poky/documentation/migration-guides/release-notes-4.0.18.rst

.. SPDX-License-Identifier: CC-BY-SA-2.0-UK

Release notes for Yocto-4.0.18 (Kirkstone)
------------------------------------------

Security Fixes in Yocto-4.0.18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-  curl: Fix :cve:`2024-2398`
-  expat: fix :cve:`2023-52426` and :cve:`2024-28757`
-  libssh2: fix :cve:`2023-48795`
-  ncurses: Fix :cve:`2023-50495`
-  nghttp2: Fix :cve:`2024-28182` and :cve:`2023-44487`
-  openssh: Ignore :cve:`2023-51767`
-  openssl: Fix :cve:`2024-2511`
-  perl: Ignore :cve:`2023-47100`
-  python3-cryptography: Fix :cve:`2024-26130`
-  python3-urllib3: Fix :cve:`2023-45803`
-  qemu: Fix :cve:`2023-6683`
-  ruby: fix :cve_mitre:`2024-27281`
-  rust: Ignore :cve:`2024-24576`
-  tiff: Fix :cve:`2023-52356` and :cve:`2023-6277`
-  xserver-xorg: Fix :cve:`2024-31080` and :cve:`2024-31081`
-  xwayland: Fix :cve:`2023-6816`, :cve:`2024-0408` and :cve:`2024-0409`


Fixes in Yocto-4.0.18
~~~~~~~~~~~~~~~~~~~~~

-  build-appliance-image: Update to kirkstone head revision
-  common-licenses: backport LGPL-3.0-with-zeromq-exception license
-  contributor-guide: add notes for tests
-  contributor-guide: be more specific about meta-* trees
-  cups: fix typo in :cve:`2023-32360` backport patch
-  cve-update-nvd2-native: Add an age threshold for incremental update
-  cve-update-nvd2-native: Fix CVE configuration update
-  cve-update-nvd2-native: Fix typo in comment
-  cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
-  cve-update-nvd2-native: Remove rejected CVE from database
-  cve-update-nvd2-native: nvd_request_next: Improve comment
-  dev-manual: improve descriptions of 'bitbake -S printdiff'
-  dev-manual: packages: fix capitalization
-  docs: conf.py: properly escape backslashes for latex_elements
-  gcc: Backport sanitizer fix for 32-bit ALSR
-  glibc: Fix subscript typos for get_nscd_addresses
-  kernel-dev: join mkdir commands with -p
-  linux-firmware: Upgrade to 20240220
-  manuals: add initial sphinx-lint support
-  manuals: add initial stylechecks with Vale
-  manuals: document VIRTUAL-RUNTIME variables
-  manuals: fix duplicate "stylecheck" target
-  manuals: fix incorrect double backticks
-  manuals: fix trailing spaces
-  manuals: refer to new yocto-patches mailing list wherever appropriate
-  manuals: remove tab characters
-  manuals: replace hyphens with em dashes
-  manuals: use "manual page(s)"
-  migration-guides: add release notes for 4.0.17
-  poky.conf: bump version for 4.0.18
-  profile-manual: usage.rst: fix reference to bug report
-  profile-manual: usage.rst: formatting fixes
-  profile-manual: usage.rst: further style improvements
-  python3-urllib3: Upgrade to v1.26.18
-  ref-manual: add documentation of the variable :term:`SPDX_NAMESPACE_PREFIX`
-  ref-manual: tasks: do_cleanall: recommend using '-f' instead
-  ref-manual: tasks: do_cleansstate: recommend using '-f' instead for a shared sstate
-  ref-manual: variables: adding multiple groups in :term:`GROUPADD_PARAM`
-  ref-manual: variables: correct sdk installation default path
-  stress-ng: avoid calling sync during do_compile
-  systemd: Fix vlan qos mapping
-  tcl: Add a way to skip ptests
-  tcl: skip async and event tests in run-ptest
-  tcl: skip timing-dependent tests in run-ptest
-  valgrind: skip intermittently failing ptest
-  wireless-regdb: Upgrade to 2024.01.23
-  yocto-uninative: Update to 4.4 for glibc 2.39


Known Issues in Yocto-4.0.18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- N/A


Contributors to Yocto-4.0.18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-  Alex Kiernan
-  Alex Stewart
-  Alexander Kanavin
-  BELOUARGA Mohamed
-  Claus Stovgaard
-  Colin McAllister
-  Geoff Parker
-  Haitao Liu
-  Harish Sadineni
-  Johan Bezem
-  Jonathan GUILLOT
-  Jörg Sommer
-  Khem Raj
-  Lee Chee Yang
-  Luca Ceresoli
-  Martin Jansa
-  Meenali Gupta
-  Michael Halstead
-  Michael Opdenacker
-  Peter Marko
-  Quentin Schulz
-  Ross Burton
-  Sana Kazi
-  Simone Weiß
-  Soumya Sambu
-  Steve Sakoman
-  Tan Wen Yan
-  Vijay Anusuri
-  Wang Mingyu
-  Yoann Congal
-  Yogita Urade
-  Zahir Hussain


Repositories / Downloads for Yocto-4.0.18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

poky

-  Repository Location: :yocto_git:`/poky`
-  Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.18 </poky/log/?h=yocto-4.0.18>`
-  Git Revision: :yocto_git:`31751bba1c789f15f574773a659b8017d7bcf440 </poky/commit/?id=31751bba1c789f15f574773a659b8017d7bcf440>`
-  Release Artefact: poky-31751bba1c789f15f574773a659b8017d7bcf440
-  sha: 72d5aa65c3c37766ebc24b212740272c1d52342468548f9c070241d3522ad2ca
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/poky-31751bba1c789f15f574773a659b8017d7bcf440.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/poky-31751bba1c789f15f574773a659b8017d7bcf440.tar.bz2

openembedded-core

-  Repository Location: :oe_git:`/openembedded-core`
-  Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
-  Tag:  :oe_git:`yocto-4.0.18 </openembedded-core/log/?h=yocto-4.0.18>`
-  Git Revision: :oe_git:`b7182571242dc4e23e5250a449d90348e62a6abc </openembedded-core/commit/?id=b7182571242dc4e23e5250a449d90348e62a6abc>`
-  Release Artefact: oecore-b7182571242dc4e23e5250a449d90348e62a6abc
-  sha: 6f257e50c10ebae673dcf61a833b3270db6d22781f02f6794a370aac839f1020
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/oecore-b7182571242dc4e23e5250a449d90348e62a6abc.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/oecore-b7182571242dc4e23e5250a449d90348e62a6abc.tar.bz2

meta-mingw

-  Repository Location: :yocto_git:`/meta-mingw`
-  Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.18 </meta-mingw/log/?h=yocto-4.0.18>`
-  Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>`
-  Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7
-  sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2

meta-gplv2

-  Repository Location: :yocto_git:`/meta-gplv2`
-  Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
-  Tag:  :yocto_git:`yocto-4.0.18 </meta-gplv2/log/?h=yocto-4.0.18>`
-  Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
-  Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
-  sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2

bitbake

-  Repository Location: :oe_git:`/bitbake`
-  Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
-  Tag:  :oe_git:`yocto-4.0.18 </bitbake/log/?h=yocto-4.0.18>`
-  Git Revision: :oe_git:`40fd5f4eef7460ca67f32cfce8e229e67e1ff607 </bitbake/commit/?id=40fd5f4eef7460ca67f32cfce8e229e67e1ff607>`
-  Release Artefact: bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607
-  sha: 5d20a0e4c5d0fce44bd84778168714a261a30a4b83f67c88df3b8a7e7115e444
-  Download Locations:
   http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607.tar.bz2
   http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607.tar.bz2

yocto-docs

-  Repository Location: :yocto_git:`/yocto-docs`
-  Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
-  Tag: :yocto_git:`yocto-4.0.18 </yocto-docs/log/?h=yocto-4.0.18>`
-  Git Revision: :yocto_git:`fd1423141e7458ba557db465c171b0b4e9063987 </yocto-docs/commit/?id=fd1423141e7458ba557db465c171b0b4e9063987>`