Hi
We are pleased to announce the Yocto Project 4.0.18 Release is now available for download.
A gpg signed version of these release notes is available at:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/RELEASENOTES
Full Test Report:
http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/testreport.txt
Thank you for everyone's contributions to this release.
Chee Yang
Yocto Project Build and Release
- --------------------------
yocto-4.0.18 Release Notes
- --------------------------
- --------------------------
Repositories/Downloads
- --------------------------
Repository Name: poky
Repository Location:
https://git.yoctoproject.org/poky
Branch: kirkstone
Tag: yocto-4.0.18
Git Revision: 31751bba1c789f15f574773a659b8017d7bcf440
Release Artefact: poky-31751bba1c789f15f574773a659b8017d7bcf440
sha: 72d5aa65c3c37766ebc24b212740272c1d52342468548f9c070241d3522ad2ca
Download Locations:
Repository Name: openembedded-core
Repository Location:
https://git.openembedded.org/openembedded-core
Branch: kirkstone
Tag: yocto-4.0.18
Git Revision: b7182571242dc4e23e5250a449d90348e62a6abc
Release Artefact: oecore-b7182571242dc4e23e5250a449d90348e62a6abc
sha: 6f257e50c10ebae673dcf61a833b3270db6d22781f02f6794a370aac839f1020
Download Locations:
Repository Name: meta-mingw
Repository Location:
https://git.yoctoproject.org/meta-mingw
Branch: kirkstone
Tag: yocto-4.0.18
Git Revision: f6b38ce3c90e1600d41c2ebb41e152936a0357d7
Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7
sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25
Download Locations:
Repository Name: meta-gplv2
Repository Location:
https://git.yoctoproject.org/meta-gplv2
Branch: kirkstone
Tag: yocto-4.0.18
Git Revision: d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
Download Locations:
Repository Name: bitbake
Repository Location:
https://git.openembedded.org/bitbake
Branch: 2.0
Tag: yocto-4.0.18
Git Revision: 40fd5f4eef7460ca67f32cfce8e229e67e1ff607
Release Artefact: bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607
sha: 5d20a0e4c5d0fce44bd84778168714a261a30a4b83f67c88df3b8a7e7115e444
Download Locations:
Repository Name: yocto-docs
Repository Location:
https://git.yoctoproject.org/yocto-docs
Branch: kirkstone
Tag: yocto-4.0.18
Git Revision: fd1423141e7458ba557db465c171b0b4e9063987
- ---------------
Contributors
- ---------------
Alex Kiernan
Alex Stewart
Alexander Kanavin
BELOUARGA Mohamed
Claus Stovgaard
Colin McAllister
Geoff Parker
Haitao Liu
Harish Sadineni
Johan Bezem
Jonathan GUILLOT
Jörg Sommer
Khem Raj
Lee Chee Yang
Luca Ceresoli
Martin Jansa
Meenali Gupta
Michael Halstead
Michael Opdenacker
Peter Marko
Quentin Schulz
Ross Burton
Sana Kazi
Simone Weiß
Soumya Sambu
Steve Sakoman
Tan Wen Yan
Vijay Anusuri
Wang Mingyu
Yoann Congal
Yogita Urade
Zahir Hussain
- ---------------
Known Issues
- ---------------
N/A
- ---------------
Security Fixes
- ---------------
curl: Fix CVE-2024-2398
expat: fix CVE-2023-52426 CVE-2024-28757
libssh2: fix CVE-2023-48795
ncurses: Fix CVE-2023-50495
nghttp2: Fix CVE-2024-28182 CVE-2023-44487
openssh: Ignore CVE-2023-51767
openssl: Fix CVE-2024-2511
perl: Ignore CVE-2023-47100
python3-cryptography: Fix CVE-2024-26130
python3-urllib3: Fix CVE-2023-45803
qemu: Fix CVE-2023-6683
ruby: fix CVE-2024-27281
rust: Ignore CVE-2024-24576
tiff: Fix CVE-2023-52356 CVE-2023-6277
xserver-xorg: Fix CVE-2024-31080 CVE-2024-31081
xwayland: Fix CVE-2023-6816 CVE-2024-0408 CVE-2024-0409
- ---------------
Fixes
- ---------------
build-appliance-image: Update to kirkstone head revision
common-licenses: backport LGPL-3.0-with-zeromq-exception license
contributor-guide: add notes for tests
contributor-guide: be more specific about meta-* trees
cups: fix typo in CVE-2023-32360 backport patch
cve-update-nvd2-native: Add an age threshold for incremental update
cve-update-nvd2-native: Fix CVE configuration update
cve-update-nvd2-native: Fix typo in comment
cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
cve-update-nvd2-native: Remove rejected CVE from database
cve-update-nvd2-native: nvd_request_next: Improve comment
dev-manual: improve descriptions of 'bitbake -S printdiff'
dev-manual: packages: fix capitalization
docs: conf.py: properly escape backslashes for latex_elements
gcc: Backport sanitizer fix for 32-bit ALSR
glibc: Fix subscript typos for get_nscd_addresses
kernel-dev: join mkdir commands with -p
linux-firmware: Upgrade to 20240220
manuals: add initial sphinx-lint support
manuals: add initial stylechecks with Vale
manuals: document VIRTUAL-RUNTIME variables
manuals: fix duplicate "stylecheck" target
manuals: fix incorrect double backticks
manuals: fix trailing spaces
manuals: refer to new yocto-patches mailing list wherever appropriate
manuals: remove tab characters
manuals: replace hyphens with em dashes
manuals: use "manual page(s)"
migration-guides: add release notes for 4.0.17
poky.conf: bump version for 4.0.18
profile-manual: usage.rst: fix reference to bug report
profile-manual: usage.rst: formatting fixes
profile-manual: usage.rst: further style improvements
python3-urllib3: Upgrade to v1.26.18
ref-manual: add documentation of the variable SPDX_NAMESPACE_PREFIX
ref-manual: tasks: do_cleanall: recommend using '-f' instead
ref-manual: tasks: do_cleansstate: recommend using '-f' instead for a shared sstate
ref-manual: variables: adding multiple groups in GROUPADD_PARAM
ref-manual: variables: correct sdk installation default path
stress-ng: avoid calling sync during do_compile
systemd: Fix vlan qos mapping
tcl: Add a way to skip ptests
tcl: skip async and event tests in run-ptest
tcl: skip timing-dependent tests in run-ptest
valgrind: skip intermittently failing ptest
wireless-regdb: Upgrade to 2024.01.23
yocto-uninative: Update to 4.4 for glibc 2.39