist snd-soc-skl module"
maintainers: Update with available team members
lttng-modules: also apply patch if linux-intel-rt is preferred kernel
linux-intel/4.9: Update kernel SRCREVs for v4.9.56
CHANGELOG: Add major rocko changes
documentation: add Secure Boot information
linux-intel/4.9: Update kernel SRCREVs
linux-intel: SRCREV updates for kernel and cache
ixgbevf: skip host depmod
ixgbe: skip host depmod
add .gitignore
backport-iwlwifi: Fix version check for Intel Production Kernel
linux-firmware: remove bbappend
backport-iwlwifi: comment about firmware requirements
backport-iwlwifi: don't use AUTOREV
meta-intel.inc: Use grub-efi for x32
meta-qat: Move to independant meta-intel-qat layer
meta-dpdk: Move to independant layer
meta-*/layer.conf: Add LAYERDEPENDS
linux-intel/4.9: Update both SRCREVs
README*: Updates pyro -> rocko
lttng-modules: Add patch for API Change
qat: Move BSP specific configurations from recipes to machine.conf
dpdk: Move BSP specific configurations from recipes to machine.conf
Move dpdk and qat components to meta-dpdk and meta-qat
libyami: use git clone instead of unstable tarball
thermald: use git clone instead of unstable tarball
core-image-tiny: Provide a new image recipe for poky-tiny that boots from RAM
initramfs-live-install-efi bbappend: Fix Yocto Project compatibility
ovmf_%.bbappend: Fix Yocto Project compatibility issue
cryptodev-module_%.bbappend: fix Yocto Project compatibility issue
formfactor_0.0.bbappend: fix Yocto Project compatibility issue
systemd-boot: fix Yocto Project compatibility issue
linux-yocto: fix Yocto Project Compatibility issues
linux-firware_%.bbappend: multiple fixes
linux-intel: SRCREV Updates to 4.9.47
recipes-kernel/linux: Add linux-yocto 4.12 bbappends
dpdk: return 'default' instead of empty string
intel-common-pkgarch: fix iwlwifi rename and add ixgbe
rmc: Add -fno-stack-protector
linux-intel.inc: remove iwlwifi depends and rms
backport-iwlwifi: Add KERNEL_MODULE_PACKAGE_PREFIX
iwlwifi: rename to backport-iwlwifi
ixgbe upgrade to version 5.1.3
linux-intel: Update both SRCREVs
linux-intel: blacklist snd-soc-skl module
Add secureboot selftests
recipes-selftest: add images for use in secureboot selftests
ovmf: add secureboot bits from refkit
linux-intel: Seperate SRC_URI into Kernel and Config
lms: use sh instead of bash in notifyDesktop.sh
linux-intel: Update SRCREV
conf/machine/intel-*: move core-image-minimal-initramfs PACKAGE_INSTALL
images: add core-image-minimal-initramfs bbappend
sbsigntool: depend on openssl10
sbsigntool: port "sbsigntool: stop using gitsm fetcher" from refkit
efilinux: Enable muslx32 build
linux-yocto: Drop 4.1 kernel bbappends
linux-firmware: install iwlwifi LinuxCore driver firmware blobs
xf86-video-mga: upgrade 1.6.4 -> 1.6.5
dpdk-dev-libibverbs: Fix additional warnings
libyami-utils: Fix build with clang
efilinux: Fix build warnings
libyami: Fix build with musl/clang
linux-intel: Update SRCREVs
iwlwifi: skip host install scripts
dpdk: Fix build error on the core2-64
Revert "iwlwifi_git.bb: run make_scripts earlier"
iwlwifi: Fix install_append for usrmerge
dpdk: Link examples with BFD linker
dpdk: Fix build with examples
qat16: Fix build when ld-is-gold is set in DISTRO_FEATURES
libyami: Rename the file to be checked with LIC_FILES_CHKSUM
disable_skylake_sound: Temp disable config for core2-32
linux-intel: Add linux-intel to files search path
linux-intel: Update SRCREV for 4.9.35
dpdk: upgrade to version 17.05
linux-intel: refactor and remove iwlwifi modules for out of tree enablement
intel-common-pkgarch: Add out of tree modules
iwlwifi_git.bb: run make_scripts earlier
iwlwifi: Clean-up and use module_install
iwlwifi: include iwlwifi OOT driver in meta-intel layer.
intel-microcode: Upgrade recipe version
linux-yocto-4.1: Fix kernel version
thermald: Add openmp to dependencies when building with clang
meta-intel.inc: Ensure thermald is installed for most targets
linux-yocto/4.1: Update kernel to version 4.1.41
linux-yocto/4.4: Update kernel to version 4.4.76
intel-gpu-tools: Upgrade to version 1.19
uefi-comboapp.bbclass: Split signing functionality into its own bbclass
uefi-comboapp.bbclass: support multiple UEFI combo apps + fixes
cryptodev-module: update 0001-zc-Force-4.10-get_user_pages_remote-API.patch
wic: Move WKS newer common location
lms8: Added Intel AMT ME notification infra patch to LMS.
thermald: upgrade to 1.6
meta-intel.inc: Set default DISK_SIGNATURE_UUID
canned-wks: add generic-bootdisk kickstart template
classes: Add uefi-comboapp bbclass
recipes: move sbsigntool from refkit to meta-intel
systemd-boot_%.bbappend: compile and deploy EFI stub
lms8: Added 0003-Fix-device-file-referanc* patch which uses /dev/mei0.
Revert "meta-intel: Add override for EFI_PROVIDER and x32"
rmc: split rmc.bb and rmc-efi.bb into separate recipes
meta-tlk: Add linux-intel bbappend
meta-tlk: merge linux-yocto_tlk.inc with bbappend
rmc: add install.conf for platforms without internal storage
linux-intel: bump srcrevs
core-image-tiny-initramfs: Fixes WKS_FILE for Intel MACHINES
Revert "world-broken: Add for dpdk packages"
libva-intel-driver: upgrade to 1.8.3
dpdk-dev-libibverbs: suppress gcc7 warnings
Revert "linux-yocto/4.9: Remove bbappends"
meta-intel: Add override for EFI_PROVIDER and x32
world-broken: Add for dpdk packages
systemd-boot: disable RMC for systemd-boot EFI_PROVIDER
linux-yocto/4.1: Update SRCREVs to fix build
README: Updated referenced section heading for submitting change
linux-intel: Update to 4.9.30
libyami: Update to 1.2.0
dpdk: Disable build for MUSL
iucode-tool: upgrade to 2.1.2
rmc: add support for Broxton-M based Joule board (rev. 1F1)
rmc: add fingerprint for generic Broxton-M (rev. 1F1)
rmc-db: allow multiple fingerprint per board directory
layer.conf: Add LAYERSERIES_COMPAT markup to layer.conf
linux-intel/4.9: Update yocto-kernel-cache SRCREV

Hello,

The latest release of the Yocto Project 2.4 (rocko-18.0.0) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/poky-rocko-18.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/poky-rocko-18.0.0.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW43_-_2017-10-23_-_Full_Test_Cycle_2.4_RC3

Thank you to everyone for all your hard work on this release!

Sincerely,

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...


-------------------
yocto-2.4 Errata
-------------------

Release Name: eclipse-poky-mars-rocko-18.0.0
Branch: mars/rocko
Tag: mars/rocko-18.0.0
Hash: 92aa0e79e8b01c56f0670af3cd8296ec68b43350
md5: a948420534a1e1eb6c1eb3b5858eb599
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/eclipse-poky-mars-rocko-18.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/eclipse-poky-mars-rocko-18.0.0.tar.bz2

Release Name: eclipse-poky-neon-rocko-18.0.0
Branch: neon/rocko
Tag: neon/rocko-18.0.0
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: 7a47832683c63cd1dd1c82078f886220
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/eclipse-poky-neon-rocko-18.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/eclipse-poky-neon-rocko-18.0.0.tar.bz2

Release Name: eclipse-poky-oxygen-rocko-18.0.0
Branch: oxygen/rocko
Tag: oxygen/rocko-18.0.0
Hash: 126e707a6de212feeaaf093edc170aaa74192ce7
md5: 50c5d209e11d0ae84de6046be8d50d2c
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/eclipse-poky-oxygen-rocko-18.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/eclipse-poky-oxygen-rocko-18.0.0.tar.bz2

Release Name: meta-qt3-rocko-18.0.0
Branch: rocko
Tag: rocko-18.0.0
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: 3755300f0f46b519735bf8be1e022515
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/meta-qt3-rocko-18.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/meta-qt3-rocko-18.0.0.tar.bz2

Release Name: meta-qt4-rocko-18.0.0
Branch: rocko
Tag: rocko-18.0.0
Hash: f313dbee2ac3d5fcc9801407947d3cb6cfb90b5d
md5: 5af43b99008f9e33469b98621545cb0d
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/meta-qt4-rocko-18.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/meta-qt4-rocko-18.0.0.tar.bz2

Release Name: poky-rocko-18.0.0
Branch: rocko
Tag: rocko-18.0.0
Hash: 65d23bd7986615fdfb0f1717b615534a2a14ab80
md5: 69f9f9ffcb2a7b7002d625c79eb93763
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.4/poky-rocko-18.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.4/poky-rocko-18.0.0.tar.bz2


------------------------------
New Features / Enhancements
------------------------------

* Linux kernel 4.12, 4.10, 4.9 (LTS/LTSI), 4.4 (LTS)
* gcc 7.2
* glibc 2.26
* Significant work on binary reproducibility - >98% of packages generated when building core-image-sato are now reproducible.
* Support for Vulkan 3D graphics/compute API, enabled by default in poky distro configuration
* New "distrooverrides" class to selectively turn DISTRO_FEATURES into overrides (enabling bbappends with functionality conditional upon DISTRO_FEATURES)
* New VOLATILE_LOG_DIR variable to allow making /var/log persistent
* Support for merged / and /usr with "usrmerge" DISTRO_FEATURES item
* Parallelised rpm/ipk/deb package creation for improved performance
* Go improvements:
- Added Go toolchain support
- Added support for ARMv5 targets
- Enhancements to go.bbclass for go-based recipes:
- Added do_unpack function to handle common cases
- Added GO_INSTALL_FILTEROUT variable
- Separate source and build directories
- Enable parallel build
- Use global Go build flags
- Split out the Go runtime into a separate go-runtime recipe
- Build the Go runtime as a shared library
* Python improvements:
- python 2 -> 3 migration for bmap-tools, libxml2, opkg-utils, parted.
- The main "python3" package now brings in all of the standard Python 3 distribution rather than just a subset, matching the typical expected behaviour based on traditional Linux distributions.
* wic image creator enhancements:
- New 'wic cp' command to copy files into an ext/vfat partition
- New 'wic ls' command to list files in an ext/vfat partition
- New 'wic rm' command to delete files in an ext/vfat partition
- New 'wic write' command to write an image to a device (e.g. SD card)
- New wks option --mkfs-extraopts
- Added option to skip changing fstab
- Allow multiple /boot partitions with different content
- Switch to using --use-uuid by default
* devtool/recipetool enhancements:
- devtool add now has explicit options to specify source revision and branch when fetching from a repository
- devtool deploy-target can now strip binaries when deploying
- New "devtool export" and "devtool import" subcommands to enable exchanging work-inprogress workspace content between users/build machines
- New "devtool find-recipe" subcommand to simply find a recipe and print its path
- recipetool create plugins can now set LICENSE, LIC_FILES_CHKSUM, PN and PV more easily
- recipetool create / devtool add / devtool upgrade will check/set the branch when a revision is provided
- recipetool create / devtool add can now detect Eclipse licenses
- recipetool create / devtool add will disable PREMIRRORS and MIRRORS by default
- recipetool create / devtool add will use the repository name as a fallback for the new recipe name
* BitBake improvements:
- Reworked memory resident mode into persistent mode, making it practically usable (set BB_SERVER_TIMEOUT to a time in seconds to stay resident between commands)
- "require" and "include" directives can now accept multiple files
- "require" and "include" directives can now accept no parameter (making dynamic includes easier)
- New BBFILES_DYNAMIC variable which allows activating layer content only when some other layers are present - i.e. allowing extension of content provided by other layers without creating hard dependencies
- Now fires a BuildStarted event for each configuration when multiconfig is enabled
- Support shallow mirror tarballs
- Support keeping extra refs for shallow git fetches
- Support removing arbitrary revs for shallow git fetches
- Support per-branch/per-url depths for shallow git fetches
- New "git-make-shallow" script to make a git repo shallow
- Tinfoil API can now run full builds
- Tinfoil API gained functions for getting cached recipe information
* Package QA improvements:
- INSANE_SKIP will now work without a package specifier (i.e. will affect all packages within the recipe)
- Added extensible framework for recipe-wide QA tests
- Added package QA check for uppercase recipe names
- Added package QA check for merged /usr
- Improved handling of runtime file dependencies
* RPM packaging improvements:
- RPM feed signing now re-enabled
- RPM dependency generation now re-enabled
- Support for signing files in the RPM payload
- Use multithreaded xz compression (instead of single-threaded gz) for better performance and reduced disk space usage
* systemd improvements:
- Enable resolved and networkd by default when systemd enabled
- Added systemd service files to rng-tools, watchdog, dhcp (for dhclient)
- Import systemd-machine-units recipe from meta-systemd
- Added knobs for compiler specific nn, ar, ranlib
* Image generation improvements:
- Make vmdk/vdi/qcow2 into conversion types
- Make u-boot signed images more versatile by making "u-boot" a conversion type
- Support lz4-compressed squashfs (squashfs-lz4 in IMAGE_FSTYPES)
- Allow different filesystems to be used for live images
- Made it easier to override image LICENSE by making "MIT" a weak default
- ROOTFS_RO_UNNEEDED is now a weak default allowing it to be changed more easily
* Kernel-related improvements:
- Move Device Tree support to kernel.bbclass
- Support appending device tree to kernel
- kernel-yocto: configuration updates: x86 features
- linux-yocto: added usb-net configs by default
- linux-yocto/meta: bluetooth: Adds BT_BREDR and BT_LE, which are needed as dependencies
- linux-yocto/meta: configuration feature additions (bpf, sysrq, kexec, kdump, virtualbox)
- linux-yocto/meta: configuration changes (wifi, kexec and nft)
- linux-yocto: use weak default for LINUX_VERSION_EXTENSION and LINUX_KERNEL_TYPE to make them easier to override
* BSP improvements:
- Added dtb for Beaglebone Green board to beaglebone BSP
- Support for musl-x32 targets
- Added wic.bmap to IMAGE_FSTYPES for mpc8315e-rdb
- u-boot: enable dhcp for MPC8315 board
- u-boot: update nios2 device tree for 10m50 board
- Enabled pci feature for qemux86 / qemux86-64
- Added nios2 to list of qemu targets (poky-only)
- systemd-boot: Make EFI_CC overridable
* Buildhistory improvements:
- Now makes a single commit per build rather than one per subdirectory in the repository (assuming commits are enabled with BUILDHISTORY_COMMIT = "1")
- ptest results can now be included in buildhistory, allowing you to see improvements/regressions
- buildhistory-diff now excludes paths from the output to make it easier to read
* Layer management improvements:
- bitbake-layers now has a "create-layer" subcommand to create new empty layers (via a plugin / template in OE-Core)
- bitbake-layers now checks layer dependencies before adding
- New LAYERSERIES_COMPAT and LAYERSERIES_CORENAMES variables, allowing layers to specify which versions of the core project they are compatible with
* SDK improvements:
- Added support for generating manifest files for extensible SDKs
- Added support for executing pre-target commands
- Added check for LD_LIBRARY_PATH in the SDK environment setup script to avoid interference
- Extended recipes to nativesdk: python3-pip, python3-setuptools, shared-mime-info
* Symlinks can now be used for DEPLOY_DIR_IPK/RPM/DEB and other path variables
* Added recipes: assimp, autoconf-archive, go-dep, kmscube, libnsl2, libva-utils, llvm, ninja, re2c, vulkan, vulkan-demos
* Extended recipes to native: debianutils, gawk, libpcap
* Default mirrors class now provides git repo fallbacks using the https protocol
* File system permissions now easier to append to with FILESYSTEM_PERMS_TABLES (default now set in bitbake.conf)
* openssh: allow overriding OpenSSL HostKeys when read-only-rootfs
* busybox: made SYSLOGD optional
* cmake.bbclass: use `cmake --build` to build & install, allowing make replacements such as ninja to be used
* runqemu improvements:
- Automatically add a TFTP directory for slirp boot
- Use virtio to mount cdrom drives
- Added --debug and --quiet
- Support tar.bz2 and .tar.gz images
* cve-check class improvements:
- Detect patched CVEs also from patch file names
- Make warning contain CVE IDs
- Use weak assignment for default CVE_PRODUCT
- Set correct CVE_PRODUCT in numerous recipes
* cross-canadian.bbclass: added ilp32 support
* gcc: Introduce a knob to configure gcc to default to PIE
* glibc-package.inc: added support for armeb of multilib
* initramfs-framework: include install-efi module in recipe for installation
* initramfs-framework: module to support boot live image
* initscripts: Populate volatile from existing file
* iproute2: added tipc support
* linuxloader.bbclass: added musl libc support
* module.bbclass: Added devshell support
* live-vm-common: added MKDOSFS_EXTRAOPTS variable
* oe-pkgdata-util: added unescape option to read-value subcommand
* oe-pkgdata-util: package-info: Allow extra variables to be displayed
* Added new PACKAGE_DEBUG_SPLIT_STYLE = "debug-with-srcpkg" option to split debug source out to a separate package
* Drop Qt4 and a number of perl recipes from the LSB images
* README.LSB has been added to describe the level of compatibility with LSB
* perf: enable libunwind
* rootfsdebugfiles.bbclass: added a optional parameter to choose file mode
* rootfs-postcommands: added test for unsatisfied RRECOMMENDS
* scripts/contrib/patchtest.sh: new script to run patchtest on local branch
* scripts/contrib/patchreview.py: new script to report recipe patch upstreamability statistics
* oe-setup-builddir's initial message is now entirely in conf-notes.txt making it completely overridable
* report-error class now includes the host distro identifier string when using uninative
* distrodata.bbclass: added UPSTREAM_VERSION_UNKNOWN and UPSTREAM_CHECK_UNRELIABLE
* Packaging enhancements:
- Split packages out of linux-firmware for mt7601u WiFi chip, netronome, Broadcom BCM43362, Intel Bluetooth, Marvell PCIe WiFi, iwlwifi-3160-[10-17], Qualcomm QCA, i.MX SDMA
- binutils: libbfd is now packaged in a separate "libbfd" package in order to save space when some tools (notably perf) are installed.
- util-linux: su is now packaged in a separate "util-linux-su" package (only built when "pam" is in DISTRO_FEATURES), since su is normally provided by shadow and thus the util-linux version shouldn't be installed unless it is needed. The main util-linux package RDEPENDS on this package when "pam" is in DISTRO_FEATURES.
- util-linux: switch_root is now packaged in a separate "util-linux-switch-root" package for small initramfs images which don't need the whole util-linux package (nor the busybox binary which is much larger than switch_root). The main util-linux package RRECOMMENDS this package.
- util-linux: ionice is now packaged in a separate "util-linux-ionice" package for convenience. The main util-linux package RRECOMMENDS this package.
- initscripts: sushell is now package in a separate "initscripts-sushell" package to allow systemd to pull it in when selinux is enabled without needing to pull in the entire initscripts package.
- glib-2.0 now RRECOMMENDS shared-mime-info, as large portions of GIO are not that useful without the MIME database. This can be removed using BAD_RECOMMENDATIONS if shared-mime-info is too large and isn't required.
* Check and error during build startup if filesystem is case-insensitive
* utils.py: added helper function for optional include files
* create-pull-request: support format-patch options


------------------
Known Issues
------------------

* On systems with Python 3.6, devtool modify, devtool upgrade and devtool extract will fail with an error "FileNotFoundError: [Errno 2] No such file or directory: '.../initial_rev". On such systems, the same underlying issue will also prevent bitbake from noticing any bbappends and recipes that are added while bitbake is resident in memory (i.e. BB_SERVER_TIMEOUT is set), but changes to existing files are unaffected. There is a bitbake patch for the issue here: https://patchwork.openembedded.org/patch/145092/. This fix is planned to be incorporated in a point release. For more information see https://bugzilla.yoctoproject.org/show_bug.cgi?id=12185


-------------------------
Migration instructions
-------------------------

For details on changes that you might need to make when migrating to the
Yocto Project 2.4 release from previous releases, please see the following
manual section:

http://www.yoctoproject.org/docs/2.4/ref-manual/ref-manual.html#moving-to-the-yocto-project-2.4-release


------------------
Security Fixes
------------------

* bash: CVE-2016-0634, CVE-2017-5932
* binutils: CVE-2017-6969, CVE-2017-7209, CVE-2017-7210, CVE-2017-8392, CVE-2017-12448, CVE-2017-12449. CVE-2017-12451, CVE-2017-12452, CVE-2017-12454, CVE-2017-12455, CVE-2017-12456, CVE-2017-12457
* bluez5: CVE-2017-1000250
* cairo: CVE-2017-7475, CVE-2017-9814
* connman: CVE-2017-12865
* curl: CVE-2017-1000099, CVE-2017-1000100, CVE-2017-1000101 CVE-2017-12458, CVE-2017-12459, CVE-2017-12799, CVE-2017-12967, CVE-2017-13710
* elfutils: CVE-2017-7607, CVE-2017-7608, CVE-2017-7609, CVE-2017-7610, CVE-2017-7611, CVE-2017-7612, CVE-2017-7613, CVE-2016-10254, CVE-2016-10255
* ffmpeg: CVE-2017-14054, CVE-2017-14055, CVE-2017-14056, CVE-2017-14057, CVE-2017-14058, CVE-2017-14059, CVE-2017-14169, CVE-2017-14170, CVE-2017-14171, CVE-2017-14222, CVE-2017-14223, CVE-2017-14225
* ghostscript: CVE-2017-7975, CVE-2016-7977, CVE-2016-7978, CVE-2016-7979, CVE-2016-8602, CVE-2017-9216, CVE-2017-9611, CVE-2017-9612, CVE-2017-9739, CVE-2017-9726, CVE-2017-9727, CVE-2017-9835, CVE-2017-11714
* lame: CVE-2017-13712
* libarchive: CVE-2017-14166, CVE-2017-14502
* libgcrypt: CVE-2017-0379, CVE-2017-7526
* libpcre2: CVE-2017-7186, CVE-2017-8786
* libsndfile1: CVE-2017-6892, CVE-2017-8361, CVE-2017-8362, CVE-2017-8363, CVE-2017-8365
* libsoup: CVE-2017-2885
* libtasn1: CVE-2017-10790
* libtirpc: CVE-2017-8779
* libxml2: CVE-2017-0663, CVE-2017-5969, CVE-2017-8872, CVE-2017-9047, CVE-2017-9048, CVE-2017-9049, CVE-2017-9050
* libxslt: CVE-2017-5029
* linux-yocto/4.4: CVE-2017-1000251
* linux-yocto/4.9: CVE-2017-1000251
* linux-yocto/4.10: CVE-2017-7346, CVE-2017-7541, CVE-2017-8890, CVE-2017-10911, CVE-2017-11472, CVE-2017-1000251, CVE-2017-1000363, CVE-2017-1000380
* linux-yocto/4.12: CVE-2017-1000251
* ncurses: CVE-2017-13732, CVE-2017-13734, CVE-2017-13730, CVE-2017-13729, CVE-2017-13728, CVE-2017-13731
* python-numpy, python3-numpy: CVE-2017-12852
* qemu: CVE-2017-13672, CVE-2017-13673, CVE-2017-13711, CVE-2017-14167
* rpcbind: CVE-2017-8779
* ruby: CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229, CVE-2017-14064
* shadow: CVE-2017-12424
* sqlite3: CVE-2017-10989, CVE-2017-13685
* subversion: CVE-2017-9800
* systemd: CVE-2017-1000082
* taglib: CVE-2017-12678
* tiff: CVE-2017-9147, CVE-2017-9936, CVE-2017-10668, CVE-2017-11335, CVE-2017-13726, CVE-2017-13727
* webkitgtk: CVE-2017-2538
* wget: CVE-2017-6508
* wpa_supplicant: CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088 (KRACK)
* xserver-xorg: CVE-2017-10971


------------------
Recipe Upgrades
------------------

* acpica: upgrade 20150515 -> 20170303
* adwaita-icon-theme: Upgrade 3.22.0 -> 3.24.0
* alsa-lib: 1.1.3 -> 1.1.4.1
* alsa-plugins: 1.1.1 -> 1.1.4
* alsa-utils: 1.1.3 -> 1.1.4
* apr: 1.5.2 -> 1.6.2
* apr-util: 1.5.4 -> 1.6.0
* apt: Upgrade to 1.2.24
* atk-spi2-core: Upgrade 2.24.0 -> 2.24.1
* atk: Upgrade 2.22 -> 2.24
* at-spi2-atk : 2.22.0 -> 2.24.1
* at-spi2-core: 2.22.0 -> 2.24.0
* automake: 1.15 -> 1.15.1
* babeltrace: update to 1.5.3
* bash: 4.3.30 -> 4.4
* bash-completion: upgrade to 2.7
* bind: 9.10.3-P3 -> 9.10.5-P3
* binutils: Upgrade to 2.29
* bluez5: Upgrade 5.43 -> 5.46
* bmap-tools: upgrade to v3.4
* boost: Upgrade to 1.64.0
* btrfs-tools: update to 4.12
* ca-certificates: update to 20170717
* cairo: Upgrade 1.14.8 -> 1.14.10
* clutter-1.0: Upgrade 1.26.0 -> 1.26.2
* clutter-gst-3.0: Upgrade 3.0.22 -> 3.0.24
* cmake: Upgrade to 3.8.2
* connman: upgrade to 1.34
* coreutils: 8.26 -> 8.27
* cryptodev: 1.8 -> 1.9
* cups: upgrade to 2.2.4
* curl: update to 7.54.1
* curl: upgrade to 7.54.0
* dbus: upgrade to 1.10.20
* dbus-test: upgrade to 1.10.20
* debianutils: 4.8.1 -> 4.8.1.1
* dhcp: 4.3.5 -> 4.3.6
* diffutils: upgrade to 3.6
* dmidecode: update to 3.1
* dnf: update to 2.6.3
* dpkg: Upgrade to 1.18.24
* dropbear: upgrade 2016.74 -> 2017.75
* dtc: upgrade to 1.4.4
* e2fsprogs: 1.43.4 -> 1.43.5
* ed: update to 1.14.2
* elfutils: 0.168 -> 0.170
* epiphany: upgrade to 3.24.3
* ethtool: Upgrade to 4.11
* eudev: update to 3.2.2
* expat: Upgrade to 2.2.3
* ffmpeg: update to 3.3.3
* file: 5.30 -> 5.31
* fontconfig: Upgrade 2.12.1 -> 2.12.4
* freetype: 2.7.1 -> 2.8
* gcc: Upgrade to 7.2.0 release
* gdbm: update to 1.13
* gdb: Upgrade to 8.0 release
* gdk-pixbuf: Upgrade 2.36.5 -> 2.36.8
* ghostscript: move to version 9.21
* git: 2.11.1 -> 2.13.3
* glib-2.0: Upgrade 2.50.3 -> 2.52.3
* glibc: Upgrade to 2.26
* gnome-desktop3: update to 3.24.2
* gnome-themes-standard: Upgrade 3.22.2 -> 3.22.3
* gnu-efi: Upgrade package to 3.0.6 and refresh patches
* gnupg: 2.1.18 -> 2.2.0
* gnutls: Upgrade to 3.5.13
* gobject-introspection: update to 1.52.1
* go: upgrade to 1.9
* gperf: upgrade to 3.1
* gpgme: 1.8.0 -> 1.9.0
* gptfdisk: update to 1.0.3
* grep: upgrade to 3.1
* grub: Update to 2.02
* gstreamer1.0-libav: upgrade to version 1.12.2
* gstreamer1.0-omx: upgrade to version 1.12.2
* gstreamer1.0-plugins-bad: upgrade to version 1.12.2
* gstreamer1.0-plugins-base: upgrade to version 1.12.2
* gstreamer1.0-plugins-good: upgrade to version 1.12.2
* gstreamer1.0-plugins-ugly: upgrade to version 1.12.2
* gstreamer1.0-python: upgrade to version 1.12.2
* gstreamer1.0-rtsp-server: upgrade to version 1.12.2
* gstreamer1.0: upgrade to version 1.12.2
* gstreamer1.0-vaapi: upgrade to version 1.12.2
* gtk+3: 3.22.8 -> 3.22.17
* gtk-icon-utils-native: 3.22.16 -> 3.22.17
* harfbuzz: upgrade to 1.4.8
* hdparm: Upgrade to 9.52
* icu: update to 59.1
* iproute2: Upgrade 4.10.0 -> 4.11.0
* iso-codes: upgrade to 3.75
* json-c: Upgrade to 0.12.1 release
* json-glib: upgrade 1.2.2 -> 1.2.8
* kconfig-frontends: update to 4.10.0.1
* kmod: upgrade to 24
* libarchive: 3.2.2 -> 3.3.2
* libatomic-ops: Upgrade to 7.6.0
* libbsd: 0.8.3 -> 0.8.6
* linux-libc-headers: update to 4.12
* libcroco: Upgrade 0.6.11 -> 0.6.12
* libdnf: update to 0.9.3
* libdrm: 2.4.75 -> 2.4.83
* libepoxy: 1.4.0 -> 1.4.3
* liberation-fonts: update to 2.00.1
* libevdev: Upgrade 1.5.6 -> 1.5.7
* libevent: 2.0.22 -> 2.1.8
* libfakekey: upgrade to 0.3+gitAUTOINC+7ad885912e
* libgcrypt: upgrade to 1.8.0
* libgpg-error: 1.26 -> 1.27
* libinput: upgrade to 1.8.1
* libjpeg-turbo: upgrade to 1.5.2
* libnewt: 0.52.19 -> 0.52.20
* libpciaccess: 0.13.4 -> 0.13.5
* libpcre2: 10.22 -> 10.23
* libpcre: upgrade 8.40 -> 8.41
* libpng: 1.6.28 -> 1.6.31
* libpthread-stubs: upgrade to 0.4
* librsvg: 2.40.16 -> 2.40.18
* libsndfile1: 1.0.27 -> 1.0.28
* libsolv: upgrade to 0.6.28
* libsoup-2.4: Upgrade 2.56.0 -> 2.58.2
* libtasn1: upgrade 4.10 -> 4.12
* libtiff: Upgrade to 4.0.8
* libtirpc: upgrade to 1.0.2
* libunwind: update to 1.2
* liburcu: update to 0.10.0
* liburi-perl: Upgrade to 1.72
* libva: upgrade to 1.8.3
* libx11: 1.6.4 -> 1.6.5
* libx11-diet: 1.6.4 -> 1.6.5
* libxml-namespacesupport-perl: Upgrade 1.11 -> 1.12
* libxml-sax-base-perl: upgrade to 1.09
* libxml-simple-perl: Upgrade to 2.24
* linux-firmware: bump to latest linux-firmware git revision
* linux-yocto/4.10: update to v4.10.17
* linux-yocto/4.12: update to v4.12.12
* linux-yocto/4.4: update to v4.4.87
* linux-yocto/4.9: update to v4.9.49
* linux-yocto-dev: bump to 4.12+
* linux-yocto-rt: 4.9-rt18
* logrotate: Bump to 3.12.3
* lsbinitscripts: Upgrade to 9.72
* ltp: upgrade to upstream latest commit on 20170804
* lttng-modules: update to 2.9.3
* lttng-tools: update to 2.9.5
* lttng-ust: update to 2.9.1
* lz4: update to lastest 1.7.4
* lzip: Upgrade 1.18 -> 1.19
* lzo: Upgrade 2.09 -> 2.10
* man-pages: Upgrade to 4.11
* matchbox-desktop: Upgrade to 2.2
* mc: upgrade to 4.8.19
* mesa: Upgrade to 17.1.7 release
* minicom: upgrade to 2.7.1
* mmc-utils: Upgrade to latest git version
* mobile-broadband-provider-info: upgrade to 20170310
* mpeg2dec: upgrade to version 0.5.1
* mpg123: upgrade to 1.25.6
* musl: Upgrade to latest master
* nasm: Upgrade 2.12.02 -> 2.13.01
* ncurses: 6.0+20161126 -> 6.0+20170715
* nfs-utils: upgrade to 2.1.1
* npth: update to 1.5
* nspr: upgrade to 4.16
* nss: Update to 3.31.1
* ofono: upgrade to 1.20
* openssh: upgrade to 7.5p1
* openssl: add a 1.1 version (not selected by default)
* openssl: Upgrade 1.0.2k -> 1.0.2l
* opkg: upgrade to v0.3.5
* opkg-utils: rename recipe to follow versioned releases
* orc: upgrade to 0.4.27
* ovmf: Update to latest
* pango: 1.40.3 -> 1.40.6
* pciutils: upgrade to 3.5.5
* piglit: Update to current git master
* pinentry: update to 1.0.0
* pkgconfig: upgrade 0.29.1 -> 0.29.2
* poky: bump poky lsb to linux 4.9
* psplash: upgrade to latest git revision
* ptest-runner: Upgrade to to 2.1+gitAUTOINC+78afe246fb
* python3-docutils: update to 0.14
* python3-git: upgrade to 2.1.5
* python3-mako: update to 1.0.7
* python3-pygobject: update to 3.24.1
* python*-git: Upgrade to version 2.1.3
* python-numpy: Upgrade to 1.13.1
* python*-setuptools: update to 36.2.7
* python3: update to 3.5.3
* qemu: upgrade to version 2.10.0
* ruby: upgrade to 2.4.1
* screen: upgrade to 4.6.1
* speex: upgrade 1.2rc2 -> 1.2.0
* sqlite3: upgrade to 3.20.0
* strace: upgrade to 4.18
* subversion: Upgrade 1.9.5-> 1.9.6
* sudo: upgrade to 1.8.20p2
* sysprof: update to 3.24.1
* sysstat: upgrade to 11.5.7
* systemd: update to 234
* tcl: 8.6.6 -> 0.8.7
* trace-cmd: update to 2.6.1
* u-boot: Upgrade to 2017.09
* uninative: Update to 1.7 uninative release
* util-linux: upgrade to 2.30
* vala: upgrade to 0.36.4
* valgrind: Update 3.12.0 -> 3.13.0
* vte: Upgrade 0.46.1 -> 0.48.3
* wayland-protocols: upgrade to 1.10
* webkitgtk: update to 2.16.6
* xf86-input-libinput: Upgrade 0.24.0 -> 0.25.1
* xkbcomp: Upgrade 1.3.1 -> 1.4.0
* xkeyboard-config: Upgrade 2.20 -> 2.21
* xserver-xorg: Upgrade 1.19.1 -> 1.19.3

Hello,

The latest release of the Yocto Project 2.3.2 (pyro-17.0.2) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.2/poky-pyro-17.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.2/poky-pyro-17.0.2.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.2/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW38_-_2017-09-20-_Full_Test_Cycle_-_2.3.2_rc1

Thank you to everyone for your contributions to this release!

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...


------------------
yocto-2.3.2 Errata
--------------------

Release Name: eclipse-poky-mars-pyro-17.0.2
Branch: mars/pyro
Tag: mars/pyro-17.0.2
Hash: 92aa0e79e8b01c56f0670af3cd8296ec68b43350
md5: 127844bae64343d1397c12d04eb2bf46
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.2/eclipse-poky-mars-pyro-17.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.2/eclipse-poky-mars-pyro-17.0.2.tar.bz2

Release Name: eclipse-poky-neon-pyro-17.0.2
Branch: neon/pyro
Tag: neon/pyro-17.0.2
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: 5a10f42077876d72caafa1e15d8efb8b
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.2/eclipse-poky-neon-pyro-17.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.2/eclipse-poky-neon-pyro-17.0.2.tar.bz2

Release Name: meta-qt3-pyro-17.0.2
Branch: pyro
Tag: pyro-17.0.2
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: 60b56ee643f21dd576fda1278a1f5f36
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.2/meta-qt3-pyro-17.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.2/meta-qt3-pyro-17.0.2.tar.bz2

Release Name: meta-qt4-pyro-17.0.2
Branch: pyro
Tag: pyro-17.0.2
Hash: 88989ae3abe98b30089e7518d3adabe990c40a10
md5: c9f40bd1022ee9219f179bc8b4e46d94
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.2/meta-qt4-pyro-17.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.2/meta-qt4-pyro-17.0.2.tar.bz2

Release Name: poky-pyro-17.0.2
Branch: pyro
Tag: pyro-17.0.2
Hash: ce26a57e04ad65c02087629701d96448a44e73d5
md5: 97e770b63320860fc0c12cad23480f4a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.2/poky-pyro-17.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.2/poky-pyro-17.0.2.tar.bz2


---------------
Known Issues
---------------
N/A

---------------
Security Fixes
---------------
linuux-yocto/4.1: update to 4.1.43 plus bluetooth CVE-2017-1000251
linux-yocto/4.9: bluetooth: CVE-2017-1000251
linux-yocto/4.4: bluetooth: CVE-2017-1000251
linux-yocto/4.10: bluetooth: CVE-2017-1000251
linux-yocto/4.10: CVE & misc fixes
libxml2: Fix CVE-2017-8872
taglib: Security fix CVE-2017-12678
ghostscript: CVE-2017-9727, -9835, -11714
ghostscript: fix several CVEs by adding bounds checking
libtasn1: CVE-2017-10790
libsndfile1: Fix CVE-2017-8363
libsndfile1: Fix CVE-2017-8362
libsndfile1: Fix CVE-2017-8361 and CVE-2017-8365
libsndfile1: Fix CVE-2017-6892
wget: Security fix CVE-2017-6508
xserver-xorg: Fix CVE-2017-10971
ruby: fix CVE-2017-922{6-9}
ruby: fix CVE-2017-9224
connman: Fix for CVE-2017-12865
kernel.bbclass: set CVE_PRODUCT to linux_kernel if not set by recipe
cve-check.bbclass: use weak assignment for default CVE_PRODUCT
wpa-supplicant_2.6.bb: set CVE_PRODUCT to wpa_supplicant
sqlite3.inc: set CVE_PRODUCT to sqlite
quota_4.03.bb: set CVE_PRODUCT to linux_diskquota
lttng-ust_2.9.1.bb: set CVE_PRODUCT to ust
python.inc: set CVE_PRODUCT to python
nspr_4.14.bb: set CVE_PRODUCT to netscape_portable_runtime
libsndfile1_1.0.28.bb: set CVE_PRODUCT to libsndfile
libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate
libpcre2_10.23.bb: set CVE_PRODUCT to pcre2
libpcre_8.40.bb: set CVE_PRODUCT to prce
icu.inc: set CVE_PRODUCT to international_components_for_unicode
glibc-common.inc: set CVE_PRODUCT to glibc
glib.inc: set CVE_PRODUCT to glib
gcc-common.inc: set CVE_PRODUCT to gcc
flac_1.3.1.bb: set CVE_PRODUCT to libflac
eglinfo.inc: set CVE_PRODUCT to eglinfo
bluez5.inc: set CVE_PRODUCT to bluez
acpid.inc: set CVE_PRODUCT to acpid2
systemd: refuse to load units with errors (CVE-2017-1000082)
libxml2: Fix CVE-2017-0663
libxml2: Fix CVE-2017-5969
libxml2: Fix CVE-2017-9049 and CVE-2017-9050
libxml2: Fix CVE-2017-9047 and CVE-2017-9048
libgcrypt: fix CVE-2017-7526
libgcrypt: fix CVE-2017-9526

---------------
Fixes
---------------
image.bbclass: Sorted ctypes to avoid basehash error
bitbake: cooker: add BB_CMDLINE to enable access to UI command line with memres
linux-yocto/4.1: generix86* bsp fix perf issue with gcc >=7
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.1
meta-yocto-bsp: bump 4.1 to latest linux stable kernel for the non-x86 BSPs
meta-yocto-bsp: bump to the latest linux stable kernel for the non-x86 BSPs
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.9
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.10
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.4
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.10
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.9
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.4
meta-yocto-bsp: bump to the latest linux stable kernel for the non-x86 BSPs
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.9
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.4
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.1
meta-yocto-bsp: bump to the latest linux stable kernel for the non-x86 BSPs
meta-yocto-bsp: bump to the latest linux stable kernel for the non-x86 BSPs
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.10
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.9
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.4
meta-yocto-bsp: bump to the latest linux stable kernel for the non-x86 BSPs
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.10
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.9
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.4
linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.1
gcc-6.3.inc: Use ucontext_t not struct ucontext.
libproxy: use stable download URL
linux-yocto/4.9: update to v4.9.49
linux-yocto/4.4: update to v4.4.87
(PRE)MIRRORS: fix pattern for npm:// without slash
waffle: fix REQUIRED_DISTRO_FEATURES and PACKAGECONFIG virtual/libgl dependencies
rootfs-postcommands: add test for unsatisfied RRECOMMENDS
rootfs-postcommands: remove empty line
rootfs-postcommands.bbclass: Filter out dangling symlinks in ssh_allow_empty_password()
alsa-utils: Do not hardcode path to /lib/udev
package_rpm.bbclass: disable generation of .build-id links
package_rpm.bbclass: use multithreaded xz compression
rpm: allow arch-dependent binaries in noarch packages
bitbake: cooker.py: Fix layer priority processing
bitbake: toaster: recipe links broken for default layers
bitbake: toaster: edit column list not sorted
bitbake: toaster: set default pokydirname if no external layers
bitbake: toaster: debug message for lists layers missing separators
bitbake: toaster: Order column in Tasks selectable
bitbake: toaster: display error when the fstype select is empty
bitbake: cooker: ensure monkey-patching in collect_bbfiles() gets undone on error
bitbake: cooker: fix watching empty directories
bitbake: cooker: Track directories searched for bbappend/bb files
bitbake.conf: add bzr to HOSTTOOLS_NONFATAL
glibc-locale: add runtime dependency on glibc
Revert "expat: Don't use getrandom() in the -native case"
poky: Update version to 2.3.2
grub: Fix build with gcc7
staging: Fix a logic error which caused dependency removal
staging: Ensure dependencies are removed before being added
staging: Avoid sysroot removal races
classes/license: drop erroneous sha256 parameter in LIC_FILES_CHKSUM
linux-yocto/4.4: update to v4.4.85
linux-yocto/4.9: update to v4.9.46
linux-yocto/4.10/4.9: fix BRCMFMAC_PROTO_MSGBUF warning
linux-yocto/4.10: fix aufs build
kernel-yocto: configuration updates: x86 features
linux-yocto/4.1: fix fsl-ls10xx sdhci
linux-yocto/4.9: update to v4.9.36
linux-yocto/4.1: update to v4.1.42
kernel-yocto: configuration updates: x86 features
terminal.py: fix devshell with mate-terminal
terminal.py: avoid 100% cpu while waiting for phonehome pid file
terminal: wait for terminal task to finish before procedding
bash: memleak bug fix for builtin command read
libxml2: Revert "Add an XML_PARSE_NOXXE flag to block all entities loading even local"
e2fsprogs: fix ptest script
tiff: Security fixes
expat: Don't use getrandom() in the -native case
nspr: Fix build error due to missing stdint.h> include
icu: Fix build with glibc 2.26
python-numpy: Fix issues with recent glibc versions
qemu: Backport a patch for recent glibc versions
python3-native: Avoid use of getentropy/getrandom
ref-manual: Fixed broken link.
ref-manual: Removed duplicate section id.
ref-manual: Added a cross-reference link to "tmp/sysroots-components"
ref-manual: Updated SSTATE_SCAN_FILES variable description
ref-manual: Added tmp/sysroots-components task
ref-manual: Corrected spelling errors
documentation: Preparation for 2.3.2 release
ref-manual: Fixed YP Term problem with botched earlier commit
ref-manual: Added new variable
kernel-dev: Updated "Creating and Preparing a Layer" section
ref-manual: Fixed links in do_prepare_recipe_sysroot task
ref-manual: Edited Migration section
ref-manual: Edits to staging.bbclass
ref-manual: Updated build/tmp/work/tunearch/recipename/version
dev-manual: Updated "Sharing Files Between Recipes"
ref-manual: Updated Documentation required packages
dev-manual: Updates to "Using .bbappend Files in Your Layer"
dev-manual: Changed wording that intros layer creation steps
package.bbclass: Restore functionality to detect RPM dependencies
libcheck: fix file-rdeps QA issue
rpm: Disable perl dependency generation
ltp: Skip the filedependency scan
bind: Use correct python interpreter path
package_rpm.bbclass: Filter out unwanted file deps for nativesdk packages
git: Do not install git cvsserver and git svn by default
rpm: Add dependencies on bash, perl and python3-core
perl: Do not generate file dependencies for perl-ptest
insane.bbclass: Ignore perl as dependency for nativesdk packages
rpm: Add a new option --alldeps to rpmdeps
rpm: Use conditional to access %{_docdir} in macros.in
rpm: Do not require that ELF binaries are executable to be identifiable
rpm: Create a wrapper for the native rpmdeps tool
rpm: Simplify the creation of wrappers for the native tools
toaster.bbclass: Ignore some dependencies in toaster_buildhistory_dump()
toaster.bbclass: Simplify parsing of depends.dot
buildhistory.bbclass: Improve the generated depends.dot file
insane.bbclass: Improve the handling of runtime file dependencies
insane.bbclass: Report all file-rdeps errors, not just the first
libxml2: Make ptest run the Python tests if Python support is enabled
libxml2: move python module to Python 3
package_manager.py: Generate correct RPM package names again
gtk+3: Update the patches to work with old versions of patch
rootfs-postcommands.bbclass: Prevent linking testdata to itself
gnu-efi: Fix build with gcc7
chrpath: use https for SRC_URI
systemtap: ensure systemtap-native is available
ncurses: add SYSROOT_DESTDIR for siteconfig_gencache
mirrors.bbclass: provide git repo fallbacks using the https protocol
gnu-config: update SRC_URI to new savannah.gnu.org hostname
image: Fix "metadata is not deterministic" when chaining 2+ CONVERSION_CMDs
image.bbclass: Correct chaining compression support
mesa.inc: drop wrong path in --with-llvm-prefix and export LLVM_CONFIG
insane.bbclass: fix override handling in RDEPENDS QA
icecc.bbclass: prevent nativesdk builds depending on target specific KERNEL_CC
v86d, qemuboot-x86.inc: use KERNEL_MODULE_AUTOLOAD+KERNEL_MODULE_PROBECONF for uvesafb instead of fbsetup init script
linux-libc-headers: fix duplicate IFF_LOWER_UP DORMANT ECHO on musl
package_manager: Fix support for NO_RECOMMENDATONS
kernel.bbclass: fix KERNEL_IMAGETYPE(S) for Image.gz
lsof: update SRC_URI
lsof: minor recipe cleanup
lsof: clear setuid
elfutils: use HTTP instead of FTP to fetch
uninative: Update to 1.7 uninative release
poky.ent: Updated CentOS required package
poky.ent: Corrected package duplication
bitbake: toaster: noweb should init database
bitbake: toaster: get_last_build_id not called correctly
bitbake: toaster: add getMessage to MockEvent
bitbake: toaster: fail on layers with sub-layer
bitbake: toaster: add ID's to build menu links
bitbake: toaster: add ID's to navigation links
classes/staging: change fixme debug message from note to debug
linux-yocto/4.9: update to v4.9.36
linux-yocto/4.4: update to v4.4.76
kernel-yocto/meta: smp configuration changes
linux-yocto/4.4: update to v4.4.71
linux-yocto/4.9: update to 4.9.31
linux-yocto/4.10: update to v4.10.17
linux-yocto-rt: 4.9-rt18
linux-yocto/meta: configuration changes (wifi, kexec and nft)
kernel/meta: add virtualbox configuration fragment
linux-yocto/meta: smp: Add config X86_BIGSMP since its needed when NR_CPUS > 8
linux-yocto/meta: bluetooth: Adds BT_BREDR and BT_LE, which are needed as dependencies
linux-yocto/4.1: fix gcc7 compilation and v4.1.39
linux-yocto/4.9: update to v4.9.27
linux-yocto/4.4: update to v4.4.67
linux-yocto/4.10: update to v4.10.15
kernel-yocto: propagate configuration errors to bbclass
recipetool: git reformat URI mangling & parameter stripped
systemd: workaround login failure on qemumips64 when 'pam' is enabled
yocto-compat-layer.py: make signature check code reusable
yocto-compat-layer.py: allow README with suffix
yocto-compat-layer.py: add test_world
yocto-compat-layer.py: apply test_signatures to all layers
yocto-compat-layer.py: tolerate broken world builds during signature diff
yocto-compat-layer.py: avoid adding layers more than once
iptables: Apply 0001-fix-build-with-musl.patch unconditionally
tzcode-native: quote ${CC}
qemuboot.conf: make cpus match built artifacts
package_manager.py: set dnf's releasever setting from DISTRO_CODENAME
zlib: Pass pre-calculate uname enable re-entrant flags
git: Add a dependency on perl for gitweb
texi2html: Add a dependency on perl
linux-firmware: Avoid a dependency on python-core
libpcap: apply fix from upstream to fix build race
tzdata: Install zone1970.tab
libxml2: Avoid reparsing and simplify control flow in xmlParseStartTag2
libxml2: Disable LeakSanitizer when running API tests
classes/buildhistory: fix failures collecting output signatures
tcf-agent: kill with USR2 in systemd stop
tcf-agent: Fix daemon termination

Hello,

The latest release of the Yocto Project 2.2.2 (morty-16.0.2) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.2/poky-morty-16.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.2/poky-morty-16.0.2.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.2/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW37_-_2017-09-13_-_Full_Point_Release_Test_Cycle_2.2.2_rc2

Thank you to everyone for your contributions to this release!

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...



--------------------
yocto-2.2.2 Errata
--------------------

Release Name: eclipse-poky-mars-morty-16.0.2
Branch: mars/morty
Tag: mars/morty-16.0.2
Hash: 92aa0e79e8b01c56f0670af3cd8296ec68b43350
md5: a4090d5ca39f9fbe256a975e275855d0
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.2/eclipse-poky-mars-morty-16.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.2/eclipse-poky-mars-morty-16.0.2.tar.bz2

Release Name: eclipse-poky-neon-morty-16.0.2
Branch: neon/morty
Tag: neon/morty-16.0.2
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: a5966c547946858abc7145cbef4bf9e7
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.2/eclipse-poky-neon-morty-16.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.2/eclipse-poky-neon-morty-16.0.2.tar.bz2

Release Name: meta-qt3-morty-16.0.2
Branch: morty
Tag: morty-16.0.2
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: c20650532eba08fe1c8001e9ddec8df2
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.2/meta-qt3-morty-16.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.2/meta-qt3-morty-16.0.2.tar.bz2

Release Name: meta-qt4-morty-16.0.2
Branch: morty
Tag: morty-16.0.2
Hash: f389368dc86e745df14cab9eeb9a94bc02bd273e
md5: bfcd270937944d1c48a356a50cb6dfb7
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.2/meta-qt4-morty-16.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.2/meta-qt4-morty-16.0.2.tar.bz2

Release Name: poky-morty-16.0.2
Branch: morty
Tag: morty-16.0.2
Hash: 60402978fe3648bf560b3386c6e9dd661cdf2083
md5: d09e757d5d73093062f59a07ec51b4f6
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.2.2/poky-morty-16.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.2.2/poky-morty-16.0.2.tar.bz2


---------------
Known Issues
---------------
N/A

---------------
Security Fixes
---------------
connman: Fix for CVE-2017-12865
systemd: refuse to load units with errors (CVE-2017-1000082)
glibc: Security fix CVE-2016-6323
bash: CVE-2016-0634
libxslt: Fix CVE-2017-5029
binutils: fix CVE-2017-7210
binutils: fix CVE-2017-7209 in readelf
binutils: fix CVE-2017-6969 in readelf
libgcrypt: fix CVE-2017-7526
libgcrypt: fix CVE-2017-9526
ghostscript : CVE-2016-10219, CVE-2016-10220, CVE-2017-5951
ghostscript: CVE-2017-7207
libxml2: CVE-2016-9318
bind: Security fix CVE-2016-6170
bind: Security fix CVE-2016-8864
busybox: Security fix CVE-2016-6301
binutils: Fix CVE-2017-6965 and CVE-2017-6966
tar: CVE-2016-6321
bash: fix CVE-2016-9401


---------------
Fixes
---------------
glibc-locale: add runtime dependency on glibc
neard: Fix parallel build issue
oeqa/selftest: Drop http sstate sharing
selftest/eSDK.py: Cleanup when there is an error in setUpClass
oeqa/selftest: Adds test case for sdk-update eSDK
selftest/eSDK.py: fix sstate dir not found error
uninative: Update to 1.7 uninative release
yocto-uninative: Update to the 1.6 release
yocto-uninative: Update to the 1.5 release
python3-native: Avoid use of getentropy/getrandom
python-numpy: Fix issues with recent glibc versions
qemu: Backport a patch for recent glibc versions
recipes-kernel: Skip kernel version check on kernel templates
scripts/runqemu: avoid overridden user input for bootparams
kernel, license, sstate, rootfs.py: Remove deploy directory README
insane.bbclass: fix override handling in RDEPENDS QA
icecc.bbclass: prevent nativesdk builds depending on target specific KERNEL_CC
sstate-sysroot-cruft: Add /etc/ld.so.conf to whitelist
test-dependencies.sh: Strip also '\.bb: .*' before adding failed recipe to list of failed
image: Fix "metadata is not deterministic" when chaining 2+ CONVERSION_CMDs
image.bbclass: Correct chaining compression support
systemd: remove upstreamed patch
archiver: Escape recipe name in regex
libpng12: move SRC_URI back to SOURCEFORGE_MIRROR
systemd: Disable DefaultDependencies for sysv scripts on rcS runlevel
lsof: update SRC_URI
lsof: minor recipe cleanup
lsof: clear setuid
ed: update SRC_URI to OSL
rng-tools: update SRC_URI to SOURCEFORGE_MIRROR
pcre: update SRC_URI to SOURCEFORGE_MIRROR
glibc: fix pthread_cond_broadcast issue (arm)
wic: fix calculation of partition number
docbook-utils: update SRC_URI from fedora to osl
sgml-common: update SRC_URI from fedora to OSL
automake: Backport perl 5.22 fix
GNU_MIRROR: switch from ftp to https
DEBIAN_MIRROR: switch from ftp to http
libxslt: Add build fix (with ld-is-gold)
eudev: set LGPL-2.1+ for libudev package
elfutils: fix building elfutils-native with GCC7
gcc-6.2: backport fix of check for empty string in ubsan.c
openssl-native: Compile with -fPIC
packagegroup-core-standalone-sdk-target: add libssp
wic: partition: Run fsck on EXT file systems
e2fsprogs: Fix wrong error code after optimization
systemtap: Add patch to remove quotes
systemtap: update to 3.1
linux-yocto/4.8: update to 4.8.24
bitbake: wget: Fix handling of urls with user/password
bitbake: codeparser.py: support deeply nested tokens
bitbake: siggen: Make calc_taskhash match get_taskhash for file checksums
oe/path.py: fix for "Argument list too long"
ref-manual: uClibc Replaced by musl from Yocto 2.2
package_ipk: Clean up Source entry in ipk packages
scripts/lib/bsp/kernel.py: force patching when branch is machine branch is re-use
yocto-project-qs, poky.ent: Fixed pip3 and pexpect package names
sstate.bbclass: check if mirror directory is writable
oeqa/selftest: lock down Meson git revision for reliability
elfutils: update homepage and upstream souce
libnewt: replace fedorahosted.org SRC_URI with pagure.io source
xmlto: replace fedorahosted.org SRC_URI with pagure.io source
libuser: replace fedorahosted.org SRC_URI with pagure.io source
liberation-fonts: replace fedorahosted.org SRC_URI with pagure.io source
cronie: replace fedorahosted.org SRC_URI with github.com source
chkconfig: replace fedorahosted.org SRC_URI with github.com source
selftest/recipetool: replace fedorahosted.org SRC_URI with github.com source
perf: add perf-feature for systemtap
build-appliance-image: Update to morty head revision
cryptodev-linux: update SRC_URI
selftest: Avoid sstate corruption by calling cleansstate
selftest: Disable SSTATE_MIRRORS for sstate signing test
build-appliance-image: Update to morty head revision
poky: Update distro version to 2.2.2
oeqa/selftest: remove test_sanity_unsafe_binary_references
insane: remove broken unsafe-references-in-binaries test
selftest: do not perform a full build in test_continue
documentation: Prepared for YP 2.2.2 release of the manuals
glibc: Fix use after free in pthread_create()
xorg-font-common.inc: Remove x11 requirement for -native
mkfontscale: Remove x11 requirement for -native
mkfontdir: Remove x11 requirement for -native
linux-yocto/4.4: update to v4.4.60
linux-yocto/4.4: update to v4.4.56
linux-yocto/4.4: update to v4.4.53
linux-yocto/4.1: update to v4.1.38
linux-yocto/4.8: update to v4.8.18
linux-yocto/4.8: update to -rt10
linux-yocto/4.1: update to v4.1.37
linux-yocto/4.8: -stable update to v4.8.17
linux-yocto/4.4: update to v4.4.41
busybox: Security fix BUG9071
busybox: ifupdown:pass interface device name for ipv6 route command
busybox: allow libiproute to handle table ids larger than 255
base-files: resize only serial tty's in profile
logrotate: replace fedorahosted.org SRC_URI with github.com source
volatile-binds: correct some errors reported by systemd
parselogs: Whitelist NUC6 firmware load error message on genericx86-64
sstate.bbclass: update .siginfo atime
rootfs.py: Respect OPKGLIBDIR variable
package_manager.py: respect OPKGLIBDIR
python-3-manifest: fix adding imp to importlib
runqemu: support multiple qemus running when nfs
runqemu-export-rootfs: fix inconsistent var names
sanity.bbclass: modify check for shell
image_types.bbclass: fix image dependency chain collection
image_types.bbclass: IMAGE_TYPEDEP_ now adds deps for conversion types
gmp: Disable assembly for MIPS R6
openssl: Add support for many MIPS configurations
busybox: refresh the flock patch
wic: plugins: rawcopy: Fixed wrong variable type
wic: filemap: Fixed spared_copy skip
tzcode-native: Set cc to ${CC}
tzdata: update to 2017a
tzcode-native: update to 2017a
tzcode-native: update to 2016j
tzdata: update to 2016j
bitbake: lib/bs4: Fix imports from html5lib >= 0.9999999/1.0b8
Revert "file: update SRCREV for 5.28 to fix fetch fail on missing commit"
file: update SRCREV for 5.28 to fix fetch fail on missing commit
bitbake: cooker.py: run sanity checks for multiconfig
bitbake: cooker.py: new multiconfig '*' syntax support
bitbake: data_smart: Fix unneeded variable manipulation
lib/oe/gpg_sign: fix rpm signing with gpg > 2.1
lib/oe/gpg_sign: make gpg version a property of the signer
rpm: support customizing gpg command line
lib/oe/gpg_sign: sign rpm packages in chunks of 100
e2fsprogs: have configure expand @mkdir_p@
python-3.5-manifest: Add imp to importlib
gdb-cross-canadian: Depend on nativesdk-python3-importlib

All,

The meta-intel 8.0 layer for the Yocto Project 2.4 Milestone 3 “rocko" release is now available.

repo: git://git.yoctoproject.org/meta-intel branch: master
tag: 8.0-rocko-2.4_M3
hash: 8d44e72d6eff173d96eb5b2571e8c1e10de53816
download: http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.4_M3/meta-intel-8.0-rocko-2.4_M3.tar.bz2
md5sum: 881788c2aeb272a9c1c826a97c8da6e6

Known issue:
The hddimg's fail to boot or install correct with m3 and
meta-intel BSP machines
https://bugzilla.yoctoproject.org/show_bug.cgi?id=12048

WIC images do boot correctly, and this issue has been fixed in OE-Core
master.


Tracy Graydon
Intel Corporation

The third milestone release for Yocto Project 2.4 (yocto-2.4_M3) is available for download now.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.4_M3/

eclipse-poky-mars 92aa0e79e8b01c56f0670af3cd8296ec68b43350
eclipse-poky-neon 83e0083ef3a71e10039ace7d18057dddc154408b
meta-qt3 f33b73a9563f2dfdfd0ee37b61d65d90197a456f
meta-qt4 d52c38ad9f0a617b9ad5048a872a9e97b3af5b44
poky 5f6945f5031e1a4ca116cc1eccf4c2f9dc228547

Test report:

https://wiki.yoctoproject.org/wiki/WW35_-_2017-08-30_-_Full_Test_Cycle_2.4_M3

Thank you.

Tracy Graydon
Yocto Project
Build and Release

All,

The meta-intel 8.0 layer for the Yocto Project 2.4 Milestone 2 “rocko" release is now available.

repo: git://git.yoctoproject.org/meta-intel branch: master
tag: 8.0-rocko-2.4_M2
hash: 0d32b245e44574a612b9b48789498a78d80e9098
download: http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.4_M2/meta-intel-8.0-rocko-2.4_M2.tar.bz2
md5sum: 2dcd88624c75cde2f9fa8cb77e376b7a


Tracy Graydon
Intel Corporation

The second milestone release for Yocto Project 2.4 is available for download now.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.4_M2/

eclipse-poky-mars 92aa0e79e8b01c56f0670af3cd8296ec68b43350
eclipse-poky-neon 83e0083ef3a71e10039ace7d18057dddc154408b
meta-qt3 f33b73a9563f2dfdfd0ee37b61d65d90197a456f
meta-qt4 d52c38ad9f0a617b9ad5048a872a9e97b3af5b44
poky 9ed748a542b520c1cb763d981969233c0f5efd4e

Test report:

https://wiki.yoctoproject.org/wiki/WW32_-_2017-08-09_-_Full_Test_Cycle_2.4_M2_rc3

Thank you.

Tracy Graydon
Yocto Project
Build and Release

Hello,

The latest release of the Yocto Project 2.3.1 (pyro-17.0.1) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.1/poky-pyro-17.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.1/poky-pyro-17.0.1.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.1/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW29_-_2017-07-18-_Full_Test_Cycle_-_2.3.1_rc2

Thank you to everyone for your contributions on this release!

Tracy Graydon
Yocto Project Build and Release
tracy.graydon at intel.com


------------------
yocto-2.3.1 Errata
------------------

Release Name: eclipse-poky-mars-pyro-17.0.1
Branch: mars/pyro
Tag: mars/pyro-17.0.1
Hash: 92aa0e79e8b01c56f0670af3cd8296ec68b43350
md5: 6dc814439b7469dd5ed76ce752b262c1
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.1/eclipse-poky-mars-pyro-17.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.1/eclipse-poky-mars-pyro-17.0.1.tar.bz2

Release Name: eclipse-poky-neon-pyro-17.0.1
Branch: neon/pyro
Tag: neon/pyro-17.0.1
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: ea7e1e5eb218cc4ac38d1393092ccf60
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.1/eclipse-poky-neon-pyro-17.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.1/eclipse-poky-neon-pyro-17.0.1.tar.bz2

Release Name: meta-qt3-pyro-17.0.1
Branch: pyro
Tag: pyro-17.0.1
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: bd3087bdef5683b73240ef30f23b5618
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.1/meta-qt3-pyro-17.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.1/meta-qt3-pyro-17.0.1.tar.bz2

Release Name: meta-qt4-pyro-17.0.1
Branch: pyro
Tag: pyro-17.0.1
Hash: e120a2193be3982d55741fb9e51472db6ab9a5cd
md5: 6a8126ed32c86aba3df975a7e8671e97
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.1/meta-qt4-pyro-17.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.1/meta-qt4-pyro-17.0.1.tar.bz2

Release Name: poky-pyro-17.0.1
Branch: pyro
Tag: pyro-17.0.1
Hash: 6bd890d9e011014cf323e61267f8b256949d44aa
md5: 6deb722f128908355c95528cb9ae7086
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3.1/poky-pyro-17.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3.1/poky-pyro-17.0.1.tar.bz2


---------------
Known Issues
---------------
N/A

---------------
Security Fixes
---------------
binutils: fix CVE-2017-7210
binutils: fix CVE-2017-7209 in readelf
libxslt: Fix CVE-2017-5029
ghostscript: CVE-2016-7977, CVE-2016-7978, CVE-2016-7979, CVE-2017-9216
ghostscript: CVE-2016-8602, CVE-2017-7975
binutils: fix CVE-2017-6969 in readelf
rpcbind: Fix CVE-2017-8779
binutils: Fix CVE-2017-8392
cve-check.bbclass: make warning contain CVE IDs
cve-check-tool: backport a patch to make CVE checking work
bash: CVE-2016-0634


---------------
Fixes
---------------
Revert "bitbake.conf: Add sdl-config to HOSTTOOLS if using host SDL"
bitbake: siggen: Make calc_taskhash match get_taskhash for file checksums
bitbake: fetch: fix handling of files with incorrect checksums from a premirror
ref-manual: uClibc Replaced by musl from Yocto 2.2
dev-manual: Fixed a DocBook issue with formatting "bug-id"
sdk-manual: Updated the note for building SDK Installer
ref-manual: Updated LAYERRECOMMENDS variable
documentation: Prepared 2.3.1 release variables and dates
ref-manual: Updated PACKAGECONFIG_CONFARGS variable
ref-manual: Added warning to native.bbclass for naming convention
ref-manual: Updated PACKAGECONFIG_CONFARGS variable description
yocto-project-qs: Updated the YP Development Flow figure
dev-manual, sdk-manual: Fixed link to Eclipse section
dev-manual: Fixed broken link into the setting up Eclipse section
ref-manual: Added LAYERRECOMMENDS variable description
ref-manual: Updated LAYERDEPENDS variable description
ref-manual: Updated image-live.bbclass description
ref-manual: Enhanced the glossary description for INHERIT
ref-manual: Fixed typo for "Installation"
package_ipk: Clean up Source entry in ipk packages
mkelfimage: Fix broken patch when building native
automake: Backport perl 5.22 fix
bitbake.conf: Add sdl-config to HOSTTOOLS if using host SDL
piglit: add patches for unbuildable surfaceless Mesa test
piglit: add patch for lack of gbm_bo_map
piglit: depend on virtual/egl
image-vm: Avoid use of fold, tac and paste commands for DISK_SIGNATURE
kernel: predefine KBUILD_BUILD_USER and KBUILD_BUILD_HOST
oeqa/selftest: lock down Meson git revision for reliability
scriptutils: fix fetch_uri() to work with RSS
cryptodev-linux: update SRC_URI
staging: Allow BB_LIMITEDDEPS to avoid BB_TASKDEPDATA
sstate: Ensure native/cross recipes have relocation of HOSTTOOLS_DIR
python.inc: Fix python2/3 hosttools path references
rpm: Ensure macros file doesn't reference HOSTTOOLS
GNU_MIRROR: switch from ftp to https
DEBIAN_MIRROR: switch from ftp to http
useradd: remove preinst script referring to recipe sysroot
useradd.bbclass: Handle COMPONENTS_DIR when restoring state
bitbake.conf: Add COMPONENTS_DIR for ${STAGING_DIR}-components
yocto-project-qs: Updated output for git clone of meta-intel.
yocto-project-qs: Updated git clone output for pyro poky.
ref-manual: Removed section on checking for build-time dependencies.
ref-manual, dev-manual: replaced "depexp" with "taskexp"
ref-manual: Removed text surrounding BB_SETSCENE_VERIFY_FUNCTION* vars
dev-manual: Cleaned up "Gdbserver" term
dev-manual: Updated a few occurrences of "dnf" to "DNF"
dev-manual: Changed "Dnf" to "DNF" for consistency
ref-manual: Added links for variables
ref-manual: Added 4 DISTRO_FEATURES* variable descriptions.
ref-manual, dev-manual: Completed first draft of 2.3 migration section.
ref-manual: Applied 2.3 Migration review comments.
ref-manual: Added new glossary entries for HOSTTOOLS* variables.

Hello,

The latest release of the Yocto Project 2.1.3 (krogoth-15.0.3) is now available
for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.1.3/poky-krogoth-15.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.1.3/poky-krogoth-15.0.3.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.1.3/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW26_-_2017-30-06_-_Full_Pass_2.1.3_rc2

Thanks to everyone for their contributions to this release!

Sincerely,

Tracy Graydon
Yocto Project
Build and Release


------------------
yocto-2.1.3 Errata
--------------------

Release Name: eclipse-poky-mars-krogoth-15.0.3
Branch: mars/krogoth
Tag: mars/krogoth-15.0.3
Hash: 92aa0e79e8b01c56f0670af3cd8296ec68b43350
md5: 189fbccd3f2dc176bc156089b94fb05b
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.1.3/eclipse-poky-mars-krogoth-15.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.1.3/eclipse-poky-mars-krogoth-15.0.3.tar.bz2

Release Name: eclipse-poky-neon-krogoth-15.0.3
Branch: neon/krogoth
Tag: neon/krogoth-15.0.3
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: b6ca7d65be9083e1ce4b967d9c8a852e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.1.3/eclipse-poky-neon-krogoth-15.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.1.3/eclipse-poky-neon-krogoth-15.0.3.tar.bz2

Release Name: meta-qt3-krogoth-15.0.3
Branch: krogoth
Tag: krogoth-15.0.3
Hash: d5d5225ef78e403301a429d0f64bd4a262b0fa4d
md5: 50c2217fdc18c56d59322bdbc3b4040c
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.1.3/meta-qt3-krogoth-15.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.1.3/meta-qt3-krogoth-15.0.3.tar.bz2

Release Name: meta-qt4-krogoth-15.0.3
Branch: krogoth
Tag: krogoth-15.0.3
Hash: 92a72a790a427af5f85ce86fea4fce86a72c7b58
md5: cf3f3554e03321c30906708330f3a97e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.1.3/meta-qt4-krogoth-15.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.1.3/meta-qt4-krogoth-15.0.3.tar.bz2

Release Name: poky-krogoth-15.0.3
Branch: krogoth
Tag: krogoth-15.0.3
Hash: 3cf0e093481ea260d4f41bed24336ea7f0102bde
md5: 4cebb5adf1f6de3f55a7d5755509686f
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.1.3/poky-krogoth-15.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.1.3/poky-krogoth-15.0.3.tar.bz2


---------------
Known Issues
---------------
N/A

---------------
Security Fixes
---------------
openssl: Security fix CVE-2016-2177
tiff: Security fix CVE-2016-9538
tiff: Security fix CVE-2016-9535
tiff: Security fix CVE-2016-9539
tiff: Security fix CVE-2016-9540
tiff: Security fix CVE-2016-3632
tiff: Security fix CVE-2016-3658
expat: CVE-2012-6702, CVE-2016-5300
openssl: Security fix CVE-2016-8610
tiff: Security fix CVE-2016-3622
tiff: Security fix CVE-2016-3623
tiff: Security fix CVE-2016-3991
tiff: Security fix CVE-2016-3990
tiff: Security fix CVE-2016-3945
curl: CVE-2016-8625
curl: CVE-2016-8624
curl: CVE-2016-8623
curl: CVE-2016-8622
curl: CVE-2016-8621
curl: CVE-2016-8620
curl: CVE-2016-8619
curl: CVE-2016-8618
curl: CVE-2016-8617
curl: CVE-2016-8616
curl: CVE-2016-8615
qemu: Security fix CVE-2016-4952
qemu: Security fix CVE-2016-4439


---------------
Fixes
---------------
initrdscripts/init-install*: Add rootwait when installing to USB devices
bitbake: siggen: Make calc_taskhash match get_taskhash for file checksums
package_ipk: Clean up Source entry in ipk packages
documentation: Updated all manual revision tables to June, 2017
oeqa/selftest/recipetool: actually fix create_github test
build-appliance-image: Update to krogoth head revision
grub2: enforce -no-pie if supported by compiler
build-appliance-image: Update to krogoth head revision
poky: Update version to 2.1.3
rootfs_rpm: Increase rootfs size
oeqa/selftest: lock down Meson git revision for reliability
oeqa/runtime/rpm: use su instead of sudo
libunwind: Fix build race conflict with gcc and musl
selftest/recipetool: Fix test for krogoth
webkitgtk: fix racy double build of WebKit2-4.0.gir
cryptodev-linux: update SRC_URI
pseudo: Work around issues with glibc 2.24
pseudo: obey our LDFLAGS
openssl.inc: avoid random ptest failures
openssl: fix do_configure error when cwd is not in @INC
openssl: prevent warnings from openssl-c_rehash.sh
openssl: Ensure SSL certificates are stored on sysconfdir
openssl: Add Shell-Script based c_rehash utility
openssl: fix add missing dependencies building for test directory
openssl: fix add missing `make depend` command before `make` library
openssl: Fix MIPS64be and add MIPS64le
mesa: update SRC_URI
libpng -lsb: update SRC_URI
libxslt: update SRC_URI
libpng: update SRC_URI back to SF
libpcre: update SRC_URI
zlib: update SRC_URI to fix fetching
populate_sdk_ext: whitelist do_package tasks
populate_sdk_ext: fix working with uninative sstate
oeqa: fix hasPackage, add hasPackageMatch
tzdata: update to 2016i
tzcode: update to 2016i
tzdata: Update to 2016h
tzcode-native: update to 2016h
weston: Add no-input-device patch to 1.9.0.
gstreamer1.0-libav: Add 'valgrind' config option
nss: Disable warning on deprecated API usage
binutils: apply RPATH fixes from our libtool patches
binutils: fix typo in libtool patch
classes/native: set lt_cv_sys_lib_dlsearch_path_spec
classes/cross: set lt_cv_sys_lib_dlsearch_path_spec
rm_work: Ensure we don't remove sigbasedata files
sstate: Ensure we don't remove sigbasedata files
documentation: Updated YP set for 2.1.3 Krogoth release in May '17
bitbake: lib/bb/checksum: avoid exception on broken symlinks
bitbake: fetch2/wget: attempt checkstatus again if it fails
bitbake: siggen: Ensure taskhash mismatches don't override existing data
bitbake: siggen: Pass basehash to worker processes and sanity check reparsing result
bitbake: build: Ensure we preserve sigbasedata files as well as sigdata ones
Revert "file: update SRCREV for 5.25 to fix fetch fail on missing commit"
file: update SRCREV for 5.25 to fix fetch fail on missing commit
bitbake: bitbake: toaster: settings set ALLOWED_HOSTS to * in debug mode
dev-manual: Fixed typo for "${INC_PR}.0"
documentation: Updated manual rev tables for Dec 2016 2.1.2 release

Back in May, we introduced our Oryx Linux project and let you know about our ambitions for the v0.2.0 release. We’re now pleased to announce that v0.2.0 has been released!

Introduction
---

Oryx Linux is an embedded Linux® distribution based around the Yocto Project and OpenEmbedded. It incorporates a lightweight container runtime engine to bring the benefits of containerisation to the embedded sector without disrupting existing developer workflows. Please see our previous blog post at http://oryx-linux.org/2017/05/03/overview for more details.

Key Features and Supported Platforms
---

Oryx Linux v0.2.0 consists of the following components:

- Host system images for all supported platforms which are ready for installation and usage. These images include the usual selection of command line tools and services which make up a simple Linux distribution. They are kept lightweight so as not to impose a burden on memory and storage usage in embedded devices.
- Two example guest container images for each supported platform:
- A minimal image consisting of only those components required to provide a functional guest container.
- A full-cmdline image consisting of those same components plus additional convenience packages found in more desktop-oriented command line environments.
- The oryxcmd tool, included in the host images, to manage guest containers. This tool supports the configuration of sources from which guest container images may be obtained. Guest containers are then created by fetching an available image from a registered source and configuring the container runtime engine. Both guests and sources may be removed when they are no longer needed.
- A source release consisting of a snapshot of Bitbake and the OpenEmbedded metadata layers which were used to produce the above images. This source release may be used to re-build Oryx Linux images as needed but also to extend Oryx Linux to support new devices and new guest container images.

In this release, Oryx Linux images are provided for the Raspberry Pi and Raspberry Pi 3 devices, as well as the emulated qemux86 platform.

Oryx Lite
---

Oryx Lite is a stripped down configuration of Oryx Linux for platforms which do not support all containerisation features of the full Oryx Linux distribution. Instead, a selection of application-focused native images are made available.

In this release, Oryx Lite consists of a minimal image and a full-cmdline image for the Arduino Yún platform. As the feature set of Oryx Linux is expanded in upcoming releases, all features which do not depend on the container runtime will be made available as part of Oryx Lite.

Further Details
For further details please see the release notes at https://downloads.toganlabs.com/oryx/distro/0.2.0/RELEASE_NOTES.txt or the full documentation at https://downloads.toganlabs.com/oryx/docs/0.2.0/html/

For support requests, bug reports or other feedback please open an issue in the Togán Labs bug tracker at https://bugs.toganlabs.com/ or contact us at support@...

Raspberry Pi is a trademark of the Raspberry Pi Foundation. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.

----
Beth 'pidge' Flanagan
CTO/CEO Togán Labs Ltd.
www.toganlabs.com | pidge@...

The first milestone release for Yocto Project 2.4 is available for download now.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.4_M1/

eclipse-poky-mars 92aa0e79e8b01c56f0670af3cd8296ec68b43350
eclipse-poky-neon 83e0083ef3a71e10039ace7d18057dddc154408b
meta-qt3 f33b73a9563f2dfdfd0ee37b61d65d90197a456f
meta-qt4 033509ebc1eb0d13290a7a3f0c2772ed58712c34
poky 6964efddd31c479386d1643c1025bc102710392f

Test report:

https://wiki.yoctoproject.org/wiki/WW25_-_2017-06-22_-_Full_Test_Cycle_2.4_M1_rc1

Thank you.

Tracy Graydon
Yocto Project
Build and Release

All,

The meta-intel 7.0 layer for the Yocto Project 2.3 “pyro" release and board support packages are now available for download.

Tracy Graydon
Intel Corporation

meta-intel
-------------

repo: git://git.yoctoproject.org/meta-intel branch: pyro
tag: 7.0-morty-2.3
hash: 7e8f98aa326f16edd679a95f7bb2daf4256479f3
download: http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/meta-intel-7.0-pyro-2.3.tar.bz2
md5sum: fbb56931de38a5b0f6702982c0e73183


New Features:
----------------
linux-intel 4.9 kernel for an Intel maintained LTS based Linux Kernel
Added QEMU support for call meta-intel MACHINE targets


Updates:
----------
Linux-Yocto: 4.10.15
Linux-Intel: 4.9.27
Linux-Yocto 4.8.12
Linux-Yocto 4.4.60
Linux-Yocto 4.1.39

README: Update information for pyro release
linux-intel: Update SRCREVs
linux-intel: Update to 4.9.20
linux-intel/4.9: Update yocto-kernel-cache SRCREV
intel-microcode: Update to latest 20170511
maintainer: Update Maintainer list
rmc: update SRCREV for rmc recipe
rmc: update license file checksum
rmc: integration update
libyami: update to verssion 1.1.0
libyami-utils: update to verssion 1.1.0
DPDK: updated to 17.02
libva-intel-driver: Update to 1.7.3
thermald: updated to 1.5.4
Updated broxton-m machine subtype kernel SRCREV
systemd-boot: update 230 -> 232


Added:
-------
libyami - Yet Another Multimedia Interface

Hello,

The latest release of the Yocto Project 2.3 (pyro-17.0.0) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/poky-pyro-17.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3/poky-pyro-17.0.0.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/2.3_QA_Status

Thank you to everyone for all your hard work on this release!

Sincerely,

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...


------------------
yocto-2.3 Errata
------------------

Release Name: eclipse-poky-mars-pyro-17.0.0
Branch: mars/pyro
Tag: mars/pyro-17.0.0
Hash: 92aa0e79e8b01c56f0670af3cd8296ec68b43350
md5: a42d4540e744651b8ededa1cdffef2d8
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/eclipse-poky-mars-pyro-17.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3/eclipse-poky-mars-pyro-17.0.0.tar.bz2

Release Name: eclipse-poky-neon-pyro-17.0.0
Branch: neon/pyro
Tag: neon/pyro-17.0.0
Hash: 83e0083ef3a71e10039ace7d18057dddc154408b
md5: dc99a5c66980fb6fe2880be22390fd54
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/eclipse-poky-neon-pyro-17.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3/eclipse-poky-neon-pyro-17.0.0.tar.bz2

Release Name: meta-qt3-pyro-17.0.0
Branch: pyro
Tag: pyro-17.0.0
Hash: f33b73a9563f2dfdfd0ee37b61d65d90197a456f
md5: 09d11c5281fe707f9803baa2c81313d5
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/meta-qt3-pyro-17.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3/meta-qt3-pyro-17.0.0.tar.bz2

Release Name: meta-qt4-pyro-17.0.0
Branch: pyro
Tag: pyro-17.0.0
Hash: e120a2193be3982d55741fb9e51472db6ab9a5cd
md5: 4c5af189c711ff11de279e833306f681
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/meta-qt4-pyro-17.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3/meta-qt4-pyro-17.0.0.tar.bz2

Release Name: poky-pyro-17.0.0
Branch: pyro
Tag: pyro-17.0.0
Hash: 381897c64069ea43d595380a3ae913bcc79cf7e1
md5: 717ba46001eebb2ea52c2f38ba58bf7a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.3/poky-pyro-17.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.3/poky-morty-17.0.0.tar.bz2


-----------------------------
New Features / Enhancements
-----------------------------

* Linux kernel 4.10, 4.9 (LTS/LTSI), 4.4 (LTS), and 4.1 (LTSI)
* glibc 2.25
* gcc 6.3.0
* Major improvements to build robustness:
- Recipe Specific Sysroots: we now use a sysroot per recipe instead of sharing one per machine, in order to avoid non-determinisic build results and intermittent failures as a result of any undeclared dependencies.
- PATH is now filtered within build tasks, using symlinks to only allow calling whitelisted tools from the build host in order to reduce the possibility of host contamination
* Replaced smart+rpm5 with dnf+rpm4 for more standard and widely-supported RPM functionality
* Added recipes for golang compilers and tools
* Added yocto-compat-layer.py script to validate Yocto Project compatible status
* New recipes: acpica, go, go-native, go-cross, gstreamer1.0-vaapi, lzip, ovmf, python3-pycurl, python-pygpgme, python-iniparse, python-backports-lzma, libcomps, libpcre2, librepo, vulkan
* Extended recipes to native: libbsd, time, expect, socat, gpgme, python-ptyprocess, python-pexpect, net-tools, python3-pip
* Kernel-related changes:
- kernel-yocto: add Link Time Optimization features for poky-tiny
- kernel-yocto: firewire and audio configuration updates
- kernel-yocto/features: enable TPM
- kernel-yocto: ecryptfs, NFC and CAN bus config updates
- kern-tools: flag CONFIG options with invalid spaces
- kernel.bbclass: Give sanity check function an opt-out variable
- kernel.bbclass: introduce INITRAMFS_IMAGE_NAME
- kernel-module-split: Append KERNEL_VERSION string to kernel module package name
- module.bbclass: allow overriding the location of Module.symvers
- kernel-fitimage: Use compressed ramdisks in FIT images if available
- linux-yocto: add dm-verity
- Added support for Intel Memory Protection Extensions in linux-yocto and gcc-runtime
- New tool scripts/tiny/ksum.py generates a combined summary of vmlinux and module sizes for a built kernel
* General image generation improvements:
- Enable generation of wic.bmap for genericx86/genericx86-64, beaglebone & edgerouter
- Produce wic images for mpc8315e-rdb
- Add support for compressing initramfs with lz4
- Add support for lzo compressed initial ramdisk
- Add a core-image-tiny-initramfs image for creating image artifacts for use by tools such as wic
- Add basic "container" image type
- Allow configuring output file name with image-buildinfo class
* wic changes:
- Support 'msdos' fstype
- Add WKS_FILE_DEPENDS variable
- bootimg-pcbios: add support for syslinux vesamenu
- Add --exclude-path option to rootfs source plugin.
- image_types.bbclass: look for wks files in <layer>/wic
- Add --fixed-size wks option
- Add machine-specific kickstart files for mpc8315e-rdb, beaglebone, genericx86 & edgerouter under meta-yocto-bsp/wic to make them easier to find
* runqemu / QEMU changes:
- Add user mode (SLIRP) support to x86 QEMU targets
- Allow using qemu from the host
- Allow bypassing of network setup
- Let command line parameters override defaults
- Support UEFI with OVMF firmware
- Support virtual TPM
- Output network configuration
* SDK changes:
- Add cmake
- Add libssp (if available) by default for stack-smashing protection
- Add documentation packages to SDK if api-documentation is in DISTRO_FEATURES
- Extended recipes to nativesdk: libbsd, libyaml, time, net-tools, libxml-parser-perl, libgcrypt, libgpg-error, tcl, gawk, json-glib, libcheck
* devtool/recipetool changes:
- Add --port/-P argument to devtool deploy for target connection
- Optional npm install of devDependencies
- Show recipetool create output in real time in "devtool add"
- New "devtool rename" subcommand
- Support postinst scripts when importing .deb packages
* Build statistics (buildstats) improvements:
- Added task-time, a simple buildstats analysis script
- Record disk space usage and render in pybootchartgui
- Show system utilization in pybootchartgui
* BitBake changes:
- New Task Explorer ("taskexp") UI replaces "depexp" acting as a more accurate viewer reflecting task dependencies
- Monitor disk space at regular time intervals
- New --runall command-line option to run all tasks in specific build target (obviates the need to create a do_*all task, e.g. do_fetchall or do_cleanall)
- Better sanity checking for basehash changing
- New multiconfig '*' syntax support
- Made -q/--quiet option a level option, specify multiple times for more quiet output
- Added Amazon AWS S3 fetcher
- Reworked tinfoil API for utility scripts
* Improved the ability to analyse signature/input changes:
- Improved output readability and reliability of bitbake-diffsigs
- classes/buildhistory: optionally collect task input/output signatures on every build
- buildhistory-diff: add option to compare task signatures
- bitbake-diffsigs: add an option to find and compare specific signatures
- bitbake-dumpsig: Allow recipe and task to be specified
* buildhistory-diff: report directory renames
* classes/buildhistory: add layer name to source recipe data
* Added acl to default DISTRO_FEATURES
* Native/nativesdk recipes now built with their own DISTRO_FEATURES values to avoid unnecessary rebuilds
* Allow udev-hwdb to be optional so you can remove it to save space (now an RRECOMMENDS)
* Support xz-compressed patches
* Added devupstream class to make it easy to add recipe variants that track an upstream development repository
* ovmf: provide option and image recipe to enable Secure Boot
* externalsrc.bbclass: Add task do_buildclean
* rm_work.bbclass: allow preserving additional content
* rm_work.bbclass: introduce do_build_without_rm_work
* bitbake-layers: show-appends: add optional argument to limit package list
* libdrm: enable etnaviv experimental support
* Use xf86-input-libinput by default
* webkitgtk: Add an option to disable opengl support
* xserver-xorg: Enable glamor by default
* u-boot: add support for timeout & default in extlinux.conf
* u-boot: add option to specify FDT argument in extlinux.conf
* Add oe-git-archive script for simply archiving and pushing build stats or other output to a git repo
* terminal.bbclass: export configure vars
* libc-package.bbclass: split binary localedata even more if asked to
* openssl: Add support for many MIPS configurations
* arch-mips: Add MIPS 64r6 N32 tune
* initscripts: mount configfs if present
* apt: enable scheduled maintenance scripts
* opkg: enabled libsolv backend by default for more accurate dependency resolution
* musl: enabled GObject introspection
* package.bbclass: Add SHLIB detection support for mingw targets
* gcc: create symlinks for gcov and gcov-tool for the target
* Add QAPKGTEST, a package-wide equivalent to QAPATHTEST, for more efficient package QA tests
* sstate: Make SSTATE_SCAN_CMD configurable using weak defaults
* sstate: update .siginfo atime for local mirrors
* cve-check: allow recipes to override the product name
* Added manpages class to enable building documentation via api-documentation being in DISTRO_FEATURES
* Include license text in LIC_FILES_CHKSUM validation error messages

-----------------
Known Issues
-----------------

* Signing of remote package feeds using PACKAGE_FEED_SIGN is not currently supported. See bug 11209 for details.

* As detailed in bugs https://bugzilla.yoctoproject.org/show_bug.cgi?id=10832
and https://bugzilla.yoctoproject.org/show_bug.cgi?id=10881, an eSDK built on
a machine with the host gcc version >= 5.0 cannot be installed on a machine
where the host gcc version is 4.8 or 4.9. Therefore, the eSDK’s available on
the downloads.yoctoproject.org site in release 2.3 are only for machines with
host gcc version >= 5.0. As a workaround, if you need an eSDK for a machine
with a gcc version < 5.0, you can build your own on a machine with that gcc
version. To be explicit, an eSDK built on a machine with host gcc version of
4.8 will work on a machine with gcc version 4.8 or 4.9 or 5.0 or greater and
one built on gcc version 4.9 will work on a machine with gcc version 4.9 or
5.0 or greater.

------------------------
Migration instructions
------------------------

For details on changes that you might need to make when migrating to the
Yocto Project 2.3 release from previous releases, please see the following
manual section:

http://www.yoctoproject.org/docs/2.3/ref-manual/ref-manual.html#moving-to-the-yocto-project-2.3-release


-----------------
Security Fixes
-----------------

* bash: fix CVE-2016-9401
* binutils: Fix CVE-2017-6965 and CVE-2017-6966
* busybox: Security fix BUG9071
* busybox: Security fix CVE-2016-6301
* cmake: Backport fix to enable -Wformat-security
* console-tools: fix string formatting issue
* curl: Update to version 7.51.0 (fixes CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625)
* expect: resolve string formatting issues
* gcc: Fix CVE-2016-6131 in libiberty
* gettext: fix formatting issues
* ghostscript: CVE-2017-7207
* glibc: fix CVE-2016-6323
* gstreamer: update to 1.10.4 (CVE-2017-5847, CVE-2017-5848)
* kexec-tools: Add patches to enable format-security
* libpng12: Upgrade 1.2.56 -> 1.2.57
* libpng: Upgrade 1.6.26 -> 1.6.28
* libxml2: fix CVE-2016-4658
* libxml2: Fix more NULL pointer derefs
* libxml2: Security fix CVE-2016-5131
* linux-yocto/4.1: fix CVE-2016-5195 (dirtycow)
* linux-yocto/4.4: update to v4.4.26 (CVE-2016-5195 - dirtycow)
* linux-yocto/4.4: update to v4.4.32 (CVE-2016-8630)
* linux-yocto/4.x: CVE-2016-8655
* musl: Security fix CVE-2016-8859
* openssh: fix CVE-2016-8858
* openssl: CVE-2004-2761
* openssl: Security fix CVE-2016-7055
* qemu: display: CVE-2016-9908
* qemu: display: CVE-2016-9912
* qemu: fix CVE-2016-7423 and CVE-2016-7908
* qemu: fix CVE-2016-7909
* qemu: supplementary fix of CVE-2016-5403
* screen: update to 4.5.1 (CVE-2017-5618)
* systemd: CVE-2016-7795
* tar: CVE-2016-6321
* tiff: Update to 4.0.7 (fixes CVE-2016-9297, CVE-2016-9448, CVE-2016-9273, CVE-2014-8127, CVE-2016-3658, CVE-2016-5875, CVE-2016-5652, CVE-2016-3632)
* tiff: Fix CVE-2016-9533, CVE-2016-9534, CVE-2016-9536 and CVE-2016-9537
* tiff: fix CVE-2017-5225
* tiff: Security fix CVE-2016-3622
* tiff: Security fix CVE-2016-3623
* tiff: Security fix CVE-2016-3945
* tiff: Security fix CVE-2016-3990
* tiff: Security fix CVE-2016-3991
* tiff: Security fix CVE-2016-9535
* tiff: Security fix CVE-2016-9538
* tiff: Security fix CVE-2016-9539
* tiff: Security fix CVE-2016-9540
* unzip: CVE-2014-9913 CVE-2016-9844


-----------------
Recipe Upgrades
-----------------

* acpid: Upgrade 2.0.27 -> 2.0.28
* adwaita-icon-theme: Upgrade 3.20 -> 3.22.0
* alsa-lib: 1.1.2 -> 1.1.3
* alsa-tools: 1.1.0 -> 1.1.3
* alsa-utils-scripts: update 1.1.2 -> 1.1.3
* alsa-utils: update 1.1.2 -> 1.1.3
* atk: Upgrade 2.20.0 -> 2.22.0
* at-spi2-atk: Upgrade 2.20.1 -> 2.22.0
* at-spi2-core: Upgrade 2.20.2 -> 2.22.0
* autogen-native: Update to version 5.18.12
* babeltrace: update to 1.5.2
* bash-completion: update to 2.5
* binutils: Upgrade to 2.28 release
* bluez5: Upgrade 5.41 -> 5.43
* boost: update to 1.63.0
* btrfs-tools: update to 4.9.1
* byacc: upgrade to 20161202
* ca-certificates: update to 20161130
* cairo: Upgrade 1.14.6 -> 1.14.8
* ccache: Upgrade to v3.3.4
* clutter-gst-3.0: Update to version 3.0.22
* clutter-gtk-1.0: Update to version 1.8.2
* cmake: Update to 3.7.2
* cogl-1.0: Upgrade 1.22.0 -> 1.22.2
* coreutils: upgrade to 8.26
* cryptodev: update to handle 4.10 kernel API
* cups: upgrade to 2.2.2
* curl: upgrade to 7.53.1
* dbus/dbus-test: upgrade to 1.10.14
* dbus-glib 0.106 -> 0.108
* debianutils: 4.8 -> 4.8.1
* dhcp: 4.3.4 -> 4.3.5
* diffutils: 3.4 -> 3.5
* dosfstools: upgrade to 4.1
* dpkg: Upgrade to 1.18.10
* dtc: update to 1.4.2
* e2fsprogs 1.43 -> 1.43.4
* ed: update to 1.14.1
* elfutils: 0.166 -> 0.168
* epiphany: update to 3.22.6
* ethtool: Upgrade 4.6 -> 4.8
* eudev: Upgrade to 3.2.1
* ffmpeg: update to 3.2.4
* file: 5.28 -> 5.30
* flac: 1.3.1 -> 1.3.2
* flex: upgrade to 2.6.2
* freetype: Upgrade 2.6.5 -> 2.7.1
* gawk: Update to version 4.1.4
* gcc6: Upgrade to 6.3.0
* gdb: Upgrade to 7.12.1
* gdk-pixbuf: 2.34.0 -> 2.36.5
* ghostscript 9.19 -> 9.20
* git: upgrade to 2.11.1
* glib-2.0: Upgrade 2.48.2 -> 2.50.3
* glibc: Update to 2.25 release
* glib-networking: Upgrade 2.48.2 -> 2.50.0
* gmp: Update to 6.1.2
* gnome-desktop3: update to 3.22.2
* gnome-themes-standard: Upgrade 3.20.2 -> 3.22.2
* gnu-efi: 3.0.4 -> 3.0.5
* gnupg: 2.1.14 -> 2.1.18
* gnutls: update to 3.5.9
* gobject-introspection: update to 1.50.0
* gpgme: 1.6.0 -> 1.8.0
* grep: upgrade to 3.0
* grub-git: Upgrade to tip of master
* gsettings-desktop-schemas: Upgrade 3.20.0 -> 3.22.0
* gst-player: Upgrade to recent git revision
* gstreamer: update to 1.10.4
* gtk+3: Upgrade 3.20.9 -> 3.22.8
* gtk-icon-utils-native: Upgrade 3.20.9 -> 3.22.1
* gtk+: Upgrade 2.24.30 -> 2.24.31
* guile: 2.0.12 -> 2.0.14
* harfbuzz: Upgrade 1.3.0 -> 1.4.1
* hdparm: 9.48 -> 9.51
* icu: update to 58.2
* ifupdown: upgrade to 0.8.16
* iproute2: upgrade to 4.10.0
* iptables: upgrade to 1.6.1
* iso-codes: update to 3.74
* iw: upgrade to 4.9
* kbd: update to 2.0.4
* kexec-tools: Update to 2.0.14
* less: 481 -> 487
* libarchive: update to 3.2.2
* libdrm: Upgrade 2.4.70 -> 2.4.75
* libepoxy: upgrade to 1.4.0
* libevdev: Upgrade 1.5.2 -> 1.5.6
* libfm: update to 1.2.5
* libgcrypt: 1.7.3 -> 1.7.6
* libgpg-error: Update to version 1.26
* libgudev: Upgrade 230 -> 231
* libinput: Upgrade 1.4.1 -> 1.6.1
* libjpeg-turbo: Upgrade 1.5.0 -> 1.5.1
* libksba: update to 1.3.5
* libnl: update to 3.2.29
* libnotify : 0.7.6 -> 0.7.7
* libpcap: Update to version 1.8.1
* libpcre: 8.39 -> 8.40
* libpng12: Upgrade 1.2.56 -> 1.2.57
* libpng: Upgrade 1.6.24 -> 1.6.28
* libproxy: update to version 0.4.14
* libsamplerate0: 0.1.8 -> 0.1.9
* libsdl2: update to 2.0.5
* libsolv: upgrade to 0.6.26
* libsoup-2.4: Upgrade 2.54.1 -> 2.56.0
* libtasn1: Upgrade 4.9 -> 4.10
* libunistring: Update version 0.9.6 -> 0.9.7
* liburcu: update to 0.9.3
* liburi-perl: update to 1.71
* libusb1: upgrade 1.0.20 -> 1.0.21
* libva: Import from meta-intel and update to 1.7.3
* libwebp: update to 0.6.0
* libx11-diet: Upgrade 1.6.3 -> 1.6.4
* libx11: Upgrade 1.6.3 -> 1.6.4
* libxfixes: Upgrade 5.0.2 -> 5.0.3
* libxfont2: Add recipe
* libxfont: Upgrade 1.5.1 -> 1.5.2
* libxi: Upgrade 1.7.6 -> 1.7.9
* libxkbcommon: 0.6.1 -> 0.7.1
* libxpm: Upgrade 3.5.11 -> 3.5.12
* libxrandr: Update to version 1.5.1
* libxrender: Upgrade 0.9.9 -> 0.9.10
* libxtst: Upgrade 1.2.2 -> 1.2.3
* libxvmc: Upgrade 1.0.9 -> 1.0.10
* libxv: Upgrade 1.0.10 -> 1.0.11
* lighttpd: Upgrade 1.4.42 -> 1.4.45
* linux-firmware: update to revision a4dde74b
* linux-libc-headers: introduce 4.10 and set as default
* linux-yocto/4.10: update to v4.10.9
* linux-yocto/4.1: update to v4.1.38
* linux-yocto/4.4: update to v4.4.60
* linux-yocto/4.9: update to v4.9.21
* linux-yocto-dev: update to v4.11+
* linux-yocto-rt/4.4: update to -rt43
* linux-yocto-rt/4.9: update to 4.9-rt6
* ltp: upgrade to 20170116
* lttng-modules: update to 2.9.1
* lttng-tools: update to 2.9.4
* lttng-ust: upgrade to 2.9.0
* m4: 1.4.17 -> 1.4.18
* man-pages: 4.07 -> 4.09
* matchbox-wm: Upgrade 1.2.1 -> 1.2.2
* mc: Upgrade 4.8.17 -> 4.8.18
* mdadm: upgrade to version 4.0
* menu-cache: Upgrade 1.0.1 -> 1.0.2
* mesa: Update to 17.0.2
* mklibs-native: 0.1.41 -> 0.1.43
* mmc-utils: Upgrade to latest git version
* mpfr: 3.1.4 -> 3.1.5
* mpg123: update to 1.23.8
* msmtp: update to 1.6.6
* mtd-utils: Upgrade to 2.0.0
* musl: Upgrade to 1.1.16+ on master (54807d47ace)
* ncurses: 6.0+20160625 -> 6.0+20161126
* neon: Upgrade 0.30.1 -> 0.30.2
* netbase: upgrade to version 5.4
* nettle: Update to version 3.3
* nfs-utils: 1.3.3 -> 1.3.4
* npth: update to 1.3
* nspr: update to 4.13.1
* nss: update to 3.28.1
* ofono: update 1.18 -> 1.19
* openssh: upgrade to 7.4p1
* openssl: Updgrade 1.0.2j -> 1.0.2k
* opkg: upgrade to v0.3.4
* opkg-utils: bump to 0.3.4+git1a708fd73d10c
* orc: Upgrade 0.4.25 -> 0.4.26
* pango: Upgrade 1.40.1 -> 1.40.3
* pax-utils: 1.1.6 -> 1.2.2
* pciutils: 3.5.1 -> 3.5.2
* pcmanfm: upgrading to 1.2.5
* perl: Upgrade to 5.24.0
* perl: Upgrade to 5.24.1
* piglit: Upgrade to current master
* pigz: Update to version 2.3.4
* poky: make 4.10 the qemu* default
* poky-tiny: Bump default kernel version to 4.9
* presentproto: Upgrade 1.0 -> 1.1
* pseudo: update to 1.8.2
* pulseaudio: 9.0 -> 10.0
* puzzles: Upgrade and fix with clang
* python3-docutils: upgrade to 0.13.1
* python3-numpy: upgrade to 1.11.2
* python3-pip: upgrade to 9.0.1
* python3-pygobject: upgrade to 3.22.0
* python3-setuptools: upgrade to 31.1.1
* python*-git: Upgrade to version 2.1.1
* python*-mako: upgrade to 1.0.6
* python-numpy: upgrade to 1.11.2
* python-pexpect: upgrade to 4.2.1
* python-scons*: upgrade to 2.5.1
* python: Upgrade both python and python-native to 2.7.13
* qemu: Upgrade to 2.8.0
* quilt: 0.64 -> 0.65
* readline: Update to version 7.0
* rpcbind: 0.2.3 -> 0.2.4
* ruby: upgrade to 2.4.0
* screen: update to 4.5.1
* serf: Update to version 1.3.9
* shared-mime-info 1.6 -> 1.8
* slang: 2.3.0 -> 2.3.1a
* socat: 1.7.3.1 -> 1.7.3.2
* sqlite3: 3.14.1 -> 3.17.0
* strace: 4.13 -> 4.16
* subversion: Upgrade 1.9.4 -> 1.9.5
* sudo: 1.8.17p1 -> 1.8.19p2
* swig: 3.0.8 -> 3.0.12
* sysprof: update to 3.22.3
* sysstat: upgrade to 11.5.4
* systemd-bootchart: upgrade to 231
* systemd: Upgrade to 232
* systemtap: update to 3.1
* taglib: Update to 1.11.1
* texinfo: upgrade from 6.0 to 6.3
* tiff: Update to 4.0.7
* tzcode-native: update to 2017b
* tzdata: update to 2017b
* u-boot: Update to 2017.01 release
* util-linux: 2.28.1 -> 2.29.1
* util-macros: Upgrade 1.19.0 -> 1.19.1
* vala: update to 0.34.4
* valgrind: update to 3.12.0
* vte: Upgrade 0.44.2 -> 0.46.1
* wayland: upgrade from 1.11.0 to 1.13.0
* webkitgtk: update to 2.14.5
* weston: Upgrade 1.11.0 -> 2.0.0, separate libweston
* wget: 1.18 -> 1.19.1
* wpa-supplicant: 2.5 -> 2.6
* x264: Update to latest on stable branch (2b741f81e5)
* xauth: Upgrade 1.0.9 -> 1.0.10
* xf86-input-evdev: Upgrade 2.10.3 -> 2.10.5
* xf86-input-keyboard: Upgrade 1.8.1 -> 1.9.0
* xf86-input-libinput: Upgrade 0.19.0 -> 0.24.0
* xf86-input-mouse: Upgrade 1.9.1 -> 1.9.2
* xf86-input-synaptics: Upgrade 1.8.3 -> 1.9.0
* xf86-video-intel: Upgrade to recent git revision
* xf86-video-omap: Upgrade 0.4.4 -> 0.4.5
* xf86-video-vmware: Upgrade 13.1.0 -> 13.2.1
* xinput-calibrator: use up-to-date git version
* xkeyboard-config: 2.18 -> 2.20
* xproto: Upgrade 7.0.29 -> 7.0.31
* xserver-xorg: Upgrade 1.18.4 -> 1.19.1
* xz: upgrade to 5.2.3
* yocto-uninative: Update to the 1.6 release
* zlib: Upgrade 1.2.8 -> 1.2.11