.. SPDX-License-Identifier: CC-BY-SA-2.0-UK Release notes for Yocto-5.0.4 (Scarthgap) ----------------------------------------- Security Fixes in Yocto-5.0.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - apr: Fix :cve_nist:`2023-49582` - curl: Ignore :cve_nist:`2024-32928` - curl: Fix :cve_nist:`2024-7264` - expat: Fix :cve_nist:`2024-45490`, :cve_nist:`2024-45491` and :cve_nist:`2024-45492` - ffmpeg: Fix :cve_nist:`2023-50008` and :cve_nist:`2024-32230` - libpcap: Fix :cve_nist:`2023-7256` and :cve_nist:`2024-8006` - libyaml: Ignore :cve_nist:`2024-35325` and :cve_nist:`2024-35326` - openssl: Fix :cve_nist:`2024-5535` and :cve_nist:`2024-6119` - python3-certifi: Fix :cve_nist:`2024-39689` - python3-setuptools: Fix :cve_nist:`2024-6345` - python3: Fix :cve_nist:`2024-6232`, :cve_nist:`2024-7592`, :cve_nist:`2024-8088` and :cve_nist:`2024-27034` - qemu: Fix :cve_nist:`2024-4467` and :cve_nist:`2024-7409` - ruby: Fix :cve_nist:`2024-27282` - tiff: Fix :cve_nist:`2024-7006` - vim: Fix :cve_nist:`2024-41957`, :cve_nist:`2024-41965`, :cve_nist:`2024-43374`, :cve_nist:`2024-43790` and :cve_nist:`2024-43802` Fixes in Yocto-5.0.4 ~~~~~~~~~~~~~~~~~~~~ - apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch - apr: upgrade to 1.7.5 - bind: Fix build with the `httpstats` package config enabled - bitbake: data_smart: Improve performance for VariableHistory - bluez5: remove redundant patch for MAX_INPUT - build-appliance-image: Update to scarthgap head revision - buildhistory: Fix intermittent package file list creation - buildhistory: Restoring files from preserve list - buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage - busybox: Fix cut with "-s" flag - create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc - cups: upgrade to 2.4.10 - dejagnu: Fix :term:`LICENSE` (change to GPL-3.0-only) - doc: features: describe distribution feature pni-name - doc: features: remove duplicate word in distribution feature ext2 - expat: upgrade to 2.6.3 - expect-native: fix do_compile failure with gcc-14 - gcc: Fix spurious '/' in GLIBC_DYNAMIC_LINKER on microblaze - gcr: Fix :term:`LICENSE` (change to LGPL-2.0-only) - glibc: fix fortran header file conflict for arm - go: upgrade to 1.22.6 - gstreamer1.0: disable flaky baseparser tests - image_types.bbclass: Use --force also with lz4,lzop - initramfs-framework: fix typos - iw: Fix :term:`LICENSE` (change to ISC) - libadwaita: upgrade to 1.5.2 - libcap-ng: update :term:`SRC_URI` - libdnf: upgrade to 0.73.2 - libedit: Make docs generation deterministic - libgfortran.inc: fix nativesdk-libgfortran dependencies - librsvg: don't try to run target code at build time - linux-firmware: add a package for ath12k firmware - llvm: Enable libllvm for native build - maintainers.inc: add maintainer for python(-setuptools, -smmap, -subunit, -testtools) - mc: fix source URL - migration-guide: add release notes for 4.0.20 and 5.0.3 - oeqa/postactions: fix exception handling - oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM) - oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems - oeqa/runtime/ssh: check for all errors at the end - oeqa/runtime/ssh: increase the number of attempts - oeqa/selftest/reproducibile: Explicitly list virtual targets - oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies - openssh: add backported header file include - openssl: upgrade to 3.2.3 - os-release: Fix VERSION_CODENAME in case it is empty - poky.conf: bump version for 5.0.4 - populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported. - python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc - python3-pycryptodome(x): use python_setuptools_build_meta build class - python3: upgrade to 3.12.6 - python3: skip readline limited history tests - qemu: backport patches to fix riscv64 build failure - qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath - ref-manual: fix typo and move :term:`SYSROOT_DIRS` example - ruby: Make docs generation deterministic - systemd: Mitigate /var/log type mismatch issue - systemd: Mitigate /var/tmp type mismatch issue - tiff: Fix :term:`LICENSE` (change to libtiff) - u-boot.inc: Refactor do_* steps into functions that can be overridden - udev-extraconf: Add collect flag to mount - unzip: Fix :term:`LICENSE` (change to Info-ZIP) - util-linux: Add :term:`PACKAGECONFIG` option (libmount-mountfd-support) to mitigate rootfs remount error - vim: upgrade to 9.1.0698 - weston-init: fix weston not starting when xwayland is enabled - wireless-regdb: upgrade to 2024.07.04 - wpa-supplicant: upgrade to 2.11 - xserver-xorg: mark :cve_nist:`2023-5574` as unpatched when xvfb enabled - yocto-uninative: Update to 4.6 for glibc 2.40 - zip: Fix :term:`LICENSE` (change to Info-ZIP) Known Issues in Yocto-5.0.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - N/A Contributors to Yocto-5.0.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Alban Bedel - Alexander Kanavin - Alexis Lothoré - Archana Polampalli - Ashish Sharma - Bartosz Golaszewski - Benjamin Szőke - Changqing Li - Chen Qi - Colin McAllister - Daniel Semkowicz - Dmitry Baryshkov - Gauthier HADERER - Guðni Már Gilbert - Jon Mason - Jose Quaresma - Jörg Sommer - Kai Kang - Khem Raj - Lee Chee Yang - Mark Hatle - Martin Jansa - Matthias Pritschet - Michael Halstead - Mingli Yu - Niko Mauno - Pedro Ferreira - Peter Marko - Quentin Schulz - Richard Purdie - Robert Yang - Ross Burton - Ryan Eatmon - Siddharth Doshi - Simone Weiß - Soumya Sambu - Steve Sakoman - Trevor Gamblin - Ulrich Ölmann - Vijay Anusuri - Wang Mingyu - Weisser, Pascal.ext - Yogita Urade Repositories / Downloads for Yocto-5.0.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ poky - Repository Location: :yocto_git:`/poky` - Branch: :yocto_git:`scarthgap ` - Tag: :yocto_git:`yocto-5.0.4 ` - Git Revision: :yocto_git:`2034fc38eb4e63984d9bd6b260aa1bf95ce562e4 ` - Release Artefact: poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4 - sha: 697ed099793d6c86d5ffe590e96f99689bd28dcb2d4451dc4585496fa4a20400 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2 openembedded-core - Repository Location: :oe_git:`/openembedded-core` - Branch: :oe_git:`scarthgap ` - Tag: :oe_git:`yocto-5.0.4 ` - Git Revision: :oe_git:`f888dd911529a828820799a7a1b75dfd3a44847c ` - Release Artefact: oecore-f888dd911529a828820799a7a1b75dfd3a44847c - sha: 93cb4c3c8e0f77edab20814d155847dc3452c6b083e3dd9c7a801e80a7e4d228 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2 meta-mingw - Repository Location: :yocto_git:`/meta-mingw` - Branch: :yocto_git:`scarthgap ` - Tag: :yocto_git:`yocto-5.0.4 ` - Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 ` - Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 - sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 bitbake - Repository Location: :oe_git:`/bitbake` - Branch: :oe_git:`2.8 ` - Tag: :oe_git:`yocto-5.0.4 ` - Git Revision: :oe_git:`d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3 ` - Release Artefact: bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3 - sha: d873f4d3a471d26680dc39200d8f3851a6863f15daa9bed978ba31b930f9a1c1 - Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2 yocto-docs - Repository Location: :yocto_git:`/yocto-docs` - Branch: :yocto_git:`scarthgap ` - Tag: :yocto_git:`yocto-5.0.4 ` - Git Revision: :yocto_git:`d71081dd14a9d75ace4d1c62472374f37b4a888d `