migration-guides: add release notes for 4.0.13

(From yocto-docs rev: bb5c0f8e8956938ca05907feabbf7b0ef2ea6dbe)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Lee Chee Yang authored and Steve Sakoman committed 2023-10-13 04:31:05 -10:00
1 parent b3d49d5205
commit a57506c46d
2 files changed
+272

No files matched your search

@@ -19,3 +19,4 @@ Release 4.0 (kirkstone)
release-notes-4.0.10
release-notes-4.0.11
release-notes-4.0.12
release-notes-4.0.13
@@ -0,0 +1,271 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-4.0.13 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- bind: Fix :cve:`2023-2829`
- binutils: Fix :cve:`2022-48065`
- busybox: Fix :cve:`2022-48174`
- cups: Fix :cve:`2023-32360`
- curl: Fix :cve:`2023-32001`
- dmidecode: Fix :cve:`2023-30630`
- dropbear: Fix :cve:`2023-36328`
- ffmpeg: Ignored :cve:`2023-39018`
- file: Fix :cve:`2022-48554`
- flac: Fix :cve:`2020-22219`
- gcc: Fix :cve:`2023-4039`
- gdb: Fix :cve:`2023-39128`
- ghostscript: Fix :cve:`2023-38559`
- glib-2.0: Fix :cve:`2023-29499`, :cve:`2023-32611`, :cve:`2023-32636`, :cve:`2023-32643` and :cve:`2023-32665`
- go: Fix :cve:`2023-29409` and :cve:`2023-39319`
- gstreamer1.0-plugins-bad: Fix :cve_mitre:`2023-37329`
- gstreamer1.0-plugins-base: Fix :cve_mitre:`2023-37328`
- gstreamer1.0-plugins-good: Fix :cve_mitre:`2023-37327`
- inetutils: Fix :cve:`2023-40303`
- json-c: Fix :cve:`2021-32292`
- librsvg: Fix :cve:`2023-38633`
- libssh2: Fix :cve:`2020-22218`
- libtiff: Fix :cve:`2023-26966`
- libxml2: Fix :cve:`2023-39615`
- linux-yocto/5.15: Ignore :cve:`2003-1604`, :cve:`2004-0230`, :cve:`2006-3635`, :cve:`2006-5331`, :cve:`2006-6128`, :cve:`2007-4774`, :cve:`2007-6761`, :cve:`2007-6762`, :cve:`2008-7316`, :cve:`2009-2692`, :cve:`2010-0008`, :cve:`2010-3432`, :cve:`2010-4648`, :cve:`2010-5313`, :cve:`2010-5328`, :cve:`2010-5329`, :cve:`2010-5331`, :cve:`2010-5332`, :cve:`2011-4098`, :cve:`2011-4131`, :cve:`2011-4915`, :cve:`2011-5321`, :cve:`2011-5327`, :cve:`2012-0957`, :cve:`2012-2119`, :cve:`2012-2136`, :cve:`2012-2137`, :cve:`2012-2313`, :cve:`2012-2319`, :cve:`2012-2372`, :cve:`2012-2375`, :cve:`2012-2390`, :cve:`2012-2669`, :cve:`2012-2744`, :cve:`2012-2745`, :cve:`2012-3364`, :cve:`2012-3375`, :cve:`2012-3400`, :cve:`2012-3412`, :cve:`2012-3430`, :cve:`2012-3510`, :cve:`2012-3511`, :cve:`2012-3520`, :cve:`2012-3552`, :cve:`2012-4398`, :cve:`2012-4444`, :cve:`2012-4461`, :cve:`2012-4467`, :cve:`2012-4508`, :cve:`2012-4530`, :cve:`2012-4565`, :cve:`2012-5374`, :cve:`2012-5375`, :cve:`2012-5517`, :cve:`2012-6536`, :cve:`2012-6537`, :cve:`2012-6538`, :cve:`2012-6539`, :cve:`2012-6540`, :cve:`2012-6541`, :cve:`2012-6542`, :cve:`2012-6543`, :cve:`2012-6544`, :cve:`2012-6545`, :cve:`2012-6546`, :cve:`2012-6547`, :cve:`2012-6548`, :cve:`2012-6549`, :cve:`2012-6638`, :cve:`2012-6647`, :cve:`2012-6657`, :cve:`2012-6689`, :cve:`2012-6701`, :cve:`2012-6703`, :cve:`2012-6704`, :cve:`2012-6712`, :cve:`2013-0160`, :cve:`2013-0190`, :cve:`2013-0216`, :cve:`2013-0217`, :cve:`2013-0228`, :cve:`2013-0231`, :cve:`2013-0268`, :cve:`2013-0290`, :cve:`2013-0309`, :cve:`2013-0310`, :cve:`2013-0311`, :cve:`2013-0313`, :cve:`2013-0343`, :cve:`2013-0349`, :cve:`2013-0871`, :cve:`2013-0913`, :cve:`2013-0914`, :cve:`2013-1059`, :cve:`2013-1763`, :cve:`2013-1767`, :cve:`2013-1772`, :cve:`2013-1773`, :cve:`2013-1774`, :cve:`2013-1792`, :cve:`2013-1796`, :cve:`2013-1797`, :cve:`2013-1798`, :cve:`2013-1819`, :cve:`2013-1826`, :cve:`2013-1827`, :cve:`2013-1828`, :cve:`2013-1848`, :cve:`2013-1858`, :cve:`2013-1860`, :cve:`2013-1928`, :cve:`2013-1929`, :cve:`2013-1943`, :cve:`2013-1956`, :cve:`2013-1957`, :cve:`2013-1958`, :cve:`2013-1959`, :cve:`2013-1979`, :cve:`2013-2015`, :cve:`2013-2017`, :cve:`2013-2058`, :cve:`2013-2094`, :cve:`2013-2128`, :cve:`2013-2140`, :cve:`2013-2141`, :cve:`2013-2146`, :cve:`2013-2147`, :cve:`2013-2148`, :cve:`2013-2164`, :cve:`2013-2206`, :cve:`2013-2232`, :cve:`2013-2234`, :cve:`2013-2237`, :cve:`2013-2546`, :cve:`2013-2547`, :cve:`2013-2548`, :cve:`2013-2596`, :cve:`2013-2634`, :cve:`2013-2635`, :cve:`2013-2636`, :cve:`2013-2850`, :cve:`2013-2851`, :cve:`2013-2852`, :cve:`2013-2888`, :cve:`2013-2889`, :cve:`2013-2890`, :cve:`2013-2891`, :cve:`2013-2892`, :cve:`2013-2893`, :cve:`2013-2894`, :cve:`2013-2895`, :cve:`2013-2896`, :cve:`2013-2897`, :cve:`2013-2898`, :cve:`2013-2899`, :cve:`2013-2929`, :cve:`2013-2930`, :cve:`2013-3076`, :cve:`2013-3222`, :cve:`2013-3223`, :cve:`2013-3224`, :cve:`2013-3225`, :cve:`2013-3226`, :cve:`2013-3227`, :cve:`2013-3228`, :cve:`2013-3229`, :cve:`2013-3230`, :cve:`2013-3231`, :cve:`2013-3232`, :cve:`2013-3233`, :cve:`2013-3234`, :cve:`2013-3235`, :cve:`2013-3236`, :cve:`2013-3237`, :cve:`2013-3301`, :cve:`2013-3302`, :cve:`2013-4125`, :cve:`2013-4127`, :cve:`2013-4129`, :cve:`2013-4162`, :cve:`2013-4163`, :cve:`2013-4205`, :cve:`2013-4220`, :cve:`2013-4247`, :cve:`2013-4254`, :cve:`2013-4270`, :cve:`2013-4299`, :cve:`2013-4300`, :cve:`2013-4312`, :cve:`2013-4343`, :cve:`2013-4345`, :cve:`2013-4348`, :cve:`2013-4350`, :cve:`2013-4387`, :cve:`2013-4470`, :cve:`2013-4483`, :cve:`2013-4511`, :cve:`2013-4512`, :cve:`2013-4513`, :cve:`2013-4514`, :cve:`2013-4515`, :cve:`2013-4516`, :cve:`2013-4563`, :cve:`2013-4579`, :cve:`2013-4587`, :cve:`2013-4588`, :cve:`2013-4591`, :cve:`2013-4592`, :cve:`2013-5634`, :cve:`2013-6282`, :cve:`2013-6367`, :cve:`2013-6368`, :cve:`2013-6376`, :cve:`2013-6378`, :cve:`2013-6380`, :cve:`2013-6381`, :cve:`2013-6382`, :cve:`2013-6383`, :cve:`2013-6431`, :cve:`2013-6432`, :cve:`2013-6885`, :cve:`2013-7026`, :cve:`2013-7027`, :cve:`2013-7263`, :cve:`2013-7264`, :cve:`2013-7265`, :cve:`2013-7266`, :cve:`2013-7267`, :cve:`2013-7268`, :cve:`2013-7269`, :cve:`2013-7270`, :cve:`2013-7271`, :cve:`2013-7281`, :cve:`2013-7339`, :cve:`2013-7348`, :cve:`2013-7421`, :cve:`2013-7446`, :cve:`2013-7470`, :cve:`2014-0038`, :cve:`2014-0049`, :cve:`2014-0055`, :cve:`2014-0069`, :cve:`2014-0077`, :cve:`2014-0100`, :cve:`2014-0101`, :cve:`2014-0102`, :cve:`2014-0131`, :cve:`2014-0155`, :cve:`2014-0181`, :cve:`2014-0196`, :cve:`2014-0203`, :cve:`2014-0205`, :cve:`2014-0206`, :cve:`2014-1438`, :cve:`2014-1444`, :cve:`2014-1445`, :cve:`2014-1446`, :cve:`2014-1690`, :cve:`2014-1737`, :cve:`2014-1738`, :cve:`2014-1739`, :cve:`2014-1874`, :cve:`2014-2038`, :cve:`2014-2039`, :cve:`2014-2309`, :cve:`2014-2523`, :cve:`2014-2568`, :cve:`2014-2580`, :cve:`2014-2672`, :cve:`2014-2673`, :cve:`2014-2678`, :cve:`2014-2706`, :cve:`2014-2739`, :cve:`2014-2851`, :cve:`2014-2889`, :cve:`2014-3122`, :cvLine truncated
- nasm: Fix :cve:`2020-21528`
- ncurses: Fix :cve:`2023-29491`
- nghttp2: Fix :cve:`2023-35945`
- procps: Fix :cve:`2023-4016`
- python3-certifi: Fix :cve:`2023-37920`
- python3-git: Fix :cve:`2022-24439` and :cve:`2023-40267`
- python3-pygments: Fix :cve:`2022-40896`
- python3: Fix :cve:`2023-40217`
- qemu: Fix :cve:`2020-14394`, :cve:`2021-3638`, :cve_mitre:`2023-2861`, :cve:`2023-3180` and :cve:`2023-3354`
- tiff: fix :cve:`2023-2908`, :cve:`2023-3316` and :cve:`2023-3618`
- vim: Fix :cve:`2023-3896`, :cve:`2023-4733`, :cve:`2023-4734`, :cve:`2023-4735`, :cve:`2023-4736`, :cve:`2023-4738`, :cve:`2023-4750` and :cve:`2023-4752`
- webkitgtk: fix :cve:`2022-48503` and :cve:`2023-23529`
Fixes in Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~
- acl/attr: ptest fixes and improvements
- automake: fix buildtest patch
- bind: Upgrade to 9.18.17
- binutils: stable 2.38 branch updates
- build-appliance-image: Update to kirkstone head revision
- build-sysroots: Add :term:`SUMMARY` field
- cargo.bbclass: set up cargo environment in common do_compile
- contributor-guide: recipe-style-guide: add Upstream-Status
- dbus: Specify runstatedir configure option
- dev-manual: common-tasks: mention faster "find" command to trim sstate cache
- dev-manual: disk-space: improve wording for obsolete sstate cache files
- dev-manual: licenses: mention :term:`SPDX` for license compliance
- dev-manual: licenses: update license manifest location
- dev-manual: new-recipe.rst fix inconsistency with contributor guide
- dev-manual: split common-tasks.rst
- dev-manual: wic.rst: Update native tools build command
- documentation/README: align with master
- efivar: backport 5 patches to fix build with gold
- externalsrc: fix dependency chain issues
- glibc-locale: use stricter matching for metapackages' runtime dependencies
- glibc/check-test-wrapper: don't emit warnings from ssh
- glibc: stable 2.35 branch updates
- gst-devtools: Upgrade to 1.20.7
- gstreamer1.0-libav: Upgrade to 1.20.7
- gstreamer1.0-omx: Upgrade to 1.20.7
- gstreamer1.0-plugins-bad: Upgrade to 1.20.7
- gstreamer1.0-plugins-base: Upgrade to 1.20.7
- gstreamer1.0-plugins-good: Upgrade to 1.20.7
- gstreamer1.0-plugins-ugly: Upgrade to 1.20.7
- gstreamer1.0-python: Upgrade to 1.20.7
- gstreamer1.0-rtsp-server: Upgrade to 1.20.7
- gstreamer1.0-vaapi: Upgrade to 1.20.7
- gstreamer1.0: Upgrade to 1.20.7
- kernel: Fix path comparison in kernel staging dir symlinking
- lib/package_manager: Improve repo artefact filtering
- libdnf: resolve cstdint inclusion for newer gcc versions
- libnss-nis: Upgrade to 3.2
- librsvg: Upgrade to 2.52.10
- libxcrypt: update :term:`PV` to match :term:`SRCREV`
- linux-firmware : Add firmware of RTL8822 serie
- linux-firmware: Fix mediatek mt7601u firmware path
- linux-firmware: package firmware for Dragonboard 410c
- linux-firmware: split platform-specific Adreno shaders to separate packages
- linux-firmware: Upgrade to 20230625
- linux-yocto/5.10: update to v5.10.188
- linux-yocto/5.15: update to v5.15.124
- linux-yocto: add script to generate kernel :term:`CVE_CHECK_IGNORE` entries
- linux/cve-exclusion: add generated CVE_CHECK_IGNORES.
- linux/cve-exclusion: remove obsolete manual entries
- manuals: add new contributor guide
- manuals: document "mime-xdg" class and :term:`MIME_XDG_PACKAGES`
- manuals: update former references to dev-manual/common-tasks
- mdadm: add util-linux-blockdev ptest dependency
- migration-guides: add release notes for 4.0.12
- npm.bbclass: avoid DeprecationWarning with new python
- oeqa/runtime/ltp: Increase ltp test output timeout
- oeqa/ssh: Further improve process exit handling
- oeqa/target/ssh: Ensure EAGAIN doesn't truncate output
- oeqa/utils/nfs: allow requesting non-udp ports
- pixman: Remove duplication of license MIT
- poky.conf: bump version for 4.0.13
- poky.conf: update :term:`SANITY_TESTED_DISTROS` to match autobuilder
- pseudo: Fix to work with glibc 2.38
- python3-git: Upgrade to 3.1.32
- python3: upgrade to 3.10.13
- ref-manual: add Initramfs term
- ref-manual: add meson class and variables
- ref-manual: add new variables
- ref-manual: qa-checks: align with master
- ref-manual: system-requirements: update supported distros
- resulttool/report: Avoid divide by zero
- resulttool/resultutils: allow index generation despite corrupt json
- rootfs: Add debugfs package db file copy and cleanup
- rpm2cpio.sh: update to the last 4.x version
- rpm: Pick debugfs package db files/dirs explicitly
- scripts/create-pull-request: update URLs to git repositories
- scripts/rpm2cpio.sh: Use bzip2 instead of bunzip2
- sdk-manual: extensible.rst: align with master branch
- selftest/cases/glibc.py: fix the override syntax
- selftest/cases/glibc.py: increase the memory for testing
- selftest/cases/glibc.py: switch to using NFS over TCP
- shadow-sysroot: add license information
- sysklogd: fix integration with systemd-journald
- tar: Upgrade to 1.35
- target/ssh: Ensure exit code set for commands
- tcl: prevent installing another copy of tzdata
- template: fix typo in section header
- vim: Upgrade to 9.0.1894
- vim: update obsolete comment
- wic: fix wrong attempt to create file system in unpartitioned regions
- yocto-uninative: Update to 4.2 for glibc 2.38
- yocto-uninative: Update to 4.3
Known Issues in Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Abe Kohandel
- Adrian Freihofer
- Alberto Planas
- Alex Kiernan
- Alexander Kanavin
- Alexis Lothoré
- Anuj Mittal
- Archana Polampalli
- Ashish Sharma
- BELOUARGA Mohamed
- Bruce Ashfield
- Changqing Li
- Dmitry Baryshkov
- Enrico Scholz
- Etienne Cordonnier
- Hitendra Prajapati
- Julien Stephan
- Kai Kang
- Khem Raj
- Lee Chee Yang
- Marek Vasut
- Markus Niebel
- Martin Jansa
- Meenali Gupta
- Michael Halstead
- Michael Opdenacker
- Narpat Mali
- Ovidiu Panait
- Pavel Zhukov
- Peter Marko
- Peter Suti
- Poonam Jadhav
- Richard Purdie
- Roland Hieber
- Ross Burton
- Sanjana
- Siddharth Doshi
- Soumya Sambu
- Staffan Rydén
- Steve Sakoman
- Trevor Gamblin
- Vijay Anusuri
- Vivek Kumbhar
- Wang Mingyu
- Yogita Urade
Repositories / Downloads for Yocto-4.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.13 </poky/log/?h=yocto-4.0.13>`
- Git Revision: :yocto_git:`e51bf557f596c4da38789a948a3228ba11455e3c </poky/commit/?id=e51bf557f596c4da38789a948a3228ba11455e3c>`
- Release Artefact: poky-e51bf557f596c4da38789a948a3228ba11455e3c
- sha: afddadb367a90154751f04993077bceffdc1413f9ba9b8c03acb487d0437286e
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/poky-e51bf557f596c4da38789a948a3228ba11455e3c.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/poky-e51bf557f596c4da38789a948a3228ba11455e3c.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.13 </openembedded-core/log/?h=yocto-4.0.13>`
- Git Revision: :oe_git:`d90e4d5e3cca9cffe8f60841afc63667a9ac39fa </openembedded-core/commit/?id=d90e4d5e3cca9cffe8f60841afc63667a9ac39fa>`
- Release Artefact: oecore-d90e4d5e3cca9cffe8f60841afc63667a9ac39fa
- sha: 56e3bdac81b3628e74dfef2132a54be4db7d87373139a00ed64f5c9a354d716a
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/oecore-d90e4d5e3cca9cffe8f60841afc63667a9ac39fa.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/oecore-d90e4d5e3cca9cffe8f60841afc63667a9ac39fa.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.13 </meta-mingw/log/?h=yocto-4.0.13>`
- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.13 </meta-gplv2/log/?h=yocto-4.0.13>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.13 </bitbake/log/?h=yocto-4.0.13>`
- Git Revision: :oe_git:`41b6684489d0261753344956042be2cc4adb0159 </bitbake/commit/?id=41b6684489d0261753344956042be2cc4adb0159>`
- Release Artefact: bitbake-41b6684489d0261753344956042be2cc4adb0159
- sha: efa2b1c4d0be115ed3960750d1e4ed958771b2db6d7baee2d13ad386589376e8
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.13/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.0.13/bitbake-41b6684489d0261753344956042be2cc4adb0159.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.13 </yocto-docs/log/?h=yocto-4.0.13>`
- Git Revision: :yocto_git:`8f02741de867125f11a37822b2d206be180d4ee3 </yocto-docs/commit/?id=8f02741de867125f11a37822b2d206be180d4ee3>`