From patchwork Wed Jan 15 07:28:34 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: "Lee, Chee Yang" X-Patchwork-Id: 55550 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2A8C3C02180 for ; Wed, 15 Jan 2025 07:29:57 +0000 (UTC) Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.19]) by mx.groups.io with SMTP id smtpd.web11.15912.1736926194174026764 for ; Tue, 14 Jan 2025 23:29:54 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@intel.com header.s=Intel header.b=QiTGCKCs; spf=pass (domain: intel.com, ip: 198.175.65.19, mailfrom: chee.yang.lee@intel.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1736926194; x=1768462194; h=from:to:subject:date:message-id:mime-version: content-transfer-encoding; bh=/+JAeIO2h9JxDdx6x2eHVQnTN3tsLsIVj4HOvOhX9IU=; b=QiTGCKCscR2YsyZH1/hgHPEZcAvdiOcC1SI3WZvTQ0osEQ61V7nMt5Xj /wq8THNiO9CU87bIorh3mlOUN/rFhk3YY3zWmqShEV/4rq3oPEQww8Uhq ODot2AT5lbbi76HdrBNdywOl3NkTi5eL4LiocTRoDUPK2WS27byaAMAyh zOPfGaT+yjurvptjiXQ5CDHap9XGjDrBixV7kr9vSKRwQQnmNXrRoe8Ff JWnvuZ1eD1KS1g6XQ8MxqNYzBIEpArsfrkpd6WSup5uHIdS5Iby7TCUo8 Isx0geXrT6Z/FBYLDF689ziKAEBaxOD7y65ZhzeA30o61OR7sNYWMTTXx w==; X-CSE-ConnectionGUID: Gto39x02S+yl+3ygWeNpxA== X-CSE-MsgGUID: B0fo49FSTAKaafyGvft5iQ== X-IronPort-AV: E=McAfee;i="6700,10204,11315"; a="37127438" X-IronPort-AV: E=Sophos;i="6.12,316,1728975600"; d="scan'208";a="37127438" Received: from fmviesa005.fm.intel.com ([10.60.135.145]) by orvoesa111.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 14 Jan 2025 23:29:53 -0800 X-CSE-ConnectionGUID: D8wMvABPSDSfpzJfiQ+h8g== X-CSE-MsgGUID: ci8JJHZHQdK5d5DwdEjK1A== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.12,224,1728975600"; d="scan'208";a="109668224" Received: from cheeyang-desk1.png.intel.com ([10.107.249.127]) by fmviesa005.fm.intel.com with ESMTP; 14 Jan 2025 23:29:52 -0800 From: chee.yang.lee@intel.com To: docs@lists.yoctoproject.org Subject: [PATCH] migration-guides: add release notes for 5.0.6 Date: Wed, 15 Jan 2025 15:28:34 +0800 Message-Id: <20250115072834.3563904-1-chee.yang.lee@intel.com> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 15 Jan 2025 07:29:57 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/docs/message/6112 From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- .../migration-guides/release-5.0.rst | 1 + .../migration-guides/release-notes-5.0.6.rst | 223 ++++++++++++++++++ 2 files changed, 224 insertions(+) create mode 100644 documentation/migration-guides/release-notes-5.0.6.rst diff --git a/documentation/migration-guides/release-5.0.rst b/documentation/migration-guides/release-5.0.rst index 9169188e9..4f92c4940 100644 --- a/documentation/migration-guides/release-5.0.rst +++ b/documentation/migration-guides/release-5.0.rst @@ -12,3 +12,4 @@ Release 5.0 (scarthgap) release-notes-5.0.3 release-notes-5.0.4 release-notes-5.0.5 + release-notes-5.0.6 diff --git a/documentation/migration-guides/release-notes-5.0.6.rst b/documentation/migration-guides/release-notes-5.0.6.rst new file mode 100644 index 000000000..b6f42198a --- /dev/null +++ b/documentation/migration-guides/release-notes-5.0.6.rst @@ -0,0 +1,223 @@ +Release notes for Yocto-5.0.6 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- acpica: Fix :cve_nist:`2024-24856` +- curl: Fix :cve_nist:`2024-9681` +- dropbear: Fix :cve_nist:`2023-48795` +- expat: Fix :cve_nist:`2024-50602` +- ffmpeg: Fix :cve_nist:`2023-49501`, :cve_nist:`2023-49528`, :cve_nist:`2023-50007`, + :cve_nist:`2024-7055` and :cve_mitre:`2024-28661` +- glib-2.0: Fix :cve_nist:`2024-52533` +- ghostscript: Fix :cve_nist:`2024-46951`, :cve_nist:`2024-46952`, :cve_nist:`2024-46953`, + :cve_nist:`2024-46954`, :cve_nist:`2024-46955` and :cve_nist:`2024-46956` +- gstreamer1.0: Ignore :cve_nist:`2024-0444` +- libpam: Fix :cve_nist:`2024-10041` +- libsndfile: Fix :cve_nist:`2024-50612` +- libsoup: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531` and :cve_nist:`2024-52532` +- ovmf: Fix :cve_nist:`2024-1298` and :cve_nist:`2024-38796` +- python3-zipp: Fix :cve_nist:`2024-5569` +- qemu: Fix :cve_nist:`2024-4693`, :cve_nist:`2024-6505` and :cve_nist:`2024-7730` +- qemu: Ignore :cve_nist:`2024-6505` + + +Fixes in Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~ + +- binutils: Add missing perl modules to :term:`RDEPENDS` for nativesdk variant +- binutils: stable 2.42 branch update +- bitbake: Remove custom exception backtrace formatting +- bitbake: fetch2/git: Use quote from shlex, not pipes +- bitbake: fetch2: use persist_data context managers +- bitbake: fetch/wget: Increase timeout to 100s from 30s +- bitbake: persist_data: close connection in SQLTable __exit__ +- bitbake: runqueue: Fix performance of multiconfigs with large overlap +- bitbake: runqueue: Fix scenetask processing performance issue +- bitbake: runqueue: Optimise setscene loop processing +- build-appliance-image: Update to scarthgap head revision +- builder: set :term:`CVE_PRODUCT` +- cmake: Fix sporadic issues when determining compiler internals +- cml1: do_diffconfig: Don't override .config with .config.orig +- contributor-guide: Remove duplicated words +- dev-manual: bblock: use warning block instead of attention +- dev-manual: document how to provide confs from layer.conf +- dnf: drop python3-iniparse from :term:`DEPENDS` and :term:`RDEPENDS` +- do_package/sstate/sstatesig: Change timestamp clamping to hash output only +- doc: Makefile: add support for xelatex +- doc: Makefile: publish pdf and epub versions too +- doc: Makefile: remove inkscape, replace by rsvg-convert +- doc: add a download page for epub and pdf +- doc: conf.py: add a bitbake_git extlink +- doc: standards.md: add a section on admonitions +- doc: sphinx-static: switchers.js.in: do not refer to URL_ROOT anymore +- dropbear: backport fix for concurrent channel open/close +- enchant2: fix do_fetch error +- expat: upgrade to 2.6.4 +- gcc: backport patch to fix an issue with tzdata 2024b +- ghostscript: upgrade to 10.04.0 +- glibc: stable 2.39 branch updates +- groff: fix rare build race in hdtbl +- libgcrypt: Fix building error with '-O2' in sysroot path +- libpam: drop cracklib from :term:`DEPENDS` +- libxml-parser-perl: fix do_fetch error +- llvm: reduce size of -dbg package +- lttng-ust: backport patch to fix cmake-multiple-shared-libraries build error +- migration-guides: add release notes for 4.0.23 and 5.0.5 +- ninja: fix build with python 3.13 +- oeqa/runtime/ssh: Fix incorrect timeout fix +- oeqa/runtime/ssh: Rework ssh timeout +- oeqa/utils/gitarchive: Return tag name and improve exclude handling +- package_rpm: Check if file exists before open() +- package_rpm: restrict rpm to 4 threads +- package_rpm: use zstd's default compression level +- poky.conf: bump version for 5.0.6 +- pseudo: Fix envp bug and add posix_spawn wrapper +- python3-poetry-core: drop python3-six from :term:`RDEPENDS` +- python3-requests: upgrade to 2.32.2 +- python3-urllib3: upgrade to 2.2.2 +- qemu: upgrade to 8.2.7 +- qemurunner: Clean up serial_lock handling +- ref-manual: classes: fix bin_package description +- resulttool: Add --logfile-archive option to store mode +- resulttool: Allow store to filter to specific revisions +- resulttool: Clean up repoducible build logs +- resulttool: Fix passthrough of --all files in store mode +- resulttool: Handle ltp rawlogs as well as ptest +- resulttool: Improve repo layout for oeselftest results +- resulttool: Trim the precision of duration information +- resulttool: Use single space indentation in json output +- rootfs: Ensure run-postinsts is not uninstalled for read-only-rootfs-delayed-postinsts +- rxvt-unicode.inc: disable the terminfo installation by setting TIC to : +- sanity: check for working user namespaces +- scripts/install-buildtools: Update to 5.0.5 +- selftest/reproducible: Clean up pathnames +- selftest/reproducible: Drop rawlogs +- shared-mime-info: drop itstool-native from :term:`DEPENDS` +- strace: download release tarballs from GitHub +- systemd-boot: drop intltool-native from :term:`DEPENDS` +- systemd: drop intltool-native from :term:`DEPENDS` +- systemd: upgrade to 255.13 +- sysvinit: backport patch for fixing one issue of pidof +- tcl: skip io-13.6 test case +- toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails +- tune-cortexa32: set tune feature as armv8a +- tzcode-native: upgrade to 2024b +- tzdata: upgrade to 2024b +- uboot-sign: fix concat_dtb arguments +- udev-extraconf: fix network.sh script did not configure hotplugged interfaces +- webkitgtk: fix erroneous use of unsuported DEBUG_LEVELFLAG variable +- wireless-regdb: upgrade to 2024.10.07 + + +Known Issues in Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Aleksandar Nikolic +- Alexander Kanavin +- Antonin Godard +- Archana Polampalli +- Bin Lan +- Changqing Li +- Chen Qi +- Chris Laplante +- Clayton Casciato +- Deepthi Hemraj +- Divya Chellam +- Florian Kreutzer +- Gassner, Tobias.ext +- Guðni Már Gilbert +- Harish Sadineni +- Hitendra Prajapati +- Hongxu Jia +- Jagadeesh Krishnanjanappa +- Jiaying Song +- Jinfeng Wang +- Joshua Watt +- Lee Chee Yang +- Markus Volk +- Michael Opdenacker +- Pavel Zhukov +- Peter Marko +- Philip Lorenz +- Randy MacLeod +- Regis Dargent +- Richard Purdie +- Robert Yang +- Ross Burton +- Soumya Sambu +- Steve Sakoman +- Talel BELHAJSALEM +- Trevor Gamblin +- Vijay Anusuri +- Wang Mingyu +- Yogita Urade + + +Repositories / Downloads for Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.6 ` +- Git Revision: :yocto_git:`2541a8171f91812a4b16e7dc4da0d77d2318a256 ` +- Release Artefact: poky-2541a8171f91812a4b16e7dc4da0d77d2318a256 +- sha: b77157596ae75d163387a08a317397a57ab8fa6cf4725f28e344fae3f69cca4d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap ` +- Tag: :oe_git:`yocto-5.0.6 ` +- Git Revision: :oe_git:`336eec6808710f260a5336ca8ca98139a80ccb14 ` +- Release Artefact: oecore-336eec6808710f260a5336ca8ca98139a80ccb14 +- sha: 38c4fa7e7e88c28361c012dd5baabe373e2ec3c8aba6194146768b146192cceb +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.6 ` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 ` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 ` +- Tag: :oe_git:`yocto-5.0.6 ` +- Git Revision: :oe_git:`f40a3a477d5241b697bf2fb030dd804c1ff5839f ` +- Release Artefact: bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f +- sha: dbfc056c7408a5547f624799621ab1261a05685112e0922a88007723b1edbc87 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap ` +- Tag: :yocto_git:`yocto-5.0.6 ` +- Git Revision: :yocto_git:`TBD ` +