@@ -10,3 +10,4 @@ Release 5.0 (scarthgap)
release-notes-5.0.1
release-notes-5.0.2
release-notes-5.0.3
+ release-notes-5.0.4
new file mode 100644
@@ -0,0 +1,212 @@
+.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
+
+Release notes for Yocto-5.0.4 (Scarthgap)
+-----------------------------------------
+
+Security Fixes in Yocto-5.0.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- apr: Fix :cve:`2023-49582`
+- curl: Ignore :cve:`2024-32928`
+- curl: Fix :cve:`2024-7264`
+- expat: Fix :cve:`2024-45490`, :cve:`2024-45491` and :cve:`2024-45492`
+- ffmpeg: Fix :cve:`2023-50008` and :cve:`2024-32230`
+- libpcap: Fix :cve:`2023-7256` and :cve:`2024-8006`
+- libyaml: Ignore :cve:`2024-35325` and :cve:`2024-35326`
+- openssl: Fix :cve:`2024-5535` and :cve:`2024-6119`
+- python3-certifi: Fix :cve:`2024-39689`
+- python3-setuptools: Fix :cve:`2024-6345`
+- python3: Fix :cve:`2024-6232`, :cve:`2024-7592`, :cve:`2024-8088` and :cve:`2024-27034`
+- qemu: Fix :cve:`2024-4467` and :cve:`2024-7409`
+- ruby: Fix :cve:`2024-27282`
+- tiff: Fix :cve:`2024-7006`
+- vim: Fix :cve:`2024-41957`, :cve:`2024-41965`, :cve:`2024-43374`, :cve:`2024-43790` and :cve:`2024-43802`
+
+
+Fixes in Yocto-5.0.4
+~~~~~~~~~~~~~~~~~~~~
+
+- apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch
+- apr: upgrade to 1.7.5
+- bind: Fix build with the `httpstats` package config enabled
+- bitbake: data_smart: Improve performance for VariableHistory
+- bluez5: remove redundant patch for MAX_INPUT
+- build-appliance-image: Update to scarthgap head revision
+- buildhistory: Fix intermittent package file list creation
+- buildhistory: Restoring files from preserve list
+- buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage
+- busybox: Fix cut with "-s" flag
+- create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc
+- cups: upgrade to 2.4.10
+- dejagnu: Fix :term:`LICENSE` (change to GPL-3.0-only)
+- doc: features: describe distribution feature pni-name
+- doc: features: remove duplicate word in distribution feature ext2
+- expat: upgrade to 2.6.3
+- expect-native: fix do_compile failure with gcc-14
+- gcc: Fix spurious '/' in GLIBC_DYNAMIC_LINKER on microblaze
+- gcr: Fix :term:`LICENSE` (change to LGPL-2.0-only)
+- glibc: fix fortran header file conflict for arm
+- go: upgrade to 1.22.6
+- gstreamer1.0: disable flaky baseparser tests
+- image_types.bbclass: Use --force also with lz4,lzop
+- initramfs-framework: fix typos
+- iw: Fix :term:`LICENSE` (change to ISC)
+- libadwaita: upgrade to 1.5.2
+- libcap-ng: update :term:`SRC_URI`
+- libdnf: upgrade to 0.73.2
+- libedit: Make docs generation deterministic
+- libgfortran.inc: fix nativesdk-libgfortran dependencies
+- librsvg: don't try to run target code at build time
+- linux-firmware: add a package for ath12k firmware
+- llvm: Enable libllvm for native build
+- maintainers.inc: add maintainer for python(-setuptools, -smmap, -subunit, -testtools)
+- mc: fix source URL
+- migration-guide: add release notes for 4.0.20 and 5.0.3
+- oeqa/postactions: fix exception handling
+- oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM)
+- oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems
+- oeqa/runtime/ssh: check for all errors at the end
+- oeqa/runtime/ssh: increase the number of attempts
+- oeqa/selftest/reproducibile: Explicitly list virtual targets
+- oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies
+- openssh: add backported header file include
+- openssl: upgrade to 3.2.3
+- os-release: Fix VERSION_CODENAME in case it is empty
+- poky.conf: bump version for 5.0.4
+- populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported.
+- python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc
+- python3-pycryptodome(x): use python_setuptools_build_meta build class
+- python3: upgrade to 3.12.6
+- python3: skip readline limited history tests
+- qemu: backport patches to fix riscv64 build failure
+- qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath
+- ref-manual: fix typo and move :term:`SYSROOT_DIRS` example
+- ruby: Make docs generation deterministic
+- systemd: Mitigate /var/log type mismatch issue
+- systemd: Mitigate /var/tmp type mismatch issue
+- tiff: Fix :term:`LICENSE` (change to libtiff)
+- u-boot.inc: Refactor do_* steps into functions that can be overridden
+- udev-extraconf: Add collect flag to mount
+- unzip: Fix :term:`LICENSE` (change to Info-ZIP)
+- util-linux: Add :term:`PACKAGECONFIG` option (libmount-mountfd-support) to mitigate rootfs remount error
+- vim: upgrade to 9.1.0698
+- weston-init: fix weston not starting when xwayland is enabled
+- wireless-regdb: upgrade to 2024.07.04
+- wpa-supplicant: upgrade to 2.11
+- xserver-xorg: mark :cve:`2023-5574` as unpatched when xvfb enabled
+- yocto-uninative: Update to 4.6 for glibc 2.40
+- zip: Fix :term:`LICENSE` (change to Info-ZIP)
+
+
+Known Issues in Yocto-5.0.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- N/A
+
+
+Contributors to Yocto-5.0.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- Alban Bedel
+- Alexander Kanavin
+- Alexis Lothoré
+- Archana Polampalli
+- Ashish Sharma
+- Bartosz Golaszewski
+- Benjamin Szőke
+- Changqing Li
+- Chen Qi
+- Colin McAllister
+- Daniel Semkowicz
+- Dmitry Baryshkov
+- Gauthier HADERER
+- Guðni Már Gilbert
+- Jon Mason
+- Jose Quaresma
+- Jörg Sommer
+- Kai Kang
+- Khem Raj
+- Lee Chee Yang
+- Mark Hatle
+- Martin Jansa
+- Matthias Pritschet
+- Michael Halstead
+- Mingli Yu
+- Niko Mauno
+- Pedro Ferreira
+- Peter Marko
+- Quentin Schulz
+- Richard Purdie
+- Robert Yang
+- Ross Burton
+- Ryan Eatmon
+- Siddharth Doshi
+- Simone Weiß
+- Soumya Sambu
+- Steve Sakoman
+- Trevor Gamblin
+- Ulrich Ölmann
+- Vijay Anusuri
+- Wang Mingyu
+- Weisser, Pascal.ext
+- Yogita Urade
+
+
+Repositories / Downloads for Yocto-5.0.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+poky
+
+- Repository Location: :yocto_git:`/poky`
+- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
+- Tag: :yocto_git:`yocto-5.0.4 </poky/log/?h=yocto-5.0.4>`
+- Git Revision: :yocto_git:`2034fc38eb4e63984d9bd6b260aa1bf95ce562e4 </poky/commit/?id=2034fc38eb4e63984d9bd6b260aa1bf95ce562e4>`
+- Release Artefact: poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4
+- sha: 697ed099793d6c86d5ffe590e96f99689bd28dcb2d4451dc4585496fa4a20400
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2
+
+openembedded-core
+
+- Repository Location: :oe_git:`/openembedded-core`
+- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
+- Tag: :oe_git:`yocto-5.0.4 </openembedded-core/log/?h=yocto-5.0.4>`
+- Git Revision: :oe_git:`f888dd911529a828820799a7a1b75dfd3a44847c </openembedded-core/commit/?id=f888dd911529a828820799a7a1b75dfd3a44847c>`
+- Release Artefact: oecore-f888dd911529a828820799a7a1b75dfd3a44847c
+- sha: 93cb4c3c8e0f77edab20814d155847dc3452c6b083e3dd9c7a801e80a7e4d228
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2
+
+meta-mingw
+
+- Repository Location: :yocto_git:`/meta-mingw`
+- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
+- Tag: :yocto_git:`yocto-5.0.4 </meta-mingw/log/?h=yocto-5.0.4>`
+- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>`
+- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852
+- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2
+
+bitbake
+
+- Repository Location: :oe_git:`/bitbake`
+- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
+- Tag: :oe_git:`yocto-5.0.4 </bitbake/log/?h=yocto-5.0.4>`
+- Git Revision: :oe_git:`d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3 </bitbake/commit/?id=d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3>`
+- Release Artefact: bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3
+- sha: d873f4d3a471d26680dc39200d8f3851a6863f15daa9bed978ba31b930f9a1c1
+- Download Locations:
+ http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2
+ http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2
+
+yocto-docs
+
+- Repository Location: :yocto_git:`/yocto-docs`
+- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
+- Tag: :yocto_git:`yocto-5.0.4 </yocto-docs/log/?h=yocto-5.0.4>`
+- Git Revision: :yocto_git:`d71081dd14a9d75ace4d1c62472374f37b4a888d </yocto-docs/commit/?id=d71081dd14a9d75ace4d1c62472374f37b4a888d>`
+