[ANNOUNCEMENT] Yocto Project 4.1.3 is Released

Lee Chee Yang


We are pleased to announce the Yocto Project 4.1.3 Release is now available for download.





A gpg signed version of these release notes is available at:




Full Test Report:




Thank you for everyone's contributions to this release.


Chee Yang Lee


Yocto Project Build and Release

- --------------------------

yocto-4.1.3 Release Notes

- --------------------------



- --------------------------


- --------------------------


Repository Name: poky

Repository Location: https://git.yoctoproject.org/poky

Branch: langdale

Tag: yocto-4.1.3

Git Revision: 91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f

Release Artefact: poky-91d0157d6daf4ea61d6b4e090c0b682d3f3ca60f

sha: 94e4615eba651fe705436b29b854458be050cc39db936295f9d5eb7e85d3eff1

Download Locations:




Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: langdale

Tag: yocto-4.1.3

Git Revision: b995ea45773211bd7bdd60eabcc9bbffda6beb5c

Release Artefact: oecore-b995ea45773211bd7bdd60eabcc9bbffda6beb5c

sha: 952e19361f205ee91b74e5caaa835d58fa6dd0d92ddaed50d4cd3f3fa56fab63

Download Locations:




Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/meta-mingw

Branch: langdale

Tag: yocto-4.1.3

Git Revision: b0067202db8573df3d23d199f82987cebe1bee2c

Release Artefact: meta-mingw-b0067202db8573df3d23d199f82987cebe1bee2c

sha: 704f2940322b81ce774e9cbd27c3cfa843111d497dc7b1eeaa39cd694d9a2366

Download Locations:




Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 2.2

Tag: yocto-4.1.3

Git Revision: 592ee222a1c6da42925fb56801f226884b6724ec

Release Artefact: bitbake-592ee222a1c6da42925fb56801f226884b6724ec

sha: 79c32f2ca66596132e32a45654ce0e9dd42b6b39186eff3540a9d6b499fe952c

Download Locations:




Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/yocto-docs

Branch: langdale

Tag: yocto-4.1.3

Git Revision: 3de2ad1f8ff87aeec30088779267880306a0f31a



- ---------------


- ---------------

Adrian Freihofer

Alejandro Hernandez Samaniego

Alex Kiernan

Alexander Kanavin

Alexis Lothoré

Anton Antonov

Antonin Godard

Armin Kuster

Arnout Vandecappelle

Benoît Mauduit

Bruce Ashfield

Carlos Alberto Lopez Perez

Changqing Li

Charlie Johnston

Chee Yang Lee

Chen Qi

Dmitry Baryshkov

Enguerrand de Ribaucourt

Etienne Cordonnier


Federico Pellegrin

Frank de Brabander

Harald Seiler

He Zhe

Jan Kircher

Jermain Horsman

Jose Quaresma

Joshua Watt

Kai Kang

Khem Raj

Louis Rannou


Marek Vasut

Markus Volk

Marta Rybczynska

Martin Jansa

Mateusz Marciniec

Mauro Queiros

Michael Halstead

Michael Opdenacker

Mikko Rapeli

Mingli Yu

Narpat Mali

Niko Mauno

Pavel Zhukov

Pawel Zalewski

Peter Kjellerstedt

Petr Kubizňák

Quentin Schulz

Randy MacLeod

Richard Purdie

Robert Joslyn

Rodolfo Quesada Zumbado

Ross Burton

Sakib Sajal

Sandeep Gundlupet Raju

Saul Wold

Siddharth Doshi

Steve Sakoman

Thomas Roos

Tobias Hagelborn

Ulrich Ölmann

Vivek Kumbhar

Wang Mingyu

Xiangyu Chen




- ---------------

Known Issues

- ---------------




- ---------------

Security Fixes

- ---------------

apr-util: Fix CVE-2022-25147

apr: Fix CVE-2022-24963 CVE-2022-28331

bind: Fix CVE-2022-3094 CVE-2022-3736 CVE-2022-3924

curl: Fix CVE-2022-43551 CVE-2022-43552

dbus: Fix CVE-2022-42010 CVE-2022-42011 CVE-2022-42012

git: Fix CVE-2022-23521 CVE-2022-39253 CVE-2022-39260 CVE-2022-41903

git: ignore CVE-2022-41953

go: Fix CVE-2022-41717 CVE-2022-41720

grub2: Fix CVE-2022-2601 CVE-2022-3775

less: Fix CVE-2022-46663

libarchive: Fix CVE-2022-36227

libksba: Fix CVE-2022-47629

openssl: Fix CVE-2022-3996

pkgconf: Fix CVE-2023-24056

ppp: Fix CVE-2022-4603

sudo: Fix CVE-2023-22809

tar: Fix CVE-2022-48303

vim: Fix CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512

xserver-xorg: Fix CVE-2023-0494

xwayland: Fix CVE-2023-0494



- ---------------


- ---------------

apr-util: Upgrade to 1.6.3

apr: Upgrade to 1.7.2

apt: fix do_package_qa failure

at: Change when files are copied

base.bbclass: Fix way to check ccache path

bblayers/makesetup: skip git repos that are submodules

bblayers/setupwriters/oe-setup-layers: create dir if not exists

bind: Upgrade to 9.18.11

bitbake-layers: fix a typo

bitbake: bb/utils: include SSL certificate paths in export_proxies

bitbake: fetch2/git: Clarify the meaning of namespace

bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata

bitbake: process: log odd unlink events with bitbake.sock

bitbake: server/process: Add bitbake.sock race handling

bitbake: siggen: Fix inefficient string concatenation

bootchart2: Fix usrmerge support

bsp-guide: fix broken git URLs and missing word

build-appliance-image: Update to langdale head revision

buildtools-tarball: set pkg-config search path

busybox: Fix depmod patch

busybox: always start do_compile with orig config files

busybox: rm temporary files if do_compile was interrupted

cairo: fix CVE patches assigned wrong CVE number

classes/fs-uuid: Fix command output decoding issue

classes/populate_sdk_base: Append cleandirs

classes: image: Set empty weak default IMAGE_LINGUAS

cml1: remove redundant addtask

core-image.bbclass: Fix missing leading whitespace with ':append'

createrepo-c: Include missing rpm/rpmstring.h

curl: don't enable debug builds

curl: fix dependencies when building with ldap/ldaps

cve-check: write the cve manifest to IMGDEPLOYDIR

cve-update-db-native: avoid incomplete updates

cve-update-db-native: show IP on failure

dbus: Upgrade to 1.14.6

dev-manual: common-tasks.rst: add link to FOSDEM 2023 video

dev-manual: fix old override syntax

devshell: Do not add scripts/git-intercept to PATH

devtool: fix devtool finish when gitmodules file is empty

devtool: process local files only for the main branch

dhcpcd: backport two patches to fix runtime error

dhcpcd: fix dhcpcd start failure on qemuppc64

diffutils: Upgrade to 3.9

ffmpeg: fix configure failure on noexec /tmp host

gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests

git: Upgrade to 2.37.6

glslang: branch rename master -> main

go: Upgrade to 1.19.4

gstreamer1.0 : Revert  "disable flaky gstbin:test_watch_for_state_change test" and Fix race conditions in gstbin tests with upstream solution

harfbuzz: remove bindir only if it exists

httpserver: add error handler that write to the logger

image.bbclass: print all QA functions exceptions

kernel-fitimage: Adjust order of dtb/dtbo files

kernel-fitimage: Allow user to select dtb when multiple dtb exists

kernel-yocto: fix kernel-meta data detection

kernel/linux-kernel-base: Fix kernel build artefact determinism issues

lib/buildstats: handle tasks that never finished

lib/oe/reproducible: Use git log without gpg signature

libarchive: Upgrade to 3.6.2

libc-locale: Fix on target locale generation

libgit2: Upgrade to 1.5.1

libjpeg-turbo: Upgrade to

libksba: Upgrade to 1.6.3

libpng: Enable NEON for aarch64 to enensure consistency with arm32.

librsvg: Only enable the Vala bindings if GObject Introspection is enabled

librsvg: enable vapi build

libseccomp: fix for the ptest result format

libseccomp: fix typo in DESCRIPTION

libssh2: Clean up ptest patch/coverage

libtirpc: Check if file exists before operating on it

libusb1: Link with latomic only if compiler has no atomic builtins

libusb1: Strip trailing whitespaces

linux-firmware: add yamato fw files to qcom-adreno-a2xx package

linux-firmware: properly set license for all Qualcomm firmware

linux-firmware: Upgrade to 20230210

linux-yocto/5.15: fix perf build with clang

linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off

linux-yocto/5.15: ltp and squashfs fixes

linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user copy

linux-yocto/5.15: Upgrade to v5.15.91

linux-yocto/5.19: fix perf build with clang

linux-yocto/5.19: powerpc: Fix reschedule bug in KUAP-unlocked user copy

lsof: fix old override syntax

lttng-modules: Fix for 5.10.163 kernel version

lttng-modules: fix for kernel 6.2+

lttng-modules: Upgrade to 2.13.8

lttng-tools: Upgrade to 2.13.9

make-mod-scripts: Ensure kernel build output is deterministic

manuals: update patchwork instance URL

mesa-gl: gallium is required when enabling x11

meta: remove True option to getVar and getVarFlag calls (again)

migration-guides: add release-notes for 4.0.7

native: Drop special variable handling

numactl: skip test case when target platform doesn't have 2 CPU node

oeqa context.py: fix --target-ip comment to include ssh port number

oeqa dump.py: add error counter and stop after 5 failures

oeqa qemurunner.py: add timeout to QMP calls

oeqa qemurunner.py: try to avoid reading one character at a time

oeqa qemurunner: read more data at a time from serial

oeqa ssh.py: add connection keep alive options to ssh client

oeqa ssh.py: fix hangs in run()

oeqa ssh.py: move output prints to new line

oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal

oeqa/rpm.py: Increase timeout and add debug output

oeqa/selftest/debuginfod: improve testcase

oeqa/selftest/locales: Add selftest for locale generation/presence

oeqa/selftest/resulttooltests: fix minor typo

openssl: Upgrade to 3.0.8

opkg: ensure opkg uses private gpg.conf when applying keys.

pango: Upgrade to 1.50.12

perf: Enable debug/source packaging

pkgconf: Upgrade to 1.9.4

poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder

poky.conf: bump version for 4.1.3

populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append'

profile-manual: update WireShark hyperlinks

ptest-packagelists.inc: Fix missing leading whitespace with ':append'

python3-pytest: depend on python3-tomli instead of python3-toml

quilt: fix intermittent failure in faildiff.test

quilt: use upstreamed faildiff.test fix

recipe_sanity: fix old override syntax

ref-manual: Fix invalid feature name

ref-manual: update DEV_PKG_DEPENDENCY in variables

ref-manual: variables.rst: fix broken hyperlink

rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively

runqemu: kill qemu if it hangs

rust: Do not use default compiler flags defined in CC crate

scons.bbclass: Make MAXLINELENGTH overridable

scons: Pass MAXLINELENGTH to scons invocation

sdkext/cases/devtool: pass a logger to HTTPService

selftest/virgl: use pkg-config from the host

spirv-headers/spirv-tools: set correct branch name

sstate.bbclass: Fetch non-existing local .sig files if needed

sstatesig: Improve output hash calculation

sudo: Upgrade to 1.9.12p2

system-requirements.rst: Add Fedora 36, AlmaLinux 8.7 & 9.1, and OpenSUSE 15.4 to list of supported distros

testimage: Fix error message to reflect new syntax

tiff: Add packageconfig knob for webp

toolchain-scripts: compatibility with unbound variable protection

uninative: Upgrade to 3.8.1 to include libgcc

update-alternatives: fix typos

vim: Upgrade to 9.0.1293

vulkan-samples: branch rename master -> main

wic: Fix usage of fstype=none in wic

wireless-regdb: Upgrade to 2023.02.13

xserver-xorg: Upgrade to 21.1.7

xwayland: Upgrade to 22.1.8