@@ -24,3 +24,4 @@ Release 4.0 (kirkstone)
release-notes-4.0.15
release-notes-4.0.16
release-notes-4.0.17
+ release-notes-4.0.18
new file mode 100644
@@ -0,0 +1,191 @@
+.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
+
+Release notes for Yocto-4.0.18 (Kirkstone)
+------------------------------------------
+
+Security Fixes in Yocto-4.0.18
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- curl: Fix :cve:`2024-2398`
+- expat: fix :cve:`2023-52426` and :cve:`2024-28757`
+- libssh2: fix :cve:`2023-48795`
+- ncurses: Fix :cve:`2023-50495`
+- nghttp2: Fix :cve:`2024-28182` and :cve:`2023-44487`
+- openssh: Ignore :cve:`2023-51767`
+- openssl: Fix :cve:`2024-2511`
+- perl: Ignore :cve:`2023-47100`
+- python3-cryptography: Fix :cve:`2024-26130`
+- python3-urllib3: Fix :cve:`2023-45803`
+- qemu: Fix :cve:`2023-6683`
+- ruby: fix :cve_mitre:`2024-27281`
+- rust: Ignore :cve:`2024-24576`
+- tiff: Fix :cve:`2023-52356` and :cve:`2023-6277`
+- xserver-xorg: Fix :cve:`2024-31080` and :cve:`2024-31081`
+- xwayland: Fix :cve:`2023-6816`, :cve:`2024-0408` and :cve:`2024-0409`
+
+
+Fixes in Yocto-4.0.18
+~~~~~~~~~~~~~~~~~~~~~
+
+- build-appliance-image: Update to kirkstone head revision
+- common-licenses: Backport missing license
+- contributor-guide: add notes for tests
+- contributor-guide: be more specific about meta-* trees
+- cups: fix typo in :cve:`2023-32360` backport patch
+- cve-update-nvd2-native: Add an age threshold for incremental update
+- cve-update-nvd2-native: Fix CVE configuration update
+- cve-update-nvd2-native: Fix typo in comment
+- cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
+- cve-update-nvd2-native: Remove rejected CVE from database
+- cve-update-nvd2-native: nvd_request_next: Improve comment
+- dev-manual: improve descriptions of 'bitbake -S printdiff'
+- dev-manual: packages: fix capitalization
+- docs: conf.py: properly escape backslashes for latex_elements
+- gcc: Backport sanitizer fix for 32-bit ALSR
+- glibc: Fix subscript typos for get_nscd_addresses
+- kernel-dev: join mkdir commands with -p
+- linux-firmware: Upgrade to 20240220
+- manuals: add initial sphinx-lint support
+- manuals: add initial stylechecks with Vale
+- manuals: document VIRTUAL-RUNTIME variables
+- manuals: fix duplicate "stylecheck" target
+- manuals: fix incorrect double backticks
+- manuals: fix trailing spaces
+- manuals: refer to new yocto-patches mailing list wherever appropriate
+- manuals: remove tab characters
+- manuals: replace hyphens with em dashes
+- manuals: use "manual page(s)"
+- migration-guides: add release notes for 4.0.17
+- poky.conf: bump version for 4.0.18
+- profile-manual: usage.rst: fix reference to bug report
+- profile-manual: usage.rst: formatting fixes
+- profile-manual: usage.rst: further style improvements
+- python3-urllib3: Upgrade to v1.26.18
+- ref-manual: add documentation of the variable :term:`SPDX_NAMESPACE_PREFIX`
+- ref-manual: tasks: do_cleanall: recommend using '-f' instead
+- ref-manual: tasks: do_cleansstate: recommend using '-f' instead for a shared sstate
+- ref-manual: variables: adding multiple groups in :term:`GROUPADD_PARAM`
+- ref-manual: variables: correct sdk installation default path
+- stress-ng: avoid calling sync during do_compile
+- systemd: Fix vlan qos mapping
+- tcl: Add a way to skip ptests
+- tcl: skip async and event tests in run-ptest
+- tcl: skip timing-dependent tests in run-ptest
+- valgrind: skip intermittently failing ptest
+- wireless-regdb: Upgrade to 2024.01.23
+- yocto-uninative: Update to 4.4 for glibc 2.39
+
+
+Known Issues in Yocto-4.0.18
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- N/A
+
+
+Contributors to Yocto-4.0.18
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- Alex Kiernan
+- Alex Stewart
+- Alexander Kanavin
+- BELOUARGA Mohamed
+- Claus Stovgaard
+- Colin McAllister
+- Geoff Parker
+- Haitao Liu
+- Harish Sadineni
+- Johan Bezem
+- Jonathan GUILLOT
+- Jörg Sommer
+- Khem Raj
+- Lee Chee Yang
+- Luca Ceresoli
+- Martin Jansa
+- Meenali Gupta
+- Michael Halstead
+- Michael Opdenacker
+- Peter Marko
+- Quentin Schulz
+- Ross Burton
+- Sana Kazi
+- Simone Weiß
+- Soumya Sambu
+- Steve Sakoman
+- Tan Wen Yan
+- Vijay Anusuri
+- Wang Mingyu
+- Yoann Congal
+- Yogita Urade
+- Zahir Hussain
+
+
+Repositories / Downloads for Yocto-4.0.18
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+poky
+
+- Repository Location: :yocto_git:`/poky`
+- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.18 </poky/log/?h=yocto-4.0.18>`
+- Git Revision: :yocto_git:`31751bba1c789f15f574773a659b8017d7bcf440 </poky/commit/?id=31751bba1c789f15f574773a659b8017d7bcf440>`
+- Release Artefact: poky-31751bba1c789f15f574773a659b8017d7bcf440
+- sha: 72d5aa65c3c37766ebc24b212740272c1d52342468548f9c070241d3522ad2ca
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/poky-31751bba1c789f15f574773a659b8017d7bcf440.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/poky-31751bba1c789f15f574773a659b8017d7bcf440.tar.bz2
+
+openembedded-core
+
+- Repository Location: :oe_git:`/openembedded-core`
+- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
+- Tag: :oe_git:`yocto-4.0.18 </openembedded-core/log/?h=yocto-4.0.18>`
+- Git Revision: :oe_git:`b7182571242dc4e23e5250a449d90348e62a6abc </openembedded-core/commit/?id=b7182571242dc4e23e5250a449d90348e62a6abc>`
+- Release Artefact: oecore-b7182571242dc4e23e5250a449d90348e62a6abc
+- sha: 6f257e50c10ebae673dcf61a833b3270db6d22781f02f6794a370aac839f1020
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/oecore-b7182571242dc4e23e5250a449d90348e62a6abc.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/oecore-b7182571242dc4e23e5250a449d90348e62a6abc.tar.bz2
+
+meta-mingw
+
+- Repository Location: :yocto_git:`/meta-mingw`
+- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.18 </meta-mingw/log/?h=yocto-4.0.18>`
+- Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>`
+- Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7
+- sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2
+
+meta-gplv2
+
+- Repository Location: :yocto_git:`/meta-gplv2`
+- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.18 </meta-gplv2/log/?h=yocto-4.0.18>`
+- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
+- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
+- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
+
+bitbake
+
+- Repository Location: :oe_git:`/bitbake`
+- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
+- Tag: :oe_git:`yocto-4.0.18 </bitbake/log/?h=yocto-4.0.18>`
+- Git Revision: :oe_git:`40fd5f4eef7460ca67f32cfce8e229e67e1ff607 </bitbake/commit/?id=40fd5f4eef7460ca67f32cfce8e229e67e1ff607>`
+- Release Artefact: bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607
+- sha: 5d20a0e4c5d0fce44bd84778168714a261a30a4b83f67c88df3b8a7e7115e444
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.18/bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-4.0.18/bitbake-40fd5f4eef7460ca67f32cfce8e229e67e1ff607.tar.bz2
+
+yocto-docs
+
+- Repository Location: :yocto_git:`/yocto-docs`
+- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
+- Tag: :yocto_git:`yocto-4.0.18 </yocto-docs/log/?h=yocto-4.0.18>`
+- Git Revision: :yocto_git:`fd1423141e7458ba557db465c171b0b4e9063987 </yocto-docs/commit/?id=fd1423141e7458ba557db465c171b0b4e9063987>`
+