After backing out of the first attempt to migrate we are again moving
our lists from Mailman to Groups.io. E-mail to lists will be delayed
during the move window on November 21st between 17:00 and 23:00 UTC.

A new account will be created for you on the Groups.io platform and most
users will only need to update their list mailing address from the
@yoctoproject.org to @lists.yoctoproject.org.

Moderators please attend to all pending requests next Wednesday November
20th.

Please read more about the change on the wiki:

https://wiki.yoctoproject.org/wiki/index.php?title=GroupsMigration

If there are serious issues we will rollback the changes. We will e-mail
all lists when work is complete.

--
Michael Halstead
Linux Foundation / Yocto Project
Systems Operations Engineer

Hello,

We are pleased to announce the Yocto Project 2.6.4 (thud-20.0.4) Release is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/poky-thud-20.0.4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.4/poky-thud-20.0.4.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/testreport.txt

Thank you for everyone's contributions to this release.

Note: Yocto Project has updated the expiration date on the release signing key.
Please import https://downloads.yoctoproject.org/releases/yocto/keys/yocto-release-key.asc to verify RELEASENOTES and git tags.

Sincerely,

Vineela Tummalapalli
Yocto Project Build and Release
vineela.tummalapalli@...


- -------------------------
yocto-2.6.4 Release Notes
- -------------------------

- -----------------------
Repositories/Downloads
- -----------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: thud
Tag: yocto-2.6.4
Git revision: 51f6145f8f99a02df1dad937684f014b0172e72a
Release Artefact: poky-thud-20.0.4
md5: 9859b2ac90ced909bdd7293125295348
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/poky-thud-20.0.4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.4/poky-thud-20.0.4.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: thud
Tag: yocto-2.6.4
Git revision: cd7cf933b3235560ec71576d8f3836dff736a39f
Release Artefact: oecore-thud-20.0.4
md5: a2f1d7fa021ca3d37c5c3a65ea27b2d7
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/oecore-thud-20.0.4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.4/oecore-thud-20.0.4.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: thud
Tag: yocto-2.6.4
Git revision: 6556cde16fbdf42c7edae89bb186e5ae4982eff5
Release Artefact: meta-mingw-thud-20.0.4
md5: 8e20b388086db80a1420cfa5be5f5573
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/meta-mingw-thud-20.0.4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.4/meta-mingw-thud-20.0.4.tar.bz2

Repository Name: meta-intel
Repository Location: https://git.yoctoproject.org/git/meta-intel
Branch: thud
Tag: yocto-2.6.4
Git revision: c200851435f39acd2fe4abbf7a05fbf617833964
Release Artefact: meta-intel-thud-20.0.4
md5: 4696150e7676a926baf0975e252f0964
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/meta-intel-thud-20.0.4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.4/meta-intel-thud-20.0.4.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: thud
Tag: yocto-2.6.4
Git revision: aabc30f3bd03f97326fb8596910b94639fea7575
Release Artefact: meta-gplv2-thud-20.0.4
md5: 478bd5348e9b64fde6df18a82f691fd3
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.4/meta-gplv2-thud-20.0.4.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.4/meta-gplv2-thud-20.0.4.tar.bz2

- ---------------
Known Issues
- ---------------
Bug 13273 - Systemtap doesn't work on beaglebone
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13273

- ---------------
Security Fixes
- ---------------
curl: Security fix for CVE-2019-5482
libsolv: Security fix for CVEs: <CVE-2018-20532, CVE-2018-20533, CVE-2018-20534>
gnutls: Fix CVE-2019-3829 and CVE-2019-3836
glibc: Security fix for cve <CVE-2019-6488, CVE-2019-7309>
wget: Security fixes CVE-2018-20483
sqlite3: Security fix for CVE-2019-8457
perl: Fix CVE-2018-18311 to 18314
unzip: fix CVE-2019-13232
elfutils: CVE fix for elfutils
qemu: Fix 4 CVEs
pango: fix CVE-2019-1010238
patch: fix CVE-2019-13638
libxslt: fix CVE-2019-13117 CVE-2019-13118
libxslt: Cve fix CVE-2019-11068
python3: Fix CVEs
python: Fix 3 CVEs
binutils: Fix 4 CVEs
binutils: Security fix for CVE-2019-12972
binutils: Security fix for CVE-2019-14444
gcc: Security fix for CVE-2019-14250
libcomps: fix CVE-2019-3817
glib-2.0: fix CVE-2019-13012
dbus: fix CVE-2019-12749
curl: fix CVE-2018-16890 CVE-2019-3822 CVE-2019-3823
python3: fix CVE-2019-9740
patch: fix CVE-2019-13636


- ---------------
Fixes
- ---------------
build-appliance-image: Update to thud head revision
Revert "OpkgPM: use --add-ignore-recommends to process BAD_RECOMMENDATIONS"
build-appliance-image: Update to thud head revision
poky.conf: Bump version for 2.6.4 thud release
kernel-devsrc: check for localversion files in the kernel source tree
arch-arm64.inc: Lower the priority of aarch64 in MACHINEOVERRIDES
kernel.bbclass: fix installation of modules signing certificates
bitbake: cookerdata: Add mc conffiles hashes to cache hash
uninative: Update to 2.7 release
gnupg: Do not apply -Woverride-init guard for gcc >= 9
libgpg-error: Fix build with gawk 5.x
qemu: fix build issue on new hosts with glibc 2.30
json-c: Don't --enable-rdrand
oeqa/selftest/context: ensure log directory exists
linux-yocto/4.14: update to v4.14.143
patch: backport fixes
dhcp: Replace OE specific patch for compatibility with latest bind with upstream patch
dhcp: drop lost patch
dhcp: fix issue with new bind changes
go: update to 1.11.13, minor updates
bind: upgrade 9.11.5 -> 9.11.5-P4
bind: update to latest LTS 9.11.5
qemu: add a patch fixing the native build on newer kernels
buildhistory: call a dependency parser only on actual dependency lists
bitbake: tests/fetch: Resolve fetch error in bitbake-selftest
YP Docs: Set up the August 2019 date for 2.6.3 release.
bitbake: fetch2: show warning when renaming the archive with bad checksum failed
bitbake: utils: Fix movefile() exception handling with python3

Changing the subject..

Hello,

We are pleased to announce the Yocto Project 3.0 (zeus-22.0.0) Release is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/testreport.txt

Thank you for everyone's contributions to this release.

Vineela Tummalapalli
Yocto Project Build and Release
vineela.tummalapalli@...

- -----------------------
yocto-3.0 Release Notes
- -----------------------

- ----------------------
Repositories/Downloads
- ----------------------

Repository Name: Poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: zeus
Tag: yocto-3.0
Git revision: 94f6b31befda5c496f65e863a6f8152b42d7ebf0
Release Artefact: poky-zeus-22.0.0
md5: bb0925e0b338bf3d9ebed72b30679e36
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: zeus
Tag: 2019-10
Git revision: 59938780e7e776d87146002ea939b185f8704408
Release Artefact: oecore-zeus-22.0.0
md5: e2fec576ee37d4f613540ecac7f4c63e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/oecore-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/oecore-zeus-22.0.0.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: zeus
Tag: yocto-3.0
Git revision: 756963cc28ebc163df7d7f4b4ee004c18d3d3260
Release Artefact: meta-mingw-zeus-22.0.0
md5: 9b59518e18af36a2f1520885841d3834
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/meta-mingw-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/meta-mingw-zeus-22.0.0.tar.bz2

Repository Name: meta-intel
Repository Location: https://git.yoctoproject.org/git/meta-intel
Branch: zeus
Tag: yocto-3.0
Git revision: 13fcf624491cdd0d9b3eb78a4f0cd1781b482b51
Release Artefact: meta-intel-zeus-22.0.0
md5: e6fb4a143d61d2552dd637dc23ea791e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/meta-intel-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/meta-intel-zeus-22.0.0.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: zeus
Tag: yocto-3.0
Git revision: 9ca96786fd851150b518388bcb166efa0b4dfff9
Release Artefact: meta-gplv2-zeus-22.0.0
md5: ed9d383a1cd85afb7d37eb567a21c84a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/meta-gplv2-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/meta-gplv2-zeus-22.0.0.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: zeus
Tag: yocto-3.0
Git revision: 5d83d828cacb58ccb7c464e799c85fd2d2a50ccc
Release Artefact: bitbake-zeus-22.0.0
md5: a5036bdfdfc3ee47a98d6e12660e84aa
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/bitbake-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/bitbake-zeus-22.0.0.tar.bz2

- ---------------------------
New Features / Enhancements
- ---------------------------

* Linux kernel 5.2/4.19, gcc 9.2, glibc 2.30 and ~260 other recipe upgrades
* Build change equivalence is detected and used to avoid rebuilding unchanged components (BETA)
- See "Hash Equivalence" sample entry in local.conf.sample for usage instructions.
* Automated testing improvements:
- Enabled test suites for gcc, glibc, binutils
- Add ptest ptest support to elfutils, m4, gettext
- Fixes for many ptest test failures
- testimage: consider QB_DEFAULT_FSTYPE
- oe-selftest: implement console keepalive output
- Support for LTP / LTP compliance
- Added core-image-sato-ptest-fast image to execute 'fast' subset of ptests
- resulttool: Add log subcommand
- resulttool: enable loading results directly from an http/https URL
- resulttool: add manual test case configuration option
- resulttool: Add option to dump all ptest logs
* Architecture / machine-specific enhancements:
- New "qemuriscv64" emulated RISC-V 64-bit machine
- qemu: Add ppc64 to QEMU_TARGETS
- qemuarm64: Add QB_CPU_KVM to allow kvm acceleration
- New tune file for ARM Cortex-A53-Cortex-A57
- New tune file for arm1176jz-s CPU
- meson.bbclass: Handle microblaze* mapping to cpu family
- meson.bbclass: Make meson support aarch64_be.
- libffi: added RISC-V support
- icu: added armeb support
- runqemu: added support for kvm on aarch64
- beaglebone-yocto machine now set up to support booting images with runqemu
- qemux86: make it possible to use higher tunes using DEFAULTTUNE
* Kernel improvements:
- kernel-fitimage: introduce FIT_HASH_ALG
- kernel-module-split.bbclass: support CONFIG_MODULE_COMPRESS=y
- kernel-yocto: import security fragments from meta-security
- linux-yocto: add drm-bochs support
- linux-yocto: bsp/beaglebone: support qemu -machine virt
* multiconfig builds now reach their full potential:
- Many bugfixes and improvements
- sstate cache is now shared between configurations being built concurrently
- multiconfig configurations can be contained in layers
* Significant removal of old/obsolete software/patches ensuring we have a modern and up to date core Linux software stack:
- LSB support removed
- GTK+ 2 moved out to meta-oe
- Python 2 dependencies minimised
- Many obsolete patches dropped
* CVE checking enhancements:
- New cve-update-db recipe that reads from NVD JSON data feeds and supports network proxies
- Support for CVSSv3 scoring
- CVE_PRODUCT entries can now contain strings to match the vendor as well as product (vendor:product syntax)
* New INIT_MANAGER variable to make it easy to select the init manager (sysvinit, systemd, mdev-busybox)
* New recipes: binutils-cross-testsuite, core-image-sato-ptest-fast, dejagnu, efibootmgr, efivar, ell, glibc-testsuite, libcap-ng-python, libedit, libmodule-build-perl, libx11-compose-data, libxcrypt-compat, lsb-release, musl-obstack, opensbi, python3-pygments, python3-scons, python3-scons-native, stress-ng, vulkan-headers, vulkan-loader, vulkan-tools, wireless-regdb
* Added native variant to: glib-networking, grub, libsoup, python3-dbus
* BitBake improvements:
- Merged setscene tasks into the main runqueue so they can run in parallel
- fetch2/git: added sanity checking for git-lfs
- fetch2/svn: prevent from directly pulling from an externals w/o fetcher
- fetch2/npm: use npm pack to download node modules instead of wget
- Added --skip-setscene option
- Respect -f/--force option in conjunction with --runall or --runonly
- bitbake -e now supports showing base multiconfig configuration (using mc: prefix)
- "mc:" prefix now supported as a shorter version of multiconfig:
- Print more information when basehashes are mismatched
- Show task elapsed time in hours, minutes, and seconds
- Report all nonexistent directories in BBLAYERS in error message instead of just the first
- Improve validation of addtask and deltask arguments
- Added support for custom progress handlers injected via OE_EXTRA_IMPORTS
- Enable console keepalive to help usage with remote sessions
- Symlink the current cache file
* systemd-related improvements:
- serial-getty@.service: Allow device to fast fail if it does not exist
- Rewrote systemctl-native in Python supporting preset-all and mask
- Added partial support of drop-in configuration files to systemd-systemctl-native
- systemd-conf: added default configuration for wired network with DHCP
- systemd-conf: simplified creation of machine-specific configuration
- Create preset files and allow systemd to populate /etc/systemd/system instead of populating explicitly
- Added systemd helper unit to load/restore iptables rules
* runqemu improvements:
- Added support to pass multiple ports to tcpserial parameter
- Added support for a BIOS command-line variable (consistent with KERNEL)
- New QB_FSINFO variable supporting "wic:no-kernel-in-fs" and "wic:kernel-in-fs" for wic images
- Added support to handle EnrollDefaultKeys PK/KEK1 certificate
- Decoupled gtk and gl options
* wic improvements:
- New partition type for msdos partition tables
- New "bootimg-biosplusefi" source type that supports both BIOS and EFI
- Support for kernel with initramfs bundled
- bootimg-efi: add label source parameter
- bootimg-efi: allow multiple initrd
- bootimg-efi: replace hardcoded volume name with label
- Include .wks.in in wic search and list
- Use KERNEL_IMAGETYPE instead of hardcoding bzImage
- Added global debug option
* Other image-related improvements:
- Centralised default UEFI image configuration in conf/distro/image-uefi.conf
- Make gzipped images rsyncable
- initramfs-framework: support PARTLABEL option
- New bash-completion IMAGE_FEATURES item to add bash-completion support for all installed packages
* devtool/recipetool improvements:
- New "devtool menuconfig" subcommand
- devtool build now also runs do_deploy if applicable
- devtool finish now supports a --no-clean option
- devtool finish now warns if multiple layers have the same base name
- recipetool now supports creating recipes for Python 3
* Other script improvements:
- buildstats-diff: added option to filter tasks
- bitbake-layers: added several options to to make it easier to get plain output (for scripting)
- ddimage: replaced target device blacklist with mount check
- yocto-check-layer: Allow any case for README file detection
* SDK-related changes:
- New SDK_ARCHIVE_TYPE variable to control SDK archive format
- Introduce mechanism to keep nativesdk* sstate in eSDK
- Added nativesdk variant to: dnf, gzip, libtasn1, python3-dbus
- Use the best xz compression for the SDK
* buildhistory improvements:
- Record sysroot changes in addition to runtime content
- Show time spent writing buildhistory
* Recipe sanity checking improvements:
- Added check to ensure perllocal.pod is not installed by non-CPAN perl recipes
- Added sanity checks for ${PN} vs ${BPN} and github archives in SRC_URI
- Check if a recipe incorrectly uses DEPENDS_${PN}
- Improved buildpath warning messages
- Simplified paths in host contamination warnings
* poky-lsb replaced by poky-altcfg for alternate configurations to be tested on the autobuilder (as well as an example of subclassing a distro config)
* Added minver and maxver parameters for patches in SRC_URI for more flexibility in bbappends and common inc files
* PRIVATE_LIBS variable now supports shell-style wildcards for matching libraries
* Adoption of SPDX license identifiers throughout Yocto Project's components
* Added bbverbnote shell log command (consistent with bbwarn, bberror etc.)
* New OE_EXTRA_IMPORTS variable to make it easier to import custom modules into BitBake python environment
* busybox: enabled unicode support by default
* cmake: Use compiler launcher variable when ccache is enabled so that it can be disabled by build scripts if needed
* db: add new "verify" PACKAGECONFIG option for enabling database verification with db_verify command (default disabled)
* distcc: split into client and server packages
* dropbear: new "disable-weak-ciphers" PACKAGECONFIG option to disable older weak ciphers
* grub-efi-native: install grub-editenv
* lttng-modules: added git based recipe
* opkg: allow overriding OPKGLIBDIR
* ovmf: Generate test Platform key and first Key Exchange Key
* New PKGDATA_VARS variable to specify variables written out to pkgdata
* Obsolete stress recipe replaced by stress-ng
* uboot-sign: add support for different u-boot configurations
* update-rc.d: support enable/disable options
* waffle: support building without x11
* weston-init: Add possibility to run weston as non-root user
* python3: support recommends in manifest
* package_deb: add DPKG_BUILDCMD variable to allow customising dpkg command
* chrpath.bbclass: Add break_hardlinks parameter to allow breaking hardlinks when processing rpaths
* New "Apache-2.0-with-LLVM-exception" common license file
* screen: add /etc/screenrc as global config file
* utils/multiprocess_launch: Improve failing subprocess output
* Added local.conf/auto.conf into error report submitted by report-error.bbclass
* Added OpenEmbedded logo .svg file to repository (from OE-Classic)

- ------------
Known Issues
- ------------
*Bug 13594: mpc8315e-rdb: the stap oeqa test causes OOM.
This issue is on a platform with minimal support and works outside the framework.
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13594

*Bug 13595: strace ptest failed .
strace issue is two individual test regressions which is an improvement on the test timeouts we had previously.
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13595

*The build/hash equivalency code is considered to be at beta testing level. When used in large scale deployment like the project autobuilder some task migration issues have been noticed. Work is ongoing to debug and address those issues. Individual developer testing seems to be stable.

- ---------------
Recipe Licenses
- ---------------
The following corrections have been made to the LICENSE values set by recipes:

* cairo: MPL-1 -> MPL-1.1
* dbus / dbus-glib / dbus-test: AFL-2 -> AFL-2.1
* iw: BSD -> BSD-2-Clause
* libical: MPL-1 -> MPL-1.0
* openssh: some files are licensed under ISC or MIT license, so add these to LICENSE
* taglib: MPL-1 -> MPL-1.1
* vte: several files in libvte source are LGPLv3+, so add to LICENSE and set LGPLv3+ as the libvte package LICENSE


- ----------------------
Migration instructions
- ----------------------

For details on changes that you might need to make when migrating to the Yocto Project 3.0 release from previous releases, please see the following manual section:

http://www.yoctoproject.org/docs/3.0/ref-manual/ref-manual.html#moving-to-the-yocto-project-3.0-release



- --------------
Security Fixes
- --------------
* binutils: CVE-2019-12972, CVE-2019-14250, CVE-2019-14444, CVE-2019-9070, CVE-2019-9071, CVE-2019-9074, CVE-2019-9075, CVE-2019-9076, CVE-2019-9077
* dbus: CVE-2019-12749
* gcc: CVE-2019-14250, CVE-2018-12886, CVE-2018-18484, CVE-2019-15847
* gdb: CVE-2017-9778
* ghostscript: CVE-2019-14811, CVE-2019-14817
* glib-2.0: CVE-2019-12450
* glibc: CVE-2018-20796 (same as CVE-2019-9169)
* gnupg: CVE-2019-13050
* gnutls: GNUTLS-SA-2019-03-27
* iptables: CVE-2019-11360
* libid3tag: CVE-2017-11550, CVE-2017-11551 (same as CVE-2004-2779)
* libxslt: CVE-2019-11068, CVE-2019-13117, CVE-2019-13118
* linux-yocto/4.19: CVE-2019-3887
* linux-yocto/5.0: CVE-2019-3887
* ltp: CVE-2017-17052
* nasm: CVE-2018-19755
* openssh: CVE-2018-20685, CVE-2019-6109, CVE-2019-6111
* patch: CVE-2018-1000156 (improved fix), CVE-2019-13636, CVE-2019-13638
* python3: CVE-2019-9740, CVE-2019-9948
* python: CVE-2018-20852, CVE-2019-9740, CVE-2019-9947 (same as CVE-2019-9740), CVE-2019-9948, CVE-2019-9636
* qemu: CVE-2019-12155, CVE-2019-15890
* rsync: CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843
* squashfs-tools: CVE-2015-4645, CVE-2015-4646
* tiff: CVE-2019-6128, CVE-2019-7663, CVE-2019-14973
* u-boot: CVE-2019-13103, CVE-2019-13104, CVE-2019-13105, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204
* unzip: CVE-2019-13232
* vim: CVE-2019-12735


- ---------------
Recipe Upgrades
- ---------------
* acpica: update to 20190816
* acpid: upgrade 2.0.31 -> 2.0.32
* adwaita-icon-theme: upgrade 3.30.1 -> 3.32.0
* alsa-lib: upgrade 1.1.8 -> 1.1.9
* alsa-plugins: upgrade 1.1.8 -> 1.1.9
* alsa-utils: upgrade 1.1.8 -> 1.1.9
* apr: upgrade 1.6.5 -> 1.7.0
* apt: update to 1.2.31
* aspell: update to 0.60.7
* atk: upgrade 2.30.0 -> 2.32.0
* at-spi2-atk: upgrade 2.30.0 -> 2.32.0
* at-spi2-core: upgrade 2.30.0 -> 2.32.1
* autoconf-archive: update to 2019.01.06
* babeltrace: update to 1.5.7
* bash-completion: upgrade 2.8 -> 2.9
* bash: upgrade 4.4.18 -> 5.0
* bison: upgrade 3.0.4 -> 3.4.1
* boost: update to 1.71.0
* btrfs-tools: upgrade 4.20.1 -> 5.2.2
* build-compare: 2015.02.10 -> 2019.08.14
* busybox: 1.30.1 -> 1.31.0
* bzip2: update to 1.0.8
* ccache: upgrade 3.6 -> 3.7.3
* cmake: 3.14.1 -> 3.15.3
* cogl: upgrade 1.22.2 -> 1.22.4
* connman: update to 1.37
* coreutils: update to 8.31
* createrepo-c: update to 0.15.0
* cronie: update to 1.5.4
* cups: update to 2.2.12
* curl: update to 7.66.0
* dbus-test: Upgrade 1.12.12 -> 1.12.16
* dbus: Upgrade 1.12.12 -> 1.12.16
* debianutils: upgrade 4.8.6.1 -> 4.8.6.3
* desktop-file-utils: upgrade 0.23 -> 0.24
* distcc: upgrade 3.3.2 -> 3.3.3
* dnf: upgrade 4.1.0 -> 4.2.2
* dpkg: update to 1.19.7
* dropbear: update to 2019.78
* dtc: upgrade 1.4.7 -> 1.5.1
* e2fsprogs: 1.44.5 -> 1.45.3
* elfutils: 0.176 -> 0.177
* ell: update to 0.22
* encodings: update to 1.0.5
* epiphany: update to 3.32.4
* ethtool: update to 5.2
* eudev: update to 3.2.8
* expat: update to 2.2.8
* ffmpeg: update to 4.2.1
* file: update to 5.37
* flac: Upgrade 1.3.2 -> 1.3.3
* fontconfig: update to 2.13.1
* font-util: update to 1.3.2
* freetype: upgrade 2.9.1 -> 2.10.1
* gawk: upgrade 4.2.1 -> 5.0.1
* gcc-9: Upgrade to 9.2
* gdb: Upgrade from 8.2.1 to 8.3.1
* gdk-pixbuf: update 2.38.0 -> 2.38.2
* ghostscript: 9.26 -> 9.27
* git: update to 2.23.0
* glib-2.0: udpate 2.58.3 -> 2.60.7
* glibc: Update to glibc 2.30
* glib-networking: upgrade 2.60.1 -> 2.60.3
* gnu-config: Update to latest SHA
* gnupg: update to 2.2.17
* gnutls: upgrade 3.6.5 -> 3.6.8
* go-1.12: update to 1.12.9 minor release
* gobject-introspection: update to 1.60.2
* go-dep: update to 0.5.4
* go: update 1.12.1->1.12.6
* gpgme: upgrade 1.12.0 -> 1.13.1
* groff: upgrade 1.22.3 -> 1.22.4
* grub: upgrade 2.02 -> 2.04
* gsettings-desktop-schemas: upgrade 3.28.1 -> 3.32.0
* gst-examples: upgrade to 1.16.0
* gstreamer1.0-libav: upgrade to version 1.16.0
* gstreamer1.0-omx: upgrade to version 1.16.0
* gstreamer1.0-plugins-bad: upgrade to version 1.16.0
* gstreamer1.0-plugins-base: upgrade to version 1.16.0
* gstreamer1.0-plugins-good: upgrade to version 1.16.0
* gstreamer1.0-plugins-ugly: upgrade to version 1.16.0
* gstreamer1.0-python: upgrade to version 1.16.0
* gstreamer1.0-rtsp-server: upgrade to version 1.16.0
* gstreamer1.0: upgrade to version 1.16.0
* gstreamer1.0-vaapi: upgrade to version 1.16.0
* gst-validate: upgrade to version 1.16.0
* gtk+3: update 3.24.5 -> 3.24.8
* gtk-doc: upgrade 1.29 -> 1.31
* harfbuzz: upgrade 2.3.1 -> 2.6.1
* help2man-native: update to 1.47.11
* icu: update to 64.2
* ifupdown: update to 0.8.22
* iproute2: update to 5.2.0
* iptables: upgrade 1.6.2 -> 1.8.3
* iputils: upgrade to s20190709
* iso-codes: upgrade 4.2 -> 4.3
* iw: upgrade 4.14 -> 5.3
* kmscube: Bump revision to f632b23
* less: upgrade 550 -> 551
* libarchive: upgrade 3.3.3 -> 3.4.0
* libatomic-ops: upgrade 7.6.8 -> 7.6.10
* libbsd: upgrade 0.9.1 -> 0.10.0
* libcap: update to 2.27
* libcomps: upgrade 0.1.10 -> 0.1.11
* libcroco: update to 0.6.13
* libdazzle: update to 3.32.3
* libdnf: update to 0.28.1
* libdrm: update to 2.4.99
* libevdev: upgrade 1.6.0 -> 1.8.0
* libevent: upgrade 2.1.8 -> 2.1.11
* libffi: Upgrade to 3.3-rc0
* libglu: upgrade 9.0.0 -> 9.0.1
* libgpg-error: upgrade 1.35 -> 1.36
* libgudev: upgrade 232 -> 233
* libical: upgrade to 3.0.6
* libice: upgrade 1.0.9 -> 1.0.10
* libidn2: upgrade to 2.2.0
* libinput: update to 1.14.1
* libjpeg-turbo: upgrade 2.0.2 -> 2.0.3
* libmodule-build-perl: upgrade 0.4224 -> 0.4229
* libmodulemd: update to 2.6.0
* libnewt: upgrade 0.52.20 -> 0.52.21
* libnl: upgrade to 3.5.0
* libnotify: update to 0.7.8
* libnss-nis: upgrade 3.0 -> 3.1
* libogg: upgrade 1.3.3 -> 1.3.4
* libpam: Upgrade 1.3.0 -> 1.3.1
* libpcap: upgrade 1.9.0 -> 1.9.1
* libpciaccess: upgrade 0.14 -> 0.16
* libpcre2: upgrade 10.32 -> 10.33
* libpng: update to 1.6.37
* libpsl: update to 0.21.0
* librepo: update to 1.10.5
* libsdl2: upgrade 2.0.9 -> 2.0.10
* libsecret: 0.19.0
* libsolf: update to 0.7.5
* libsolv: update to 0.7.6
* libsoup-2.4: upgrade 2.66.1 -> 2.66.2
* libsoup: Upgrade from 2.64.2 to 2.66.1
* libtasn1: upgrade 4.13 -> 4.14
* libtest-needs-perl: upgrade 0.002005 -> 0.002006
* libtirpc: upgrade 1.0.3 -> 1.1.4
* liburcu: update to 0.11.1
* libva: upgrade 2.4.0 -> 2.5.0
* libva-utils: upgrade 2.4.0 -> 2.5.0
* libwebp: upgrade 1.0.2 -> 1.0.3
* libx11-compose-data: upgrade 1.6.7 -> 1.6.8
* libx11: update to 1.6.8
* libxcrypt: update to 4.4.8
* libxdmcp: update to 1.1.3
* libxext: update to 1.3.4
* libxft: upgrade 2.3.2 -> 2.3.3
* libxi: update to 1.7.10
* libxkbfile: update 1.1.0
* libxml2: upgrade 2.9.8 -> 2.9.9
* libxml-sax-perl: upgrade 1.00 -> 1.02
* libxmu: update to 1.1.3
* libxrandr: update to 1.5.2
* libxt: update to 1.2.0
* libxvmc: update to 1.0.11
* libyaml: update to 0.2.2
* lighttpd: Upgrade 1.4.53 -> 1.4.54
* linux-firmware: Upgrade to 20190815
* linux-libc-headers: update to v5.2 headers
* linux-yocto/4.19: update to 4.19.72 and -rt22
* linux-yocto-dev: bump to 5.3-rcX
* linux-yocto: introduce 5.2.17 recipes
* linux-yocto-rt: update to 5.0.5-rt9
* llvm: Update to 8.0.1
* logrotate: upgrade 3.15.0 -> 3.15.1
* ltp: upgrade 20190115 -> 20190517
* lttng-modules: upgrade 2.10.8 -> 2.10.11
* lttng-tools: update to 2.10.7
* lttng-ust: upgrade 2.10.3 -> 2.10.5
* lz4: update to 1.9.2
* makedepend: update to 1.0.6
* man-db: upgrade 2.8.4 -> 2.8.7
* man-pages: upgrade 4.16 -> 5.01
* mc: update to 4.8.23
* mesa-demos: update to 8.4.0
* mesa: Update 19.0.1 -> 19.1.6
* meson: update to 0.51.2
* mmc-utils: update to the latest upstream code
* mobile-broadband-provider-info: upgrade 20190116 -> 20190618
* mpg123: upgrade 1.25.10 -> 1.25.11
* msmtp: 1.6.6 -> 1.8.5
* mtd-utils: Upgrade to 2.1.1
* mtools: update to 4.0.23
* musl: Update to latest master
* ncurses: upgrade 6.1+20181013 -> 6.1+20190803
* nettle: upgrade 3.4.1 -> 3.5.1
* newlib: Upgrade to 3.1.0
* nfs-utils: 2.3.3 -> 2.4.1
* nss: upgrade 3.42.1 -> 3.45
* ofono: upgrade 1.25 -> 1.30
* opensbi: Update from 0.3 to 0.4
* openssh: Upgrade 7.9p1 -> 8.0p1
* openssl: Upgrade 1.1.1b -> 1.1.1d
* opkg: upgrade to version 0.4.1
* opkg-utils: upgrade to version 0.4.1
* orc: update to 0.4.29
* ovmf: Update to version edk2-stable201905
* p11-kit: update to 0.23.16.1
* pango: upgrade 1.42.4 -> 1.44.6
* patchelf: Upgrade 0.9 -> 0.10
* perl: Move perl-sanity -> perl
* perl: update to 5.30.0
* piglit: upgrade to latest revision
* pixman: update to 0.38.4
* pkgconf: upgrade 1.6.0 -> 1.6.3
* ptest-runner: update from 2.3.1 to 2.3.2
* python3-dbus: upgrade 1.2.8 -> 1.2.12
* python3-docutils: update to 0.15
* python3-git: update to 3.0.2
* python3-mako: update to 1.1.0
* python3-numpy: update to 1.17.0
* python3-pbr: update to 5.4.3
* python3-pip: update to 19.2.3
* python3-pycairo: update to 1.18.1
* python3-pygobject: update to 3.34.0
* python3-scons: update to 3.1.1
* python3: upgrade 3.7.3 -> 3.7.4
* python-numpy: update to 1.16.3
* python-scons: update to 3.1.0
* python-setuptools: update to 41.2.0
* python: update to 3.7.3
* qemu: Upgrade from 3.1.0 to 4.1
* quilt: update to 0.66
* quota: update to 4.05
* rng-tools: 6.6 -> 6.7
* ruby: update to 2.5.5
* socat: upgrade 1.7.3.2 -> 1.7.3.3
* sqlite3: update to 3.29.0
* squashfs-tools: upgrade to commit f95864afe883
* strace: Upgrade to 5.3
* subversion: upgrade 1.11.1 -> 1.12.2
* sysprof: upgrade 3.30.2 -> 3.32.0
* sysstat: 12.1.3 -> 12.1.6
* systemd: upgrade to 243
* systemtap: update to 57c9aca9f1ff32a6add10e02ecd33b7314fad499
* tar: update to 1.32
* timezone: update to 2019c
* u-boot: Upgrade from 2019.01 to 2019.07
* uninative: Update to 2.7 release
* usbutils: upgrade 010->012
* util-linux: upgrade to 2.34
* vala: update to 0.44.7
* valgrind: update from 3.14.0 to 3.15.0
* vim: Update to 8.1.1240
* virglrenderer: update 0.7.0 -> 0.8.0
* vte: upgrade 0.52.2 -> 0.56.3
* waffle: upgrade 1.5.2 -> 1.6.0
* wayland-protocols: upgrade 1.17 -> 1.18
* webkitgtk: update to 2.24.4
* weston: upgrade 5.0.0 -> 7.0.0
* wget: update to 1.20.3
* wpa-supplicant: update to 2.9
* x11perf: update to 1.6.1
* x264: upgrade to latest revision
* xauth: upgrade 1.0.10 -> 1.1
* xf86-input-libinput: update to 0.29.0
* xinput: update to 1.6.3
* xkeyboard: upgrade 2.26 -> 2.27
* xorgproto: update to 2019.1
* xrandr: update to 1.5.1
* xserver-xorg: update to 1.20.5
* xtrans: upgrade 1.3.5 -> 1.4.0
* xwininfo: upgrade 1.1.4 -> 1.1.5

Hello,

We are pleased to announce the Yocto Project 3.0 (zeus-22.0.0) Release is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/testreport.txt

Thank you for everyone's contributions to this release.

Vineela Tummalapalli
Yocto Project Build and Release
vineela.tummalapalli@...

- -----------------------
yocto-3.0 Release Notes
- -----------------------

- ----------------------
Repositories/Downloads
- ----------------------

Repository Name: Poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: zeus
Tag: yocto-3.0
Git revision: 94f6b31befda5c496f65e863a6f8152b42d7ebf0
Release Artefact: poky-zeus-22.0.0
md5: bb0925e0b338bf3d9ebed72b30679e36
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/poky-zeus-22.0.0.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: zeus
Tag: 2019-10
Git revision: 59938780e7e776d87146002ea939b185f8704408
Release Artefact: oecore-zeus-22.0.0
md5: e2fec576ee37d4f613540ecac7f4c63e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/oecore-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/oecore-zeus-22.0.0.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: zeus
Tag: yocto-3.0
Git revision: 756963cc28ebc163df7d7f4b4ee004c18d3d3260
Release Artefact: meta-mingw-zeus-22.0.0
md5: 9b59518e18af36a2f1520885841d3834
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/meta-mingw-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/meta-mingw-zeus-22.0.0.tar.bz2

Repository Name: meta-intel
Repository Location: https://git.yoctoproject.org/git/meta-intel
Branch: zeus
Tag: yocto-3.0
Git revision: 13fcf624491cdd0d9b3eb78a4f0cd1781b482b51
Release Artefact: meta-intel-zeus-22.0.0
md5: e6fb4a143d61d2552dd637dc23ea791e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/meta-intel-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/meta-intel-zeus-22.0.0.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: zeus
Tag: yocto-3.0
Git revision: 9ca96786fd851150b518388bcb166efa0b4dfff9
Release Artefact: meta-gplv2-zeus-22.0.0
md5: ed9d383a1cd85afb7d37eb567a21c84a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/meta-gplv2-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/meta-gplv2-zeus-22.0.0.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: zeus
Tag: yocto-3.0
Git revision: 5d83d828cacb58ccb7c464e799c85fd2d2a50ccc
Release Artefact: bitbake-zeus-22.0.0
md5: a5036bdfdfc3ee47a98d6e12660e84aa
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.0/bitbake-zeus-22.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.0/bitbake-zeus-22.0.0.tar.bz2

- ---------------------------
New Features / Enhancements
- ---------------------------

* Linux kernel 5.2/4.19, gcc 9.2, glibc 2.30 and ~260 other recipe upgrades
* Build change equivalence is detected and used to avoid rebuilding unchanged components (BETA)
- See "Hash Equivalence" sample entry in local.conf.sample for usage instructions.
* Automated testing improvements:
- Enabled test suites for gcc, glibc, binutils
- Add ptest ptest support to elfutils, m4, gettext
- Fixes for many ptest test failures
- testimage: consider QB_DEFAULT_FSTYPE
- oe-selftest: implement console keepalive output
- Support for LTP / LTP compliance
- Added core-image-sato-ptest-fast image to execute 'fast' subset of ptests
- resulttool: Add log subcommand
- resulttool: enable loading results directly from an http/https URL
- resulttool: add manual test case configuration option
- resulttool: Add option to dump all ptest logs
* Architecture / machine-specific enhancements:
- New "qemuriscv64" emulated RISC-V 64-bit machine
- qemu: Add ppc64 to QEMU_TARGETS
- qemuarm64: Add QB_CPU_KVM to allow kvm acceleration
- New tune file for ARM Cortex-A53-Cortex-A57
- New tune file for arm1176jz-s CPU
- meson.bbclass: Handle microblaze* mapping to cpu family
- meson.bbclass: Make meson support aarch64_be.
- libffi: added RISC-V support
- icu: added armeb support
- runqemu: added support for kvm on aarch64
- beaglebone-yocto machine now set up to support booting images with runqemu
- qemux86: make it possible to use higher tunes using DEFAULTTUNE
* Kernel improvements:
- kernel-fitimage: introduce FIT_HASH_ALG
- kernel-module-split.bbclass: support CONFIG_MODULE_COMPRESS=y
- kernel-yocto: import security fragments from meta-security
- linux-yocto: add drm-bochs support
- linux-yocto: bsp/beaglebone: support qemu -machine virt
* multiconfig builds now reach their full potential:
- Many bugfixes and improvements
- sstate cache is now shared between configurations being built concurrently
- multiconfig configurations can be contained in layers
* Significant removal of old/obsolete software/patches ensuring we have a modern and up to date core Linux software stack:
- LSB support removed
- GTK+ 2 moved out to meta-oe
- Python 2 dependencies minimised
- Many obsolete patches dropped
* CVE checking enhancements:
- New cve-update-db recipe that reads from NVD JSON data feeds and supports network proxies
- Support for CVSSv3 scoring
- CVE_PRODUCT entries can now contain strings to match the vendor as well as product (vendor:product syntax)
* New INIT_MANAGER variable to make it easy to select the init manager (sysvinit, systemd, mdev-busybox)
* New recipes: binutils-cross-testsuite, core-image-sato-ptest-fast, dejagnu, efibootmgr, efivar, ell, glibc-testsuite, libcap-ng-python, libedit, libmodule-build-perl, libx11-compose-data, libxcrypt-compat, lsb-release, musl-obstack, opensbi, python3-pygments, python3-scons, python3-scons-native, stress-ng, vulkan-headers, vulkan-loader, vulkan-tools, wireless-regdb
* Added native variant to: glib-networking, grub, libsoup, python3-dbus
* BitBake improvements:
- Merged setscene tasks into the main runqueue so they can run in parallel
- fetch2/git: added sanity checking for git-lfs
- fetch2/svn: prevent from directly pulling from an externals w/o fetcher
- fetch2/npm: use npm pack to download node modules instead of wget
- Added --skip-setscene option
- Respect -f/--force option in conjunction with --runall or --runonly
- bitbake -e now supports showing base multiconfig configuration (using mc: prefix)
- "mc:" prefix now supported as a shorter version of multiconfig:
- Print more information when basehashes are mismatched
- Show task elapsed time in hours, minutes, and seconds
- Report all nonexistent directories in BBLAYERS in error message instead of just the first
- Improve validation of addtask and deltask arguments
- Added support for custom progress handlers injected via OE_EXTRA_IMPORTS
- Enable console keepalive to help usage with remote sessions
- Symlink the current cache file
* systemd-related improvements:
- serial-getty@.service: Allow device to fast fail if it does not exist
- Rewrote systemctl-native in Python supporting preset-all and mask
- Added partial support of drop-in configuration files to systemd-systemctl-native
- systemd-conf: added default configuration for wired network with DHCP
- systemd-conf: simplified creation of machine-specific configuration
- Create preset files and allow systemd to populate /etc/systemd/system instead of populating explicitly
- Added systemd helper unit to load/restore iptables rules
* runqemu improvements:
- Added support to pass multiple ports to tcpserial parameter
- Added support for a BIOS command-line variable (consistent with KERNEL)
- New QB_FSINFO variable supporting "wic:no-kernel-in-fs" and "wic:kernel-in-fs" for wic images
- Added support to handle EnrollDefaultKeys PK/KEK1 certificate
- Decoupled gtk and gl options
* wic improvements:
- New partition type for msdos partition tables
- New "bootimg-biosplusefi" source type that supports both BIOS and EFI
- Support for kernel with initramfs bundled
- bootimg-efi: add label source parameter
- bootimg-efi: allow multiple initrd
- bootimg-efi: replace hardcoded volume name with label
- Include .wks.in in wic search and list
- Use KERNEL_IMAGETYPE instead of hardcoding bzImage
- Added global debug option
* Other image-related improvements:
- Centralised default UEFI image configuration in conf/distro/image-uefi.conf
- Make gzipped images rsyncable
- initramfs-framework: support PARTLABEL option
- New bash-completion IMAGE_FEATURES item to add bash-completion support for all installed packages
* devtool/recipetool improvements:
- New "devtool menuconfig" subcommand
- devtool build now also runs do_deploy if applicable
- devtool finish now supports a --no-clean option
- devtool finish now warns if multiple layers have the same base name
- recipetool now supports creating recipes for Python 3
* Other script improvements:
- buildstats-diff: added option to filter tasks
- bitbake-layers: added several options to to make it easier to get plain output (for scripting)
- ddimage: replaced target device blacklist with mount check
- yocto-check-layer: Allow any case for README file detection
* SDK-related changes:
- New SDK_ARCHIVE_TYPE variable to control SDK archive format
- Introduce mechanism to keep nativesdk* sstate in eSDK
- Added nativesdk variant to: dnf, gzip, libtasn1, python3-dbus
- Use the best xz compression for the SDK
* buildhistory improvements:
- Record sysroot changes in addition to runtime content
- Show time spent writing buildhistory
* Recipe sanity checking improvements:
- Added check to ensure perllocal.pod is not installed by non-CPAN perl recipes
- Added sanity checks for ${PN} vs ${BPN} and github archives in SRC_URI
- Check if a recipe incorrectly uses DEPENDS_${PN}
- Improved buildpath warning messages
- Simplified paths in host contamination warnings
* poky-lsb replaced by poky-altcfg for alternate configurations to be tested on the autobuilder (as well as an example of subclassing a distro config)
* Added minver and maxver parameters for patches in SRC_URI for more flexibility in bbappends and common inc files
* PRIVATE_LIBS variable now supports shell-style wildcards for matching libraries
* Adoption of SPDX license identifiers throughout Yocto Project's components
* Added bbverbnote shell log command (consistent with bbwarn, bberror etc.)
* New OE_EXTRA_IMPORTS variable to make it easier to import custom modules into BitBake python environment
* busybox: enabled unicode support by default
* cmake: Use compiler launcher variable when ccache is enabled so that it can be disabled by build scripts if needed
* db: add new "verify" PACKAGECONFIG option for enabling database verification with db_verify command (default disabled)
* distcc: split into client and server packages
* dropbear: new "disable-weak-ciphers" PACKAGECONFIG option to disable older weak ciphers
* grub-efi-native: install grub-editenv
* lttng-modules: added git based recipe
* opkg: allow overriding OPKGLIBDIR
* ovmf: Generate test Platform key and first Key Exchange Key
* New PKGDATA_VARS variable to specify variables written out to pkgdata
* Obsolete stress recipe replaced by stress-ng
* uboot-sign: add support for different u-boot configurations
* update-rc.d: support enable/disable options
* waffle: support building without x11
* weston-init: Add possibility to run weston as non-root user
* python3: support recommends in manifest
* package_deb: add DPKG_BUILDCMD variable to allow customising dpkg command
* chrpath.bbclass: Add break_hardlinks parameter to allow breaking hardlinks when processing rpaths
* New "Apache-2.0-with-LLVM-exception" common license file
* screen: add /etc/screenrc as global config file
* utils/multiprocess_launch: Improve failing subprocess output
* Added local.conf/auto.conf into error report submitted by report-error.bbclass
* Added OpenEmbedded logo .svg file to repository (from OE-Classic)

- ------------
Known Issues
- ------------
*Bug 13594: mpc8315e-rdb: the stap oeqa test causes OOM.
This issue is on a platform with minimal support and works outside the framework.
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13594

*Bug 13595: strace ptest failed .
strace issue is two individual test regressions which is an improvement on the test timeouts we had previously.
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13595

*The build/hash equivalency code is considered to be at beta testing level. When used in large scale deployment
like the project autobuilder some task migration issues have been noticed. Work is ongoing to debug and address
those issues. Individual developer testing seems to be stable.

- ---------------
Recipe Licenses
- ---------------
The following corrections have been made to the LICENSE values set by recipes:

* cairo: MPL-1 -> MPL-1.1
* dbus / dbus-glib / dbus-test: AFL-2 -> AFL-2.1
* iw: BSD -> BSD-2-Clause
* libical: MPL-1 -> MPL-1.0
* openssh: some files are licensed under ISC or MIT license, so add these to LICENSE
* taglib: MPL-1 -> MPL-1.1
* vte: several files in libvte source are LGPLv3+, so add to LICENSE and set LGPLv3+ as the libvte package LICENSE


- ----------------------
Migration instructions
- ----------------------

For details on changes that you might need to make when migrating to the Yocto Project 3.0
release from previous releases, please see the following manual section:

http://www.yoctoproject.org/docs/3.0/ref-manual/ref-manual.html#moving-to-the-yocto-project-3.0-release



- --------------
Security Fixes
- --------------
* binutils: CVE-2019-12972, CVE-2019-14250, CVE-2019-14444, CVE-2019-9070, CVE-2019-9071, CVE-2019-9074, CVE-2019-9075, CVE-2019-9076, CVE-2019-9077
* dbus: CVE-2019-12749
* gcc: CVE-2019-14250, CVE-2018-12886, CVE-2018-18484, CVE-2019-15847
* gdb: CVE-2017-9778
* ghostscript: CVE-2019-14811, CVE-2019-14817
* glib-2.0: CVE-2019-12450
* glibc: CVE-2018-20796 (same as CVE-2019-9169)
* gnupg: CVE-2019-13050
* gnutls: GNUTLS-SA-2019-03-27
* iptables: CVE-2019-11360
* libid3tag: CVE-2017-11550, CVE-2017-11551 (same as CVE-2004-2779)
* libxslt: CVE-2019-11068, CVE-2019-13117, CVE-2019-13118
* linux-yocto/4.19: CVE-2019-3887
* linux-yocto/5.0: CVE-2019-3887
* ltp: CVE-2017-17052
* nasm: CVE-2018-19755
* openssh: CVE-2018-20685, CVE-2019-6109, CVE-2019-6111
* patch: CVE-2018-1000156 (improved fix), CVE-2019-13636, CVE-2019-13638
* python3: CVE-2019-9740, CVE-2019-9948
* python: CVE-2018-20852, CVE-2019-9740, CVE-2019-9947 (same as CVE-2019-9740), CVE-2019-9948, CVE-2019-9636
* qemu: CVE-2019-12155, CVE-2019-15890
* rsync: CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843
* squashfs-tools: CVE-2015-4645, CVE-2015-4646
* tiff: CVE-2019-6128, CVE-2019-7663, CVE-2019-14973
* u-boot: CVE-2019-13103, CVE-2019-13104, CVE-2019-13105, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204
* unzip: CVE-2019-13232
* vim: CVE-2019-12735


- ---------------
Recipe Upgrades
- ---------------
* acpica: update to 20190816
* acpid: upgrade 2.0.31 -> 2.0.32
* adwaita-icon-theme: upgrade 3.30.1 -> 3.32.0
* alsa-lib: upgrade 1.1.8 -> 1.1.9
* alsa-plugins: upgrade 1.1.8 -> 1.1.9
* alsa-utils: upgrade 1.1.8 -> 1.1.9
* apr: upgrade 1.6.5 -> 1.7.0
* apt: update to 1.2.31
* aspell: update to 0.60.7
* atk: upgrade 2.30.0 -> 2.32.0
* at-spi2-atk: upgrade 2.30.0 -> 2.32.0
* at-spi2-core: upgrade 2.30.0 -> 2.32.1
* autoconf-archive: update to 2019.01.06
* babeltrace: update to 1.5.7
* bash-completion: upgrade 2.8 -> 2.9
* bash: upgrade 4.4.18 -> 5.0
* bison: upgrade 3.0.4 -> 3.4.1
* boost: update to 1.71.0
* btrfs-tools: upgrade 4.20.1 -> 5.2.2
* build-compare: 2015.02.10 -> 2019.08.14
* busybox: 1.30.1 -> 1.31.0
* bzip2: update to 1.0.8
* ccache: upgrade 3.6 -> 3.7.3
* cmake: 3.14.1 -> 3.15.3
* cogl: upgrade 1.22.2 -> 1.22.4
* connman: update to 1.37
* coreutils: update to 8.31
* createrepo-c: update to 0.15.0
* cronie: update to 1.5.4
* cups: update to 2.2.12
* curl: update to 7.66.0
* dbus-test: Upgrade 1.12.12 -> 1.12.16
* dbus: Upgrade 1.12.12 -> 1.12.16
* debianutils: upgrade 4.8.6.1 -> 4.8.6.3
* desktop-file-utils: upgrade 0.23 -> 0.24
* distcc: upgrade 3.3.2 -> 3.3.3
* dnf: upgrade 4.1.0 -> 4.2.2
* dpkg: update to 1.19.7
* dropbear: update to 2019.78
* dtc: upgrade 1.4.7 -> 1.5.1
* e2fsprogs: 1.44.5 -> 1.45.3
* elfutils: 0.176 -> 0.177
* ell: update to 0.22
* encodings: update to 1.0.5
* epiphany: update to 3.32.4
* ethtool: update to 5.2
* eudev: update to 3.2.8
* expat: update to 2.2.8
* ffmpeg: update to 4.2.1
* file: update to 5.37
* flac: Upgrade 1.3.2 -> 1.3.3
* fontconfig: update to 2.13.1
* font-util: update to 1.3.2
* freetype: upgrade 2.9.1 -> 2.10.1
* gawk: upgrade 4.2.1 -> 5.0.1
* gcc-9: Upgrade to 9.2
* gdb: Upgrade from 8.2.1 to 8.3.1
* gdk-pixbuf: update 2.38.0 -> 2.38.2
* ghostscript: 9.26 -> 9.27
* git: update to 2.23.0
* glib-2.0: udpate 2.58.3 -> 2.60.7
* glibc: Update to glibc 2.30
* glib-networking: upgrade 2.60.1 -> 2.60.3
* gnu-config: Update to latest SHA
* gnupg: update to 2.2.17
* gnutls: upgrade 3.6.5 -> 3.6.8
* go-1.12: update to 1.12.9 minor release
* gobject-introspection: update to 1.60.2
* go-dep: update to 0.5.4
* go: update 1.12.1->1.12.6
* gpgme: upgrade 1.12.0 -> 1.13.1
* groff: upgrade 1.22.3 -> 1.22.4
* grub: upgrade 2.02 -> 2.04
* gsettings-desktop-schemas: upgrade 3.28.1 -> 3.32.0
* gst-examples: upgrade to 1.16.0
* gstreamer1.0-libav: upgrade to version 1.16.0
* gstreamer1.0-omx: upgrade to version 1.16.0
* gstreamer1.0-plugins-bad: upgrade to version 1.16.0
* gstreamer1.0-plugins-base: upgrade to version 1.16.0
* gstreamer1.0-plugins-good: upgrade to version 1.16.0
* gstreamer1.0-plugins-ugly: upgrade to version 1.16.0
* gstreamer1.0-python: upgrade to version 1.16.0
* gstreamer1.0-rtsp-server: upgrade to version 1.16.0
* gstreamer1.0: upgrade to version 1.16.0
* gstreamer1.0-vaapi: upgrade to version 1.16.0
* gst-validate: upgrade to version 1.16.0
* gtk+3: update 3.24.5 -> 3.24.8
* gtk-doc: upgrade 1.29 -> 1.31
* harfbuzz: upgrade 2.3.1 -> 2.6.1
* help2man-native: update to 1.47.11
* icu: update to 64.2
* ifupdown: update to 0.8.22
* iproute2: update to 5.2.0
* iptables: upgrade 1.6.2 -> 1.8.3
* iputils: upgrade to s20190709
* iso-codes: upgrade 4.2 -> 4.3
* iw: upgrade 4.14 -> 5.3
* kmscube: Bump revision to f632b23
* less: upgrade 550 -> 551
* libarchive: upgrade 3.3.3 -> 3.4.0
* libatomic-ops: upgrade 7.6.8 -> 7.6.10
* libbsd: upgrade 0.9.1 -> 0.10.0
* libcap: update to 2.27
* libcomps: upgrade 0.1.10 -> 0.1.11
* libcroco: update to 0.6.13
* libdazzle: update to 3.32.3
* libdnf: update to 0.28.1
* libdrm: update to 2.4.99
* libevdev: upgrade 1.6.0 -> 1.8.0
* libevent: upgrade 2.1.8 -> 2.1.11
* libffi: Upgrade to 3.3-rc0
* libglu: upgrade 9.0.0 -> 9.0.1
* libgpg-error: upgrade 1.35 -> 1.36
* libgudev: upgrade 232 -> 233
* libical: upgrade to 3.0.6
* libice: upgrade 1.0.9 -> 1.0.10
* libidn2: upgrade to 2.2.0
* libinput: update to 1.14.1
* libjpeg-turbo: upgrade 2.0.2 -> 2.0.3
* libmodule-build-perl: upgrade 0.4224 -> 0.4229
* libmodulemd: update to 2.6.0
* libnewt: upgrade 0.52.20 -> 0.52.21
* libnl: upgrade to 3.5.0
* libnotify: update to 0.7.8
* libnss-nis: upgrade 3.0 -> 3.1
* libogg: upgrade 1.3.3 -> 1.3.4
* libpam: Upgrade 1.3.0 -> 1.3.1
* libpcap: upgrade 1.9.0 -> 1.9.1
* libpciaccess: upgrade 0.14 -> 0.16
* libpcre2: upgrade 10.32 -> 10.33
* libpng: update to 1.6.37
* libpsl: update to 0.21.0
* librepo: update to 1.10.5
* libsdl2: upgrade 2.0.9 -> 2.0.10
* libsecret: 0.19.0
* libsolf: update to 0.7.5
* libsolv: update to 0.7.6
* libsoup-2.4: upgrade 2.66.1 -> 2.66.2
* libsoup: Upgrade from 2.64.2 to 2.66.1
* libtasn1: upgrade 4.13 -> 4.14
* libtest-needs-perl: upgrade 0.002005 -> 0.002006
* libtirpc: upgrade 1.0.3 -> 1.1.4
* liburcu: update to 0.11.1
* libva: upgrade 2.4.0 -> 2.5.0
* libva-utils: upgrade 2.4.0 -> 2.5.0
* libwebp: upgrade 1.0.2 -> 1.0.3
* libx11-compose-data: upgrade 1.6.7 -> 1.6.8
* libx11: update to 1.6.8
* libxcrypt: update to 4.4.8
* libxdmcp: update to 1.1.3
* libxext: update to 1.3.4
* libxft: upgrade 2.3.2 -> 2.3.3
* libxi: update to 1.7.10
* libxkbfile: update 1.1.0
* libxml2: upgrade 2.9.8 -> 2.9.9
* libxml-sax-perl: upgrade 1.00 -> 1.02
* libxmu: update to 1.1.3
* libxrandr: update to 1.5.2
* libxt: update to 1.2.0
* libxvmc: update to 1.0.11
* libyaml: update to 0.2.2
* lighttpd: Upgrade 1.4.53 -> 1.4.54
* linux-firmware: Upgrade to 20190815
* linux-libc-headers: update to v5.2 headers
* linux-yocto/4.19: update to 4.19.72 and -rt22
* linux-yocto-dev: bump to 5.3-rcX
* linux-yocto: introduce 5.2.17 recipes
* linux-yocto-rt: update to 5.0.5-rt9
* llvm: Update to 8.0.1
* logrotate: upgrade 3.15.0 -> 3.15.1
* ltp: upgrade 20190115 -> 20190517
* lttng-modules: upgrade 2.10.8 -> 2.10.11
* lttng-tools: update to 2.10.7
* lttng-ust: upgrade 2.10.3 -> 2.10.5
* lz4: update to 1.9.2
* makedepend: update to 1.0.6
* man-db: upgrade 2.8.4 -> 2.8.7
* man-pages: upgrade 4.16 -> 5.01
* mc: update to 4.8.23
* mesa-demos: update to 8.4.0
* mesa: Update 19.0.1 -> 19.1.6
* meson: update to 0.51.2
* mmc-utils: update to the latest upstream code
* mobile-broadband-provider-info: upgrade 20190116 -> 20190618
* mpg123: upgrade 1.25.10 -> 1.25.11
* msmtp: 1.6.6 -> 1.8.5
* mtd-utils: Upgrade to 2.1.1
* mtools: update to 4.0.23
* musl: Update to latest master
* ncurses: upgrade 6.1+20181013 -> 6.1+20190803
* nettle: upgrade 3.4.1 -> 3.5.1
* newlib: Upgrade to 3.1.0
* nfs-utils: 2.3.3 -> 2.4.1
* nss: upgrade 3.42.1 -> 3.45
* ofono: upgrade 1.25 -> 1.30
* opensbi: Update from 0.3 to 0.4
* openssh: Upgrade 7.9p1 -> 8.0p1
* openssl: Upgrade 1.1.1b -> 1.1.1d
* opkg: upgrade to version 0.4.1
* opkg-utils: upgrade to version 0.4.1
* orc: update to 0.4.29
* ovmf: Update to version edk2-stable201905
* p11-kit: update to 0.23.16.1
* pango: upgrade 1.42.4 -> 1.44.6
* patchelf: Upgrade 0.9 -> 0.10
* perl: Move perl-sanity -> perl
* perl: update to 5.30.0
* piglit: upgrade to latest revision
* pixman: update to 0.38.4
* pkgconf: upgrade 1.6.0 -> 1.6.3
* ptest-runner: update from 2.3.1 to 2.3.2
* python3-dbus: upgrade 1.2.8 -> 1.2.12
* python3-docutils: update to 0.15
* python3-git: update to 3.0.2
* python3-mako: update to 1.1.0
* python3-numpy: update to 1.17.0
* python3-pbr: update to 5.4.3
* python3-pip: update to 19.2.3
* python3-pycairo: update to 1.18.1
* python3-pygobject: update to 3.34.0
* python3-scons: update to 3.1.1
* python3: upgrade 3.7.3 -> 3.7.4
* python-numpy: update to 1.16.3
* python-scons: update to 3.1.0
* python-setuptools: update to 41.2.0
* python: update to 3.7.3
* qemu: Upgrade from 3.1.0 to 4.1
* quilt: update to 0.66
* quota: update to 4.05
* rng-tools: 6.6 -> 6.7
* ruby: update to 2.5.5
* socat: upgrade 1.7.3.2 -> 1.7.3.3
* sqlite3: update to 3.29.0
* squashfs-tools: upgrade to commit f95864afe883
* strace: Upgrade to 5.3
* subversion: upgrade 1.11.1 -> 1.12.2
* sysprof: upgrade 3.30.2 -> 3.32.0
* sysstat: 12.1.3 -> 12.1.6
* systemd: upgrade to 243
* systemtap: update to 57c9aca9f1ff32a6add10e02ecd33b7314fad499
* tar: update to 1.32
* timezone: update to 2019c
* u-boot: Upgrade from 2019.01 to 2019.07
* uninative: Update to 2.7 release
* usbutils: upgrade 010->012
* util-linux: upgrade to 2.34
* vala: update to 0.44.7
* valgrind: update from 3.14.0 to 3.15.0
* vim: Update to 8.1.1240
* virglrenderer: update 0.7.0 -> 0.8.0
* vte: upgrade 0.52.2 -> 0.56.3
* waffle: upgrade 1.5.2 -> 1.6.0
* wayland-protocols: upgrade 1.17 -> 1.18
* webkitgtk: update to 2.24.4
* weston: upgrade 5.0.0 -> 7.0.0
* wget: update to 1.20.3
* wpa-supplicant: update to 2.9
* x11perf: update to 1.6.1
* x264: upgrade to latest revision
* xauth: upgrade 1.0.10 -> 1.1
* xf86-input-libinput: update to 0.29.0
* xinput: update to 1.6.3
* xkeyboard: upgrade 2.26 -> 2.27
* xorgproto: update to 2019.1
* xrandr: update to 1.5.1
* xserver-xorg: update to 1.20.5
* xtrans: upgrade 1.3.5 -> 1.4.0
* xwininfo: upgrade 1.1.4 -> 1.1.5

Hello,

We are pleased to announce the third milestone release for Yocto Project 2.8 (yocto-2.8_M3) is now available for download.

Download:
http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.8_M3

bitbake: 797354d285f6d624d9adb52bab65823572da0e39
meta-gplv2: 1e2480e50f34e55bdfd5e06f98441e03a3752d5a
meta-intel: 655dfaec95196b9c0e15d34f490e4a51a7d501e3
meta-mingw: 9df4e115ab9a7ab23f81fdbcc62b2a0269d6377f
oecore: 95ad5626296380358c8a502a3e04879dab653d78
poky: 81f9e815d36848761a9dfa94b00ad998bb39a4a6

Full Test Report:
http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.8_M3/testreport.txt

Thank you.
Vineela Tummalapalli
vineela.tummalapalli@...
Yocto Project Build and Release

This Sunday I will take the Mailman mailing lists offline for updates in
preparation for the platform change. As part of the update I plan to
change the list addresses to their new dedicated domain
@lists.yoctoproject.org so we can start changing addresses in the
MAINTAINERS files and elsewhere.

Moderators, thanks for helping by clearing out the queues in advance. If
you have outstanding moderation or trouble clearing your queue please
reach out to me.

I will send a follow up e-mail with a new time line for the platform
change after these updates are in place.

--
Michael Halstead
Linux Foundation / Yocto Project
Systems Operations Engineer

We are moving our lists from Mailman to Groups.io. E-mail to lists will
be delayed during the move window on September 15th between 9:00 and
17:00 UTC.

A new account will be created for you on the Groups.io platform and most
users will only need to update their list mailing address from the
@yoctoproject.org to @lists.yoctoproject.org.

Moderators please attend to all pending requests next Friday Sept. 13th
before beginning your weekend.

Please read more about the change on the wiki:

https://wiki.yoctoproject.org/wiki/index.php?title=GroupsMigration

If there are serious issues we will rollback the changes. We will e-mail
all lists when work is complete.

--
Michael Halstead
Linux Foundation / SysAdmin

Hello All,

We are pleased to announce the Yocto Project 2.6.3 (thud-20.0.3) Release is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.3/poky-thud-20.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.3/poky-thud-20.0.3.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.3/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.3/testreport.txt

Thank you for everyone's contributions to this release.

Sincerely,

Vineela Tummalapalli
Yocto Project Build and Release
vineela.tummalapalli@...

------------------
yocto-2.6.3 Errata
--------------------

Release Name: poky-thud-20.0.3
Branch: thud
Tag: thud-20.0.3
Hash: cb26830f765f03309c0663352cc5849491271be8
md5: 1489c2ea6743790147f88037f70e483a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.3/poky-thud-20.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.3/poky-thud-20.0.3.tar.bz2

Release Name: meta-mingw-thud-20.0.3
Branch: thud
Tag: thud-20.0.3
Hash: 6556cde16fbdf42c7edae89bb186e5ae4982eff5
md5: 5d646b155cba75c4dd3d7cb4d165bd03
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.3/meta-mingw-thud-20.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.3/meta-mingw-thud-20.0.3.tar.bz2

Release Name: meta-intel-thud-20.0.3
Branch: thud
Tag: thud-20.0.3
Hash: 278f0b5fa2f1836635178bdc770e035d77ae03c7
md5: 08be18666a3e960c261de8b5fe443ca4
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.3/meta-intel-thud-20.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.3/meta-intel-thud-20.0.3.tar.bz2

Release Name: meta-gplv2-thud-20.0.3
Branch: thud
Tag: thud-20.0.3
Hash: aabc30f3bd03f97326fb8596910b94639fea7575
md5: 363b9acecc2ee20714eab435a343250b
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.3/meta-gplv2-thud-20.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.3/meta-gplv2-thud-20.0.3.tar.bz2


---------------
Known Issues
---------------
Core-image-sato-sdk image installed on NUC7 internal harddisk leads to hang at the Yocto splash screen during bootup.
To exit the splash screen hang state and continue to boot to sato UI, manually press the enter key multiple times.


---------------
Security Fixes
---------------
expat: fix CVE-2018-20843
libcroco: fix CVE-2017-7961
ghostscript: Fix 3 CVEs
bzip2: fix CVE-2019-12900
gstreamer1.0-plugins-base: fix CVE-2019-9928
libsdl: CVE fixes
glib: Security fix for CVE-2019-9633
qemu: Security fixes CVE-2018-20815 CVE-2019-9824
glibc: backport CVE fixes
lighttpd: fix CVE-2019-11072
qemu: Security fix for CVE-2019-12155
Curl: Securiyt fix CVE-2019-5435 CVE-2019-5436
wget: Security fix for CVE-2019-5953
glib-2.0: Security fix for CVE-2019-12450
Tar: Security fix CVE-2019-0023
qemu: Security fix for CVE-2018-19489
cairo: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
sqlite3: Security fixes for CVE-2018-20505 & 20506
busybox: Security fixes for CVE-2018-20679 CVE-2019-5747
python: add a fix for CVE-2019-9948 and CVE-2019-9636
qemu: Several CVE fixes
elfutils: Security fixes CVE-2019-7146,7149,7150
glibc: Security fix CVE-2019-9169
ruby: remove CVE-2018-1000073.patch as already fixed
avahi: fix CVE-2017-6519
libexif: fix CVE-2016-6328 and CVE-2018-20030
libsndfile1: fix CVE-2019-3832
bluez5: fix CVE-2018-10910
python: fix CVE-2018-14647 in python-native too
openssl: follow OE's rule for specifying CVE ID
openssl: fix CVE-2019-1543


---------------
Fixes
---------------
build-appliance-image: Update to thud head revision
poky.conf: Bump version for 2.6.3 thud release
libarchive: integrate security fixes
OpkgPM: use --add-ignore-recommends to process BAD_RECOMMENDATIONS
opkg: add --ignore-recommends flag
scripts: Remove deprecated imp module usage
uboot-sign.bbclass: Remove tab indentations in python code
uninative: Update to 2.6 release
uninative: Switch from bz2 to xz
yocto-uninative: Update to 2.5 release
wpa_supplicant: Changed systemd template units
go: update to minor update 1.11.10
go: Upgrade 1.11.1 -> 1.11.4 minor release
go-crosssdk: PN should use SDK_SYS, not TARGET_ARCH
go-target.inc: fix go not found while multilib enabled
cups: upgrade to 2.2.10
cups: upgrade to 2.2.9
file: Multiple Secruity fixes
python: Update to 2.7.16
ref-manual: Fixed typo for BBMULTICONFIG variable.
bsp-guide: Fixed build error.
bsp-guide: Minor edits to Configuring Kernel section.
bsp.xml: Updated some output examples and the BSP structure
brief-yoctoprojectqs: Updated examples.
Documentation: Prepare for 2.6.3 release.
bitbake: gitsm: Add need_update method to determine when we are going to a new SRCREV
bitbake: gitsm: Fix a bug where the wrong path was used for the submodule init
bitbake: bitbake: fix version comparison when one of the versions ends in .
bitbake: bitbake: cooker: Rename __depends in all multiconfigs
bitbake: toaster: Fix Thud Bitbake release metadata
core-image-sato-sdk-ptest: Tweak size to stay within 4GB limit
core-image-sato-sdk-ptest: Try and keep image below 4GB limit
wic/bootimg-efi: replace hardcoded volume name with label
resulttool: Add option to dump all ptest logs
wic: change expand behaviour to match docs
recipetool: fix unbound variable when fixed SRCREV can't be found
resulttool/manualexecution: Enable test case configuration option
resultool/resultutils: Fix module import error
resulttool: Add log subcommand
resulttool: Load results from URL
resulttool/manualexecution: Refactor and remove duplicate code
resulttool/manualexecution: Enable creation of configuration option file
oeqa/targetcontrol.py: fix qemuparams not work in runqemu with launch_cmd
oeqa/target/ssh: Replace suggogatepass with ignoring errors
oeqa/sdk: use bash to execute SDK test commands
oeqa/concurrenttest: Patch subunit module to handle classSetup failures
oeqa/runner: Fix subunit setupClass/setupModule failure handling
oeqa/core/runner: Handle unexpectedSucesses
oeqa/ssh: Avoid unicode decode exceptions
oeqa/core/runner: dump stdout and stderr of each test case
oeqa/utils/qemurunner: Fix typo in previous commit
oeqa/qemurunner: Dont mix binary and non-binary strings
opkg-utils: backport a patch to fix a sstate timestamp issue
adwaita-icon-theme: do not delete symbolic svg but pack them in ${PN}-symbolic
runqemu: do not check return code of tput
image_types.bbclass: fix a race between the ubi and ubifs FSTYPES
e2fsprogs: Skip slow ptest tests
ruby: add ptest
ruby: make ext module fiddle can compile success
ruby.inc: Add dependency on readline-native
recipetool: add missed module
pseudo: Update to gain key bugfixes
resulttool/manualexecution: Enable configuration options selection
linux-yocto/4.18: update to v4.18.33
linux-yocto-tiny/4.18: point KBRANCH to 4.18
core-image-sato-sdk-ptest: Fix free space issues causing test failures
core-image-sato-sdk-ptest: Increase qemu memory to 1GB
resulttool: Enable report for single result file
libsndfile1: update security patches
bluez5: Fix status subcommand of init script
bluez5: add mesh dependency on ell
devtool: prevent starting git gc in background
python-native: fix one do_populate_sysroot warning
run-ptest: use error handling for useradd and userdel
zlib: clean up ptest
zlib: cleanup
correct do_patch for kernel bbappend in sdk
oe-init-build-env: Error out when failed to locate cwd
python: time.tzset missing
timezone: update to 2019a
timezone: refactor to simplify maint
openssl10: Upgrade 1.0.2q -> 1.0.2r
openssl: Upgrade 1.1.1a -> 1.1.1b
openssl: don't disable the AFALG engine based on host kernel
openssl: Add cryptodev-linux PACKAGECONFIG
openssl: drop Python 2.x dependency in -ptest
openssl: Fix ptest test output translation
glibc: Drop upstream rejected patches
overview-manual: Fixed broken link to pseudo.
Documentation: Prepare for 2.6.2 release.
pkgdata.py: avoid target-sdk-dummy-provides to mess things up
resulttool/manualexecution: Refactor and simplify codebase
resulttool/manualexecution: Fixed step sorted by integer
resulttool/manualexecution: Enable display full steps without press enter
resulttool/manualexecution: Standardize input check
resulttool: Allow extraction of ptest data
resulttool: Allow store to work on single files
oeqa/manual/toaster: updated test id naming
oeqa/manual/toaster: transfer manual toaster test cases to oeqa
oeqa/manual/kernel-dev.json: test id updated
oeqa/manual/compliance-test.json: test id updated and missing test cases added
oeqa/manual/bsp-hw.json: test id updated and obsolete test cases removed
oeqa/manual/bsp-hw.json: add non-IA tests
oeqa/manual/sdk.json: Updated toolchain tarball to core-image-sato
oeqa/manual: Add manual runtime 'compliance' testcases to json

Hello All,

We are pleased to announce the second milestone release for Yocto Project 2.8 (yocto-2.8_M2) is now available for download.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.8_M2

bitbake: f5ea06fc2b6713c9f8e85ecf7cb981ae9a84d896
meta-gplv2: 1e2480e50f34e55bdfd5e06f98441e03a3752d5a
meta-intel: 3227874941bb8f9b706d6057b1de3997881bdffd
meta-mingw: 3fa43aa92f1a1c90304f6f4f49270915d1392cce
oecore: e0c3436241afca93f107e325d1b9ffcdebf706cd
poky: 835f7eac0610325e906591cd81890bebe8627580

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.8_M2/testreport.txt

Thank you.

Vineela Tummalapalli
vineela.tummalapalli@...
Yocto Project Build and Release

Hello all,

We are pleased to announce the meta-intel 11.1 layer for the Yocto Project 2.7.1 "warrior" release is now available for download.

Vineela Tummalapalli,
Intel Corporation

------------------------------
11.1-warrior-2.7.1 Errata
-------------------------------

Release Name: meta-intel-11.1-warrior-2.7.1
Branch: warrior
Tag: 11.1-warrior-2.7.1
Hash: f17dfeee1da8749fc4eec6892bc7578864c3664f
md5: 23ff4d56f5d10c026b01b30d3a9af3da
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.1/meta-intel-11.1-warrior-2.7.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7.1/meta-intel-11.1-warrior-2.7.1.tar.bz2


------------------------------
Features/Enhancements
------------------------------
lms: add recipe for lms 1921.0.0.0
metee: add new recipe for version 2.1.0
ace: add recipe for 6.5.3 version


------------------------
Updates/Upgrades
------------------------
linux-intel-rt/4.14: update to v4.14.126
linux-intel-rt/4.14: update to v4.14.115
linux-intel/4.14: update to v4.14.127
linux-intel_4.14: update to v4.14.123
linux-intel-rt/4.19: update to v4.19.37
ixgbevf: upgrade 4.5.3 -> 4.6.1
ixgbe: upgrade 5.5.5 -> 5.6.1
linux-intel/4.19: update to v4.19.55
intel-microcode: upgrade 20190514a -> 20190618
linux-intel/4.19: update to v4.19.50
intel-microcode: upgrade to 20190514a
linux-intel_4.19: update to v4.19.40


--------------
Known Issues
--------------
linux-yocto-rt 4.19 fails to build (Bug Id: 13442)


---------------
Security Fixes
---------------
For Intel processor-specific security information please visit https://software.intel.com/en-us/side-channel-security-support

Method information on Intel's Security Center site:
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr

Intel Security Center:
https://security-center.intel.com/default.aspx


---------------
Fixes
---------------
linux-intel-dev: remove branch name from SRC_URI (Bug Id: 13414)

Hello,

We are pleased to announce the Yocto Project 2.7.1 (warrior-21.0.1) Release is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.1/poky-warrior-21.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7.1/poky-warrior-21.0.1.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.1/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.1/testreport.txt

Thank you for everyone's contributions to this release.

Vineela Tummalapalli
Yocto Project Build and Release
Vineela Tummalapalli <vineela.tummalapalli@...>

Hello,

We are pleased to announce the meta-intel 11.0 layer for the Yocto Project 2.7 "warrior" release is now available for download.

Vineela Tummalapalli
Intel Corporation


----------------------
11.0-warrior-2.7 Errata
----------------------

Release Name: meta-intel-11.0-warrior-2.7
Branch: warrior
Tag: 11.0-warrior-2.7
Hash: 1bbd18500c93d3c6ee9f43ded29b1be1baba8e75
md5: 3442dca789e14a3d8573567168cb3a98
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/meta-intel-11.0-warrior-2.7.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/meta-intel-11.0-warrior-2.7.tar.bz2


---------------------------
New Features / Enhancements
---------------------------
New recipes:
Media SDK
iHD Media Driver
gmmlib
metrics discovery API
Intel math kernel library

4.19 linux-intel kernel which is also the default option as well.
4.9 linux-intel kernel has been dropped.
4.14 linux-yocto kernel has been dropped.
Support added to build linux-yocto kernel version 5.0.
Support added to build linux-intel kernel version 5.1.
meta-intel now uses an optimized for Intel version of zlib.
wic now uses the correct kernel command line as specified by APPEND.



--------------
Known Issues
--------------
systemtap version in warrior does not work when using linux-intel v5.1.


---------------
Security Fixes
---------------
For Intel processor-specific security information please visit https://software.intel.com/en-us/side-channel-security-support

Method information on Intel's Security Center site:
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr

Intel Security Center:
https://security-center.intel.com/default.aspx


---------------
Fixes
---------------
lttng-modules: add bbappend
README: Updated Tested Hardware
linux-intel-dev: add recipe
README: update to warrior branch for OE-Core
README: remove reference to bitbake version
linux-intel-rt/4.19: update meta SRCREVs to v4.19.31
conf: use zlib-intel by default for target builds
zlib-intel: add zlib fork with IA-specific optimisations
README: update for warrior release requirements
linux-yocto-rt/5.0: add bbappend
mkl-dnn: upgrade 0.17.4 -> 0.18.1
mkl-dnn: fix upstream release checking
ixgbevf: 4.5.2 -> 4.5.3
linux-intel-rt/4.14: update to v4.14.106
linux-intel/4.19: update to v4.19.34
linux-intel_4.14: update to v4.14.110
linux-yocto: drop 4.18 appends
ixgbe: 5.5.3 -> 5.5.5
Revert "systemd-boot: remove joule specific workaround"
metrics-discovery: Updates mesa util files
layer.conf: Add warrior to compatible release series
linux-intel/4.19: update to v4.19.28
linux-yocto/5.0: add bbpapend
systemd-boot: remove joule specific workaround
linux-intel: remove 4.9 kernel and related bbapends
wic: pass APPEND to bootloader
mkl-dnn: Initial recipe for Intel Math Kernel Library
intel-mediasdk: upgrade 18.4.0 -> 18.4.1
linux-intel_4.14: update to v4.14.101
linux-intel/4.19: update to v4.19.23
sbsigntool-native: upgrade v0.8 -> v0.9.2
ixgbevf: upgrade 4.3.6 -> 4.5.2
ixgbe: 5.5.2 -> 5.5.3
README: update for thud release requirements
ixgbevf: fix upstream release checking
ixgbe: fix upstream release checking
intel-mediasdk: upgrade 18.3.1 -> 18.4.0
intel-media-driver: upgrade 18.3.0 -> 18.4.1
gmmlib: upgrade 18.3.0 -> 18.4.1
conf: set -rt kernel to 4.19
gmmlib: fix upstream release checking
intel-mediasdk: fix upstream release checking
intel-media-driver: fix upstream release checking
linux-intel-rt/4.14: update to v4.14.93
linux-intel-rt/4.19: introduce -rt recipe for 4.19
linux-intel/4.19: update to v4.19.13
linux-yocto/4.19: add bbappends
linux-intel/4.14: update to v4.14.92
linux-intel/4.19: update SRCREV for 4.19.8
metrics-discovery: Initial recipe for Metrics Discovery API
linux-intel/4.14: update to v4.14.87
linux-intel/4.9: update to v4.9.146
intel-vaapi-driver: 2.2.0 -> 2.3.0
conf/machine: set preferred kernel to 4.19
linux-yocto: drop 4.14 appends
linux-intel/4.19: update to v4.19.8
backport-iwlwifi: exclude from world builds
intel-corei7-64.conf: remove reference to dpdk-libibverbs
linux-intel/4.19: update to v4.19.5
custom-licenses: remove BSD_LMS
linux-intel/4.19: add recipe
ixgbe: upgrade 5.3.8 -> 5.5.2
MAINTAINERS: update to current maintainers
intel-media-driver: add recipe
README: point to correct branch for master

Hello,

We are pleased to announce the latest release of the Yocto Project 2.7 (warrior-21.0.0) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/poky-warrior-21.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/poky-warrior-21.0.0.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/RELEASENOTES

Full test report is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/testreport.txt

Thank you for everyone's contributions to this release.

Sincerely,

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...

-----------------------
yocto-2.7 Release Notes
-----------------------

----------
Downloads
----------

Release Name: poky-warrior-21.0.0
Branch: warrior
Tag: warrior-21.0.0
Hash: 0e392026ffefee098a890c39bc3ca1f697bacb52
md5: 5b9ea9d4017f85148b1476e026ac8544
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/poky-warrior-21.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/poky-warrior-21.0.0.tar.bz2

Release Name: oecore-warrior-21.0.0
Branch: warrior
Tag: warrior-21.0.0
Hash: f571b188177788d8ed0a7f3efe3569f153b1b0d3
md5: cb1eafef6c055838afddc505e6df7a74
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/oecore-warrior-21.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/oecore-warrior-21.0.0.tar.bz2

Release Name: meta-mingw-warrior-21.0.0
Branch: warrior
Tag: warrior-21.0.0
Hash: 10695afe8cd406844e0d0dd868c11677e07557d4
md5: d69c92745ea9959f3bb7a5d35f4b9fbc
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/meta-mingw-warrior-21.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/meta-mingw-warrior-21.0.0.tar.bz2

Release Name: meta-intel-warrior-21.0.0
Branch: warrior
Tag: warrior-21.0.0
Hash: cd2c3bfca97655999cbde645b73be712675dba92
md5: 3c300918d246c9902150dc2e2b9dd756
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/meta-intel-warrior-21.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/meta-intel-warrior-21.0.0.tar.bz2

Release Name: meta-gplv2-warrior-21.0.0
Branch: warrior
Tag: warrior-21.0.0
Hash: 106ba6d2a4d08a276205c305f8485d701fe8a8f3
md5: 94bb8a8ed9b11d2693aaa373f93625dd
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/meta-gplv2-warrior-21.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/meta-gplv2-warrior-21.0.0.tar.bz2

Release Name: bitbake-warrior-21.0.0
Branch: warrior
Tag: warrior-21.0.0
Hash: cb185efe9e88cfb12b7a3fd08f3086ca0b69c8e2
md5: 4c69bb5e8ffb29bb40bb105920838441
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7/bitbake-warrior-21.0.0.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7/bitbake-warrior-21.0.0.tar.bz2

---------------------------
New Features / Enhancements
---------------------------
* Linux kernel 5.0/4.19, gcc 8.3, glibc 2.29 and ~230 other recipe upgrades
* Added support for virgl GL acceleration within QEMU / runqemu
* Added support SLiRP user-space networking in runqemu for easier networking within containers
* New "packagegroup-core-base-utils" packagegroup to easily bring in full-featured versions of standard system utilities
* New "ccmake" class to enable the CMake curses UI
* New "mcextend" class to enable easily creating multiconfig recipe variants
* New "xmlcatalog" class to update the XML catalogue
* New recipes: eglinfo-wayland, inetutils, libdazzle, libjitterentropy, libmodulemd, libpsl, vim, virglrenderer
* Architecture-specific changes:
- linux-yocto: add baseline ARC support
- qemuarm64: Add graphics support
- qemuarm: Swap for an arm7ve (A15) configuration
- qemumips64: change tune to mips64r2
- qemumips: Enable the poweroff driver
- arch-armv7*.inc: Add Cortex vfpv4-d16 support
- arch-armv8a.inc: add tune include for armv8
- arm-tunes: Remove -march option if mcpu is already added
- ThunderX: update the armv8a rules
- tune-cortexa32: add tunes for ARM Cortex-A32
- tune-cortexa35: add tunes for ARM Cortex-A35
- tune-cortexa53: add tunes for ARM Cortex-A53
- tune-cortexa5.inc: Add tune options for vfpv4
- tune-cortexa72: add tunes for ARM Cortex-A72
- linux-yocto/4.19: introduce qemuriscv64 and qemuarma15 BSP definitions
- gcc: Enable secureplt for powerpc64 target too
- goarch: Add riscv64
- gstreamer: Add RISC-V support
- kernel-fitimage: support RISC-V
- lib/oe/elf.py: Add powerpc64 architecture definition for musl
- webkitgtk: Enable building for ARC architecture
- linux-yocto: pinctrl config change for cannonlake
- mdadm: add mdmon service to support Intel VROC
- mesa: Allow building the r600 driver
- locale: Allow usage of cross-localedef for ARC
- Added armeb support to meson class
* Kernel-related changes:
- kernel: defaults for KBUILD_BUILD_USER and KBUILD_BUILD_HOST are now soft
- kernel-fitimage: Introduce a way to provide external dtb
- kernel-yocto: allow kernel-meta repositories to be patched
* Introduced sstate hash equivalence server to accelerate subsequent builds by matching compatible sstate
* New "resulttool" for managing and storing test results and executing manual tests
* Significant cleanup of ptests, 100% pass rate for python3, and new ptests for json-glib, opkg, ruby
* devtool improvements:
- Handle exporting generated kernel config fragments
- Support kmeta directory usage with devtool modify/finish
- Add "check-upgrade-status" command to print an overall list of recipes that can be updated
- Allow allow use of alternate ssh command with devtool deploy-target
* Changed default debug split to make separate source packages
* Add "src-pkgs" IMAGE_FEATURES item to install all debug sources (default enabled for the SDK)
* Extended recipes to native: libaio, libepoxy, gtk+3, mesa, adwaita-icon-theme, hicolor-icon-theme, liberation-fonts, libxi, libxtst, at-spi2-atk, at-spi2-core, vte
* Extended recipes to nativesdk: gtk+3, libepoxy, fontconfig, libice, libsm, libxft, libxml-namespacesupport-perl, libxml-sax-base-perl, libxml-sax-perl, libxt, mesa, gdk-pixbuf, adwaita-icon-theme, hicolor-icon-theme, cairo, harfbuzz, libjpeg-turbo, pango, liberation-fonts, libxcomposite, libxdamage, libxi, libxtst, at-spi2-atk, at-spi2-core, atk, vte
* Added meson to standard SDK host packages
* Moved a number of recipes from autotools to meson
* Bitbake's gitsm fetcher reworked to support MIRRORS and BB_NO_NETWORK
* Removed site_config and glibc-initial
* Dropped gcc-cross-initial and use gcc-cross instead
* Perl now builds for the target using perl-cross for better maintainability and improved build performance
* libpcre: enable JIT compilation by default for improved performance
* asciidoc: use Python 3 port
* bind-utils: Install nslookup
* busybox: Enable domain search list support
* busybox: Enable mountpoint and setsid applets
* Enable ccache to work properly for several recipes and allow it to be shared between different builds
* classes/buildhistory: display modified git branches
* classes/icecc: Add ICECC_REMOTE_CPP variable
* classes/testsdk: Split implementation into classes
* cmake: Support Eclipse and other cmake generators
* classes/devicetree: Add support to compile overlays separately
* classes/devicetree: Add virtual provider for dtb
* initramfs-framework: add lvm module
* sqlite3: add PACKAGECONFIG options to allow disabling functions to enable shrinking for very small targets
* Added PACKAGECONFIG options to alsa-plugins, consolekit, curl, gconf, gst-plugins-bad, gtk+3, json-glib, libpcre, libsdl2, mesa, mtd-utils, openssl, pulseaudio, squashfs-tools, systemd, sqlite3, util-linux, wget
* initscripts: Add support for /etc/default/timestamp
* libusb1: Add udev support
* libunwind: Enable building static archive on musl
* linux-firmware: recommend split up packages
* linux-firmware: split out liquidio firmware
* mdadm: add init and service scripts
* meson: support multiple cross configuration files
* native: Enable RDEPENDS handling
* opkg: add --ignore-recommends flag and use it for BAD_RECOMMENDATIONS
* patch/insane: Rework patch fuzz handling
* ptest.bbclass: Add feature to populate a binary directory
* python: add tk support
* testimage: Add possibility to pass parameters to qemu/runqemu
* runqemu: Make QB_MEM easier to set
* qemu: split the native version into usermode and system parts
* scripts: Add oe-pylint
* runqemu: Add serialstdio mode
* image_types: add base64 conversion
* u-boot: Add mkenvimage tool
* u-boot: Support menuconfig for u-boot
* u-boot: install dumpimage and fit_check_sign in u-boot-tools
* util-linux: package each binary separately
* wic: allow bitbake variables in kickstart files
* wic: bootimg-efi: add a title source parameter
* gsettings: allow the schemas to be in any package
* insane.bbclass: Add configure-unsafe and configure-gettext
* insane.bbclass: support unrecognized configure checking for Meson
* insane: Clarify GNU_HASH warning
* base.bbclass: Display name of licenses which caused SkipRecipe
* distro_features_check.bbclass: show all error info at one time
* bitbake: Allow arguments in FAKEROOTCMD
* bitbake: bitbake-diffsigs: Support recursive deps with signature files
* bitbake: fetch2: Print SCMs list when SRCREV_FORMAT is not set
* rpm: produce sane amount of logging when creating a rootfs
* licence: Add license file CC-BY-SA-4.0
* Set default CONNECTIVITY_CHECK_URIS for OE-Core
* Enabled config cache for gettext, ncurses & gcc-runtime for a slight speedup in do_configure
* cmake-native: Set --parallel for configure for significant speedup
* lib/oe/recipeutils.py: parallelize upstream version checks
* sstate: add support for caching shared workdir tasks
* sstate: two improvements to performance for large sstate caches
* Removed lrzsz from packagegroup-self-hosted and packagegroup-core-tools-testapps
* glibc-locale: enable progress meter for the do_package task
* Eclipse Plugin - no longer being tested/released due to lack of developers
* meta-qt4 and meta-qt3 layers dropped from the release process
* Automated testing changes:
- oe-selftest is now tested on each major supported host
- meta-mingw tested automated
- ptest execution automated
- results collection automated and included in release (see testresults/)
- automated report generation of results
- choice of quick and full builds for testing
- inclusion of build performance testing within the autobuilder testing framework
- generate pylint report for bitbake and oe python library code
- generate buildhistory reports for builds
- split target definitions out for more parallelism

-------------
Known Issues
-------------
Bug 13309: qemuppc fails to shutdown intermittently
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13309

Bug 12991: Bitbake build-appliance-image fails during building image due to webkitgtk package
https://bugzilla.yoctoproject.org/show_bug.cgi?id=12991

Late in the release we found there an issue with the TCP backlog
queue coalescence changes in the 5.0 kernel which was the cause of a
couple of python3 ptest hangs. A fix is available upstream, and will be
ported to the 5.0.X stable kernel series. This is already in our master
branch and will be in our point release. We don't believe it to be
serious enough to warrant holding the release, particularly given
the spread of kernel versions people use.

------------------
License Compliance
------------------
The following corrections have been made to the LICENSE values set by recipes:

* socat: corrected LICENSE to be GPLv2 rather than GPLv2+
* libgfortran: Set license to GPL-3.0-with-GCC-exception
* elfutils: removed Elfutils-Exception and set GPLv2 for shared libraries

----------------------
Migration instructions
----------------------

For details on changes that you might need to make when migrating to the Yocto Project 2.7
release from previous releases, please see the following manual section:

http://www.yoctoproject.org/docs/2.7/ref-manual/ref-manual.html#moving-to-the-yocto-project-2.7-release


--------------
Security Fixes
--------------
* avahi: CVE-2017-6519
* bind: CVE-2018-5738, CVE-2018-5740, CVE-2018-5744, CVE-2018-5745, CVE-2019-6465
* bluez5: CVE-2018-10910
* cairo: CVE-2018-19876, CVE-2019-6461, CVE-2019-6462
* curl: CVE-2018-16890, CVE-2019-3822, CVE-2019-3823
* gettext: CVE-2018-18751
* ghostscript: CVE-2019-6116, CVE-2019-3835, CVE-2019-3838
* glibc: CVE-2019-7309, CVE-2019-9169
* icu: CVE-2018-18928
* libarchive: CVE-2019-1000019, CVE-2019-1000020, CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000879, CVE-2018-1000880
* libcroco: CVE-2017-7961
* libexif: CVE-2016-6328, CVE-2018-20030
* libid3tag: CVE-2004-2779
* libpng: fix CVE-2019-7317
* libsndfile1: CVE-2017-14245, CVE-2017-14246, CVE-2017-12562, CVE-2018-19758, CVE-2017-17456, CVE-2017-17457, CVE-2018-19661, CVE-2018-19662, CVE-2018-19432, CVE-2019-3832
* linux-yocto/4.19: CVE-2019-7221, CVE-2019-6974, CVE-2019-7222
* nettle: CVE-2018-16868, CVE-2018-16869
* nss: CVE-2018-12404
* openssl: CVE-2019-1543
* python-native: CVE-2018-14647
* qemu: CVE-2018-16872, CVE-2018-20124, CVE-2018-20125, CVE-2018-20126, CVE-2018-20191, CVE-2018-20216, CVE-2019-3812
* sqlite3: CVE-2019-9936, CVE-2019-9937
* systemd: CVE-2019-6454, CVE-2018-16864, CVE-2018-16865, CVE-2018-16866

----------------
Recipe Upgrades
----------------
* acpid: upgrade 2.0.30 -> 2.0.31
* adwaita-icon-theme: upgrade 3.28.0 -> 3.30.1
* alsa-lib: 1.1.6 -> 1.1.8
* alsa-plugins: 1.1.6 -> 1.1.8
* alsa-tools: 1.1.6 -> 1.1.7
* alsa-utils: 1.1.6 -> 1.1.8
* apr: upgrade 1.6.3 -> 1.6.5
* atk: upgrade 2.28.1 -> 2.30.0
* at-spi2-atk: upgrade 2.26.2 -> 2.30.0
* at-spi2-core: upgrade 2.28.0 -> 2.30.0
* at: upgrade to 3.1.23
* bind: update to 9.11.5-P4
* binutils: upgrade to 2.32
* blktool: update to 4-7.1
* bmap-tools: update from 3.4 to 3.5
* boost: update to 1.69.0
* btrfs-tools: update to 4.20.1
* busybox: update to 1.30.1
* ca-certificates: upgrade 20180409 -> 20190110
* cairo: upgrade 1.14.12 -> 1.16.0
* ccache: 3.4.2 -> 3.6
* clutter-gst-3.0: upgrade 3.0.26 -> 3.0.27
* cmake: update to 3.14.1
* connman: update to 1.36
* createrepo-c: update to 0.12.1
* cryptodev: 1.9 -> 1.10
* cups: upgrade to 2.2.10
* curl: upgrade to 7.64.0
* dbus-test: upgrade to 1.12.12
* dbus: upgrade to 1.12.12
* debianutils: update to 4.8.6.1
* diffutils: upgrade to 3.7
* dmidecode: update to 3.2
* dnf: update to 4.1.0
* dpkg: Upgrade to 1.19.4
* dropbear: update to 2019.77
* e2fsprogs: 1.44.3 -> 1.44.5
* ed: upgrade 1.14.2 -> 1.15
* eglinfo: upgrade SRCREV to 223817ee3798
* elfutils: 0.174 -> 0.176
* epiphany: update to 3.30.3
* ethtool: 4.17 -> 4.19
* eudev: upgrade 3.2.5 -> 3.2.7
* ffmpeg: update to 4.1.1
* file: upgrade 5.34 -> 5.36
* fts: Bump FTS to version 1.2.7
* gcc: Update to 8.3 latest on 8.x release
* gcr: upgrade 3.28.0 -> 3.28.1
* gdbm: update to 1.18.1
* gdb: Upgrade 8.2 -> 8.2.1
* gdk-pixbuf: update to 2.38.0
* ghostscript: 9.25 -> 9.26
* git: 2.18.1 -> 2.20.1
* glib-2.0: upgrade 2.58.0 -> 2.58.3
* glibc: Update to 2.29 release
* glib-networking: upgrade 2.54.1 -> 2.60.1
* gnome-desktop-testing: upgrade to 2018.1
* gnu-config: upgrade to 20181128 revision
* gnu-efi: upgrade 3.0.8 -> 3.0.9
* gnupg: upgrade 2.2.9 -> 2.2.13
* gnutls: update to 3.6.5
* go: add recipes for 1.12.1 and make it default
* go: Upgrade 1.11.1 -> 1.11.4 minor release
* gobject-introspection: update to 1.58.3
* gpgme: 1.11.1 -> 1.12.0
* grep: upgrade 3.1 -> 3.3
* gsettings-desktop-schemas: upgrade 3.28.0 -> 3.28.1
* gst-examples: upgrade to latest revision
* gstreamer1.0: upgrade to version 1.14.4
* gstreamer1.0-libav: upgrade to version 1.14.4
* gstreamer1.0-omx: upgrade to version 1.14.4
* gstreamer1.0-plugins-bad: upgrade to version 1.14.4
* gstreamer1.0-plugins-base: upgrade to version 1.14.4
* gstreamer1.0-plugins-good: upgrade to version 1.14.4
* gstreamer1.0-plugins-ugly: upgrade to version 1.14.4
* gstreamer1.0-python: upgrade to version 1.14.4
* gstreamer1.0-rtsp-server: upgrade to version 1.14.4
* gstreamer1.0-vaapi: upgrade to version 1.14.4
* gst-validate: upgrade 1.14.2 -> 1.14.4
* gtk+3: update to 3.24.5
* gzip: upgrade 1.9 -> 1.10
* harfbuzz: upgrade 1.8.8 -> 2.3.1
* hdparm: upgrade 9.56 -> 9.58
* i2c-tools: upgrade 4.0 -> 4.1
* icu: update to 63.1
* iproute2: 4.18.0 -> 4.19.0
* iso-codes: upgrade 4.1 -> 4.2
* json-glib: upgrade 1.4.2 -> 1.4.4
* kexec-tools: update 2.0.19
* kmod: upgrade to 26
* kmscube: update to latest commit
* less: upgrade 530 -> 550
* libassuan: update to 2.5.3
* libatomic-ops: upgrade 7.6.6 -> 7.6.8
* libcap: upgrade 2.25 -> 2.26
* libcomps: upgrade 0.1.8 -> 0.1.10
* libdnf: update to 0.26.0
* libdrm: Upgrade 2.4.94 -> 2.4.97
* libepoxy: upgrade 1.5.2 -> 1.5.3
* liberror-perl: upgrade 0.17026 -> 0.17027
* libevdev: upgrade 1.5.9 -> 1.6.0
* libfm-extra: upgrade 1.3.0.2 -> 1.3.1
* libfm: upgrade 1.3.0.2 -> 1.3.1
* libfontenc: update to 1.1.4
* libgcrypt: upgrade 1.8.3 -> 1.8.4
* libgpg-error: Bump to version 1.35
* libinput: upgrade 1.11.3 -> 1.12.6
* libjpeg-turbo: upgrade 2.0.0 -> 2.0.2
* libmodulemd: update to 2.1.0
* libpcap: upgrade 1.8.1 -> 1.9.0
* libpcre2: update to 10.32
* libpcre: upgrade to 8.43
* libpipeline: update to 1.5.1
* libpng: upgrade 1.6.35 -> 1.6.36
* librepo: update to 1.9.4
* libsdl2: upgrade 2.0.8 -> 2.0.9
* libsecret: upgrade 0.18.6 -> 0.18.7
* libsm: update to 1.2.3
* libsolv: update to 0.7.3
* libsoup: upgrade to 2.64.2
* libunwind: Upgrade to 1.3.1 release
* liburcu: upgrade 0.10.1 -> 0.10.2
* libva: update 2.2.0 -> 2.4.0
* libva-utils: 2.2.0 -> 2.4.0
* libwebp: update to 1.0.2
* libx11-diet: update to 1.6.7
* libx11: update to 1.6.7
* libxau: upgrade 1.0.8 -> 1.0.9
* libxcb: update to 1.13.1
* libxcomposite: update to 0.4.5
* libxcrypt: Upgrade to 4.4.2
* libxcursor: update 1.2.0
* libxdamage: update to 1.1.5
* libxkbcommon: update to 0.8.4
* libxslt: update to 1.1.33
* lighttpd: update to 1.4.53
* linux-firmware: Bump revision to 7bc2464
* linux-libc-headers: update to 5.x headers
* linux-yocto: introduce 4.19 recipes (4.19.30)
* linux-yocto: introduce 5.0.3 recipes
* linux-yocto-rt/4.19: update to -rt16
* llvm: upgrade to 8.0.0
* logrotate: upgrade 3.14.0 -> 3.15.0
* ltp: Bump to 20190115
* lttng-modules: upgrade 2.10.7 -> 2.10.8
* lttng-tools: Upgrade 2.9.5 -> 2.10.6
* lttng-ust: upgrade 2.10.1 -> 2.10.3
* lz4: upgrade 1.8.2 -> 1.8.3
* lzip: upgrade 1.20 -> 1.21
* lzop: upgrade 1.03 -> 1.04
* man-db: 2.8.3 -> 2.8.4
* mc: upgrade 4.8.21 -> 4.8.22
* mdadm: Upgrade to 4.1
* menu-cache: upgrade 1.0.2 -> 1.1.0
* mesa: Update 18.1.9 -> 19.0.1
* meson: update to 0.49.2
* mklibs-native: 0.1.43 -> 0.1.44
* mobile-broadband-provider-info: upgrade 20170310 -> 20190116
* mpfr: Upgrade to 4.0.2 release
* mtools: upgrade 4.0.18 -> 4.0.19
* musl: Upgrade to master beyond 1.1.21
* nasm: Upgrade 2.13.03 -> 2.14.02
* ncurses: upgrade 6.1 -> 6.1+20181013
* netbase: update to 5.6
* nettle: update to 3.4.1
* nfs-utils: Upgrade to 2.3.3
* ninja: update to 1.9.0
* nspr: update 4.21
* nss: update to 3.42.1
* ofono: upgrade 1.24 -> 1.25
* openssh: Update to 7.9
* openssl10: update to 1.0.2r
* openssl: update to 1.1.1b
* opkg: upgrade to version 0.4.0
* opkg-utils: upgrade to version 0.4.0
* p11-kit: upgrade 0.23.14 -> 0.23.15
* pcmanfm: upgrade 1.3.0 -> 1.3.1
* perl: add a version that builds the recipe using perl-cross, and update to 5.28.1
* piglit: upgrade to current HEAD
* pixman: upgrade 0.34.0 -> 0.38.0
* pkgconf: upgrade 1.5.3 -> 1.6.0
* powertop: update to 2.10
* pseudo: update to latest master
* psmisc: update to 23.2
* ptest-runner: Upgrade to 2.3.1
* python3-gitdb: upgrade 2.0.4 -> 2.0.5
* python3-pbr: upgrade to 5.1.2
* python3-pip: upgrade 18.0 -> 19.0.2
* python3-setuptools: upgrade 40.0.0 -> 40.8.0
* python3-six: upgrade 1.11.0 -> 1.12.0
* python3-smmap: upgrade to 2.0.5
* python3: upgrade to 3.7.2
* qemu: Bump to version 3.1
* readline: upgrade 7.0 -> 8.0
* rng-tools: 5 -> 6.6
* rpcbind: 0.2.4 -> 1.2.5
* rpm: update to 4.14.2.1
* ruby: upgrade 2.5.1 -> 2.5.3
* sbc: upgrade 1.3 -> 1.4
* sqlite3: Update to 3.27.2
* strace: upgrade to version 4.26
* subversion: upgrade 1.10.0 -> 1.11.1
* sudo: upgrade to 1.8.27
* syslinux: upgrade to 6.04-pre2
* sysprof: update to 3.30.2
* sysstat: upgrade to 12.1.3
* systemd-boot: upgrade to 241
* systemd: Update to systemd-stable v241-stable release
* systemtap: update to enable 5.0 kernel capabilities
* tar: upgrade to 1.31
* tcl: Upgrade to 8.6.9
* tiff: update to 4.0.10
* tzdata/tzcode-native: update to 2019a
* u-boot: Upgrade to 2019.01 release
* vala: update to 0.42.5
* wayland-protocols: upgrade 1.16 -> 1.17
* wayland: upgrade 1.16.0 -> 1.17.0
* webkitgtk: update to 2.22.7
* wget: upgrade 1.19.5 -> 1.20.1
* wpa-supplicant: update to 2.7
* x264: update to latest on stable branch
* xev: update to 1.2.3
* xf86-input-libinput: update to 0.28.2
* xf86-video-intel: update to latest
* xhost: update to 1.0.8
* xinit: update to 1.4.1
* xkeyboard-config: update to 2.26
* xmodmap: update to 1.0.10
* xprop: update to 1.2.4
* xserver-xorg: update to 1.20.4
* xvinfo: update to 1.1.4
* yocto-uninative: Update to 2.4

Hello,

We are pleased to announce the latest release of the Yocto Project 2.5.3 (sumo-19.0.3) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/poky-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/poky-sumo-19.0.3.tar.bz2

A gpg signed version of these release notes is available at:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/RELEASENOTES

Yocto 2.5.3 QA Results/Reports:

Test Results:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/testresults/
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/intel-testresults/
       
Test Report:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/testreport.txt

Thank you for everyone's contributions to this release.

Sincerely,

Vineela Tummalapalli
Yocto Project Build and Release
vineela.tummalapalli@...


------------------
yocto-2.5.3 Errata
--------------------

Release Name: eclipse-poky-neon-sumo-19.0.3
Branch: neon/sumo
Tag: neon/sumo-19.0.3
Hash: cd86f167be58a11b289af4ef236b4adec57ec316
md5: b6dd84922985ffe0d23a182017d011c7
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/eclipse-poky-neon-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/eclipse-poky-neon-sumo-19.0.3.tar.bz2

Release Name: eclipse-poky-oxygen-sumo-19.0.3
Branch: oxygen/sumo
Tag: oxygen/sumo-19.0.3
Hash: 210c58c5a7147127f9c840718c6cd2a56e871718
md5: d56ddd0d12167d77ffd34e794a77e60e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/eclipse-poky-oxygen-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/eclipse-poky-oxygen-sumo-19.0.3.tar.bz2

Release Name: meta-gplv2-sumo-19.0.3
Branch: sumo
Tag: sumo-19.0.3
Hash: d7687d404bbc9ba3f44ec43ea8828d9071033513
md5: 9592c6dfd69fef125d865e8c11d5d421
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/meta-gplv2-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/meta-gplv2-sumo-19.0.3.tar.bz2

Release Name: meta-intel-sumo-19.0.3
Branch: sumo
Tag: sumo-19.0.3
Hash: ba5f7ecd26630b74b6338c1828847a64ab172453
md5: 2ecfdfbad8b9cdb6d55a355081b33ad0
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/meta-intel-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/meta-intel-sumo-19.0.3.tar.bz2

Release Name: meta-mingw-sumo-19.0.3
Branch: sumo
Tag: sumo-19.0.3
Hash: 628dcfed62ce8dcc408e5b4a5e5c0aaa921b20ad
md5: 6f0eae4f0447755901d4bb713f120050
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/meta-mingw-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/meta-mingw-sumo-19.0.3.tar.bz2

Release Name: meta-qt3-sumo-19.0.3
Branch: sumo
Tag: sumo-19.0.3
Hash: 02f273cba6c25f5cf20cb66d8a417a83772c3179
md5: 5ec37e3f8f1a298bd62f2a93561ee41f
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/meta-qt3-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/meta-qt3-sumo-19.0.3.tar.bz2

Release Name: meta-qt4-sumo-19.0.3
Branch: sumo
Tag: sumo-19.0.3
Hash: 8e791c40140460825956430ba86b6266fdec0a93
md5: dfa40ad700b009c2d721fc1a99b49aa9
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/meta-qt4-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/meta-qt4-sumo-19.0.3.tar.bz2

Release Name: poky-sumo-19.0.3
Branch: sumo
Tag: sumo-19.0.3
Hash: 84b78df15ff77b2fe2aeb62fcaa265dce7ebfbbb
md5: 4d030e0e8d8c6559914c9bdcc50296ff
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.5.3/poky-sumo-19.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.5.3/poky-sumo-19.0.3.tar.bz2


---------------
Known Issues
---------------
Bug 13191 - [Test Case 1439] Build Failure after adding or removing packages with and without dependencies
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13191

Bug 12991 - [Bug] [2.6 M4 RC1][Build-Appliance] Bitbake build-appliance-image getting failed during building image due to webkitgtk package.
https://bugzilla.yoctoproject.org/show_bug.cgi?id=12991


---------------
Security Fixes
---------------
busybox: backport fix for issues introduced by CVE-2011-5325.patch
systemd: fix CVE-2019-6454
systemd: fix CVE-2018-6954
systemd: Security fix CVE-2018-16866
systemd: Security fix CVE-2018-16865
systemd: Security fix CVE-2018-16864
systemd: fix CVE-2018-15688
systemd: fix CVE-2018-15687
systemd: fix CVE-2018-15686


---------------
Fixes
---------------
build-appliance-image: Update to sumo head revision
oeqa/utils/gitarchive: Handle case where parent is only on origin
build-appliance-image: Update to sumo head revision
poky.conf: Bump version for 2.5.3 sumo release
yocto-uninative: Update to 2.4
oe-build-perf-report/gitarchive: Move common useful functions to library
scripts/oe-git-archive: Separate out functionality to library function
oe-build-perf-report: Fix missing buildstats comparisions
oe-build-perf-report: Improve branch comparision handling
oe-build-perf-report: Allow commits from different branches
oe-build-perf-report: Allow branch without hostname
resulttool/manualexecution: To output right test case id
resulttool/report: Enable roll-up report for a commit
scripts/resulttool: Enable manual result store and regression
resulttool/regression: Ensure regressoin results are sorted
resulttool/store: Fix missing variable causing testresult corruption
resulttool/report: Ensure ptest results are sorted
resulttool/report: Ensure test suites with no results show up on the report
resulttool/report: Handle missing metadata sections more cleanly
resulttool/store: Handle results files for multiple revisions
resulttool/resultutils: Avoids tracebacks for missing logs
resulttool: Improvements to allow integration to the autobuilder
scripts/resulttool: enable manual execution and result creation
resulttool: enable merge, store, report and regression analysis
lttng-tools: update to 2.9.11
lttng-modules: update to 2.10.9
lttng-ust: update to 2.10.3
coreutils: 8.29: fix native build
logrotate.py: restore /etc/logrotate.d/wtmp
systemd: Fix typo in root home variable.
oeqa/runtime/dnf: Fix test error when static libs are enabled
run-postinsts: for dpkg/opkg, do not rely on /etc/*-postinsts
ref-manual: Fixed SRC_URI cut-and-paste error.
bitbake: COW: Fix StopIteration warning
bitbake: utils: add optional callback to edit_bblayers_conf()
bitbake: process: Rewrite multiple connection handling
bitbake: process: Handle EWOULDBLOCK in socket connect
bitbake: process.py: Set socket timeout to 10 seconds
bitbake: server/process: Ensure socket has a timeout set
bitbake: cooker: Add some timing debug messages to the server startup
bitbake: server/process: Increase server startup time delay
bitbake: bitbake-diffsigs: Support recursive deps with signature files
bitbake: bitbake-diffsigs: Merge with bitbake-dumpsig
bitbake: server/process: Show last 60 lines of the log if the server didn't start
bitbake: server/process: Show the last 60 log lines, not the last 10
bitbake: server/process: print a message when no logfile
bitbake: server/process: Make lockfile handling clearer
bitbake: layerindex: don't use shell=True when cloning
bitbake: fetch: don't use shell=True when listing ar files
package_rpm/archiver: Apply bandaid to src.rpm creation
archiver/package_rpm: Fix the worst src.rpm generation race
libtool-cross: Handle ccache sstate 'infection' issues
libtool: Fix patch status tag
libtool: Fix problem with libtoolize in multilib installations
multilib_script: Add support for multilib scripts
image_types: use cpio-native to build cpio images
cpio: fix crash when appending to archives
oe-selftest: devtool: Support meta being a symbolic link
oe-selftest: devtool: avoid parallel races by using temporary copy of core Only add uninative and checksum if inherited uninative class
oeqa/utils/httpserver: Rework to avoid hangs and improve logging
oeqa/runtime/dnf: Make sure test_dnf_install does not skipped
perl: add testdepends for ssh
oeqa: rationalise Perl tests
oeqa/utils/buildproject: Only clean files if we've done something
oeqa/selftest/runqemu: Enable kvm when QEMU_USE_KVM is set oeqa/qemu & runtime: qemu do not need ip input from external
oeqa/runtime/cases: Improve dependencies of kernel/gcc/build tests
oeqa/runtime/cases: Improve test dependency information
oeqa/runtime/python: clean up Python test
oeqa/runtime/cases/python: use python 3 rather than python 2
runqemu-gen-tapdevs: Allow run --help without sudo
runqemu: clean up subprocess usage
oeqa/runtime/cases/rpm.py: change to use base-passwd-doc
oeqa: replace Alex Kanavin's @intel email address with a personal one
oeqa: make it work for multiple users
meta/classes/testimage.bbclass: Only validate IMAGE_FSTYPES when is QEMU
testimage.bbclass: remove boot parameter systemd.log_target
testimage: Add possibility to pass parmeters to qemu
testimage: Add support for slirp
testimage: Enable autorunning of the package manager testsuites
testimage: Further cleanup DEFAULT_TEST_SUITES
testimage: Simplfy DEFAULT_TEST_SUITES logic
runtime/dnf: Add new dnf test cases
kernel: don't assign the build user/host
oeqa: Fix for QEMU_USE_KVM
patch: reproducibility: Fix host umask leakage
scripts/oe-git-archive: fix non-existent key referencing error
package.bbclass: fix python unclosed file ResourceWarning
package: Rework PACKAGELOCK based upon sstate for do_packagedata
testimage.bbclass: fix qemu_use_kvm handling
testimage/testsdk/selftest: Avoid platform.distro_identifier deprecation warnings
oeqa/utils/qemurunner: set timeout to 60s for run_serial
tzdata/tzcode-native: update to 2018i
tzcode-native: update to 2018g
tzdata: update to 2018g
oeqa/utils/qemurunner: Print output when failed to login
busybox: Put klogd/syslogd alternative links in syslog package overview-manual, mega-manual: Updated Package Feeds diagram
ref-manual: Typo found and fixed.
dev-manual: Updated clone and checkout examples.
brief-yoctoprojectqs: Updated clone and checkout example.
documentation: Updates to support a 2.5.3 release:
bitbake: bitbake-user-manual: Fixed section head typo brief-yoctoprojectqs, dev-manual: Updated poky clone examples.
poky.ent: Updated release date to "January 2019".
Documentation: Updated dates for 2.5.2 release.
testsdk: Improvements to the json logging
testimage: Improvements to the json logging
oeqa/selftest/esdk: Fix typo causing test failure
default-versions.inc: Make PREFERRED_VERSION_openssl* overwritable
oeqa/selftest/esdk: Ensure parent directory exists
image-buildinfo,oeqa/selftest/containerimage: Ensure image-buildinfo doesn't break tests
oeqa/utils/metadata: Allow to function without the git module
oeqa/selftest: Standardize json logging output directory
oeqa/selftest: Improvements to the json logging
testsdk.bbclass: write testresult to json files
testimage.bbclass: write testresult to json files
oeqa/selftest/context: write testresult to json files
oeqa/runner: Sort the test result output by result class
oeqa/runner: Always show a summary of success/fail/error/skip counts
oeqa/runtime/ptest: Inject results+logs into stored json results file
oeqa/core/runner: write testresult to json files
oeqa/core/runner: refactor for OEQA to write json testresult
oeqa: Remove xmlrunner
oeqa/runner: Simplify code
oeqa/core/threaded: Remove in favour of using concurrenttests
oeqa/runner: Ensure we don't print misleading results output
oeqa/core/runner: Improve test case comparision
oeqa/selftest/context: Improve log file handling
oeqa/utils/qemurunner.py: Fix python regex warnings
oeqa/selftest/context: Replace deprecated imp module usage
oeqa/utils/commands: Avoid unclosed file warnings
oeqa/loader: Fix deprecation warning
oeqa/selftest/esdk: run selftest inside workdir not /tmp
oeqa: don't litter /tmp with temporary directories
oeqa/utils/qemurunner: Avoid tracebacks on closed files
oeqa/selftest/runqemu: Improve testcase failure handling
oeqa/oelib/path: don't leak temporary directories
oeqa/selftest/buildoptions: Ensure diskmon tests run consistently
oeqa/selftest/buildoptions: Improve ccache test
oeqa/qemurunner: Remove resource python warnings
oeqa/utils/commands: Avoid log message duplication
oeqa/utils/qemurunner: Fix python ResourceWarning for unclosed file
oeqa/utils/commands: Add extra qemu failure logging
oeqa/selftest/buildoptions: Improve ccache test failure output
oeqa/selftest/case: Use bb.utils.remove() instead of shutil.remove()
oeqa/selftest/signing: Use do_populate_lic target instead of do_package
oeqa/selftest/signing: Allow tests not to need gpg on the host
oeqa/selftest/signing: Skip tests if gpg isn't found
scripts/runqemu: Improve lockfile handling for python with close_fd=True
scripts/runqemu: Tidy up lock handling code
scripts/runqemu: Replace subprocess.run() for compatibilty
documentation: Prepared for 2.5.2 document release
bitbake: bitbake-user-manual: Added "usehead" parameter.
bitbake: main: Don't use print() directly, use logger
bitbake: process: Flush key output to logs
bitbake: runqueue: Ensure disk monitor is started when no setscene tasks are run
bitbake: server/process: Fix ConnectionRefusedError tracebacks
bitbake: lib/bb/server: Avoid UnboundLocalError traceback
bitbake: server/process: Fix unclosed socket warnings upon server connection refused

We are pleased to announce the latest release of the Yocto Project 2.6.2 (thud-20.0.2) is now available for download:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.2/poky-thud-20.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.2/poky-thud-20.0.2.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.2/RELEASENOTES

Yocto 2.6.2 QA reporting:

Summary: https://lists.yoctoproject.org/pipermail/yocto/2019-April/044827.html
Results: https://autobuilder.yocto.io/pub/releases/yocto-2.6.2.rc3/testresults/

Build log:
hhttps://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/122

Release Criteria:
https://wiki.yoctoproject.org/wiki/Yocto_Project_v2.6_Status#Yocto_Project_2.6.2_release


Thank you for everyone's contributions to this release.

Sincerely,

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...

We are pleased to announce the third milestone release for Yocto Project 2.7 (yocto-2.7_M3) is available for download now.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.7_M3/

poky: 753e2a0ede4449917c75353b57f13bbafe70fac8
oecore: 619a8ab875ee8e2914cd58947f342808d817833c
bitbake: e1f252408982a62485bbf874a01fd30a02aeed32
eclipse-poky-neon: cd86f167be58a11b289af4ef236b4adec57ec316
eclipse-poky-oxygen: 210c58c5a7147127f9c840718c6cd2a56e871718
meta-gplv2: aabc30f3bd03f97326fb8596910b94639fea7575
meta-intel: c7c0e12c98cec527bcdcf26594d34bbeb16057c5
meta-mingw: 750706a3501ec9f5e3fa6dcbfb13a9027b6a875e
meta-qt3: 23d7543ebd7e82ba95cbe19043ae4229bdb3b6b1
meta-qt4: b37d8b93924b314df3591b4a61e194ff3feb5517

The YP 2.7 M3 rc1 report is summarized in the mailing list threads:

QA Report: https://lists.yoctoproject.org/pipermail/yocto/2019-April/044667.html and the results are at
Test Results: https://autobuilder.yocto.io/pub/releases/yocto-2.7_M3.rc1/testresults/
Build log: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/94
Release criteria: https://wiki.yoctoproject.org/wiki/Yocto_Project_v2.7_Status#Milestone_3_-_Target_Mar._8.2C_2019


Thank you.

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...

We are pleased to announce the second milestone release for Yocto Project 2.7 (yocto-2.7_M2) is available for download now.

Download:

http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.7_M2/

poky: be52da152a4d9f9e798844f592ec9ae7e051c658
oecore: 2dbbf598192ae2b3aa488df042f56aa6c6634a00
bitbake: d73dbc3580faa1225d95ae4cefac4879ca3c1b2f
eclipse-poky-neon: cd86f167be58a11b289af4ef236b4adec57ec316
eclipse-poky-oxygen: 210c58c5a7147127f9c840718c6cd2a56e871718
meta-gplv2: aabc30f3bd03f97326fb8596910b94639fea7575
meta-intel: 29e4db5bf484f18e41bc9123161b1c069e60a128
meta-mingw: 423433e3d31a32dbb80203c628e808442d440ad1
meta-qt3: 23d7543ebd7e82ba95cbe19043ae4229bdb3b6b1
meta-qt4: b37d8b93924b314df3591b4a61e194ff3feb5517

Test report:

https://wiki.yoctoproject.org/wiki/WW07_-_2019-02-14_-_Full_Test_Cycle_2.7_M2_RC2

Thank you.

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...

We are pleased to announce the meta-intel 10.1 layer for the Yocto Project 2.6.1 “thud" release is now available for download.

Tracy Graydon
Intel Corporation


----------------------
10.1-thud-2.6.1 Errata
----------------------

Release Name: meta-intel-10.1-thud-2.6.1
Branch: thud
Tag: 10.1-thud-2.6.1
Hash: 9ad66b4c4c22c140151c1ac12a5c189aa3202c93
md5: 829cc702e03b72bec6b0cb1db1989505
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/meta-intel-10.1-thud-2.6.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/meta-intel-10.1-thud-2.6.1.tar.bz2


--------------
Known Issues
--------------
N\A


---------------
Security Fixes
---------------
For Intel processor-specific security information please visit https://software.intel.com/en-us/side-channel-security-support

Method information on Intel's Security Center site:
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr

Intel Security Center:
https://security-center.intel.com/default.aspx

---------------
Fixes
---------------
linux-intel-rt/4.14: update to v4.14.93
conf: set -rt kernel to 4.14
linux-intel/4.9: update to v4.9.146
linux-intel-rt/4.19: introduce -rt recipe for 4.19
linux-intel/4.19: update to v4.19.13
linux-intel/4.14: update to v4.14.92
linux-intel/4.19: update SRCREV for 4.19.8
linux-intel/4.14: update to v4.14.87
README: update for thud release requirements

We are pleased to announce the latest release of the Yocto Project 2.6.1 (thud-20.0.1) is now available for download at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/poky-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/poky-thud-20.0.1.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/RELEASENOTES

Full pass test report is available at:

https://wiki.yoctoproject.org/wiki/WW02_-_2019-01-09_-_Full_Test_Cycle_2.6.1_RC1

Thank you for everyone's contributions to this release.

Sincerely,

Tracy Graydon
Yocto Project Build and Release
tracy.graydon@...


------------------
yocto-2.6.1 Errata
--------------------

Release Name: poky-thud-20.0.1
Branch: thud
Tag: thud-20.0.1
Hash: 1cab405d88149fd63322a867c6adb4a80ba68db3
md5: 392dad457a33761772a7b95d105352cf
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/poky-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/poky-thud-20.0.1.tar.bz2

Release Name: eclipse-poky-neon-thud-20.0.1
Branch: neon/thud
Tag: neon/thud-20.0.1
Hash: 9ab82dc61d603f3b1456059e9afafab806d0ca0a
md5: 4574709f7f96c8c557267236ef9a95a9
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/eclipse-poky-neon-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/eclipse-poky-neon-thud-20.0.1.tar.bz2

Release Name: eclipse-poky-oxygen-thud-20.0.1
Branch: oxygen/thud
Tag: oxygen/thud-20.0.1
Hash: 94df2cc13127b7347b26e473c3b5c583f9a2b350
md5: 27c29ca5bd266bd4bf1052c507adb3ed
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/eclipse-poky-oxygen-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/eclipse-poky-oxygen-thud-20.0.1.tar.bz2

Release Name: meta-gplv2-thud-20.0.1
Branch: thud
Tag: thud-20.0.1
Hash: aabc30f3bd03f97326fb8596910b94639fea7575
md5: 46205a0ed058456849f6709d0d733726
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/meta-gplv2-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/meta-gplv2-thud-20.0.1.tar.bz2

Release Name: meta-intel-thud-20.0.1
Branch: thud
Tag: thud-20.0.1
Hash: 7ea89b9ddcdd3de1629bae1465425c8077c5aa06
md5: b1d483aeb2d6887ce59dacca0004cf80
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/meta-intel-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/meta-intel-thud-20.0.1.tar.bz2

Release Name: meta-mingw-thud-20.0.1
Branch: thud
Tag: thud-20.0.1
Hash: b4227458cd5bd73beb8ae8e54b6365f326178092
md5: bb6e6bc6758963fc1ef856f35d37ec40
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/meta-mingw-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/meta-mingw-thud-20.0.1.tar.bz2

Release Name: meta-qt3-thud-20.0.1
Branch: thud
Tag: thud-20.0.1
Hash: 23d7543ebd7e82ba95cbe19043ae4229bdb3b6b1
md5: 6ef2954c0428675daefe5e0887d259c3
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/meta-qt3-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/meta-qt3-thud-20.0.1.tar.bz2

Release Name: meta-qt4-thud-20.0.1
Branch: thud
Tag: thud-20.0.1
Hash: b37d8b93924b314df3591b4a61e194ff3feb5517
md5: c0ec4d8521b0bfe9b16b72988b515af4
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.1/meta-qt4-thud-20.0.1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.6.1/meta-qt4-thud-20.0.1.tar.bz2


---------------
Known Issues
---------------
Bug# 13143: bitbake core-image-minimal failed because no module named 'gpg' on CentOS 7 and OpenSuse 42.3
https://bugzilla.yoctoproject.org/show_bug.cgi?id=13143

Bug# 12991: Bitbake build-appliance-image getting failed during building image due to webkitgtk package
https://bugzilla.yoctoproject.org/show_bug.cgi?id=12991

Both of these bugs are still being root caused. Please see the respective bugs for steps to reproduce and further details.


---------------
Security Fixes
---------------
linux-yocto/4.18: integrate CVE fixes
ref-manual: Added GCCVERSION variable description to glossary.
curl: actually apply latest CVE patches
unzip: actually apply CVE-2018-18384
binutils: fix four CVE issues
curl: fix for CVE-2018-16839/CVE-2018-16840/CVE-2018-16842
openssl: fix CVE-2018-0735 for 1.1.1
openssl: fix CVE-2018-0734 for both 1.0.2p and 1.1.1
ghostscript: fix CVE-2018-18284
ghostscript: fix CVE-2018-18073
ghostscript: fix CVE-2018-17961
elfutils: fix CVE-2018-18520 & CVE-2018-18521 & CVE-2018-18310
nasm: fix CVE-2018-1000667
unzip: fix for CVE-2018-18384
qemu: fix for CVE-2018-10839
systemd: fix CVE-2018-15688
systemd: fix CVE-2018-15687
systemd: fix CVE-2018-15686
nss: update to 3.39 includes CVE-2018-12384
xserver-xorg: fix CVE-2018-14665


---------------
Fixes
---------------
brief-yoctoprojectqs, dev-manual: Update tag checkout examples
poky.ent: Updated release date to "January 2019"
build-appliance-image: Update to thud head revision
poky: Update version to 2.6.1
local.conf.sample: Update the sample config as per new migration manual
bitbake: bitbake-diffsigs: Support recursive deps with signature files
bitbake: bitbake-diffsigs: Merge with bitbake-dumpsig
poky.conf: Update the distros we test against on the autobuilder
bitbake: server/process: Show last 60 lines of the log if the server didn't start
bitbake: server/process: Show the last 60 log lines, not the last 10
bitbake: server/process: print a message when no logfile
bitbake: server/process: Make lockfile handling clearer
bitbake: fetch: don't use shell=True when listing ar files
bitbake: layerindex: don't use shell=True when cloning
linux-yocto: correct qemumips64el definition
linux-yocto: configuration updates (virtio and tpm)
populate_sdk_ext.bbclass: Include site.conf in parsing for contents for local.conf
createrepo-c: Fix setup of logging (log domains)
nss: Fix SHA_HTONL bug for arm 32be.
go 1.9/1.11: fix textrel qa warning for non mips arch
python3: drop redundant patch
python3: don't cripple target distutils
gdb: Remove long ago upstreamed patch
valgrind: Skip vgpreload_memcheck shared object from stripping
classes/icecc.bbclass: Fix ccache disable
patchreview: Various fixes/improvements
insane: Clarify GNU_HASH warning
linux-firmware: better packaging for TI wl12xx & wl18xx firmwares
linux-firmware: Bump revision to 1baa348
openssl: correct bad path on package preprocess
ruby: upgrade 2.5.1 -> 2.5.3
linux-yocto/4.18: update to v4.18.21
linux-yocto/4.18: update to v4.18.20
linux-yocto/4.14: update to v4.14.79
linux-yocto/4.18: update to v4.18.17
linux-yocto/4.18: bug fixes and configuration tweaks
linux-yocto/tiny: restore qemuarm support
linux-yocto/tiny: switch default branch to standard/tiny/base
linux-yocto/4.18: -rt sync and config cleanups
linux-yocto/4.14: configuration cleanups
linux-yocto: remove obselete options from lxc config
licence: Add license file CC-BY-SA-4.0
piglit: add missing waffle-bin dependency
binconfig: only try to mangles files
libc-package: fix postinst error when ENABLE_BINARY_LOCALE_GENERATION = "0"
python: Adds instructions to the manifest file
libtasn1: no need to inherit binconfig
image_types: use cpio-native to build cpio images
cpio: fix crash when appending to archives
meta-selftest/error: Cleanup large trailing whitespace
nspr: improve reproducibility
ghostscript: 9.25 -> 9.26
scripts/runqemu: Fix logic error causing failures with MACHINE from the environment
gst-validate: upgrade 1.14.2 -> 1.14.4
gstreamer1.0-python: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-omx: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-rtsp-server: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-vaapi: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-libav: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-ugly: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-bad: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-good: upgrade 1.14.3 -> 1.14.4
gstreamer1.0-plugins-base: upgrade 1.14.3 -> 1.14.4
gstreamer1.0: upgrade 1.14.3 -> 1.14.4
gst-plugins-bad: add PACKAGECONFIG for msdk
gstreamer1.0-python: upgrade to version 1.14.3
gstreamer1.0-omx: upgrade to version 1.14.3
gstreamer1.0-vaapi: upgrade to version 1.14.3
gstreamer1.0-rtsp-server: upgrade to version 1.14.3
gstreamer1.0-libav: upgrade to version 1.14.3
gstreamer1.0-plugin-ugly: upgrade to version 1.14.3
gstreamer1.0-plugin-bad: upgrade to version 1.14.3
gstreamer1.0-plugin-good: upgrade to version 1.14.3
gstreamer1.0-plugin-base: upgrade to version 1.14.3
gstreamer1.0: upgrade to version 1.14.3
maintainers.inc: update Intel owners
devtool: fix target-deploy --strip
multilib_script: fix packages split
systemd: fix PN-container package splitting
archiver.bbclass: Fix COPYLEFT_LICENSE_{IN, EX}CLUDE
openssl: update to 1.1.1a
image.bbclass: fix a wrong position blank
mdadm: improve the run-ptest
meson: Correct use of the _append operator
meson: Disable rpath stripping at install time
meson: do not manipulate the environment when looking for python via pkg-config
ethtool: 4.17 -> 4.19
iproute2: 4.18.0 -> 4.19.0
sstate.bbclass: Only remove sstate file when task is existed
bugzilla.bbclass: Remove it since obsoleted
libgcrypt: upgrade 1.8.3 -> 1.8.4
gnupg: upgrade 2.2.10 -> 2.2.11
gnupg: upgrade 2.2.9 -> 2.2.10
gnutls: update to 3.6.4
elfutils: 0.174 -> 0.175
recipes: Remove tab indentations in python code
classes: Remove tab indentations in python code
ptest: Reproducibility: Take control of umask
reproducible: Don't look for youngest file when no source tarball
reproducible: Refactor: Break out fixed_source_date_epoch() function
boost-context: Reproducibility: Set .file section for all *_elf_gas.S files
opkg-utils: Fix update-alternatives link relocation
meta/icecc.bbclass: Update system blacklists
meta/icecc.bbclass: Move system blacklist to variables
socat: fix LICENSE
bitbake: siggen: Adapt colors used by bitbake-diffsigs to support light themes
Documentation: Prepare for 2.6.1 release.
ref-manual: Document the fifth argument to PACKAGECONFIG
ref-manual: Add missing whitespace around "=" in a few code examples.
poky.ent: Updated copyright variable to span into 2019.
ref-manual: Updates to CMake and cmake.bbclass.
ref-manual: Updated list of supported Linux Distros:
dev-manual: Added note stating no WSL support
ref-manual: Added a note saying WSL is not supported.
brief-yoctoprojectqs: Added warnings about WSL, which can't be used.
kernel-dev: Updated phrasing for what a "defconfig" file is.
ref-manual: Updated image_types.bbclass description.
ref-manual: Added description for devupstream.bbclass
dev-manual: Updated the "Post-Installation Scripts" section.
ref-manual: Added cross-references to "Post-Installation Scripts"
ref-manual: Updated "Packaging Changes" section for 2.6 migration.
ref-manual: Applied review edits to the 2.6 migration section.
ref-manual: New 2.6 Migration section complete.
ref-manual: Added new python3 profile-optimization migration topic
ref-manual: Updated postinstall migration note.
ref-manual: Updates to the 2.6 migration section.
ref-manual: Added KERNEL_ARTIFACT_NAME and adjusted referencing variables.
ref-manual: Removed the NOISO and NOHDD references.
dev-manual: Removed occurrence of mkefidisk.sh script.
ref-manual: Removed the NOISO and NOHDD variables.
ref-manual: Added several new sections to the 2.6 migration section.
ref-manual: Added new artifact naming variables to glossary.
ref-manual: Changed "post 2.6" to correct wording.
ref-manual: Added KERNEL_IMAGE_NAME description
ref-manual: Updated migration section for 2.6
ref-manual: Updated 2.6 migration topic "_remove"
ref-manual: Added the 2.6 Migration Section.
ref-manual: Updated testimage and testsdk class descriptions.
ref-manual, dev-manual: Removed TEST_IMAGE for TESTIMAGE_AUTO.
poky.ent: Updated release month to November 2018 (thud)
oeqa/selftest/esdk: Fix typo causing test failure
oeqa/selftest/esdk: Ensure parent directory exists
testimage/testsdk/selftest: Avoid platform.distro_identifier deprecation warnings
oeqa/concurrencytest: Avoid unclosed file warnings
oeqa/utils/qemurunner.py: Fix python regex warnings
oeqa/selftest/context: Replace deprecated imp module usage
oeqa/utils/commands: Avoid unclosed file warnings
oeqa/core/runner: Correctly markup regexs
oeqa/loader: Fix deprecation warning
oeqa/runner: Sort the test result output by result class
oeqa/runner: Always show a summary of success/fail/error/skip counts
oeqa/selftest/esdk: run selftest inside workdir not /tmp
oeqa: don't litter /tmp with temporary directories
oeqa/utils/qemurunner: Avoid tracebacks on closed files
oeqa/selftest/runqemu: Improve testcase failure handling
lib/oe/utils: Improve multiprocess_lauch exception handling
oeqa/oelib/path: don't leak temporary directories
oeqa/selftest/context: Improve log file handling
oeqa/selftest/buildoptions: Ensure diskmon tests run consistently
oeqa/selftest/buildoptions: Improve ccache test
oeqa/qemurunner: Remove resource python warnings
oeqa/utils/commands: Avoid log message duplication
oeqa/utils/qemurunner: Fix python ResourceWarning for unclosed file
oeqa/utils/commands: Add extra qemu failure logging
oeqa/selftest/buildoptions: Improve ccache test failure output
oeqa/selftest/case: Use bb.utils.remove() instead of shutil.remove()
oeqa/selftest/signing: Use do_populate_lic target instead of do_package
oeqa/selftest/signing: Allow tests not to need gpg on the host
oeqa/selftest/signing: Skip tests if gpg isn't found
scripts/runqemu: Improve lockfile handling for python with close_fd=True
scripts/runqemu: Tidy up lock handling code
scripts/runqemu: Replace subprocess.run() for compatibilty
bitbake: bitbake-user-manual: Added "usehead" parameter.
bitbake: main: Don't use print() directly, use logger
bitbake: process: Flush key output to logs
bitbake: fetch2/svn: Fix SVN repository concurrent update race
bitbake: runqueue: Ensure disk monitor is started when no setscene tasks are run
bitbake: server/process: Fix ConnectionRefusedError tracebacks
bitbake: fetch2: Avoid warning about incorrect character escaping in regex
gstreamer1.0-vaapi: downgrade vaapisink to marginal rank
bitbake: tests/fetch: Update after recent gitsm message changes
bitbake: cooker: Fix multiconfig dependencies
bitbake: fetch/git: fix AttributeError in shallow extraction logic
sanity: Add check for WSL
oeqa/utils/httpserver: Rework to avoid hangs and improve logging
openssl-1.1.1: remove build path from version info
busybox: make busybox.links.{suid, nosuid} reproducible
shadow: improve reproducibility by hard-coding shell path
oeqa/selftest/recipetool: Fix problems from changing upstream source
image-buildinfo,oeqa/selftest/containerimage: Ensure image-buildinfo doesn't break tests
valgrind: drop mips n32 support
oeqa/selftest: Standardize json logging output directory
glibc: make ld-2.28.so reproducible on arm
base.bbclass: avoid 'find -ignore_readdir_race -delete'
bitbake: server/process: Fix unclosed socket warnings upon server connection refused
bitbake: siggen: Correct format argument substitution
bitbake: fetch: Also export GIT_SSH environment variable
bitbake: bitbake: toaster: allow OE_ROOT to be provided through environment
bitbake: fetch2/gitsm.py: Fix the references when the module and path are different
bitbake: fetch2/gitsm.py: Disable branch checking on submodules
perf: Disable libunwind for ARC & RISCV64
apt: update SRC_URI
archiver: Drop unwanted directories
scripts/autobuilder-worker-prereq-tests: adjust max_user_watches
meta: Use double colon for chown OWNER:GROUP
wic: use explicit errno import
oeqa/selftest: Add test for Yocto source mirror functionality/completeness
libgpg-error: Support build for native on ppc64/ppc64le hosts
v86d: Make cross compilation working on more architectures
oe-init-buildenv/base: Relax python version checks in favour of HOSTTOOLS manipulation
oeqa/runtime/ptest: Inject results+logs into stored json results file
crosssdk: Remove usage of host flags for cross-compilation
go: Change from TARGET_ARCH to TUNE_PKGARCH
go-dep: disable PTEST_ENABLED for mips and mips64
python3: add python3-venv to the python3-modules RDEPENDS
python3: Fix python3-pyvenv run-time dependency
gdbm: fix ptest failure
pixman: Trim license info extracted from pixman-matrix.c
libgpg-error: Trim license info extracted from init.c & gpg-error.h.in
apr-util: Trim license info extracted from apu_version.h
apr: Trim license info extracted from apr_lib.h
common-licenses: Correct the FreeType license text
reproducible_build: update do_deploy_source_date_epoch commment
elfutils: 0.173 -> 0.174
tzdata: update to 2018g
tzcode-native: update to 2018g
bitbake: bitbake-user-manual: Added hard-spacing to "_remove" example.