mirror of
git://git.yoctoproject.org/poky.git
synced 2025-07-19 21:09:03 +02:00

(From yocto-docs rev: 71af3b43038f04ea35b554dcdb101ce2dd4bca78) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
246 lines
10 KiB
ReStructuredText
246 lines
10 KiB
ReStructuredText
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
|
|
|
|
Release notes for Yocto-5.0.2 (Scarthgap)
|
|
-----------------------------------------
|
|
|
|
Security Fixes in Yocto-5.0.2
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- cups: Fix :cve:`2024-35235`
|
|
- gcc: Fix :cve:`2024-0151`
|
|
- gdk-pixbuf: Fix :cve:`2022-48622`
|
|
- ghostscript: fix :cve_mitre:`2024-29510`, :cve_mitre:`2024-33869`, :cve_mitre:`2024-33870` and :cve_mitre:`2024-33871`
|
|
- git: Fix :cve:`2024-32002`, :cve:`2024-32004`, :cve:`2024-32020`, :cve:`2024-32021` and :cve:`2024-32465`
|
|
- glib-2.0: Fix :cve:`2024-34397`
|
|
- glibc: Fix :cve:`2024-2961`, :cve:`2024-33599`, :cve:`2024-33600`, :cve:`2024-33601` and :cve:`2024-33602`
|
|
- ncurses: Fix :cve:`2023-45918` and :cve:`2023-50495`
|
|
- openssl: Fix :cve:`2024-4603` and :cve_mitre:`2024-4741`
|
|
- util-linux: Fix :cve:`2024-28085`
|
|
- xserver-xorg: Fix :cve:`2024-31080`, :cve:`2024-31081`, :cve:`2024-31082` and :cve:`2024-31083`
|
|
|
|
|
|
Fixes in Yocto-5.0.2
|
|
~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- appstream: Upgrade to 1.0.3
|
|
- apr: submit 0001-Add-option-to-disable-timed-dependant-tests.patch upstream
|
|
- base-files: profile: fix error sh: 1: unknown operand
|
|
- bash: Fix file-substitution error-handling bug
|
|
- bash: mark build-tests.patch as Inappropriate
|
|
- binutils: Fix aarch64 disassembly abort
|
|
- bitbake: bb: Use namedtuple for Task data
|
|
- bitbake: cooker: Handle ImportError for websockets
|
|
- bitbake: fetch2/gcp: Add missing runfetchcmd import
|
|
- bitbake: fetch2/wget: Canonicalize :term:`DL_DIR` paths for wget2 compatibility
|
|
- bitbake: fetch2/wget: Fix failure path for files that are empty or don't exist
|
|
- bitbake: hashserv: client: Add batch stream API
|
|
- bitbake: parse: Improve/fix cache invalidation via mtime
|
|
- bitbake: runqueue: Add timing warnings around slow loops
|
|
- bitbake: runqueue: Allow rehash loop to exit in case of interrupts
|
|
- bitbake: runqueue: Improve rehash get_unihash parallelism
|
|
- bitbake: runqueue: Process unihashes in parallel at init
|
|
- bitbake: siggen/runqueue: Report which dependencies affect the taskhash
|
|
- bitbake: siggen: Enable batching of unihash queries
|
|
- bitbake: tests/fetch: Tweak test to match upstream repo url change
|
|
- bitbake: tests/fetch: Tweak to work on Fedora40
|
|
- build-appliance-image: Update to scarthgap head revision
|
|
- busybox: update :cve:`2022-28391` patches upstream status
|
|
- cdrtools-native: Fix build with GCC 14
|
|
- classes: image_types: apply EXTRA_IMAGECMD:squashfs* in oe_mksquashfs()
|
|
- classes: image_types: quote variable assignment needed by dash
|
|
- consolekit: Disable incompatible-pointer-types warning as error
|
|
- cracklib: Modify patch to compile with GCC 14
|
|
- cronie: Upgrade to 1.7.2
|
|
- cups: Upgrade to 2.4.9
|
|
- db: ignore implicit-int and implicit-function-declaration issues fatal with gcc-14
|
|
- devtool: modify: Catch git submodule error for go code
|
|
- devtool: standard: update-recipe/finish: fix update localfile in another layer
|
|
- devtool: sync: Fix Execution error
|
|
- expect: ignore various issues now fatal with gcc-14
|
|
- expect: mark patches as Inactive-Upstream
|
|
- gawk: fix readline detection
|
|
- gcc : Upgrade to v13.3
|
|
- gcc-runtime: libgomp fix for gcc 14 warnings with mandb selftest
|
|
- gdk-pixbuf: Upgrade to 2.42.12
|
|
- git: set --with-gitconfig=/etc/gitconfig for -native builds
|
|
- git: Upgrade to 2.44.1
|
|
- glib-2.0: Upgrade to 2.78.6
|
|
- glibc: Update to latest on stable 2.39 branch (273a835fe7...)
|
|
- glibc: correct :term:`LICENSE` to "GPL-2.0-only & LGPL-2.1-or-later"
|
|
- go: Drop the linkmode completely
|
|
- goarch: Revert "disable dynamic linking globally"
|
|
- gstreamer1.0-plugins-good: Include qttools-native during the build with qt5 :term:`PACKAGECONFIG`
|
|
- gtk4: Disable int-conversion warning as error
|
|
- icu: add upstream submission links for fix-install-manx.patch
|
|
- ipk: Fix clean up of extracted IPK payload
|
|
- iproute2: Fix build with GCC-14
|
|
- iproute2: drop obsolete patch
|
|
- iputils: splitting the ping6 as a package
|
|
- kea: Remove -fvisibility-inlines-hidden from C++ flags
|
|
- kea: remove unnecessary reproducibility patch
|
|
- kernel.bbclass: check, if directory exists before removing empty module directory
|
|
- kexec-tools: Fix build with GCC-14 on musl
|
|
- lib/oe/package-manager: allow including self in create_packages_dir
|
|
- lib/package_manager/ipk: Do not hardcode payload compression algorithm
|
|
- libarchive: Upgrade to 3.7.4
|
|
- libcgroup: fix build on non-systemd systems
|
|
- libgloss: Do not apply non-existent patch
|
|
- libinput: fix building with debug-gui option
|
|
- libtraceevent: submit meson.patch upstream
|
|
- libunwind: ignore various issues now fatal with gcc-14
|
|
- libusb1: Set :term:`CVE_PRODUCT`
|
|
- llvm: Switch to using release tarballs
|
|
- llvm: Upgrade to 18.1.5
|
|
- lrzsz connman-gnome libfm: ignore various issues fatal with gcc-14
|
|
- ltp: Fix build with GCC-14
|
|
- ltp: add iputils-ping6 to :term:`RDEPENDS`
|
|
- lttng-ust: Upgrade to 2.13.8
|
|
- mesa: Upgrade to 24.0.5
|
|
- oeqa/postactions: Do not use -l option with df
|
|
- oeqa/sdk/assimp: Upgrade and fix for gcc 14
|
|
- oeqa/sdkext/devtool: replace use of librdfa
|
|
- oeqa/selftest/debuginfod: use localpkgfeed to speed server startup
|
|
- oeqa/selftest/devtool: Revert fix test_devtool_add_git_style2"
|
|
- oeqa/selftest/devtool: add test for modifying recipes using go.bbclass
|
|
- oeqa/selftest/devtool: add test for updating local files into another layer
|
|
- oeqa/selftest/devtool: fix _test_devtool_add_git_url
|
|
- oeqa: selftest: context: run tests serially if testtools/subunit modules are not found
|
|
- openssl: Upgrade to 3.2.2
|
|
- p11-kit: ignore various issues fatal with gcc-14 (for 32bit MACHINEs)
|
|
- patchtest: test_metadata: fix invalid escape sequences
|
|
- poky.conf: bump version for 5.0.2
|
|
- ppp: Add RSA-MD in :term:`LICENSE`
|
|
- procps: fix build with new glibc but old kernel headers
|
|
- ptest-runner: Bump to 2.4.4 (95f528c)
|
|
- recipetool: Handle several go-import tags in go resolver
|
|
- recipetool: Handle unclean response in go resolver
|
|
- run-postinsts.service: Removed --no-reload to fix reload warning when users execute systemctl in the first boot.
|
|
- selftest/classes: add localpkgfeed class
|
|
- serf: mark patch as inappropriate for upstream submission
|
|
- taglib: Upgrade to 2.0.1
|
|
- ttyrun: define :term:`CVE_PRODUCT`
|
|
- uboot-sign: fix loop in do_uboot_assemble_fitimage
|
|
- update-rc.d: add +git to :term:`PV`
|
|
- webkitgtk: Upgrade to 2.44.1
|
|
- xinput-calibrator: mark upstream as inactive in a patch
|
|
- xserver-xorg: Upgrade to 21.1.12
|
|
- yocto-uninative: Update to 4.5 for gcc 14
|
|
- zip: Fix build with gcc-14
|
|
|
|
|
|
Known Issues in Yocto-5.0.2
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- N/A
|
|
|
|
|
|
Contributors to Yocto-5.0.2
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
- Adriaan Schmidt
|
|
- Alexander Kanavin
|
|
- Alexandre Truong
|
|
- Anton Almqvist
|
|
- Archana Polampalli
|
|
- Changqing Li
|
|
- Deepthi Hemraj
|
|
- Felix Nilsson
|
|
- Heiko Thole
|
|
- Jose Quaresma
|
|
- Joshua Watt
|
|
- Julien Stephan
|
|
- Kai Kang
|
|
- Khem Raj
|
|
- Lei Maohui
|
|
- Marc Ferland
|
|
- Marek Vasut
|
|
- Mark Hatle
|
|
- Martin Hundebøll
|
|
- Martin Jansa
|
|
- Maxin B. John
|
|
- Michael Halstead
|
|
- Mingli Yu
|
|
- Ola x Nilsson
|
|
- Peter Marko
|
|
- Philip Lorenz
|
|
- Poonam Jadhav
|
|
- Ralph Siemsen
|
|
- Rasmus Villemoes
|
|
- Ricardo Simoes
|
|
- Richard Purdie
|
|
- Robert Joslyn
|
|
- Ross Burton
|
|
- Rudolf J Streif
|
|
- Siddharth Doshi
|
|
- Soumya Sambu
|
|
- Steve Sakoman
|
|
- Sven Schwermer
|
|
- Trevor Gamblin
|
|
- Vincent Kriek
|
|
- Wang Mingyu
|
|
- Xiangyu Chen
|
|
- Yogita Urade
|
|
- Zev Weiss
|
|
- Zoltan Boszormenyi
|
|
|
|
|
|
Repositories / Downloads for Yocto-5.0.2
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
poky
|
|
|
|
- Repository Location: :yocto_git:`/poky`
|
|
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
|
|
- Tag: :yocto_git:`yocto-5.0.2 </poky/log/?h=yocto-5.0.2>`
|
|
- Git Revision: :yocto_git:`f7def85be9f99dcb4ba488bead201f670304379b </poky/commit/?id=f7def85be9f99dcb4ba488bead201f670304379b>`
|
|
- Release Artefact: poky-f7def85be9f99dcb4ba488bead201f670304379b
|
|
- sha: 0610a3175846d87f8a853020e8d517c94fe5e8b3fd4e40cd2d0ddbc22e75db4c
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/poky-f7def85be9f99dcb4ba488bead201f670304379b.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/poky-f7def85be9f99dcb4ba488bead201f670304379b.tar.bz2
|
|
|
|
openembedded-core
|
|
|
|
- Repository Location: :oe_git:`/openembedded-core`
|
|
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
|
|
- Tag: :oe_git:`yocto-5.0.2 </openembedded-core/log/?h=yocto-5.0.2>`
|
|
- Git Revision: :oe_git:`803cc32e72b4fc2fc28d92090e61f5dd288a10cb </openembedded-core/commit/?id=803cc32e72b4fc2fc28d92090e61f5dd288a10cb>`
|
|
- Release Artefact: oecore-803cc32e72b4fc2fc28d92090e61f5dd288a10cb
|
|
- sha: b63f1214438e540ec15f1ec7f49615f31584c93e9cff10833273eefc710a7862
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/oecore-803cc32e72b4fc2fc28d92090e61f5dd288a10cb.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/oecore-803cc32e72b4fc2fc28d92090e61f5dd288a10cb.tar.bz2
|
|
|
|
meta-mingw
|
|
|
|
- Repository Location: :yocto_git:`/meta-mingw`
|
|
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
|
|
- Tag: :yocto_git:`yocto-5.0.2 </meta-mingw/log/?h=yocto-5.0.2>`
|
|
- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>`
|
|
- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852
|
|
- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2
|
|
|
|
bitbake
|
|
|
|
- Repository Location: :oe_git:`/bitbake`
|
|
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
|
|
- Tag: :oe_git:`yocto-5.0.2 </bitbake/log/?h=yocto-5.0.2>`
|
|
- Git Revision: :oe_git:`8714a02e13477a9d97858b3642e05f28247454b5 </bitbake/commit/?id=8714a02e13477a9d97858b3642e05f28247454b5>`
|
|
- Release Artefact: bitbake-8714a02e13477a9d97858b3642e05f28247454b5
|
|
- sha: f22b56447e321c308353196da1d6dd76af5e9957e7e654c75dfd707f58091fd1
|
|
- Download Locations:
|
|
http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/bitbake-8714a02e13477a9d97858b3642e05f28247454b5.tar.bz2
|
|
http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/bitbake-8714a02e13477a9d97858b3642e05f28247454b5.tar.bz2
|
|
|
|
yocto-docs
|
|
|
|
- Repository Location: :yocto_git:`/yocto-docs`
|
|
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
|
|
- Tag: :yocto_git:`yocto-5.0.2 </yocto-docs/log/?h=yocto-5.0.2>`
|
|
- Git Revision: :yocto_git:`875dfe69e93bf8fee3b8c07818a6ac059f228a13 </yocto-docs/commit/?id=875dfe69e93bf8fee3b8c07818a6ac059f228a13>`
|
|
|
|
|