.. SPDX-License-Identifier: CC-BY-SA-2.0-UK Release notes for Yocto-4.0.23 (Kirkstone) ------------------------------------------ Security Fixes in Yocto-4.0.23 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - ``curl``: Fix :cve_nist:`2024-9681` - ``expat``: Fix :cve_nist:`2024-50602` - ``gcc``: Ignore :cve_nist:`2023-4039` - ``ghostscript``: Fix :cve_nist:`2023-46361` and :cve_nist:`2024-29508` - ``gstreamer1.0``: Ignore :cve_nist:`2024-0444` - ``libarchive``: Fix :cve_nist:`2024-48957` and :cve_nist:`2024-48958` - ``openssl``: Fix :cve_nist:`2024-9143` - ``orc``: Fix :cve_nist:`2024-40897` - ``python3``: Ignore :cve_nist:`2023-27043`, :cve_nist:`2024-6232` and :cve_nist:`2024-7592` - ``qemu``: Fix :cve_nist:`2023-3019` - ``vim``: Fix :cve_nist:`2024-43790`, :cve_nist:`2024-43802`, :cve_nist:`2024-45306` and :cve_nist:`2024-47814` - ``zstd``: Fix :cve_nist:`2022-4899` Fixes in Yocto-4.0.23 ~~~~~~~~~~~~~~~~~~~~~ - at-spi2-core: backport a patch to fix build with gcc-14 on host - bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM - bitbake: codeparser: Fix handling of string AST nodes with older Python versions - bitbake: fetch2/git: Use quote from shlex, not pipes - bitbake: gitsm: Add call_process_submodules() to remove duplicated code - bitbake: gitsm: Remove downloads/tmpdir when failed - bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab - bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab - bmap-tools: update :term:`HOMEPAGE` and :term:`SRC_URI` - build-appliance-image: Update to kirkstone head revision - cmake: Fix sporadic issues when determining compiler internals - cracklib: Modify patch to compile with GCC 14 - cve-check: add CVSS vector string to CVE database and reports - cve-check: add support for cvss v4.0 - cve_check: Use a local copy of the database during builds - dev-manual: document how to provide confs from layer.conf - documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint - documentation: Makefile: fix epub and latexpdf targets - documentation: README: add instruction to run Vale on a subset - documentation: brief-yoctoprojectqs: update BB_HASHSERVE_UPSTREAM for new infrastructure - documentation: conf.py: add a bitbake_git extlink - documentation: rename :cve: role to :cve_nist: - documentation: styles: vocabularies: Yocto: add sstate - documnetation: contributor-guide: Remove duplicated words - gcc: restore a patch for Neoverse N2 core - glib-2.0: patch regression of :cve_nist:`2023-32665` - kmscube: create_framebuffer: backport modifier fix - libffi: backport a fix to build libffi-native with gcc-14 - linux-firmware: Upgrade to 20240909 - local.conf.sample: update BB_HASHSERVE_UPSTREAM for new infrastructure - migration-guide: add release notes for 4.0.22 - migration-guide: release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure - nativesdk-intercept: Fix bad intercept chgrp/chown logic - orc: Upgrade to 0.4.40 - overlayfs-etc: add option to skip creation of mount dirs - overview-manual: concepts: add details on package splitting - package: Switch debug source handling to use prefix map - patch.py: Use shlex instead of deprecated pipe - poky.conf: bump version for 4.0.23 - pseudo: Disable LFS on 32bit arches - pseudo: Fix envp bug and add posix_spawn wrapper - pseudo: Fix to work with glibc 2.40 - pseudo: Switch back to the master branch - pseudo: Update to include logic fix - pseudo: Update to include open symlink handling bugfix - pseudo: Update to pull in fchmodat fix - pseudo: Update to pull in fd leak fix - pseudo: Update to pull in gcc14 fix and missing statvfs64 intercept - pseudo: Update to pull in linux-libc-headers race fix - pseudo: Update to pull in python 3.12+ fix - pseudo: Update to pull in syncfs probe fix - ref-manual: add description for the "sysroot" term - ref-manual: add missing CVE_CHECK manifest variables - ref-manual: add missing :term:`EXTERNAL_KERNEL_DEVICETREE` variable - ref-manual: add missing :term:`OPKGBUILDCMD` variable - ref-manual: devtool-reference: document missing commands - ref-manual: devtool-reference: refresh example outputs - ref-manual: introduce :term:`CVE_CHECK_REPORT_PATCHED` variable - ref-manual: release-process: add a reference to the doc's release - ref-manual: release-process: refresh the current LTS releases - ref-manual: release-process: update releases.svg - ref-manual: release-process: update releases.svg with month after "Current" - ref-manual: structure.rst: document missing tmp/ dirs - ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables - syslinux: Disable error on implicit-function-declaration - util-linux: Define pidfd_* function signatures - vala: add -Wno-error=incompatible-pointer-types work around - vim: Upgrade to 9.1.0764 - xmlto: backport a patch to fix build with gcc-14 on host - zip: Fix build with gcc-14 - zip: Make configure checks to be more robust Known Issues in Yocto-4.0.23 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -N/A Contributors to Yocto-4.0.23 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Aleksandar Nikolic - Alexandre Belloni - Antoine Lubineau - Antonin Godard - Archana Polampalli - Ashish Sharma - Baruch Siach - Eilís 'pidge' Ní Fhlannagáin - Jose Quaresma - Julien Stephan - Khem Raj - Lee Chee Yang - Macpaul Lin - Martin Jansa - Michael Opdenacker - Ola x Nilsson - Peter Marko - Philip Lorenz - Randolph Sapp - Richard Purdie - Robert Yang - Rohini Sangam - Ruiqiang Hao - Siddharth Doshi - Steve Sakoman - Talel BELHAJSALEM - Wang Mingyu - Yogita Urade - Zoltan Boszormenyi Repositories / Downloads for Yocto-4.0.23 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ poky - Repository Location: :yocto_git:`/poky` - Branch: :yocto_git:`kirkstone ` - Tag: :yocto_git:`yocto-4.0.23 ` - Git Revision: :yocto_git:`8e092852b63e998d990b8f8e1aa91297dec4430f ` - Release Artefact: poky-8e092852b63e998d990b8f8e1aa91297dec4430f - sha: 339d34d8432070dac948449e732ebf06a888eeb27ff548958b2395c9446b029d - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/poky-8e092852b63e998d990b8f8e1aa91297dec4430f.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/poky-8e092852b63e998d990b8f8e1aa91297dec4430f.tar.bz2 openembedded-core - Repository Location: :oe_git:`/openembedded-core` - Branch: :oe_git:`kirkstone ` - Tag: :oe_git:`yocto-4.0.23 ` - Git Revision: :oe_git:`fb45c5cf8c2b663af293acb069d446610f77ff1a ` - Release Artefact: oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a - sha: 1d394370ea7d43fb885ab8a952d6d1e43f1a850745a5152d5ead5565a283a0f5 - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a.tar.bz2 meta-mingw - Repository Location: :yocto_git:`/meta-mingw` - Branch: :yocto_git:`kirkstone ` - Tag: :yocto_git:`yocto-4.0.23 ` - Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e ` - Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e - sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 meta-gplv2 - Repository Location: :yocto_git:`/meta-gplv2` - Branch: :yocto_git:`kirkstone ` - Tag: :yocto_git:`yocto-4.0.23 ` - Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a ` - Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a - sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 bitbake - Repository Location: :oe_git:`/bitbake` - Branch: :oe_git:`2.0 ` - Tag: :oe_git:`yocto-4.0.23 ` - Git Revision: :oe_git:`fb73c495c45d1d4107cfd60b67a5b4f11a99647b ` - Release Artefact: bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b - sha: 5cd271299951f25912a2e8d4de6d8769a4c0bb3bbcfc90815be41f23fd299a0b - Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b.tar.bz2 yocto-docs - Repository Location: :yocto_git:`/yocto-docs` - Branch: :yocto_git:`kirkstone ` - Tag: :yocto_git:`yocto-4.0.23 ` - Git Revision: :yocto_git:`TBD `