mirror of
git://git.yoctoproject.org/poky.git
synced 2025-07-19 21:09:03 +02:00
9e418c4265
(From yocto-docs rev: 3b50193fa0c9acf4a601aeae6e1c78d0e4a05aef) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 7494df521ed9c70e877dbdef1adfe38ad717682f) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
227 lines
11 KiB
ReStructuredText
227 lines
11 KiB
ReStructuredText
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
|
|
|
|
Release notes for Yocto-5.0.8 (Scarthgap)
|
|
-----------------------------------------
|
|
|
|
Security Fixes in Yocto-5.0.8
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- binutils: Fix :cve_nist:`2025-0840`
|
|
- curl: Ignore :cve_nist:`2025-0725`
|
|
- elfutils: Fix :cve_nist:`2025-1352`, :cve_nist:`2025-1365` and :cve_nist:`2025-1372`
|
|
- ffmpeg: Fix :cve_nist:`2024-35365`, :cve_nist:`2024-35369`, :cve_nist:`2024-36613`,
|
|
:cve_nist:`2024-36616`, :cve_nist:`2024-36617`, :cve_nist:`2024-36618`, :cve_nist:`2024-36619`,
|
|
:cve_nist:`2025-0518`, :cve_nist:`2025-22919`, :cve_nist:`2025-22921` and :cve_nist:`2025-25473`
|
|
- glibc: Fix :cve_nist:`2025-0395`
|
|
- gnutls: Fix :cve_nist:`2024-12243`
|
|
- go: Fix :cve_nist:`2024-45336`, :cve_nist:`2024-45341` and :cve_nist:`2025-22866`
|
|
- gstreamer1.0-rtsp-server: Fix :cve_nist:`2024-44331`
|
|
- libcap: Fix :cve_nist:`2025-1390`
|
|
- libtasn1: Fix :cve_nist:`2024-12133`
|
|
- libxml2: Fix :cve_nist:`2024-56171` and :cve_nist:`2025-24928`
|
|
- linux-yocto/6.6: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-53179`, :cve_nist:`2024-56582`,
|
|
:cve_nist:`2024-56703`, :cve_nist:`2024-57801`, :cve_nist:`2024-57802`, :cve_nist:`2024-57841`,
|
|
:cve_nist:`2024-57882`, :cve_nist:`2024-57887`, :cve_nist:`2024-57890`, :cve_nist:`2024-57892`,
|
|
:cve_nist:`2024-57895`, :cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57901`,
|
|
:cve_nist:`2024-57902`, :cve_nist:`2024-57906`, :cve_nist:`2024-57907`, :cve_nist:`2024-57908`,
|
|
:cve_nist:`2024-57910`, :cve_nist:`2024-57911`, :cve_nist:`2024-57912`, :cve_nist:`2024-57913`,
|
|
:cve_nist:`2024-57916`, :cve_nist:`2024-57922`, :cve_nist:`2024-57925`, :cve_nist:`2024-57926`,
|
|
:cve_nist:`2024-57933`, :cve_nist:`2024-57938`, :cve_nist:`2024-57939`, :cve_nist:`2024-57940`,
|
|
:cve_nist:`2024-57949`, :cve_nist:`2024-57951`, :cve_nist:`2025-21631`, :cve_nist:`2025-21636`,
|
|
:cve_nist:`2025-21637`, :cve_nist:`2025-21638`, :cve_nist:`2025-21639`, :cve_nist:`2025-21640`,
|
|
:cve_nist:`2025-21642`, :cve_nist:`2025-21652`, :cve_nist:`2025-21658`, :cve_nist:`2025-21665`,
|
|
:cve_nist:`2025-21666`, :cve_nist:`2025-21667`, :cve_nist:`2025-21669`, :cve_nist:`2025-21670`,
|
|
:cve_nist:`2025-21671`, :cve_nist:`2025-21673`, :cve_nist:`2025-21674`, :cve_nist:`2025-21675`,
|
|
:cve_nist:`2025-21676`, :cve_nist:`2025-21680`, :cve_nist:`2025-21681`, :cve_nist:`2025-21683`,
|
|
:cve_nist:`2025-21684`, :cve_nist:`2025-21687`, :cve_nist:`2025-21689`, :cve_nist:`2025-21690`,
|
|
:cve_nist:`2025-21692`, :cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699`
|
|
- openssh: Fix :cve_nist:`2025-26466`
|
|
- openssl: Fix :cve_nist:`2024-9143`, :cve_nist:`2024-12797` and :cve_nist:`2024-13176`
|
|
- pyhton3: Fix :cve_nist:`2024-12254` and :cve_nist:`2025-0938`
|
|
- subversion: Ignore :cve_nist:`2024-45720`
|
|
- u-boot: Fix :cve_nist:`2024-57254`, :cve_nist:`2024-57255`, :cve_nist:`2024-57256`,
|
|
:cve_nist:`2024-57257`, :cve_nist:`2024-57258` and :cve_nist:`2024-57259`
|
|
- vim: Fix :cve_nist:`2025-22134` and :cve_nist:`2025-24014`
|
|
- xwayland: Fix :cve_nist:`2024-9632`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`,
|
|
:cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`,
|
|
:cve_nist:`2025-26600` and :cve_nist:`2025-26601`
|
|
|
|
|
|
Fixes in Yocto-5.0.8
|
|
~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- base-files: Drop /bin/sh dependency
|
|
- bind: upgrade to 9.18.33
|
|
- binutils: File name too long causing failure to open temporary head file in dlltool
|
|
- binutils: stable 2.42 branch update
|
|
- bitbake: bblayers/query: Fix using "removeprefix" string method
|
|
- bitbake: bitbake-diffsigs: fix handling when finding only a single sigfile
|
|
- bitbake: data_smart.py: clear expand_cache in _setvar_update_overridevars
|
|
- bitbake: data_smart.py: remove unnecessary ? from __expand_var_regexp__
|
|
- bitbake: data_smart.py: simple clean up
|
|
- build-appliance-image: Update to scarthgap head revision
|
|
- ccache.conf: Add include_file_ctime to sloppiness
|
|
- cmake: apply parallel build settings to ptest tasks
|
|
- contributor-guide/submit-changes: add policy on AI generated code
|
|
- dev-manual/building: document the initramfs-framework recipe
|
|
- devtool: ide-sdk recommend :term:`DEBUG_BUILD`
|
|
- devtool: ide-sdk remove the plugin from eSDK installer
|
|
- devtool: ide-sdk sort cmake preset
|
|
- devtool: modify support debug-builds
|
|
- docs: Add favicon for the documentation html
|
|
- docs: Fix typo in standards.md
|
|
- docs: Remove all mention of core-image-lsb
|
|
- docs: vulnerabilities/classes: remove references to cve-check text format
|
|
- files: Amend overlayfs unit descriptions with path information
|
|
- files: overlayfs-create-dirs: Improve mount unit dependency
|
|
- glibc: stable 2.39 branch updates
|
|
- gnupg: upgrade to 2.4.5
|
|
- go: upgrade 1.22.12
|
|
- icu: remove host references in nativesdk to fix reproducibility
|
|
- libtasn1: upgrade to 4.20.0
|
|
- libxml2: upgrade to 2.12.10
|
|
- linux-yocto/6.6: upgrade to v6.6.75
|
|
- meta: Enable '-o pipefail' for the SDK installer
|
|
- migration-guides: add release notes for 4.0.24, 4.0.25 and 5.0.7
|
|
- oe-selftest: devtool ide-sdk use modify debug-build
|
|
- oeqa/sdk/context: fix for gtk3 test failure during do_testsdk
|
|
- oeqa/selftest/rust: skip on all MIPS platforms
|
|
- openssl: upgrade to 3.2.4
|
|
- pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH
|
|
- poky.conf: add ubuntu2404 to :term:`SANITY_TESTED_DISTROS`
|
|
- poky.conf: bump version for 5.0.8
|
|
- ppp: Revert lock path to /var/lock
|
|
- python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES
|
|
- python3: upgrade to 3.12.9
|
|
- qemu: Do not define sched_attr with glibc >= 2.41
|
|
- ref-manual/faq: add q&a on systemd as default
|
|
- ref-manual: Add missing variable :term:`IMAGE_ROOTFS_MAXSIZE`
|
|
- ref-manual: don't refer to poky-lsb
|
|
- ref-manual: remove OE_IMPORTS
|
|
- rust-common.bbclass: soft assignment for RUSTLIB path
|
|
- rust: fix for rust multilib sdk configuration
|
|
- rust: remove redundant cargo config file
|
|
- scripts/install-buildtools: Update to 5.0.7
|
|
- sdk-manual: extensible.rst: devtool ide-sdk improve
|
|
- sdk-manual: extensible.rst: update devtool ide-sdk
|
|
- selftest/rust: correctly form the PATH environment variable
|
|
- systemd: add libpcre2 as :term:`RRECOMMENDS` if pcre2 is enabled
|
|
- systemd: upgrade to 255.17
|
|
- test-manual/ptest: link to common framework ptest classes
|
|
- tzcode-native: Fix compiler setting from 2023d version
|
|
- tzdata/tzcode-native: upgrade to 2025a
|
|
- u-boot: kernel-fitimage: Fix dependency loop if :term:`UBOOT_SIGN_ENABLE` and UBOOT_ENV enabled
|
|
- u-boot: kernel-fitimage: Restore FIT_SIGN_INDIVIDUAL="1" behavior
|
|
- uboot-config: fix devtool modify with kernel-fitimage
|
|
- vim: upgrade to 9.1.1043
|
|
|
|
|
|
Known Issues in Yocto-5.0.8
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- N/A
|
|
|
|
Contributors to Yocto-5.0.8
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
Thanks to the following people who contributed to this release:
|
|
|
|
- Adrian Freihofer
|
|
- Aleksandar Nikolic
|
|
- Alessio Cascone
|
|
- Alexander Kanavin
|
|
- Alexis Cellier
|
|
- Antonin Godard
|
|
- Archana Polampalli
|
|
- Bruce Ashfield
|
|
- Chen Qi
|
|
- Deepesh Varatharajan
|
|
- Divya Chellam
|
|
- Enrico Jörns
|
|
- Esben Haabendal
|
|
- Etienne Cordonnier
|
|
- Fabio Berton
|
|
- Guðni Már Gilbert
|
|
- Harish Sadineni
|
|
- Hitendra Prajapati
|
|
- Hongxu Jia
|
|
- Jiaying Song
|
|
- Joerg Schmidt
|
|
- Johannes Schneider
|
|
- Khem Raj
|
|
- Lee Chee Yang
|
|
- Marek Vasut
|
|
- Marta Rybczynska
|
|
- Moritz Haase
|
|
- Oleksandr Hnatiuk
|
|
- Pedro Ferreira
|
|
- Peter Marko
|
|
- Poonam Jadhav
|
|
- Priyal Doshi
|
|
- Ross Burton
|
|
- Simon A. Eugster
|
|
- Steve Sakoman
|
|
- Vijay Anusuri
|
|
- Wang Mingyu
|
|
- Weisser, Pascal
|
|
|
|
|
|
Repositories / Downloads for Yocto-5.0.8
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
poky
|
|
|
|
- Repository Location: :yocto_git:`/poky`
|
|
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
|
|
- Tag: :yocto_git:`yocto-5.0.8 </poky/log/?h=yocto-5.0.8>`
|
|
- Git Revision: :yocto_git:`dc4827b3660bc1a03a2bc3b0672615b50e9137ff </poky/commit/?id=dc4827b3660bc1a03a2bc3b0672615b50e9137ff>`
|
|
- Release Artefact: poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff
|
|
- sha: ace7264e16e18ed02ef0ad2935fa10b5fad2c4de38b2356f4192b38ef2184504
|
|
- Download Locations:
|
|
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff.tar.bz2
|
|
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff.tar.bz2
|
|
|
|
openembedded-core
|
|
|
|
- Repository Location: :oe_git:`/openembedded-core`
|
|
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
|
|
- Tag: :oe_git:`yocto-5.0.8 </openembedded-core/log/?h=yocto-5.0.8>`
|
|
- Git Revision: :oe_git:`cd2b6080a4c0f2ed2c9939ec0b87763aef595048 </openembedded-core/commit/?id=cd2b6080a4c0f2ed2c9939ec0b87763aef595048>`
|
|
- Release Artefact: oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048
|
|
- sha: 14c7cd5c62a96ceb9c2141164ea0f087fdbaed99ca3e9a722977a3f12d6381f6
|
|
- Download Locations:
|
|
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048.tar.bz2
|
|
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048.tar.bz2
|
|
|
|
meta-mingw
|
|
|
|
- Repository Location: :yocto_git:`/meta-mingw`
|
|
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
|
|
- Tag: :yocto_git:`yocto-5.0.8 </meta-mingw/log/?h=yocto-5.0.8>`
|
|
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
|
|
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
|
|
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
|
|
- Download Locations:
|
|
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
|
|
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
|
|
|
|
bitbake
|
|
|
|
- Repository Location: :oe_git:`/bitbake`
|
|
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
|
|
- Tag: :oe_git:`yocto-5.0.8 </bitbake/log/?h=yocto-5.0.8>`
|
|
- Git Revision: :oe_git:`7375d32e8c1af20c51abec4eb3b072b4ca58b239 </bitbake/commit/?id=7375d32e8c1af20c51abec4eb3b072b4ca58b239>`
|
|
- Release Artefact: bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239
|
|
- sha: 13dffbc162c5b6e2c95fa72936a430b9a542d52d81d502a5d0afc592fbf4a16b
|
|
- Download Locations:
|
|
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239.tar.bz2
|
|
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239.tar.bz2
|
|
|
|
yocto-docs
|
|
|
|
- Repository Location: :yocto_git:`/yocto-docs`
|
|
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
|
|
- Tag: :yocto_git:`yocto-5.0.8 </yocto-docs/log/?h=yocto-5.0.8>`
|
|
- Git Revision: :yocto_git:`7d3cce5b962ca9f73b29affceb7ebc6710627739 </yocto-docs/commit/?id=7d3cce5b962ca9f73b29affceb7ebc6710627739>`
|
|
|