1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
|
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-4.3.1 (Nanbield)
----------------------------------------
Security Fixes in Yocto-4.3.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- libsndfile1: Fix :cve:`2022-33065`
- libxml2: Ignore :cve:`2023-45322`
- linux-yocto/6.1: Ignore :cve:`2020-27418`, :cve:`2023-31085`, :cve_mitre:`2023-34324`, :cve:`2023-39189`, :cve:`2023-39192`, :cve:`2023-39193`, :cve:`2023-39194`, :cve:`2023-4244`, :cve:`2023-42754`, :cve:`2023-42756`, :cve:`2023-44466`, :cve:`2023-4563`, :cve:`2023-45862`, :cve:`2023-45863`, :cve:`2023-45871`, :cve:`2023-45898`, :cve:`2023-4732`, :cve:`2023-5158`, :cve:`2023-5197` and :cve:`2023-5345`
- linux-yocto/6.5: Ignore :cve:`2020-27418`, :cve:`2023-1193`, :cve:`2023-39191`, :cve:`2023-39194`, :cve:`2023-40791`, :cve:`2023-44466`, :cve:`2023-45862`, :cve:`2023-45863`, :cve:`2023-4610` and :cve:`2023-4732`
- openssl: Fix :cve:`2023-5363`
- pixman: Ignore :cve:`2023-37769`
- vim: Fix :cve:`2023-46246`
- zlib: Ignore :cve:`2023-45853`
Fixes in Yocto-4.3.1
~~~~~~~~~~~~~~~~~~~~
- baremetal-helloworld: Pull in fix for race condition on x86-64
- base: Ensure recipes using mercurial-native have certificates
- bb-matrix-plot.sh: Show underscores correctly in labels
- bin_package.bbclass: revert "Inhibit the default dependencies"
- bitbake: SECURITY.md: add file
- brief-yoctoprojectqs: use new CDN mirror for sstate
- bsp-guide: bsp.rst: update beaglebone example
- bsp-guide: bsp: skip Intel machines no longer supported in Poky
- build-appliance-image: Update to nanbield head revision
- contributor-guide: add patchtest section
- contributor-guide: clarify patchtest usage
- cve-check: don't warn if a patch is remote
- cve-check: slightly more verbose warning when adding the same package twice
- cve-check: sort the package list in the JSON report
- dev-manual: add security team processes
- dev-manual: extend the description of CVE patch preparation
- dev-manual: layers: Add notes about layer.conf
- dev-manual: new-recipe.rst: add missing parenthesis to "Patching Code" section
- dev-manual: start.rst: remove obsolete reference
- dev-manual: wic: update "wic list images" output
- docs: add support for nanbield (4.3) release
- documentation.conf: drop SERIAL_CONSOLES_CHECK
- ell: Upgrade to 0.59
- glib-2.0: Remove unnecessary assignement
- goarch: Move Go architecture mapping to a library
- kernel-arch: drop CCACHE from :term:`KERNEL_STRIP` definition
- kernel.bbclass: Use strip utility used for kernel build in do_package
- layer.conf: Switch layer to nanbield series only
- libsdl2: upgrade to 2.28.4
- linux-yocto: make sure the pahole-native available before do_kernel_configme
- llvm: Upgrade to 17.0.3
- machine: drop obsolete SERIAL_CONSOLES_CHECK
- manuals: correct "yocto-linux" by "linux-yocto"
- manuals: improve description of :term:`CVE_STATUS` and :term:`CVE_STATUS_GROUPS`
- manuals: Remove references to apm in :term:`MACHINE_FEATURES`
- manuals: update linux-yocto append examples
- manuals: update list of supported machines
- migration-4.3: additional migration items
- migration-4.3: adjustments to existing text
- migration-4.3: remove some unnecessary items
- migration-guides: QEMU_USE_SLIRP variable removed
- migration-guides: add BitBake changes
- migration-guides: add debian 12 to newly supported distros
- migration-guides: add kernel notes
- migration-guides: add testing notes
- migration-guides: add utility notes
- migration-guides: edgerouter machine removed
- migration-guides: enabling :term:`SPDX` only for Poky, not a global default
- migration-guides: fix empty sections
- migration-guides: further updates for 4.3
- migration-guides: further updates for release 4.3
- migration-guides: git recipes reword
- migration-guides: mention CDN
- migration-guides: mention LLVM 17
- migration-guides: mention runqemu change in serial port management
- migration-guides: packaging changes
- migration-guides: remove SERIAL_CONSOLES_CHECK
- migration-guides: remove non-notable change
- migration-guides: updates for 4.3
- oeqa/selftest/debuginfod: improve selftest
- oeqa/selftest/devtool: abort if a local workspace already exist
- oeqa/ssh: Handle SSHCall timeout error code
- openssl: Upgrade to 3.1.4
- overview-manual: concepts: Add Bitbake Tasks Map
- patchtest-send-results: add In-Reply-To
- patchtest-send-results: check max line length, simplify responses
- patchtest-send-results: fix sender parsing
- patchtest-send-results: improve subject line
- patchtest-send-results: send results to submitter
- patchtest/selftest: add XSKIP, update test files
- patchtest: disable merge test
- patchtest: fix lic_files_chksum test regex
- patchtest: make pylint tests compatible with 3.x
- patchtest: reduce checksum test output length
- patchtest: remove test for CVE tag in mbox
- patchtest: remove unused imports
- patchtest: rework license checksum tests
- patchtest: shorten test result outputs
- patchtest: simplify test directory structure
- patchtest: skip merge test if not targeting master
- patchtest: test regardless of mergeability
- perl: fix intermittent test failure
- poky.conf: bump version for 4.3.1 release
- profile-manual: aesthetic cleanups
- ref-manual: Add documentation for the unimplemented-ptest QA warning
- ref-manual: Fix :term:`PACKAGECONFIG` term and add an example
- ref-manual: Warn about :term:`COMPATIBLE_MACHINE` skipping native recipes
- ref-manual: add systemd-resolved to distro features
- ref-manual: classes: explain cml1 class name
- ref-manual: document :term:`KERNEL_LOCALVERSION`
- ref-manual: document :term:`KERNEL_STRIP`
- ref-manual: document :term:`MESON_TARGET`
- ref-manual: document cargo_c class
- ref-manual: remove semicolons from ``*PROCESS_COMMAND`` variables
- ref-manual: update :term:`SDK_NAME` variable documentation
- ref-manual: variables: add :term:`RECIPE_MAINTAINER`
- ref-manual: variables: add :term:`RECIPE_SYSROOT` and :term:`RECIPE_SYSROOT_NATIVE`
- ref-manual: variables: add :term:`TOOLCHAIN_OPTIONS` variable
- ref-manual: variables: add example for :term:`SYSROOT_DIRS` variable
- ref-manual: variables: document :term:`OEQA_REPRODUCIBLE_TEST_PACKAGE`
- ref-manual: variables: mention new CDN for :term:`SSTATE_MIRRORS`
- ref-manual: variables: provide no-match example for :term:`COMPATIBLE_MACHINE`
- ref-manual: variables: remove SERIAL_CONSOLES_CHECK
- release-notes-4.3: add CVEs, recipe upgrades, license changes, contributors
- release-notes-4.3: add Repositories / Downloads section
- release-notes-4.3: feature additions
- release-notes-4.3: fix some typos
- release-notes-4.3: move new classes to Rust section
- release-notes-4.3: remove the Distribution section
- release-notes-4.3: tweaks to existing text
- sdk-manual: appendix-obtain: improve and update descriptions
- test-manual: reproducible-builds: stop mentioning LTO bug
- vim: Improve locale handling
- vim: Upgrade to 9.0.2068
- vim: use upstream generated .po files
Known Issues in Yocto-4.3.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.3.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Alejandro Hernandez Samaniego
- Alex Stewart
- Archana Polampalli
- Arne Schwerdt
- BELHADJ SALEM Talel
- Dmitry Baryshkov
- Eero Aaltonen
- Joshua Watt
- Julien Stephan
- Jérémy Rosen
- Khem Raj
- Lee Chee Yang
- Marta Rybczynska
- Max Krummenacher
- Michael Halstead
- Michael Opdenacker
- Paul Eggleton
- Peter Kjellerstedt
- Peter Marko
- Quentin Schulz
- Richard Purdie
- Robert P. J. Day
- Ross Burton
- Rouven Czerwinski
- Steve Sakoman
- Trevor Gamblin
- Wang Mingyu
- William Lyu
- Xiangyu Chen
- luca fancellu
Repositories / Downloads for Yocto-4.3.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`nanbield </poky/log/?h=nanbield>`
- Tag: :yocto_git:`yocto-4.3.1 </poky/log/?h=yocto-4.3.1>`
- Git Revision: :yocto_git:`bf9f2f6f60387b3a7cd570919cef6c4570edcb82 </poky/commit/?id=bf9f2f6f60387b3a7cd570919cef6c4570edcb82>`
- Release Artefact: poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82
- sha: 9b4351159d728fec2b63a50f1ac15edc412e2d726e9180a40afc06051fadb922
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/poky-bf9f2f6f60387b3a7cd570919cef6c4570edcb82.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`nanbield </openembedded-core/log/?h=nanbield>`
- Tag: :oe_git:`yocto-4.3.1 </openembedded-core/log/?h=yocto-4.3.1>`
- Git Revision: :oe_git:`cce77e8e79c860f4ef0ac4a86b9375bf87507360 </openembedded-core/commit/?id=cce77e8e79c860f4ef0ac4a86b9375bf87507360>`
- Release Artefact: oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360
- sha: e6cde08e7c549f57a67d833a36cdb942648fba81558dc8b0e65332d2a2c023cc
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/oecore-cce77e8e79c860f4ef0ac4a86b9375bf87507360.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`nanbield </meta-mingw/log/?h=nanbield>`
- Tag: :yocto_git:`yocto-4.3.1 </meta-mingw/log/?h=yocto-4.3.1>`
- Git Revision: :yocto_git:`49617a253e09baabbf0355bc736122e9549c8ab2 </meta-mingw/commit/?id=49617a253e09baabbf0355bc736122e9549c8ab2>`
- Release Artefact: meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2
- sha: 2225115b73589cdbf1e491115221035c6a61679a92a93b2a3cf761ff87bf4ecc
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/meta-mingw-49617a253e09baabbf0355bc736122e9549c8ab2.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.6 </bitbake/log/?h=2.6>`
- Tag: :oe_git:`yocto-4.3.1 </bitbake/log/?h=yocto-4.3.1>`
- Git Revision: :oe_git:`936fcec41efacc4ce988c81882a9ae6403702bea </bitbake/commit/?id=936fcec41efacc4ce988c81882a9ae6403702bea>`
- Release Artefact: bitbake-936fcec41efacc4ce988c81882a9ae6403702bea
- sha: efbdd5fe7f29227a3fd26d6a08a368bf8215083a588b4d23f3adf35044897520
- Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-4.3.1/bitbake-936fcec41efacc4ce988c81882a9ae6403702bea.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`nanbield </yocto-docs/log/?h=nanbield>`
- Tag: :yocto_git:`yocto-4.3.1 </yocto-docs/log/?h=yocto-4.3.1>`
- Git Revision: :yocto_git:`6b98a6164263298648e89b5a5ae1260a58f1bb35 </yocto-docs/commit/?id=6b98a6164263298648e89b5a5ae1260a58f1bb35>`
|
