tqma6-yocto-mirror/sources/poky/documentation/migration-guides/release-notes-4.0.13.rst

.. SPDX-License-Identifier: CC-BY-SA-2.0-UK

Release notes for Yocto-4.0.13 (Kirkstone)
------------------------------------------

Security Fixes in Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-  bind: Fix :cve_nist:`2023-2829`
-  binutils: Fix :cve_nist:`2022-48065`
-  busybox: Fix :cve_nist:`2022-48174`
-  cups: Fix :cve_nist:`2023-32360`
-  curl: Fix :cve_nist:`2023-32001`
-  dmidecode: Fix :cve_nist:`2023-30630`
-  dropbear: Fix :cve_nist:`2023-36328`
-  ffmpeg: Ignored :cve_nist:`2023-39018`
-  file: Fix :cve_nist:`2022-48554`
-  flac: Fix :cve_nist:`2020-22219`
-  gcc: Fix :cve_nist:`2023-4039`
-  gdb: Fix :cve_nist:`2023-39128`
-  ghostscript: Fix :cve_nist:`2023-38559`
-  glib-2.0: Fix :cve_nist:`2023-29499`, :cve_nist:`2023-32611`, :cve_nist:`2023-32636`, :cve_nist:`2023-32643` and :cve_nist:`2023-32665`
-  go: Fix :cve_nist:`2023-29409` and :cve_nist:`2023-39319`
-  gstreamer1.0-plugins-bad: Fix :cve_mitre:`2023-37329`
-  gstreamer1.0-plugins-base: Fix :cve_mitre:`2023-37328`
-  gstreamer1.0-plugins-good: Fix :cve_mitre:`2023-37327`
-  inetutils: Fix :cve_nist:`2023-40303`
-  json-c: Fix :cve_nist:`2021-32292`
-  librsvg: Fix :cve_nist:`2023-38633`
-  libssh2: Fix :cve_nist:`2020-22218`
-  libtiff: Fix :cve_nist:`2023-26966`
-  libxml2: Fix :cve_nist:`2023-39615`
-  linux-yocto/5.15: Ignore :cve_nist:`2003-1604`, :cve_nist:`2004-0230`, :cve_nist:`2006-3635`, :cve_nist:`2006-5331`, :cve_nist:`2006-6128`, :cve_nist:`2007-4774`, :cve_nist:`2007-6761`, :cve_nist:`2007-6762`, :cve_nist:`2008-7316`, :cve_nist:`2009-2692`, :cve_nist:`2010-0008`, :cve_nist:`2010-3432`, :cve_nist:`2010-4648`, :cve_nist:`2010-5313`, :cve_nist:`2010-5328`, :cve_nist:`2010-5329`, :cve_nist:`2010-5331`, :cve_nist:`2010-5332`, :cve_nist:`2011-4098`, :cve_nist:`2011-4131`, :cve_nist:`2011-4915`, :cve_nist:`2011-5321`, :cve_nist:`2011-5327`, :cve_nist:`2012-0957`, :cve_nist:`2012-2119`, :cve_nist:`2012-2136`, :cve_nist:`2012-2137`, :cve_nist:`2012-2313`, :cve_nist:`2012-2319`, :cve_nist:`2012-2372`, :cve_nist:`2012-2375`, :cve_nist:`2012-2390`, :cve_nist:`2012-2669`, :cve_nist:`2012-2744`, :cve_nist:`2012-2745`, :cve_nist:`2012-3364`, :cve_nist:`2012-3375`, :cve_nist:`2012-3400`, :cve_nist:`2012-3412`, :cve_nist:`2012-3430`, :cve_nist:`2012-3510`, :cve_nist:`2012-3511`, :cve_nist:`2012-3520`, :cve_nist:`2012-3552`, :cve_nist:`2012-4398`, :cve_nist:`2012-4444`, :cve_nist:`2012-4461`, :cve_nist:`2012-4467`, :cve_nist:`2012-4508`, :cve_nist:`2012-4530`, :cve_nist:`2012-4565`, :cve_nist:`2012-5374`, :cve_nist:`2012-5375`, :cve_nist:`2012-5517`, :cve_nist:`2012-6536`, :cve_nist:`2012-6537`, :cve_nist:`2012-6538`, :cve_nist:`2012-6539`, :cve_nist:`2012-6540`, :cve_nist:`2012-6541`, :cve_nist:`2012-6542`, :cve_nist:`2012-6543`, :cve_nist:`2012-6544`, :cve_nist:`2012-6545`, :cve_nist:`2012-6546`, :cve_nist:`2012-6547`, :cve_nist:`2012-6548`, :cve_nist:`2012-6549`, :cve_nist:`2012-6638`, :cve_nist:`2012-6647`, :cve_nist:`2012-6657`, :cve_nist:`2012-6689`, :cve_nist:`2012-6701`, :cve_nist:`2012-6703`, :cve_nist:`2012-6704`, :cve_nist:`2012-6712`, :cve_nist:`2013-0160`, :cve_nist:`2013-0190`, :cve_nist:`2013-0216`, :cve_nist:`2013-0217`, :cve_nist:`2013-0228`, :cve_nist:`2013-0231`, :cve_nist:`2013-0268`, :cve_nist:`2013-0290`, :cve_nist:`2013-0309`, :cve_nist:`2013-0310`, :cve_nist:`2013-0311`, :cve_nist:`2013-0313`, :cve_nist:`2013-0343`, :cve_nist:`2013-0349`, :cve_nist:`2013-0871`, :cve_nist:`2013-0913`, :cve_nist:`2013-0914`, :cve_nist:`2013-1059`, :cve_nist:`2013-1763`, :cve_nist:`2013-1767`, :cve_nist:`2013-1772`, :cve_nist:`2013-1773`, :cve_nist:`2013-1774`, :cve_nist:`2013-1792`, :cve_nist:`2013-1796`, :cve_nist:`2013-1797`, :cve_nist:`2013-1798`, :cve_nist:`2013-1819`, :cve_nist:`2013-1826`, :cve_nist:`2013-1827`, :cve_nist:`2013-1828`, :cve_nist:`2013-1848`, :cve_nist:`2013-1858`, :cve_nist:`2013-1860`, :cve_nist:`2013-1928`, :cve_nist:`2013-1929`, :cve_nist:`2013-1943`, :cve_nist:`2013-1956`, :cve_nist:`2013-1957`, :cve_nist:`2013-1958`, :cve_nist:`2013-1959`, :cve_nist:`2013-1979`, :cve_nist:`2013-2015`, :cve_nist:`2013-2017`, :cve_nist:`2013-2058`, :cve_nist:`2013-2094`, :cve_nist:`2013-2128`, :cve_nist:`2013-2140`, :cve_nist:`2013-2141`, :cve_nist:`2013-2146`, :cve_nist:`2013-2147`, :cve_nist:`2013-2148`, :cve_nist:`2013-2164`, :cve_nist:`2013-2206`, :cve_nist:`2013-2232`, :cve_nist:`2013-2234`, :cve_nist:`2013-2237`, :cve_nist:`2013-2546`, :cve_nist:`2013-2547`, :cve_nist:`2013-2548`, :cve_nist:`2013-2596`, :cve_nist:`2013-2634`, :cve_nist:`2013-2635`, :cve_nist:`2013-2636`, :cve_nist:`2013-2850`, :cve_nist:`2013-2851`, :cve_nist:`2013-2852`, :cve_nist:`2013-2888`, :cve_nist:`2013-2889`, :cve_nist:`2013-2890`, :cve_nist:`2013-2891`, :cve_nist:`2013-2892`, :cve_nist:`2013-2893`, :cve_nist:`2013-2894`, :cve_nist:`2013-2895`, :cve_nist:`2013-2896`, :cve_nist:`2013-2897`, :cve_nist:`2013-2898`, :cve_nist:`2013-2899`, :cve_nist:`2013-2929`, :cve_nist:`2013-2930`, :cve_nist:`2013-3076`, :cve_nist:`2013-3222`, :cve_nist:`2013-3223`, :cve_nist:`2013-3224`, :cve_nist:`2013-3225`, :cve_nist:`2013-3226`, :cve_nist:`2013-3227`, :cve_nist:`2013-3228`, :cve_nist:`2013-3229`, :cve_nist:`2013-3230`, :cve_nist:`2013-3231`, :cve_nist:`2013-3232`, :cve_nist:`2013-3233`, :cve_nist:`2013-3234`, :cve_nist:`2013-3235`, :cve_nist:`2013-3236`, :cve_nist:`2013-3237`, :cve_nist:`2013-3301`, :cve_nist:`2013-3302`, :cve_nist:`2013-412
-  nasm: Fix :cve_nist:`2020-21528`
-  ncurses: Fix :cve_nist:`2023-29491`
-  nghttp2: Fix :cve_nist:`2023-35945`
-  procps: Fix :cve_nist:`2023-4016`
-  python3-certifi: Fix :cve_nist:`2023-37920`
-  python3-git: Fix :cve_nist:`2022-24439` and :cve_nist:`2023-40267`
-  python3-pygments: Fix :cve_nist:`2022-40896`
-  python3: Fix :cve_nist:`2023-40217`
-  qemu: Fix :cve_nist:`2020-14394`, :cve_nist:`2021-3638`, :cve_mitre:`2023-2861`, :cve_nist:`2023-3180` and :cve_nist:`2023-3354`
-  tiff: fix :cve_nist:`2023-2908`, :cve_nist:`2023-3316` and :cve_nist:`2023-3618`
-  vim: Fix :cve_nist:`2023-3896`, :cve_nist:`2023-4733`, :cve_nist:`2023-4734`, :cve_nist:`2023-4735`, :cve_nist:`2023-4736`, :cve_nist:`2023-4738`, :cve_nist:`2023-4750` and :cve_nist:`2023-4752`
-  webkitgtk: fix :cve_nist:`2022-48503` and :cve_nist:`2023-23529`



Fixes in Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~

-  acl/attr: ptest fixes and improvements
-  automake: fix buildtest patch
-  bind: Upgrade to 9.18.17
-  binutils: stable 2.38 branch updates
-  build-appliance-image: Update to kirkstone head revision
-  build-sysroots: Add :term:`SUMMARY` field
-  cargo.bbclass: set up cargo environment in common do_compile
-  contributor-guide: recipe-style-guide: add Upstream-Status
-  dbus: Specify runstatedir configure option
-  dev-manual: common-tasks: mention faster "find" command to trim sstate cache
-  dev-manual: disk-space: improve wording for obsolete sstate cache files
-  dev-manual: licenses: mention :term:`SPDX` for license compliance
-  dev-manual: licenses: update license manifest location
-  dev-manual: new-recipe.rst fix inconsistency with contributor guide
-  dev-manual: split common-tasks.rst
-  dev-manual: wic.rst: Update native tools build command
-  documentation/README: align with master
-  efivar: backport 5 patches to fix build with gold
-  externalsrc: fix dependency chain issues
-  glibc-locale: use stricter matching for metapackages' runtime dependencies
-  glibc/check-test-wrapper: don't emit warnings from ssh
-  glibc: stable 2.35 branch updates
-  gst-devtools: Upgrade to 1.20.7
-  gstreamer1.0-libav: Upgrade to 1.20.7
-  gstreamer1.0-omx: Upgrade to 1.20.7
-  gstreamer1.0-plugins-bad: Upgrade to 1.20.7
-  gstreamer1.0-plugins-base: Upgrade to 1.20.7
-  gstreamer1.0-plugins-good: Upgrade to 1.20.7
-  gstreamer1.0-plugins-ugly: Upgrade to 1.20.7
-  gstreamer1.0-python: Upgrade to 1.20.7
-  gstreamer1.0-rtsp-server: Upgrade to 1.20.7
-  gstreamer1.0-vaapi: Upgrade to 1.20.7
-  gstreamer1.0: Upgrade to 1.20.7
-  kernel: Fix path comparison in kernel staging dir symlinking
-  lib/package_manager: Improve repo artefact filtering
-  libdnf: resolve cstdint inclusion for newer gcc versions
-  libnss-nis: Upgrade to 3.2
-  librsvg: Upgrade to 2.52.10
-  libxcrypt: update :term:`PV` to match :term:`SRCREV`
-  linux-firmware : Add firmware of RTL8822 serie
-  linux-firmware: Fix mediatek mt7601u firmware path
-  linux-firmware: package firmware for Dragonboard 410c
-  linux-firmware: split platform-specific Adreno shaders to separate packages
-  linux-firmware: Upgrade to 20230625
-  linux-yocto/5.10: update to v5.10.188
-  linux-yocto/5.15: update to v5.15.124
-  linux-yocto: add script to generate kernel :term:`CVE_CHECK_IGNORE` entries
-  linux/cve-exclusion: add generated CVE_CHECK_IGNORES.
-  linux/cve-exclusion: remove obsolete manual entries
-  manuals: add new contributor guide
-  manuals: document "mime-xdg" class and :term:`MIME_XDG_PACKAGES`
-  manuals: update former references to dev-manual/common-tasks
-  mdadm: add util-linux-blockdev ptest dependency
-  migration-guides: add release notes for 4.0.12
-  npm.bbclass: avoid DeprecationWarning with new python
-  oeqa/runtime/ltp: Increase ltp test output timeout
-  oeqa/ssh: Further improve process exit handling
-  oeqa/target/ssh: Ensure EAGAIN doesn't truncate output
-  oeqa/utils/nfs: allow requesting non-udp ports
-  pixman: Remove duplication of license MIT
-  poky.conf: bump version for 4.0.13
-  poky.conf: update :term:`SANITY_TESTED_DISTROS` to match autobuilder
-  pseudo: Fix to work with glibc 2.38
-  python3-git: Upgrade to 3.1.32
-  python3: upgrade to 3.10.13
-  ref-manual: add Initramfs term
-  ref-manual: add meson class and variables
-  ref-manual: add new variables
-  ref-manual: qa-checks: align with master
-  ref-manual: system-requirements: update supported distros
-  resulttool/report: Avoid divide by zero
-  resulttool/resultutils: allow index generation despite corrupt json
-  rootfs: Add debugfs package db file copy and cleanup
-  rpm2cpio.sh: update to the last 4.x version
-  rpm: Pick debugfs package db files/dirs explicitly
-  scripts/create-pull-request: update URLs to git repositories
-  scripts/rpm2cpio.sh: Use bzip2 instead of bunzip2
-  sdk-manual: extensible.rst: align with master branch
-  selftest/cases/glibc.py: fix the override syntax
-  selftest/cases/glibc.py: increase the memory for testing
-  selftest/cases/glibc.py: switch to using NFS over TCP
-  shadow-sysroot: add license information
-  sysklogd: fix integration with systemd-journald
-  tar: Upgrade to 1.35
-  target/ssh: Ensure exit code set for commands
-  tcl: prevent installing another copy of tzdata
-  template: fix typo in section header
-  vim: Upgrade to 9.0.1894
-  vim: update obsolete comment
-  wic: fix wrong attempt to create file system in unpartitioned regions
-  yocto-uninative: Update to 4.2 for glibc 2.38
-  yocto-uninative: Update to 4.3


Known Issues in Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- N/A


Contributors to Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-  Abe Kohandel
-  Adrian Freihofer
-  Alberto Planas
-  Alex Kiernan
-  Alexander Kanavin
-  Alexis Lothoré
-  Anuj Mittal
-  Archana Polampalli
-  Ashish Sharma
-  BELOUARGA Mohamed
-  Bruce Ashfield
-  Changqing Li
-  Dmitry Baryshkov
-  Enrico Scholz
-  Etienne Cordonnier
-  Hitendra Prajapati
-  Julien Stephan
-  Kai Kang
-  Khem Raj
-  Lee Chee Yang
-  Marek Vasut
-  Markus Niebel
-  Martin Jansa
-  Meenali Gupta
-  Michael Halstead
-  Michael Opdenacker
-  Narpat Mali
-  Ovidiu Panait
-  Pavel Zhukov
-  Peter Marko
-  Peter Suti
-  Poonam Jadhav
-  Richard Purdie
-  Roland Hieber
-  Ross Burton
-  Sanjana
-  Siddharth Doshi
-  Soumya Sambu
-  Staffan Rydén
-  Steve Sakoman
-  Trevor Gamblin
-  Vijay Anusuri
-  Vivek Kumbhar
-  Wang Mingyu
-  Yogita Urade


Repositories / Downloads for Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

poky

-  Repository Location: :yocto_git:`/poky`
-  Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.13 </poky/log/?h=yocto-4.0.13>`
-  Git Revision: :yocto_git:`e51bf557f596c4da38789a948a3228ba11455e3c </poky/commit/?id=e51bf557f596c4da38789a948a3228ba11455e3c>`
-  Release Artefact: poky-e51bf557f596c4da38789a948a3228ba11455e3c
-  sha: afddadb367a90154751f04993077bceffdc1413f9ba9b8c03acb487d0437286e
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/poky-e51bf557f596c4da38789a948a3228ba11455e3c.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/poky-e51bf557f596c4da38789a948a3228ba11455e3c.tar.bz2

openembedded-core

-  Repository Location: :oe_git:`/openembedded-core`
-  Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
-  Tag:  :oe_git:`yocto-4.0.13 </openembedded-core/log/?h=yocto-4.0.13>`
-  Git Revision: :oe_git:`d90e4d5e3cca9cffe8f60841afc63667a9ac39fa </openembedded-core/commit/?id=d90e4d5e3cca9cffe8f60841afc63667a9ac39fa>`
-  Release Artefact: oecore-d90e4d5e3cca9cffe8f60841afc63667a9ac39fa
-  sha: 56e3bdac81b3628e74dfef2132a54be4db7d87373139a00ed64f5c9a354d716a
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/oecore-d90e4d5e3cca9cffe8f60841afc63667a9ac39fa.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/oecore-d90e4d5e3cca9cffe8f60841afc63667a9ac39fa.tar.bz2

meta-mingw

-  Repository Location: :yocto_git:`/meta-mingw`
-  Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.13 </meta-mingw/log/?h=yocto-4.0.13>`
-  Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
-  Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
-  sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2

meta-gplv2

-  Repository Location: :yocto_git:`/meta-gplv2`
-  Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.13 </meta-gplv2/log/?h=yocto-4.0.13>`
-  Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
-  Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
-  sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

bitbake

-  Repository Location: :oe_git:`/bitbake`
-  Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
-  Tag:  :oe_git:`yocto-4.0.13 </bitbake/log/?h=yocto-4.0.13>`
-  Git Revision: :oe_git:`41b6684489d0261753344956042be2cc4adb0159 </bitbake/commit/?id=41b6684489d0261753344956042be2cc4adb0159>`
-  Release Artefact: bitbake-41b6684489d0261753344956042be2cc4adb0159
-  sha: efa2b1c4d0be115ed3960750d1e4ed958771b2db6d7baee2d13ad386589376e8
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2

yocto-docs

-  Repository Location: :yocto_git:`/yocto-docs`
-  Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
-  Tag: :yocto_git:`yocto-4.0.13 </yocto-docs/log/?h=yocto-4.0.13>`
-  Git Revision: :yocto_git:`8f02741de867125f11a37822b2d206be180d4ee3 </yocto-docs/commit/?id=8f02741de867125f11a37822b2d206be180d4ee3>`