[ANNOUNCEMENT] Yocto Project 3.2.3 (gatesgarth-24.0.3) is Released



We are pleased to announce the Yocto Project 3.2.3 (gatesgarth-24.0.3) Release is now available for download.


A gpg signed version of these release notes is available at:


Full Test Report:


Thank you for everyone's contributions to this release.

Vineela Tummalapalli
Yocto Project Build and Release

- --------------------------
yocto-3.2.3 Release Notes
- --------------------------

- --------------------------
- --------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: gatesgarth
Tag: yocto-3.2.3
Git Revision: 08665a81dcd41069eed1468f1587abe6b5893471
Release Artefact: poky-gatesgarth-24.0.3
sha: 174cdc436360fb8a11f08b54e6e39d3159aa80f57a3cabc165c625cdd111f9da
Download Locations:

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: gatesgarth
Tag: 2020-10.3-gatesgarth
Git Revision: fdae970656cc421c542af9856bc9ae038c61db13
Release Artefact: oecore-gatesgarth-24.0.3
sha: 22b293dda4bb47b6d57ef3058ccb8fc8d49c41a5d5b4e8f86ca94b49eed37a07
Download Locations:

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: gatesgarth
Tag: yocto-3.2.3
Git Revision: 352d8b0aa3c7bbd5060a4cc2ebe7c0e964de4879
Release Artefact: meta-mingw-gatesgarth-24.0.3
sha: 03ae3c3695e60a8130023c6eff1f75ca2b735484b9889a8689f33bb220fa9dbc
Download Locations:

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: gatesgarth
Tag: yocto-3.2.3
Git Revision: 6e8e969590a22a729db1ff342de57f2fd5d02d43
Release Artefact: meta-gplv2-gatesgarth-24.0.3
sha: 7c639c543b01b0ffdac3ac3b3a25513af690113f29a528408aaecf1f3618aa4f
Download Locations:

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: gatesgarth
Tag: 2020-10.3-gatesgarth
Git Revision: 5d02c98489d3a5836676b9c3fb3bd0157449db2b
Release Artefact: bitbake-gatesgarth-24.0.3
sha: 527828a79ec0cd92cdabc779247e31787cd7f5451b8ed568fd4bd511c0a5cd23
Download Locations:

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/git/yocto-docs
Branch: gatesgarth
Tag: yocto-3.2.3
Git Revision:10ea3bc5691bdf32df47a28252ce4b74ca7fd646

- -------------
- -------------
Alejandro Hernandez Samaniego
Anatol Belski
Andrei Gherzan
Anuj Mittal
Armin Kuster
Bruce Ashfield
Chee Yang Lee
Chen Qi
Florian Bezdeka
Jan Brzezanski
Jan-Simon Möller
Jon Mason
Joshua Watt
Khem Raj
Lee Chee Yang
Marek Vasut
Martin Jansa
Michael Halstead
Mike Crowe
Milan Shah
Mingli Yu
Minjae Kim
Peter Kjellerstedt
Purushottam Choudhary
Richard Leitner
Richard Purdie
Ross Burton
Sangeeta Jain
Scott Murray
Stefan Ghinea
Stefan Schmidt
Stephen Jolley
Thomas Viehweger
Tomasz Dziendzielski
Vineela Tummalapalli
Vivien Didelot
Wang Mingyu
Wes Lindauer
Yi Fan Yu
Yi Zhao
Yoann Congal
Zbigniew Bodek

- ---------------
Known Issues
- ---------------

- ---------------
Security Fixes
- ---------------
glib-2.0: Fix CVE-2021-27219
python3-jinja2: set CVE_PRODUCT
shadow: whitelist CVE-2013-4235
wpa-supplicant: fix CVE-2021-27803
qemu: fix CVE-2021-20203
libsdl2: fix CVE-2020-14409 CVE-2020-14410
python3: fix CVE-2021-23336
bind: fix CVE-2020-8625
cups: fix CVE-2020-10001
wpa-supplicant: fix CVE-2021-0326
screen: fix CVE-2021-26937
openssh: fix CVE-2020-14145
qemu: fix CVE-2020-29443 CVE-2020-35517

- ---------------
- ---------------
build-appliance-image: Update to gatesgarth head revision
poky.conf: bump version for 3.2.3 release
documentation: version bumps for 3.2.3 release
build-appliance-image: Drop kernel module handling
xcb-proto: update to 1.14.1
linux-yocto/5.4: update to v5.4.103
Revert "sstatesig.py: show an error instead of warning when sstate manifest isn't found"
systemd-conf: do not ask for DHCP if configured on kernel command line
populate_sdk_ext: record METADATA_REVISION
runqemu: use "raw" instead of "bin" for ovmf
devtool: Fix do_kernel_configme task
iso-codes: fix protocol in SRC_URI
gcc-sanitizers: Move content from gcclibdir into libdir
gstreamer1.0-python: Set internal python library path correcty
selftest/reproducible: Don't call sync between each file compare
apr-util: Fix CFLAGS used in build
igt-gpu-tools: Fix reproducibility issue
libsecret: Improve determimism
ptest-packagelists: remove libinput-ptest
linux-yocto/5.4: update to v5.4.101
linux-yocto/5.4: update to v5.4.99
libinput: less parallism to increase chances the test suite works
bitbake: Force parser shutdown after catching an exception
bitbake: runqueue: Add setscene task overlap sanity check
bitbake: runqueue: Fix task execution corruption issue
linux-yocto: update genericx86* to v5.4.94
yocto-uninative.inc: version 3.0 incorporate seccomp filter workaround
yocto-uninative.inc: version 2.11 updates glibc to 2.33
parted: Fix reproducibility issue
valgrind: Increase timeout duration 30 -> 90 s
oeqa/pam: Need shadow installed for the tests
bitbake.conf: Split PSEUDO_IGNORE_PATHS to be more readable
bitbake.conf/image: Move image specific PSEUDO_IGNORE_PATHS to image class
populate_sdk: Add directories to PSEUDO_IGNORE_PATHS
image: Add directories to PSEUDO_IGNORE_PATHS
epiphany: Fix distributor contamination from /etc/os-release
epiphany: Fix reproducibility issue
wic: Warn if an ext filesystem affected by the Y2038 problem is used
externalsrc: Pass through npmsw URIs in SRC_URI
gcr: Fix reproducibility issue
cups: Fix reproducibility issues
asciidoc: Switch to using the main branch
sstatesig.py: show an error instead of warning when sstate manifest isn't found
bitbake.conf: Introduce FAKEROOTLOGS variable used by bitbake to print pseudo.log
babeltrace2: Fix reproducibility
report-error.bbclass: Add layer and bitbake version info to error report
python3: Fix python interpreter line length for nativesdk
libevdev: Update patch status to backport
rsync: Fix group name determinism issue
rsync: Fix a file sorting determinism issue
openssl: upgrade 1.1.1i -> 1.1.1j
systemd: Fix importd requirements comment
linux-firmware: upgrade 20201218 -> 20210208
wpebackend-fdo: Fix missing .so symlink when using dev package
oeqa/commands: Fix compatibility with python 3.9
oe/recipeutils: Fix copying patches when BBLAYERS entries are not normalised
package_rpm: Enable use_source_date_epoch_as_buildtime in package_rpm class
mtd-utils: Remove duplicate assignments to alternative link names
npm.bbclass: avoid building target nodejs for native npm recipes
go: Update to 1.15.8
cve-check: add include/exclude layers
cve-check.bbclass: add layer to cve log
df.py: Add feature check for read-only-rootfs
groff: Fix determinism issue
linux-yocto/5.4: update to v5.4.98
linux-yocto/5.4: update to v5.4.96
valgrind: Disable ptest nlcontrolc for x86-64
git: Fix determinism issue
xorg-minimal-fonts: Really fix determinism
xorg-fonts-minimal: Fix reproducibility
rootfs_deb: handle aarch64 SDK_ARCH
bitbake: __init__.py: Fix bitbake debug log handling
documentation: version bumps for 3.2.2 release
acpica: Fix reproducibility issues
bison: Fix up file name mapping
systemd: Re-enable chvt as non-root user without polkit
xmlto: Fix reproducibility
watchdog: Avoid reproducibility failures after fixing build
watchdog: Fix determinism issue from sendmail host path
oeqa: reproducible: Add more logging
oeqa: reproducible: Fix SSTATE_MIRRORS variable
buildtools-extended-tarball: Add glibc-gconvs needed for build
quilt: Be determnistic about column presence
package_manager/deb: Fix image generation with package removal
deb: export INTERCEPT_DIR for remove actions
vim: Fix a race over creation of the desktop files
vim: Improve determinism
weston-init: Fix weston-keyboard path in weston.ini
cwautomacros: Ensure version is set deterministically
opkg: Fix patch glitches
opkg: Fix build reproducibility issue
pseudo: Update to include fixes for glibc 2.33
weston: remoting backend requires GStreamer base plugins
libomxil: Fix up commercial license flag
tcf-agent: Fix build on riscv32
connman: update to 1.39
pseudo: Update for rename and faccessat fixes
oe-pkgdata-util: Check if environment script is initialized
wic: debug mode to keep tmp directory
initrdscripts: init-install-efi.sh install extra files for ESP