diff options
| author | Andrew Geissler <geissonator@yahoo.com> | 2025-11-03 19:09:31 +0300 |
|---|---|---|
| committer | Andrew Geissler <geissonator@yahoo.com> | 2025-11-03 22:31:57 +0300 |
| commit | 6cb7f76381dbeb50bbf963f9192344f02d985637 (patch) | |
| tree | e194737ad2b6c562f463cc7a22116ef4aebd1232 /poky/documentation | |
| parent | 1f52643312f6f67537eb27bef9156e8b8bc66040 (diff) | |
| download | openbmc-scarthgap.tar.xz | |
subtree updates (scarthgap 11/3/2025)scarthgap
poky: ca27724b44..c4a4df3e72:
Adam Blank (3):
kernel-dev/common.rst: fix the in-tree defconfig description
ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG
ref-manual/variables.rst: fix the description of STAGING_DIR
Aditya Tayade (1):
e2fsprogs: removed 'sed -u' option
Adrian Freihofer (15):
kernel-fitimage: fix intentation
kernel-fitimage: fix external dtb check
devtool: modify support debug-builds
devtool: ide-sdk sort cmake preset
devtool: ide-sdk recommend DEBUG_BUILD
oe-selftest: devtool ide-sdk use modify debug-build
devtool: ide-sdk remove the plugin from eSDK installer
uboot-config: fix devtool modify with kernel-fitimage
sdk-manual: extensible.rst: devtool ide-sdk improve
sdk-manual: extensible.rst: update devtool ide-sdk
ref-manual: kernel-fitimage.bbclass does not use SPL_SIGN_KEYNAME
llvm: update from 18.1.6 to 18.1.8
llvm: fix build with gcc-15
expect: Revert "expect-native: fix do_compile failure with gcc-14"
expect: fix native build with GCC 15
Alban Bedel (1):
bind: Fix build with the `httpstats` package config enabled
Aleksandar Nikolic (12):
cve-check: Introduce CVE_CHECK_MANIFEST_JSON_SUFFIX
install-buildtools: remove md5 checksum validation
install-buildtools: fix "test installation" step
install-buildtools: update base-url, release and installer version
ref-manual: introduce CVE_CHECK_REPORT_PATCHED variable
scripts/install-buildtools: Update to 5.0.5
scripts/install-buildtools: Update to 5.0.6
scripts/install-buildtools: Update to 5.0.7
scripts/install-buildtools: Update to 5.0.9
scripts/install-buildtools: Update to 5.0.10
scripts/install-buildtools: Update to 5.0.11
scripts/install-buildtools: Update to 5.0.12
Alessio Cascone (1):
tzcode-native: Fix compiler setting from 2023d version
Alexander Kanavin (29):
mesa: remove obsolete 0001-meson.build-check-for-all-linux-host_os-combinations.patch
kexec-tools: submit 0003-kexec-ARM-Fix-add_buffer_phys_virt-align-issue.patch upstream
vorbis: mark patch as Inactive-Upstream
grub: mark grub-module-explicitly-keeps-symbole-.module_license.patch as a workaround
perl: submit the rest of determinism.patch upstream
iptables: submit 0001-configure-Add-option-to-enable-disable-libnfnetlink.patch upstream
xserver-xorg: upgrade 21.1.12 -> 21.1.13
mobile-broadband-provider-info: upgrade 20230416 -> 20240407
python3: submit deterministic_imports.patch upstream as a ticket
glib-networking: submit eagain.patch upstream
glslang: mark 0001-generate-glslang-pkg-config.patch as Inappropriate
tcp-wrappers: mark all patches as inactive-upstream
automake: mark new_rt_path_for_test-driver.patch as Inappropriate
settings-daemon: submit addsoundkeys.patch upstream and update to a revision that has it
dpkg: mark patches adding custom non-debian architectures as inappropriate for upstream
libacpi: mark patches as inactive-upstream
apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch
pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI
sysvinit: take release tarballs from github
package_rpm: use zstd's default compression level
package_rpm: restrict rpm to 4 threads
rust: add reproducibility patch to eliminate host leakage
rust: build the default set of tools
rust: use rust-snapshot binaries only in rust-native
rust: correctly link rust-snapshot into build/stage0
pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH
selftest/rust: correctly form the PATH environment variable
perlcross: update 1.5.2 -> 1.6
mtools: upgrade 4.0.43 -> 4.0.44
Alexis Cellier (1):
systemd: add libpcre2 as RRECOMMENDS if pcre2 is enabled
Alexis Lothoré (3):
oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies
oeqa/postactions: fix exception handling
oeqa/ssh: allow to retrieve raw, unformatted ouput
Alon Bar-Lev (1):
module.bbclass: add KBUILD_EXTRA_SYMBOLS to install
Alper Ak (2):
ref-manual/variables.rst: document INHIBIT_DEFAULT_RUST_DEPS
ref-manual/variables.rst: document INHIBIT_UPDATERCD_BBCLASS
Anders Heimer (1):
libpam: mark CVE-2025-6018 as not applicable
Andrew Fernandes (1):
gtk+: add missing libdrm dependency
Andrew Kreimer (1):
manuals: remove repeated word
Antonin Godard (77):
ref-manual: add missing CVE_CHECK manifest variables
ref-manual: add missing TESTIMAGE_FAILED_QA_ARTIFACTS
ref-manual: add missing EXTERNAL_KERNEL_DEVICETREE variable
ref-manual: add missing OPKGBUILDCMD variable
ref-manual: merge patch-status-* to patch-status
ref-manual: structure.rst: document missing tmp/ dirs
overview-manual: concepts: add details on package splitting
ref-manual: faq: add q&a on class appends
ref-manual: release-process: update releases.svg
ref-manual: release-process: refresh the current LTS releases
ref-manual: release-process: update releases.svg with month after "Current"
ref-manual: release-process: add a reference to the doc's release
ref-manual: devtool-reference: refresh example outputs
ref-manual: devtool-reference: document missing commands
conf.py: rename :cve: role to :cve_nist:
doc: Makefile: remove inkscape, replace by rsvg-convert
doc: Makefile: add support for xelatex
doc: add a download page for epub and pdf
sphinx-static/switchers.js.in: do not refer to URL_ROOT anymore
conf.py: add a bitbake_git extlink
dev-manual: document how to provide confs from layer.conf
dev-manual: bblock: use warning block instead of attention
standards.md: add a section on admonitions
ref-manual: classes: fix bin_package description
Gather dependencies in poky.yaml.in
poky.yaml.in: add missing locales dependency
poky.yaml.in: replace inkscape dependency by librsvg2-bin
system-requirements: add fedora 39 to supported distros
system-requirements: update list of supported distros
system-requirements.rst: add dependencies for pdf builds
Update the documentation for SRCPV
poky.conf: add new tested distros
ref-manual/qa-checks: remove patch-status-core/patch-status-noncore
contributor-guide/submit-changes.rst: suggest to remove the git signature
ref-manual/devtool-reference: add warning note on deploy-target and shared objects
SSTATE_MIRRORS/SOURCE_MIRROR_URL: add instructions for mirror authentication
ref-manual/packages: move ptest section to the test-manual
ref-manual: move runtime-testing section to the test-manual
Update autobuilder URLs to valkyrie
test-manual/reproducible-builds: fix reproducible links
test-manual/ptest: link to common framework ptest classes
dev-manual/building: document the initramfs-framework recipe
ref-manual/faq: add q&a on systemd as default
contributor-guide/submit-changes: add policy on AI generated code
Add favicon for the documentation html
overview-manual/concepts: remove PR from the build dir list
ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name
ref-manual/variables.rst: document autotools class related variables
documentation/conf.py: define a manpage url
ref-manual/variables.rst: add manpage links for toolchain variables
ref-manual/variables.rst: add missing documentation for BUILD_* variables
ref-manual/variables.rst: document missing SDK_*_ARCH variables
ref-manual/variables.rst: document HOST_*_ARCH variables
ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference
ref-manual/variables.rst: improve the PKGV documentation
poky.yaml: introduce DISTRO_LATEST_TAG
Fix dead links that use the DISTRO macro
dev-manual/sbom.rst: fix wrong build outputs
test-manual/intro: remove Buildbot version used
ref-manual/release-process: update releases.svg
overview-manual/concepts.rst: fix sayhello hardcoded bindir
ref-manual/system-requirements.rst: update supported distributions
ref-manual/variables.rst: document the FIT_CONF_PREFIX variable
ref-manual/variables.rst: document SPL_DTB_BINARY
ref-manual/classes.rst: document the testexport class
dev-manual/security-subjects.rst: update mailing lists
test-manual/yocto-project-compatible.rst: fix a typo
ref-manual/structure: document the auto.conf file
ref-manual/variables.rst: document UNINATIVE_URL/CHECKSUM
ref-manual/classes.rst: extend the uninative class documentation
ref-manual/classes,variables: document the CCACHE_DISABLE variable
ref-manual/variables.rst: document the REQUIRED_MACHINE_FEATURES variable
ref-manual/variables.rst: document the REQUIRED_COMBINED_FEATURES variable
ref-manual/variables.rst: document the REQUIRED_IMAGE_FEATURES variable
ref-manual/variables.rst: document the USE_NLS variable
ref-manual/classes.rst: gettext: extend the documentation of the class
ref-manual/classes.rst: document the relative_symlinks class
Anuj Mittal (1):
sqlite3: upgrade 3.45.1 -> 3.45.3
Archana Polampalli (51):
less: fix CVE-2024-32487
ofono: fix CVE-2023-2794
ffmpeg: fix CVE-2023-49502
ffmpeg: fix CVE-2024-31578
ffmpeg: fix CVE-2024-31582
ffmpeg: fix CVE-2023-50008
ffmpeg: fix CVE-2024-32230
qemu: fix CVE-2024-7409
ffmpeg: fix CVE-2023-49501
ffmpeg: fix CVE-2024-28661
ffmpeg: fix CVE-2023-50007
ffmpeg: fix CVE-2023-49528
ffmpeg: fix CVE-2024-7055
ffmpeg: fix CVE-2024-35366
ffmpeg: fix CVE-2024-35367
ffmpeg: fix CVE-2024-35368
rsync: fix CVE-2024-12084
rsync: fix CVE-2024-12085
rsync: fix CVE-2024-12086
rsync: fix CVE-2024-12087
rsync: fix CVE-2024-12088
rsync: fix CVE-2024-12747
ffmpeg: fix CVE-2024-35365
ffmpeg: fix CVE-2024-36613
ffmpeg: fix CVE-2024-36616
ffmpeg: fix CVE-2024-36617
ffmpeg: fix CVE-2024-36618
ffmpeg: fix CVE-2024-36619
ffmpeg: fix CVE-2024-35369
gstreamer1.0-rtsp-server: fix CVE-2024-44331
ffmpeg: fix CVE-2025-25473
ffmpeg: fix CVE-2025-25471
ffmpeg: fix CVE-2025-22921
ffmpeg: fix CVE-2025-0518
ffmpeg: Correct the CVE ID to fix CVE-2025-22919
openssh: fix CVE-2025-26465
go: fix CVE-2025-22870
ghostscript: upgrade 10.04.0 -> 10.05.0
perlcross: 1.6 -> 1.6.2
perl: upgrade 5.38.2 -> 5.38.4
xwayland: fix CVE-2025-49175
xwayland: fix CVE-2025-49176
xwayland: fix CVE-2025-49177
xwayland: fix CVE-2025-49178
xwayland: fix CVE-2025-49179
xwayland: fix CVE-2025-49180
gdk-pixbuf: fix CVE-2025-7345
go: fix CVE-2025-4674
ffmpeg: upgrade 6.1.2 -> 6.1.3
ffmpeg: fix CVE-2025-1594
go: fix CVE-2025-47906
Ashish Sharma (11):
bind: Upgrade 9.18.25 -> 9.18.28
ruby: Backport fix for CVE-2024-27282
ruby: Fix CVE-2025-27219
binutils: Fix CVE-2025-1176
binutils: patch CVE-2025-1178 & CVE-2024-57360
binutils: patch CVE-2025-1181
binutils: patch CVE-2025-1182
libsoup: patch CVE-2025-46420
libsoup-2.4: Fix CVE-2025-46420
libsoup: patch CVE-2025-4476
screen: patch CVE-2025-46805
AshishKumar Mishra (2):
systemd: backport fix for handle USE_NLS from master
p11-kit: backport fix for handle USE_NLS from master
Barne Carstensen (1):
test-manual: update runtime-testing Exporting Tests section
Bartosz Golaszewski (1):
linux-firmware: add a package for ath12k firmware
Benjamin Szőke (2):
archiver.bbclass: Fix work-shared checking for kernel recipes
mc: fix source URL
Bin Lan (1):
lttng-ust: backport patch to fix cmake-multiple-shared-libraries build error
Bruce Ashfield (54):
linux-yocto/6.6: update to v6.6.36
linux-yocto/6.6: update to v6.6.38
linux-yocto/6.6: update to v6.6.40
linux-yocto/6.6: update to v6.6.43
kernel-devsrc: remove 64 bit vdso cmd files
linux-yocto/6.6: update to v6.6.44
linux-yocto/6.6: update to v6.6.45
linux-yocto/6.6: fix genericarm64 config warning
linux-yocto/6.6: update to v6.6.47
linux-yocto/6.6: update to v6.6.49
linux-yocto/6.6: update to v6.6.50
linux-yocto/6.6: update to v6.6.52
linux-yocto/6.6: update to v6.6.54
linux-yocto/6.6: update to v6.6.56
linux-yocto/6.6: update to v6.6.58
linux-yocto/6.6: genericarm64.cfg: enable CONFIG_DMA_CMA
linux-yocto/6.6: update to v6.6.59
linux-yocto/6.6: update to v6.6.60
linux-yocto/6.6: update to v6.6.62
linux-yocto/6.6: bsp/genericarm64: disable ARM64_SME
linux-yocto/6.6: update to v6.6.63
linux-yocto/6.6: update to v6.6.64
linux-yocto/6.6: update to v6.6.66
linux-yocto/6.6: update to v6.6.69
linux-yocto/6.6: update to v6.6.75
linux-yocto/6.6: update to v6.6.77
linux-yocto/6.6: update to v6.6.78
linux-yocto/6.6: update to v6.6.80
linux-yocto/6.6: update to v6.6.82
linux-yocto/6.6: update to v6.6.83
linux-yocto/6.6: update to v6.6.84
linux-yocto/6.6: update to v6.6.85
linux-yocto/6.6: fix beaglebone ethernet
linux-yocto/6.6: update to v6.6.86
linux-yocto/6.6: update to v6.6.87
linux-yocto/6.6: update to v6.6.88
linux-yocto/6.6: update to v6.6.89
linux-yocto/6.6: update to v6.6.91
linux-yocto/6.6: update to v6.6.92
linux-yocto/6.6: update to v6.6.93
linux-yocto/6.6: update to v6.6.94
linux-yocto/6.6: update to v6.6.96
linux-yocto/6.6: update to v6.6.98
linux-yocto/6.6: update to v6.6.99
linux-yocto/6.6: update to v6.6.100
linux-yocto/6.6: update to v6.6.101
linux-yocto/6.6: update to v6.6.102
linux-yocto/6.6: update to v6.6.103
linux-yocto/6.6: update to v6.6.106
linux-yocto/6.6: update to v6.6.107
linux-yocto/6.6: update to v6.6.108
linux-yocto/6.6: update to v6.6.109
linux-yocto/6.6: update to v6.6.110
linux-yocto/6.6: update to v6.6.111
Carlos Alberto Lopez Perez (1):
icu: Backport patch to fix build issues with long paths (>512 chars)
Carlos Sánchez de La Lama (1):
ref-manual: clarify KCONFIG_MODE default behaviour
Catalin Popescu (1):
Revert "bluez5: remove configuration files from install task"
Changqing Li (48):
apt-native: don't let dpkg overwrite files by default
apt: runtime error: filename too long (tmpdir length)
webkitgtk: fix do_configure error on beaglebone-yocto
webkitgtk: fix do_compile errors on beaglebone-yocto
vulkan-samples: fix do_compile error when -Og enabled
multilib.conf: remove appending to PKG_CONFIG_PATH
gettext: fix a parallel build issue
pixman: fixing inline failure with -Og
rt-tests: rt_bmark.py: fix TypeError
curl: correct the PACKAGECONFIG for native/nativesdk
libpng: update SRC_URI
expect-native: fix do_compile failure with gcc-14
libcap-ng: update SRC_URI
sysvinit: backport patch for fixing one issue of pidof
acpica: fix CVE-2024-24856
libsoup: fix CVE-2024-52530, CVE-2024-52531
rxvt-unicode.inc: disable the terminfo installation by setting TIC to :
sanity.bbclass: skip check_userns for non-local uid
systemd: enable create-log-dirs
babeltrace: extend to nativesdk
babeltrace2: extend to nativesdk
patch.py: set commituser and commitemail for addNote
initscripts: add function log_success_msg/log_failure_msg/log_warning_msg
buildtools-tarball: move setting of envvars to respective envfile
buildtools-tarball: add envvars into BB_ENV_PASSTHROUGH_ADDITIONS
buildtools-tarball: Make buildtools respects host CA certificates
libsoup: fix CVE-2025-32908
libsoup: fix CVE-2025-32907
libsoup-2.4: fix CVE-2025-32907
libsoup-2.4: fix do_compile failure
libsoup-2.4: fix CVE-2025-32053
libsoup: fix CVE-2025-32053
libsoup-2.4: fix CVE-2025-32052
libsoup: fix CVE-2025-32052
libsoup: fix CVE-2025-32051
libsoup-2.4: fix CVE-2025-32050
libsoup: fix CVE-2025-32050
libsoup-2.4: fix CVE-2025-46421
libsoup: fix CVE-2025-46421
libsoup-2.4: fix CVE-2025-4948
libsoup: fix CVE-2025-4948
libsoup-2.4: fix CVE-2025-4476
libsoup-2.4: fix CVE-2025-2784
libsoup: fix CVE-2025-2784
icu: fix CVE-2025-5222
libsoup-2.4: refresh CVE-2025-4969.patch
libsoup-2.4: fix CVE-2025-4945
libsoup: fix CVE-2025-4945
Chen Qi (8):
libnl: change HOMEPAGE
qemu: back port patches to fix riscv64 build failure
toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails
libgfortran: fix buildpath QA issue
bitbake: data_smart.py: remove unnecessary ? from __expand_var_regexp__
bitbake: data_smart.py: simple clean up
bitbake: data_smart.py: clear expand_cache in _setvar_update_overridevars
coreutils: fix CVE-2025-5278
Chris Laplante (6):
bitbake: persist_data: close connection in SQLTable __exit__
bitbake: fetch2: use persist_data context managers
bitbake: ui/knotty: print log paths for failed tasks in summary
bitbake: ui/knotty: respect NO_COLOR & check for tty; rename print_hyperlink => format_hyperlink
bitbake: cooker: Make cooker 'skiplist' per-multiconfig/mc
util-linux: use ${B} instead of ${WORKDIR}/build, to fix building under devtool
Christian Taedcke (1):
iptables: fix memory corruption when parsing nft rules
Christos Gavros (2):
ref-manual/variables.rst: document the IMAGE_ROOTFS_MAXSIZE variable
ref-manual/variables.rst: document the INITRAMFS_MAXSIZE variable
Claus Stovgaard (1):
lib/oe/package-manager: skip processing installed-pkgs with empty globs
Clayton Casciato (1):
uboot-sign: fix concat_dtb arguments
Colin McAllister (2):
udev-extraconf: Add collect flag to mount
busybox: Fix cut with "-s" flag
Colin Pinnell McAllister (1):
ffmpeg: fix CVE-2025-1373
Daniel Semkowicz (2):
os-release: Fix VERSION_CODENAME in case it is empty
gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs
Daniel Turull (4):
package: export debugsources in PKGDESTWORK as json
spdx: add option to include only compiled sources
xz: ignore CVE-2024-47611
libxml2: ignore CVE-2025-8732
David Nyström (3):
openssh: fix CVE-2025-61985
openssh: fix CVE-2025-61984
lz4: fix CVE-2025-62813
Deepak Rathore (1):
default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
Deepesh Varatharajan (13):
binutils: stable 2.42 branch updates
glibc: stable 2.39 branch updates.
binutils: stable 2.42 branch update
binutils: Fix CVE-2025-0840
glibc: stable 2.39 branch updates
binutils: stable 2.42 branch updates
binutils: Fix CVE-2025-5245
binutils: Fix CVE-2025-5244
gcc: Upgrade to GCC 13.4
binutils: stable 2.42 branch updates
binutils: Fix CVE-2025-7545
glibc: stable 2.39 branch updates
glibc: stable 2.39 branch updates
Deepthi Hemraj (5):
binutils: stable 2.42 branch updates
glibc: stable 2.39 branch updates
rust-llvm: Fix CVE-2024-0151
binutils: stable 2.42 branch update
glibc: stable 2.39 branch updates
Denys Dmytriyenko (3):
weston: upgrade 13.0.0 -> 13.0.1
gcc: unify cleanup of include-fixed, apply to cross-canadian
nativesdk-libtool: sanitize the script, remove buildpaths
Divya Chellam (16):
libpam: fix CVE-2024-10041
libxml2: Upgrade 2.12.8 -> 2.12.9
wget: fix CVE-2024-10524
vim: Upgrade 9.1.0764 -> 9.1.1043
vim: Upgrade 9.1.1043 -> 9.1.1115
ruby: fix CVE-2025-27220
ruby: fix CVE-2025-27221
screen: fix CVE-2025-46802
screen: fix CVE-2025-46804
libarchive: fix CVE-2025-5914
libarchive: fix CVE-2025-5915
libarchive: fix CVE-2025-5916
libarchive: fix CVE-2025-5917
libarchive: fix CVE-2025-5918
wpa-supplicant: fix CVE-2022-37660
vim: upgrade 9.1.1652 -> 9.1.1683
Divyanshu Rathore (1):
ffmpeg: upgrade 6.1.1 -> 6.1.2
Dixit Parmar (1):
ref-manual: document KERNEL_SPLIT_MODULES variable
Dmitry Baryshkov (1):
xserver-xorg: fix CVE-2023-5574 status
Emil Kronborg (3):
insane.bbclass: remove skipping of cross-compiled packages
insane.bbclass: fix HOST_ variable names
insane.bbclass: remove leftover variables and comment
Enrico Jörns (6):
wic: engine.py: use raw string for escape sequence
wic: bootimg-efi: fix error handling
bitbake: bitbake-diffsigs: fix handling when finding only a single sigfile
ref-manual/variables.rst: update ROOT_HOME documentation
conf.py: tweak SearchEnglish to be hyphen-friendly
conf.py: improve SearchEnglish to handle terms with dots
Erik Lindsten (1):
overview-manual/yp-intro.rst: fix broken link to article
Esben Haabendal (3):
pulseaudio: fix webrtc audio depdency
files: Amend overlayfs unit descriptions with path information
files: overlayfs-create-dirs: Improve mount unit dependency
Etienne Cordonnier (6):
oeqa/runtime: fix regression in minidebuginfo test
oeqa/runtime: make minidebuginfo test work with coreutils
oeqa/runtime: fix race-condition in minidebuginfo test
python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES
ref-manual/variables.rst: document SSTATE_SKIP_CREATION
bitbake: gcp.py: remove slow calls to gsutil stat
Fabio Berton (2):
ccache.conf: Add include_file_ctime to sloppiness
linux-libc-headers: Fix invalid conversion in cn_proc.h
Florian Kreutzer (1):
dropbear: backport fix for concurrent channel open/close
Gassner, Tobias.ext (1):
rootfs: Ensure run-postinsts is not uninstalled for read-only-rootfs-delayed-postinsts
Gauthier HADERER (1):
populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported.
Guocai He (2):
tcf-agent: correct the SRC_URI
minicom: correct the SRC_URI
Guénaël Muller (1):
ref-manual: use standardized method accross both ubuntu and debian for locale install
Guðni Már Gilbert (15):
pam: Fix for CVE-2024-22365
python3-attrs: drop python3-ctypes from RDEPENDS
bluez5: remove redundant patch for MAX_INPUT
shared-mime-info: drop itstool-native from DEPENDS
libpam: drop cracklib from DEPENDS
systemd: drop intltool-native from DEPENDS
systemd-boot: drop intltool-native from DEPENDS
python3-poetry-core: drop python3-six from RDEPENDS
dnf: drop python3-iniparse from DEPENDS and RDEPENDS
python3: upgrade 3.12.6 -> 3.12.7
python3: upgrade 3.12.7 -> 3.12.8
systemd: upgrade 255.13 -> 255.17
systemd: upgrade 255.17 -> 255.18
bluez5: add missing tools to noinst-tools package
systemd: upgrade 255.18 -> 255.21
Gyorgy Sarvari (1):
conf/bitbake.conf: use gnu mirror instead of main server
Haixiao Yan (2):
glibc: Add single-threaded fast path to rand()
buildtools-tarball: fix unbound variable issues under 'set -u'
Harish Sadineni (7):
binutils: Add missing perl modules to RDEPENDS for nativesdk variant
rust-target-config: Fix TARGET_C_INT_WIDTH with correct size
rust: fix for rust multilib sdk configuration
rust: remove redundant cargo config file
oeqa/sdk/context: fix for gtk3 test failure during do_testsdk
binutils: Fix CVE-2025-1179
binutils: set CVE_STATUS for CVE-2025-1180
Hiago De Franco (2):
weston: backport patch to allow neatvnc < v0.9.0
bluez5: backport patch to fix address type when loading keys
Hitendra Prajapati (24):
ghostscript: upgrade 10.02.1 -> 10.03.1
ruby: fix CVE-2024-27281
vte: fix CVE-2024-37535
curl: fix CVE-2024-8096
webkitgtk: upgrade 2.44.1 -> 2.44.3
cups: Backport fix for CVE-2024-47175
libarchive: fix CVE-2024-48957 & CVE-2024-48958
libsoup: fix CVE-2024-52532
ghostscript: upgrade 10.03.1 -> 10.04.0
libsndfile: fix CVE-2024-50612
ofono: Fix multiple CVEs
libcap: fix CVE-2025-1390
elfutils: Fix multiple CVEs
go: fix CVE-2025-22871
libsoup-3.4.4: Fix CVE-2025-4969
libsoup-2.4: Fix CVE-2025-4969
libxml2: fix CVE-2025-6021
libxml2: fix CVE-2025-49794 & CVE-2025-49796
libpam: fix CVE-2025-6020
gstreamer1.0-plugins-base: fix CVE-2025-47808
gstreamer1.0-plugins-base: fix CVE-2025-47806
gstreamer1.0-plugins-good: fix multiple CVEs
gstreamer1.0-plugins-base: fix CVE-2025-47807
grub2: mark CVE-2024-2312 as not applicable
Hongxu Jia (10):
ovmf: fix CVE-2024-38796
ovmf: fix CVE-2024-1298
u-boot: fix CVE-2024-57254
u-boot: fix CVE-2024-57255
u-boot: fix CVE-2024-57256
u-boot: fix CVE-2024-57257
u-boot: fix CVE-2024-57258
u-boot: fix CVE-2024-57259
rpm: keep leading `/' from sed operation
u-boot: fix CVE-2024-42040
Igor Opaniuk (1):
wic: bootimg-efi: Support + symbol in filenames
Jaeyoon Jung (2):
makedevs: Fix issue when rootdir of / is given
makedevs: Fix matching uid/gid
Jagadeesh Krishnanjanappa (1):
tune-cortexa32: set tune feature as armv8a
Jan Vermaete (1):
sdk: The main in the C example should return an int
Jeroen Hofstee (2):
bluez5: make media control a PACKAGECONFIG option
bluez5: backport a patch to fix btmgmt -i
Jiaying Song (9):
liba52: fix do_fetch error
enchant2: fix do_fetch error
libxml-parser-perl: fix do_fetch error
python3-zipp: fix CVE-2024-5569
subversion: fix CVE-2024-46901
boost: fix do_fetch error
binutils: File name too long causing failure to open temporary head file in dlltool
python3-requests: upgrade 2.32.3 -> 2.32.4
ruby-ptest : some ptest fixes
Jinfeng Wang (3):
tzdata&tzcode-native: upgrade 2024a -> 2024b
mtools: upgrade 4.0.48 -> 4.0.49
systemtap: Fix task_work_cancel build
Joao Marcos Costa (1):
ref-manual/variables.rst: expand IMAGE_OVERHEAD_FACTOR glossary entry
Joe Slater (1):
oe-debuginfod: add option for data storage
Joerg Schmidt (1):
bitbake: bblayers/query: Fix using "removeprefix" string method
Johannes Schneider (1):
ppp: Revert lock path to /var/lock
Jon Mason (4):
oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems
oeqa/runtime/ssh: check for all errors at the end
oeqa/runtime/ssh: increase the number of attempts
openssh: add backported header file include
Jonas Gorski (1):
rootfs-postcommands.bbclass: make opkg status reproducible
Jookia (1):
populate_sdk_ext.bbclass: Fix undefined variable error
Jose Quaresma (7):
go: upgrade 1.22.4 -> 1.22.5
oeqa/runtime/scp: requires openssh-sftp-server
openssh: drop rejected patch fixed in 8.6p1 release
openssh: systemd sd-notify patch was rejected upstream
openssh: systemd notification was implemented upstream
go: upgrade 1.22.5 -> 1.22.6
bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM
Joshua Watt (3):
bitbake: asyncrpc: Use client timeout for websocket open timeout
bitbake: Remove custom exception backtrace formatting
bitbake: Use a "fork" multiprocessing context
João Marcos Costa (1):
variables.rst: fix LAYERDEPENDS description
Julien Stephan (5):
README: add instruction to run Vale on a subset
documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint
styles: vocabularies: Yocto: add sstate
ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables
dev-manual: add bblock documentation
Jörg Sommer (5):
classes/kernel: No symlink in postinst without KERNEL_IMAGETYPE_SYMLINK
doc/features: remove duplicate word in distribution feature ext2
doc/features: describe distribution feature pni-name
ptest-runner: Update 2.4.4 -> 2.4.5
runqemu: Fix detection of -serial parameter
Kai Kang (3):
multilib.bbclass: replace deprecated e.data with d
cmake-qemu.bbclass: fix if criterion
glibc: fix fortran header file conflict for arm
Khem Raj (26):
linux-yocto: Enable team net driver
systemd.bbclass: Clarify error message
grub,grub-efi: Remove -mfpmath=sse on x86
python3: Treat UID/GID overflow as failure
gawk: Remove References to /usr/local/bin/gawk
busybox: CVE-2023-42364 and CVE-2023-42365 fixes
busybox: Add fix for CVE-2023-42366
gcc: Fix spurious '/' in GLIBC_DYNAMIC_LINKER on microblaze
gnupg: Document CVE-2022-3219 and mark wontfix
openssh: Mark CVE-2023-51767 as wont-fix
libpcre2: Update base uri PhilipHazel -> PCRE2Project
python3: Drop empty patch
qemu: Do not define sched_attr with glibc >= 2.41
e2fsprogs: Fix build failure with gcc 15
parted: Fix build with GCC 15
bash: Stick to C17 std
ncurses: Pin to C17 standard
unzip: Fix build with GCC-15
m4: Stick to C17 standard
gmp: Fix build with GCC15/C23
gmp: Fix build with older gcc versions
gdbm: Use C11 standard
unifdef: Don't use C23 constexpr keyword
libtirpc: Fix build with gcc-15/C23
cpio: Pin to use C17 std
expect: Fix build with GCC 15
Kirill Yatsenko (1):
iptables: fix save/restore symlinks with libnftnl PACKAGECONFIG enabled
Konrad Weihmann (3):
runqemu: keep generating tap devices
testimage: fallback for empty IMAGE_LINK_NAME
testexport: fallback for empty IMAGE_LINK_NAME
Kyungjik Min (1):
pulseaudio: Add audio group explicitly
Lee Chee Yang (24):
migration-notes: add release notes for 5.0.1
migration-guides: add release notes for 4.0.19
migration-guides: add release notes for 5.0.2
migration-guide: add release notes for 4.0.20
migration-guides: add release notes for 5.0.3
migration-guide: add release notes for 4.0.21
migration-guides: add release notes for 5.0.4
migration-guide: add release notes for 4.0.22
migration-guides: add release notes for 5.0.5
migration-guides: add release notes for 4.0.23
migration-guides: add release notes for 5.0.6
migration-guides: add release notes for 4.0.24
migration-guides: add release notes for 5.0.7
migration-guides: add release notes for 4.0.25
migration-guides: add release notes for 5.0.8
migration-guides: add release notes for 4.0.26
migration-guides: add release notes for 5.0.9
migration-guides: add release notes for 4.0.27
migration-guide: add release notes for 5.0.10
migration-guides: add release notes for 4.0.28
migration-guides: add release notes for 5.0.11
migration-guides: add release notes for 4.0.29
migration-guides: add release notes for 5.0.12
migration-guides: add release notes for 4.0.30
Libo Chen (1):
runqemu: fix special characters bug
Louis Rannou (1):
image_qa: fix error handling
Macpaul Lin (1):
linux-firmware: upgrade 20240312 -> 20240909
Madhu Marri (1):
qemu 8.2.7: ignore CVE-2023-1386
Makarios Christakis (1):
icu: Adjust ICU_DATA_DIR path on big endian targets
Marco Cavallini (1):
dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
Marek Vasut (3):
u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled
base-files: Drop /bin/sh dependency
u-boot: kernel-fitimage: Restore FIT_SIGN_INDIVIDUAL="1" behavior
Mark Hatle (9):
package.py: Fix static debuginfo split
package.py: Fix static library processing
selftest-hardlink: Add additional test cases
create-spdx-*: Support multilibs via SPDX_MULTILIB_SSTATE_ARCHS
oeqa sdk cases: Skip SDK test cases when TCLIBC is newlib
create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc
populate_sdk_ext: write_local_conf add shutil import
cve-update-nvd2-native: Handle BB_NO_NETWORK and missing db
bitbake: bitbake: runqueue: Verify mcdepends are valid
Markus Volk (3):
libadwaita: update 1.5.0 -> 1.5.1
gcc: add a backport patch to fix an issue with tzdata 2024b
ninja: fix build with python 3.13
Marta Rybczynska (1):
vulnerabilities/classes: remove references to cve-check text format
Martin Jansa (22):
selftest: add Upstream-Status to .patch files
libgfortran.inc: fix nativesdk-libgfortran dependencies
populate_sdk_base: inherit nopackages
meta-world-pkgdata: Inherit nopackages
python3-lxml=v5.0.2
mc: set ac_cv_path_ZIP to avoid buildpaths QA issues
libpam: re-add missing libgen include
cairo: fix build with gcc-15 on host
bash: use -std=gnu17 also for native CFLAGS
cmake: fix build with gcc-15 on host
git: fix build with gcc-15 on host
pkgconfig: fix build with gcc-15
libgpg-error: fix build with gcc-15
rust-llvm: fix build with gcc-15
elfutils: fix build with gcc-15
binutils: fix build with gcc-15
dbus-glib: fix build with gcc-15
bitbake: bitbake: Bump version to 2.8.1
license.py: avoid deprecated ast.Str
sanity.conf: Update minimum bitbake version to 2.8.1
lib/oe/utils: use multiprocessing from bb
flex: fix build with gcc-15 on host
Matthias Pritschet (1):
ref-manual: fix typo and move SYSROOT_DIRS example
Matthias Schiffer (1):
curl: only set CA bundle in target build
Michael Haener (1):
oeqa/runtime/ping: don't bother trying to ping localhost
Michael Halstead (4):
yocto-uninative: Update to 4.6 for glibc 2.40
yocto-uninative: Update to 4.7 for glibc 2.41
yocto-uninative: Update to 4.8 for GCC 15.1
yocto-uninative: Update to 4.9 for glibc 2.42
Michael Opdenacker (5):
maintainers.inc: update self e-mail address
doc: Makefile: publish pdf and epub versions too
dev-manual: fix styling of references to bmaptool
dev-manual/bmaptool.rst: correct command for bmaptool-native
dev-manual/bmaptool.rst: simplify and fix instructions
Michal Seben (1):
timedated: wait for jobs before SetNTP response
Mikko Rapeli (1):
ovmf-native: remove .pyc files from install
Mingli Yu (1):
llvm: Enable libllvm for native build
Moritz Haase (2):
meta: Enable '-o pipefail' for the SDK installer
cmake: Correctly handle cost data of tests with arbitrary chars in name
NeilBrown (1):
nfs-utils: don't use signals to shut down nfs server.
Nguyen Dat Tho (1):
libatomic-ops: Update GITHUB_BASE_URI
Nikhil R (1):
cmake: Add PACKAGECONFIG option for debugger support
Niko Mauno (15):
dnf/mesa: Fix missing leading whitespace with ':append'
libyaml: Fix warning regarding unpatched CVE
systemd: Mitigate /var/log type mismatch issue
systemd: Mitigate /var/tmp type mismatch issue
image_types.bbclass: Use --force also with lz4,lzop
util-linux: Add PACKAGECONFIG option to mitigate rootfs remount error
iw: Fix LICENSE
dejagnu: Fix LICENSE
unzip: Fix LICENSE
zip: Fix LICENSE
tiff: Fix LICENSE
gcr: Fix LICENSE
python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc
cve-check.bbclass: Mitigate symlink related error
cve-check.bbclass: Fix symlink handling also for text files
Nitin Wankhade (1):
examples: genl: fix wrong attribute size
Oleksandr Hnatiuk (2):
icu: remove host references in nativesdk to fix reproducibility
gcc: remove paths to sysroot from configargs.h and checksum-options for gcc-cross-canadian
Patrick Wicki (1):
gpgme: move gpgme-tool to own sub-package
Paul Barker (2):
meta-ide-support: Mark recipe as MACHINE-specific
dev-manual, test-manual: Update autobuilder output links
Paul Gerber (1):
uboot-sign: fix counters in do_uboot_assemble_fitimage
Pavel Zhukov (1):
package_rpm: Check if file exists before open()
Pedro Ferreira (3):
buildhistory: Fix intermittent package file list creation
buildhistory: Restoring files from preserve list
rust-common.bbclass: soft assignment for RUSTLIB path
Peter Kjellerstedt (1):
image.bbclass: Drop support for ImageQAFailed exceptions in image_qa
Peter Marko (144):
flac: fix buildpaths warnings
cargo: remove True option to getVar calls
ncurses: switch to new mirror
busybox: Patch CVE-2021-42380
busybox: Patch CVE-2023-42363
libstd-rs,rust-cross-canadian: set CVE_PRODUCT to rust
curl: Patch CVE-2024-6197
glibc: cleanup old cve status
qemu: set cve status for CVE-2023-6683
libmnl: explicitly disable doxygen
libyaml: ignore CVE-2024-35326
libyaml: Ignore CVE-2024-35325
curl: Patch CVE-2024-7264
python3: Upgrade 3.12.5 -> 3.12.6
wpa-supplicant: Ignore CVE-2024-5290
wpa-supplicant: Patch CVE-2024-3596
wpa-supplicant: Patch security advisory 2024-2
rust: ignore CVE-2024-43402
openssl: patch CVE-2024-9143
cve-check: add support for cvss v4.0
go: upgrade 1.22.6 -> 1.22.7
go: upgrade 1.22.7 -> 1.22.8
dropbear: backport patch for CVE-2023-48795
curl: patch CVE-2024-9681
gstreamer1.0: set status for CVE-2024-0444
expat: upgrade 2.6.3 -> 2.6.4
builder: set CVE_PRODUCT
qemu: set CVE-2024-6505 to fixed
gstreamer1.0-plugins-good: fix several CVEs
gstreamer1.0-plugins-base: patch CVE-2024-47538
gstreamer1.0-plugins-base: patch CVE-2024-47607
gstreamer1.0-plugins-base: patch CVE-2024-47615
gstreamer1.0-plugins-good: patch CVE-2024-47613
gstreamer1.0-plugins-good: patch several CVEs
gstreamer1.0-plugins-base: patch CVE-2024-47541
gstreamer1.0-plugins-base: patch CVE-2024-47542
gstreamer1.0-plugins-good: patch CVE-2024-47599
gstreamer1.0-plugins-base: patch CVE-2024-47600
gstreamer1.0-plugins-good: patch CVE-2024-47606
gstreamer1.0-plugins-good: patch CVE-2024-47606
gstreamer1.0-plugins-good: patch CVE-2024-47774
gstreamer1.0-plugins-good: patch several CVEs
gstreamer1.0-plugins-base: patch CVE-2024-47835
gstreamer1.0: ignore CVEs fixed in plugins recipes
socat: patch CVE-2024-54661
ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542
ofono: patch CVE-2023-4232
ofono: patch CVE-2023-4235
openssl: patch CVE-2024-13176
go: upgrade 1.22.8 -> 1.22.9
go: upgrade 1.22.9 -> 1.22.10
go: upgrade 1.22.10 -> 1.22.11
glibc: stable 2.39 branch updates
python3: upgrade 3.12.8 -> 3.12.9
go: upgrade 1.22.11 -> 1.22.12
cmake: apply parallel build settings to ptest tasks
subversion: ignore CVE-2024-45720
gnutls: patch CVE-2024-12243
openssl: upgrade 3.2.3 -> 3.2.4
libxml2: upgrade 2.12.9 -> 2.12.10
grub: drop obsolete CVE statuses
grub: backport strlcpy function
grup: patch CVE-2024-45781
grub: patch CVE-2024-45782 and CVE-2024-56737
grub: patch CVE-2024-45780
grub: patch CVE-2024-45783
grub: patch CVE-2025-0624
grub: patch CVE-2024-45774
grub: patch CVE-2024-45775
grub: patch CVE-2025-0622
grub: patch CVE-2024-45776
grub: patch CVE-2024-45777
grub: patch CVE-2025-0690
grub: patch CVE-2025-1118
grub: patch CVE-2024-45778 and CVE-2024-45779
grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-0689
grub: patch CVE-2025-0678 and CVE-2025-1125
libarchive: patch CVE-2025-1632 and CVE-2025-25724
xserver-xorg: mark CVEs fixed in 21.1.16 as fixed
cve-update-nvd2-native: handle missing vulnStatus
expat: patch CVE-2024-8176
freetype: follow-up patch for CVE-2025-27363
ofono: patch CVE-2024-7537
cve-update-nvd2-native: add workaround for json5 style list
xz: upgrade 5.4.6 -> 5.4.7
xz: patch CVE-2025-31115
libarchive: upgrade 3.7.4 -> 3.7.9
sqlite3: patch CVE-2025-3277
sqlite3: patch CVE-2025-29088
ppp: patch CVE-2024-58250
libxml2: patch CVE-2025-32414
libxml2: patch CVE-2025-32415
glib-2.0: patch CVE-2025-3360
Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"
sqlite3: mark CVE-2025-29087 as patched
python3: upgrade 3.12.9 -> 3.12.11
testimage: get real os-release file
net-tools: patch CVE-2025-46836
go: set status of CVE-2024-3566
glibc: stable 2.39 branch updates
python3: update CVE product
busybox: apply patch for CVE-2023-39810
iputils: patch CVE-2025-48964
orc: set CVE_PRODUCT
openssl: CVE-2024-41996
openssl: patch CVE-2025-27587
gnutls: patch CVE-2025-32989
gnutls: patch read buffer overrun in the "pre_shared_key" extension
gnutls: patch reject zero-length version in certificate request
gnutls: patch CVE-2025-32988
gnutls: patch CVE-2025-32990
gnutls: patch CVE-2025-6395
ncurses: patch CVE-2025-6141
libxml2: patch CVE-2025-6170
glibc: fix CVE-2025-8058
python3: patch CVE-2025-8194
go: ignore CVE-2025-0913
dropbear: patch CVE-2025-47203
glib-2.0: ignore CVE-2025-4056
qemu: set status of CVE-2024-7730 to fixed
go-binary-native: ignore CVE-2025-0913
glib-2.0: patch CVE-2025-7039
glib-2.0: patch CVE-2025-6052
dpkg: patch CVE-2025-6297
libarchive: patch regression of patch for CVE-2025-5918
vim: upgrade 9.1.1198 -> 9.1.1652
sudo: remove devtool FIXME comment
busybox: patch CVE-2025-46394
gstreamer1.0: ignore CVEs fixed in plugins
gstreamer1.0: ignore CVE-2025-2759
ghostscript: patch CVE-2025-59798
ghostscript: patch CVE-2025-59799
ghostscript: patch CVE-2025-59800
expat: follow-up for CVE-2024-8176
tiff: ignore 5 CVEs
ffmpeg: ignore 8 CVEs fixed in 6.1.1 and 6.1.3 releases
openssl: upgrade 3.2.4 -> 3.2.6
qemu: patch CVE-2024-8354
binutils: patch CVE-2025-11082
binutils: patch CVE-2025-11083
gnupg: mark CVE-2025-30258 as patched
python3: upgrade 3.12.11 -> 3.12.12
vulnerabilities: update nvdcve file name
expat: patch CVE-2025-59375
Philip Lorenz (3):
cmake: Fix sporadic issues when determining compiler internals
cve-check: Add missing call to exit_if_errors
shared-mime-info: Handle USE_NLS
Poonam Jadhav (2):
curl: ignore CVE-2025-0725
libpng: Add ptest
Praveen Kumar (7):
connman :fix CVE-2025-32743
connman :fix CVE-2025-32366
glib-2.0: fix CVE-2025-4373
go: fix CVE-2025-4673
sudo: upgrade 1.9.15p5 -> 1.9.17p1
go: fix CVE-2025-47907
bind: upgrade 9.18.33 -> 9.18.41
Preeti Sachan (1):
ltp: backport patch to fix compilation error for x86_64
Priyal Doshi (2):
tzdata/tzcode-native: upgrade 2024b -> 2025a
tzdata/tzcode-native: upgrade 2025a -> 2025b
Purushottam Choudhary (1):
virglrenderer: Add patch to fix -int-conversion build issue
Quentin Schulz (14):
mmc-utils: fix URL
weston-init: fix weston not starting when xwayland is enabled
docs: README: specify how to contribute instead of pointing at another file
docs: conf.py: silence SyntaxWarning on js_splitter_code
ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
ref-manual: classes: nativesdk: move note to appropriate section
go-helloworld: fix license
contributor-guide: submit-changes: fix improper bold string
contributor-guide: submit-changes: clarify example with Yocto bug ID
contributor-guide: submit-changes: align CC tag description
contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
contributor-guide: submit-changes: reword commit message instructions
contributor-guide: submit-changes: number instruction list in commit your changes
contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
Rajeshkumar Ramasamy (2):
glib-networking: fix CVE-2025-60018
glib-networking: fix CVE-2025-60019
Randy MacLeod (1):
systemd: stable update 255.4 -> 255.13
Ranjitsinh Rathod (1):
rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS
Rasmus Villemoes (1):
iptables: remove /etc/ethertypes
Regis Dargent (1):
udev-extraconf: fix network.sh script did not configure hotplugged interfaces
Richard Purdie (60):
selftest/cases/runtime_test: Exclude centos-9 from virgl tests
cve-exclusion: Drop the version comparision/warning
bitbake: codeparser/data: Ensure module function contents changing is accounted for
bitbake: codeparser: Skip non-local functions for module dependencies
pseudo: Update to pull in python 3.12+ fix
layer.conf: Add os-release to SIGGEN_EXCLUDERECIPES_ABISAFE
oeqa/sdk/case: Ensure DL_DIR is populated with artefacts if used
create-spdx-3.0/populate_sdk_base: Add SDK_CLASSES inherit mechanism to fix tarball SPDX manifests
pseudo: Fix to work with glibc 2.40
pseudo: Update to include open symlink handling bugfix
nasm: Upgrade 2.16.01 -> 2.16.03
oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM)
oeqa/selftest/reproducibile: Explicitly list virtual targets
expat: 2.6.2 -> 2.6.3
ruby: Make docs generation deterministic
libedit: Make docs generation deterministic
buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage
scripts/install-buildtools: Update to 5.0.3
bitbake.conf: Add truncate to HOSTTOOLS
license: Fix directory layout issues
libsdl2: Fix non-deterministic configure option for libsamplerate
bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab
bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab
cve_check: Use a local copy of the database during builds
pseudo: Fix envp bug and add posix_spawn wrapper
oeqa/runtime/ssh: Rework ssh timeout
oeqa/runtime/ssh: Fix incorrect timeout fix
qemurunner: Clean up serial_lock handling
bitbake: fetch2/git: Use quote from shlex, not pipes
bitbake: fetch/wget: Increase timeout to 100s from 30s
bitbake: runqueue: Fix performance of multiconfigs with large overlap
bitbake: runqueue: Optimise setscene loop processing
bitbake: runqueue: Fix scenetask processing performance issue
do_package/sstate/sstatesig: Change timestamp clamping to hash output only
selftest/reproducible: Drop rawlogs
selftest/reproducible: Clean up pathnames
resulttool: Allow store to filter to specific revisions
resulttool: Use single space indentation in json output
oeqa/utils/gitarchive: Return tag name and improve exclude handling
resulttool: Fix passthrough of --all files in store mode
resulttool: Add --logfile-archive option to store mode
resulttool: Handle ltp rawlogs as well as ptest
resulttool: Clean up repoducible build logs
resulttool: Trim the precision of duration information
resulttool: Improve repo layout for oeselftest results
cve-update-nvd2-native: Tweak to work better with NFS DL_DIR
bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48
bitbake: utils: Print information about lock issue before exiting
bitbake: utils: Tweak lock_timeout logic
bitbake: utils: Add signal blocking for lock_timeout
bitbake: event/utils: Avoid deadlock from lock_timeout() and recursive events
bitbake: toaster/tests/buildtest: Switch to new CDN
bitbake: fetch2: Avoid deprecation warning
sstatetests: Switch to new CDN
local.conf.sample: Switch to new CDN
bitbake: ast: Change deferred inherits to happen per recipe
brief-yoctoprojectqs/ref-manual: Switch to new CDN
bitbake: test/fetch: Switch u-boot based test to use our own mirror
mtools: upgrade 4.0.46 -> 4.0.47
bitbake: utils: Optimise signal/sigmask performance
Robert Kovacsics (1):
sdk: Fix path length limit to match reserved size
Robert P. J. Day (7):
Clean up explanation of minimum required version numbers
overview-manual: small number of pedantic cleanups
bsp guide: update kernel version example to 6.12
bsp-guide: update lonely "4.12" kernel reference to "6.12"
bsp-guide: update all of section 1.8.2 to reflect current beaglebone conf file
variables.rst: remove references to obsolete tar packaging
overview-manual/yp-intro.rst: update on-target packaging info
Robert Yang (7):
bitbake: data_smart: Improve performance for VariableHistory
release-notes-5.0.rst: NO_OUTPUT -> NO_COLOR
bitbake: gitsm: Add call_process_submodules() to remove duplicated code
bitbake: gitsm: Remove downloads/tmpdir when failed
cml1.bbclass: do_diffconfig: Don't override .config with .config.orig
libgcrypt: Fix building error with '-O2' in sysroot path
groff: Fix race issues for parallel build
Rogerio Guerra Borin (1):
u-boot: ensure keys are generated before assembling U-Boot FIT image
Rohini Sangam (1):
vim: Upgrade 9.1.0698 -> 9.1.0764
Roland Kovacs (3):
gnupg: update 2.4.5 -> 2.4.8
libxml2: fix CVE-2025-49795
sqlite3: fix CVE-2025-6965
Ross Burton (31):
cpio: mark CVE-2023-7216 as disputed
fribidi: upgrade 1.0.13 -> 1.0.14
gstreamer1.0: skip another known flaky test
libportal: fix rare build race
meson: don't use deprecated pkgconfig variable
curl: skip FTP tests in run-ptest
gawk: update patch status
python3-pycryptodome(x): use python_setuptools_build_meta build class
gstreamer1.0: disable flaky baseparser tests
librsvg: don't try to run target code at build time
icu: update patch Upstream-Status
strace: download release tarballs from GitHub
tcl: skip io-13.6 test case
groff: fix rare build race in hdtbl
sanity: check for working user namespaces
python3: add dependency on -compression to -core
classes/nativesdk: also override TUNE_PKGARCH
classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture
oeqa/selftest/rust: skip on all MIPS platforms
Remove all mention of core-image-lsb
ref-manual: don't refer to poky-lsb
ref-manual: remove OE_IMPORTS
puzzles: ignore three new CVEs for a different puzzles
xserver-xf86-config: add a configuration fragment to disable screen blanking
xserver-xf86-config: remove obsolete configuration files
grub2: fix CVE-2024-56738
libxslt: apply patch for CVE-2025-7424
expect: update code for Tcl channel implementation
expect: don't run aclocal in do_configure
expect: cleanup do_install
pulseaudio: ignore CVE-2024-11586
Ryan Eatmon (2):
u-boot.inc: Refactor do_* steps into functions that can be overridden
uboot: Allow for customizing installed/deployed file names
Sana Kazi (1):
gcc-cross-canadian.inc: Fix buildpaths error for pthread.h
Sandeep Gundlupet Raju (1):
tune-cortexr52: Remove aarch64 for ARM Cortex-R52
Saravanan (2):
python3-xmltodict: fix CVE-2025-9375
cmake: fix CVE-2025-9301
Savvas Etairidis (1):
systemd: Rename systemd_v255.21 to systemd_255.21
Sergei Zhmylev (1):
lsb-release: fix Distro Codename shell escaping
Shubham Kulkarni (1):
libpam: Update fix for CVE-2024-10041
Shunsuke Tokumoto (1):
python3-setuptools: Add "python:setuptools" to CVE_PRODUCT
Siddharth Doshi (5):
Tiff: Security fix for CVE-2024-7006
vim: Upgrade 9.1.0114 -> 9.1.0682
wpa-supplicant: Upgrade 2.10 -> 2.11
vim: Upgrade 9.1.0682 -> 9.1.0698
openssl: Upgrade 3.2.2 -> 3.2.3
Simon A. Eugster (1):
documentation: Fix typo in standards.md
Simone Weiß (3):
tzdata: Add tzdata.zi to tzdata-core package
sanity: Check if tar is gnutar
curl: Ignore CVE-2024-32928
Soumya Sambu (12):
python3-idna: upgrade 3.6 -> 3.7
python3-certifi: Fix CVE-2024-39689
python3-setuptools: Fix CVE-2024-6345
python3: Fix CVE-2024-7592
python3: Fix CVE-2024-8088
python3-requests: upgrade 2.32.1 -> 2.32.2
python3-requests: upgrade 2.32.0 -> 2.32.3
python3-jinja2: upgrade 3.1.4 -> 3.1.6
git: Upgrade 2.44.1 -> 2.44.3
elfutils: Fix CVE-2025-1371
elfutils: Fix CVE-2025-1376
elfutils: Fix CVE-2025-1377
Stanislav Vovk (1):
libpam: fix CVE-2024-10963
Stefan Mueller-Klieser (1):
kernel-arch: add macro-prefix-map in KERNEL_CC
Steve Sakoman (35):
Revert "apt: runtime error: filename too long (tmpdir length)"
poky.conf: bump version for 5.0.3
build-appliance-image: Update to scarthgap head revision
Revert "wpa-supplicant: Upgrade 2.10 -> 2.11"
poky.conf: bump version for 5.0.4
build-appliance-image: Update to scarthgap head revision
build-appliance-image: Update to scarthgap head revision
release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure
poky.conf: bump version for 5.0.5
build-appliance-image: Update to scarthgap head revision
webkitgtk: fix erroneous use of unsuported DEBUG_LEVELFLAG variable
llvm: reduce size of -dbg package
poky.conf: bump version for 5.0.6
build-appliance-image: Update to scarthgap head revision
poky.conf: bump version for 5.0.7
build-appliance-image: Update to scarthgap head revision
Revert "rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS"
build-appliance-image: Update to scarthgap head revision
poky.conf: add ubuntu2404 to SANITY_TESTED_DISTROS
poky.conf: bump version for 5.0.8
build-appliance-image: Update to scarthgap head revision
Revert "gcc-cross-canadian.inc: Fix buildpaths error for pthread.h"
poky.conf: bump version for 5.0.9
build-appliance-image: Update to scarthgap head revision
poky.conf: bump version for 5.0.10
build-appliance-image: Update to scarthgap head revision
poky.conf: bump version for 5.0.11
build-appliance-image: Update to scarthgap head revision
Revert "sudo: Fix CVE-2025-32462"
poky.conf: bump version for 5.0.12
build-appliance-image: Update to scarthgap head revision
selftest/cases/meta_ide.py: use use gnu mirror instead of main server
oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
poky.conf: bump version for 5.0.13
build-appliance-image: Update to scarthgap head revision
Sunil Dora (2):
gcc: Fix c++: tweak for Wrange-loop-construct
binutils: Fix CVE-2025-1153
Talel BELHAJ SALEM (1):
dev-manual/building.rst: add note about externalsrc variables absolute paths
Talel BELHAJSALEM (1):
contributor-guide: Remove duplicated words
Teresa Remmet (1):
recipes-bsp: usbutils: Fix usb-devices command using busybox
Trevor Gamblin (7):
python3: skip test_concurrent_futures/test_deadlock
python3: skip test_multiprocessing/test_active_children test
maintainers.inc: add self for unassigned python recipes
python3: upgrade 3.12.4 -> 3.12.5
python3: skip readline limited history tests
python3-urllib3: upgrade 2.2.1 -> 2.2.2
reproducible-builds.rst: show how to build a single package
Trevor Woerner (5):
contributor-guide/submit-changes: encourage patch version changelogs
ref-manual/variables.rst: document WIC_CREATE_EXTRA_ARGS
sphinx-lint: trailing whitespace
sphinx-lint: missing space after literal
sphinx-lint: unbalanced inline literal markup
Ulrich Ölmann (1):
initramfs-framework: fix typos
Victor Giraud (1):
busybox: fix CVE-2022-48174
Victor Kamensky (1):
systemtap: fix systemtap-native build error on Fedora 40
Vijay Anusuri (44):
openssh: fix CVE-2024-39894
apr: upgrade 1.7.4 -> 1.7.5
libpcap: Security fix for CVE-2023-7256 & CVE-2024-8006
xserver-xorg: upgrade 21.1.13 -> 21.1.14
glib-2.0: Backport fix for CVE-2024-52533
bind: Upgrade 9.18.28 -> 9.18.33
openssh: Fix CVE-2025-26466
xwayland: Fix CVE-2024-9632
xwayland: Fix CVE-2025-26594
xwayland: Fix CVE-2025-26595
xwayland: Fix CVE-2025-26596
xwayland: Fix CVE-2025-26597
xwayland: Fix CVE-2025-26598
xwayland: Fix CVE-2025-26599
xwayland: Fix CVE-2025-26600
xwayland: Fix CVE-2025-26601
libtasn1: upgrade 4.19.0 -> 4.20.0
xserver-xorg: upgrade 21.1.15 -> 21.1.16
libxslt: upgrade 1.1.39 -> 1.1.43
vim: Upgrade 9.1.1115 -> 9.1.1198
libsoup: Fix CVE-2025-32910
libsoup: Fix CVE-2025-32909
libsoup: Fix CVE-2025-32911 & CVE-2025-32913
libsoup: Fix CVE-2025-32912
libsoup: Fix CVE-2025-32906
libsoup-2.4: Fix CVE-2024-52530
libsoup-2.4: Fix CVE-2024-52531
libsoup-2.4: Fix CVE-2024-52532
libsoup-2.4: Fix CVE-2025-32906
libsoup-2.4: Fix CVE-2025-32909
libsoup: Fix CVE-2025-32914
openssh: Fix for CVE-2025-32728
libsoup-2.4: Fix CVE-2025-32910
libsoup-2.4: Fix CVE-2025-32911 & CVE-2025-32913
libsoup-2.4: Fix CVE-2025-32912
libsoup-2.4: Fix CVE-2025-32914
python3-setuptools: Fix CVE-2025-47273
kea: upgrade 2.4.1 -> 2.4.2
sudo: Fix CVE-2025-32462
git: Upgrade 2.44.3 -> 2.44.4
xserver-xorg: upgrade 21.1.6 -> 21.1.18
cups: upgrade 2.4.10 -> 2.4.11
cups: Fix for CVE-2025-58060 and CVE-2025-58364
gstreamer1.0-plugins-bad: Fix CVE-2025-3887
Virendra Thakur (3):
rust-cross-canadian: Set CVE_STATUS ignore for CVE-2024-43402
util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB
curl: set conditional CVE_STATUS for CVE-2025-5025
Vishwas Udupa (1):
openssl: rewrite ptest installation
Vrushti Dabhi (1):
curl: update CVE_STATUS for CVE-2025-5025
Vyacheslav Yurkov (1):
systemd: Password agents shouldn't be optional
Wadim Egorov (1):
watchdog: Set watchdog_module in default config
Wang Mingyu (18):
ed: upgrade 1.20.1 -> 1.20.2
llvm: upgrade 18.1.5 -> 18.1.6
mesa: upgrade 24.0.5 -> 24.0.7
wireless-regdb: upgrade 2024.01.23 -> 2024.05.08
orc: upgrade 0.4.38 -> 0.4.39
cups: upgrade 2.4.9 -> 2.4.10
libadwaita: upgrade 1.5.1 -> 1.5.2
libdnf: upgrade 0.73.1 -> 0.73.2
wireless-regdb: upgrade 2024.05.08 -> 2024.07.04
cryptodev: upgrade 1.13 -> 1.14
orc: upgrade 0.4.39 -> 0.4.40
wireless-regdb: upgrade 2024.07.04 -> 2024.10.07
gnupg: upgrade 2.4.4 -> 2.4.5
xserver-xorg: upgrade 21.1.14 -> 21.1.15
ghostscript: upgrade 10.05.0 -> 10.05.1
mtools: upgrade 4.0.44 -> 4.0.45
mtools: upgrade 4.0.45 -> 4.0.46
mtools: upgrade 4.0.47 -> 4.0.48
Weisser, Pascal (1):
ref-manual: Add missing variable IMAGE_ROOTFS_MAXSIZE
Weisser, Pascal.ext (1):
qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath
Xiangyu Chen (2):
qemu: Upgrade 8.2.1 -> 8.2.2
lttng-modules: fix sched_stat_runtime changed in Linux 6.6.66
Yash Shinde (4):
binutils: Fix CVE-2024-53589
binutils: Fix CVE-2025-7546
binutils: fix CVE-2025-11081
binutils: fix CVE-2025-8225
Yi Zhao (5):
libcap-ng: upgrade 0.8.4 -> 0.8.5
libcap-ng-python: upgrade 0.8.4 -> 0.8.5
rpm: fix expansion of %_libdir in macros
iputils: Security fix for CVE-2025-47268
kea: set correct permissions for /var/run/kea
Yogita Urade (10):
qemu: upgrade 8.2.2 -> 8.2.3
qemu: fix CVE-2024-4467
ruby: upgrade 3.2.2 -> 3.3.5
qemu: upgrade 8.2.3 -> 8.2.7
curl: fix CVE-2024-11053
curl: fix CVE-2025-0167
python3-urllib3: fix CVE-2025-50181
curl: fix CVE-2025-9086
tiff: fix CVE-2025-9900
tiff: ignore CVE-2025-8961
Zhang Peng (3):
avahi: fix CVE-2024-52616
mpg123: upgrade 1.32.6 -> 1.32.10
avahi: fix CVE-2024-52615
aszh07 (3):
xz: Update LICENSE variable for xz packages
ffmpeg: Add "libswresample libavcodec" to CVE_PRODUCT
libarchive: Fix CVE-2024-20696
rajmohan r (1):
glibc-y2038-tests: remove glibc-y2038-tests_2.39.bb recipe
meta-openembedded: 78a14731cf..15e18246dd:
Adrian Freihofer (2):
networkmanager: remove modemmanager rdepends
thrift: fix build with gcc 15
Alexandre Truong (4):
source-han-sans-*-fonts: Switch away from SVN fetcher in SRC_URI
lcov: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
hunspell-dictionaries: switch branch from master to main
evince: Update status for CVE-2011-0433 and CVE-2011-5244
Alexandre Videgrain (1):
openbox: fix crash on alt+tab with fullscreen app
AmateurECE (1):
pipewire: Add glib-2.0-native dep for bluez5
Andrej Valek (1):
externalsrc: fix support in various components
Anil Dongare (1):
libssh 0.10.6: Fix CVE-2025-8114
Ankur Tyagi (25):
tinyproxy: patch CVE-2023-49606
frr: patch CVE-2024-44070
libavif: ignore CVE-2025-48175
libconfuse: patch CVE-2022-40320
hdf5: patch CVE-2025-2913
hdf5: patch CVE-2025-2914
hdf5: patch CVE-2025-2915
hdf5: patch CVE-2025-2923, CVE-2025-6816, CVE-2025-6856
hdf5: patch CVE-2025-2924
hdf5: patch CVE-2025-2925
hdf5: patch CVE-2025-6269, CVE-2025-6270, CVE-2025-6516
libppd: patch CVE-2024-47175
libcupsfilters: patch CVE-2024-47076
libraw: patch CVE-2025-43961 CVE-2025-43962
libraw: patch CVE-2025-43963
libraw: patch CVE-2025-43964
zlog: fix CVE-2024-22857
memcached: patch CVE-2023-46852
memcached: patch CVE-2023-46853
ndpi: ignore CVE-2025-25066
libiec61850: patch CVE-2024-26529
libiec61850: patch CVE-2024-45970
libiec61850: patch CVE-2024-45971
mbedtls: upgrade 3.6.4 -> 3.6.5
hostapd: patch CVE-2025-24912
Archana Polampalli (4):
modejs: upgrade 20.18.0 -> 20.18.2
tftpy: fix CVE-2023-46566
tcpreplay: fix CVE-2024-22654
apache2: upgrade 2.4.64 - 2.4.65
Ariel D'Alessandro (1):
pipewire: Install missing ALSA config files
Armin Kuster (1):
Revert "mariadb: fix runtime failure on riscv"
Ashish Sharma (2):
nginx: Backport fix for CVE-2024-7347
postgresql: Backport fix for CVE-2024-7348
AshishKumar Mishra (1):
meta-oe: image: optionally remove RAW image after sparse image creation
Awais Belal (2):
mongodb: fix build with python 3.12
mongodb: update to 4.4.29
BINDU (1):
flatbuffers: adapt for cross-compilation environments
Barry Grussling (1):
postgresql: Break perl RDEPENDS
Bastian Krause (2):
libsocketcan: use https instead of git protocol
canutils: use https instead of git protocol
Benjamin Szőke (1):
tree: fix broken links
Changqing Li (11):
pavucontrol: update SRC_URI
libatasmart: Update SRC_URI
mariadb: fix runtime failure on riscv
dlt-daemon: make DLT_WatchdogSec configurable
abseil-cpp: upgrade 20240116.2 -> 20240116.3
nginx: fix CVE-2025-23419
libblockdev: fix CVE-2025-6019
udisks2: Hardening measure of CVE-2025-6019
phpmyadmin: upgrade 5.2.1 -> 5.2.2
luajit: fix several CVEs
mariadb: correct STACK_DIRECTION setting
Chen Qi (6):
libdbd-mysql-perl: avoid invoking assert_lib at do_configure stage
python3-protobuf: remove useless and problematic .pth file
graphviz: remove obsolete and problematic patch
protobuf: fix CVE-2024-7254
protobuf: upgrade from 4.25.3 to 4.25.8
python3-protobuf: upgrade from 4.25.3 to 4.25.8
Chris Laplante (1):
poco: fix branch: master => poco-1.12.5
Christos Gavros (1):
corosync: reproducibility issue
Claus Stovgaard (2):
lcov: sort RDEPENDS alphabetical
lcov: Add missing RDEPENDS
Clayton Casciato (1):
chrony: use inherit_defer for conditional inherit of useradd
Deepak Rathore (1):
protobuf 4.25.8: Mark CVE-2024-7254 as patched
Divya Chellam (7):
nginx: upgrade 1.25.3 -> 1.25.4
redis: upgrade 7.2.6 -> 7.2.7
krb5: fix CVE-2025-24528
openvpn: upgrade 2.6.12 -> 2.6.14
libssh: fix CVE-2025-4878
libssh: fix CVE-2025-5987
jq: fix CVE-2025-9403
Dmitry Baryshkov (1):
android-tools: Create flag file /etc/usb-debugging-enabled
Esben Haabendal (1):
netplan: add missing runtime dependencies
Etienne Cordonnier (3):
uutils-coreutils: upgrade 0.0.25 -> 0.0.26
uutils-coreutils: upgrade 0.0.26 -> 0.0.27
uutils-coreutils: fix compilation with selinux
Fabrice Aeschbacher (1):
mosquitto: upgrade 2.0.18 -> 2.0.19
Fathi Boudra (2):
python3-django: upgrade 4.2.11 -> 4.2.16
python3-django: upgrade 5.0.4 -> 5.0.9
Frank de Brabander (3):
python3-pydantic-core: fix incompatible version
python3-pydantic-core: fix TMPDIR path reference
python3-pydantic-core: add missing RDEPENDS for ptest
Grygorii Tertychnyi (1):
libusbgx: fix gadget-stop install
Guocai He (6):
python3-pylint: correct the SRC_URI
libconfig: correct the SRC_URI
logcheck: correct the SRC_URI
thrift: correct the SRC_URI
softhsm: correct the SRC_URI
mariadb: File conflicts for multilib
Guðni Már Gilbert (1):
mbedtls: upgrade 3.6.3.1 -> 3.6.4
Gyorgy Sarvari (35):
poppler: fix typos in CVE-2025-52886-0001.patch
mod-dnssd: update SRC_URI
mosh: set working SRC_URI
psqlodbc: set valid SRC_URI
collectd: set working SRC_URI
apache2: ignore irrelevant CVEs
civetweb: patch CVE-2025-55763
dovecot: patch CVE-2022-30550
pm-qa: update git fetch protocol
tokyocabinet: switch to working SRC_URI
tokyocabinet: fix license
iperf2: ignore irrelevant CVEs
jasper: patch CVE-2025-8835
jasper: patch CVE-2025-8836
jasper: patch CVE-2025-8837
etcd: patch CVE-2023-32082
freerdp3: patch CVE-2024-32039 and CVE-2024-32041
freerdp3: patch CVE-2024-32040
freerdp3: patch CVE-2024-32458
freerdp3: patch CVE-2024-32459
freerdp3: patch CVE-2024-32460
freerdp3: patch CVE-2024-32658
freerdp3: patch CVE-2025-32659
freerdp3: patch CVE-2024-32660
freerdp3: patch CVE-2024-32661
freerdp3: patch CVE-2024-32662
exiv2: patch CVE-2025-26623
exiv2: patch CVE-2025-54080
exiv2: patch CVE-2025-55304
redis: upgrade 6.2.18 -> 6.2.20
emacs: patch CVE-2024-30202
emacs: patch CVE-2024-30203
emacs: patch CVE-2024-30204
emacs: patch CVE-2024-30205
emacs: patch CVE-2024-39331
Haixiao Yan (4):
openvpn: fix CVE-2024-28882
openvpn: upgrade 2.6.10 -> 2.6.12
lmsensors: Clean stale files for sensord to avoid incorrect GCC header dependencies
python3-posix-ipc: fix runtime error
Harish Sadineni (1):
bpftool: Add support for riscv64
Hieu Van Nguyen (1):
gphoto2: Fix contains reference to TMPDIR [buildpaths] warning
Hitendra Prajapati (8):
tgt: fix CVE-2024-45751
libssh: fix CVE-2025-5318
redis: fix CVE-2025-32023
libssh: fix CVE-2025-5351 & CVE-2025-5372
open-vm-tools: fix CVE-2025-22247
libssh: fix CVE-2025-4877
openjpeg: fix for CVE-2025-54874
libjxl: fix CVE-2024-11403 & CVE-2024-11498
Hongxu Jia (1):
nodejs: support cross compile without qemu user conditionally
J. S (2):
nodejs: upgrade 20.16.0 -> 20.17.0
nodejs: upgrade 20.17.0 -> 20.18.0
J. S. (3):
znc: Fix buildpaths QA errors
nodejs: cleanup
xfce4 update HOMEPAGEs
Jan Vermaete (1):
python3-werkzeug: added python3-difflib as RDEPENDS
Jason Schonberg (1):
nodejs: upgrade 20.13.0 -> 20.16.0
Jef Driesen (2):
nginx: fix the tarball and license checksums
lcov: Add missing RDEPENDS for nativesdk
Jeroen Hofstee (5):
nodejs: backport a patch to prevent brotli crashing nodejs
can-utils: fix printing / reading timestamps
can-utils: handle CAN_ERR_CNT correctly
php: ignore CVE-2024-3566
nodejs: ignore CVE-2024-3566
Jeroen Knoops (1):
nng: Rename default branch of github.com:nanomsg/nng.git
Jiaying Song (15):
rrdtool: Fix do_populate_sysroot QA issues
nftables: change ptest output format
debootstrap: fix do_fetch error
wireguard-tools: fix do_fetch error
vlock: fix do_fetch error
openipmi: upgrade 2.0.34->2.0.36
tcpreplay: fix CVE-2023-43279
xfce-dusk-gtk3: fix do_fetch error
eject: fix do_fetch error
libdev-checklib-perl: fix do_fetch error
xmlsec1: Switch SRC_URI to use github release
chrony: fix do_fetch error
v4l-utils: Fix QA and build errors related to _TIME_BITS on 32-bit
webkitgtk3: update 2.44.1 -> 2.44.3
webkitgtk3: fix do_configure error on beaglebone-yocto
Jinfeng Wang (2):
netplan: Fix CVE-2022-4968
postfix: fix rootfs file difference
Justin Bronder (1):
python3-xmodem: replace hardcoded /usr with ${prefix}
Khem Raj (32):
python3-pydantic-core: Fix build with python 3.12.4
log4cpp: Fix buildpaths QA error
python3-pydantic: Upgrade to 2.7.3
mariadb: Upgrade to 10.11.9 release
ndisc: Remove buildpaths from binaries
ndisc6: Fix reproducible build
ghex,gnome-chess,gnome-photos: Add missing dep on itstool-native
nodejs: Upgrade to 20.13.0 release
nodejs: Fix build with libc++ 19
wolfssl: Add packageconfig for reproducible build
blueman: Fix buildpathe issue with cython generated code
botan: Make it reproducible
keepalived: Make build reproducible
ldns: Fix buildpaths QA issues
python3-kivy: Remove buildpaths from comments in generated C sources
python3-pyproj: Fix buildpaths QA Error
python3-pyproj: Remove absolute paths from cython generated .c files
python3-pycocotools: Remove absolute paths from comments
lprng: Specify target paths for needed utilities
fwknop: Specify target locations of gpg and wget
e2tools: Fix buildpaths QA warning in config.status in ptest
sharutils: Let POSIX_SHELL be overridable from environment
python3-posix-ipc: switch to PEP-517 build backend
gtkwave: Add libtirpc to depends
ssmping: Use debian mirror for SRC_URI
enca: Fix cross builds
ckermit: Define return type for main
ckermit: Fix build with GCC-15
procmail: Fix build with GCC-14
uim: Stick to C17
freerdp: Upgrade 2.11.2 -> 2.11.7
influxdb: Do not remove non-existing files
Leon Anavi (2):
sip: Upgrade 6.8.3 -> 6.8.6
sip: Fix homepage and license
Leonard Anderweit (1):
lmsensors: Fix build without sensord
Libo Chen (3):
thin-provisioning-tools: install missed thin_shrink and era_repair
grpc: Fix CVE-2024-7246
libgpiod: fix gpiod-cxx-test failed test case
Marc Ferland (2):
polkit: update SRC_URI
libvncserver: fix generated LibVNCServerTargets.cmake
Markus Volk (4):
exiv2: update 0.28.0 -> 0.28.2
gnome-remote-desktop: update 46.1 -> 46.2
geary: add itstool-native dependency
eog: add itstool-native dependency
Martin Jansa (13):
bolt: package systemd_system_unitdir correctly
giflib: fix build with gold and avoid imagemagick-native dependency
Revert "gcab: ignore buildpaths error from sources"
gpm: fix buildpaths QA issue
xerces-c: fix buildpaths QA issue
xmlrpc-c: update SRCREV
lapack: add PACKAGECONFIG for cblas
lapack: fix buildpaths in ptest also when CBLAS is enabled
gcab: fix buildpaths QA issue
python3-posix-ipc: improve build_support
python3-h5py: backport fixes for incompatible-pointer-types issues
abseil-cpp: fix build with gcc-15 on host
nodejs: fix build with gcc-15 on host
Martin Schwan (1):
linuxptp: Add systemd instance specifier for ptp4l dependency
Michael Olbrich (1):
nftables: avoid python dependencies when building without python
Michael Opdenacker (1):
kernel-hardening-checker: backport recipe
Mikko Rapeli (3):
fwupd: skip buildpaths errors
gcab: ignore buildpaths error from sources
libjcat: skip buildpaths check
Mingli Yu (2):
asio: Add ptest support
ptest-packagelists-meta-oe.inc: Add asio
Neel Gandhi (1):
v4l-utils: Install media ctrl header and library files
Nikhil R (2):
nftables: Conditionally add ${PN}-python as RDEPENDS for ptest
rocksdb: Add an option to set static library
Niko Mauno (16):
python3-xlsxwriter: Fix LICENSE
python3-cbor2: Fix LICENSE and LIC_FILES_CHKSUM
python3-crc32c: Amend LICENSE declaration
python3-email-validator: Fix LICENSE
python3-lru-dict: Fix LICENSE and change SUMMARY to DESCRIPTION
python3-mock: Fix LICENSE
python3-parse-type: Fix LICENSE
python3-pillow: Fix LICENSE and change SUMMARY to DESCRIPTION
python3-platformdirs: Fix LICENSE
python3-colorama: Fix LICENSE
python3-fann2: Fix LICENSE
python3-nmap: Fix LICENSE and LIC_FILES_CHKSUM
python3-pycurl: Fix LICENSE
python3-googleapis-common-protos: Fix LIC_FILES_CHKSUM
python3-haversine: Fix LIC_FILES_CHKSUM
python3-libevdev: Fix LIC_FILES_CHKSUM
Ninette Adhikari (6):
imagemagick: Update status for CVE
imagemagick: Update status for CVE
imagemagick: Update status for CVE
xsp: CVE status update for CVE-2006-2658
influxdb: Update CVE status for CVE-2019-10329
monkey: Update status for CVE-2013-2183
Peter Kjellerstedt (6):
hostapd: Support running "devtool modify hostapd"
hostapd: Only include the relevant parts from README in LIC_FILES_CHKSUM
libjs-jquery-icheck: Correct LIC_FILES_CHKSUM
libdevmapper: Inherit nopackages
ebtables: Remove the dependecy on bash
libeigen: Remove LGPL code
Peter Marko (41):
libndp: Patch CVE-2024-5564
squid: patch CVE-2024-37894
hostapd: Patch CVE-2024-3596
hostapd: Patch security advisory 2024-2
nss: patch CVE-2024-6602
nss: patch CVE-2024-6609
squid: conditionally set status of CVE-2024-45802
thrift: fix c++ generated code compilation with clang
grpc: patch CVE-2024-11407
python3-grpcio: patch CVE-2024-11407
python3-grpcio(-tools): fix build concurrency issue
libmodbus: patch CVE-2024-10918
libmodbus: ignore CVE-2023-26793 and CVE-2024-34244
libcoap: patch CVE-2024-31031
spdlog: patch CVE-2025-6140
minifi-cpp: patch spdlog CVE-2025-6140
poco: ignore additional failing tests
poco: patch CVE-2025-6375
nginx: patch CVE-2025-53859
fontforge: patch CVE-2024-25081 and CVE-2024-25082
fcgi: patch CVE-2025-23016
procmail: patch CVE-2014-3618
procmail: patch CVE-2017-16844.
ace: ignore CVE-2009-1147
audiofile: fix multiple CVEs
audiofile: patch CVE-2017-6829
audiofile: fix multiple CVEs
audiofile: patch CVE-2017-6831
audiofile: patch CVE-2017-6839
emlog: set CVE_PRODUCT
freerdp: patch CVE-2024-32661
freerdp: mark CVE-2024-32662 as fixed
freerdp3: set CVE_PRODUCT
corosync: fix upstream version check
corosync: upgrade 3.1.6 -> 3.1.9
corosync: patch CVE-2025-30472
dash: set CVE_PRODUCT
gattlib: mark CVE-2019-6498 as fixed
memcached: ignore disputed CVE-2022-26635
monkey: ignore CVE-2013-1771
squid: patch CVE-2025-59362
Poonam Jadhav (1):
tcpreplay: Fix CVE-2023-4256
Praveen Kumar (4):
php: upgrade 8.2.28 -> 8.2.29
polkit: fix CVE-2025-7519
yasm: fix CVE-2024-22653
cjson: upgrade 1.7.18 -> 1.7.19
Preeti Sachan (1):
bpftool: fix libelf.h not found error
Raghuvarya S (2):
android-tools-adbd.service: Update ConditionPathExists to /etc
android-toold-adbd: Fix inconsistency between selinux configurations
Rajeshkumar Ramasamy (1):
open-vm-tools: fix CVE-2025-41244
Randolph Sapp (2):
opencl-clhpp: add native and nativesdk
vulkan-cts: allow vulkan versions > 1.3
Randy MacLeod (1):
python3-pyyaml-include: support native and nativesdk build
Robert Yang (1):
hostapd: Add CVE id to CVE-2024-3596_00.patch
Roland Kovacs (2):
jq-1.7.1: Backport multiple CVE fixes
jq: add Upstream-Status and CVE tags into .patch files
Ryan Eatmon (1):
kernel-selftest: Update to allow for turning on all tests
Sana Kazi (2):
libp11: Treat all openssl-3.x releases the same
imagemagick: guard sed operations in do_install for optional files
Saravanan (2):
udisks2: upgrade 2.10.1 -> 2.10.2
fio: fix CVE-2025-10823
Scott Murray (2):
python3-grpcio: Fix build with gcc-14
python3-grpcio: backport abseil-cpp RISC-V fix
Shubham Pushpkar (2):
wireshark 4.2.7: Fix CVE-2024-9781
cjson 1.7.18: Fix CVE-2025-57052
Siddharth Doshi (2):
apache2: Upgrade 2.4.59 -> 2.4.60
apache2: Upgrade 2.4.60 -> 2.4.62
Sofiane HAMAM (2):
Wolfssl: add ptest
wolfssl: Upgrade 5.7.0 -> 5.7.2
Soumya Sambu (14):
python3-sqlparse: Fix CVE-2024-4340
python3-werkzeug: upgrade 3.0.1 -> 3.0.3
gtk+: Fix CVE-2024-6655
python3-twisted: Fix CVE-2024-41671
python3-flask-cors: Fix CVE-2024-6221
python3-werkzeug: upgrade 3.0.3 -> 3.0.6
python3-tornado: Upgrade 6.4 -> 6.4.2
python3-django: upgrade 4.2.16 -> 4.2.17
python3-django: upgrade 5.0.9 -> 5.0.10
python3-django: upgrade 5.0.10 -> 5.0.11
python3-django: upgrade 4.2.17 -> 4.2.18
php: Upgrade 8.2.26 -> 8.2.28
iniparser: Fix CVE-2025-0633
python3-django: upgrade 4.2.18 -> 4.2.20
Sunil Dora (1):
layer.conf: add bpftrace to NON_MULTILIB_RECIPES
Swamil Jain (1):
kmsxx: Revert to using original name for kmstest
Thomas Roos (1):
libcamera: backport 0.4.0 from master-next
Tim Orling (1):
python3-pydantic: upgrade 2.7.3 -> 2.7.4
Trevor Woerner (2):
apache2: use update-alternatives for httpd
iperf3: throughput fix
Vijay Anusuri (16):
krb5: upgrade 1.21.2 -> 1.21.3
wireshark: upgrade 4.2.4 -> 4.2.5
wireshark: upgrade 4.2.5 -> 4.2.7
php: upgrade 8.2.24 -> 8.2.26
openjpeg: upgrade 2.5.0 -> 2.5.3
postgresql: upgrade 16.5 -> 16.8
wireshark: upgrade 4.2.7 -> 4.2.9
proftpd: Fix CVE-2024-57392
redis: upgrade 7.2.7 -> 7.2.8
wireshark: upgrade 4.2.9 -> 4.2.12
proftpd: Fix CVE-2023-51713
apache2: Upgrade 2.4.62 -> 2.4.64
poppler: Fix CVE-2025-43718
redis: upgrade 7.2.8 -> 7.2.11
redis: upgrade 6.2.16 -> 6.2.18
vorbis-tools: Fix CVE-2023-43361
Virendra Thakur (2):
opensc: Fix multiple cve CVE-2024-45615-45616-45617-45618-45619-45620
unbound: Fix CVE-2024-8508
Wang Mingyu (18):
python3-email-validator: upgrade 2.1.0 -> 2.1.1
python3-pydantic: upgrade 2.7.0 -> 2.7.1
cjson: upgrade 1.7.17 -> 1.7.18
samba: upgrade 4.19.7 -> 4.19.8
postgresql: upgrade 16.3 -> 16.4
redis: upgrade 7.2.4 -> 7.2.5
mosquitto: upgrade 2.0.19 -> 2.0.20
uutils-coreutils: upgrade 0.0.27 -> 0.0.28
nana: Fix buildpaths warning.
fetchmail: Fix buildpaths warning.
fetchmail: disable rpath to fix buildpaths warning.
python3-posix-ipc: upgrade 1.1.1 -> 1.2.0
mbedtls: upgrade 3.6.3 -> 3.6.3.1
geoip: fix do_fetch error
rp-pppoe: update SRC_URI
procmail: fix build failure with gcc-14
procmail: Add -Wno-implicit-int to fix error of do_compile
libiec61850: upgrade 1.5.1 -> 1.5.3
Wentao Zhang (1):
meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64
Xiangyu Chen (1):
crash: fix crash cannot work with kaslr
Yi Zhao (12):
samba: upgrade 4.19.6 -> 4.19.7
mbedtls: upgrade 3.6.0 -> 3.6.1
mbedtls: upgrade 2.28.8 -> 2.28.9
libldb: upgrade 2.8.0 -> 2.8.1
mbedtls: upgrade 3.6.1 -> 3.6.2
freeradius: upgrade 3.2.3 -> 3.2.5
hostapd: Security fix for CVE-2023-52160
redis: upgrade 7.2.5 -> 7.2.6
mbedtls: upgrade 2.28.9 -> 2.28.10
mbedtls: 3.6.2 -> 3.6.3
wxwidgets: upgrade 3.2.1 -> 3.2.6
redis: upgrade 6.2.14 -> 6.2.16
Yoann Congal (3):
packagegroup-meta-oe: fix lvgl inclusion
mdio-tools: fix mdio-netlink kernel module reproducibility
gutenprint: fix a build race-condition
Yogesh Tyagi (1):
tbb-native: Fix build with gcc-13
Yogita Urade (18):
graphviz: fix CVE-2023-46045
hdf5: upgrade to 1.14.4
poppler: CVE-2024-6239
krb5: fix CVE-2024-26458 and CVE-2024-26461
php: upgrade 8.2.20 -> 8.2.24
postgresql: upgrade 16.4 -> 16.5
poppler: fix CVE-2024-56378
poppler: fix CVE-2025-32364
poppler: fix CVE-2025-32365
poppler: fix CVE-2025-43903
syslog-ng: fix CVE-2024-47619
postgresql: upgrade 16.8 -> 16.9
mariadb: upgrade 10.11.9 -> 10.11.12
poppler: fix CVE-2025-52886
poppler: fix CVE-2025-50420
postgresql: upgrade 16.9 -> 16.10
indent: fix CVE-2023-40305
poppler: fix CVE-2025-52885
Zhang Peng (21):
hiredis: remove ANSI color from ptest result
frr: fix CVE-2024-34088
frr: fix CVE-2024-31950
frr: fix CVE-2024-31951
frr: fix CVE-2024-31948
frr: fix CVE-2024-31949
libgsf: upgrade 1.14.52 -> 1.14.53
glade: fix CVE-2020-36774
opensc: fix CVE-2024-8443
lapack: fix TMPDIR reference in do_package_qa
iperf3: upgrade 3.16 -> 3.18
gnuplot: fix CVE-2025-3359
gnuplot: fix CVE-2025-31176
gnuplot: fix CVE-2025-31177
gnuplot: fix CVE-2025-31178
gnuplot: fix CVE-2025-31179
gnuplot: fix CVE-2025-31180
gnuplot: fix CVE-2025-31181
iperf3: fix CVE-2025-54349
iperf3: fix CVE-2025-54350
wxwidgets: fix CVE-2024-58249
Zoltán Böszörményi (1):
gutenprint: 5.3.5
akash hadke (1):
python3-flatbuffers: provide nativesdk support
alperak (8):
tayga: Fix contains reference to TMPDIR [buildpaths] warning
etcd-cpp-apiv3: Fix contains reference to TMPDIR [buildpaths] warning
exiv2: Upgrade 0.28.2 to 0.28.3 for CVE fix
jsonrpc: Fix contains reference to TMPDIR [buildpaths] warning
rdist: Fix contains reference to TMPDIR [buildpaths] warning
perfetto: Fix contains reference to TMPDIR [buildpaths] warning
hplip: Fix contains reference to TMPDIR [buildpaths] warning
boinc-client: Fix contains reference to TMPDIR [buildpaths] warning
gudnimar (1):
pipewire: upgrade 1.0.5 -> 1.0.9
hongxu (2):
p7zip: fix CVE-2023-52169 and CVE-2023-52168
indent: fix CVE-2024-0911
kjlau0112 (1):
mbedtls: drop tag parameter from SRC_URI.
mark.yang (1):
srecord: fix build failure with gcc-15
meta-raspberrypi: 1918a27419..8767e2ff80:
Adam Schafer (1):
add raspi-utils recipe to scarthgap branch
Andrei Gherzan (1):
docs: Fix ReadTheDocs sphinx.configuration requirement
Ayoub Zaki (1):
raspberrypi5: add bcm2712d0 overlay required for booting up correctly
Bassem Nomany (1):
mesa: update to 24.3.1
Damiano Ferrari (2):
rpi-eeprom: Update to latest release
rpi-bootfiles: Update to latest release
Florin Sarbu (1):
linux-raspberrypi.inc: Change defconfig for RPi3 64 bits
Garrett Brown (1):
linux: Enable CONFIG_I2C_BRCMSTB for proper HDMI I2C support
Gijs Peskens (1):
raspberrypi5.conf: Add CM5 dtb's
Jaeyoon Jung (1):
linux-raspberrypi: Drop deprecated configs from android-driver.cfg
Joshua Watt (1):
linux-firmware-rpidistro: Fix WiFi on Raspberry Pi 5
Khem Raj (2):
linux-raspberrypi-6.6: Upgrade to 6.6.63
rpi-base: Remove bcm2712-rpi-5-b.dtb from RPI_KERNEL_DEVICETREE target
Leon Anavi (11):
yocto-builder/Dockerfile: Ubuntu 22.04
rpi-base.inc: vc4-kms-dsi-ili9881-7inch.dtbo
u-boot_%.bbappend: Increase CONFIG_SYS_BOOTM_LEN
wayland-protocols: Upgrade 1.38 -> 1.45
mesa: Upgrade 24.3.1 -> 25.1.3
mesa: Upgrade 25.1.3 -> 25.1.6
mesa_%.bbappend: DISTRO_FEATURES for wayland
mesa: wayland-protocols: Fix signatures
linux-firmware-rpidistro: Update and stabilize
rpi-base.inc: Add w1-gpio-pi5.dtbo
rpi-base.inc: Add rpi-backlight.dtbo
Markus Volk (4):
linux-raspberrypi: add recipe for 6.12
linux-raspberrypi: update 6.12.2 -> 6.12.25
rpi-default-versions: Switch default kernel to 6.12
rpi-bootfiles: update to latest release
Martin Jansa (3):
docker-build: use --no-cache
Revert "rpi-default-versions: Switch default kernel to 6.12"
mesa, wayland-protocols: use separate recipe instead of bbappend
Matthias Klein (1):
linux-firmware-rpidistro: Upgrade to bookworm/20230625-2+rpt3
Omri Sarig (1):
linux-firmware-rpidistro: Fix wireless error message on RPi
Pierrick Curt (1):
rpi-base: build uart dts overlays by default
Thomas Roos (1):
Moving bcm2712d0.dtbo into rpi-base.inc
meta-arm: 58268ddccb..0f1e7bf92c:
Amr Mohamed (5):
kas: Update kas configuration for fvp-base.yml file
arm-systemready/linux-distros: new inc file for unattended installation
arm-systemready/linux-distros: Add kickstart file for Fedora unattended
arm-systemready/oeqa: Add new test for Fedora unattended installation
kas: Add new yml file for Distros unattended installation
Ben (3):
arm-systemready/linux-distros: Implement unattended openSUSE
arm-systemready/oeqa: Add unattended installation testcase
kas: Include unattended openSUSE test
Bence Balogh (1):
arm-bsp/trusted-firmware-m: corstone1000: Fix MPU configuration
Harsimran Singh Tungal (1):
arm-bsp,kas: corstone1000: enable External System based on new yml file
Hugues KAMBA MPIANA (1):
arm-bsp/documentation: corstone1000: Add SystemReady IR v2.0 certification
Jon Mason (4):
arm-toolchain: remove libmount-mountfd-support when using binary toolchain
arm-bsp/fvp-base: Get 6.10 kernel working
arm/linux-yocto: disable CONFIG_MTD_NAND_FSL_IFC
arm-systemready/ir-acs: Update URL
Jose Quaresma (1):
bsp: optee-client: cleanup old tee-supplicant
Luca Fancellu (2):
arm/oeqa: Introduce retry mechanism for fvp_devices run_cmd
arm/lib: Handle timeout for spawn object on stop()
Romain Naour (4):
external-arm-toolchain: remove old sed fixup for libc.so
external-arm-toolchain: wrap symlink handling under usrmerge check
external-arm-toolchain: override dynamic loader path with usrmerge enabled
external-arm-toolchain: rebuild libmvec.so symlink if any
Ross Burton (5):
arm-base/linux-yocto: revert interim 6.10 patch for fvp-base
arm-system-ready/arm-systemready-ir-acs: add version to download filename
CI: use canonical git.yoctoproject.org URLs
arm/execstack-native: add new recipe
arm/fvp-base-a-aem: remove spurious executable stack from one library
Vasyl Vavrychuk (3):
external-arm-toolchain: wrap base_libdir vs libdir manipulations under usrmerge check
external-arm-toolchain: in libc.so GNU ld script use base_libdir
external-arm-toolchain: remove ${base_libdir}/libpthread*.so from FILES:${PN}
meta-security: 11ea91192d..bc865c5276:
Hitendra Prajapati (2):
clamav: fix CVE-2024-20505 & CVE-2024-20506
libhtp: fix CVE-2024-45797
Vijay Anusuri (2):
tpm2-tools: Upgrade 5.5 -> 5.7
tpm2-tss: upgrade 4.0.1 -> 4.0.2
Change-Id: Ief5b086436b2f3a4e819546fcd1bb9a5b1f608dd
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Diffstat (limited to 'poky/documentation')
131 files changed, 9240 insertions, 2122 deletions
diff --git a/poky/documentation/Makefile b/poky/documentation/Makefile index 189bd1dfac..65e29713d4 100644 --- a/poky/documentation/Makefile +++ b/poky/documentation/Makefile @@ -3,17 +3,18 @@ # You can set these variables from the command line, and also # from the environment for the first two. -SPHINXOPTS ?= -W --keep-going -j auto -SPHINXBUILD ?= sphinx-build +SPHINXOPTS ?= -W --keep-going -j auto +SPHINXBUILD ?= sphinx-build # Release notes are excluded because they contain contributor names and commit messages which can't be modified -VALEOPTS ?= --no-wrap --glob '!migration-guides/release-notes-*.rst' -VALEDOCS ?= . -SOURCEDIR = . -IMAGEDIRS = */svg -BUILDDIR = _build -DESTDIR = final -SVG2PNG = inkscape -SVG2PDF = inkscape +VALEOPTS ?= --no-wrap --glob '!migration-guides/release-notes-*.rst' +SOURCEDIR = . +VALEDOCS ?= $(SOURCEDIR) +SPHINXLINTDOCS ?= $(SOURCEDIR) +IMAGEDIRS = */svg +BUILDDIR = _build +DESTDIR = final +SVG2PNG = rsvg-convert +SVG2PDF = rsvg-convert ifeq ($(shell if which $(SPHINXBUILD) >/dev/null 2>&1; then echo 1; else echo 0; fi),0) $(error "The '$(SPHINXBUILD)' command was not found. Make sure you have Sphinx installed") @@ -25,10 +26,12 @@ help: .PHONY: all help Makefile clean stylecheck publish epub latexpdf -publish: Makefile html singlehtml +publish: Makefile epub latexpdf html singlehtml rm -rf $(BUILDDIR)/$(DESTDIR)/ mkdir -p $(BUILDDIR)/$(DESTDIR)/ cp -r $(BUILDDIR)/html/* $(BUILDDIR)/$(DESTDIR)/ + mkdir -p $(BUILDDIR)/$(DESTDIR)/_static + cp $(BUILDDIR)/epub/TheYoctoProject.epub $(BUILDDIR)/latex/theyoctoproject.pdf $(BUILDDIR)/$(DESTDIR)/_static/ cp $(BUILDDIR)/singlehtml/index.html $(BUILDDIR)/$(DESTDIR)/singleindex.html sed -i -e 's@index.html#@singleindex.html#@g' $(BUILDDIR)/$(DESTDIR)/singleindex.html @@ -40,11 +43,11 @@ PNGs := $(foreach dir, $(IMAGEDIRS), $(patsubst %.svg,%.png,$(wildcard $(SOURCED # Pattern rule for converting SVG to PDF %.pdf : %.svg - $(SVG2PDF) --export-filename=$@ $< + $(SVG2PDF) --format=Pdf --output=$@ $< # Pattern rule for converting SVG to PNG %.png : %.svg - $(SVG2PNG) --export-filename=$@ $< + $(SVG2PNG) --format=Png --output=$@ $< clean: @rm -rf $(BUILDDIR) $(PNGs) $(PDFs) poky.yaml sphinx-static/switchers.js releases.rst @@ -54,15 +57,18 @@ stylecheck: vale $(VALEOPTS) $(VALEDOCS) sphinx-lint: - sphinx-lint $(SOURCEDIR) + sphinx-lint $(SPHINXLINTDOCS) epub: $(PNGs) $(SOURCEDIR)/set_versions.py @$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O) +# Note: we need to pass buf_size here (which is also configurable from +# texmf.cnf), to avoid following error: +# Unable to read an entire line---bufsize=200000. Please increase buf_size in texmf.cnf. latexpdf: $(PDFs) $(SOURCEDIR)/set_versions.py - @$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O) + buf_size=10000000 $(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O) all: html epub latexpdf diff --git a/poky/documentation/README b/poky/documentation/README index b60472fcbf..c394ab9288 100644 --- a/poky/documentation/README +++ b/poky/documentation/README @@ -165,7 +165,15 @@ To run Vale: $ make stylecheck -Link checking the Yocto Project documentation +Style checking the whole documentation might take some time and generate a +lot of warnings/errors, thus one can run Vale on a subset of files or +directories: + + $ make stylecheck VALEDOCS=<file> + $ make stylecheck VALEDOCS="<file1> <file2>" + $ make stylecheck VALEDOCS=<dir> + +Lint checking the Yocto Project documentation ============================================= To fix errors which are not reported by Sphinx itself, @@ -179,6 +187,14 @@ To run sphinx-lint: $ make sphinx-lint +Lint checking the whole documentation might take some time and generate a +lot of warnings/errors, thus one can run sphinx-lint on a subset of files +or directories: + + $ make sphinx-lint SPHINXLINTDOCS=<file> + $ make sphinx-lint SPHINXLINTDOCS="<file1> <file2>" + $ make sphinx-lint SPHINXLINTDOCS=<dir> + Sphinx theme and CSS customization ================================== @@ -413,5 +429,22 @@ both the Yocto Project and BitBake manuals: Submitting documentation changes ================================ -Please see the top level README file in this repository for details of where -to send patches. +Please refer to our contributor guide here: https://docs.yoctoproject.org/contributor-guide/ +for full details on how to submit changes. + +As a quick guide, patches should be sent to docs@lists.yoctoproject.org +The git command to do that would be: + + git send-email -M -1 --to docs@lists.yoctoproject.org + +The 'To' header can be set as default for this repository: + + git config sendemail.to docs@lists.yoctoproject.org + +Now you can just do 'git send-email origin/master..' to send all local patches. + +Read the other sections in this document and documentation/standards.md for +rules to follow when contributing to the documentation. + +Git repository: https://git.yoctoproject.org/yocto-docs +Mailing list: docs@lists.yoctoproject.org diff --git a/poky/documentation/brief-yoctoprojectqs/index.rst b/poky/documentation/brief-yoctoprojectqs/index.rst index c5400e4ac8..b37142ef14 100644 --- a/poky/documentation/brief-yoctoprojectqs/index.rst +++ b/poky/documentation/brief-yoctoprojectqs/index.rst @@ -44,7 +44,7 @@ following requirements: much more will help to run multiple builds and increase performance by reusing build artifacts. -- At least &MIN_RAM; Gbytes of RAM, though a modern modern build host with as +- At least &MIN_RAM; Gbytes of RAM, though a modern build host with as much RAM and as many CPU cores as possible is strongly recommended to maximize build performance. @@ -57,7 +57,7 @@ following requirements: :ref:`dev-manual/start:preparing the build host` section in the Yocto Project Development Tasks Manual. -- +- Ensure that the following utilities have these minimum version numbers: - Git &MIN_GIT_VERSION; or greater - tar &MIN_TAR_VERSION; or greater @@ -65,7 +65,7 @@ following requirements: - gcc &MIN_GCC_VERSION; or greater. - GNU make &MIN_MAKE_VERSION; or greater -If your build host does not meet any of these three listed version +If your build host does not satisfy all of the above version requirements, you can take steps to prepare the system so that you can still use the Yocto Project. See the :ref:`ref-manual/system-requirements:required git, tar, python, make and gcc versions` @@ -78,7 +78,7 @@ You must install essential host packages on your build host. The following command installs the host packages based on an Ubuntu distribution:: - $ sudo apt install &UBUNTU_HOST_PACKAGES_ESSENTIAL; + $ sudo apt install &UBUNTU_DEBIAN_HOST_PACKAGES_ESSENTIAL; .. note:: @@ -182,7 +182,7 @@ an entire Linux distribution, including the toolchain, from source. page of the Yocto Project Wiki. #. **Initialize the Build Environment:** From within the ``poky`` - directory, run the :ref:`ref-manual/structure:\`\`oe-init-build-env\`\`` + directory, run the :ref:`ref-manual/structure:``oe-init-build-env``` environment setup script to define Yocto Project's build environment on your build host. @@ -252,7 +252,7 @@ an entire Linux distribution, including the toolchain, from source. file in the :term:`Build Directory`:: BB_HASHSERVE_UPSTREAM = "wss://hashserv.yoctoproject.org/ws" - SSTATE_MIRRORS ?= "file://.* http://cdn.jsdelivr.net/yocto/sstate/all/PATH;downloadfilename=PATH" + SSTATE_MIRRORS ?= "file://.* http://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH" BB_HASHSERVE = "auto" BB_SIGNATURE_HANDLER = "OEEquivHash" diff --git a/poky/documentation/bsp-guide/bsp.rst b/poky/documentation/bsp-guide/bsp.rst index 11ca5d8b76..73e31670d6 100644 --- a/poky/documentation/bsp-guide/bsp.rst +++ b/poky/documentation/bsp-guide/bsp.rst @@ -81,7 +81,7 @@ directory of that Layer. This directory is what you add to the ``conf/bblayers.conf`` file found in your :term:`Build Directory`, which is established after you run the OpenEmbedded build environment setup -script (i.e. :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``). +script (i.e. :ref:`ref-manual/structure:``oe-init-build-env```). Adding the root directory allows the :term:`OpenEmbedded Build System` to recognize the BSP layer and from it build an image. Here is an example:: @@ -166,7 +166,7 @@ section. BSPs, which are maintained in their own layers or in layers designed to contain several BSPs. To get an idea of machine support through BSP layers, you can look at the - :yocto_dl:`index of machines </releases/yocto/yocto-&DISTRO;/machines>` + :yocto_dl:`index of machines </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines>` for the release. #. *Optionally Clone the meta-intel BSP Layer:* If your hardware is @@ -229,7 +229,7 @@ section. #. *Initialize the Build Environment:* While in the root directory of the Source Directory (i.e. ``poky``), run the - :ref:`ref-manual/structure:\`\`oe-init-build-env\`\`` environment + :ref:`ref-manual/structure:``oe-init-build-env``` environment setup script to define the OpenEmbedded build environment on your build host. :: @@ -674,21 +674,21 @@ to the kernel recipe by using a similarly named append file, which is located in the BSP Layer for your target device (e.g. the ``meta-bsp_root_name/recipes-kernel/linux`` directory). -Suppose you are using the ``linux-yocto_4.4.bb`` recipe to build the +Suppose you are using the ``linux-yocto_6.12.bb`` recipe to build the kernel. In other words, you have selected the kernel in your ``"bsp_root_name".conf`` file by adding :term:`PREFERRED_PROVIDER` and :term:`PREFERRED_VERSION` statements as follows:: PREFERRED_PROVIDER_virtual/kernel ?= "linux-yocto" - PREFERRED_VERSION_linux-yocto ?= "4.4%" + PREFERRED_VERSION_linux-yocto ?= "6.12%" .. note:: When the preferred provider is assumed by default, the :term:`PREFERRED_PROVIDER` statement does not appear in the ``"bsp_root_name".conf`` file. -You would use the ``linux-yocto_4.4.bbappend`` file to append specific +You would use the ``linux-yocto_6.12.bbappend`` file to append specific BSP settings to the kernel, thus configuring the kernel for your particular BSP. @@ -698,14 +698,19 @@ in the Yocto Project Linux Kernel Development Manual. An alternate scenario is when you create your own kernel recipe for the BSP. A good example of this is the Raspberry Pi BSP. If you examine the -``recipes-kernel/linux`` directory you see the following:: +``recipes-kernel/linux`` directory in that layer you see the following +Raspberry Pi-specific recipes and associated files:: + files/ + linux-raspberrypi_6.12.bb + linux-raspberrypi_6.1.bb + linux-raspberrypi_6.6.bb linux-raspberrypi-dev.bb linux-raspberrypi.inc - linux-raspberrypi_4.14.bb - linux-raspberrypi_4.9.bb - -The directory contains three kernel recipes and a common include file. + linux-raspberrypi-v7_6.12.bb + linux-raspberrypi-v7_6.1.bb + linux-raspberrypi-v7_6.6.bb + linux-raspberrypi-v7.inc Developing a Board Support Package (BSP) ======================================== @@ -1177,7 +1182,7 @@ Use these steps to create a BSP layer: - *Create a Kernel Recipe:* Create a kernel recipe in ``recipes-kernel/linux`` by either using a kernel append file or a - new custom kernel recipe file (e.g. ``linux-yocto_4.12.bb``). The BSP + new custom kernel recipe file (e.g. ``linux-yocto_6.12.bb``). The BSP layers mentioned in the previous step also contain different kernel examples. See the ":ref:`kernel-dev/common:modifying an existing recipe`" section in the Yocto Project Linux Kernel Development Manual for @@ -1242,7 +1247,7 @@ located in :yocto_git:`poky/meta-yocto-bsp/conf/machine/beaglebone-yocto.conf PREFERRED_PROVIDER_virtual/xserver ?= "xserver-xorg" - MACHINE_EXTRA_RRECOMMENDS = "kernel-modules kernel-devicetree" + MACHINE_EXTRA_RRECOMMENDS = "kernel-modules" EXTRA_IMAGEDEPENDS += "virtual/bootloader" @@ -1258,23 +1263,21 @@ located in :yocto_git:`poky/meta-yocto-bsp/conf/machine/beaglebone-yocto.conf SERIAL_CONSOLES ?= "115200;ttyS0 115200;ttyO0 115200;ttyAMA0" PREFERRED_PROVIDER_virtual/kernel ?= "linux-yocto" - PREFERRED_VERSION_linux-yocto ?= "6.1%" + PREFERRED_VERSION_linux-yocto ?= "6.12%" KERNEL_IMAGETYPE = "zImage" - KERNEL_DEVICETREE = "am335x-bone.dtb am335x-boneblack.dtb am335x-bonegreen.dtb" - KERNEL_EXTRA_ARGS += "LOADADDR=${UBOOT_ENTRYPOINT}" + DTB_FILES = "am335x-bone.dtb am335x-boneblack.dtb am335x-bonegreen.dtb" + KERNEL_DEVICETREE = '${@' '.join('ti/omap/%s' % d for d in '${DTB_FILES}'.split())}' PREFERRED_PROVIDER_virtual/bootloader ?= "u-boot" SPL_BINARY = "MLO" UBOOT_SUFFIX = "img" UBOOT_MACHINE = "am335x_evm_defconfig" - UBOOT_ENTRYPOINT = "0x80008000" - UBOOT_LOADADDRESS = "0x80008000" MACHINE_FEATURES = "usbgadget usbhost vfat alsa" - IMAGE_BOOT_FILES ?= "u-boot.${UBOOT_SUFFIX} ${SPL_BINARY} ${KERNEL_IMAGETYPE} ${KERNEL_DEVICETREE}" + IMAGE_BOOT_FILES ?= "u-boot.${UBOOT_SUFFIX} ${SPL_BINARY} ${KERNEL_IMAGETYPE} ${DTB_FILES}" # support runqemu EXTRA_IMAGEDEPENDS += "qemu-native qemu-helper-native" @@ -1328,12 +1331,12 @@ Project Reference Manual. needed in the root filesystem. In this case, the U-Boot recipe must be built for the image. - At the end of the file, we also use this setings to implement + At the end of the file, we also use this setting to implement ``runqemu`` support on the host machine. - :term:`DEFAULTTUNE`: Machines use tunings to optimize machine, CPU, and application performance. - These features, which are collectively known as "tuning features", + These features --- collectively known as "tuning features" --- are set in the :term:`OpenEmbedded-Core (OE-Core)` layer. In this example, the default tuning file is :oe_git:`tune-cortexa8 </openembedded-core/tree/meta/conf/machine/include/arm/armv7a/tune-cortexa8.inc>`. @@ -1363,8 +1366,7 @@ Project Reference Manual. to create the sysroot when building a Wic image. - :term:`SERIAL_CONSOLES`: - Defines a serial console (TTY) to enable using getty. In this case, - the baud rate is "115200" and the device name is "ttyO0". + Defines one or more serial consoles (TTYs) to enable using getty. - :term:`PREFERRED_PROVIDER_virtual/kernel <PREFERRED_PROVIDER>`: Specifies the recipe that provides "virtual/kernel" when more than @@ -1374,7 +1376,7 @@ Project Reference Manual. - :term:`PREFERRED_VERSION_linux-yocto <PREFERRED_VERSION>`: Defines the version of the recipe used to build the kernel, which is - "6.1" in this case. + "6.12" in this case. - :term:`KERNEL_IMAGETYPE`: The type of kernel to build for the device. In this case, the @@ -1416,12 +1418,6 @@ Project Reference Manual. Specifies the value passed on the make command line when building a U-Boot image. - - :term:`UBOOT_ENTRYPOINT`: - Specifies the entry point for the U-Boot image. - - - :term:`UBOOT_LOADADDRESS`: - Specifies the load address for the U-Boot image. - - :term:`MACHINE_FEATURES`: Specifies the list of hardware features the BeagleBone device is capable of supporting. In this case, the device supports "usbgadget diff --git a/poky/documentation/conf.py b/poky/documentation/conf.py index 35c5c14535..c07b6c4199 100644 --- a/poky/documentation/conf.py +++ b/poky/documentation/conf.py @@ -13,6 +13,7 @@ # documentation root, use os.path.abspath to make it absolute, like shown here. # import os +import re import sys import datetime try: @@ -90,8 +91,9 @@ rst_prolog = """ # external links and substitutions extlinks = { - 'cve': ('https://nvd.nist.gov/vuln/detail/CVE-%s', 'CVE-%s'), + 'bitbake_git': ('https://git.openembedded.org/bitbake%s', None), 'cve_mitre': ('https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-%s', 'CVE-%s'), + 'cve_nist': ('https://nvd.nist.gov/vuln/detail/CVE-%s', 'CVE-%s'), 'yocto_home': ('https://www.yoctoproject.org%s', None), 'yocto_wiki': ('https://wiki.yoctoproject.org/wiki%s', None), 'yocto_dl': ('https://downloads.yoctoproject.org%s', None), @@ -110,6 +112,9 @@ extlinks = { 'wikipedia': ('https://en.wikipedia.org/wiki/%s', None), } +# To be able to use :manpage:`<something>` in the docs. +manpages_url = 'https://manpages.debian.org/{path}' + # Intersphinx config to use cross reference with BitBake user manual intersphinx_mapping = { 'bitbake': ('https://docs.yoctoproject.org/bitbake/' + bitbake_version, None) @@ -135,6 +140,7 @@ except ImportError: sys.exit(1) html_logo = 'sphinx-static/YoctoProject_Logo_RGB.jpg' +html_favicon = 'sphinx-static/favicon.ico' # Add any paths that contain custom static files (such as style sheets) here, # relative to this directory. They are copied after the builtin static files, @@ -158,11 +164,34 @@ html_last_updated_fmt = '%b %d, %Y' # Remove the trailing 'dot' in section numbers html_secnumber_suffix = " " +# We need XeTeX to process special unicode character, sometimes the contributor +# list from the release note contains those. +# See https://docs.readthedocs.io/en/stable/guides/pdf-non-ascii-languages.html. +latex_engine = 'xelatex' +latex_use_xindy = False latex_elements = { 'passoptionstopackages': '\\PassOptionsToPackage{bookmarksdepth=5}{hyperref}', - 'preamble': '\\setcounter{tocdepth}{2}', + 'preamble': '\\usepackage[UTF8]{ctex}\n\\setcounter{tocdepth}{2}', } + +from sphinx.search import SearchEnglish +from sphinx.search import languages +class DashFriendlySearchEnglish(SearchEnglish): + + # Accept words that can include 'inner' hyphens or dots + _word_re = re.compile(r'[\w]+(?:[\.\-][\w]+)*') + + js_splitter_code = r""" +function splitQuery(query) { + return query + .split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}\-\.]+/gu) + .filter(term => term.length > 0); +} +""" + +languages['en'] = DashFriendlySearchEnglish + # Make the EPUB builder prefer PNG to SVG because of issues rendering Inkscape SVG from sphinx.builders.epub3 import Epub3Builder Epub3Builder.supported_image_types = ['image/png', 'image/gif', 'image/jpeg'] diff --git a/poky/documentation/contributor-guide/recipe-style-guide.rst b/poky/documentation/contributor-guide/recipe-style-guide.rst index 08d8fb4259..617e202431 100644 --- a/poky/documentation/contributor-guide/recipe-style-guide.rst +++ b/poky/documentation/contributor-guide/recipe-style-guide.rst @@ -47,10 +47,10 @@ Debian policy closely. When a recipe references a git revision that does not correspond to a released version of software (e.g. is not a tagged version), the :term:`PV` variable -should include the Git revision using the following to make the -version clear:: +should include the sign ``+``, so :term:`bitbake` automatically includes package +version information during the packaging phase:: - PV = "<version>+git${SRCPV}" + PV = "<version>+git" In this case, ``<version>`` should be the most recently released version of the software from the current source revision (``git describe`` can be useful for @@ -395,7 +395,7 @@ one CVE is fixed, separate them using spaces. CVE Examples ------------ -This should be the header of patch that fixes :cve:`2015-8370` in GRUB2:: +This should be the header of patch that fixes :cve_nist:`2015-8370` in GRUB2:: grub2: Fix CVE-2015-8370 diff --git a/poky/documentation/contributor-guide/submit-changes.rst b/poky/documentation/contributor-guide/submit-changes.rst index 47a416b245..01c273d148 100644 --- a/poky/documentation/contributor-guide/submit-changes.rst +++ b/poky/documentation/contributor-guide/submit-changes.rst @@ -65,6 +65,13 @@ use to identify your commits:: git config --global user.name "Ada Lovelace" git config --global user.email "ada.lovelace@gmail.com" +By default, Git adds a signature line at the end of patches containing the Git +version. We suggest to remove it as it doesn't add useful information. + +Remove it with the following command:: + + git config --global format.signature "" + Clone the Git repository for the component to modify ---------------------------------------------------- @@ -116,110 +123,116 @@ to add the upgraded version. $ git commit -s file1 file2 dir1 dir2 ... - To include **a**\ ll staged files:: + To include all staged files:: $ git commit -sa - - The ``-s`` option of ``git commit`` adds a "Signed-off-by:" line - to your commit message. There is the same requirement for contributing - to the Linux kernel. Adding such a line signifies that you, the - submitter, have agreed to the `Developer's Certificate of Origin 1.1 - <https://www.kernel.org/doc/html/latest/process/submitting-patches.html#sign-your-work-the-developer-s-certificate-of-origin>`__ - as follows: - - .. code-block:: none - - Developer's Certificate of Origin 1.1 - - By making a contribution to this project, I certify that: - - (a) The contribution was created in whole or in part by me and I - have the right to submit it under the open source license - indicated in the file; or - - (b) The contribution is based upon previous work that, to the best - of my knowledge, is covered under an appropriate open source - license and I have the right under that license to submit that - work with modifications, whether created in whole or in part - by me, under the same open source license (unless I am - permitted to submit under a different license), as indicated - in the file; or - - (c) The contribution was provided directly to me by some other - person who certified (a), (b) or (c) and I have not modified - it. - - (d) I understand and agree that this project and the contribution - are public and that a record of the contribution (including all - personal information I submit with it, including my sign-off) is - maintained indefinitely and may be redistributed consistent with - this project or the open source license(s) involved. - - - Provide a single-line summary of the change and, if more - explanation is needed, provide more detail in the body of the - commit. This summary is typically viewable in the "shortlist" of - changes. Thus, providing something short and descriptive that - gives the reader a summary of the change is useful when viewing a - list of many commits. You should prefix this short description - with the recipe name (if changing a recipe), or else with the - short form path to the file being changed. + #. The ``-s`` option of ``git commit`` adds a "Signed-off-by:" line + to your commit message. There is the same requirement for contributing + to the Linux kernel. Adding such a line signifies that you, the + submitter, have agreed to the `Developer's Certificate of Origin 1.1 + <https://www.kernel.org/doc/html/latest/process/submitting-patches.html#sign-your-work-the-developer-s-certificate-of-origin>`__ + as follows: - .. note:: + .. code-block:: none - To find a suitable prefix for the commit summary, a good idea - is to look for prefixes used in previous commits touching the - same files or directories:: + Developer's Certificate of Origin 1.1 - git log --oneline <paths> + By making a contribution to this project, I certify that: - - For the body of the commit message, provide detailed information - that describes what you changed, why you made the change, and the - approach you used. It might also be helpful if you mention how you - tested the change. Provide as much detail as you can in the body - of the commit message. + (a) The contribution was created in whole or in part by me and I + have the right to submit it under the open source license + indicated in the file; or - .. note:: + (b) The contribution is based upon previous work that, to the best + of my knowledge, is covered under an appropriate open source + license and I have the right under that license to submit that + work with modifications, whether created in whole or in part + by me, under the same open source license (unless I am + permitted to submit under a different license), as indicated + in the file; or + + (c) The contribution was provided directly to me by some other + person who certified (a), (b) or (c) and I have not modified + it. + + (d) I understand and agree that this project and the contribution + are public and that a record of the contribution (including all + personal information I submit with it, including my sign-off) is + maintained indefinitely and may be redistributed consistent with + this project or the open source license(s) involved. + + #. Provide a single-line summary of the change and, if more + explanation is needed, provide more detail in the description of the + commit. This summary is typically viewable in the "shortlist" of + changes. Thus, providing something short and descriptive that + gives the reader a summary of the change is useful when viewing a + list of many commits. You should prefix this short description + with the recipe name (if changing a recipe), or else with the + short form path to the file being changed. + + .. note:: - If the single line summary is enough to describe a simple - change, the body of the commit message can be left empty. + To find a suitable prefix for the commit summary, a good idea + is to look for prefixes used in previous commits touching the + same files or directories:: - - If the change addresses a specific bug or issue that is associated - with a bug-tracking ID, include a reference to that ID in your - detailed description. For example, the Yocto Project uses a - specific convention for bug references --- any commit that addresses - a specific bug should use the following form for the detailed - description. Be sure to use the actual bug-tracking ID from - Bugzilla for bug-id:: + git log --oneline <paths> - Fixes [YOCTO #bug-id] + #. For the commit description, provide detailed information + that describes what you changed, why you made the change, and the + approach you used. It might also be helpful if you mention how you + tested the change. Provide as much detail as you can in the commit + description. - detailed description of change + .. note:: -#. *Crediting contributors:* By using the ``git commit --amend`` command, - you can add some tags to the commit description to credit other contributors - to the change: + If the single line summary is enough to describe a simple + change, the commit description can be left empty. - - ``Reported-by``: name and email of a person reporting a bug - that your commit is trying to fix. This is a good practice - to encourage people to go on reporting bugs and let them - know that their reports are taken into account. + #. If the change addresses a specific bug or issue that is associated + with a bug-tracking ID, include a reference to that ID in the body of the + commit message. For example, the Yocto Project uses a + specific convention for bug references --- any commit that addresses + a specific bug should use the following form for the body of the commit + message. Be sure to use the actual bug-tracking ID from + Bugzilla for bug-id:: - - ``Suggested-by``: name and email of a person to credit for the - idea of making the change. + single-line summary of change - - ``Tested-by``, ``Reviewed-by``: name and email for people having - tested your changes or reviewed their code. These fields are - usually added by the maintainer accepting a patch, or by - yourself if you submitted your patches to early reviewers, - or are submitting an unmodified patch again as part of a - new iteration of your patch series. + Fixes [YOCTO #bug-id] - - ``CC:`` Name and email of people you want to send a copy - of your changes to. This field will be used by ``git send-email``. + detailed description of change - See `more guidance about using such tags - <https://www.kernel.org/doc/html/latest/process/submitting-patches.html#using-reported-by-tested-by-reviewed-by-suggested-by-and-fixes>`__ - in the Linux kernel documentation. + #. If other people participated in this patch, add some tags to the commit + description to credit other contributors to the change: + + - ``Reported-by``: name and email of a person reporting a bug + that your commit is trying to fix. This is a good practice + to encourage people to go on reporting bugs and let them + know that their reports are taken into account. + + - ``Suggested-by``: name and email of a person to credit for the + idea of making the change. + + - ``Tested-by``, ``Reviewed-by``: name and email for people having + tested your changes or reviewed their code. These fields are + usually added by the maintainer accepting a patch, or by + yourself if you submitted your patches to early reviewers, + or are submitting an unmodified patch again as part of a + new iteration of your patch series. + + - ``Cc``: name and email of people you want to send a copy + of your changes to. This field will be used by ``git send-email``. + + See `more guidance about using such tags + <https://www.kernel.org/doc/html/latest/process/submitting-patches.html#using-reported-by-tested-by-reviewed-by-suggested-by-and-fixes>`__ + in the Linux kernel documentation. + + .. note:: + + One can amend an existing git commit message to add missing tags for + contributors with the ``git commit --amend`` command. Test your changes ----------------- @@ -483,7 +496,7 @@ typical usage of ``git send-email``:: git send-email --to <mailing-list-address> *.patch Then, review each subject line and list of recipients carefully, and then -and then allow the command to send each message. +allow the command to send each message. You will see that ``git send-email`` will automatically copy the people listed in any commit tags such as ``Signed-off-by`` or ``Reported-by``. @@ -769,6 +782,38 @@ argument to ``git format-patch`` with a version number:: git format-patch -v2 <ref-branch> + +After generating updated patches (v2, v3, and so on) via ``git +format-patch``, ideally developers will add a patch version changelog +to each patch that describes what has changed between each revision of +the patch. Add patch version changelogs after the ``---`` marker in the +patch, indicating that this information is part of this patch, but is not +suitable for inclusion in the commit message (i.e. the git history) itself. +Providing a patch version changelog makes it easier for maintainers and +reviewers to succinctly understand what changed in all versions of the +patch, without having to consult alternate sources of information, such as +searching through messages on a mailing list. For example:: + + <patch title> + + <commit message> + + <Signed-off-by/other trailers> + --- + changes in v4: + - provide a clearer commit message + - fix spelling mistakes + + changes in v3: + - replace func() to use other_func() instead + + changes in v2: + - this patch was added in v2 + --- + <diffstat output> + + <unified diff> + Lastly please ensure that you also test your revised changes. In particular please don't just edit the patch file written out by ``git format-patch`` and resend it. @@ -825,3 +870,52 @@ Other layers may have similar testing branches but there is no formal requirement or standard for these so please check the documentation for the layers you are contributing to. +Acceptance of AI Generated Code +=============================== + +The Yocto Project and OpenEmbedded follow the guidance of the Linux Foundation +in regards to the use of generative AI tools. See: +https://www.linuxfoundation.org/legal/generative-ai. + +All of the existing guidelines in this document are expected to be followed, +including in the :doc:`recipe-style-guide`, and contributing the changes with +additional requirements to the items in section +:ref:`contributor-guide/submit-changes:Implement and commit changes`. + +All AI Generated Code must be labeled as such in the commit message, +prior to your ``Signed-off-by`` line. It is also strongly recommended, +that any patches or code within the commit also have a comment or other +indication that this code was AI generated. + +For example, here is a properly formatted commit message:: + + component: Add the ability to ... + + AI-Generated: Uses GitHub Copilot + + Signed-off-by: Your Name <your.name@domain> + +The ``Signed-off-by`` line must be written by you, and not the AI helper. +As a reminder, when contributing a change, your ``Signed-off-by`` line is +required and the stipulations in the `Developer's Statement of Origin +1.1 <https://developercertificate.org/>`__ still apply. + +Additionally, you must stipulate AI contributions conform to the Linux +Foundation policy, specifically: + +#. Contributors should ensure that the terms and conditions of the generative AI + tool do not place any contractual restrictions on how the tool's output can + be used that are inconsistent with the project's open source software + license, the project's intellectual property policies, or the Open Source + Definition. + +#. If any pre-existing copyrighted materials (including pre-existing open + source code) authored or owned by third parties are included in the AI tool's + output, prior to contributing such output to the project, the Contributor + should confirm that they have permission from the third party + owners -- such as the form of an open source license or public domain + declaration that complies with the project's licensing policies -- to use and + modify such pre-existing materials and contribute them to the project. + Additionally, the contributor should provide notice and attribution of such + third party rights, along with information about the applicable license + terms, with their contribution. diff --git a/poky/documentation/dev-manual/bblock.rst b/poky/documentation/dev-manual/bblock.rst new file mode 100644 index 0000000000..605bb75655 --- /dev/null +++ b/poky/documentation/dev-manual/bblock.rst @@ -0,0 +1,129 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Locking and Unlocking Recipes Using ``bblock`` +********************************************** + +By design, the OpenEmbedded build system builds everything from scratch +unless BitBake determines that specific tasks do not require rebuilding. +At startup, it computes a signature for all tasks, based on the task's input. +Then, it compares these signatures with the ones from the sstate cache (if they +exist). Any changes cause the task to rerun. + +During development, changes might trigger BitBake to rebuild certain +recipes, even when we know they do not require rebuilding at that stage. +For example, modifying a recipe can lead to rebuilding its native +counterpart, which might prove unnecessary. Editing the ``python3`` recipe, +for instance, can prompt BitBake to rebuild ``python3-native`` along with any +recipes that depend on it. + +To prevent this, use ``bblock`` to lock specific tasks or recipes to +specific signatures, forcing BitBake to use the sstate cache for them. + +.. warning:: + + Use ``bblock`` only during the development phase. + + Forcing BitBake to use the sstate cache, regardless of input changes, means + the recipe metadata no longer directly reflect the output. Use this feature + with caution. If you do not understand why signatures change, see the section + on :yocto_wiki:`understanding what changed </TipsAndTricks/Understanding_what_changed_(diffsigs_etc)>`. + + +Locking tasks and recipes +------------------------- + +To lock a recipe, use:: + + $ bblock recipe + +You can also use a space-separated list of recipes to lock multiple recipes:: + + $ bblock recipe1 recipe2 + +Locking a recipe means locking all tasks of the recipe. If you need to +lock only particular tasks, use the `-t` option with a comma-separated +list of tasks:: + + $ bblock -t task1,task2 recipe + + +Unlocking tasks and recipes +--------------------------- + +To unlock a recipe, use the ``-r`` option:: + + $ bblock -r recipe + +You can also use a space-separated list of recipes to unlock multiple recipes:: + + $ bblock -r recipe1 recipe2 + +Unlocking a recipe means unlocking all tasks of the recipe. If you need to +unlock only particular tasks use the ``-t`` option with a comma-separated +list of tasks:: + + $ bblock -r -t task1,task2 recipe + +To unlock all recipes, do not specify any recipe:: + + $ bblock -r + + +Configuration file +------------------ + +``bblock`` will dump the signatures in the ``build/conf/bblock.conf`` file, +included by default in :oe_git:`meta/conf/bitbake.conf </openembedded-core/tree/meta/conf/bitbake.conf>`. + +To dump the file, use the ``-d`` option:: + + $ bblock -d + + +Locking mechanism +----------------- + +``bblock`` computes the signature(s) of the task(s) and sets the 3 following +variables: :term:`SIGGEN_LOCKEDSIGS`, :term:`SIGGEN_LOCKEDSIGS_TYPES` +and :term:`SIGGEN_LOCKEDSIGS_TASKSIG_CHECK`. + +In particular, ``bblock`` sets:: + + SIGGEN_LOCKEDSIGS_TASKSIG_CHECK = "info" + SIGGEN_LOCKEDSIGS_TYPES += "${PACKAGE_ARCHS}" + + SIGGEN_LOCKEDSIGS_<package_arch> += "<recipe>:<task>:<signature>" + +This produces architecture specific locks and reminds user that some tasks +have locked signatures. + +Example +------- + +When working on the ``python3`` recipe, we can lock ``python3-native`` with +the following:: + + $ bblock python3-native + $ bblock -d + # Generated by bblock + SIGGEN_LOCKEDSIGS_TASKSIG_CHECK = "info" + SIGGEN_LOCKEDSIGS_TYPES += "${PACKAGE_ARCHS}" + + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_patch:865859c27e603ba42025b7bb766c3cd4c0f477e4962cfd39128c0619d695fce7" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_populate_sysroot:f8fa5d3194cef638416000252b959e86d0a19f6b7898e1f56b643c588cdd8605" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_prepare_recipe_sysroot:fe295ac505d9d1143313424b201c6f3f2a0a90da40a13a905b86b874705f226a" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_fetch:1b6e4728fee631bc7a8a7006855c5b8182a8224579e32e3d0a2db77c26459f25" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_unpack:2ad74d6f865ef75c35c0e6bbe3f9a90923a6b2c62c18a3ddef514ea31fbc588f" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_deploy_source_date_epoch:15f89b8483c1ad7507480f337619bb98c26e231227785eb3543db163593e7b42" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_configure:7960c13d23270fdb12b3a7c426ce1da0d2f5c7cf5e5d3f5bdce5fa330eb7d482" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_compile:012e1d4a63f1a78fc2143bd90d704dbcf5865c5257d6272aa7540ec1cd3063d9" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_install:d3401cc2afa4c996beb154beaad3e45fa0272b9c56fb86e9db14ec3544c68f9d" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_build:fa88bb7afb9046c0417c24a3fa98a058653805a8b00eda2c2d7fea68fc42f882" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_collect_spdx_deps:cc9c53ba7c495567e9a38ec4801830c425c0d1f895aa2fc66930a2edd510d9b4" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_create_spdx:766a1d09368438b7b5a1a8e2a8f823b2b731db44b57e67d8b3196de91966f9c5" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_create_package_spdx:46f80faeab25575e9977ba3bf14c819489c3d489432ae5145255635108c21020" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_recipe_qa:cb960cdb074e7944e894958db58f3dc2a0436ecf87c247feb3e095e214fec0e4" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_populate_lic:15657441621ee83f15c2e650e7edbb036870b56f55e72e046c6142da3c5783fd" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_create_manifest:24f0abbec221d27bbb2909b6e846288b12cab419f1faf9f5006ed80423d37e28" + SIGGEN_LOCKEDSIGS_x86_64 += "python3-native:do_addto_recipe_sysroot:bcb6a1905f113128de3f88d702b706befd6a786267c045ee82532759a7c214d7" + diff --git a/poky/documentation/dev-manual/bmaptool.rst b/poky/documentation/dev-manual/bmaptool.rst index f6f0e6afaf..87162a49c9 100644 --- a/poky/documentation/dev-manual/bmaptool.rst +++ b/poky/documentation/dev-manual/bmaptool.rst @@ -1,13 +1,13 @@ .. SPDX-License-Identifier: CC-BY-SA-2.0-UK -Flashing Images Using ``bmaptool`` -********************************** +Flashing Images Using `bmaptool` +******************************** A fast and easy way to flash an image to a bootable device is to use -bmaptool, which is integrated into the OpenEmbedded build system. -bmaptool is a generic tool that creates a file's block map (bmap) and +`bmaptool`, which is integrated into the OpenEmbedded build system. +`bmaptool` is a generic tool that creates a file's block map (bmap) and then uses that map to copy the file. As compared to traditional tools -such as dd or cp, bmaptool can copy (or flash) large files like raw +such as `dd` or `cp`, `bmaptool` can copy (or flash) large files like raw system image files much faster. .. note:: @@ -20,13 +20,13 @@ system image files much faster. $ sudo apt install bmap-tools - If you are unable to install the ``bmap-tools`` package, you will - need to build bmaptool before using it. Use the following command:: + need to build `bmaptool` before using it. Use the following command:: - $ bitbake bmaptool-native + $ bitbake bmaptool-native -caddto_recipe_sysroot Following, is an example that shows how to flash a Wic image. Realize -that while this example uses a Wic image, you can use bmaptool to flash -any type of image. Use these steps to flash an image using bmaptool: +that while this example uses a Wic image, you can use `bmaptool` to flash +any type of image. Use these steps to flash an image using `bmaptool`: #. *Update your local.conf File:* You need to have the following set in your ``local.conf`` file before building your image:: @@ -39,18 +39,17 @@ any type of image. Use these steps to flash an image using bmaptool: $ bitbake image -#. *Flash the Device:* Flash the device with the image by using bmaptool +#. *Flash the Device:* Flash the device with the image by using `bmaptool` depending on your particular setup. The following commands assume the image resides in the :term:`Build Directory`'s ``deploy/images/`` area: - - If you have write access to the media, use this command form:: + - If you installed the package for `bmaptool`, you can directly run:: - $ oe-run-native bmaptool-native bmaptool copy build-directory/tmp/deploy/images/machine/image.wic /dev/sdX + $ sudo bmaptool copy build-directory/tmp/deploy/images/machine/image.wic /dev/sdX - - If you do not have write access to the media, set your permissions - first and then use the same command form:: + - Otherwise, if you built `bmaptool` with BitBake, run:: - $ sudo chmod 666 /dev/sdX + $ sudo chmod a+w /dev/sdX # get write access to the media, needed only once after booting $ oe-run-native bmaptool-native bmaptool copy build-directory/tmp/deploy/images/machine/image.wic /dev/sdX For help on the ``bmaptool`` command, use the following command:: diff --git a/poky/documentation/dev-manual/building.rst b/poky/documentation/dev-manual/building.rst index fe502690dd..8c5aebdb0a 100644 --- a/poky/documentation/dev-manual/building.rst +++ b/poky/documentation/dev-manual/building.rst @@ -280,7 +280,9 @@ Follow these steps to create an :term:`Initramfs` image: #. *Create the Initramfs Image Recipe:* You can reference the ``core-image-minimal-initramfs.bb`` recipe found in the ``meta/recipes-core`` directory of the :term:`Source Directory` - as an example from which to work. + as an example from which to work. The ``core-image-minimal-initramfs`` recipe + is based on the :ref:`initramfs-framework <dev-manual/building:Customizing an + Initramfs using \`\`initramfs-framework\`\`>` recipe described below. #. *Decide if You Need to Bundle the Initramfs Image Into the Kernel Image:* If you want the :term:`Initramfs` image that is built to be bundled @@ -308,6 +310,86 @@ Follow these steps to create an :term:`Initramfs` image: and bundled with the kernel image if you used the :term:`INITRAMFS_IMAGE_BUNDLE` variable described earlier. +Customizing an Initramfs using ``initramfs-framework`` +------------------------------------------------------ + +The ``core-image-minimal-initramfs.bb`` recipe found in +:oe_git:`meta/recipes-core/images +</openembedded-core/tree/meta/recipes-core/images>` uses the +:oe_git:`initramfs-framework_1.0.bb +</openembedded-core/tree/meta/recipes-core/initrdscripts/initramfs-framework_1.0.bb>` +recipe as its base component. The goal of the ``initramfs-framework`` recipe is +to provide the building blocks to build a customized :term:`Initramfs`. + +The ``initramfs-framework`` recipe relies on shell initialization scripts +defined in :oe_git:`meta/recipes-core/initrdscripts/initramfs-framework +</openembedded-core/tree/meta/recipes-core/initrdscripts/initramfs-framework>`. Since some of +these scripts do not apply for all use cases, the ``initramfs-framework`` recipe +defines different packages: + +- ``initramfs-framework-base``: this package installs the basic components of + an :term:`Initramfs`, such as the ``init`` script or the ``/dev/console`` + character special file. As this package is a runtime dependency of all + modules listed below, it is automatically pulled in when one of the modules + is installed in the image. +- ``initramfs-module-exec``: support for execution of applications. +- ``initramfs-module-mdev``: support for `mdev + <https://wiki.gentoo.org/wiki/Mdev>`__. +- ``initramfs-module-udev``: support for :wikipedia:`Udev <Udev>`. +- ``initramfs-module-e2fs``: support for :wikipedia:`ext4/ext3/ext2 + <Extended_file_system>` filesystems. +- ``initramfs-module-nfsrootfs``: support for locating and mounting the root + partition via :wikipedia:`NFS <Network_File_System>`. +- ``initramfs-module-rootfs``: support for locating and mounting the root + partition. +- ``initramfs-module-debug``: dynamic debug support. +- ``initramfs-module-lvm``: :wikipedia:`LVM <Logical_volume_management>` rootfs support. +- ``initramfs-module-overlayroot``: support for mounting a read-write overlay + on top of a read-only root filesystem. + +In addition to the packages defined by the ``initramfs-framework`` recipe +itself, the following packages are defined by the recipes present in +:oe_git:`meta/recipes-core/initrdscripts </openembedded-core/tree/meta/recipes-core/initrdscripts>`: + +- ``initramfs-module-install``: module to create and install a partition layout + on a selected block device. +- ``initramfs-module-install-efi``: module to create and install an EFI + partition layout on a selected block device. +- ``initramfs-module-setup-live``: module to start a shell in the + :term:`Initramfs` if ``root=/dev/ram0`` in passed in the `Kernel command-line + <https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html>`__ + or the ``root=`` parameter was not passed. + +To customize the :term:`Initramfs`, you can add or remove packages listed +earlier from the :term:`PACKAGE_INSTALL` variable with a :ref:`bbappend +<dev-manual/layers:Appending Other Layers Metadata With Your Layer>` on the +``core-image-minimal-initramfs`` recipe, or create a custom recipe for the +:term:`Initramfs` taking ``core-image-minimal-initramfs`` as example. + +Custom scripts can be added to the :term:`Initramfs` by writing your own +recipes. The recipes are conventionally named ``initramfs-module-<module name>`` +where ``<module name>`` is the name of the module. The recipe should set its +:term:`RDEPENDS` package-specific variables to include +``initramfs-framework-base`` and the other packages on which the module depends +at runtime. + +The recipe must install shell initialization scripts in :term:`${D} <D>`\ +``/init.d`` and must follow the ``<number>-<script name>`` naming scheme where: + +- ``<number>`` is a *two-digit* number that affects the execution order of the + script compared to others. For example, the script ``80-setup-live`` would be + executed after ``01-udev`` because 80 is greater than 01. + + This number being two-digits is important here as the scripts are executed + alphabetically. For example, the script ``10-script`` would be executed + before the script ``8-script``, because ``1`` is inferior to ``8``. + Therefore, the script should be named ``08-script``. + +- ``<script name>`` is the script name which you can choose freely. + + If two script use the same ``<number>``, they are sorted alphabetically based + on ``<script name>``. + Bundling an Initramfs Image From a Separate Multiconfig ------------------------------------------------------- @@ -827,6 +909,11 @@ to point to that directory:: EXTERNALSRC_BUILD:pn-myrecipe = "path-to-your-source-tree" +.. note:: + + The values of :term:`EXTERNALSRC` and :term:`EXTERNALSRC_BUILD` + must be absolute paths. + Replicating a Build Offline =========================== diff --git a/poky/documentation/dev-manual/customizing-images.rst b/poky/documentation/dev-manual/customizing-images.rst index 5b18958ade..53cad9c79c 100644 --- a/poky/documentation/dev-manual/customizing-images.rst +++ b/poky/documentation/dev-manual/customizing-images.rst @@ -80,15 +80,14 @@ recipe that are enabled with :term:`IMAGE_FEATURES`. The value of :term:`EXTRA_IMAGE_FEATURES` is added to :term:`IMAGE_FEATURES` within ``meta/conf/bitbake.conf``. -To illustrate how you can use these variables to modify your image, -consider an example that selects the SSH server. The Yocto Project ships -with two SSH servers you can use with your images: Dropbear and OpenSSH. -Dropbear is a minimal SSH server appropriate for resource-constrained -environments, while OpenSSH is a well-known standard SSH server -implementation. By default, the ``core-image-sato`` image is configured -to use Dropbear. The ``core-image-full-cmdline`` and ``core-image-lsb`` -images both include OpenSSH. The ``core-image-minimal`` image does not -contain an SSH server. +To illustrate how you can use these variables to modify your image, consider an +example that selects the SSH server. The Yocto Project ships with two SSH +servers you can use with your images: Dropbear and OpenSSH. Dropbear is a +minimal SSH server appropriate for resource-constrained environments, while +OpenSSH is a well-known standard SSH server implementation. By default, the +``core-image-sato`` image is configured to use Dropbear. The +``core-image-full-cmdline`` image includes OpenSSH. The ``core-image-minimal`` +image does not contain an SSH server. You can customize your image and change these defaults. Edit the :term:`IMAGE_FEATURES` variable in your recipe or use the diff --git a/poky/documentation/dev-manual/debugging.rst b/poky/documentation/dev-manual/debugging.rst index 92458a0c37..8552b26aea 100644 --- a/poky/documentation/dev-manual/debugging.rst +++ b/poky/documentation/dev-manual/debugging.rst @@ -36,7 +36,7 @@ section: use the BitBake ``-e`` option to examine variable values after a recipe has been parsed. -- ":ref:`dev-manual/debugging:viewing package information with \`\`oe-pkgdata-util\`\``" +- ":ref:`dev-manual/debugging:viewing package information with ``oe-pkgdata-util```" describes how to use the ``oe-pkgdata-util`` utility to query :term:`PKGDATA_DIR` and display package-related information for built packages. diff --git a/poky/documentation/dev-manual/external-scm.rst b/poky/documentation/dev-manual/external-scm.rst index 97a7e63e36..896b1b5ac7 100644 --- a/poky/documentation/dev-manual/external-scm.rst +++ b/poky/documentation/dev-manual/external-scm.rst @@ -12,10 +12,13 @@ revision number for changes. Currently, you can do this with Apache Subversion (SVN), Git, and Bazaar (BZR) repositories. To enable this behavior, the :term:`PV` of -the recipe needs to reference -:term:`SRCPV`. Here is an example:: +the recipe needs to include a ``+`` sign in its assignment. +Here is an example:: - PV = "1.2.3+git${SRCPV}" + PV = "1.2.3+git" + +:term:`Bitbake` later includes the source control information in :term:`PKGV` +during the packaging phase. Then, you can add the following to your ``local.conf``:: diff --git a/poky/documentation/dev-manual/index.rst b/poky/documentation/dev-manual/index.rst index 9ccf60f701..8243c0f4cb 100644 --- a/poky/documentation/dev-manual/index.rst +++ b/poky/documentation/dev-manual/index.rst @@ -39,7 +39,6 @@ Yocto Project Development Tasks Manual external-scm read-only-rootfs build-quality - runtime-testing debugging licenses security-subjects @@ -48,5 +47,6 @@ Yocto Project Development Tasks Manual error-reporting-tool wayland qemu + bblock .. include:: /boilerplate.rst diff --git a/poky/documentation/dev-manual/layers.rst b/poky/documentation/dev-manual/layers.rst index 91889bd0ae..89c8466933 100644 --- a/poky/documentation/dev-manual/layers.rst +++ b/poky/documentation/dev-manual/layers.rst @@ -644,6 +644,96 @@ variable and append the layer's root name:: order of ``.conf`` or ``.bbclass`` files. Future versions of BitBake might address this. +Providing Global-level Configurations With Your Layer +----------------------------------------------------- + +When creating a layer, you may need to define configurations that should take +effect globally in your build environment when the layer is part of the build. +The ``layer.conf`` file is a :term:`configuration file` that affects the build +system globally, so it is a candidate for this use-case. + +.. warning:: + + Providing unconditional global level configuration from the ``layer.conf`` + file is *not* a good practice, and should be avoided. For this reason, the + section :ref:`ref-conditional-layer-confs` below shows how the ``layer.conf`` + file can be used to provide configurations only if a certain condition is + met. + +For example, if your layer provides a Linux kernel recipe named +``linux-custom``, you may want to make :term:`PREFERRED_PROVIDER_virtual/kernel +<PREFERRED_PROVIDER>` point to ``linux-custom``:: + + PREFERRED_PROVIDER_virtual/kernel = "linux-custom" + +This can be defined in the ``layer.conf`` file. If your layer is at the last +position in the :term:`BBLAYERS` list, it will take precedence over previous +``PREFERRED_PROVIDER_virtual/kernel`` assignments (unless one is set from a +:term:`configuration file` that is parsed later, such as machine or distro +configuration files). + +.. _ref-conditional-layer-confs: + +Conditionally Provide Global-level Configurations With Your Layer +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +In some cases, your layer may provide global configurations only if some +features it provides are enabled. Since the ``layer.conf`` file is parsed at an +earlier stage in the parsing process, the :term:`DISTRO_FEATURES` and +:term:`MACHINE_FEATURES` variables are not yet available to ``layer.conf``, and +declaring conditional assignments based on these variables is not possible. The +following technique shows a way to bypass this limitation by using the +:term:`USER_CLASSES` variable and a conditional ``require`` command. + +In the following steps, let's assume our layer is named ``meta-mylayer`` and +that this layer defines a custom :ref:`distro feature <ref-features-distro>` +named ``mylayer-kernel``. We will set the :term:`PREFERRED_PROVIDER` variable +for the kernel only if our feature ``mylayer-kernel`` is part of the +:term:`DISTRO_FEATURES`: + +#. Create an include file in the directory + ``meta-mylayer/conf/distro/include/``, for example a file named + ``mylayer-kernel-provider.inc`` that sets the kernel provider to + ``linux-custom``:: + + PREFERRED_PROVIDER_virtual/kernel = "linux-custom" + +#. Provide a path to this include file in your ``layer.conf``:: + + META_MYLAYER_KERNEL_PROVIDER_PATH = "${LAYERDIR}/conf/distro/include/mylayer-kernel-provider.inc" + +#. Create a new class in ``meta-mylayer/classes-global/``, for example a class + ``meta-mylayer-cfg.bbclass``. Make it conditionally require the file + ``mylayer-kernel-provider.inc`` defined above, using the variable + ``META_MYLAYER_KERNEL_PROVIDER_PATH`` defined in ``layer.conf``:: + + require ${@bb.utils.contains('DISTRO_FEATURES', 'mylayer-kernel', '${META_MYLAYER_KERNEL_PROVIDER_PATH}', '', d)} + + For details on the ``bb.utils.contains`` function, see its definition in + :bitbake_git:`lib/bb/utils.py </tree/lib/bb/utils.py>`. + + .. note:: + + The ``require`` command is designed to not fail if the function + ``bb.utils.contains`` returns an empty string. + +#. Back to your ``layer.conf`` file, add the class ``meta-mylayer-cfg`` class to + the :term:`USER_CLASSES` variable:: + + USER_CLASSES:append = " meta-mylayer-cfg" + + This will add the class ``meta-mylayer-cfg`` to the list of classes to + globally inherit. Since the ``require`` command is conditional in + ``meta-mylayer-cfg.bbclass``, even though inherited the class will have no + effect unless the feature ``mylayer-kernel`` is enabled through + :term:`DISTRO_FEATURES`. + +This technique can also be used for :ref:`Machine features +<ref-features-machine>` by following the same steps. Though not mandatory, it is +recommended to put include files for :term:`DISTRO_FEATURES` in your layer's +``conf/distro/include`` and the ones for :term:`MACHINE_FEATURES` in your +layer's ``conf/machine/include``. + Managing Layers =============== diff --git a/poky/documentation/dev-manual/new-recipe.rst b/poky/documentation/dev-manual/new-recipe.rst index 61fc2eb122..af88db937b 100644 --- a/poky/documentation/dev-manual/new-recipe.rst +++ b/poky/documentation/dev-manual/new-recipe.rst @@ -56,7 +56,7 @@ necessary when adding a recipe to build a new piece of software to be included in a build. You can find a complete description of the ``devtool add`` command in -the ":ref:`sdk-manual/extensible:a closer look at \`\`devtool add\`\``" section +the ":ref:`sdk-manual/extensible:a closer look at ``devtool add```" section in the Yocto Project Application Development and the Extensible Software Development Kit (eSDK) manual. @@ -291,13 +291,13 @@ another example that specifies these types of files, see the Another way of specifying source is from an SCM. For Git repositories, you must specify :term:`SRCREV` and you should specify :term:`PV` to include -the revision with :term:`SRCPV`. Here is an example from the recipe -``meta/recipes-core/musl/gcompat_git.bb``:: +a ``+`` sign in its definition. Here is an example from the recipe +:oe_git:`meta/recipes-sato/l3afpad/l3afpad_git.bb </openembedded-core/tree/meta/recipes-sato/l3afpad/l3afpad_git.bb>`:: - SRC_URI = "git://git.adelielinux.org/adelie/gcompat.git;protocol=https;branch=current" + SRC_URI = "git://github.com/stevenhoneyman/l3afpad.git;branch=master;protocol=https" - PV = "1.0.0+1.1+git${SRCPV}" - SRCREV = "af5a49e489fdc04b9cf02547650d7aeaccd43793" + PV = "0.8.18.1.11+git" + SRCREV ="3cdccdc9505643e50f8208171d9eee5de11a42ff" If your :term:`SRC_URI` statement includes URLs pointing to individual files fetched from a remote server other than a version control system, diff --git a/poky/documentation/dev-manual/packages.rst b/poky/documentation/dev-manual/packages.rst index e5028fffdc..4ba2dcae3a 100644 --- a/poky/documentation/dev-manual/packages.rst +++ b/poky/documentation/dev-manual/packages.rst @@ -16,7 +16,7 @@ This section describes a few tasks that involve packages: - :ref:`dev-manual/packages:generating and using signed packages` - :ref:`Setting up and running package test - (ptest) <dev-manual/packages:testing packages with ptest>` + (ptest) <test-manual/ptest:testing packages with ptest>` - :ref:`dev-manual/packages:creating node package manager (npm) packages` @@ -84,10 +84,6 @@ the following: - :term:`PR`: The recipe revision. -- :term:`SRCPV`: The OpenEmbedded - build system uses this string to help define the value of :term:`PV` when - the source code revision needs to be included in it. - - :yocto_wiki:`PR Service </PR_Service>`: A network-based service that helps automate keeping package feeds compatible with existing package manager applications such as RPM, @@ -256,15 +252,14 @@ the software:: SRCREV = "${AUTOREV}" -Furthermore, you need to reference :term:`SRCPV` in :term:`PV` in order to +Furthermore, you need to include a ``+`` sign in :term:`PV` in order to automatically update the version whenever the revision of the source code changes. Here is an example:: - PV = "1.0+git${SRCPV}" - -The OpenEmbedded build system substitutes :term:`SRCPV` with the following: + PV = "1.0+git" -.. code-block:: none +The OpenEmbedded build system will automatically add the source control +information to the end of the variable :term:`PKGV`, in this format:: AUTOINC+source_code_revision @@ -887,114 +882,8 @@ related to signed package feeds are available: Testing Packages With ptest =========================== -A Package Test (ptest) runs tests against packages built by the -OpenEmbedded build system on the target machine. A ptest contains at -least two items: the actual test, and a shell script (``run-ptest``) -that starts the test. The shell script that starts the test must not -contain the actual test --- the script only starts the test. On the other -hand, the test can be anything from a simple shell script that runs a -binary and checks the output to an elaborate system of test binaries and -data files. - -The test generates output in the format used by Automake:: - - result: testname - -where the result can be ``PASS``, ``FAIL``, or ``SKIP``, and -the testname can be any identifying string. - -For a list of Yocto Project recipes that are already enabled with ptest, -see the :yocto_wiki:`Ptest </Ptest>` wiki page. - -.. note:: - - A recipe is "ptest-enabled" if it inherits the :ref:`ref-classes-ptest` - class. - -Adding ptest to Your Build --------------------------- - -To add package testing to your build, add the :term:`DISTRO_FEATURES` and -:term:`EXTRA_IMAGE_FEATURES` variables to your ``local.conf`` file, which -is found in the :term:`Build Directory`:: - - DISTRO_FEATURES:append = " ptest" - EXTRA_IMAGE_FEATURES += "ptest-pkgs" - -Once your build is complete, the ptest files are installed into the -``/usr/lib/package/ptest`` directory within the image, where ``package`` -is the name of the package. - -Running ptest -------------- - -The ``ptest-runner`` package installs a shell script that loops through -all installed ptest test suites and runs them in sequence. Consequently, -you might want to add this package to your image. - -Getting Your Package Ready --------------------------- - -In order to enable a recipe to run installed ptests on target hardware, -you need to prepare the recipes that build the packages you want to -test. Here is what you have to do for each recipe: - -- *Be sure the recipe inherits the* :ref:`ref-classes-ptest` *class:* - Include the following line in each recipe:: - - inherit ptest - -- *Create run-ptest:* This script starts your test. Locate the - script where you will refer to it using - :term:`SRC_URI`. Here is an - example that starts a test for ``dbus``:: - - #!/bin/sh - cd test - make -k runtest-TESTS - -- *Ensure dependencies are met:* If the test adds build or runtime - dependencies that normally do not exist for the package (such as - requiring "make" to run the test suite), use the - :term:`DEPENDS` and - :term:`RDEPENDS` variables in - your recipe in order for the package to meet the dependencies. Here - is an example where the package has a runtime dependency on "make":: - - RDEPENDS:${PN}-ptest += "make" - -- *Add a function to build the test suite:* Not many packages support - cross-compilation of their test suites. Consequently, you usually - need to add a cross-compilation function to the package. - - Many packages based on Automake compile and run the test suite by - using a single command such as ``make check``. However, the host - ``make check`` builds and runs on the same computer, while - cross-compiling requires that the package is built on the host but - executed for the target architecture (though often, as in the case - for ptest, the execution occurs on the host). The built version of - Automake that ships with the Yocto Project includes a patch that - separates building and execution. Consequently, packages that use the - unaltered, patched version of ``make check`` automatically - cross-compiles. - - Regardless, you still must add a ``do_compile_ptest`` function to - build the test suite. Add a function similar to the following to your - recipe:: - - do_compile_ptest() { - oe_runmake buildtest-TESTS - } - -- *Ensure special configurations are set:* If the package requires - special configurations prior to compiling the test code, you must - insert a ``do_configure_ptest`` function into the recipe. - -- *Install the test suite:* The :ref:`ref-classes-ptest` class - automatically copies the file ``run-ptest`` to the target and then runs make - ``install-ptest`` to run the tests. If this is not enough, you need - to create a ``do_install_ptest`` function and make sure it gets - called after the "make install-ptest" completes. +See the :ref:`test-manual/ptest:Testing Packages With ptest` section of the +Yocto Project Test Environment Manual. Creating Node Package Manager (NPM) Packages ============================================ diff --git a/poky/documentation/dev-manual/qemu.rst b/poky/documentation/dev-manual/qemu.rst index 19f3e40d63..253aff9977 100644 --- a/poky/documentation/dev-manual/qemu.rst +++ b/poky/documentation/dev-manual/qemu.rst @@ -75,7 +75,7 @@ available. Follow these general steps to run QEMU: your :term:`Build Directory`. - If you have not built an image, you can go to the - :yocto_dl:`machines/qemu </releases/yocto/yocto-&DISTRO;/machines/qemu/>` area and download a + :yocto_dl:`machines/qemu </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/qemu/>` area and download a pre-built image that matches your architecture and can be run on QEMU. @@ -280,12 +280,11 @@ present, the toolchain is also automatically used. networking. - SSH servers are available in some QEMU images. The ``core-image-sato`` - QEMU image has a Dropbear secure shell (SSH) server that runs with - the root password disabled. The ``core-image-full-cmdline`` and - ``core-image-lsb`` QEMU images have OpenSSH instead of Dropbear. - Including these SSH servers allow you to use standard ``ssh`` and - ``scp`` commands. The ``core-image-minimal`` QEMU image, however, - contains no SSH server. + QEMU image has a Dropbear secure shell (SSH) server that runs with the + root password disabled. The ``core-image-full-cmdline`` QEMU image has + OpenSSH instead of Dropbear. Including these SSH servers allow you to use + standard ``ssh`` and ``scp`` commands. The ``core-image-minimal`` QEMU + image, however, contains no SSH server. - You can use a provided, user-space NFS server to boot the QEMU session using a local copy of the root filesystem on the host. In diff --git a/poky/documentation/dev-manual/sbom.rst b/poky/documentation/dev-manual/sbom.rst index b72bad1554..7c4b5804fb 100644 --- a/poky/documentation/dev-manual/sbom.rst +++ b/poky/documentation/dev-manual/sbom.rst @@ -30,16 +30,9 @@ To make this happen, you must inherit the INHERIT += "create-spdx" -Upon building an image, you will then get: - -- :term:`SPDX` output in JSON format as an ``IMAGE-MACHINE.spdx.json`` file in - ``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`. - -- This toplevel file is accompanied by an ``IMAGE-MACHINE.spdx.index.json`` - containing an index of JSON :term:`SPDX` files for individual recipes. - -- The compressed archive ``IMAGE-MACHINE.spdx.tar.zst`` contains the index - and the files for the single recipes. +Upon building an image, you will then get the compressed archive +``IMAGE-MACHINE.spdx.tar.zst`` contains the index and the files for the single +recipes. The :ref:`ref-classes-create-spdx` class offers options to include more information in the output :term:`SPDX` data: @@ -56,7 +49,7 @@ more information in the output :term:`SPDX` data: Though the toplevel :term:`SPDX` output is available in ``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`, ancillary -generated files are available in ``tmp/deploy/spdx/MACHINE`` too, such as: +generated files are available in ``tmp/deploy/spdx`` too, such as: - The individual :term:`SPDX` JSON files in the ``IMAGE-MACHINE.spdx.tar.zst`` archive. diff --git a/poky/documentation/dev-manual/security-subjects.rst b/poky/documentation/dev-manual/security-subjects.rst index 1b02b6a9e9..6785b5a16a 100644 --- a/poky/documentation/dev-manual/security-subjects.rst +++ b/poky/documentation/dev-manual/security-subjects.rst @@ -52,19 +52,24 @@ for them for significant issues. Security-related discussions at the Yocto Project ------------------------------------------------- -We have set up two security-related mailing lists: +We have set up two security-related emails/mailing lists: - - Public List: yocto [dash] security [at] yoctoproject[dot] org + - Public Mailing List: yocto [dash] security [at] yoctoproject[dot] org - This is a public mailing list for anyone to subscribe to. This list is an - open list to discuss public security issues/patches and security-related - initiatives. For more information, including subscription information, - please see the :yocto_lists:`yocto-security mailing list info page </g/yocto-security>`. + This is a public mailing list for anyone to subscribe to. This list is an + open list to discuss public security issues/patches and security-related + initiatives. For more information, including subscription information, + please see the :yocto_lists:`yocto-security mailing list info page + </g/yocto-security>`. - - Private List: security [at] yoctoproject [dot] org + This list requires moderator approval for new topics to be posted, to avoid + private security reports to be posted by mistake. - This is a private mailing list for reporting non-published potential - vulnerabilities. The list is monitored by the Yocto Project Security team. + - Yocto Project Security Team: security [at] yoctoproject [dot] org + + This is an email for reporting non-published potential vulnerabilities. + Emails sent to this address are forwarded to the Yocto Project Security + Team members. What you should do if you find a security vulnerability diff --git a/poky/documentation/dev-manual/start.rst b/poky/documentation/dev-manual/start.rst index 386e5f5d29..a9e08dd551 100644 --- a/poky/documentation/dev-manual/start.rst +++ b/poky/documentation/dev-manual/start.rst @@ -543,6 +543,7 @@ your Yocto Project build host: DISKPART> select vdisk file="<path_to_VHDX_file>" DISKPART> attach vdisk readonly DISKPART> compact vdisk + DISKPART> detach DISKPART> exit .. note:: @@ -615,7 +616,7 @@ Accessing Source Archives The Yocto Project also provides source archives of its releases, which are available on :yocto_dl:`/releases/yocto/`. Then, choose the subdirectory containing the release you wish to use, for example -:yocto_dl:`yocto-&DISTRO; </releases/yocto/yocto-&DISTRO;/>`. +:yocto_dl:`&DISTRO_REL_LATEST_TAG; </releases/yocto/&DISTRO_REL_LATEST_TAG;/>`. You will find there source archives of individual components (if you wish to use them individually), and of the corresponding Poky release bundling diff --git a/poky/documentation/dev-manual/upgrading-recipes.rst b/poky/documentation/dev-manual/upgrading-recipes.rst index 4fac78bdfb..a38fd7837c 100644 --- a/poky/documentation/dev-manual/upgrading-recipes.rst +++ b/poky/documentation/dev-manual/upgrading-recipes.rst @@ -333,7 +333,7 @@ Manually Upgrading a Recipe If for some reason you choose not to upgrade recipes using :ref:`dev-manual/upgrading-recipes:Using the Auto Upgrade Helper (AUH)` or -by :ref:`dev-manual/upgrading-recipes:Using \`\`devtool upgrade\`\``, +by :ref:`dev-manual/upgrading-recipes:Using ``devtool upgrade```, you can manually edit the recipe files to upgrade the versions. .. note:: diff --git a/poky/documentation/dev-manual/vulnerabilities.rst b/poky/documentation/dev-manual/vulnerabilities.rst index 1bc2a85929..863a407020 100644 --- a/poky/documentation/dev-manual/vulnerabilities.rst +++ b/poky/documentation/dev-manual/vulnerabilities.rst @@ -12,7 +12,7 @@ known security vulnerabilities, as tracked by the public database. The Yocto Project maintains a `list of known vulnerabilities -<https://autobuilder.yocto.io/pub/non-release/patchmetrics/>`__ +<https://valkyrie.yocto.io/pub/non-release/patchmetrics/>`__ for packages in Poky and OE-Core, tracking the evolution of the number of unpatched CVEs and the status of patches. Such information is available for the current development version and for each supported release. @@ -62,37 +62,77 @@ found in ``build/tmp/deploy/cve``. For example the CVE check report for the ``flex-native`` recipe looks like:: - $ cat poky/build/tmp/deploy/cve/flex-native - LAYER: meta - PACKAGE NAME: flex-native - PACKAGE VERSION: 2.6.4 - CVE: CVE-2016-6354 - CVE STATUS: Patched - CVE SUMMARY: Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read. - CVSS v2 BASE SCORE: 7.5 - CVSS v3 BASE SCORE: 9.8 - VECTOR: NETWORK - MORE INFORMATION: https://nvd.nist.gov/vuln/detail/CVE-2016-6354 - - LAYER: meta - PACKAGE NAME: flex-native - PACKAGE VERSION: 2.6.4 - CVE: CVE-2019-6293 - CVE STATUS: Ignored - CVE SUMMARY: An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service. - CVSS v2 BASE SCORE: 4.3 - CVSS v3 BASE SCORE: 5.5 - VECTOR: NETWORK - MORE INFORMATION: https://nvd.nist.gov/vuln/detail/CVE-2019-6293 + $ cat ./tmp/deploy/cve/flex-native_cve.json + { + "version": "1", + "package": [ + { + "name": "flex-native", + "layer": "meta", + "version": "2.6.4", + "products": [ + { + "product": "flex", + "cvesInRecord": "No" + }, + { + "product": "flex", + "cvesInRecord": "Yes" + } + ], + "issue": [ + { + "id": "CVE-2006-0459", + "status": "Patched", + "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-0459", + "summary": "flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.", + "scorev2": "7.5", + "scorev3": "0.0", + "scorev4": "0.0", + "modified": "2024-11-21T00:06Z", + "vector": "NETWORK", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "detail": "version-not-in-range" + }, + { + "id": "CVE-2016-6354", + "status": "Patched", + "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-6354", + "summary": "Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.", + "scorev2": "7.5", + "scorev3": "9.8", + "scorev4": "0.0", + "modified": "2024-11-21T02:55Z", + "vector": "NETWORK", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "detail": "version-not-in-range" + }, + { + "id": "CVE-2019-6293", + "status": "Ignored", + "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-6293", + "summary": "An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service.", + "scorev2": "4.3", + "scorev3": "5.5", + "scorev4": "0.0", + "modified": "2024-11-21T04:46Z", + "vector": "NETWORK", + "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", + "detail": "upstream-wontfix", + "description": "there is stack exhaustion but no bug and it is building the parser, not running it, effectively similar to a compiler ICE. Upstream no plans to address this." + } + ] + } + ] + } For images, a summary of all recipes included in the image and their CVEs is also -generated in textual and JSON formats. These ``.cve`` and ``.json`` reports can be found +generated in the JSON format. These ``.json`` reports can be found in the ``tmp/deploy/images`` directory for each compiled image. At build time CVE check will also throw warnings about ``Unpatched`` CVEs:: - WARNING: flex-2.6.4-r0 do_cve_check: Found unpatched CVE (CVE-2019-6293), for more information check /poky/build/tmp/work/core2-64-poky-linux/flex/2.6.4-r0/temp/cve.log - WARNING: libarchive-3.5.1-r0 do_cve_check: Found unpatched CVE (CVE-2021-36976), for more information check /poky/build/tmp/work/core2-64-poky-linux/libarchive/3.5.1-r0/temp/cve.log + WARNING: qemu-native-9.2.0-r0 do_cve_check: Found unpatched CVE (CVE-2023-1386) It is also possible to check the CVE status of individual packages as follows:: @@ -111,10 +151,10 @@ upstream `NIST CVE database <https://nvd.nist.gov/>`__. The variable supports using vendor and product names like this:: - CVE_PRODUCT = "flex_project:flex" + CVE_PRODUCT = "flex_project:flex westes:flex" -In this example the vendor name used in the CVE database is ``flex_project`` and the -product is ``flex``. With this setting the ``flex`` recipe only maps to this specific +In this example we have two possible vendors names, ``flex_project`` and ``westes``, +with the product name ``flex``. With this setting the ``flex`` recipe only maps to this specific product and not products from other vendors with same name ``flex``. Similarly, when the recipe version :term:`PV` is not compatible with software versions used by @@ -274,7 +314,7 @@ products defined in :term:`CVE_PRODUCT`. Then, for each found CVE: The CVE database is stored in :term:`DL_DIR` and can be inspected using ``sqlite3`` command as follows:: - sqlite3 downloads/CVE_CHECK/nvdcve_1.1.db .dump | grep CVE-2021-37462 + sqlite3 downloads/CVE_CHECK/nvd*.db .dump | grep CVE-2021-37462 When analyzing CVEs, it is recommended to: diff --git a/poky/documentation/dev-manual/wic.rst b/poky/documentation/dev-manual/wic.rst index a3880f3a1c..fced0e170c 100644 --- a/poky/documentation/dev-manual/wic.rst +++ b/poky/documentation/dev-manual/wic.rst @@ -513,7 +513,7 @@ or :: For more information on how to use the ``bmaptool`` to flash a device with an image, see the - ":ref:`dev-manual/bmaptool:flashing images using \`\`bmaptool\`\``" + ":ref:`dev-manual/bmaptool:flashing images using \`bmaptool\``" section. Using a Modified Kickstart File @@ -721,7 +721,7 @@ the existing kernel, and then inserts a new kernel: Once the new kernel is added back into the image, you can use the ``dd`` command or :ref:`bmaptool - <dev-manual/bmaptool:flashing images using \`\`bmaptool\`\`>` + <dev-manual/bmaptool:flashing images using \`bmaptool\`>` commands to flash your wic image onto an SD card or USB stick and test your target. diff --git a/poky/documentation/downloads.rst b/poky/documentation/downloads.rst new file mode 100644 index 0000000000..7ec978ef2d --- /dev/null +++ b/poky/documentation/downloads.rst @@ -0,0 +1,11 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +======================= +Documentation Downloads +======================= + +The documentation can be downloaded in file formats to be read offline or on +another device. The currently supported formats are linked below: + +- `EPub <_static/TheYoctoProject.epub>`_ +- `PDF <_static/theyoctoproject.pdf>`_ diff --git a/poky/documentation/index.rst b/poky/documentation/index.rst index 3fef1704a4..6c6be38a7e 100644 --- a/poky/documentation/index.rst +++ b/poky/documentation/index.rst @@ -51,3 +51,10 @@ Welcome to the Yocto Project Documentation :hidden: genindex + +.. toctree:: + :maxdepth: 1 + :caption: Documentation Downloads + :hidden: + + downloads diff --git a/poky/documentation/kernel-dev/common.rst b/poky/documentation/kernel-dev/common.rst index fda41694dc..bd6c3fb2cf 100644 --- a/poky/documentation/kernel-dev/common.rst +++ b/poky/documentation/kernel-dev/common.rst @@ -650,13 +650,9 @@ the Broadcom 2708/2709 chipset:: KBUILD_DEFCONFIG:raspberrypi2 ?= "bcm2709_defconfig" -Aside from modifying your kernel recipe and providing your own -``defconfig`` file, you need to be sure no files or statements set -:term:`SRC_URI` to use a ``defconfig`` other than your "in-tree" file (e.g. -a kernel's ``linux-``\ `machine`\ ``.inc`` file). In other words, if the -build system detects a statement that identifies an "out-of-tree" -``defconfig`` file, that statement will override your -:term:`KBUILD_DEFCONFIG` variable. +If the build system detects a statement that identifies an "out-of-tree" +``defconfig`` file, your :term:`KBUILD_DEFCONFIG` variable will take precedence +over it. See the :term:`KBUILD_DEFCONFIG` @@ -672,7 +668,7 @@ The steps in this procedure show you how you can patch the kernel using Before attempting this procedure, be sure you have performed the steps to get ready for updating the kernel as described in the - ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" + ":ref:`kernel-dev/common:getting ready to develop using ``devtool```" section. Patching the kernel involves changing or adding configurations to an @@ -685,7 +681,7 @@ output at boot time through ``printk`` statements in the kernel's ``calibrate.c`` source code file. Applying the patch and booting the modified image causes the added messages to appear on the emulator's console. The example is a continuation of the setup procedure found in -the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Section. +the ":ref:`kernel-dev/common:getting ready to develop using ``devtool```" Section. #. *Check Out the Kernel Source Files:* First you must use ``devtool`` to checkout the kernel source code in its workspace. @@ -693,7 +689,7 @@ the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Se .. note:: See this step in the - ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" + ":ref:`kernel-dev/common:getting ready to develop using ``devtool```" section for more information. Use the following ``devtool`` command to check out the code:: @@ -804,7 +800,7 @@ the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Se .. note:: See Step 3 of the - ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" + ":ref:`kernel-dev/common:getting ready to develop using ``devtool```" section for information on setting up this layer. Once the command @@ -1190,7 +1186,7 @@ appear in the ``.config`` file, which is in the :term:`Build Directory`. For more information about where the ``.config`` file is located, see the example in the - ":ref:`kernel-dev/common:using \`\`menuconfig\`\``" + ":ref:`kernel-dev/common:using ``menuconfig```" section. It is simple to create a configuration fragment. One method is to use @@ -1286,7 +1282,7 @@ when you override a policy configuration in a hardware configuration fragment. In order to run this task, you must have an existing ``.config`` file. -See the ":ref:`kernel-dev/common:using \`\`menuconfig\`\``" section for +See the ":ref:`kernel-dev/common:using ``menuconfig```" section for information on how to create a configuration file. Here is sample output from the :ref:`ref-tasks-kernel_configcheck` task: @@ -1359,7 +1355,7 @@ and tasks until they produce no warnings. For more information on how to use the ``menuconfig`` tool, see the -:ref:`kernel-dev/common:using \`\`menuconfig\`\`` section. +:ref:`kernel-dev/common:using ``menuconfig``` section. Fine-Tuning the Kernel Configuration File ----------------------------------------- @@ -1562,16 +1558,9 @@ Here are some basic steps you can use to work with your own sources: changed. - :term:`PV`: The default :term:`PV` - assignment is typically adequate. It combines the - :term:`LINUX_VERSION` with the Source Control Manager (SCM) revision - as derived from the :term:`SRCPV` - variable. The combined results are a string with the following - form:: - - 3.19.11+git1+68a635bf8dfb64b02263c1ac80c948647cc76d5f_1+218bd8d2022b9852c60d32f0d770931e3cf343e2 - - While lengthy, the extra verbosity in :term:`PV` helps ensure you are - using the exact sources from which you intend to build. + assignment is typically adequate. It combines the value of + :term:`LINUX_VERSION` and the value ``+git`` which adds source control + information to :term:`PKGV` later during the packaging phase. - :term:`COMPATIBLE_MACHINE`: A list of the machines supported by your new recipe. This variable diff --git a/poky/documentation/kernel-dev/intro.rst b/poky/documentation/kernel-dev/intro.rst index a663733a1d..7df342f8d5 100644 --- a/poky/documentation/kernel-dev/intro.rst +++ b/poky/documentation/kernel-dev/intro.rst @@ -122,7 +122,7 @@ general information and references for further information. Using ``devtool`` requires that you have a clean build of the image. For more information, see the - ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" + ":ref:`kernel-dev/common:getting ready to develop using ``devtool```" section. Using traditional kernel development requires that you have the diff --git a/poky/documentation/migration-guides/migration-1.5.rst b/poky/documentation/migration-guides/migration-1.5.rst index c8f3cbc165..da26cca63d 100644 --- a/poky/documentation/migration-guides/migration-1.5.rst +++ b/poky/documentation/migration-guides/migration-1.5.rst @@ -248,8 +248,8 @@ A new automated image testing framework has been added through the framework replaces the older ``imagetest-qemu`` framework. You can learn more about performing automated image tests in the -":ref:`dev-manual/runtime-testing:performing automated runtime testing`" -section in the Yocto Project Development Tasks Manual. +":ref:`test-manual/runtime-testing:performing automated runtime testing`" +section in the Yocto Project Test Environment Manual. .. _migration-1.5-build-history: diff --git a/poky/documentation/migration-guides/migration-1.6.rst b/poky/documentation/migration-guides/migration-1.6.rst index 916169e836..b052a43a31 100644 --- a/poky/documentation/migration-guides/migration-1.6.rst +++ b/poky/documentation/migration-guides/migration-1.6.rst @@ -221,7 +221,7 @@ Package Test (ptest) Package Tests (ptest) are built but not installed by default. For information on using Package Tests, see the -":ref:`dev-manual/packages:testing packages with ptest`" section in the +":ref:`test-manual/ptest:testing packages with ptest`" section in the Yocto Project Development Tasks Manual. See also the ":ref:`ref-classes-ptest`" section. diff --git a/poky/documentation/migration-guides/release-4.0.rst b/poky/documentation/migration-guides/release-4.0.rst index d848b3ef64..260bd171de 100644 --- a/poky/documentation/migration-guides/release-4.0.rst +++ b/poky/documentation/migration-guides/release-4.0.rst @@ -25,3 +25,15 @@ Release 4.0 (kirkstone) release-notes-4.0.16 release-notes-4.0.17 release-notes-4.0.18 + release-notes-4.0.19 + release-notes-4.0.20 + release-notes-4.0.21 + release-notes-4.0.22 + release-notes-4.0.23 + release-notes-4.0.24 + release-notes-4.0.25 + release-notes-4.0.26 + release-notes-4.0.27 + release-notes-4.0.28 + release-notes-4.0.29 + release-notes-4.0.30 diff --git a/poky/documentation/migration-guides/release-5.0.rst b/poky/documentation/migration-guides/release-5.0.rst index bd19b707f6..523521b379 100644 --- a/poky/documentation/migration-guides/release-5.0.rst +++ b/poky/documentation/migration-guides/release-5.0.rst @@ -7,3 +7,15 @@ Release 5.0 (scarthgap) migration-5.0 release-notes-5.0 + release-notes-5.0.1 + release-notes-5.0.2 + release-notes-5.0.3 + release-notes-5.0.4 + release-notes-5.0.5 + release-notes-5.0.6 + release-notes-5.0.7 + release-notes-5.0.8 + release-notes-5.0.9 + release-notes-5.0.10 + release-notes-5.0.11 + release-notes-5.0.12 diff --git a/poky/documentation/migration-guides/release-notes-3.4.1.rst b/poky/documentation/migration-guides/release-notes-3.4.1.rst index 097c249a90..c4b99a269b 100644 --- a/poky/documentation/migration-guides/release-notes-3.4.1.rst +++ b/poky/documentation/migration-guides/release-notes-3.4.1.rst @@ -11,14 +11,14 @@ Known Issues in 3.4.1 Security Fixes in 3.4.1 ~~~~~~~~~~~~~~~~~~~~~~~ -- glibc: Backport fix for :cve:`2021-43396` -- vim: add patch number to :cve:`2021-3778` patch -- vim: fix :cve:`2021-3796`, :cve:`2021-3872`, and :cve:`2021-3875` -- squashfs-tools: follow-up fix for :cve:`2021-41072` +- glibc: Backport fix for :cve_nist:`2021-43396` +- vim: add patch number to :cve_nist:`2021-3778` patch +- vim: fix :cve_nist:`2021-3796`, :cve_nist:`2021-3872`, and :cve_nist:`2021-3875` +- squashfs-tools: follow-up fix for :cve_nist:`2021-41072` - avahi: update CVE id fixed by local-ping.patch -- squashfs-tools: fix :cve:`2021-41072` -- ffmpeg: fix :cve:`2021-38114` -- curl: fix :cve:`2021-22945`, :cve:`2021-22946` and :cve:`2021-22947` +- squashfs-tools: fix :cve_nist:`2021-41072` +- ffmpeg: fix :cve_nist:`2021-38114` +- curl: fix :cve_nist:`2021-22945`, :cve_nist:`2021-22946` and :cve_nist:`2021-22947` Fixes in 3.4.1 ~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-3.4.2.rst b/poky/documentation/migration-guides/release-notes-3.4.2.rst index 5ff42d3900..94dffcb79e 100644 --- a/poky/documentation/migration-guides/release-notes-3.4.2.rst +++ b/poky/documentation/migration-guides/release-notes-3.4.2.rst @@ -6,29 +6,29 @@ Release notes for 3.4.2 (honister) Security Fixes in 3.4.2 ~~~~~~~~~~~~~~~~~~~~~~~ -- tiff: backport fix for :cve:`2022-22844` -- glibc : Fix :cve:`2021-3999` -- glibc : Fix :cve:`2021-3998` -- glibc : Fix :cve:`2022-23219` -- glibc : Fix :cve:`2022-23218` -- lighttpd: backport a fix for :cve:`2022-22707` -- speex: fix :cve:`2020-23903` -- linux-yocto/5.10: amdgpu: updates for :cve:`2021-42327` -- libsndfile1: fix :cve:`2021-4156` +- tiff: backport fix for :cve_nist:`2022-22844` +- glibc : Fix :cve_nist:`2021-3999` +- glibc : Fix :cve_nist:`2021-3998` +- glibc : Fix :cve_nist:`2022-23219` +- glibc : Fix :cve_nist:`2022-23218` +- lighttpd: backport a fix for :cve_nist:`2022-22707` +- speex: fix :cve_nist:`2020-23903` +- linux-yocto/5.10: amdgpu: updates for :cve_nist:`2021-42327` +- libsndfile1: fix :cve_nist:`2021-4156` - xserver-xorg: whitelist two CVEs -- grub2: fix :cve:`2021-3981` +- grub2: fix :cve_nist:`2021-3981` - xserver-xorg: update :term:`CVE_PRODUCT` -- binutils: :cve:`2021-42574` -- gcc: Fix :cve:`2021-42574` -- gcc: Fix :cve:`2021-35465` +- binutils: :cve_nist:`2021-42574` +- gcc: Fix :cve_nist:`2021-42574` +- gcc: Fix :cve_nist:`2021-35465` - cve-extra-exclusions: add db CVEs to exclusion list -- gcc: Add :cve:`2021-37322` to the list of CVEs to ignore -- bind: fix :cve:`2021-25219` -- openssh: fix :cve:`2021-41617` -- ncurses: fix :cve:`2021-39537` -- vim: fix :cve:`2021-3968` and :cve:`2021-3973` -- vim: fix :cve:`2021-3927` and :cve:`2021-3928` -- gmp: fix :cve:`2021-43618` +- gcc: Add :cve_nist:`2021-37322` to the list of CVEs to ignore +- bind: fix :cve_nist:`2021-25219` +- openssh: fix :cve_nist:`2021-41617` +- ncurses: fix :cve_nist:`2021-39537` +- vim: fix :cve_nist:`2021-3968` and :cve_nist:`2021-3973` +- vim: fix :cve_nist:`2021-3927` and :cve_nist:`2021-3928` +- gmp: fix :cve_nist:`2021-43618` Fixes in 3.4.2 ~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-3.4.3.rst b/poky/documentation/migration-guides/release-notes-3.4.3.rst index 2af802307d..cd9698d0e8 100644 --- a/poky/documentation/migration-guides/release-notes-3.4.3.rst +++ b/poky/documentation/migration-guides/release-notes-3.4.3.rst @@ -6,12 +6,12 @@ Release notes for 3.4.3 (honister) Security Fixes in 3.4.3 ~~~~~~~~~~~~~~~~~~~~~~~ -- ghostscript: fix :cve:`2021-3781` -- ghostscript: fix :cve:`2021-45949` -- tiff: Add backports for two CVEs from upstream (:cve:`2022-0561` & :cve:`2022-0562`) -- gcc : Fix :cve:`2021-46195` +- ghostscript: fix :cve_nist:`2021-3781` +- ghostscript: fix :cve_nist:`2021-45949` +- tiff: Add backports for two CVEs from upstream (:cve_nist:`2022-0561` & :cve_nist:`2022-0562`) +- gcc : Fix :cve_nist:`2021-46195` - virglrenderer: fix `CVE-2022-0135 <https://security-tracker.debian.org/tracker/CVE-2022-0135>`__ and `CVE-2022-0175 <https://security-tracker.debian.org/tracker/CVE-2022-0175>`__ -- binutils: Add fix for :cve:`2021-45078` +- binutils: Add fix for :cve_nist:`2021-45078` Fixes in 3.4.3 diff --git a/poky/documentation/migration-guides/release-notes-3.4.4.rst b/poky/documentation/migration-guides/release-notes-3.4.4.rst index 0bf9a16209..3ab858b0b9 100644 --- a/poky/documentation/migration-guides/release-notes-3.4.4.rst +++ b/poky/documentation/migration-guides/release-notes-3.4.4.rst @@ -6,11 +6,11 @@ Release notes for 3.4.4 (honister) Security Fixes in 3.4.4 ~~~~~~~~~~~~~~~~~~~~~~~ -- tiff: fix :cve:`2022-0865`, :cve:`2022-0891`, :cve:`2022-0907`, :cve:`2022-0908`, :cve:`2022-0909` and :cve:`2022-0924` +- tiff: fix :cve_nist:`2022-0865`, :cve_nist:`2022-0891`, :cve_nist:`2022-0907`, :cve_nist:`2022-0908`, :cve_nist:`2022-0909` and :cve_nist:`2022-0924` - xz: fix `CVE-2022-1271 <https://security-tracker.debian.org/tracker/CVE-2022-1271>`__ - unzip: fix `CVE-2021-4217 <https://security-tracker.debian.org/tracker/CVE-2021-4217>`__ -- zlib: fix :cve:`2018-25032` -- grub: ignore :cve:`2021-46705` +- zlib: fix :cve_nist:`2018-25032` +- grub: ignore :cve_nist:`2021-46705` Fixes in 3.4.4 ~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-3.4.rst b/poky/documentation/migration-guides/release-notes-3.4.rst index d76bb004b1..6eca9956be 100644 --- a/poky/documentation/migration-guides/release-notes-3.4.rst +++ b/poky/documentation/migration-guides/release-notes-3.4.rst @@ -220,34 +220,34 @@ Other license-related notes: Security Fixes in 3.4 ~~~~~~~~~~~~~~~~~~~~~ -- apr: :cve:`2021-35940` -- aspell: :cve:`2019-25051` -- avahi: :cve:`2021-3468`, :cve:`2021-36217` -- binutils: :cve:`2021-20197` -- bluez: :cve:`2021-3658` -- busybox: :cve:`2021-28831` -- cairo: :cve:`2020-35492` -- cpio: :cve:`2021-38185` -- expat: :cve:`2013-0340` -- ffmpeg: :cve:`2020-20446`, :cve:`2020-22015`, :cve:`2020-22021`, :cve:`2020-22033`, :cve:`2020-22019`, :cve:`2021-33815`, :cve:`2021-38171`, :cve:`2020-20453` -- glibc: :cve:`2021-33574`, :cve:`2021-38604` -- inetutils: :cve:`2021-40491` -- libgcrypt: :cve:`2021-40528` -- linux-yocto/5.10, 5.14: :cve:`2021-3653`, :cve:`2021-3656` -- lz4: :cve:`2021-3520` -- nettle: :cve:`2021-20305` -- openssl: :cve:`2021-3711`, :cve:`2021-3712` -- perl: :cve:`2021-36770` -- python3: :cve:`2021-29921` -- python3-pip: :cve:`2021-3572` -- qemu: :cve:`2020-27821`, :cve:`2020-29443`, :cve:`2020-35517`, :cve:`2021-3392`, :cve:`2021-3409`, :cve:`2021-3416`, :cve:`2021-3527`, :cve:`2021-3544`, :cve:`2021-3545`, :cve:`2021-3546`, :cve:`2021-3682`, :cve:`2021-20181`, :cve:`2021-20221`, :cve:`2021-20257`, :cve:`2021-20263` -- rpm: :cve:`2021-3421`, :cve:`2021-20271` -- rsync: :cve:`2020-14387` -- util-linux: :cve:`2021-37600` -- vim: :cve:`2021-3770`, :cve:`2021-3778` -- wpa-supplicant: :cve:`2021-30004` -- xdg-utils: :cve:`2020-27748` -- xserver-xorg: :cve:`2021-3472` +- apr: :cve_nist:`2021-35940` +- aspell: :cve_nist:`2019-25051` +- avahi: :cve_nist:`2021-3468`, :cve_nist:`2021-36217` +- binutils: :cve_nist:`2021-20197` +- bluez: :cve_nist:`2021-3658` +- busybox: :cve_nist:`2021-28831` +- cairo: :cve_nist:`2020-35492` +- cpio: :cve_nist:`2021-38185` +- expat: :cve_nist:`2013-0340` +- ffmpeg: :cve_nist:`2020-20446`, :cve_nist:`2020-22015`, :cve_nist:`2020-22021`, :cve_nist:`2020-22033`, :cve_nist:`2020-22019`, :cve_nist:`2021-33815`, :cve_nist:`2021-38171`, :cve_nist:`2020-20453` +- glibc: :cve_nist:`2021-33574`, :cve_nist:`2021-38604` +- inetutils: :cve_nist:`2021-40491` +- libgcrypt: :cve_nist:`2021-40528` +- linux-yocto/5.10, 5.14: :cve_nist:`2021-3653`, :cve_nist:`2021-3656` +- lz4: :cve_nist:`2021-3520` +- nettle: :cve_nist:`2021-20305` +- openssl: :cve_nist:`2021-3711`, :cve_nist:`2021-3712` +- perl: :cve_nist:`2021-36770` +- python3: :cve_nist:`2021-29921` +- python3-pip: :cve_nist:`2021-3572` +- qemu: :cve_nist:`2020-27821`, :cve_nist:`2020-29443`, :cve_nist:`2020-35517`, :cve_nist:`2021-3392`, :cve_nist:`2021-3409`, :cve_nist:`2021-3416`, :cve_nist:`2021-3527`, :cve_nist:`2021-3544`, :cve_nist:`2021-3545`, :cve_nist:`2021-3546`, :cve_nist:`2021-3682`, :cve_nist:`2021-20181`, :cve_nist:`2021-20221`, :cve_nist:`2021-20257`, :cve_nist:`2021-20263` +- rpm: :cve_nist:`2021-3421`, :cve_nist:`2021-20271` +- rsync: :cve_nist:`2020-14387` +- util-linux: :cve_nist:`2021-37600` +- vim: :cve_nist:`2021-3770`, :cve_nist:`2021-3778` +- wpa-supplicant: :cve_nist:`2021-30004` +- xdg-utils: :cve_nist:`2020-27748` +- xserver-xorg: :cve_nist:`2021-3472` Recipe Upgrades in 3.4 ~~~~~~~~~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-4.0.1.rst b/poky/documentation/migration-guides/release-notes-4.0.1.rst index 5529f71c6f..5b972f899e 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.1.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.1.rst @@ -6,11 +6,11 @@ Release notes for 4.0.1 (kirkstone) Security Fixes in 4.0.1 ~~~~~~~~~~~~~~~~~~~~~~~ -- linux-yocto/5.15: fix :cve:`2022-28796` -- python3: ignore :cve:`2015-20107` -- e2fsprogs: fix :cve:`2022-1304` -- lua: fix :cve:`2022-28805` -- busybox: fix :cve:`2022-28391` +- linux-yocto/5.15: fix :cve_nist:`2022-28796` +- python3: ignore :cve_nist:`2015-20107` +- e2fsprogs: fix :cve_nist:`2022-1304` +- lua: fix :cve_nist:`2022-28805` +- busybox: fix :cve_nist:`2022-28391` Fixes in 4.0.1 ~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-4.0.10.rst b/poky/documentation/migration-guides/release-notes-4.0.10.rst index f37c3471ea..4e88bafe8a 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.10.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.10.rst @@ -6,28 +6,28 @@ Release notes for Yocto-4.0.10 (Kirkstone) Security Fixes in Yocto-4.0.10 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- binutils: Fix :cve:`2023-1579`, :cve:`2023-1972`, :cve_mitre:`2023-25584`, :cve_mitre:`2023-25585` and :cve_mitre:`2023-25588` -- cargo : Ignore :cve:`2022-46176` -- connman: Fix :cve:`2023-28488` -- curl: Fix :cve:`2023-27533`, :cve:`2023-27534`, :cve:`2023-27535`, :cve:`2023-27536` and :cve:`2023-27538` -- ffmpeg: Fix :cve:`2022-48434` -- freetype: Fix :cve:`2023-2004` +- binutils: Fix :cve_nist:`2023-1579`, :cve_nist:`2023-1972`, :cve_mitre:`2023-25584`, :cve_mitre:`2023-25585` and :cve_mitre:`2023-25588` +- cargo : Ignore :cve_nist:`2022-46176` +- connman: Fix :cve_nist:`2023-28488` +- curl: Fix :cve_nist:`2023-27533`, :cve_nist:`2023-27534`, :cve_nist:`2023-27535`, :cve_nist:`2023-27536` and :cve_nist:`2023-27538` +- ffmpeg: Fix :cve_nist:`2022-48434` +- freetype: Fix :cve_nist:`2023-2004` - ghostscript: Fix :cve_mitre:`2023-29979` -- git: Fix :cve:`2023-25652` and :cve:`2023-29007` -- go: Fix :cve:`2022-41722`, :cve:`2022-41724`, :cve:`2022-41725`, :cve:`2023-24534`, :cve:`2023-24537` and :cve:`2023-24538` -- go: Ignore :cve:`2022-41716` -- libxml2: Fix :cve:`2023-28484` and :cve:`2023-29469` -- libxpm: Fix :cve:`2022-44617`, :cve:`2022-46285` and :cve:`2022-4883` -- linux-yocto: Ignore :cve:`2021-3759`, :cve:`2021-4135`, :cve:`2021-4155`, :cve:`2022-0168`, :cve:`2022-0171`, :cve:`2022-1016`, :cve:`2022-1184`, :cve:`2022-1198`, :cve:`2022-1199`, :cve:`2022-1462`, :cve:`2022-1734`, :cve:`2022-1852`, :cve:`2022-1882`, :cve:`2022-1998`, :cve:`2022-2078`, :cve:`2022-2196`, :cve:`2022-2318`, :cve:`2022-2380`, :cve:`2022-2503`, :cve:`2022-26365`, :cve:`2022-2663`, :cve:`2022-2873`, :cve:`2022-2905`, :cve:`2022-2959`, :cve:`2022-3028`, :cve:`2022-3078`, :cve:`2022-3104`, :cve:`2022-3105`, :cve:`2022-3106`, :cve:`2022-3107`, :cve:`2022-3111`, :cve:`2022-3112`, :cve:`2022-3113`, :cve:`2022-3115`, :cve:`2022-3202`, :cve:`2022-32250`, :cve:`2022-32296`, :cve:`2022-32981`, :cve:`2022-3303`, :cve:`2022-33740`, :cve:`2022-33741`, :cve:`2022-33742`, :cve:`2022-33743`, :cve:`2022-33744`, :cve:`2022-33981`, :cve:`2022-3424`, :cve:`2022-3435`, :cve:`2022-34918`, :cve:`2022-3521`, :cve:`2022-3545`, :cve:`2022-3564`, :cve:`2022-3586`, :cve:`2022-3594`, :cve:`2022-36123`, :cve:`2022-3621`, :cve:`2022-3623`, :cve:`2022-3629`, :cve:`2022-3633`, :cve:`2022-3635`, :cve:`2022-3646`, :cve:`2022-3649`, :cve:`2022-36879`, :cve:`2022-36946`, :cve:`2022-3707`, :cve:`2022-39188`, :cve:`2022-39190`, :cve:`2022-39842`, :cve:`2022-40307`, :cve:`2022-40768`, :cve:`2022-4095`, :cve:`2022-41218`, :cve:`2022-4139`, :cve:`2022-41849`, :cve:`2022-41850`, :cve:`2022-41858`, :cve:`2022-42328`, :cve:`2022-42329`, :cve:`2022-42703`, :cve:`2022-42721`, :cve:`2022-42722`, :cve:`2022-42895`, :cve:`2022-4382`, :cve:`2022-4662`, :cve:`2022-47518`, :cve:`2022-47519`, :cve:`2022-47520`, :cve:`2022-47929`, :cve:`2023-0179`, :cve:`2023-0394`, :cve:`2023-0461`, :cve:`2023-0590`, :cve:`2023-1073`, :cve:`2023-1074`, :cve:`2023-1077`, :cve:`2023-1078`, :cve:`2023-1079`, :cve:`2023-1095`, :cve:`2023-1118`, :cve:`2023-1249`, :cve:`2023-1252`, :cve:`2023-1281`, :cve:`2023-1382`, :cve:`2023-1513`, :cve:`2023-1829`, :cve:`2023-1838`, :cve:`2023-1998`, :cve:`2023-2006`, :cve:`2023-2008`, :cve:`2023-2162`, :cve:`2023-2166`, :cve:`2023-2177`, :cve:`2023-22999`, :cve:`2023-23002`, :cve:`2023-23004`, :cve:`2023-23454`, :cve:`2023-23455`, :cve:`2023-23559`, :cve:`2023-25012`, :cve:`2023-26545`, :cve:`2023-28327` and :cve:`2023-28328` -- nasm: Fix :cve:`2022-44370` -- python3-cryptography: Fix :cve:`2023-23931` -- qemu: Ignore :cve:`2023-0664` -- ruby: Fix :cve:`2023-28755` and :cve:`2023-28756` -- screen: Fix :cve:`2023-24626` -- shadow: Fix :cve:`2023-29383` -- tiff: Fix :cve:`2022-4645` -- webkitgtk: Fix :cve:`2022-32888` and :cve:`2022-32923` -- xserver-xorg: Fix :cve:`2023-1393` +- git: Fix :cve_nist:`2023-25652` and :cve_nist:`2023-29007` +- go: Fix :cve_nist:`2022-41722`, :cve_nist:`2022-41724`, :cve_nist:`2022-41725`, :cve_nist:`2023-24534`, :cve_nist:`2023-24537` and :cve_nist:`2023-24538` +- go: Ignore :cve_nist:`2022-41716` +- libxml2: Fix :cve_nist:`2023-28484` and :cve_nist:`2023-29469` +- libxpm: Fix :cve_nist:`2022-44617`, :cve_nist:`2022-46285` and :cve_nist:`2022-4883` +- linux-yocto: Ignore :cve_nist:`2021-3759`, :cve_nist:`2021-4135`, :cve_nist:`2021-4155`, :cve_nist:`2022-0168`, :cve_nist:`2022-0171`, :cve_nist:`2022-1016`, :cve_nist:`2022-1184`, :cve_nist:`2022-1198`, :cve_nist:`2022-1199`, :cve_nist:`2022-1462`, :cve_nist:`2022-1734`, :cve_nist:`2022-1852`, :cve_nist:`2022-1882`, :cve_nist:`2022-1998`, :cve_nist:`2022-2078`, :cve_nist:`2022-2196`, :cve_nist:`2022-2318`, :cve_nist:`2022-2380`, :cve_nist:`2022-2503`, :cve_nist:`2022-26365`, :cve_nist:`2022-2663`, :cve_nist:`2022-2873`, :cve_nist:`2022-2905`, :cve_nist:`2022-2959`, :cve_nist:`2022-3028`, :cve_nist:`2022-3078`, :cve_nist:`2022-3104`, :cve_nist:`2022-3105`, :cve_nist:`2022-3106`, :cve_nist:`2022-3107`, :cve_nist:`2022-3111`, :cve_nist:`2022-3112`, :cve_nist:`2022-3113`, :cve_nist:`2022-3115`, :cve_nist:`2022-3202`, :cve_nist:`2022-32250`, :cve_nist:`2022-32296`, :cve_nist:`2022-32981`, :cve_nist:`2022-3303`, :cve_nist:`2022-33740`, :cve_nist:`2022-33741`, :cve_nist:`2022-33742`, :cve_nist:`2022-33743`, :cve_nist:`2022-33744`, :cve_nist:`2022-33981`, :cve_nist:`2022-3424`, :cve_nist:`2022-3435`, :cve_nist:`2022-34918`, :cve_nist:`2022-3521`, :cve_nist:`2022-3545`, :cve_nist:`2022-3564`, :cve_nist:`2022-3586`, :cve_nist:`2022-3594`, :cve_nist:`2022-36123`, :cve_nist:`2022-3621`, :cve_nist:`2022-3623`, :cve_nist:`2022-3629`, :cve_nist:`2022-3633`, :cve_nist:`2022-3635`, :cve_nist:`2022-3646`, :cve_nist:`2022-3649`, :cve_nist:`2022-36879`, :cve_nist:`2022-36946`, :cve_nist:`2022-3707`, :cve_nist:`2022-39188`, :cve_nist:`2022-39190`, :cve_nist:`2022-39842`, :cve_nist:`2022-40307`, :cve_nist:`2022-40768`, :cve_nist:`2022-4095`, :cve_nist:`2022-41218`, :cve_nist:`2022-4139`, :cve_nist:`2022-41849`, :cve_nist:`2022-41850`, :cve_nist:`2022-41858`, :cve_nist:`2022-42328`, :cve_nist:`2022-42329`, :cve_nist:`2022-42703`, :cve_nist:`2022-42721`, :cve_nist:`2022-42722`, :cve_nist:`2022-42895`, :cve_nist:`2022-4382`, :cve_nist:`2022-4662`, :cve_nist:`2022-47518`, :cve_nist:`2022-47519`, :cve_nist:`2022-47520`, :cve_nist:`2022-47929`, :cve_nist:`2023-0179`, :cve_nist:`2023-0394`, :cve_nist:`2023-0461`, :cve_nist:`2023-0590`, :cve_nist:`2023-1073`, :cve_nist:`2023-1074`, :cve_nist:`2023-1077`, :cve_nist:`2023-1078`, :cve_nist:`2023-1079`, :cve_nist:`2023-1095`, :cve_nist:`2023-1118`, :cve_nist:`2023-1249`, :cve_nist:`2023-1252`, :cve_nist:`2023-1281`, :cve_nist:`2023-1382`, :cve_nist:`2023-1513`, :cve_nist:`2023-1829`, :cve_nist:`2023-1838`, :cve_nist:`2023-1998`, :cve_nist:`2023-2006`, :cve_nist:`2023-2008`, :cve_nist:`2023-2162`, :cve_nist:`2023-2166`, :cve_nist:`2023-2177`, :cve_nist:`2023-22999`, :cve_nist:`2023-23002`, :cve_nist:`2023-23004`, :cve_nist:`2023-23454`, :cve_nist:`2023-23455`, :cve_nist:`2023-23559`, :cve_nist:`2023-25012`, :cve_nist:`2023-26545`, :cve_nist:`2023-28327` and :cve_nist:`2023-28328` +- nasm: Fix :cve_nist:`2022-44370` +- python3-cryptography: Fix :cve_nist:`2023-23931` +- qemu: Ignore :cve_nist:`2023-0664` +- ruby: Fix :cve_nist:`2023-28755` and :cve_nist:`2023-28756` +- screen: Fix :cve_nist:`2023-24626` +- shadow: Fix :cve_nist:`2023-29383` +- tiff: Fix :cve_nist:`2022-4645` +- webkitgtk: Fix :cve_nist:`2022-32888` and :cve_nist:`2022-32923` +- xserver-xorg: Fix :cve_nist:`2023-1393` Fixes in Yocto-4.0.10 diff --git a/poky/documentation/migration-guides/release-notes-4.0.11.rst b/poky/documentation/migration-guides/release-notes-4.0.11.rst index 8a15884908..baef380586 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.11.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.11.rst @@ -6,18 +6,18 @@ Release notes for Yocto-4.0.11 (Kirkstone) Security Fixes in Yocto-4.0.11 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- cups: Fix :cve:`2023-32324` -- curl: Fix :cve:`2023-28319`, :cve:`2023-28320`, :cve:`2023-28321` and :cve:`2023-28322` -- git: Ignore :cve:`2023-25815` -- go: Fix :cve:`2023-24539` and :cve:`2023-24540` -- nasm: Fix :cve:`2022-46457` -- openssh: Fix :cve:`2023-28531` -- openssl: Fix :cve:`2023-1255` and :cve:`2023-2650` -- perl: Fix :cve:`2023-31484` -- python3-requests: Fix for :cve:`2023-32681` -- sysstat: Fix :cve:`2023-33204` -- vim: Fix :cve:`2023-2426` -- webkitgtk: fix :cve:`2022-42867`, :cve:`2022-46691`, :cve:`2022-46699` and :cve:`2022-46700` +- cups: Fix :cve_nist:`2023-32324` +- curl: Fix :cve_nist:`2023-28319`, :cve_nist:`2023-28320`, :cve_nist:`2023-28321` and :cve_nist:`2023-28322` +- git: Ignore :cve_nist:`2023-25815` +- go: Fix :cve_nist:`2023-24539` and :cve_nist:`2023-24540` +- nasm: Fix :cve_nist:`2022-46457` +- openssh: Fix :cve_nist:`2023-28531` +- openssl: Fix :cve_nist:`2023-1255` and :cve_nist:`2023-2650` +- perl: Fix :cve_nist:`2023-31484` +- python3-requests: Fix for :cve_nist:`2023-32681` +- sysstat: Fix :cve_nist:`2023-33204` +- vim: Fix :cve_nist:`2023-2426` +- webkitgtk: fix :cve_nist:`2022-42867`, :cve_nist:`2022-46691`, :cve_nist:`2022-46699` and :cve_nist:`2022-46700` Fixes in Yocto-4.0.11 diff --git a/poky/documentation/migration-guides/release-notes-4.0.12.rst b/poky/documentation/migration-guides/release-notes-4.0.12.rst index 0ea92a453d..ead33e1854 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.12.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.12.rst @@ -6,30 +6,30 @@ Release notes for Yocto-4.0.12 (Kirkstone) Security Fixes in Yocto-4.0.12 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bind: Fix :cve:`2023-2828` and :cve:`2023-2911` -- cups: Fix :cve:`2023-34241` -- curl: Added :cve:`2023-28320` Follow-up patch -- dbus: Fix :cve:`2023-34969` -- dmidecode: fix :cve:`2023-30630` -- ghostscript: fix :cve:`2023-36664` -- go: fix :cve_mitre:`2023-24531`, :cve:`2023-24536`, :cve:`2023-29400`, :cve:`2023-29402`, :cve:`2023-29404`, :cve:`2023-29405` and :cve:`2023-29406` -- libarchive: Ignore :cve:`2023-30571` -- libcap: Fix :cve:`2023-2602` and :cve:`2023-2603` -- libjpeg-turbo: Fix :cve:`2023-2804` -- libpcre2: Fix :cve:`2022-41409` -- libtiff: fix :cve:`2023-26965` -- libwebp: Fix :cve:`2023-1999` -- libx11: Fix :cve:`2023-3138` -- libxpm: Fix :cve:`2022-44617` -- ninja: Ignore :cve:`2021-4336` -- openssh: Fix :cve:`2023-38408` -- openssl: Fix :cve:`2023-2975`, :cve:`2023-3446` and :cve:`2023-3817` -- perl: Fix :cve:`2023-31486` -- python3: Ignore :cve:`2023-36632` -- qemu: Fix :cve:`2023-0330`, :cve_mitre:`2023-2861`, :cve_mitre:`2023-3255` and :cve_mitre:`2023-3301` -- sqlite3: Fix :cve:`2023-36191` -- tiff: Fix :cve:`2023-0795`, :cve:`2023-0796`, :cve:`2023-0797`, :cve:`2023-0798`, :cve:`2023-0799`, :cve:`2023-25433`, :cve:`2023-25434` and :cve:`2023-25435` -- vim: :cve:`2023-2609` and :cve:`2023-2610` +- bind: Fix :cve_nist:`2023-2828` and :cve_nist:`2023-2911` +- cups: Fix :cve_nist:`2023-34241` +- curl: Added :cve_nist:`2023-28320` Follow-up patch +- dbus: Fix :cve_nist:`2023-34969` +- dmidecode: fix :cve_nist:`2023-30630` +- ghostscript: fix :cve_nist:`2023-36664` +- go: fix :cve_mitre:`2023-24531`, :cve_nist:`2023-24536`, :cve_nist:`2023-29400`, :cve_nist:`2023-29402`, :cve_nist:`2023-29404`, :cve_nist:`2023-29405` and :cve_nist:`2023-29406` +- libarchive: Ignore :cve_nist:`2023-30571` +- libcap: Fix :cve_nist:`2023-2602` and :cve_nist:`2023-2603` +- libjpeg-turbo: Fix :cve_nist:`2023-2804` +- libpcre2: Fix :cve_nist:`2022-41409` +- libtiff: fix :cve_nist:`2023-26965` +- libwebp: Fix :cve_nist:`2023-1999` +- libx11: Fix :cve_nist:`2023-3138` +- libxpm: Fix :cve_nist:`2022-44617` +- ninja: Ignore :cve_nist:`2021-4336` +- openssh: Fix :cve_nist:`2023-38408` +- openssl: Fix :cve_nist:`2023-2975`, :cve_nist:`2023-3446` and :cve_nist:`2023-3817` +- perl: Fix :cve_nist:`2023-31486` +- python3: Ignore :cve_nist:`2023-36632` +- qemu: Fix :cve_nist:`2023-0330`, :cve_mitre:`2023-2861`, :cve_mitre:`2023-3255` and :cve_mitre:`2023-3301` +- sqlite3: Fix :cve_nist:`2023-36191` +- tiff: Fix :cve_nist:`2023-0795`, :cve_nist:`2023-0796`, :cve_nist:`2023-0797`, :cve_nist:`2023-0798`, :cve_nist:`2023-0799`, :cve_nist:`2023-25433`, :cve_nist:`2023-25434` and :cve_nist:`2023-25435` +- vim: :cve_nist:`2023-2609` and :cve_nist:`2023-2610` Fixes in Yocto-4.0.12 diff --git a/poky/documentation/migration-guides/release-notes-4.0.13.rst b/poky/documentation/migration-guides/release-notes-4.0.13.rst index 3c096c356f..641c9d1f05 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.13.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.13.rst @@ -6,43 +6,43 @@ Release notes for Yocto-4.0.13 (Kirkstone) Security Fixes in Yocto-4.0.13 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bind: Fix :cve:`2023-2829` -- binutils: Fix :cve:`2022-48065` -- busybox: Fix :cve:`2022-48174` -- cups: Fix :cve:`2023-32360` -- curl: Fix :cve:`2023-32001` -- dmidecode: Fix :cve:`2023-30630` -- dropbear: Fix :cve:`2023-36328` -- ffmpeg: Ignored :cve:`2023-39018` -- file: Fix :cve:`2022-48554` -- flac: Fix :cve:`2020-22219` -- gcc: Fix :cve:`2023-4039` -- gdb: Fix :cve:`2023-39128` -- ghostscript: Fix :cve:`2023-38559` -- glib-2.0: Fix :cve:`2023-29499`, :cve:`2023-32611`, :cve:`2023-32636`, :cve:`2023-32643` and :cve:`2023-32665` -- go: Fix :cve:`2023-29409` and :cve:`2023-39319` +- bind: Fix :cve_nist:`2023-2829` +- binutils: Fix :cve_nist:`2022-48065` +- busybox: Fix :cve_nist:`2022-48174` +- cups: Fix :cve_nist:`2023-32360` +- curl: Fix :cve_nist:`2023-32001` +- dmidecode: Fix :cve_nist:`2023-30630` +- dropbear: Fix :cve_nist:`2023-36328` +- ffmpeg: Ignored :cve_nist:`2023-39018` +- file: Fix :cve_nist:`2022-48554` +- flac: Fix :cve_nist:`2020-22219` +- gcc: Fix :cve_nist:`2023-4039` +- gdb: Fix :cve_nist:`2023-39128` +- ghostscript: Fix :cve_nist:`2023-38559` +- glib-2.0: Fix :cve_nist:`2023-29499`, :cve_nist:`2023-32611`, :cve_nist:`2023-32636`, :cve_nist:`2023-32643` and :cve_nist:`2023-32665` +- go: Fix :cve_nist:`2023-29409` and :cve_nist:`2023-39319` - gstreamer1.0-plugins-bad: Fix :cve_mitre:`2023-37329` - gstreamer1.0-plugins-base: Fix :cve_mitre:`2023-37328` - gstreamer1.0-plugins-good: Fix :cve_mitre:`2023-37327` -- inetutils: Fix :cve:`2023-40303` -- json-c: Fix :cve:`2021-32292` -- librsvg: Fix :cve:`2023-38633` -- libssh2: Fix :cve:`2020-22218` -- libtiff: Fix :cve:`2023-26966` -- libxml2: Fix :cve:`2023-39615` -- linux-yocto/5.15: Ignore :cve:`2003-1604`, :cve:`2004-0230`, :cve:`2006-3635`, :cve:`2006-5331`, :cve:`2006-6128`, :cve:`2007-4774`, :cve:`2007-6761`, :cve:`2007-6762`, :cve:`2008-7316`, :cve:`2009-2692`, :cve:`2010-0008`, :cve:`2010-3432`, :cve:`2010-4648`, :cve:`2010-5313`, :cve:`2010-5328`, :cve:`2010-5329`, :cve:`2010-5331`, :cve:`2010-5332`, :cve:`2011-4098`, :cve:`2011-4131`, :cve:`2011-4915`, :cve:`2011-5321`, :cve:`2011-5327`, :cve:`2012-0957`, :cve:`2012-2119`, :cve:`2012-2136`, :cve:`2012-2137`, :cve:`2012-2313`, :cve:`2012-2319`, :cve:`2012-2372`, :cve:`2012-2375`, :cve:`2012-2390`, :cve:`2012-2669`, :cve:`2012-2744`, :cve:`2012-2745`, :cve:`2012-3364`, :cve:`2012-3375`, :cve:`2012-3400`, :cve:`2012-3412`, :cve:`2012-3430`, :cve:`2012-3510`, :cve:`2012-3511`, :cve:`2012-3520`, :cve:`2012-3552`, :cve:`2012-4398`, :cve:`2012-4444`, :cve:`2012-4461`, :cve:`2012-4467`, :cve:`2012-4508`, :cve:`2012-4530`, :cve:`2012-4565`, :cve:`2012-5374`, :cve:`2012-5375`, :cve:`2012-5517`, :cve:`2012-6536`, :cve:`2012-6537`, :cve:`2012-6538`, :cve:`2012-6539`, :cve:`2012-6540`, :cve:`2012-6541`, :cve:`2012-6542`, :cve:`2012-6543`, :cve:`2012-6544`, :cve:`2012-6545`, :cve:`2012-6546`, :cve:`2012-6547`, :cve:`2012-6548`, :cve:`2012-6549`, :cve:`2012-6638`, :cve:`2012-6647`, :cve:`2012-6657`, :cve:`2012-6689`, :cve:`2012-6701`, :cve:`2012-6703`, :cve:`2012-6704`, :cve:`2012-6712`, :cve:`2013-0160`, :cve:`2013-0190`, :cve:`2013-0216`, :cve:`2013-0217`, :cve:`2013-0228`, :cve:`2013-0231`, :cve:`2013-0268`, :cve:`2013-0290`, :cve:`2013-0309`, :cve:`2013-0310`, :cve:`2013-0311`, :cve:`2013-0313`, :cve:`2013-0343`, :cve:`2013-0349`, :cve:`2013-0871`, :cve:`2013-0913`, :cve:`2013-0914`, :cve:`2013-1059`, :cve:`2013-1763`, :cve:`2013-1767`, :cve:`2013-1772`, :cve:`2013-1773`, :cve:`2013-1774`, :cve:`2013-1792`, :cve:`2013-1796`, :cve:`2013-1797`, :cve:`2013-1798`, :cve:`2013-1819`, :cve:`2013-1826`, :cve:`2013-1827`, :cve:`2013-1828`, :cve:`2013-1848`, :cve:`2013-1858`, :cve:`2013-1860`, :cve:`2013-1928`, :cve:`2013-1929`, :cve:`2013-1943`, :cve:`2013-1956`, :cve:`2013-1957`, :cve:`2013-1958`, :cve:`2013-1959`, :cve:`2013-1979`, :cve:`2013-2015`, :cve:`2013-2017`, :cve:`2013-2058`, :cve:`2013-2094`, :cve:`2013-2128`, :cve:`2013-2140`, :cve:`2013-2141`, :cve:`2013-2146`, :cve:`2013-2147`, :cve:`2013-2148`, :cve:`2013-2164`, :cve:`2013-2206`, :cve:`2013-2232`, :cve:`2013-2234`, :cve:`2013-2237`, :cve:`2013-2546`, :cve:`2013-2547`, :cve:`2013-2548`, :cve:`2013-2596`, :cve:`2013-2634`, :cve:`2013-2635`, :cve:`2013-2636`, :cve:`2013-2850`, :cve:`2013-2851`, :cve:`2013-2852`, :cve:`2013-2888`, :cve:`2013-2889`, :cve:`2013-2890`, :cve:`2013-2891`, :cve:`2013-2892`, :cve:`2013-2893`, :cve:`2013-2894`, :cve:`2013-2895`, :cve:`2013-2896`, :cve:`2013-2897`, :cve:`2013-2898`, :cve:`2013-2899`, :cve:`2013-2929`, :cve:`2013-2930`, :cve:`2013-3076`, :cve:`2013-3222`, :cve:`2013-3223`, :cve:`2013-3224`, :cve:`2013-3225`, :cve:`2013-3226`, :cve:`2013-3227`, :cve:`2013-3228`, :cve:`2013-3229`, :cve:`2013-3230`, :cve:`2013-3231`, :cve:`2013-3232`, :cve:`2013-3233`, :cve:`2013-3234`, :cve:`2013-3235`, :cve:`2013-3236`, :cve:`2013-3237`, :cve:`2013-3301`, :cve:`2013-3302`, :cve:`2013-4125`, :cve:`2013-4127`, :cve:`2013-4129`, :cve:`2013-4162`, :cve:`2013-4163`, :cve:`2013-4205`, :cve:`2013-4220`, :cve:`2013-4247`, :cve:`2013-4254`, :cve:`2013-4270`, :cve:`2013-4299`, :cve:`2013-4300`, :cve:`2013-4312`, :cve:`2013-4343`, :cve:`2013-4345`, :cve:`2013-4348`, :cve:`2013-4350`, :cve:`2013-4387`, :cve:`2013-4470`, :cve:`2013-4483`, :cve:`2013-4511`, :cve:`2013-4512`, :cve:`2013-4513`, :cve:`2013-4514`, :cve:`2013-4515`, :cve:`2013-4516`, :cve:`2013-4563`, :cve:`2013-4579`, :cve:`2013-4587`, :cve:`2013-4588`, :cve:`2013-4591`, :cve:`2013-4592`, :cve:`2013-5634`, :cve:`2013-6282`, :cve:`2013-6367`, :cve:`2013-6368`, :cve:`2013-6376`, :cve:`2013-6378`, :cve:`2013-6380`, :cve:`2013-6381`, :cve:`2013-6382`, :cve:`2013-6383`, :cve:`2013-6431`, :cve:`2013-6432`, :cve:`2013-6885`, :cve:`2013-7026`, :cve:`2013-7027`, :cve:`2013-7263`, :cve:`2013-7264`, :cve:`2013-7265`, :cve:`2013-7266`, :cve:`2013-7267`, :cve:`2013-7268`, :cve:`2013-7269`, :cve:`2013-7270`, :cve:`2013-7271`, :cve:`2013-7281`, :cve:`2013-7339`, :cve:`2013-7348`, :cve:`2013-7421`, :cve:`2013-7446`, :cve:`2013-7470`, :cve:`2014-0038`, :cve:`2014-0049`, :cve:`2014-0055`, :cve:`2014-0069`, :cve:`2014-0077`, :cve:`2014-0100`, :cve:`2014-0101`, :cve:`2014-0102`, :cve:`2014-0131`, :cve:`2014-0155`, :cve:`2014-0181`, :cve:`2014-0196`, :cve:`2014-0203`, :cve:`2014-0205`, :cve:`2014-0206`, :cve:`2014-1438`, :cve:`2014-1444`, :cve:`2014-1445`, :cve:`2014-1446`, :cve:`2014-1690`, :cve:`2014-1737`, :cve:`2014-1738`, :cve:`2014-1739`, :cve:`2014-1874`, :cve:`2014-2038`, :cve:`2014-2039`, :cve:`2014-2309`, :cve:`2014-2523`, :cve:`2014-2568`, :cve:`2014-2580`, :cve:`2014-2672`, :cve:`2014-2673`, :cve:`2014-2678`, :cve:`2014-2706`, :cve:`2014-2739`, :cve:`2014-2851`, :cve:`2014-2889`, :cve:`2014-3122`, :cve:`2014-3144`, :cve:`2014-3145`, :cve:`2014-3153`, :cve:`2014-3180`, :cve:`2014-3181`, :cve:`2014-3182`, :cve:`2014-3183`, :cve:`2014-3184`, :cve:`2014-3185`, :cve:`2014-3186`, :cve:`2014-3534`, :cve:`2014-3535`, :cve:`2014-3601`, :cve:`2014-3610`, :cve:`2014-3611`, :cve:`2014-3631`, :cve:`2014-3645`, :cve:`2014-3646`, :cve:`2014-3647`, :cve:`2014-3673`, :cve:`2014-3687`, :cve:`2014-3688`, :cve:`2014-3690`, :cve:`2014-3917`, :cve:`2014-3940`, :cve:`2014-4014`, :cve:`2014-4027`, :cve:`2014-4157`, :cve:`2014-4171`, :cve:`2014-4508`, :cve:`2014-4608`, :cve:`2014-4611`, :cve:`2014-4652`, :cve:`2014-4653`, :cve:`2014-4654`, :cve:`2014-4655`, :cve:`2014-4656`, :cve:`2014-4667`, :cve:`2014-4699`, :cve:`2014-4943`, :cve:`2014-5045`, :cve:`2014-5077`, :cve:`2014-5206`, :cve:`2014-5207`, :cve:`2014-5471`, :cve:`2014-5472`, :cve:`2014-6410`, :cve:`2014-6416`, :cve:`2014-6417`, :cve:`2014-6418`, :cve:`2014-7145`, :cve:`2014-7283`, :cve:`2014-7284`, :cve:`2014-7822`, :cve:`2014-7825`, :cve:`2014-7826`, :cve:`2014-7841`, :cve:`2014-7842`, :cve:`2014-7843`, :cve:`2014-7970`, :cve:`2014-7975`, :cve:`2014-8086`, :cve:`2014-8133`, :cve:`2014-8134`, :cve:`2014-8159`, :cve:`2014-8160`, :cve:`2014-8171`, :cve:`2014-8172`, :cve:`2014-8173`, :cve:`2014-8369`, :cve:`2014-8480`, :cve:`2014-8481`, :cve:`2014-8559`, :cve:`2014-8709`, :cve:`2014-8884`, :cve:`2014-8989`, :cve:`2014-9090`, :cve:`2014-9322`, :cve:`2014-9419`, :cve:`2014-9420`, :cve:`2014-9428`, :cve:`2014-9529`, :cve:`2014-9584`, :cve:`2014-9585`, :cve:`2014-9644`, :cve:`2014-9683`, :cve:`2014-9710`, :cve:`2014-9715`, :cve:`2014-9717`, :cve:`2014-9728`, :cve:`2014-9729`, :cve:`2014-9730`, :cve:`2014-9731`, :cve:`2014-9803`, :cve:`2014-9870`, :cve:`2014-9888`, :cve:`2014-9895`, :cve:`2014-9903`, :cve:`2014-9904`, :cve:`2014-9914`, :cve:`2014-9922`, :cve:`2014-9940`, :cve:`2015-0239`, :cve:`2015-0274`, :cve:`2015-0275`, :cve:`2015-1333`, :cve:`2015-1339`, :cve:`2015-1350`, :cve:`2015-1420`, :cve:`2015-1421`, :cve:`2015-1465`, :cve:`2015-1573`, :cve:`2015-1593`, :cve:`2015-1805`, :cve:`2015-2041`, :cve:`2015-2042`, :cve:`2015-2150`, :cve:`2015-2666`, :cve:`2015-2672`, :cve:`2015-2686`, :cve:`2015-2830`, :cve:`2015-2922`, :cve:`2015-2925`, :cve:`2015-3212`, :cve:`2015-3214`, :cve:`2015-3288`, :cve:`2015-3290`, :cve:`2015-3291`, :cve:`2015-3331`, :cve:`2015-3339`, :cve:`2015-3636`, :cve:`2015-4001`, :cve:`2015-4002`, :cve:`2015-4003`, :cve:`2015-4004`, :cve:`2015-4036`, :cve:`2015-4167`, :cve:`2015-4170`, :cve:`2015-4176`, :cve:`2015-4177`, :cve:`2015-4178`, :cve:`2015-4692`, :cve:`2015-4700`, :cve:`2015-5156`, :cve:`2015-5157`, :cve:`2015-5257`, :cve:`2015-5283`, :cve:`2015-5307`, :cve:`2015-5327`, :cve:`2015-5364`, :cve:`2015-5366`, :cve:`2015-5697`, :cve:`2015-5706`, :cve:`2015-5707`, :cve:`2015-6252`, :cve:`2015-6526`, :cve:`2015-6937`, :cve:`2015-7509`, :cve:`2015-7513`, :cve:`2015-7515`, :cve:`2015-7550`, :cve:`2015-7566`, :cve:`2015-7613`, :cve:`2015-7799`, :cve:`2015-7833`, :cve:`2015-7872`, :cve:`2015-7884`, :cve:`2015-7885`, :cve:`2015-7990`, :cve:`2015-8104`, :cve:`2015-8215`, :cve:`2015-8324`, :cve:`2015-8374`, :cve:`2015-8539`, :cve:`2015-8543`, :cve:`2015-8550`, :cve:`2015-8551`, :cve:`2015-8552`, :cve:`2015-8553`, :cve:`2015-8569`, :cve:`2015-8575`, :cve:`2015-8660`, :cve:`2015-8709`, :cve:`2015-8746`, :cve:`2015-8767`, :cve:`2015-8785`, :cve:`2015-8787`, :cve:`2015-8812`, :cve:`2015-8816`, :cve:`2015-8830`, :cve:`2015-8839`, :cve:`2015-8844`, :cve:`2015-8845`, :cve:`2015-8950`, :cve:`2015-8952`, :cve:`2015-8953`, :cve:`2015-8955`, :cve:`2015-8956`, :cve:`2015-8961`, :cve:`2015-8962`, :cve:`2015-8963`, :cve:`2015-8964`, :cve:`2015-8966`, :cve:`2015-8967`, :cve:`2015-8970`, :cve:`2015-9004`, :cve:`2015-9016`, :cve:`2015-9289`, :cve:`2016-0617`, :cve:`2016-0723`, :cve:`2016-0728`, :cve:`2016-0758`, :cve:`2016-0821`, :cve:`2016-0823`, :cve:`2016-10044`, :cve:`2016-10088`, :cve:`2016-10147`, :cve:`2016-10150`, :cve:`2016-10153`, :cve:`2016-10154`, :cve:`2016-10200`, :cve:`2016-10208`, :cve:`2016-10229`, :cve:`2016-10318`, :cve:`2016-10723`, :cve:`2016-10741`, :cve:`2016-10764`, :cve:`2016-10905`, :cve:`2016-10906`, :cve:`2016-10907`, :cve:`2016-1237`, :cve:`2016-1575`, :cve:`2016-1576`, :cve:`2016-1583`, :cve:`2016-2053`, :cve:`2016-2069`, :cve:`2016-2070`, :cve:`2016-2085`, :cve:`2016-2117`, :cve:`2016-2143`, :cve:`2016-2184`, :cve:`2016-2185`, :cve:`2016-2186`, :cve:`2016-2187`, :cve:`2016-2188`, :cve:`2016-2383`, :cve:`2016-2384`, :cve:`2016-2543`, :cve:`2016-2544`, :cve:`2016-2545`, :cve:`2016-2546`, :cve:`2016-2547`, :cve:`2016-2548`, :cve:`2016-2549`, :cve:`2016-2550`, :cve:`2016-2782`, :cve:`2016-2847`, :cve:`2016-3044`, :cve:`2016-3070`, :cve:`2016-3134`, :cve:`2016-3135`, :cve:`2016-3136`, :cve:`2016-3137`, :cve:`2016-3138`, :cve:`2016-3139`, :cve:`2016-3140`, :cve:`2016-3156`, :cve:`2016-3157`, :cve:`2016-3672`, :cve:`2016-3689`, :cve:`2016-3713`, :cve:`2016-3841`, :cve:`2016-3857`, :cve:`2016-3951`, :cve:`2016-3955`, :cve:`2016-3961`, :cve:`2016-4440`, :cve:`2016-4470`, :cve:`2016-4482`, :cve:`2016-4485`, :cve:`2016-4486`, :cve:`2016-4557`, :cve:`2016-4558`, :cve:`2016-4565`, :cve:`2016-4568`, :cve:`2016-4569`, :cve:`2016-4578`, :cve:`2016-4580`, :cve:`2016-4581`, :cve:`2016-4794`, :cve:`2016-4805`, :cve:`2016-4913`, :cve:`2016-4951`, :cve:`2016-4997`, :cve:`2016-4998`, :cve:`2016-5195`, :cve:`2016-5243`, :cve:`2016-5244`, :cve:`2016-5400`, :cve:`2016-5412`, :cve:`2016-5696`, :cve:`2016-5728`, :cve:`2016-5828`, :cve:`2016-5829`, :cve:`2016-6130`, :cve:`2016-6136`, :cve:`2016-6156`, :cve:`2016-6162`, :cve:`2016-6187`, :cve:`2016-6197`, :cve:`2016-6198`, :cve:`2016-6213`, :cve:`2016-6327`, :cve:`2016-6480`, :cve:`2016-6516`, :cve:`2016-6786`, :cve:`2016-6787`, :cve:`2016-6828`, :cve:`2016-7039`, :cve:`2016-7042`, :cve:`2016-7097`, :cve:`2016-7117`, :cve:`2016-7425`, :cve:`2016-7910`, :cve:`2016-7911`, :cve:`2016-7912`, :cve:`2016-7913`, :cve:`2016-7914`, :cve:`2016-7915`, :cve:`2016-7916`, :cve:`2016-7917`, :cve:`2016-8399`, :cve:`2016-8405`, :cve:`2016-8630`, :cve:`2016-8632`, :cve:`2016-8633`, :cve:`2016-8636`, :cve:`2016-8645`, :cve:`2016-8646`, :cve:`2016-8650`, :cve:`2016-8655`, :cve:`2016-8658`, :cve:`2016-8666`, :cve:`2016-9083`, :cve:`2016-9084`, :cve:`2016-9120`, :cve:`2016-9178`, :cve:`2016-9191`, :cve:`2016-9313`, :cve:`2016-9555`, :cve:`2016-9576`, :cve:`2016-9588`, :cve:`2016-9604`, :cve:`2016-9685`, :cve:`2016-9754`, :cve:`2016-9755`, :cve:`2016-9756`, :cve:`2016-9777`, :cve:`2016-9793`, :cve:`2016-9794`, :cve:`2016-9806`, :cve:`2016-9919`, :cve:`2017-0605`, :cve:`2017-0627`, :cve:`2017-0750`, :cve:`2017-0786`, :cve:`2017-0861`, :cve:`2017-1000`, :cve:`2017-1000111`, :cve:`2017-1000112`, :cve:`2017-1000251`, :cve:`2017-1000252`, :cve:`2017-1000253`, :cve:`2017-1000255`, :cve:`2017-1000363`, :cve:`2017-1000364`, :cve:`2017-1000365`, :cve:`2017-1000370`, :cve:`2017-1000371`, :cve:`2017-1000379`, :cve:`2017-1000380`, :cve:`2017-1000405`, :cve:`2017-1000407`, :cve:`2017-1000410`, :cve:`2017-10661`, :cve:`2017-10662`, :cve:`2017-10663`, :cve:`2017-10810`, :cve:`2017-10911`, :cve:`2017-11089`, :cve:`2017-11176`, :cve:`2017-11472`, :cve:`2017-11473`, :cve:`2017-11600`, :cve:`2017-12134`, :cve:`2017-12146`, :cve:`2017-12153`, :cve:`2017-12154`, :cve:`2017-12168`, :cve:`2017-12188`, :cve:`2017-12190`, :cve:`2017-12192`, :cve:`2017-12193`, :cve:`2017-12762`, :cve:`2017-13080`, :cve:`2017-13166`, :cve:`2017-13167`, :cve:`2017-13168`, :cve:`2017-13215`, :cve:`2017-13216`, :cve:`2017-13220`, :cve:`2017-13305`, :cve:`2017-13686`, :cve:`2017-13695`, :cve:`2017-13715`, :cve:`2017-14051`, :cve:`2017-14106`, :cve:`2017-14140`, :cve:`2017-14156`, :cve:`2017-14340`, :cve:`2017-14489`, :cve:`2017-14497`, :cve:`2017-14954`, :cve:`2017-14991`, :cve:`2017-15102`, :cve:`2017-15115`, :cve:`2017-15116`, :cve:`2017-15121`, :cve:`2017-15126`, :cve:`2017-15127`, :cve:`2017-15128`, :cve:`2017-15129`, :cve:`2017-15265`, :cve:`2017-15274`, :cve:`2017-15299`, :cve:`2017-15306`, :cve:`2017-15537`, :cve:`2017-15649`, :cve:`2017-15868`, :cve:`2017-15951`, :cve:`2017-16525`, :cve:`2017-16526`, :cve:`2017-16527`, :cve:`2017-16528`, :cve:`2017-16529`, :cve:`2017-16530`, :cve:`2017-16531`, :cve:`2017-16532`, :cve:`2017-16533`, :cve:`2017-16534`, :cve:`2017-16535`, :cve:`2017-16536`, :cve:`2017-16537`, :cve:`2017-16538`, :cve:`2017-16643`, :cve:`2017-16644`, :cve:`2017-16645`, :cve:`2017-16646`, :cve:`2017-16647`, :cve:`2017-16648`, :cve:`2017-16649`, :cve:`2017-16650`, :cve:`2017-16911`, :cve:`2017-16912`, :cve:`2017-16913`, :cve:`2017-16914`, :cve:`2017-16939`, :cve:`2017-16994`, :cve:`2017-16995`, :cve:`2017-16996`, :cve:`2017-17052`, :cve:`2017-17053`, :cve:`2017-17448`, :cve:`2017-17449`, :cve:`2017-17450`, :cve:`2017-17558`, :cve:`2017-17712`, :cve:`2017-17741`, :cve:`2017-17805`, :cve:`2017-17806`, :cve:`2017-17807`, :cve:`2017-17852`, :cve:`2017-17853`, :cve:`2017-17854`, :cve:`2017-17855`, :cve:`2017-17856`, :cve:`2017-17857`, :cve:`2017-17862`, :cve:`2017-17863`, :cve:`2017-17864`, :cve:`2017-17975`, :cve:`2017-18017`, :cve:`2017-18075`, :cve:`2017-18079`, :cve:`2017-18174`, :cve:`2017-18193`, :cve:`2017-18200`, :cve:`2017-18202`, :cve:`2017-18203`, :cve:`2017-18204`, :cve:`2017-18208`, :cve:`2017-18216`, :cve:`2017-18218`, :cve:`2017-18221`, :cve:`2017-18222`, :cve:`2017-18224`, :cve:`2017-18232`, :cve:`2017-18241`, :cve:`2017-18249`, :cve:`2017-18255`, :cve:`2017-18257`, :cve:`2017-18261`, :cve:`2017-18270`, :cve:`2017-18344`, :cve:`2017-18360`, :cve:`2017-18379`, :cve:`2017-18509`, :cve:`2017-18549`, :cve:`2017-18550`, :cve:`2017-18551`, :cve:`2017-18552`, :cve:`2017-18595`, :cve:`2017-2583`, :cve:`2017-2584`, :cve:`2017-2596`, :cve:`2017-2618`, :cve:`2017-2634`, :cve:`2017-2636`, :cve:`2017-2647`, :cve:`2017-2671`, :cve:`2017-5123`, :cve:`2017-5546`, :cve:`2017-5547`, :cve:`2017-5548`, :cve:`2017-5549`, :cve:`2017-5550`, :cve:`2017-5551`, :cve:`2017-5576`, :cve:`2017-5577`, :cve:`2017-5669`, :cve:`2017-5715`, :cve:`2017-5753`, :cve:`2017-5754`, :cve:`2017-5897`, :cve:`2017-5967`, :cve:`2017-5970`, :cve:`2017-5972`, :cve:`2017-5986`, :cve:`2017-6001`, :cve:`2017-6074`, :cve:`2017-6214`, :cve:`2017-6345`, :cve:`2017-6346`, :cve:`2017-6347`, :cve:`2017-6348`, :cve:`2017-6353`, :cve:`2017-6874`, :cve:`2017-6951`, :cve:`2017-7184`, :cve:`2017-7187`, :cve:`2017-7261`, :cve:`2017-7273`, :cve:`2017-7277`, :cve:`2017-7294`, :cve:`2017-7308`, :cve:`2017-7346`, :cve:`2017-7374`, :cve:`2017-7472`, :cve:`2017-7477`, :cve:`2017-7482`, :cve:`2017-7487`, :cve:`2017-7495`, :cve:`2017-7518`, :cve:`2017-7533`, :cve:`2017-7541`, :cve:`2017-7542`, :cve:`2017-7558`, :cve:`2017-7616`, :cve:`2017-7618`, :cve:`2017-7645`, :cve:`2017-7889`, :cve:`2017-7895`, :cve:`2017-7979`, :cve:`2017-8061`, :cve:`2017-8062`, :cve:`2017-8063`, :cve:`2017-8064`, :cve:`2017-8065`, :cve:`2017-8066`, :cve:`2017-8067`, :cve:`2017-8068`, :cve:`2017-8069`, :cve:`2017-8070`, :cve:`2017-8071`, :cve:`2017-8072`, :cve:`2017-8106`, :cve:`2017-8240`, :cve:`2017-8797`, :cve:`2017-8824`, :cve:`2017-8831`, :cve:`2017-8890`, :cve:`2017-8924`, :cve:`2017-8925`, :cve:`2017-9059`, :cve:`2017-9074`, :cve:`2017-9075`, :cve:`2017-9076`, :cve:`2017-9077`, :cve:`2017-9150`, :cve:`2017-9211`, :cve:`2017-9242`, :cve:`2017-9605`, :cve:`2017-9725`, :cve:`2017-9984`, :cve:`2017-9985`, :cve:`2017-9986`, :cve:`2018-1000004`, :cve:`2018-1000026`, :cve:`2018-1000028`, :cve:`2018-1000199`, :cve:`2018-1000200`, :cve:`2018-1000204`, :cve:`2018-10021`, :cve:`2018-10074`, :cve:`2018-10087`, :cve:`2018-10124`, :cve:`2018-10322`, :cve:`2018-10323`, :cve:`2018-1065`, :cve:`2018-1066`, :cve:`2018-10675`, :cve:`2018-1068`, :cve:`2018-10840`, :cve:`2018-10853`, :cve:`2018-1087`, :cve:`2018-10876`, :cve:`2018-10877`, :cve:`2018-10878`, :cve:`2018-10879`, :cve:`2018-10880`, :cve:`2018-10881`, :cve:`2018-10882`, :cve:`2018-10883`, :cve:`2018-10901`, :cve:`2018-10902`, :cve:`2018-1091`, :cve:`2018-1092`, :cve:`2018-1093`, :cve:`2018-10938`, :cve:`2018-1094`, :cve:`2018-10940`, :cve:`2018-1095`, :cve:`2018-1108`, :cve:`2018-1118`, :cve:`2018-1120`, :cve:`2018-11232`, :cve:`2018-1128`, :cve:`2018-1129`, :cve:`2018-1130`, :cve:`2018-11412`, :cve:`2018-11506`, :cve:`2018-11508`, :cve:`2018-12126`, :cve:`2018-12127`, :cve:`2018-12130`, :cve:`2018-12207`, :cve:`2018-12232`, :cve:`2018-12233`, :cve:`2018-12633`, :cve:`2018-12714`, :cve:`2018-12896`, :cve:`2018-12904`, :cve:`2018-13053`, :cve:`2018-13093`, :cve:`2018-13094`, :cve:`2018-13095`, :cve:`2018-13096`, :cve:`2018-13097`, :cve:`2018-13098`, :cve:`2018-13099`, :cve:`2018-13100`, :cve:`2018-13405`, :cve:`2018-13406`, :cve:`2018-14609`, :cve:`2018-14610`, :cve:`2018-14611`, :cve:`2018-14612`, :cve:`2018-14613`, :cve:`2018-14614`, :cve:`2018-14615`, :cve:`2018-14616`, :cve:`2018-14617`, :cve:`2018-14619`, :cve:`2018-14625`, :cve:`2018-14633`, :cve:`2018-14634`, :cve:`2018-14641`, :cve:`2018-14646`, :cve:`2018-14656`, :cve:`2018-14678`, :cve:`2018-14734`, :cve:`2018-15471`, :cve:`2018-15572`, :cve:`2018-15594`, :cve:`2018-16276`, :cve:`2018-16597`, :cve:`2018-16658`, :cve:`2018-16862`, :cve:`2018-16871`, :cve:`2018-16880`, :cve:`2018-16882`, :cve:`2018-16884`, :cve:`2018-17182`, :cve:`2018-17972`, :cve:`2018-18021`, :cve:`2018-18281`, :cve:`2018-18386`, :cve:`2018-18397`, :cve:`2018-18445`, :cve:`2018-18559`, :cve:`2018-18690`, :cve:`2018-18710`, :cve:`2018-18955`, :cve:`2018-19406`, :cve:`2018-19407`, :cve:`2018-19824`, :cve:`2018-19854`, :cve:`2018-19985`, :cve:`2018-20169`, :cve:`2018-20449`, :cve:`2018-20509`, :cve:`2018-20510`, :cve:`2018-20511`, :cve:`2018-20669`, :cve:`2018-20784`, :cve:`2018-20836`, :cve:`2018-20854`, :cve:`2018-20855`, :cve:`2018-20856`, :cve:`2018-20961`, :cve:`2018-20976`, :cve:`2018-21008`, :cve:`2018-25015`, :cve:`2018-25020`, :cve:`2018-3620`, :cve:`2018-3639`, :cve:`2018-3646`, :cve:`2018-3665`, :cve:`2018-3693`, :cve:`2018-5332`, :cve:`2018-5333`, :cve:`2018-5344`, :cve:`2018-5390`, :cve:`2018-5391`, :cve:`2018-5703`, :cve:`2018-5750`, :cve:`2018-5803`, :cve:`2018-5814`, :cve:`2018-5848`, :cve:`2018-5873`, :cve:`2018-5953`, :cve:`2018-5995`, :cve:`2018-6412`, :cve:`2018-6554`, :cve:`2018-6555`, :cve:`2018-6927`, :cve:`2018-7191`, :cve:`2018-7273`, :cve:`2018-7480`, :cve:`2018-7492`, :cve:`2018-7566`, :cve:`2018-7740`, :cve:`2018-7754`, :cve:`2018-7755`, :cve:`2018-7757`, :cve:`2018-7995`, :cve:`2018-8043`, :cve:`2018-8087`, :cve:`2018-8781`, :cve:`2018-8822`, :cve:`2018-8897`, :cve:`2018-9363`, :cve:`2018-9385`, :cve:`2018-9415`, :cve:`2018-9422`, :cve:`2018-9465`, :cve:`2018-9516`, :cve:`2018-9517`, :cve:`2018-9518`, :cve:`2018-9568`, :cve:`2019-0136`, :cve:`2019-0145`, :cve:`2019-0146`, :cve:`2019-0147`, :cve:`2019-0148`, :cve:`2019-0149`, :cve:`2019-0154`, :cve:`2019-0155`, :cve:`2019-10124`, :cve:`2019-10125`, :cve:`2019-10126`, :cve:`2019-10142`, :cve:`2019-10207`, :cve:`2019-10220`, :cve:`2019-10638`, :cve:`2019-10639`, :cve:`2019-11085`, :cve:`2019-11091`, :cve:`2019-11135`, :cve:`2019-11190`, :cve:`2019-11191`, :cve:`2019-1125`, :cve:`2019-11477`, :cve:`2019-11478`, :cve:`2019-11479`, :cve:`2019-11486`, :cve:`2019-11487`, :cve:`2019-11599`, :cve:`2019-11683`, :cve:`2019-11810`, :cve:`2019-11811`, :cve:`2019-11815`, :cve:`2019-11833`, :cve:`2019-11884`, :cve:`2019-12378`, :cve:`2019-12379`, :cve:`2019-12380`, :cve:`2019-12381`, :cve:`2019-12382`, :cve:`2019-12454`, :cve:`2019-12455`, :cve:`2019-12614`, :cve:`2019-12615`, :cve:`2019-12817`, :cve:`2019-12818`, :cve:`2019-12819`, :cve:`2019-12881`, :cve:`2019-12984`, :cve:`2019-13233`, :cve:`2019-13272`, :cve:`2019-13631`, :cve:`2019-13648`, :cve:`2019-14283`, :cve:`2019-14284`, :cve:`2019-14615`, :cve:`2019-14763`, :cve:`2019-14814`, :cve:`2019-14815`, :cve:`2019-14816`, :cve:`2019-14821`, :cve:`2019-14835`, :cve:`2019-14895`, :cve:`2019-14896`, :cve:`2019-14897`, :cve:`2019-14901`, :cve:`2019-15030`, :cve:`2019-15031`, :cve:`2019-15090`, :cve:`2019-15098`, :cve:`2019-15099`, :cve:`2019-15117`, :cve:`2019-15118`, :cve:`2019-15211`, :cve:`2019-15212`, :cve:`2019-15213`, :cve:`2019-15214`, :cve:`2019-15215`, :cve:`2019-15216`, :cve:`2019-15217`, :cve:`2019-15218`, :cve:`2019-15219`, :cve:`2019-15220`, :cve:`2019-15221`, :cve:`2019-15222`, :cve:`2019-15223`, :cve:`2019-15291`, :cve:`2019-15292`, :cve:`2019-15504`, :cve:`2019-15505`, :cve:`2019-15538`, :cve:`2019-15666`, :cve:`2019-15794`, :cve:`2019-15807`, :cve:`2019-15916`, :cve:`2019-15917`, :cve:`2019-15918`, :cve:`2019-15919`, :cve:`2019-15920`, :cve:`2019-15921`, :cve:`2019-15922`, :cve:`2019-15923`, :cve:`2019-15924`, :cve:`2019-15925`, :cve:`2019-15926`, :cve:`2019-15927`, :cve:`2019-16229`, :cve:`2019-16230`, :cve:`2019-16231`, :cve:`2019-16232`, :cve:`2019-16233`, :cve:`2019-16234`, :cve:`2019-16413`, :cve:`2019-16714`, :cve:`2019-16746`, :cve:`2019-16921`, :cve:`2019-16994`, :cve:`2019-16995`, :cve:`2019-17052`, :cve:`2019-17053`, :cve:`2019-17054`, :cve:`2019-17055`, :cve:`2019-17056`, :cve:`2019-17075`, :cve:`2019-17133`, :cve:`2019-17351`, :cve:`2019-17666`, :cve:`2019-18198`, :cve:`2019-18282`, :cve:`2019-18660`, :cve:`2019-18675`, :cve:`2019-18683`, :cve:`2019-18786`, :cve:`2019-18805`, :cve:`2019-18806`, :cve:`2019-18807`, :cve:`2019-18808`, :cve:`2019-18809`, :cve:`2019-18810`, :cve:`2019-18811`, :cve:`2019-18812`, :cve:`2019-18813`, :cve:`2019-18814`, :cve:`2019-18885`, :cve:`2019-19036`, :cve:`2019-19037`, :cve:`2019-19039`, :cve:`2019-19043`, :cve:`2019-19044`, :cve:`2019-19045`, :cve:`2019-19046`, :cve:`2019-19047`, :cve:`2019-19048`, :cve:`2019-19049`, :cve:`2019-19050`, :cve:`2019-19051`, :cve:`2019-19052`, :cve:`2019-19053`, :cve:`2019-19054`, :cve:`2019-19055`, :cve:`2019-19056`, :cve:`2019-19057`, :cve:`2019-19058`, :cve:`2019-19059`, :cve:`2019-19060`, :cve:`2019-19061`, :cve:`2019-19062`, :cve:`2019-19063`, :cve:`2019-19064`, :cve:`2019-19065`, :cve:`2019-19066`, :cve:`2019-19067`, :cve:`2019-19068`, :cve:`2019-19069`, :cve:`2019-19070`, :cve:`2019-19071`, :cve:`2019-19072`, :cve:`2019-19073`, :cve:`2019-19074`, :cve:`2019-19075`, :cve:`2019-19076`, :cve:`2019-19077`, :cve:`2019-19078`, :cve:`2019-19079`, :cve:`2019-19080`, :cve:`2019-19081`, :cve:`2019-19082`, :cve:`2019-19083`, :cve:`2019-19227`, :cve:`2019-19241`, :cve:`2019-19252`, :cve:`2019-19318`, :cve:`2019-19319`, :cve:`2019-19332`, :cve:`2019-19338`, :cve:`2019-19377`, :cve:`2019-19447`, :cve:`2019-19448`, :cve:`2019-19449`, :cve:`2019-19462`, :cve:`2019-19523`, :cve:`2019-19524`, :cve:`2019-19525`, :cve:`2019-19526`, :cve:`2019-19527`, :cve:`2019-19528`, :cve:`2019-19529`, :cve:`2019-19530`, :cve:`2019-19531`, :cve:`2019-19532`, :cve:`2019-19533`, :cve:`2019-19534`, :cve:`2019-19535`, :cve:`2019-19536`, :cve:`2019-19537`, :cve:`2019-19543`, :cve:`2019-19602`, :cve:`2019-19767`, :cve:`2019-19768`, :cve:`2019-19769`, :cve:`2019-19770`, :cve:`2019-19807`, :cve:`2019-19813`, :cve:`2019-19815`, :cve:`2019-19816`, :cve:`2019-19922`, :cve:`2019-19927`, :cve:`2019-19947`, :cve:`2019-19965` and :cve:`2019-1999` -- nasm: Fix :cve:`2020-21528` -- ncurses: Fix :cve:`2023-29491` -- nghttp2: Fix :cve:`2023-35945` -- procps: Fix :cve:`2023-4016` -- python3-certifi: Fix :cve:`2023-37920` -- python3-git: Fix :cve:`2022-24439` and :cve:`2023-40267` -- python3-pygments: Fix :cve:`2022-40896` -- python3: Fix :cve:`2023-40217` -- qemu: Fix :cve:`2020-14394`, :cve:`2021-3638`, :cve_mitre:`2023-2861`, :cve:`2023-3180` and :cve:`2023-3354` -- tiff: fix :cve:`2023-2908`, :cve:`2023-3316` and :cve:`2023-3618` -- vim: Fix :cve:`2023-3896`, :cve:`2023-4733`, :cve:`2023-4734`, :cve:`2023-4735`, :cve:`2023-4736`, :cve:`2023-4738`, :cve:`2023-4750` and :cve:`2023-4752` -- webkitgtk: fix :cve:`2022-48503` and :cve:`2023-23529` +- inetutils: Fix :cve_nist:`2023-40303` +- json-c: Fix :cve_nist:`2021-32292` +- librsvg: Fix :cve_nist:`2023-38633` +- libssh2: Fix :cve_nist:`2020-22218` +- libtiff: Fix :cve_nist:`2023-26966` +- libxml2: Fix :cve_nist:`2023-39615` +- linux-yocto/5.15: Ignore :cve_nist:`2003-1604`, :cve_nist:`2004-0230`, :cve_nist:`2006-3635`, :cve_nist:`2006-5331`, :cve_nist:`2006-6128`, :cve_nist:`2007-4774`, :cve_nist:`2007-6761`, :cve_nist:`2007-6762`, :cve_nist:`2008-7316`, :cve_nist:`2009-2692`, :cve_nist:`2010-0008`, :cve_nist:`2010-3432`, :cve_nist:`2010-4648`, :cve_nist:`2010-5313`, :cve_nist:`2010-5328`, :cve_nist:`2010-5329`, :cve_nist:`2010-5331`, :cve_nist:`2010-5332`, :cve_nist:`2011-4098`, :cve_nist:`2011-4131`, :cve_nist:`2011-4915`, :cve_nist:`2011-5321`, :cve_nist:`2011-5327`, :cve_nist:`2012-0957`, :cve_nist:`2012-2119`, :cve_nist:`2012-2136`, :cve_nist:`2012-2137`, :cve_nist:`2012-2313`, :cve_nist:`2012-2319`, :cve_nist:`2012-2372`, :cve_nist:`2012-2375`, :cve_nist:`2012-2390`, :cve_nist:`2012-2669`, :cve_nist:`2012-2744`, :cve_nist:`2012-2745`, :cve_nist:`2012-3364`, :cve_nist:`2012-3375`, :cve_nist:`2012-3400`, :cve_nist:`2012-3412`, :cve_nist:`2012-3430`, :cve_nist:`2012-3510`, :cve_nist:`2012-3511`, :cve_nist:`2012-3520`, :cve_nist:`2012-3552`, :cve_nist:`2012-4398`, :cve_nist:`2012-4444`, :cve_nist:`2012-4461`, :cve_nist:`2012-4467`, :cve_nist:`2012-4508`, :cve_nist:`2012-4530`, :cve_nist:`2012-4565`, :cve_nist:`2012-5374`, :cve_nist:`2012-5375`, :cve_nist:`2012-5517`, :cve_nist:`2012-6536`, :cve_nist:`2012-6537`, :cve_nist:`2012-6538`, :cve_nist:`2012-6539`, :cve_nist:`2012-6540`, :cve_nist:`2012-6541`, :cve_nist:`2012-6542`, :cve_nist:`2012-6543`, :cve_nist:`2012-6544`, :cve_nist:`2012-6545`, :cve_nist:`2012-6546`, :cve_nist:`2012-6547`, :cve_nist:`2012-6548`, :cve_nist:`2012-6549`, :cve_nist:`2012-6638`, :cve_nist:`2012-6647`, :cve_nist:`2012-6657`, :cve_nist:`2012-6689`, :cve_nist:`2012-6701`, :cve_nist:`2012-6703`, :cve_nist:`2012-6704`, :cve_nist:`2012-6712`, :cve_nist:`2013-0160`, :cve_nist:`2013-0190`, :cve_nist:`2013-0216`, :cve_nist:`2013-0217`, :cve_nist:`2013-0228`, :cve_nist:`2013-0231`, :cve_nist:`2013-0268`, :cve_nist:`2013-0290`, :cve_nist:`2013-0309`, :cve_nist:`2013-0310`, :cve_nist:`2013-0311`, :cve_nist:`2013-0313`, :cve_nist:`2013-0343`, :cve_nist:`2013-0349`, :cve_nist:`2013-0871`, :cve_nist:`2013-0913`, :cve_nist:`2013-0914`, :cve_nist:`2013-1059`, :cve_nist:`2013-1763`, :cve_nist:`2013-1767`, :cve_nist:`2013-1772`, :cve_nist:`2013-1773`, :cve_nist:`2013-1774`, :cve_nist:`2013-1792`, :cve_nist:`2013-1796`, :cve_nist:`2013-1797`, :cve_nist:`2013-1798`, :cve_nist:`2013-1819`, :cve_nist:`2013-1826`, :cve_nist:`2013-1827`, :cve_nist:`2013-1828`, :cve_nist:`2013-1848`, :cve_nist:`2013-1858`, :cve_nist:`2013-1860`, :cve_nist:`2013-1928`, :cve_nist:`2013-1929`, :cve_nist:`2013-1943`, :cve_nist:`2013-1956`, :cve_nist:`2013-1957`, :cve_nist:`2013-1958`, :cve_nist:`2013-1959`, :cve_nist:`2013-1979`, :cve_nist:`2013-2015`, :cve_nist:`2013-2017`, :cve_nist:`2013-2058`, :cve_nist:`2013-2094`, :cve_nist:`2013-2128`, :cve_nist:`2013-2140`, :cve_nist:`2013-2141`, :cve_nist:`2013-2146`, :cve_nist:`2013-2147`, :cve_nist:`2013-2148`, :cve_nist:`2013-2164`, :cve_nist:`2013-2206`, :cve_nist:`2013-2232`, :cve_nist:`2013-2234`, :cve_nist:`2013-2237`, :cve_nist:`2013-2546`, :cve_nist:`2013-2547`, :cve_nist:`2013-2548`, :cve_nist:`2013-2596`, :cve_nist:`2013-2634`, :cve_nist:`2013-2635`, :cve_nist:`2013-2636`, :cve_nist:`2013-2850`, :cve_nist:`2013-2851`, :cve_nist:`2013-2852`, :cve_nist:`2013-2888`, :cve_nist:`2013-2889`, :cve_nist:`2013-2890`, :cve_nist:`2013-2891`, :cve_nist:`2013-2892`, :cve_nist:`2013-2893`, :cve_nist:`2013-2894`, :cve_nist:`2013-2895`, :cve_nist:`2013-2896`, :cve_nist:`2013-2897`, :cve_nist:`2013-2898`, :cve_nist:`2013-2899`, :cve_nist:`2013-2929`, :cve_nist:`2013-2930`, :cve_nist:`2013-3076`, :cve_nist:`2013-3222`, :cve_nist:`2013-3223`, :cve_nist:`2013-3224`, :cve_nist:`2013-3225`, :cve_nist:`2013-3226`, :cve_nist:`2013-3227`, :cve_nist:`2013-3228`, :cve_nist:`2013-3229`, :cve_nist:`2013-3230`, :cve_nist:`2013-3231`, :cve_nist:`2013-3232`, :cve_nist:`2013-3233`, :cve_nist:`2013-3234`, :cve_nist:`2013-3235`, :cve_nist:`2013-3236`, :cve_nist:`2013-3237`, :cve_nist:`2013-3301`, :cve_nist:`2013-3302`, :cve_nist:`2013-4125`, :cve_nist:`2013-4127`, :cve_nist:`2013-4129`, :cve_nist:`2013-4162`, :cve_nist:`2013-4163`, :cve_nist:`2013-4205`, :cve_nist:`2013-4220`, :cve_nist:`2013-4247`, :cve_nist:`2013-4254`, :cve_nist:`2013-4270`, :cve_nist:`2013-4299`, :cve_nist:`2013-4300`, :cve_nist:`2013-4312`, :cve_nist:`2013-4343`, :cve_nist:`2013-4345`, :cve_nist:`2013-4348`, :cve_nist:`2013-4350`, :cve_nist:`2013-4387`, :cve_nist:`2013-4470`, :cve_nist:`2013-4483`, :cve_nist:`2013-4511`, :cve_nist:`2013-4512`, :cve_nist:`2013-4513`, :cve_nist:`2013-4514`, :cve_nist:`2013-4515`, :cve_nist:`2013-4516`, :cve_nist:`2013-4563`, :cve_nist:`2013-4579`, :cve_nist:`2013-4587`, :cve_nist:`2013-4588`, :cve_nist:`2013-4591`, :cve_nist:`2013-4592`, :cve_nist:`2013-5634`, :cve_nist:`2013-6282`, :cve_nist:`2013-6367`, :cve_nist:`2013-6368`, :cve_nist:`2013-6376`, :cve_nist:`2013-6378`, :cve_nist:`2013-6380`, :cve_nist:`2013-6381`, :cve_nist:`2013-6382`, :cve_nist:`2013-6383`, :cve_nist:`2013-6431`, :cve_nist:`2013-6432`, :cve_nist:`2013-6885`, :cve_nist:`2013-7026`, :cve_nist:`2013-7027`, :cve_nist:`2013-7263`, :cve_nist:`2013-7264`, :cve_nist:`2013-7265`, :cve_nist:`2013-7266`, :cve_nist:`2013-7267`, :cve_nist:`2013-7268`, :cve_nist:`2013-7269`, :cve_nist:`2013-7270`, :cve_nist:`2013-7271`, :cve_nist:`2013-7281`, :cve_nist:`2013-7339`, :cve_nist:`2013-7348`, :cve_nist:`2013-7421`, :cve_nist:`2013-7446`, :cve_nist:`2013-7470`, :cve_nist:`2014-0038`, :cve_nist:`2014-0049`, :cve_nist:`2014-0055`, :cve_nist:`2014-0069`, :cve_nist:`2014-0077`, :cve_nist:`2014-0100`, :cve_nist:`2014-0101`, :cve_nist:`2014-0102`, :cve_nist:`2014-0131`, :cve_nist:`2014-0155`, :cve_nist:`2014-0181`, :cve_nist:`2014-0196`, :cve_nist:`2014-0203`, :cve_nist:`2014-0205`, :cve_nist:`2014-0206`, :cve_nist:`2014-1438`, :cve_nist:`2014-1444`, :cve_nist:`2014-1445`, :cve_nist:`2014-1446`, :cve_nist:`2014-1690`, :cve_nist:`2014-1737`, :cve_nist:`2014-1738`, :cve_nist:`2014-1739`, :cve_nist:`2014-1874`, :cve_nist:`2014-2038`, :cve_nist:`2014-2039`, :cve_nist:`2014-2309`, :cve_nist:`2014-2523`, :cve_nist:`2014-2568`, :cve_nist:`2014-2580`, :cve_nist:`2014-2672`, :cve_nist:`2014-2673`, :cve_nist:`2014-2678`, :cve_nist:`2014-2706`, :cve_nist:`2014-2739`, :cve_nist:`2014-2851`, :cve_nist:`2014-2889`, :cve_nist:`2014-3122`, :cve_nist:`2014-3144`, :cve_nist:`2014-3145`, :cve_nist:`2014-3153`, :cve_nist:`2014-3180`, :cve_nist:`2014-3181`, :cve_nist:`2014-3182`, :cve_nist:`2014-3183`, :cve_nist:`2014-3184`, :cve_nist:`2014-3185`, :cve_nist:`2014-3186`, :cve_nist:`2014-3534`, :cve_nist:`2014-3535`, :cve_nist:`2014-3601`, :cve_nist:`2014-3610`, :cve_nist:`2014-3611`, :cve_nist:`2014-3631`, :cve_nist:`2014-3645`, :cve_nist:`2014-3646`, :cve_nist:`2014-3647`, :cve_nist:`2014-3673`, :cve_nist:`2014-3687`, :cve_nist:`2014-3688`, :cve_nist:`2014-3690`, :cve_nist:`2014-3917`, :cve_nist:`2014-3940`, :cve_nist:`2014-4014`, :cve_nist:`2014-4027`, :cve_nist:`2014-4157`, :cve_nist:`2014-4171`, :cve_nist:`2014-4508`, :cve_nist:`2014-4608`, :cve_nist:`2014-4611`, :cve_nist:`2014-4652`, :cve_nist:`2014-4653`, :cve_nist:`2014-4654`, :cve_nist:`2014-4655`, :cve_nist:`2014-4656`, :cve_nist:`2014-4667`, :cve_nist:`2014-4699`, :cve_nist:`2014-4943`, :cve_nist:`2014-5045`, :cve_nist:`2014-5077`, :cve_nist:`2014-5206`, :cve_nist:`2014-5207`, :cve_nist:`2014-5471`, :cve_nist:`2014-5472`, :cve_nist:`2014-6410`, :cve_nist:`2014-6416`, :cve_nist:`2014-6417`, :cve_nist:`2014-6418`, :cve_nist:`2014-7145`, :cve_nist:`2014-7283`, :cve_nist:`2014-7284`, :cve_nist:`2014-7822`, :cve_nist:`2014-7825`, :cve_nist:`2014-7826`, :cve_nist:`2014-7841`, :cve_nist:`2014-7842`, :cve_nist:`2014-7843`, :cve_nist:`2014-7970`, :cve_nist:`2014-7975`, :cve_nist:`2014-8086`, :cve_nist:`2014-8133`, :cve_nist:`2014-8134`, :cve_nist:`2014-8159`, :cve_nist:`2014-8160`, :cve_nist:`2014-8171`, :cve_nist:`2014-8172`, :cve_nist:`2014-8173`, :cve_nist:`2014-8369`, :cve_nist:`2014-8480`, :cve_nist:`2014-8481`, :cve_nist:`2014-8559`, :cve_nist:`2014-8709`, :cve_nist:`2014-8884`, :cve_nist:`2014-8989`, :cve_nist:`2014-9090`, :cve_nist:`2014-9322`, :cve_nist:`2014-9419`, :cve_nist:`2014-9420`, :cve_nist:`2014-9428`, :cve_nist:`2014-9529`, :cve_nist:`2014-9584`, :cve_nist:`2014-9585`, :cve_nist:`2014-9644`, :cve_nist:`2014-9683`, :cve_nist:`2014-9710`, :cve_nist:`2014-9715`, :cve_nist:`2014-9717`, :cve_nist:`2014-9728`, :cve_nist:`2014-9729`, :cve_nist:`2014-9730`, :cve_nist:`2014-9731`, :cve_nist:`2014-9803`, :cve_nist:`2014-9870`, :cve_nist:`2014-9888`, :cve_nist:`2014-9895`, :cve_nist:`2014-9903`, :cve_nist:`2014-9904`, :cve_nist:`2014-9914`, :cve_nist:`2014-9922`, :cve_nist:`2014-9940`, :cve_nist:`2015-0239`, :cve_nist:`2015-0274`, :cve_nist:`2015-0275`, :cve_nist:`2015-1333`, :cve_nist:`2015-1339`, :cve_nist:`2015-1350`, :cve_nist:`2015-1420`, :cve_nist:`2015-1421`, :cve_nist:`2015-1465`, :cve_nist:`2015-1573`, :cve_nist:`2015-1593`, :cve_nist:`2015-1805`, :cve_nist:`2015-2041`, :cve_nist:`2015-2042`, :cve_nist:`2015-2150`, :cve_nist:`2015-2666`, :cve_nist:`2015-2672`, :cve_nist:`2015-2686`, :cve_nist:`2015-2830`, :cve_nist:`2015-2922`, :cve_nist:`2015-2925`, :cve_nist:`2015-3212`, :cve_nist:`2015-3214`, :cve_nist:`2015-3288`, :cve_nist:`2015-3290`, :cve_nist:`2015-3291`, :cve_nist:`2015-3331`, :cve_nist:`2015-3339`, :cve_nist:`2015-3636`, :cve_nist:`2015-4001`, :cve_nist:`2015-4002`, :cve_nist:`2015-4003`, :cve_nist:`2015-4004`, :cve_nist:`2015-4036`, :cve_nist:`2015-4167`, :cve_nist:`2015-4170`, :cve_nist:`2015-4176`, :cve_nist:`2015-4177`, :cve_nist:`2015-4178`, :cve_nist:`2015-4692`, :cve_nist:`2015-4700`, :cve_nist:`2015-5156`, :cve_nist:`2015-5157`, :cve_nist:`2015-5257`, :cve_nist:`2015-5283`, :cve_nist:`2015-5307`, :cve_nist:`2015-5327`, :cve_nist:`2015-5364`, :cve_nist:`2015-5366`, :cve_nist:`2015-5697`, :cve_nist:`2015-5706`, :cve_nist:`2015-5707`, :cve_nist:`2015-6252`, :cve_nist:`2015-6526`, :cve_nist:`2015-6937`, :cve_nist:`2015-7509`, :cve_nist:`2015-7513`, :cve_nist:`2015-7515`, :cve_nist:`2015-7550`, :cve_nist:`2015-7566`, :cve_nist:`2015-7613`, :cve_nist:`2015-7799`, :cve_nist:`2015-7833`, :cve_nist:`2015-7872`, :cve_nist:`2015-7884`, :cve_nist:`2015-7885`, :cve_nist:`2015-7990`, :cve_nist:`2015-8104`, :cve_nist:`2015-8215`, :cve_nist:`2015-8324`, :cve_nist:`2015-8374`, :cve_nist:`2015-8539`, :cve_nist:`2015-8543`, :cve_nist:`2015-8550`, :cve_nist:`2015-8551`, :cve_nist:`2015-8552`, :cve_nist:`2015-8553`, :cve_nist:`2015-8569`, :cve_nist:`2015-8575`, :cve_nist:`2015-8660`, :cve_nist:`2015-8709`, :cve_nist:`2015-8746`, :cve_nist:`2015-8767`, :cve_nist:`2015-8785`, :cve_nist:`2015-8787`, :cve_nist:`2015-8812`, :cve_nist:`2015-8816`, :cve_nist:`2015-8830`, :cve_nist:`2015-8839`, :cve_nist:`2015-8844`, :cve_nist:`2015-8845`, :cve_nist:`2015-8950`, :cve_nist:`2015-8952`, :cve_nist:`2015-8953`, :cve_nist:`2015-8955`, :cve_nist:`2015-8956`, :cve_nist:`2015-8961`, :cve_nist:`2015-8962`, :cve_nist:`2015-8963`, :cve_nist:`2015-8964`, :cve_nist:`2015-8966`, :cve_nist:`2015-8967`, :cve_nist:`2015-8970`, :cve_nist:`2015-9004`, :cve_nist:`2015-9016`, :cve_nist:`2015-9289`, :cve_nist:`2016-0617`, :cve_nist:`2016-0723`, :cve_nist:`2016-0728`, :cve_nist:`2016-0758`, :cve_nist:`2016-0821`, :cve_nist:`2016-0823`, :cve_nist:`2016-10044`, :cve_nist:`2016-10088`, :cve_nist:`2016-10147`, :cve_nist:`2016-10150`, :cve_nist:`2016-10153`, :cve_nist:`2016-10154`, :cve_nist:`2016-10200`, :cve_nist:`2016-10208`, :cve_nist:`2016-10229`, :cve_nist:`2016-10318`, :cve_nist:`2016-10723`, :cve_nist:`2016-10741`, :cve_nist:`2016-10764`, :cve_nist:`2016-10905`, :cve_nist:`2016-10906`, :cve_nist:`2016-10907`, :cve_nist:`2016-1237`, :cve_nist:`2016-1575`, :cve_nist:`2016-1576`, :cve_nist:`2016-1583`, :cve_nist:`2016-2053`, :cve_nist:`2016-2069`, :cve_nist:`2016-2070`, :cve_nist:`2016-2085`, :cve_nist:`2016-2117`, :cve_nist:`2016-2143`, :cve_nist:`2016-2184`, :cve_nist:`2016-2185`, :cve_nist:`2016-2186`, :cve_nist:`2016-2187`, :cve_nist:`2016-2188`, :cve_nist:`2016-2383`, :cve_nist:`2016-2384`, :cve_nist:`2016-2543`, :cve_nist:`2016-2544`, :cve_nist:`2016-2545`, :cve_nist:`2016-2546`, :cve_nist:`2016-2547`, :cve_nist:`2016-2548`, :cve_nist:`2016-2549`, :cve_nist:`2016-2550`, :cve_nist:`2016-2782`, :cve_nist:`2016-2847`, :cve_nist:`2016-3044`, :cve_nist:`2016-3070`, :cve_nist:`2016-3134`, :cve_nist:`2016-3135`, :cve_nist:`2016-3136`, :cve_nist:`2016-3137`, :cve_nist:`2016-3138`, :cve_nist:`2016-3139`, :cve_nist:`2016-3140`, :cve_nist:`2016-3156`, :cve_nist:`2016-3157`, :cve_nist:`2016-3672`, :cve_nist:`2016-3689`, :cve_nist:`2016-3713`, :cve_nist:`2016-3841`, :cve_nist:`2016-3857`, :cve_nist:`2016-3951`, :cve_nist:`2016-3955`, :cve_nist:`2016-3961`, :cve_nist:`2016-4440`, :cve_nist:`2016-4470`, :cve_nist:`2016-4482`, :cve_nist:`2016-4485`, :cve_nist:`2016-4486`, :cve_nist:`2016-4557`, :cve_nist:`2016-4558`, :cve_nist:`2016-4565`, :cve_nist:`2016-4568`, :cve_nist:`2016-4569`, :cve_nist:`2016-4578`, :cve_nist:`2016-4580`, :cve_nist:`2016-4581`, :cve_nist:`2016-4794`, :cve_nist:`2016-4805`, :cve_nist:`2016-4913`, :cve_nist:`2016-4951`, :cve_nist:`2016-4997`, :cve_nist:`2016-4998`, :cve_nist:`2016-5195`, :cve_nist:`2016-5243`, :cve_nist:`2016-5244`, :cve_nist:`2016-5400`, :cve_nist:`2016-5412`, :cve_nist:`2016-5696`, :cve_nist:`2016-5728`, :cve_nist:`2016-5828`, :cve_nist:`2016-5829`, :cve_nist:`2016-6130`, :cve_nist:`2016-6136`, :cve_nist:`2016-6156`, :cve_nist:`2016-6162`, :cve_nist:`2016-6187`, :cve_nist:`2016-6197`, :cve_nist:`2016-6198`, :cve_nist:`2016-6213`, :cve_nist:`2016-6327`, :cve_nist:`2016-6480`, :cve_nist:`2016-6516`, :cve_nist:`2016-6786`, :cve_nist:`2016-6787`, :cve_nist:`2016-6828`, :cve_nist:`2016-7039`, :cve_nist:`2016-7042`, :cve_nist:`2016-7097`, :cve_nist:`2016-7117`, :cve_nist:`2016-7425`, :cve_nist:`2016-7910`, :cve_nist:`2016-7911`, :cve_nist:`2016-7912`, :cve_nist:`2016-7913`, :cve_nist:`2016-7914`, :cve_nist:`2016-7915`, :cve_nist:`2016-7916`, :cve_nist:`2016-7917`, :cve_nist:`2016-8399`, :cve_nist:`2016-8405`, :cve_nist:`2016-8630`, :cve_nist:`2016-8632`, :cve_nist:`2016-8633`, :cve_nist:`2016-8636`, :cve_nist:`2016-8645`, :cve_nist:`2016-8646`, :cve_nist:`2016-8650`, :cve_nist:`2016-8655`, :cve_nist:`2016-8658`, :cve_nist:`2016-8666`, :cve_nist:`2016-9083`, :cve_nist:`2016-9084`, :cve_nist:`2016-9120`, :cve_nist:`2016-9178`, :cve_nist:`2016-9191`, :cve_nist:`2016-9313`, :cve_nist:`2016-9555`, :cve_nist:`2016-9576`, :cve_nist:`2016-9588`, :cve_nist:`2016-9604`, :cve_nist:`2016-9685`, :cve_nist:`2016-9754`, :cve_nist:`2016-9755`, :cve_nist:`2016-9756`, :cve_nist:`2016-9777`, :cve_nist:`2016-9793`, :cve_nist:`2016-9794`, :cve_nist:`2016-9806`, :cve_nist:`2016-9919`, :cve_nist:`2017-0605`, :cve_nist:`2017-0627`, :cve_nist:`2017-0750`, :cve_nist:`2017-0786`, :cve_nist:`2017-0861`, :cve_nist:`2017-1000`, :cve_nist:`2017-1000111`, :cve_nist:`2017-1000112`, :cve_nist:`2017-1000251`, :cve_nist:`2017-1000252`, :cve_nist:`2017-1000253`, :cve_nist:`2017-1000255`, :cve_nist:`2017-1000363`, :cve_nist:`2017-1000364`, :cve_nist:`2017-1000365`, :cve_nist:`2017-1000370`, :cve_nist:`2017-1000371`, :cve_nist:`2017-1000379`, :cve_nist:`2017-1000380`, :cve_nist:`2017-1000405`, :cve_nist:`2017-1000407`, :cve_nist:`2017-1000410`, :cve_nist:`2017-10661`, :cve_nist:`2017-10662`, :cve_nist:`2017-10663`, :cve_nist:`2017-10810`, :cve_nist:`2017-10911`, :cve_nist:`2017-11089`, :cve_nist:`2017-11176`, :cve_nist:`2017-11472`, :cve_nist:`2017-11473`, :cve_nist:`2017-11600`, :cve_nist:`2017-12134`, :cve_nist:`2017-12146`, :cve_nist:`2017-12153`, :cve_nist:`2017-12154`, :cve_nist:`2017-12168`, :cve_nist:`2017-12188`, :cve_nist:`2017-12190`, :cve_nist:`2017-12192`, :cve_nist:`2017-12193`, :cve_nist:`2017-12762`, :cve_nist:`2017-13080`, :cve_nist:`2017-13166`, :cve_nist:`2017-13167`, :cve_nist:`2017-13168`, :cve_nist:`2017-13215`, :cve_nist:`2017-13216`, :cve_nist:`2017-13220`, :cve_nist:`2017-13305`, :cve_nist:`2017-13686`, :cve_nist:`2017-13695`, :cve_nist:`2017-13715`, :cve_nist:`2017-14051`, :cve_nist:`2017-14106`, :cve_nist:`2017-14140`, :cve_nist:`2017-14156`, :cve_nist:`2017-14340`, :cve_nist:`2017-14489`, :cve_nist:`2017-14497`, :cve_nist:`2017-14954`, :cve_nist:`2017-14991`, :cve_nist:`2017-15102`, :cve_nist:`2017-15115`, :cve_nist:`2017-15116`, :cve_nist:`2017-15121`, :cve_nist:`2017-15126`, :cve_nist:`2017-15127`, :cve_nist:`2017-15128`, :cve_nist:`2017-15129`, :cve_nist:`2017-15265`, :cve_nist:`2017-15274`, :cve_nist:`2017-15299`, :cve_nist:`2017-15306`, :cve_nist:`2017-15537`, :cve_nist:`2017-15649`, :cve_nist:`2017-15868`, :cve_nist:`2017-15951`, :cve_nist:`2017-16525`, :cve_nist:`2017-16526`, :cve_nist:`2017-16527`, :cve_nist:`2017-16528`, :cve_nist:`2017-16529`, :cve_nist:`2017-16530`, :cve_nist:`2017-16531`, :cve_nist:`2017-16532`, :cve_nist:`2017-16533`, :cve_nist:`2017-16534`, :cve_nist:`2017-16535`, :cve_nist:`2017-16536`, :cve_nist:`2017-16537`, :cve_nist:`2017-16538`, :cve_nist:`2017-16643`, :cve_nist:`2017-16644`, :cve_nist:`2017-16645`, :cve_nist:`2017-16646`, :cve_nist:`2017-16647`, :cve_nist:`2017-16648`, :cve_nist:`2017-16649`, :cve_nist:`2017-16650`, :cve_nist:`2017-16911`, :cve_nist:`2017-16912`, :cve_nist:`2017-16913`, :cve_nist:`2017-16914`, :cve_nist:`2017-16939`, :cve_nist:`2017-16994`, :cve_nist:`2017-16995`, :cve_nist:`2017-16996`, :cve_nist:`2017-17052`, :cve_nist:`2017-17053`, :cve_nist:`2017-17448`, :cve_nist:`2017-17449`, :cve_nist:`2017-17450`, :cve_nist:`2017-17558`, :cve_nist:`2017-17712`, :cve_nist:`2017-17741`, :cve_nist:`2017-17805`, :cve_nist:`2017-17806`, :cve_nist:`2017-17807`, :cve_nist:`2017-17852`, :cve_nist:`2017-17853`, :cve_nist:`2017-17854`, :cve_nist:`2017-17855`, :cve_nist:`2017-17856`, :cve_nist:`2017-17857`, :cve_nist:`2017-17862`, :cve_nist:`2017-17863`, :cve_nist:`2017-17864`, :cve_nist:`2017-17975`, :cve_nist:`2017-18017`, :cve_nist:`2017-18075`, :cve_nist:`2017-18079`, :cve_nist:`2017-18174`, :cve_nist:`2017-18193`, :cve_nist:`2017-18200`, :cve_nist:`2017-18202`, :cve_nist:`2017-18203`, :cve_nist:`2017-18204`, :cve_nist:`2017-18208`, :cve_nist:`2017-18216`, :cve_nist:`2017-18218`, :cve_nist:`2017-18221`, :cve_nist:`2017-18222`, :cve_nist:`2017-18224`, :cve_nist:`2017-18232`, :cve_nist:`2017-18241`, :cve_nist:`2017-18249`, :cve_nist:`2017-18255`, :cve_nist:`2017-18257`, :cve_nist:`2017-18261`, :cve_nist:`2017-18270`, :cve_nist:`2017-18344`, :cve_nist:`2017-18360`, :cve_nist:`2017-18379`, :cve_nist:`2017-18509`, :cve_nist:`2017-18549`, :cve_nist:`2017-18550`, :cve_nist:`2017-18551`, :cve_nist:`2017-18552`, :cve_nist:`2017-18595`, :cve_nist:`2017-2583`, :cve_nist:`2017-2584`, :cve_nist:`2017-2596`, :cve_nist:`2017-2618`, :cve_nist:`2017-2634`, :cve_nist:`2017-2636`, :cve_nist:`2017-2647`, :cve_nist:`2017-2671`, :cve_nist:`2017-5123`, :cve_nist:`2017-5546`, :cve_nist:`2017-5547`, :cve_nist:`2017-5548`, :cve_nist:`2017-5549`, :cve_nist:`2017-5550`, :cve_nist:`2017-5551`, :cve_nist:`2017-5576`, :cve_nist:`2017-5577`, :cve_nist:`2017-5669`, :cve_nist:`2017-5715`, :cve_nist:`2017-5753`, :cve_nist:`2017-5754`, :cve_nist:`2017-5897`, :cve_nist:`2017-5967`, :cve_nist:`2017-5970`, :cve_nist:`2017-5972`, :cve_nist:`2017-5986`, :cve_nist:`2017-6001`, :cve_nist:`2017-6074`, :cve_nist:`2017-6214`, :cve_nist:`2017-6345`, :cve_nist:`2017-6346`, :cve_nist:`2017-6347`, :cve_nist:`2017-6348`, :cve_nist:`2017-6353`, :cve_nist:`2017-6874`, :cve_nist:`2017-6951`, :cve_nist:`2017-7184`, :cve_nist:`2017-7187`, :cve_nist:`2017-7261`, :cve_nist:`2017-7273`, :cve_nist:`2017-7277`, :cve_nist:`2017-7294`, :cve_nist:`2017-7308`, :cve_nist:`2017-7346`, :cve_nist:`2017-7374`, :cve_nist:`2017-7472`, :cve_nist:`2017-7477`, :cve_nist:`2017-7482`, :cve_nist:`2017-7487`, :cve_nist:`2017-7495`, :cve_nist:`2017-7518`, :cve_nist:`2017-7533`, :cve_nist:`2017-7541`, :cve_nist:`2017-7542`, :cve_nist:`2017-7558`, :cve_nist:`2017-7616`, :cve_nist:`2017-7618`, :cve_nist:`2017-7645`, :cve_nist:`2017-7889`, :cve_nist:`2017-7895`, :cve_nist:`2017-7979`, :cve_nist:`2017-8061`, :cve_nist:`2017-8062`, :cve_nist:`2017-8063`, :cve_nist:`2017-8064`, :cve_nist:`2017-8065`, :cve_nist:`2017-8066`, :cve_nist:`2017-8067`, :cve_nist:`2017-8068`, :cve_nist:`2017-8069`, :cve_nist:`2017-8070`, :cve_nist:`2017-8071`, :cve_nist:`2017-8072`, :cve_nist:`2017-8106`, :cve_nist:`2017-8240`, :cve_nist:`2017-8797`, :cve_nist:`2017-8824`, :cve_nist:`2017-8831`, :cve_nist:`2017-8890`, :cve_nist:`2017-8924`, :cve_nist:`2017-8925`, :cve_nist:`2017-9059`, :cve_nist:`2017-9074`, :cve_nist:`2017-9075`, :cve_nist:`2017-9076`, :cve_nist:`2017-9077`, :cve_nist:`2017-9150`, :cve_nist:`2017-9211`, :cve_nist:`2017-9242`, :cve_nist:`2017-9605`, :cve_nist:`2017-9725`, :cve_nist:`2017-9984`, :cve_nist:`2017-9985`, :cve_nist:`2017-9986`, :cve_nist:`2018-1000004`, :cve_nist:`2018-1000026`, :cve_nist:`2018-1000028`, :cve_nist:`2018-1000199`, :cve_nist:`2018-1000200`, :cve_nist:`2018-1000204`, :cve_nist:`2018-10021`, :cve_nist:`2018-10074`, :cve_nist:`2018-10087`, :cve_nist:`2018-10124`, :cve_nist:`2018-10322`, :cve_nist:`2018-10323`, :cve_nist:`2018-1065`, :cve_nist:`2018-1066`, :cve_nist:`2018-10675`, :cve_nist:`2018-1068`, :cve_nist:`2018-10840`, :cve_nist:`2018-10853`, :cve_nist:`2018-1087`, :cve_nist:`2018-10876`, :cve_nist:`2018-10877`, :cve_nist:`2018-10878`, :cve_nist:`2018-10879`, :cve_nist:`2018-10880`, :cve_nist:`2018-10881`, :cve_nist:`2018-10882`, :cve_nist:`2018-10883`, :cve_nist:`2018-10901`, :cve_nist:`2018-10902`, :cve_nist:`2018-1091`, :cve_nist:`2018-1092`, :cve_nist:`2018-1093`, :cve_nist:`2018-10938`, :cve_nist:`2018-1094`, :cve_nist:`2018-10940`, :cve_nist:`2018-1095`, :cve_nist:`2018-1108`, :cve_nist:`2018-1118`, :cve_nist:`2018-1120`, :cve_nist:`2018-11232`, :cve_nist:`2018-1128`, :cve_nist:`2018-1129`, :cve_nist:`2018-1130`, :cve_nist:`2018-11412`, :cve_nist:`2018-11506`, :cve_nist:`2018-11508`, :cve_nist:`2018-12126`, :cve_nist:`2018-12127`, :cve_nist:`2018-12130`, :cve_nist:`2018-12207`, :cve_nist:`2018-12232`, :cve_nist:`2018-12233`, :cve_nist:`2018-12633`, :cve_nist:`2018-12714`, :cve_nist:`2018-12896`, :cve_nist:`2018-12904`, :cve_nist:`2018-13053`, :cve_nist:`2018-13093`, :cve_nist:`2018-13094`, :cve_nist:`2018-13095`, :cve_nist:`2018-13096`, :cve_nist:`2018-13097`, :cve_nist:`2018-13098`, :cve_nist:`2018-13099`, :cve_nist:`2018-13100`, :cve_nist:`2018-13405`, :cve_nist:`2018-13406`, :cve_nist:`2018-14609`, :cve_nist:`2018-14610`, :cve_nist:`2018-14611`, :cve_nist:`2018-14612`, :cve_nist:`2018-14613`, :cve_nist:`2018-14614`, :cve_nist:`2018-14615`, :cve_nist:`2018-14616`, :cve_nist:`2018-14617`, :cve_nist:`2018-14619`, :cve_nist:`2018-14625`, :cve_nist:`2018-14633`, :cve_nist:`2018-14634`, :cve_nist:`2018-14641`, :cve_nist:`2018-14646`, :cve_nist:`2018-14656`, :cve_nist:`2018-14678`, :cve_nist:`2018-14734`, :cve_nist:`2018-15471`, :cve_nist:`2018-15572`, :cve_nist:`2018-15594`, :cve_nist:`2018-16276`, :cve_nist:`2018-16597`, :cve_nist:`2018-16658`, :cve_nist:`2018-16862`, :cve_nist:`2018-16871`, :cve_nist:`2018-16880`, :cve_nist:`2018-16882`, :cve_nist:`2018-16884`, :cve_nist:`2018-17182`, :cve_nist:`2018-17972`, :cve_nist:`2018-18021`, :cve_nist:`2018-18281`, :cve_nist:`2018-18386`, :cve_nist:`2018-18397`, :cve_nist:`2018-18445`, :cve_nist:`2018-18559`, :cve_nist:`2018-18690`, :cve_nist:`2018-18710`, :cve_nist:`2018-18955`, :cve_nist:`2018-19406`, :cve_nist:`2018-19407`, :cve_nist:`2018-19824`, :cve_nist:`2018-19854`, :cve_nist:`2018-19985`, :cve_nist:`2018-20169`, :cve_nist:`2018-20449`, :cve_nist:`2018-20509`, :cve_nist:`2018-20510`, :cve_nist:`2018-20511`, :cve_nist:`2018-20669`, :cve_nist:`2018-20784`, :cve_nist:`2018-20836`, :cve_nist:`2018-20854`, :cve_nist:`2018-20855`, :cve_nist:`2018-20856`, :cve_nist:`2018-20961`, :cve_nist:`2018-20976`, :cve_nist:`2018-21008`, :cve_nist:`2018-25015`, :cve_nist:`2018-25020`, :cve_nist:`2018-3620`, :cve_nist:`2018-3639`, :cve_nist:`2018-3646`, :cve_nist:`2018-3665`, :cve_nist:`2018-3693`, :cve_nist:`2018-5332`, :cve_nist:`2018-5333`, :cve_nist:`2018-5344`, :cve_nist:`2018-5390`, :cve_nist:`2018-5391`, :cve_nist:`2018-5703`, :cve_nist:`2018-5750`, :cve_nist:`2018-5803`, :cve_nist:`2018-5814`, :cve_nist:`2018-5848`, :cve_nist:`2018-5873`, :cve_nist:`2018-5953`, :cve_nist:`2018-5995`, :cve_nist:`2018-6412`, :cve_nist:`2018-6554`, :cve_nist:`2018-6555`, :cve_nist:`2018-6927`, :cve_nist:`2018-7191`, :cve_nist:`2018-7273`, :cve_nist:`2018-7480`, :cve_nist:`2018-7492`, :cve_nist:`2018-7566`, :cve_nist:`2018-7740`, :cve_nist:`2018-7754`, :cve_nist:`2018-7755`, :cve_nist:`2018-7757`, :cve_nist:`2018-7995`, :cve_nist:`2018-8043`, :cve_nist:`2018-8087`, :cve_nist:`2018-8781`, :cve_nist:`2018-8822`, :cve_nist:`2018-8897`, :cve_nist:`2018-9363`, :cve_nist:`2018-9385`, :cve_nist:`2018-9415`, :cve_nist:`2018-9422`, :cve_nist:`2018-9465`, :cve_nist:`2018-9516`, :cve_nist:`2018-9517`, :cve_nist:`2018-9518`, :cve_nist:`2018-9568`, :cve_nist:`2019-0136`, :cve_nist:`2019-0145`, :cve_nist:`2019-0146`, :cve_nist:`2019-0147`, :cve_nist:`2019-0148`, :cve_nist:`2019-0149`, :cve_nist:`2019-0154`, :cve_nist:`2019-0155`, :cve_nist:`2019-10124`, :cve_nist:`2019-10125`, :cve_nist:`2019-10126`, :cve_nist:`2019-10142`, :cve_nist:`2019-10207`, :cve_nist:`2019-10220`, :cve_nist:`2019-10638`, :cve_nist:`2019-10639`, :cve_nist:`2019-11085`, :cve_nist:`2019-11091`, :cve_nist:`2019-11135`, :cve_nist:`2019-11190`, :cve_nist:`2019-11191`, :cve_nist:`2019-1125`, :cve_nist:`2019-11477`, :cve_nist:`2019-11478`, :cve_nist:`2019-11479`, :cve_nist:`2019-11486`, :cve_nist:`2019-11487`, :cve_nist:`2019-11599`, :cve_nist:`2019-11683`, :cve_nist:`2019-11810`, :cve_nist:`2019-11811`, :cve_nist:`2019-11815`, :cve_nist:`2019-11833`, :cve_nist:`2019-11884`, :cve_nist:`2019-12378`, :cve_nist:`2019-12379`, :cve_nist:`2019-12380`, :cve_nist:`2019-12381`, :cve_nist:`2019-12382`, :cve_nist:`2019-12454`, :cve_nist:`2019-12455`, :cve_nist:`2019-12614`, :cve_nist:`2019-12615`, :cve_nist:`2019-12817`, :cve_nist:`2019-12818`, :cve_nist:`2019-12819`, :cve_nist:`2019-12881`, :cve_nist:`2019-12984`, :cve_nist:`2019-13233`, :cve_nist:`2019-13272`, :cve_nist:`2019-13631`, :cve_nist:`2019-13648`, :cve_nist:`2019-14283`, :cve_nist:`2019-14284`, :cve_nist:`2019-14615`, :cve_nist:`2019-14763`, :cve_nist:`2019-14814`, :cve_nist:`2019-14815`, :cve_nist:`2019-14816`, :cve_nist:`2019-14821`, :cve_nist:`2019-14835`, :cve_nist:`2019-14895`, :cve_nist:`2019-14896`, :cve_nist:`2019-14897`, :cve_nist:`2019-14901`, :cve_nist:`2019-15030`, :cve_nist:`2019-15031`, :cve_nist:`2019-15090`, :cve_nist:`2019-15098`, :cve_nist:`2019-15099`, :cve_nist:`2019-15117`, :cve_nist:`2019-15118`, :cve_nist:`2019-15211`, :cve_nist:`2019-15212`, :cve_nist:`2019-15213`, :cve_nist:`2019-15214`, :cve_nist:`2019-15215`, :cve_nist:`2019-15216`, :cve_nist:`2019-15217`, :cve_nist:`2019-15218`, :cve_nist:`2019-15219`, :cve_nist:`2019-15220`, :cve_nist:`2019-15221`, :cve_nist:`2019-15222`, :cve_nist:`2019-15223`, :cve_nist:`2019-15291`, :cve_nist:`2019-15292`, :cve_nist:`2019-15504`, :cve_nist:`2019-15505`, :cve_nist:`2019-15538`, :cve_nist:`2019-15666`, :cve_nist:`2019-15794`, :cve_nist:`2019-15807`, :cve_nist:`2019-15916`, :cve_nist:`2019-15917`, :cve_nist:`2019-15918`, :cve_nist:`2019-15919`, :cve_nist:`2019-15920`, :cve_nist:`2019-15921`, :cve_nist:`2019-15922`, :cve_nist:`2019-15923`, :cve_nist:`2019-15924`, :cve_nist:`2019-15925`, :cve_nist:`2019-15926`, :cve_nist:`2019-15927`, :cve_nist:`2019-16229`, :cve_nist:`2019-16230`, :cve_nist:`2019-16231`, :cve_nist:`2019-16232`, :cve_nist:`2019-16233`, :cve_nist:`2019-16234`, :cve_nist:`2019-16413`, :cve_nist:`2019-16714`, :cve_nist:`2019-16746`, :cve_nist:`2019-16921`, :cve_nist:`2019-16994`, :cve_nist:`2019-16995`, :cve_nist:`2019-17052`, :cve_nist:`2019-17053`, :cve_nist:`2019-17054`, :cve_nist:`2019-17055`, :cve_nist:`2019-17056`, :cve_nist:`2019-17075`, :cve_nist:`2019-17133`, :cve_nist:`2019-17351`, :cve_nist:`2019-17666`, :cve_nist:`2019-18198`, :cve_nist:`2019-18282`, :cve_nist:`2019-18660`, :cve_nist:`2019-18675`, :cve_nist:`2019-18683`, :cve_nist:`2019-18786`, :cve_nist:`2019-18805`, :cve_nist:`2019-18806`, :cve_nist:`2019-18807`, :cve_nist:`2019-18808`, :cve_nist:`2019-18809`, :cve_nist:`2019-18810`, :cve_nist:`2019-18811`, :cve_nist:`2019-18812`, :cve_nist:`2019-18813`, :cve_nist:`2019-18814`, :cve_nist:`2019-18885`, :cve_nist:`2019-19036`, :cve_nist:`2019-19037`, :cve_nist:`2019-19039`, :cve_nist:`2019-19043`, :cve_nist:`2019-19044`, :cve_nist:`2019-19045`, :cve_nist:`2019-19046`, :cve_nist:`2019-19047`, :cve_nist:`2019-19048`, :cve_nist:`2019-19049`, :cve_nist:`2019-19050`, :cve_nist:`2019-19051`, :cve_nist:`2019-19052`, :cve_nist:`2019-19053`, :cve_nist:`2019-19054`, :cve_nist:`2019-19055`, :cve_nist:`2019-19056`, :cve_nist:`2019-19057`, :cve_nist:`2019-19058`, :cve_nist:`2019-19059`, :cve_nist:`2019-19060`, :cve_nist:`2019-19061`, :cve_nist:`2019-19062`, :cve_nist:`2019-19063`, :cve_nist:`2019-19064`, :cve_nist:`2019-19065`, :cve_nist:`2019-19066`, :cve_nist:`2019-19067`, :cve_nist:`2019-19068`, :cve_nist:`2019-19069`, :cve_nist:`2019-19070`, :cve_nist:`2019-19071`, :cve_nist:`2019-19072`, :cve_nist:`2019-19073`, :cve_nist:`2019-19074`, :cve_nist:`2019-19075`, :cve_nist:`2019-19076`, :cve_nist:`2019-19077`, :cve_nist:`2019-19078`, :cve_nist:`2019-19079`, :cve_nist:`2019-19080`, :cve_nist:`2019-19081`, :cve_nist:`2019-19082`, :cve_nist:`2019-19083`, :cve_nist:`2019-19227`, :cve_nist:`2019-19241`, :cve_nist:`2019-19252`, :cve_nist:`2019-19318`, :cve_nist:`2019-19319`, :cve_nist:`2019-19332`, :cve_nist:`2019-19338`, :cve_nist:`2019-19377`, :cve_nist:`2019-19447`, :cve_nist:`2019-19448`, :cve_nist:`2019-19449`, :cve_nist:`2019-19462`, :cve_nist:`2019-19523`, :cve_nist:`2019-19524`, :cve_nist:`2019-19525`, :cve_nist:`2019-19526`, :cve_nist:`2019-19527`, :cve_nist:`2019-19528`, :cve_nist:`2019-19529`, :cve_nist:`2019-19530`, :cve_nist:`2019-19531`, :cve_nist:`2019-19532`, :cve_nist:`2019-19533`, :cve_nist:`2019-19534`, :cve_nist:`2019-19535`, :cve_nist:`2019-19536`, :cve_nist:`2019-19537`, :cve_nist:`2019-19543`, :cve_nist:`2019-19602`, :cve_nist:`2019-19767`, :cve_nist:`2019-19768`, :cve_nist:`2019-19769`, :cve_nist:`2019-19770`, :cve_nist:`2019-19807`, :cve_nist:`2019-19813`, :cve_nist:`2019-19815`, :cve_nist:`2019-19816`, :cve_nist:`2019-19922`, :cve_nist:`2019-19927`, :cve_nist:`2019-19947`, :cve_nist:`2019-19965` and :cve_nist:`2019-1999` +- nasm: Fix :cve_nist:`2020-21528` +- ncurses: Fix :cve_nist:`2023-29491` +- nghttp2: Fix :cve_nist:`2023-35945` +- procps: Fix :cve_nist:`2023-4016` +- python3-certifi: Fix :cve_nist:`2023-37920` +- python3-git: Fix :cve_nist:`2022-24439` and :cve_nist:`2023-40267` +- python3-pygments: Fix :cve_nist:`2022-40896` +- python3: Fix :cve_nist:`2023-40217` +- qemu: Fix :cve_nist:`2020-14394`, :cve_nist:`2021-3638`, :cve_mitre:`2023-2861`, :cve_nist:`2023-3180` and :cve_nist:`2023-3354` +- tiff: fix :cve_nist:`2023-2908`, :cve_nist:`2023-3316` and :cve_nist:`2023-3618` +- vim: Fix :cve_nist:`2023-3896`, :cve_nist:`2023-4733`, :cve_nist:`2023-4734`, :cve_nist:`2023-4735`, :cve_nist:`2023-4736`, :cve_nist:`2023-4738`, :cve_nist:`2023-4750` and :cve_nist:`2023-4752` +- webkitgtk: fix :cve_nist:`2022-48503` and :cve_nist:`2023-23529` diff --git a/poky/documentation/migration-guides/release-notes-4.0.14.rst b/poky/documentation/migration-guides/release-notes-4.0.14.rst index 02253f33f7..ad6590a887 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.14.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.14.rst @@ -6,37 +6,37 @@ Release notes for Yocto-4.0.14 (Kirkstone) Security Fixes in Yocto-4.0.14 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bind: Fix :cve:`2023-3341` and :cve:`2023-4236` -- binutils: Fix :cve:`2022-44840`, :cve:`2022-45703`, :cve:`2022-47008`, :cve:`2022-47011`, :cve:`2022-47673`, :cve:`2022-47695`, :cve:`2022-47696` and :cve:`2022-48063` -- cups: Fix :cve:`2023-4504` -- curl: Fix :cve:`2023-38545` and :cve:`2023-38546` -- gawk: Fix :cve:`2023-4156` -- ghostscript: Fix :cve:`2023-43115` -- glibc: Fix :cve:`2023-4806`, :cve:`2023-4813`, :cve:`2023-4911` and :cve:`2023-5156` -- glibc: Ignore :cve:`2023-4527` -- go: Fix :cve:`2023-24538` and :cve:`2023-39318` +- bind: Fix :cve_nist:`2023-3341` and :cve_nist:`2023-4236` +- binutils: Fix :cve_nist:`2022-44840`, :cve_nist:`2022-45703`, :cve_nist:`2022-47008`, :cve_nist:`2022-47011`, :cve_nist:`2022-47673`, :cve_nist:`2022-47695`, :cve_nist:`2022-47696` and :cve_nist:`2022-48063` +- cups: Fix :cve_nist:`2023-4504` +- curl: Fix :cve_nist:`2023-38545` and :cve_nist:`2023-38546` +- gawk: Fix :cve_nist:`2023-4156` +- ghostscript: Fix :cve_nist:`2023-43115` +- glibc: Fix :cve_nist:`2023-4806`, :cve_nist:`2023-4813`, :cve_nist:`2023-4911` and :cve_nist:`2023-5156` +- glibc: Ignore :cve_nist:`2023-4527` +- go: Fix :cve_nist:`2023-24538` and :cve_nist:`2023-39318` - gstreamer1.0-plugins-bad: fix :cve_mitre:`2023-40474`, :cve_mitre:`2023-40475` and :cve_mitre:`2023-40476` -- libtiff: Fix :cve:`2022-40090` and :cve:`2023-1916` -- libwebp: Fix :cve:`2023-5129` -- libx11: Fix :cve:`2023-43785`, :cve:`2023-43786` and :cve:`2023-43787` -- libxml2: Fix :cve:`2023-45322` -- libxpm: Fix :cve:`2023-43788` and :cve:`2023-43789` -- linux-firmware: Fix :cve:`2022-40982`, :cve:`2023-20569` and :cve:`2023-20593` +- libtiff: Fix :cve_nist:`2022-40090` and :cve_nist:`2023-1916` +- libwebp: Fix :cve_nist:`2023-5129` +- libx11: Fix :cve_nist:`2023-43785`, :cve_nist:`2023-43786` and :cve_nist:`2023-43787` +- libxml2: Fix :cve_nist:`2023-45322` +- libxpm: Fix :cve_nist:`2023-43788` and :cve_nist:`2023-43789` +- linux-firmware: Fix :cve_nist:`2022-40982`, :cve_nist:`2023-20569` and :cve_nist:`2023-20593` - linux-yocto: update CVE exclusions -- linux-yocto/5.10: Ignore :cve:`2003-1604`, :cve:`2004-0230`, :cve:`2006-3635`, :cve:`2006-5331`, :cve:`2006-6128`, :cve:`2007-4774`, :cve:`2007-6761`, :cve:`2007-6762`, :cve:`2008-7316`, :cve:`2009-2692`, :cve:`2010-0008`, :cve:`2010-3432`, :cve:`2010-4648`, :cve:`2010-5313`, :cve:`2010-5328`, :cve:`2010-5329`, :cve:`2010-5331`, :cve:`2010-5332`, :cve:`2011-4098`, :cve:`2011-4131`, :cve:`2011-4915`, :cve:`2011-5321`, :cve:`2011-5327`, :cve:`2012-0957`, :cve:`2012-2119`, :cve:`2012-2136`, :cve:`2012-2137`, :cve:`2012-2313`, :cve:`2012-2319`, :cve:`2012-2372`, :cve:`2012-2375`, :cve:`2012-2390`, :cve:`2012-2669`, :cve:`2012-2744`, :cve:`2012-2745`, :cve:`2012-3364`, :cve:`2012-3375`, :cve:`2012-3400`, :cve:`2012-3412`, :cve:`2012-3430`, :cve:`2012-3510`, :cve:`2012-3511`, :cve:`2012-3520`, :cve:`2012-3552`, :cve:`2012-4398`, :cve:`2012-4444`, :cve:`2012-4461`, :cve:`2012-4467`, :cve:`2012-4508`, :cve:`2012-4530`, :cve:`2012-4565`, :cve:`2012-5374`, :cve:`2012-5375`, :cve:`2012-5517`, :cve:`2012-6536`, :cve:`2012-6537`, :cve:`2012-6538`, :cve:`2012-6539`, :cve:`2012-6540`, :cve:`2012-6541`, :cve:`2012-6542`, :cve:`2012-6543`, :cve:`2012-6544`, :cve:`2012-6545`, :cve:`2012-6546`, :cve:`2012-6547`, :cve:`2012-6548`, :cve:`2012-6549`, :cve:`2012-6638`, :cve:`2012-6647`, :cve:`2012-6657`, :cve:`2012-6689`, :cve:`2012-6701`, :cve:`2012-6703`, :cve:`2012-6704`, :cve:`2012-6712`, :cve:`2013-0160`, :cve:`2013-0190`, :cve:`2013-0216`, :cve:`2013-0217`, :cve:`2013-0228`, :cve:`2013-0231`, :cve:`2013-0268`, :cve:`2013-0290`, :cve:`2013-0309`, :cve:`2013-0310`, :cve:`2013-0311`, :cve:`2013-0313`, :cve:`2013-0343`, :cve:`2013-0349`, :cve:`2013-0871`, :cve:`2013-0913`, :cve:`2013-0914`, :cve:`2013-1059`, :cve:`2013-1763`, :cve:`2013-1767`, :cve:`2013-1772`, :cve:`2013-1773`, :cve:`2013-1774`, :cve:`2013-1792`, :cve:`2013-1796`, :cve:`2013-1797`, :cve:`2013-1798`, :cve:`2013-1819`, :cve:`2013-1826`, :cve:`2013-1827`, :cve:`2013-1828`, :cve:`2013-1848`, :cve:`2013-1858`, :cve:`2013-1860`, :cve:`2013-1928`, :cve:`2013-1929`, :cve:`2013-1943`, :cve:`2013-1956`, :cve:`2013-1957`, :cve:`2013-1958`, :cve:`2013-1959`, :cve:`2013-1979`, :cve:`2013-2015`, :cve:`2013-2017`, :cve:`2013-2058`, :cve:`2013-2094`, :cve:`2013-2128`, :cve:`2013-2140`, :cve:`2013-2141`, :cve:`2013-2146`, :cve:`2013-2147`, :cve:`2013-2148`, :cve:`2013-2164`, :cve:`2013-2206`, :cve:`2013-2232`, :cve:`2013-2234`, :cve:`2013-2237`, :cve:`2013-2546`, :cve:`2013-2547`, :cve:`2013-2548`, :cve:`2013-2596`, :cve:`2013-2634`, :cve:`2013-2635`, :cve:`2013-2636`, :cve:`2013-2850`, :cve:`2013-2851`, :cve:`2013-2852`, :cve:`2013-2888`, :cve:`2013-2889`, :cve:`2013-2890`, :cve:`2013-2891`, :cve:`2013-2892`, :cve:`2013-2893`, :cve:`2013-2894`, :cve:`2013-2895`, :cve:`2013-2896`, :cve:`2013-2897`, :cve:`2013-2898`, :cve:`2013-2899`, :cve:`2013-2929`, :cve:`2013-2930`, :cve:`2013-3076`, :cve:`2013-3222`, :cve:`2013-3223`, :cve:`2013-3224`, :cve:`2013-3225`, :cve:`2013-3226`, :cve:`2013-3227`, :cve:`2013-3228`, :cve:`2013-3229`, :cve:`2013-3230`, :cve:`2013-3231`, :cve:`2013-3232`, :cve:`2013-3233`, :cve:`2013-3234`, :cve:`2013-3235`, :cve:`2013-3236`, :cve:`2013-3237`, :cve:`2013-3301`, :cve:`2013-3302`, :cve:`2013-4125`, :cve:`2013-4127`, :cve:`2013-4129`, :cve:`2013-4162`, :cve:`2013-4163`, :cve:`2013-4205`, :cve:`2013-4220`, :cve:`2013-4247`, :cve:`2013-4254`, :cve:`2013-4270`, :cve:`2013-4299`, :cve:`2013-4300`, :cve:`2013-4312`, :cve:`2013-4343`, :cve:`2013-4345`, :cve:`2013-4348`, :cve:`2013-4350`, :cve:`2013-4387`, :cve:`2013-4470`, :cve:`2013-4483`, :cve:`2013-4511`, :cve:`2013-4512`, :cve:`2013-4513`, :cve:`2013-4514`, :cve:`2013-4515`, :cve:`2013-4516`, :cve:`2013-4563`, :cve:`2013-4579`, :cve:`2013-4587`, :cve:`2013-4588`, :cve:`2013-4591`, :cve:`2013-4592`, :cve:`2013-5634`, :cve:`2013-6282`, :cve:`2013-6367`, :cve:`2013-6368`, :cve:`2013-6376`, :cve:`2013-6378`, :cve:`2013-6380`, :cve:`2013-6381`, :cve:`2013-6382`, :cve:`2013-6383`, :cve:`2013-6431`, :cve:`2013-6432`, :cve:`2013-6885`, :cve:`2013-7026`, :cve:`2013-7027`, :cve:`2013-7263`, :cve:`2013-7264`, :cve:`2013-7265`, :cve:`2013-7266`, :cve:`2013-7267`, :cve:`2013-7268`, :cve:`2013-7269`, :cve:`2013-7270`, :cve:`2013-7271`, :cve:`2013-7281`, :cve:`2013-7339`, :cve:`2013-7348`, :cve:`2013-7421`, :cve:`2013-7446`, :cve:`2013-7470`, :cve:`2014-0038`, :cve:`2014-0049`, :cve:`2014-0055`, :cve:`2014-0069`, :cve:`2014-0077`, :cve:`2014-0100`, :cve:`2014-0101`, :cve:`2014-0102`, :cve:`2014-0131`, :cve:`2014-0155`, :cve:`2014-0181`, :cve:`2014-0196`, :cve:`2014-0203`, :cve:`2014-0205`, :cve:`2014-0206`, :cve:`2014-1438`, :cve:`2014-1444`, :cve:`2014-1445`, :cve:`2014-1446`, :cve:`2014-1690`, :cve:`2014-1737`, :cve:`2014-1738`, :cve:`2014-1739`, :cve:`2014-1874`, :cve:`2014-2038`, :cve:`2014-2039`, :cve:`2014-2309`, :cve:`2014-2523`, :cve:`2014-2568`, :cve:`2014-2580`, :cve:`2014-2672`, :cve:`2014-2673`, :cve:`2014-2678`, :cve:`2014-2706`, :cve:`2014-2739`, :cve:`2014-2851`, :cve:`2014-2889`, :cve:`2014-3122`, :cve:`2014-3144`, :cve:`2014-3145`, :cve:`2014-3153`, :cve:`2014-3180`, :cve:`2014-3181`, :cve:`2014-3182`, :cve:`2014-3183`, :cve:`2014-3184`, :cve:`2014-3185`, :cve:`2014-3186`, :cve:`2014-3534`, :cve:`2014-3535`, :cve:`2014-3601`, :cve:`2014-3610`, :cve:`2014-3611`, :cve:`2014-3631`, :cve:`2014-3645`, :cve:`2014-3646`, :cve:`2014-3647`, :cve:`2014-3673`, :cve:`2014-3687`, :cve:`2014-3688`, :cve:`2014-3690`, :cve:`2014-3917`, :cve:`2014-3940`, :cve:`2014-4014`, :cve:`2014-4027`, :cve:`2014-4157`, :cve:`2014-4171`, :cve:`2014-4508`, :cve:`2014-4608`, :cve:`2014-4611`, :cve:`2014-4652`, :cve:`2014-4653`, :cve:`2014-4654`, :cve:`2014-4655`, :cve:`2014-4656`, :cve:`2014-4667`, :cve:`2014-4699`, :cve:`2014-4943`, :cve:`2014-5045`, :cve:`2014-5077`, :cve:`2014-5206`, :cve:`2014-5207`, :cve:`2014-5471`, :cve:`2014-5472`, :cve:`2014-6410`, :cve:`2014-6416`, :cve:`2014-6417`, :cve:`2014-6418`, :cve:`2014-7145`, :cve:`2014-7283`, :cve:`2014-7284`, :cve:`2014-7822`, :cve:`2014-7825`, :cve:`2014-7826`, :cve:`2014-7841`, :cve:`2014-7842`, :cve:`2014-7843`, :cve:`2014-7970`, :cve:`2014-7975`, :cve:`2014-8086`, :cve:`2014-8133`, :cve:`2014-8134`, :cve:`2014-8159`, :cve:`2014-8160`, :cve:`2014-8171`, :cve:`2014-8172`, :cve:`2014-8173`, :cve:`2014-8369`, :cve:`2014-8480`, :cve:`2014-8481`, :cve:`2014-8559`, :cve:`2014-8709`, :cve:`2014-8884`, :cve:`2014-8989`, :cve:`2014-9090`, :cve:`2014-9322`, :cve:`2014-9419`, :cve:`2014-9420`, :cve:`2014-9428`, :cve:`2014-9529`, :cve:`2014-9584`, :cve:`2014-9585`, :cve:`2014-9644`, :cve:`2014-9683`, :cve:`2014-9710`, :cve:`2014-9715`, :cve:`2014-9717`, :cve:`2014-9728`, :cve:`2014-9729`, :cve:`2014-9730`, :cve:`2014-9731`, :cve:`2014-9803`, :cve:`2014-9870`, :cve:`2014-9888`, :cve:`2014-9895`, :cve:`2014-9903`, :cve:`2014-9904`, :cve:`2014-9914`, :cve:`2014-9922`, :cve:`2014-9940`, :cve:`2015-0239`, :cve:`2015-0274`, :cve:`2015-0275`, :cve:`2015-1333`, :cve:`2015-1339`, :cve:`2015-1350`, :cve:`2015-1420`, :cve:`2015-1421`, :cve:`2015-1465`, :cve:`2015-1573`, :cve:`2015-1593`, :cve:`2015-1805`, :cve:`2015-2041`, :cve:`2015-2042`, :cve:`2015-2150`, :cve:`2015-2666`, :cve:`2015-2672`, :cve:`2015-2686`, :cve:`2015-2830`, :cve:`2015-2922`, :cve:`2015-2925`, :cve:`2015-3212`, :cve:`2015-3214`, :cve:`2015-3288`, :cve:`2015-3290`, :cve:`2015-3291`, :cve:`2015-3331`, :cve:`2015-3339`, :cve:`2015-3636`, :cve:`2015-4001`, :cve:`2015-4002`, :cve:`2015-4003`, :cve:`2015-4004`, :cve:`2015-4036`, :cve:`2015-4167`, :cve:`2015-4170`, :cve:`2015-4176`, :cve:`2015-4177`, :cve:`2015-4178`, :cve:`2015-4692`, :cve:`2015-4700`, :cve:`2015-5156`, :cve:`2015-5157`, :cve:`2015-5257`, :cve:`2015-5283`, :cve:`2015-5307`, :cve:`2015-5327`, :cve:`2015-5364`, :cve:`2015-5366`, :cve:`2015-5697`, :cve:`2015-5706`, :cve:`2015-5707`, :cve:`2015-6252`, :cve:`2015-6526`, :cve:`2015-6937`, :cve:`2015-7509`, :cve:`2015-7513`, :cve:`2015-7515`, :cve:`2015-7550`, :cve:`2015-7566`, :cve:`2015-7613`, :cve:`2015-7799`, :cve:`2015-7833`, :cve:`2015-7872`, :cve:`2015-7884`, :cve:`2015-7885`, :cve:`2015-7990`, :cve:`2015-8104`, :cve:`2015-8215`, :cve:`2015-8324`, :cve:`2015-8374`, :cve:`2015-8539`, :cve:`2015-8543`, :cve:`2015-8550`, :cve:`2015-8551`, :cve:`2015-8552`, :cve:`2015-8553`, :cve:`2015-8569`, :cve:`2015-8575`, :cve:`2015-8660`, :cve:`2015-8709`, :cve:`2015-8746`, :cve:`2015-8767`, :cve:`2015-8785`, :cve:`2015-8787`, :cve:`2015-8812`, :cve:`2015-8816`, :cve:`2015-8830`, :cve:`2015-8839`, :cve:`2015-8844`, :cve:`2015-8845`, :cve:`2015-8950`, :cve:`2015-8952`, :cve:`2015-8953`, :cve:`2015-8955`, :cve:`2015-8956`, :cve:`2015-8961`, :cve:`2015-8962`, :cve:`2015-8963`, :cve:`2015-8964`, :cve:`2015-8966`, :cve:`2015-8967`, :cve:`2015-8970`, :cve:`2015-9004`, :cve:`2015-9016`, :cve:`2015-9289`, :cve:`2016-0617`, :cve:`2016-0723`, :cve:`2016-0728`, :cve:`2016-0758`, :cve:`2016-0821`, :cve:`2016-0823`, :cve:`2016-10044`, :cve:`2016-10088`, :cve:`2016-10147`, :cve:`2016-10150`, :cve:`2016-10153`, :cve:`2016-10154`, :cve:`2016-10200`, :cve:`2016-10208`, :cve:`2016-10229`, :cve:`2016-10318`, :cve:`2016-10723`, :cve:`2016-10741`, :cve:`2016-10764`, :cve:`2016-10905`, :cve:`2016-10906`, :cve:`2016-10907`, :cve:`2016-1237`, :cve:`2016-1575`, :cve:`2016-1576`, :cve:`2016-1583`, :cve:`2016-2053`, :cve:`2016-2069`, :cve:`2016-2070`, :cve:`2016-2085`, :cve:`2016-2117`, :cve:`2016-2143`, :cve:`2016-2184`, :cve:`2016-2185`, :cve:`2016-2186`, :cve:`2016-2187`, :cve:`2016-2188`, :cve:`2016-2383`, :cve:`2016-2384`, :cve:`2016-2543`, :cve:`2016-2544`, :cve:`2016-2545`, :cve:`2016-2546`, :cve:`2016-2547`, :cve:`2016-2548`, :cve:`2016-2549`, :cve:`2016-2550`, :cve:`2016-2782`, :cve:`2016-2847`, :cve:`2016-3044`, :cve:`2016-3070`, :cve:`2016-3134`, :cve:`2016-3135`, :cve:`2016-3136`, :cve:`2016-3137`, :cve:`2016-3138`, :cve:`2016-3139`, :cve:`2016-3140`, :cve:`2016-3156`, :cve:`2016-3157`, :cve:`2016-3672`, :cve:`2016-3689`, :cve:`2016-3713`, :cve:`2016-3841`, :cve:`2016-3857`, :cve:`2016-3951`, :cve:`2016-3955`, :cve:`2016-3961`, :cve:`2016-4440`, :cve:`2016-4470`, :cve:`2016-4482`, :cve:`2016-4485`, :cve:`2016-4486`, :cve:`2016-4557`, :cve:`2016-4558`, :cve:`2016-4565`, :cve:`2016-4568`, :cve:`2016-4569`, :cve:`2016-4578`, :cve:`2016-4580`, :cve:`2016-4581`, :cve:`2016-4794`, :cve:`2016-4805`, :cve:`2016-4913`, :cve:`2016-4951`, :cve:`2016-4997`, :cve:`2016-4998`, :cve:`2016-5195`, :cve:`2016-5243`, :cve:`2016-5244`, :cve:`2016-5400`, :cve:`2016-5412`, :cve:`2016-5696`, :cve:`2016-5728`, :cve:`2016-5828`, :cve:`2016-5829`, :cve:`2016-6130`, :cve:`2016-6136`, :cve:`2016-6156`, :cve:`2016-6162`, :cve:`2016-6187`, :cve:`2016-6197`, :cve:`2016-6198`, :cve:`2016-6213`, :cve:`2016-6327`, :cve:`2016-6480`, :cve:`2016-6516`, :cve:`2016-6786`, :cve:`2016-6787`, :cve:`2016-6828`, :cve:`2016-7039`, :cve:`2016-7042`, :cve:`2016-7097`, :cve:`2016-7117`, :cve:`2016-7425`, :cve:`2016-7910`, :cve:`2016-7911`, :cve:`2016-7912`, :cve:`2016-7913`, :cve:`2016-7914`, :cve:`2016-7915`, :cve:`2016-7916`, :cve:`2016-7917`, :cve:`2016-8399`, :cve:`2016-8405`, :cve:`2016-8630`, :cve:`2016-8632`, :cve:`2016-8633`, :cve:`2016-8636`, :cve:`2016-8645`, :cve:`2016-8646`, :cve:`2016-8650`, :cve:`2016-8655`, :cve:`2016-8658`, :cve:`2016-8666`, :cve:`2016-9083`, :cve:`2016-9084`, :cve:`2016-9120`, :cve:`2016-9178`, :cve:`2016-9191`, :cve:`2016-9313`, :cve:`2016-9555`, :cve:`2016-9576`, :cve:`2016-9588`, :cve:`2016-9604`, :cve:`2016-9685`, :cve:`2016-9754`, :cve:`2016-9755`, :cve:`2016-9756`, :cve:`2016-9777`, :cve:`2016-9793`, :cve:`2016-9794`, :cve:`2016-9806`, :cve:`2016-9919`, :cve:`2017-0605`, :cve:`2017-0627`, :cve:`2017-0750`, :cve:`2017-0786`, :cve:`2017-0861`, :cve:`2017-1000`, :cve:`2017-1000111`, :cve:`2017-1000112`, :cve:`2017-1000251`, :cve:`2017-1000252`, :cve:`2017-1000253`, :cve:`2017-1000255`, :cve:`2017-1000363`, :cve:`2017-1000364`, :cve:`2017-1000365`, :cve:`2017-1000370`, :cve:`2017-1000371`, :cve:`2017-1000379`, :cve:`2017-1000380`, :cve:`2017-1000405`, :cve:`2017-1000407`, :cve:`2017-1000410`, :cve:`2017-10661`, :cve:`2017-10662`, :cve:`2017-10663`, :cve:`2017-10810`, :cve:`2017-10911`, :cve:`2017-11089`, :cve:`2017-11176`, :cve:`2017-11472`, :cve:`2017-11473`, :cve:`2017-11600`, :cve:`2017-12134`, :cve:`2017-12146`, :cve:`2017-12153`, :cve:`2017-12154`, :cve:`2017-12168`, :cve:`2017-12188`, :cve:`2017-12190`, :cve:`2017-12192`, :cve:`2017-12193`, :cve:`2017-12762`, :cve:`2017-13080`, :cve:`2017-13166`, :cve:`2017-13167`, :cve:`2017-13168`, :cve:`2017-13215`, :cve:`2017-13216`, :cve:`2017-13220`, :cve:`2017-13305`, :cve:`2017-13686`, :cve:`2017-13695`, :cve:`2017-13715`, :cve:`2017-14051`, :cve:`2017-14106`, :cve:`2017-14140`, :cve:`2017-14156`, :cve:`2017-14340`, :cve:`2017-14489`, :cve:`2017-14497`, :cve:`2017-14954`, :cve:`2017-14991`, :cve:`2017-15102`, :cve:`2017-15115`, :cve:`2017-15116`, :cve:`2017-15121`, :cve:`2017-15126`, :cve:`2017-15127`, :cve:`2017-15128`, :cve:`2017-15129`, :cve:`2017-15265`, :cve:`2017-15274`, :cve:`2017-15299`, :cve:`2017-15306`, :cve:`2017-15537`, :cve:`2017-15649`, :cve:`2017-15868`, :cve:`2017-15951`, :cve:`2017-16525`, :cve:`2017-16526`, :cve:`2017-16527`, :cve:`2017-16528`, :cve:`2017-16529`, :cve:`2017-16530`, :cve:`2017-16531`, :cve:`2017-16532`, :cve:`2017-16533`, :cve:`2017-16534`, :cve:`2017-16535`, :cve:`2017-16536`, :cve:`2017-16537`, :cve:`2017-16538`, :cve:`2017-16643`, :cve:`2017-16644`, :cve:`2017-16645`, :cve:`2017-16646`, :cve:`2017-16647`, :cve:`2017-16648`, :cve:`2017-16649`, :cve:`2017-16650`, :cve:`2017-16911`, :cve:`2017-16912`, :cve:`2017-16913`, :cve:`2017-16914`, :cve:`2017-16939`, :cve:`2017-16994`, :cve:`2017-16995`, :cve:`2017-16996`, :cve:`2017-17052`, :cve:`2017-17053`, :cve:`2017-17448`, :cve:`2017-17449`, :cve:`2017-17450`, :cve:`2017-17558`, :cve:`2017-17712`, :cve:`2017-17741`, :cve:`2017-17805`, :cve:`2017-17806`, :cve:`2017-17807`, :cve:`2017-17852`, :cve:`2017-17853`, :cve:`2017-17854`, :cve:`2017-17855`, :cve:`2017-17856`, :cve:`2017-17857`, :cve:`2017-17862`, :cve:`2017-17863`, :cve:`2017-17864`, :cve:`2017-17975`, :cve:`2017-18017`, :cve:`2017-18075`, :cve:`2017-18079`, :cve:`2017-18174`, :cve:`2017-18193`, :cve:`2017-18200`, :cve:`2017-18202`, :cve:`2017-18203`, :cve:`2017-18204`, :cve:`2017-18208`, :cve:`2017-18216`, :cve:`2017-18218`, :cve:`2017-18221`, :cve:`2017-18222`, :cve:`2017-18224`, :cve:`2017-18232`, :cve:`2017-18241`, :cve:`2017-18249`, :cve:`2017-18255`, :cve:`2017-18257`, :cve:`2017-18261`, :cve:`2017-18270`, :cve:`2017-18344`, :cve:`2017-18360`, :cve:`2017-18379`, :cve:`2017-18509`, :cve:`2017-18549`, :cve:`2017-18550`, :cve:`2017-18551`, :cve:`2017-18552`, :cve:`2017-18595`, :cve:`2017-2583`, :cve:`2017-2584`, :cve:`2017-2596`, :cve:`2017-2618`, :cve:`2017-2634`, :cve:`2017-2636`, :cve:`2017-2647`, :cve:`2017-2671`, :cve:`2017-5123`, :cve:`2017-5546`, :cve:`2017-5547`, :cve:`2017-5548`, :cve:`2017-5549`, :cve:`2017-5550`, :cve:`2017-5551`, :cve:`2017-5576`, :cve:`2017-5577`, :cve:`2017-5669`, :cve:`2017-5715`, :cve:`2017-5753`, :cve:`2017-5754`, :cve:`2017-5897`, :cve:`2017-5967`, :cve:`2017-5970`, :cve:`2017-5972`, :cve:`2017-5986`, :cve:`2017-6001`, :cve:`2017-6074`, :cve:`2017-6214`, :cve:`2017-6345`, :cve:`2017-6346`, :cve:`2017-6347`, :cve:`2017-6348`, :cve:`2017-6353`, :cve:`2017-6874`, :cve:`2017-6951`, :cve:`2017-7184`, :cve:`2017-7187`, :cve:`2017-7261`, :cve:`2017-7273`, :cve:`2017-7277`, :cve:`2017-7294`, :cve:`2017-7308`, :cve:`2017-7346`, :cve:`2017-7374`, :cve:`2017-7472`, :cve:`2017-7477`, :cve:`2017-7482`, :cve:`2017-7487`, :cve:`2017-7495`, :cve:`2017-7518`, :cve:`2017-7533`, :cve:`2017-7541`, :cve:`2017-7542`, :cve:`2017-7558`, :cve:`2017-7616`, :cve:`2017-7618`, :cve:`2017-7645`, :cve:`2017-7889`, :cve:`2017-7895`, :cve:`2017-7979`, :cve:`2017-8061`, :cve:`2017-8062`, :cve:`2017-8063`, :cve:`2017-8064`, :cve:`2017-8065`, :cve:`2017-8066`, :cve:`2017-8067`, :cve:`2017-8068`, :cve:`2017-8069`, :cve:`2017-8070`, :cve:`2017-8071`, :cve:`2017-8072`, :cve:`2017-8106`, :cve:`2017-8240`, :cve:`2017-8797`, :cve:`2017-8824`, :cve:`2017-8831`, :cve:`2017-8890`, :cve:`2017-8924`, :cve:`2017-8925`, :cve:`2017-9059`, :cve:`2017-9074`, :cve:`2017-9075`, :cve:`2017-9076`, :cve:`2017-9077`, :cve:`2017-9150`, :cve:`2017-9211`, :cve:`2017-9242`, :cve:`2017-9605`, :cve:`2017-9725`, :cve:`2017-9984`, :cve:`2017-9985`, :cve:`2017-9986`, :cve:`2018-1000004`, :cve:`2018-1000026`, :cve:`2018-1000028`, :cve:`2018-1000199`, :cve:`2018-1000200`, :cve:`2018-1000204`, :cve:`2018-10021`, :cve:`2018-10074`, :cve:`2018-10087`, :cve:`2018-10124`, :cve:`2018-10322`, :cve:`2018-10323`, :cve:`2018-1065`, :cve:`2018-1066`, :cve:`2018-10675`, :cve:`2018-1068`, :cve:`2018-10840`, :cve:`2018-10853`, :cve:`2018-1087`, :cve:`2018-10876`, :cve:`2018-10877`, :cve:`2018-10878`, :cve:`2018-10879`, :cve:`2018-10880`, :cve:`2018-10881`, :cve:`2018-10882`, :cve:`2018-10883`, :cve:`2018-10901`, :cve:`2018-10902`, :cve:`2018-1091`, :cve:`2018-1092`, :cve:`2018-1093`, :cve:`2018-10938`, :cve:`2018-1094`, :cve:`2018-10940`, :cve:`2018-1095`, :cve:`2018-1108`, :cve:`2018-1118`, :cve:`2018-1120`, :cve:`2018-11232`, :cve:`2018-1128`, :cve:`2018-1129`, :cve:`2018-1130`, :cve:`2018-11412`, :cve:`2018-11506`, :cve:`2018-11508`, :cve:`2018-12126`, :cve:`2018-12127`, :cve:`2018-12130`, :cve:`2018-12207`, :cve:`2018-12232`, :cve:`2018-12233`, :cve:`2018-12633`, :cve:`2018-12714`, :cve:`2018-12896`, :cve:`2018-12904`, :cve:`2018-13053`, :cve:`2018-13093`, :cve:`2018-13094`, :cve:`2018-13095`, :cve:`2018-13096`, :cve:`2018-13097`, :cve:`2018-13098`, :cve:`2018-13099`, :cve:`2018-13100`, :cve:`2018-13405`, :cve:`2018-13406`, :cve:`2018-14609`, :cve:`2018-14610`, :cve:`2018-14611`, :cve:`2018-14612`, :cve:`2018-14613`, :cve:`2018-14614`, :cve:`2018-14615`, :cve:`2018-14616`, :cve:`2018-14617`, :cve:`2018-14619`, :cve:`2018-14625`, :cve:`2018-14633`, :cve:`2018-14634`, :cve:`2018-14641`, :cve:`2018-14646`, :cve:`2018-14656`, :cve:`2018-14678`, :cve:`2018-14734`, :cve:`2018-15471`, :cve:`2018-15572`, :cve:`2018-15594`, :cve:`2018-16276`, :cve:`2018-16597`, :cve:`2018-16658`, :cve:`2018-16862`, :cve:`2018-16871`, :cve:`2018-16880`, :cve:`2018-16882`, :cve:`2018-16884`, :cve:`2018-17182`, :cve:`2018-17972`, :cve:`2018-18021`, :cve:`2018-18281`, :cve:`2018-18386`, :cve:`2018-18397`, :cve:`2018-18445`, :cve:`2018-18559`, :cve:`2018-18690`, :cve:`2018-18710`, :cve:`2018-18955`, :cve:`2018-19406`, :cve:`2018-19407`, :cve:`2018-19824`, :cve:`2018-19854`, :cve:`2018-19985`, :cve:`2018-20169`, :cve:`2018-20449`, :cve:`2018-20509`, :cve:`2018-20510`, :cve:`2018-20511`, :cve:`2018-20669`, :cve:`2018-20784`, :cve:`2018-20836`, :cve:`2018-20854`, :cve:`2018-20855`, :cve:`2018-20856`, :cve:`2018-20961`, :cve:`2018-20976`, :cve:`2018-21008`, :cve:`2018-25015`, :cve:`2018-25020`, :cve:`2018-3620`, :cve:`2018-3639`, :cve:`2018-3646`, :cve:`2018-3665`, :cve:`2018-3693`, :cve:`2018-5332`, :cve:`2018-5333`, :cve:`2018-5344`, :cve:`2018-5390`, :cve:`2018-5391`, :cve:`2018-5703`, :cve:`2018-5750`, :cve:`2018-5803`, :cve:`2018-5814`, :cve:`2018-5848`, :cve:`2018-5873`, :cve:`2018-5953`, :cve:`2018-5995`, :cve:`2018-6412`, :cve:`2018-6554`, :cve:`2018-6555`, :cve:`2018-6927`, :cve:`2018-7191`, :cve:`2018-7273`, :cve:`2018-7480`, :cve:`2018-7492`, :cve:`2018-7566`, :cve:`2018-7740`, :cve:`2018-7754`, :cve:`2018-7755`, :cve:`2018-7757`, :cve:`2018-7995`, :cve:`2018-8043`, :cve:`2018-8087`, :cve:`2018-8781`, :cve:`2018-8822`, :cve:`2018-8897`, :cve:`2018-9363`, :cve:`2018-9385`, :cve:`2018-9415`, :cve:`2018-9422`, :cve:`2018-9465`, :cve:`2018-9516`, :cve:`2018-9517`, :cve:`2018-9518`, :cve:`2018-9568`, :cve:`2019-0136`, :cve:`2019-0145`, :cve:`2019-0146`, :cve:`2019-0147`, :cve:`2019-0148`, :cve:`2019-0149`, :cve:`2019-0154`, :cve:`2019-0155`, :cve:`2019-10124`, :cve:`2019-10125`, :cve:`2019-10126`, :cve:`2019-10142`, :cve:`2019-10207`, :cve:`2019-10220`, :cve:`2019-10638`, :cve:`2019-10639`, :cve:`2019-11085`, :cve:`2019-11091`, :cve:`2019-11135`, :cve:`2019-11190`, :cve:`2019-11191`, :cve:`2019-1125`, :cve:`2019-11477`, :cve:`2019-11478`, :cve:`2019-11479`, :cve:`2019-11486`, :cve:`2019-11487`, :cve:`2019-11599`, :cve:`2019-11683`, :cve:`2019-11810`, :cve:`2019-11811`, :cve:`2019-11815`, :cve:`2019-11833`, :cve:`2019-11884`, :cve:`2019-12378`, :cve:`2019-12379`, :cve:`2019-12380`, :cve:`2019-12381`, :cve:`2019-12382`, :cve:`2019-12454`, :cve:`2019-12455`, :cve:`2019-12614`, :cve:`2019-12615`, :cve:`2019-12817`, :cve:`2019-12818`, :cve:`2019-12819`, :cve:`2019-12881`, :cve:`2019-12984`, :cve:`2019-13233`, :cve:`2019-13272`, :cve:`2019-13631`, :cve:`2019-13648`, :cve:`2019-14283`, :cve:`2019-14284`, :cve:`2019-14615`, :cve:`2019-14763`, :cve:`2019-14814`, :cve:`2019-14815`, :cve:`2019-14816`, :cve:`2019-14821`, :cve:`2019-14835`, :cve:`2019-14895`, :cve:`2019-14896`, :cve:`2019-14897`, :cve:`2019-14901`, :cve:`2019-15030`, :cve:`2019-15031`, :cve:`2019-15090`, :cve:`2019-15098`, :cve:`2019-15099`, :cve:`2019-15117`, :cve:`2019-15118`, :cve:`2019-15211`, :cve:`2019-15212`, :cve:`2019-15213`, :cve:`2019-15214`, :cve:`2019-15215`, :cve:`2019-15216`, :cve:`2019-15217`, :cve:`2019-15218`, :cve:`2019-15219`, :cve:`2019-15220`, :cve:`2019-15221`, :cve:`2019-15222`, :cve:`2019-15223`, :cve:`2019-15291`, :cve:`2019-15292`, :cve:`2019-15504`, :cve:`2019-15505`, :cve:`2019-15538`, :cve:`2019-15666`, :cve:`2019-15807`, :cve:`2019-15916`, :cve:`2019-15917`, :cve:`2019-15918`, :cve:`2019-15919`, :cve:`2019-15920`, :cve:`2019-15921`, :cve:`2019-15922`, :cve:`2019-15923`, :cve:`2019-15924`, :cve:`2019-15925`, :cve:`2019-15926`, :cve:`2019-15927`, :cve:`2019-16229`, :cve:`2019-16230`, :cve:`2019-16231`, :cve:`2019-16232`, :cve:`2019-16233`, :cve:`2019-16234`, :cve:`2019-16413`, :cve:`2019-16714`, :cve:`2019-16746`, :cve:`2019-16921`, :cve:`2019-16994`, :cve:`2019-16995`, :cve:`2019-17052`, :cve:`2019-17053`, :cve:`2019-17054`, :cve:`2019-17055`, :cve:`2019-17056`, :cve:`2019-17075`, :cve:`2019-17133`, :cve:`2019-17351`, :cve:`2019-17666`, :cve:`2019-18198`, :cve:`2019-18282`, :cve:`2019-18660`, :cve:`2019-18675`, :cve:`2019-18683`, :cve:`2019-18786`, :cve:`2019-18805`, :cve:`2019-18806`, :cve:`2019-18807`, :cve:`2019-18808`, :cve:`2019-18809`, :cve:`2019-18810`, :cve:`2019-18811`, :cve:`2019-18812`, :cve:`2019-18813`, :cve:`2019-18814`, :cve:`2019-18885`, :cve:`2019-19036`, :cve:`2019-19037`, :cve:`2019-19039`, :cve:`2019-19043`, :cve:`2019-19044`, :cve:`2019-19045`, :cve:`2019-19046`, :cve:`2019-19047`, :cve:`2019-19048`, :cve:`2019-19049`, :cve:`2019-19050`, :cve:`2019-19051`, :cve:`2019-19052`, :cve:`2019-19053`, :cve:`2019-19054`, :cve:`2019-19055`, :cve:`2019-19056`, :cve:`2019-19057`, :cve:`2019-19058`, :cve:`2019-19059`, :cve:`2019-19060`, :cve:`2019-19061`, :cve:`2019-19062`, :cve:`2019-19063`, :cve:`2019-19064`, :cve:`2019-19065`, :cve:`2019-19066`, :cve:`2019-19067`, :cve:`2019-19068`, :cve:`2019-19069`, :cve:`2019-19070`, :cve:`2019-19071`, :cve:`2019-19072`, :cve:`2019-19073`, :cve:`2019-19074`, :cve:`2019-19075`, :cve:`2019-19076`, :cve:`2019-19077`, :cve:`2019-19078`, :cve:`2019-19079`, :cve:`2019-19080`, :cve:`2019-19081`, :cve:`2019-19082`, :cve:`2019-19083`, :cve:`2019-19227`, :cve:`2019-19241`, :cve:`2019-19252`, :cve:`2019-19318`, :cve:`2019-19319`, :cve:`2019-19332`, :cve:`2019-19338`, :cve:`2019-19377`, :cve:`2019-19447`, :cve:`2019-19448`, :cve:`2019-19449`, :cve:`2019-19462`, :cve:`2019-19523`, :cve:`2019-19524`, :cve:`2019-19525`, :cve:`2019-19526`, :cve:`2019-19527`, :cve:`2019-19528`, :cve:`2019-19529`, :cve:`2019-19530`, :cve:`2019-19531`, :cve:`2019-19532`, :cve:`2019-19533`, :cve:`2019-19534`, :cve:`2019-19535`, :cve:`2019-19536`, :cve:`2019-19537`, :cve:`2019-19543`, :cve:`2019-19602`, :cve:`2019-19767`, :cve:`2019-19768`, :cve:`2019-19769`, :cve:`2019-19770`, :cve:`2019-19807`, :cve:`2019-19813`, :cve:`2019-19815`, :cve:`2019-19816`, :cve:`2019-19922`, :cve:`2019-19927`, :cve:`2019-19947`, :cve:`2019-19965`, :cve:`2019-19966`, :cve:`2019-1999`, :cve:`2019-20054`, :cve:`2019-20095`, :cve:`2019-20096`, :cve:`2019-2024`, :cve:`2019-2025`, :cve:`2019-20422`, :cve:`2019-2054`, :cve:`2019-20636`, :cve:`2019-20806`, :cve:`2019-20810`, :cve:`2019-20811`, :cve:`2019-20812`, :cve:`2019-20908`, :cve:`2019-20934`, :cve:`2019-2101`, :cve:`2019-2181`, :cve:`2019-2182`, :cve:`2019-2213`, :cve:`2019-2214`, :cve:`2019-2215`, :cve:`2019-25044`, :cve:`2019-25045`, :cve:`2019-3016`, :cve:`2019-3459`, :cve:`2019-3460`, :cve:`2019-3701`, :cve:`2019-3819`, :cve:`2019-3837`, :cve:`2019-3846`, :cve:`2019-3874`, :cve:`2019-3882`, :cve:`2019-3887`, :cve:`2019-3892`, :cve:`2019-3896`, :cve:`2019-3900`, :cve:`2019-3901`, :cve:`2019-5108`, :cve:`2019-6133`, :cve:`2019-6974`, :cve:`2019-7221`, :cve:`2019-7222`, :cve:`2019-7308`, :cve:`2019-8912`, :cve:`2019-8956`, :cve:`2019-8980`, :cve:`2019-9003`, :cve:`2019-9162`, :cve:`2019-9213`, :cve:`2019-9245`, :cve:`2019-9444`, :cve:`2019-9445`, :cve:`2019-9453`, :cve:`2019-9454`, :cve:`2019-9455`, :cve:`2019-9456`, :cve:`2019-9457`, :cve:`2019-9458`, :cve:`2019-9466`, :cve:`2019-9500`, :cve:`2019-9503`, :cve:`2019-9506`, :cve:`2019-9857`, :cve:`2020-0009`, :cve:`2020-0030`, :cve:`2020-0041`, :cve:`2020-0066`, :cve:`2020-0067`, :cve:`2020-0110`, :cve:`2020-0255`, :cve:`2020-0305`, :cve:`2020-0404`, :cve:`2020-0423`, :cve:`2020-0427`, :cve:`2020-0429`, :cve:`2020-0430`, :cve:`2020-0431`, :cve:`2020-0432`, :cve:`2020-0433`, :cve:`2020-0435`, :cve:`2020-0444`, :cve:`2020-0465`, :cve:`2020-0466`, :cve:`2020-0543`, :cve:`2020-10135`, :cve:`2020-10690`, :cve:`2020-10711`, :cve:`2020-10720`, :cve:`2020-10732`, :cve:`2020-10742`, :cve:`2020-10751`, :cve:`2020-10757`, :cve:`2020-10766`, :cve:`2020-10767`, :cve:`2020-10768`, :cve:`2020-10769`, :cve:`2020-10773`, :cve:`2020-10781`, :cve:`2020-10942`, :cve:`2020-11494`, :cve:`2020-11565`, :cve:`2020-11608`, :cve:`2020-11609`, :cve:`2020-11668`, :cve:`2020-11669`, :cve:`2020-11884`, :cve:`2020-12114`, :cve:`2020-12351`, :cve:`2020-12352`, :cve:`2020-12464`, :cve:`2020-12465`, :cve:`2020-12652`, :cve:`2020-12653`, :cve:`2020-12654`, :cve:`2020-12655`, :cve:`2020-12656`, :cve:`2020-12657`, :cve:`2020-12659`, :cve:`2020-12768`, :cve:`2020-12769`, :cve:`2020-12770`, :cve:`2020-12771`, :cve:`2020-12826`, :cve:`2020-12888`, :cve:`2020-12912`, :cve:`2020-13143`, :cve:`2020-13974`, :cve:`2020-14305`, :cve:`2020-14314`, :cve:`2020-14331`, :cve:`2020-14351`, :cve:`2020-14353`, :cve:`2020-14356`, :cve:`2020-14381`, :cve:`2020-14385`, :cve:`2020-14386`, :cve:`2020-14390`, :cve:`2020-14416`, :cve:`2020-15393`, :cve:`2020-15436`, :cve:`2020-15437`, :cve:`2020-15780`, :cve:`2020-15852`, :cve:`2020-16119`, :cve:`2020-16120`, :cve:`2020-16166`, :cve:`2020-1749`, :cve:`2020-24394`, :cve:`2020-24490`, :cve:`2020-24586`, :cve:`2020-24587`, :cve:`2020-24588`, :cve:`2020-25211`, :cve:`2020-25212`, :cve:`2020-25221`, :cve:`2020-25284`, :cve:`2020-25285`, :cve:`2020-25639`, :cve:`2020-25641`, :cve:`2020-25643`, :cve:`2020-25645`, :cve:`2020-25656`, :cve:`2020-25668`, :cve:`2020-25669`, :cve:`2020-25670`, :cve:`2020-25671`, :cve:`2020-25672`, :cve:`2020-25673`, :cve:`2020-25704`, :cve:`2020-25705`, :cve:`2020-26088`, :cve:`2020-26139`, :cve:`2020-26141`, :cve:`2020-26145`, :cve:`2020-26147`, :cve:`2020-26541`, :cve:`2020-26555`, :cve:`2020-26558`, :cve:`2020-27066`, :cve:`2020-27067`, :cve:`2020-27068`, :cve:`2020-27152`, :cve:`2020-27170`, :cve:`2020-27171`, :cve:`2020-27194`, :cve:`2020-2732`, :cve:`2020-27418`, :cve:`2020-27673`, :cve:`2020-27675`, :cve:`2020-27777`, :cve:`2020-27784`, :cve:`2020-27786`, :cve:`2020-27815`, :cve:`2020-27820`, :cve:`2020-27825`, :cve:`2020-27830`, :cve:`2020-27835`, :cve:`2020-28097`, :cve:`2020-28374`, :cve:`2020-28588`, :cve:`2020-28915`, :cve:`2020-28941`, :cve:`2020-28974`, :cve:`2020-29368`, :cve:`2020-29369`, :cve:`2020-29370`, :cve:`2020-29371`, :cve:`2020-29372`, :cve:`2020-29373`, :cve:`2020-29374`, :cve:`2020-29534`, :cve:`2020-29568`, :cve:`2020-29569`, :cve:`2020-29660`, :cve:`2020-29661`, :cve:`2020-35499`, :cve:`2020-35508`, :cve:`2020-35513`, :cve:`2020-35519`, :cve:`2020-36158`, :cve:`2020-36310`, :cve:`2020-36311`, :cve:`2020-36312`, :cve:`2020-36313`, :cve:`2020-36322`, :cve:`2020-36385`, :cve:`2020-36386`, :cve:`2020-36387`, :cve:`2020-36516`, :cve:`2020-36557`, :cve:`2020-36558`, :cve:`2020-36691`, :cve:`2020-36694`, :cve:`2020-36766`, :cve:`2020-3702`, :cve:`2020-4788`, :cve:`2020-7053`, :cve:`2020-8428`, :cve:`2020-8647`, :cve:`2020-8648`, :cve:`2020-8649`, :cve:`2020-8694`, :cve:`2020-8834`, :cve:`2020-8835`, :cve:`2020-8992`, :cve:`2020-9383`, :cve:`2020-9391`, :cve:`2021-0129`, :cve:`2021-0342`, :cve_mitre:`2021-0447`, :cve_mitre:`2021-0448`, :cve:`2021-0512`, :cve:`2021-0605`, :cve:`2021-0707`, :cve:`2021-0920`, :cve:`2021-0929`, :cve:`2021-0935`, :cve_mitre:`2021-0937`, :cve:`2021-0938`, :cve:`2021-0941`, :cve:`2021-1048`, :cve:`2021-20177`, :cve:`2021-20194`, :cve:`2021-20226`, :cve:`2021-20239`, :cve:`2021-20261`, :cve:`2021-20265`, :cve:`2021-20268`, :cve:`2021-20292`, :cve:`2021-20317`, :cve:`2021-20320`, :cve:`2021-20321`, :cve:`2021-20322`, :cve:`2021-21781`, :cve:`2021-22543`, :cve:`2021-22555`, :cve:`2021-22600`, :cve:`2021-23133`, :cve:`2021-23134`, :cve:`2021-26401`, :cve:`2021-26708`, :cve:`2021-26930`, :cve:`2021-26931`, :cve:`2021-26932`, :cve:`2021-27363`, :cve:`2021-27364`, :cve:`2021-27365`, :cve:`2021-28038`, :cve:`2021-28039`, :cve:`2021-28375`, :cve:`2021-28660`, :cve:`2021-28688`, :cve:`2021-28691`, :cve:`2021-28711`, :cve:`2021-28712`, :cve:`2021-28713`, :cve:`2021-28714`, :cve:`2021-28715`, :cve:`2021-28950`, :cve:`2021-28951`, :cve:`2021-28952`, :cve:`2021-28964`, :cve:`2021-28971`, :cve:`2021-28972`, :cve:`2021-29154`, :cve:`2021-29155`, :cve:`2021-29264`, :cve:`2021-29265`, :cve:`2021-29266`, :cve:`2021-29646`, :cve:`2021-29647`, :cve:`2021-29648`, :cve:`2021-29649`, :cve:`2021-29650`, :cve:`2021-29657`, :cve:`2021-30002`, :cve:`2021-30178`, :cve:`2021-31440`, :cve:`2021-3178`, :cve:`2021-31829`, :cve:`2021-31916`, :cve:`2021-32399`, :cve:`2021-32606`, :cve:`2021-33033`, :cve:`2021-33034`, :cve:`2021-33098`, :cve:`2021-33135`, :cve:`2021-33200`, :cve:`2021-3347`, :cve:`2021-3348`, :cve:`2021-33624`, :cve:`2021-33655`, :cve:`2021-33656`, :cve:`2021-33909`, :cve:`2021-3411`, :cve:`2021-3428`, :cve:`2021-3444`, :cve:`2021-34556`, :cve:`2021-34693`, :cve:`2021-3483`, :cve:`2021-34866`, :cve:`2021-3489`, :cve:`2021-3490`, :cve:`2021-3491`, :cve_mitre:`2021-34981`, :cve:`2021-3501`, :cve:`2021-35039`, :cve:`2021-3506`, :cve:`2021-3543`, :cve:`2021-35477`, :cve:`2021-3564`, :cve:`2021-3573`, :cve:`2021-3587`, :cve_mitre:`2021-3600`, :cve:`2021-3609`, :cve:`2021-3612`, :cve:`2021-3635`, :cve:`2021-3640`, :cve:`2021-3653`, :cve:`2021-3655`, :cve:`2021-3656`, :cve:`2021-3659`, :cve:`2021-3679`, :cve:`2021-3715`, :cve:`2021-37159`, :cve:`2021-3732`, :cve:`2021-3736`, :cve:`2021-3739`, :cve:`2021-3743`, :cve:`2021-3744`, :cve:`2021-3752`, :cve:`2021-3753`, :cve:`2021-37576`, :cve:`2021-3759`, :cve:`2021-3760`, :cve:`2021-3764`, :cve:`2021-3772`, :cve:`2021-38160`, :cve:`2021-38166`, :cve:`2021-38198`, :cve:`2021-38199`, :cve:`2021-38200`, :cve:`2021-38201`, :cve:`2021-38202`, :cve:`2021-38203`, :cve:`2021-38204`, :cve:`2021-38205`, :cve:`2021-38206`, :cve:`2021-38207`, :cve:`2021-38208`, :cve:`2021-38209`, :cve:`2021-38300`, :cve:`2021-3894`, :cve:`2021-3896`, :cve:`2021-3923`, :cve:`2021-39633`, :cve:`2021-39634`, :cve:`2021-39636`, :cve:`2021-39648`, :cve:`2021-39656`, :cve:`2021-39657`, :cve:`2021-39685`, :cve:`2021-39686`, :cve:`2021-39698`, :cve:`2021-39711`, :cve:`2021-39713`, :cve:`2021-39714`, :cve:`2021-4001`, :cve:`2021-4002`, :cve:`2021-4028`, :cve:`2021-4032`, :cve:`2021-4037`, :cve:`2021-40490`, :cve:`2021-4083`, :cve:`2021-4090`, :cve:`2021-4093`, :cve:`2021-4095`, :cve:`2021-41073`, :cve:`2021-4135`, :cve:`2021-4148`, :cve:`2021-4149`, :cve:`2021-4154`, :cve:`2021-4155`, :cve:`2021-4157`, :cve:`2021-4159`, :cve:`2021-41864`, :cve:`2021-4197`, :cve:`2021-42008`, :cve:`2021-4202`, :cve:`2021-4203`, :cve:`2021-4218`, :cve:`2021-42252`, :cve:`2021-42327`, :cve:`2021-42739`, :cve:`2021-43056`, :cve:`2021-43057`, :cve:`2021-43267`, :cve:`2021-43389`, :cve:`2021-43975`, :cve:`2021-43976`, :cve:`2021-44733`, :cve:`2021-45095`, :cve:`2021-45100`, :cve:`2021-45402`, :cve:`2021-45469`, :cve:`2021-45480`, :cve:`2021-45485`, :cve:`2021-45486`, :cve:`2021-45868`, :cve:`2021-46283`, :cve:`2022-0001`, :cve:`2022-0002`, :cve:`2022-0168`, :cve:`2022-0171`, :cve:`2022-0185`, :cve:`2022-0264`, :cve:`2022-0286`, :cve:`2022-0322`, :cve:`2022-0330`, :cve:`2022-0433`, :cve:`2022-0435`, :cve:`2022-0487`, :cve:`2022-0492`, :cve:`2022-0494`, :cve:`2022-0516`, :cve:`2022-0617`, :cve:`2022-0644`, :cve:`2022-0646`, :cve:`2022-0742`, :cve:`2022-0812`, :cve:`2022-0847`, :cve:`2022-0850`, :cve:`2022-0854`, :cve:`2022-0995`, :cve:`2022-1011`, :cve:`2022-1012`, :cve:`2022-1015`, :cve:`2022-1016`, :cve:`2022-1043`, :cve:`2022-1048`, :cve:`2022-1055`, :cve:`2022-1158`, :cve:`2022-1184`, :cve:`2022-1195`, :cve:`2022-1198`, :cve:`2022-1199`, :cve:`2022-1204`, :cve:`2022-1205`, :cve:`2022-1353`, :cve:`2022-1419`, :cve:`2022-1462`, :cve:`2022-1516`, :cve:`2022-1651`, :cve:`2022-1652`, :cve:`2022-1671`, :cve:`2022-1678`, :cve:`2022-1679`, :cve:`2022-1729`, :cve:`2022-1734`, :cve:`2022-1786`, :cve:`2022-1789`, :cve:`2022-1836`, :cve:`2022-1852`, :cve:`2022-1882`, :cve:`2022-1943`, :cve:`2022-1966`, :cve:`2022-1972`, :cve:`2022-1973`, :cve:`2022-1974`, :cve:`2022-1975`, :cve:`2022-1976`, :cve:`2022-1998`, :cve:`2022-20008`, :cve:`2022-20132`, :cve:`2022-20141`, :cve:`2022-20153`, :cve:`2022-20154`, :cve:`2022-20158`, :cve:`2022-20166`, :cve:`2022-20368`, :cve:`2022-20369`, :cve:`2022-20421`, :cve:`2022-20422`, :cve:`2022-20423`, :cve_mitre:`2022-20565`, :cve:`2022-20566`, :cve:`2022-20567`, :cve:`2022-20572`, :cve:`2022-2078`, :cve:`2022-21123`, :cve:`2022-21125`, :cve:`2022-21166`, :cve:`2022-21385`, :cve:`2022-21499`, :cve_mitre:`2022-21505`, :cve:`2022-2153`, :cve:`2022-2196`, :cve_mitre:`2022-22942`, :cve:`2022-23036`, :cve:`2022-23037`, :cve:`2022-23038`, :cve:`2022-23039`, :cve:`2022-23040`, :cve:`2022-23041`, :cve:`2022-23042`, :cve:`2022-2308`, :cve:`2022-2318`, :cve:`2022-2380`, :cve:`2022-23816`, :cve:`2022-23960`, :cve:`2022-24122`, :cve:`2022-24448`, :cve:`2022-24958`, :cve:`2022-24959`, :cve:`2022-2503`, :cve:`2022-25258`, :cve:`2022-25375`, :cve:`2022-25636`, :cve_mitre:`2022-2585`, :cve_mitre:`2022-2586`, :cve_mitre:`2022-2588`, :cve:`2022-2590`, :cve_mitre:`2022-2602`, :cve:`2022-26365`, :cve:`2022-26373`, :cve:`2022-2639`, :cve:`2022-26490`, :cve:`2022-2663`, :cve:`2022-26966`, :cve:`2022-27223`, :cve:`2022-27666`, :cve:`2022-2785`, :cve:`2022-27950`, :cve:`2022-28356`, :cve:`2022-28388`, :cve:`2022-28389`, :cve:`2022-28390`, :cve:`2022-2873`, :cve:`2022-28796`, :cve:`2022-28893`, :cve:`2022-2905`, :cve:`2022-29156`, :cve:`2022-2938`, :cve:`2022-29581`, :cve:`2022-29582`, :cve:`2022-2959`, :cve:`2022-2964`, :cve:`2022-2977`, :cve:`2022-2978`, :cve:`2022-29900`, :cve:`2022-29901`, :cve:`2022-29968`, :cve:`2022-3028`, :cve:`2022-30594`, :cve:`2022-3061`, :cve:`2022-3077`, :cve:`2022-3078`, :cve:`2022-3103`, :cve:`2022-3104`, :cve:`2022-3105`, :cve:`2022-3106`, :cve:`2022-3107`, :cve:`2022-3110`, :cve:`2022-3111`, :cve:`2022-3112`, :cve:`2022-3113`, :cve:`2022-3114`, :cve:`2022-3115`, :cve:`2022-3169`, :cve:`2022-3170`, :cve:`2022-3202`, :cve:`2022-32250`, :cve:`2022-32296`, :cve:`2022-3239`, :cve:`2022-32981`, :cve:`2022-3303`, :cve:`2022-33740`, :cve:`2022-33741`, :cve:`2022-33742`, :cve:`2022-33743`, :cve:`2022-33744`, :cve:`2022-33981`, :cve:`2022-3424`, :cve:`2022-3435`, :cve:`2022-34494`, :cve:`2022-34495`, :cve:`2022-34918`, :cve:`2022-3521`, :cve:`2022-3524`, :cve:`2022-3526`, :cve:`2022-3531`, :cve:`2022-3532`, :cve:`2022-3534`, :cve:`2022-3535`, :cve:`2022-3541`, :cve:`2022-3542`, :cve:`2022-3543`, :cve:`2022-3545`, :cve:`2022-3564`, :cve:`2022-3565`, :cve:`2022-3577`, :cve:`2022-3586`, :cve:`2022-3594`, :cve:`2022-36123`, :cve:`2022-3619`, :cve:`2022-3621`, :cve:`2022-3623`, :cve:`2022-3625`, :cve:`2022-3628`, :cve:`2022-36280`, :cve:`2022-3629`, :cve:`2022-3630`, :cve:`2022-3633`, :cve:`2022-3635`, :cve:`2022-3640`, :cve:`2022-3643`, :cve:`2022-3646`, :cve:`2022-3649`, :cve:`2022-36879`, :cve:`2022-36946`, :cve:`2022-3707`, :cve:`2022-3910`, :cve:`2022-39189`, :cve:`2022-39190`, :cve:`2022-3977`, :cve:`2022-39842`, :cve:`2022-40307`, :cve:`2022-40476`, :cve:`2022-40768`, :cve:`2022-4095`, :cve:`2022-40982`, :cve:`2022-41218`, :cve:`2022-41222`, :cve:`2022-4127`, :cve:`2022-4128`, :cve:`2022-4129`, :cve:`2022-4139`, :cve:`2022-41674`, :cve:`2022-41849`, :cve:`2022-41850`, :cve:`2022-41858`, :cve:`2022-42328`, :cve:`2022-42329`, :cve:`2022-42432`, :cve:`2022-4269`, :cve:`2022-42703`, :cve:`2022-42719`, :cve:`2022-42720`, :cve:`2022-42721`, :cve:`2022-42722`, :cve:`2022-42895`, :cve:`2022-42896`, :cve:`2022-43750`, :cve:`2022-4378`, :cve:`2022-4379`, :cve:`2022-4382`, :cve:`2022-43945`, :cve:`2022-45869`, :cve:`2022-45886`, :cve:`2022-45887`, :cve:`2022-45888`, :cve:`2022-45919`, :cve:`2022-45934`, :cve:`2022-4662`, :cve:`2022-4744`, :cve:`2022-47518`, :cve:`2022-47519`, :cve:`2022-47520`, :cve:`2022-47521`, :cve:`2022-47929`, :cve:`2022-47938`, :cve:`2022-47939`, :cve:`2022-47940`, :cve:`2022-47941`, :cve:`2022-47942`, :cve:`2022-47943`, :cve:`2022-4842`, :cve:`2022-48423`, :cve:`2022-48424`, :cve:`2022-48425`, :cve:`2022-48502`, :cve:`2023-0030`, :cve:`2023-0045`, :cve:`2023-0047`, :cve:`2023-0122`, :cve:`2023-0160`, :cve:`2023-0179`, :cve:`2023-0210`, :cve:`2023-0240`, :cve:`2023-0266`, :cve:`2023-0394`, :cve:`2023-0458`, :cve:`2023-0459`, :cve:`2023-0461`, :cve:`2023-0468`, :cve:`2023-0469`, :cve:`2023-0590`, :cve:`2023-0615`, :cve_mitre:`2023-1032`, :cve:`2023-1073`, :cve:`2023-1074`, :cve:`2023-1076`, :cve:`2023-1077`, :cve:`2023-1078`, :cve:`2023-1079`, :cve:`2023-1095`, :cve:`2023-1118`, :cve:`2023-1192`, :cve:`2023-1194`, :cve:`2023-1195`, :cve:`2023-1206`, :cve:`2023-1249`, :cve:`2023-1252`, :cve:`2023-1281`, :cve:`2023-1380`, :cve:`2023-1382`, :cve:`2023-1390`, :cve:`2023-1513`, :cve:`2023-1582`, :cve:`2023-1583`, :cve:`2023-1611`, :cve:`2023-1637`, :cve:`2023-1652`, :cve:`2023-1670`, :cve:`2023-1829`, :cve:`2023-1838`, :cve:`2023-1855`, :cve:`2023-1859`, :cve:`2023-1989`, :cve:`2023-1990`, :cve:`2023-1998`, :cve:`2023-2002`, :cve:`2023-2006`, :cve:`2023-2008`, :cve:`2023-2019`, :cve:`2023-20569`, :cve:`2023-20588`, :cve:`2023-20593`, :cve:`2023-20938`, :cve:`2023-21102`, :cve:`2023-21106`, :cve:`2023-2124`, :cve:`2023-21255`, :cve:`2023-21264`, :cve:`2023-2156`, :cve:`2023-2162`, :cve:`2023-2163`, :cve:`2023-2166`, :cve:`2023-2177`, :cve:`2023-2194`, :cve:`2023-2235`, :cve:`2023-2236`, :cve:`2023-2248`, :cve:`2023-2269`, :cve:`2023-22996`, :cve:`2023-22997`, :cve:`2023-22998`, :cve:`2023-22999`, :cve:`2023-23001`, :cve:`2023-23002`, :cve:`2023-23003`, :cve:`2023-23004`, :cve:`2023-23005`, :cve:`2023-23006`, :cve:`2023-23454`, :cve:`2023-23455`, :cve:`2023-23559`, :cve:`2023-2483`, :cve:`2023-25012`, :cve:`2023-2513`, :cve:`2023-25775`, :cve:`2023-2598`, :cve:`2023-26544`, :cve:`2023-26545`, :cve:`2023-26605`, :cve:`2023-26606`, :cve:`2023-26607`, :cve:`2023-28327`, :cve:`2023-28328`, :cve:`2023-28410`, :cve:`2023-28464`, :cve:`2023-28466`, :cve:`2023-2860`, :cve:`2023-28772`, :cve:`2023-28866`, :cve:`2023-2898`, :cve:`2023-2985`, :cve:`2023-3006`, :cve:`2023-30456`, :cve:`2023-30772`, :cve:`2023-3090`, :cve:`2023-3106`, :cve:`2023-3111`, :cve:`2023-3117`, :cve:`2023-31248`, :cve:`2023-3141`, :cve:`2023-31436`, :cve:`2023-3159`, :cve:`2023-3161`, :cve:`2023-3212`, :cve:`2023-3220`, :cve:`2023-32233`, :cve:`2023-32247`, :cve:`2023-32248`, :cve:`2023-32250`, :cve:`2023-32252`, :cve:`2023-32254`, :cve:`2023-32257`, :cve:`2023-32258`, :cve:`2023-32269`, :cve:`2023-3268`, :cve:`2023-3269`, :cve:`2023-3312`, :cve:`2023-3317`, :cve:`2023-33203`, :cve:`2023-33250`, :cve:`2023-33288`, :cve:`2023-3338`, :cve:`2023-3355`, :cve:`2023-3357`, :cve:`2023-3358`, :cve:`2023-3359`, :cve:`2023-3390`, :cve:`2023-33951`, :cve:`2023-33952`, :cve:`2023-34255`, :cve:`2023-34256`, :cve:`2023-34319`, :cve:`2023-3439`, :cve:`2023-35001`, :cve:`2023-3567`, :cve:`2023-35788`, :cve:`2023-35823`, :cve:`2023-35824`, :cve:`2023-35826`, :cve:`2023-35828`, :cve:`2023-35829`, :cve:`2023-3609`, :cve:`2023-3610`, :cve:`2023-3611`, :cve:`2023-37453`, :cve:`2023-3772`, :cve:`2023-3773`, :cve:`2023-3776`, :cve:`2023-3777`, :cve:`2023-3812`, :cve:`2023-38409`, :cve:`2023-38426`, :cve:`2023-38427`, :cve:`2023-38428`, :cve:`2023-38429`, :cve:`2023-38430`, :cve:`2023-38431`, :cve:`2023-38432`, :cve:`2023-3863`, :cve_mitre:`2023-3865`, :cve_mitre:`2023-3866`, :cve_mitre:`2023-3867`, :cve:`2023-39189`, :cve:`2023-39192`, :cve:`2023-39193`, :cve:`2023-39194`, :cve:`2023-4004`, :cve:`2023-4015`, :cve:`2023-40283`, :cve:`2023-4128`, :cve:`2023-4132`, :cve:`2023-4147`, :cve:`2023-4155`, :cve:`2023-4194`, :cve:`2023-4206`, :cve:`2023-4207`, :cve:`2023-4208`, :cve:`2023-4273`, :cve:`2023-42752`, :cve:`2023-42753`, :cve:`2023-42755`, :cve:`2023-42756`, :cve:`2023-4385`, :cve:`2023-4387`, :cve:`2023-4389`, :cve:`2023-4394`, :cve:`2023-44466`, :cve:`2023-4459`, :cve:`2023-4569`, :cve:`2023-45862`, :cve:`2023-45871`, :cve:`2023-4611`, :cve:`2023-4623`, :cve:`2023-4732`, :cve:`2023-4921` and :cve:`2023-5345` -- linux-yocto/5.15: Ignore :cve:`2022-45886`, :cve:`2022-45887`, :cve:`2022-45919`, :cve:`2022-48502`, :cve:`2023-0160`, :cve:`2023-1206`, :cve:`2023-20593`, :cve:`2023-21264`, :cve:`2023-2898`, :cve:`2023-31248`, :cve:`2023-33250`, :cve:`2023-34319`, :cve:`2023-35001`, :cve:`2023-3611`, :cve:`2023-37453`, :cve:`2023-3773`, :cve:`2023-3776`, :cve:`2023-3777`, :cve:`2023-38432`, :cve:`2023-3863`, :cve_mitre:`2023-3865`, :cve_mitre:`2023-3866`, :cve:`2023-4004`, :cve:`2023-4015`, :cve:`2023-4132`, :cve:`2023-4147`, :cve:`2023-4194`, :cve:`2023-4385`, :cve:`2023-4387`, :cve:`2023-4389`, :cve:`2023-4394`, :cve:`2023-4459` and :cve:`2023-4611` -- openssl: Fix :cve:`2023-4807` and :cve:`2023-5363` -- python3-git: Fix :cve:`2023-40590` and :cve:`2023-41040` -- python3-urllib3: Fix :cve:`2023-43804` -- qemu: Ignore :cve:`2023-2680` -- ruby: Fix :cve:`2023-36617` +- linux-yocto/5.10: Ignore :cve_nist:`2003-1604`, :cve_nist:`2004-0230`, :cve_nist:`2006-3635`, :cve_nist:`2006-5331`, :cve_nist:`2006-6128`, :cve_nist:`2007-4774`, :cve_nist:`2007-6761`, :cve_nist:`2007-6762`, :cve_nist:`2008-7316`, :cve_nist:`2009-2692`, :cve_nist:`2010-0008`, :cve_nist:`2010-3432`, :cve_nist:`2010-4648`, :cve_nist:`2010-5313`, :cve_nist:`2010-5328`, :cve_nist:`2010-5329`, :cve_nist:`2010-5331`, :cve_nist:`2010-5332`, :cve_nist:`2011-4098`, :cve_nist:`2011-4131`, :cve_nist:`2011-4915`, :cve_nist:`2011-5321`, :cve_nist:`2011-5327`, :cve_nist:`2012-0957`, :cve_nist:`2012-2119`, :cve_nist:`2012-2136`, :cve_nist:`2012-2137`, :cve_nist:`2012-2313`, :cve_nist:`2012-2319`, :cve_nist:`2012-2372`, :cve_nist:`2012-2375`, :cve_nist:`2012-2390`, :cve_nist:`2012-2669`, :cve_nist:`2012-2744`, :cve_nist:`2012-2745`, :cve_nist:`2012-3364`, :cve_nist:`2012-3375`, :cve_nist:`2012-3400`, :cve_nist:`2012-3412`, :cve_nist:`2012-3430`, :cve_nist:`2012-3510`, :cve_nist:`2012-3511`, :cve_nist:`2012-3520`, :cve_nist:`2012-3552`, :cve_nist:`2012-4398`, :cve_nist:`2012-4444`, :cve_nist:`2012-4461`, :cve_nist:`2012-4467`, :cve_nist:`2012-4508`, :cve_nist:`2012-4530`, :cve_nist:`2012-4565`, :cve_nist:`2012-5374`, :cve_nist:`2012-5375`, :cve_nist:`2012-5517`, :cve_nist:`2012-6536`, :cve_nist:`2012-6537`, :cve_nist:`2012-6538`, :cve_nist:`2012-6539`, :cve_nist:`2012-6540`, :cve_nist:`2012-6541`, :cve_nist:`2012-6542`, :cve_nist:`2012-6543`, :cve_nist:`2012-6544`, :cve_nist:`2012-6545`, :cve_nist:`2012-6546`, :cve_nist:`2012-6547`, :cve_nist:`2012-6548`, :cve_nist:`2012-6549`, :cve_nist:`2012-6638`, :cve_nist:`2012-6647`, :cve_nist:`2012-6657`, :cve_nist:`2012-6689`, :cve_nist:`2012-6701`, :cve_nist:`2012-6703`, :cve_nist:`2012-6704`, :cve_nist:`2012-6712`, :cve_nist:`2013-0160`, :cve_nist:`2013-0190`, :cve_nist:`2013-0216`, :cve_nist:`2013-0217`, :cve_nist:`2013-0228`, :cve_nist:`2013-0231`, :cve_nist:`2013-0268`, :cve_nist:`2013-0290`, :cve_nist:`2013-0309`, :cve_nist:`2013-0310`, :cve_nist:`2013-0311`, :cve_nist:`2013-0313`, :cve_nist:`2013-0343`, :cve_nist:`2013-0349`, :cve_nist:`2013-0871`, :cve_nist:`2013-0913`, :cve_nist:`2013-0914`, :cve_nist:`2013-1059`, :cve_nist:`2013-1763`, :cve_nist:`2013-1767`, :cve_nist:`2013-1772`, :cve_nist:`2013-1773`, :cve_nist:`2013-1774`, :cve_nist:`2013-1792`, :cve_nist:`2013-1796`, :cve_nist:`2013-1797`, :cve_nist:`2013-1798`, :cve_nist:`2013-1819`, :cve_nist:`2013-1826`, :cve_nist:`2013-1827`, :cve_nist:`2013-1828`, :cve_nist:`2013-1848`, :cve_nist:`2013-1858`, :cve_nist:`2013-1860`, :cve_nist:`2013-1928`, :cve_nist:`2013-1929`, :cve_nist:`2013-1943`, :cve_nist:`2013-1956`, :cve_nist:`2013-1957`, :cve_nist:`2013-1958`, :cve_nist:`2013-1959`, :cve_nist:`2013-1979`, :cve_nist:`2013-2015`, :cve_nist:`2013-2017`, :cve_nist:`2013-2058`, :cve_nist:`2013-2094`, :cve_nist:`2013-2128`, :cve_nist:`2013-2140`, :cve_nist:`2013-2141`, :cve_nist:`2013-2146`, :cve_nist:`2013-2147`, :cve_nist:`2013-2148`, :cve_nist:`2013-2164`, :cve_nist:`2013-2206`, :cve_nist:`2013-2232`, :cve_nist:`2013-2234`, :cve_nist:`2013-2237`, :cve_nist:`2013-2546`, :cve_nist:`2013-2547`, :cve_nist:`2013-2548`, :cve_nist:`2013-2596`, :cve_nist:`2013-2634`, :cve_nist:`2013-2635`, :cve_nist:`2013-2636`, :cve_nist:`2013-2850`, :cve_nist:`2013-2851`, :cve_nist:`2013-2852`, :cve_nist:`2013-2888`, :cve_nist:`2013-2889`, :cve_nist:`2013-2890`, :cve_nist:`2013-2891`, :cve_nist:`2013-2892`, :cve_nist:`2013-2893`, :cve_nist:`2013-2894`, :cve_nist:`2013-2895`, :cve_nist:`2013-2896`, :cve_nist:`2013-2897`, :cve_nist:`2013-2898`, :cve_nist:`2013-2899`, :cve_nist:`2013-2929`, :cve_nist:`2013-2930`, :cve_nist:`2013-3076`, :cve_nist:`2013-3222`, :cve_nist:`2013-3223`, :cve_nist:`2013-3224`, :cve_nist:`2013-3225`, :cve_nist:`2013-3226`, :cve_nist:`2013-3227`, :cve_nist:`2013-3228`, :cve_nist:`2013-3229`, :cve_nist:`2013-3230`, :cve_nist:`2013-3231`, :cve_nist:`2013-3232`, :cve_nist:`2013-3233`, :cve_nist:`2013-3234`, :cve_nist:`2013-3235`, :cve_nist:`2013-3236`, :cve_nist:`2013-3237`, :cve_nist:`2013-3301`, :cve_nist:`2013-3302`, :cve_nist:`2013-4125`, :cve_nist:`2013-4127`, :cve_nist:`2013-4129`, :cve_nist:`2013-4162`, :cve_nist:`2013-4163`, :cve_nist:`2013-4205`, :cve_nist:`2013-4220`, :cve_nist:`2013-4247`, :cve_nist:`2013-4254`, :cve_nist:`2013-4270`, :cve_nist:`2013-4299`, :cve_nist:`2013-4300`, :cve_nist:`2013-4312`, :cve_nist:`2013-4343`, :cve_nist:`2013-4345`, :cve_nist:`2013-4348`, :cve_nist:`2013-4350`, :cve_nist:`2013-4387`, :cve_nist:`2013-4470`, :cve_nist:`2013-4483`, :cve_nist:`2013-4511`, :cve_nist:`2013-4512`, :cve_nist:`2013-4513`, :cve_nist:`2013-4514`, :cve_nist:`2013-4515`, :cve_nist:`2013-4516`, :cve_nist:`2013-4563`, :cve_nist:`2013-4579`, :cve_nist:`2013-4587`, :cve_nist:`2013-4588`, :cve_nist:`2013-4591`, :cve_nist:`2013-4592`, :cve_nist:`2013-5634`, :cve_nist:`2013-6282`, :cve_nist:`2013-6367`, :cve_nist:`2013-6368`, :cve_nist:`2013-6376`, :cve_nist:`2013-6378`, :cve_nist:`2013-6380`, :cve_nist:`2013-6381`, :cve_nist:`2013-6382`, :cve_nist:`2013-6383`, :cve_nist:`2013-6431`, :cve_nist:`2013-6432`, :cve_nist:`2013-6885`, :cve_nist:`2013-7026`, :cve_nist:`2013-7027`, :cve_nist:`2013-7263`, :cve_nist:`2013-7264`, :cve_nist:`2013-7265`, :cve_nist:`2013-7266`, :cve_nist:`2013-7267`, :cve_nist:`2013-7268`, :cve_nist:`2013-7269`, :cve_nist:`2013-7270`, :cve_nist:`2013-7271`, :cve_nist:`2013-7281`, :cve_nist:`2013-7339`, :cve_nist:`2013-7348`, :cve_nist:`2013-7421`, :cve_nist:`2013-7446`, :cve_nist:`2013-7470`, :cve_nist:`2014-0038`, :cve_nist:`2014-0049`, :cve_nist:`2014-0055`, :cve_nist:`2014-0069`, :cve_nist:`2014-0077`, :cve_nist:`2014-0100`, :cve_nist:`2014-0101`, :cve_nist:`2014-0102`, :cve_nist:`2014-0131`, :cve_nist:`2014-0155`, :cve_nist:`2014-0181`, :cve_nist:`2014-0196`, :cve_nist:`2014-0203`, :cve_nist:`2014-0205`, :cve_nist:`2014-0206`, :cve_nist:`2014-1438`, :cve_nist:`2014-1444`, :cve_nist:`2014-1445`, :cve_nist:`2014-1446`, :cve_nist:`2014-1690`, :cve_nist:`2014-1737`, :cve_nist:`2014-1738`, :cve_nist:`2014-1739`, :cve_nist:`2014-1874`, :cve_nist:`2014-2038`, :cve_nist:`2014-2039`, :cve_nist:`2014-2309`, :cve_nist:`2014-2523`, :cve_nist:`2014-2568`, :cve_nist:`2014-2580`, :cve_nist:`2014-2672`, :cve_nist:`2014-2673`, :cve_nist:`2014-2678`, :cve_nist:`2014-2706`, :cve_nist:`2014-2739`, :cve_nist:`2014-2851`, :cve_nist:`2014-2889`, :cve_nist:`2014-3122`, :cve_nist:`2014-3144`, :cve_nist:`2014-3145`, :cve_nist:`2014-3153`, :cve_nist:`2014-3180`, :cve_nist:`2014-3181`, :cve_nist:`2014-3182`, :cve_nist:`2014-3183`, :cve_nist:`2014-3184`, :cve_nist:`2014-3185`, :cve_nist:`2014-3186`, :cve_nist:`2014-3534`, :cve_nist:`2014-3535`, :cve_nist:`2014-3601`, :cve_nist:`2014-3610`, :cve_nist:`2014-3611`, :cve_nist:`2014-3631`, :cve_nist:`2014-3645`, :cve_nist:`2014-3646`, :cve_nist:`2014-3647`, :cve_nist:`2014-3673`, :cve_nist:`2014-3687`, :cve_nist:`2014-3688`, :cve_nist:`2014-3690`, :cve_nist:`2014-3917`, :cve_nist:`2014-3940`, :cve_nist:`2014-4014`, :cve_nist:`2014-4027`, :cve_nist:`2014-4157`, :cve_nist:`2014-4171`, :cve_nist:`2014-4508`, :cve_nist:`2014-4608`, :cve_nist:`2014-4611`, :cve_nist:`2014-4652`, :cve_nist:`2014-4653`, :cve_nist:`2014-4654`, :cve_nist:`2014-4655`, :cve_nist:`2014-4656`, :cve_nist:`2014-4667`, :cve_nist:`2014-4699`, :cve_nist:`2014-4943`, :cve_nist:`2014-5045`, :cve_nist:`2014-5077`, :cve_nist:`2014-5206`, :cve_nist:`2014-5207`, :cve_nist:`2014-5471`, :cve_nist:`2014-5472`, :cve_nist:`2014-6410`, :cve_nist:`2014-6416`, :cve_nist:`2014-6417`, :cve_nist:`2014-6418`, :cve_nist:`2014-7145`, :cve_nist:`2014-7283`, :cve_nist:`2014-7284`, :cve_nist:`2014-7822`, :cve_nist:`2014-7825`, :cve_nist:`2014-7826`, :cve_nist:`2014-7841`, :cve_nist:`2014-7842`, :cve_nist:`2014-7843`, :cve_nist:`2014-7970`, :cve_nist:`2014-7975`, :cve_nist:`2014-8086`, :cve_nist:`2014-8133`, :cve_nist:`2014-8134`, :cve_nist:`2014-8159`, :cve_nist:`2014-8160`, :cve_nist:`2014-8171`, :cve_nist:`2014-8172`, :cve_nist:`2014-8173`, :cve_nist:`2014-8369`, :cve_nist:`2014-8480`, :cve_nist:`2014-8481`, :cve_nist:`2014-8559`, :cve_nist:`2014-8709`, :cve_nist:`2014-8884`, :cve_nist:`2014-8989`, :cve_nist:`2014-9090`, :cve_nist:`2014-9322`, :cve_nist:`2014-9419`, :cve_nist:`2014-9420`, :cve_nist:`2014-9428`, :cve_nist:`2014-9529`, :cve_nist:`2014-9584`, :cve_nist:`2014-9585`, :cve_nist:`2014-9644`, :cve_nist:`2014-9683`, :cve_nist:`2014-9710`, :cve_nist:`2014-9715`, :cve_nist:`2014-9717`, :cve_nist:`2014-9728`, :cve_nist:`2014-9729`, :cve_nist:`2014-9730`, :cve_nist:`2014-9731`, :cve_nist:`2014-9803`, :cve_nist:`2014-9870`, :cve_nist:`2014-9888`, :cve_nist:`2014-9895`, :cve_nist:`2014-9903`, :cve_nist:`2014-9904`, :cve_nist:`2014-9914`, :cve_nist:`2014-9922`, :cve_nist:`2014-9940`, :cve_nist:`2015-0239`, :cve_nist:`2015-0274`, :cve_nist:`2015-0275`, :cve_nist:`2015-1333`, :cve_nist:`2015-1339`, :cve_nist:`2015-1350`, :cve_nist:`2015-1420`, :cve_nist:`2015-1421`, :cve_nist:`2015-1465`, :cve_nist:`2015-1573`, :cve_nist:`2015-1593`, :cve_nist:`2015-1805`, :cve_nist:`2015-2041`, :cve_nist:`2015-2042`, :cve_nist:`2015-2150`, :cve_nist:`2015-2666`, :cve_nist:`2015-2672`, :cve_nist:`2015-2686`, :cve_nist:`2015-2830`, :cve_nist:`2015-2922`, :cve_nist:`2015-2925`, :cve_nist:`2015-3212`, :cve_nist:`2015-3214`, :cve_nist:`2015-3288`, :cve_nist:`2015-3290`, :cve_nist:`2015-3291`, :cve_nist:`2015-3331`, :cve_nist:`2015-3339`, :cve_nist:`2015-3636`, :cve_nist:`2015-4001`, :cve_nist:`2015-4002`, :cve_nist:`2015-4003`, :cve_nist:`2015-4004`, :cve_nist:`2015-4036`, :cve_nist:`2015-4167`, :cve_nist:`2015-4170`, :cve_nist:`2015-4176`, :cve_nist:`2015-4177`, :cve_nist:`2015-4178`, :cve_nist:`2015-4692`, :cve_nist:`2015-4700`, :cve_nist:`2015-5156`, :cve_nist:`2015-5157`, :cve_nist:`2015-5257`, :cve_nist:`2015-5283`, :cve_nist:`2015-5307`, :cve_nist:`2015-5327`, :cve_nist:`2015-5364`, :cve_nist:`2015-5366`, :cve_nist:`2015-5697`, :cve_nist:`2015-5706`, :cve_nist:`2015-5707`, :cve_nist:`2015-6252`, :cve_nist:`2015-6526`, :cve_nist:`2015-6937`, :cve_nist:`2015-7509`, :cve_nist:`2015-7513`, :cve_nist:`2015-7515`, :cve_nist:`2015-7550`, :cve_nist:`2015-7566`, :cve_nist:`2015-7613`, :cve_nist:`2015-7799`, :cve_nist:`2015-7833`, :cve_nist:`2015-7872`, :cve_nist:`2015-7884`, :cve_nist:`2015-7885`, :cve_nist:`2015-7990`, :cve_nist:`2015-8104`, :cve_nist:`2015-8215`, :cve_nist:`2015-8324`, :cve_nist:`2015-8374`, :cve_nist:`2015-8539`, :cve_nist:`2015-8543`, :cve_nist:`2015-8550`, :cve_nist:`2015-8551`, :cve_nist:`2015-8552`, :cve_nist:`2015-8553`, :cve_nist:`2015-8569`, :cve_nist:`2015-8575`, :cve_nist:`2015-8660`, :cve_nist:`2015-8709`, :cve_nist:`2015-8746`, :cve_nist:`2015-8767`, :cve_nist:`2015-8785`, :cve_nist:`2015-8787`, :cve_nist:`2015-8812`, :cve_nist:`2015-8816`, :cve_nist:`2015-8830`, :cve_nist:`2015-8839`, :cve_nist:`2015-8844`, :cve_nist:`2015-8845`, :cve_nist:`2015-8950`, :cve_nist:`2015-8952`, :cve_nist:`2015-8953`, :cve_nist:`2015-8955`, :cve_nist:`2015-8956`, :cve_nist:`2015-8961`, :cve_nist:`2015-8962`, :cve_nist:`2015-8963`, :cve_nist:`2015-8964`, :cve_nist:`2015-8966`, :cve_nist:`2015-8967`, :cve_nist:`2015-8970`, :cve_nist:`2015-9004`, :cve_nist:`2015-9016`, :cve_nist:`2015-9289`, :cve_nist:`2016-0617`, :cve_nist:`2016-0723`, :cve_nist:`2016-0728`, :cve_nist:`2016-0758`, :cve_nist:`2016-0821`, :cve_nist:`2016-0823`, :cve_nist:`2016-10044`, :cve_nist:`2016-10088`, :cve_nist:`2016-10147`, :cve_nist:`2016-10150`, :cve_nist:`2016-10153`, :cve_nist:`2016-10154`, :cve_nist:`2016-10200`, :cve_nist:`2016-10208`, :cve_nist:`2016-10229`, :cve_nist:`2016-10318`, :cve_nist:`2016-10723`, :cve_nist:`2016-10741`, :cve_nist:`2016-10764`, :cve_nist:`2016-10905`, :cve_nist:`2016-10906`, :cve_nist:`2016-10907`, :cve_nist:`2016-1237`, :cve_nist:`2016-1575`, :cve_nist:`2016-1576`, :cve_nist:`2016-1583`, :cve_nist:`2016-2053`, :cve_nist:`2016-2069`, :cve_nist:`2016-2070`, :cve_nist:`2016-2085`, :cve_nist:`2016-2117`, :cve_nist:`2016-2143`, :cve_nist:`2016-2184`, :cve_nist:`2016-2185`, :cve_nist:`2016-2186`, :cve_nist:`2016-2187`, :cve_nist:`2016-2188`, :cve_nist:`2016-2383`, :cve_nist:`2016-2384`, :cve_nist:`2016-2543`, :cve_nist:`2016-2544`, :cve_nist:`2016-2545`, :cve_nist:`2016-2546`, :cve_nist:`2016-2547`, :cve_nist:`2016-2548`, :cve_nist:`2016-2549`, :cve_nist:`2016-2550`, :cve_nist:`2016-2782`, :cve_nist:`2016-2847`, :cve_nist:`2016-3044`, :cve_nist:`2016-3070`, :cve_nist:`2016-3134`, :cve_nist:`2016-3135`, :cve_nist:`2016-3136`, :cve_nist:`2016-3137`, :cve_nist:`2016-3138`, :cve_nist:`2016-3139`, :cve_nist:`2016-3140`, :cve_nist:`2016-3156`, :cve_nist:`2016-3157`, :cve_nist:`2016-3672`, :cve_nist:`2016-3689`, :cve_nist:`2016-3713`, :cve_nist:`2016-3841`, :cve_nist:`2016-3857`, :cve_nist:`2016-3951`, :cve_nist:`2016-3955`, :cve_nist:`2016-3961`, :cve_nist:`2016-4440`, :cve_nist:`2016-4470`, :cve_nist:`2016-4482`, :cve_nist:`2016-4485`, :cve_nist:`2016-4486`, :cve_nist:`2016-4557`, :cve_nist:`2016-4558`, :cve_nist:`2016-4565`, :cve_nist:`2016-4568`, :cve_nist:`2016-4569`, :cve_nist:`2016-4578`, :cve_nist:`2016-4580`, :cve_nist:`2016-4581`, :cve_nist:`2016-4794`, :cve_nist:`2016-4805`, :cve_nist:`2016-4913`, :cve_nist:`2016-4951`, :cve_nist:`2016-4997`, :cve_nist:`2016-4998`, :cve_nist:`2016-5195`, :cve_nist:`2016-5243`, :cve_nist:`2016-5244`, :cve_nist:`2016-5400`, :cve_nist:`2016-5412`, :cve_nist:`2016-5696`, :cve_nist:`2016-5728`, :cve_nist:`2016-5828`, :cve_nist:`2016-5829`, :cve_nist:`2016-6130`, :cve_nist:`2016-6136`, :cve_nist:`2016-6156`, :cve_nist:`2016-6162`, :cve_nist:`2016-6187`, :cve_nist:`2016-6197`, :cve_nist:`2016-6198`, :cve_nist:`2016-6213`, :cve_nist:`2016-6327`, :cve_nist:`2016-6480`, :cve_nist:`2016-6516`, :cve_nist:`2016-6786`, :cve_nist:`2016-6787`, :cve_nist:`2016-6828`, :cve_nist:`2016-7039`, :cve_nist:`2016-7042`, :cve_nist:`2016-7097`, :cve_nist:`2016-7117`, :cve_nist:`2016-7425`, :cve_nist:`2016-7910`, :cve_nist:`2016-7911`, :cve_nist:`2016-7912`, :cve_nist:`2016-7913`, :cve_nist:`2016-7914`, :cve_nist:`2016-7915`, :cve_nist:`2016-7916`, :cve_nist:`2016-7917`, :cve_nist:`2016-8399`, :cve_nist:`2016-8405`, :cve_nist:`2016-8630`, :cve_nist:`2016-8632`, :cve_nist:`2016-8633`, :cve_nist:`2016-8636`, :cve_nist:`2016-8645`, :cve_nist:`2016-8646`, :cve_nist:`2016-8650`, :cve_nist:`2016-8655`, :cve_nist:`2016-8658`, :cve_nist:`2016-8666`, :cve_nist:`2016-9083`, :cve_nist:`2016-9084`, :cve_nist:`2016-9120`, :cve_nist:`2016-9178`, :cve_nist:`2016-9191`, :cve_nist:`2016-9313`, :cve_nist:`2016-9555`, :cve_nist:`2016-9576`, :cve_nist:`2016-9588`, :cve_nist:`2016-9604`, :cve_nist:`2016-9685`, :cve_nist:`2016-9754`, :cve_nist:`2016-9755`, :cve_nist:`2016-9756`, :cve_nist:`2016-9777`, :cve_nist:`2016-9793`, :cve_nist:`2016-9794`, :cve_nist:`2016-9806`, :cve_nist:`2016-9919`, :cve_nist:`2017-0605`, :cve_nist:`2017-0627`, :cve_nist:`2017-0750`, :cve_nist:`2017-0786`, :cve_nist:`2017-0861`, :cve_nist:`2017-1000`, :cve_nist:`2017-1000111`, :cve_nist:`2017-1000112`, :cve_nist:`2017-1000251`, :cve_nist:`2017-1000252`, :cve_nist:`2017-1000253`, :cve_nist:`2017-1000255`, :cve_nist:`2017-1000363`, :cve_nist:`2017-1000364`, :cve_nist:`2017-1000365`, :cve_nist:`2017-1000370`, :cve_nist:`2017-1000371`, :cve_nist:`2017-1000379`, :cve_nist:`2017-1000380`, :cve_nist:`2017-1000405`, :cve_nist:`2017-1000407`, :cve_nist:`2017-1000410`, :cve_nist:`2017-10661`, :cve_nist:`2017-10662`, :cve_nist:`2017-10663`, :cve_nist:`2017-10810`, :cve_nist:`2017-10911`, :cve_nist:`2017-11089`, :cve_nist:`2017-11176`, :cve_nist:`2017-11472`, :cve_nist:`2017-11473`, :cve_nist:`2017-11600`, :cve_nist:`2017-12134`, :cve_nist:`2017-12146`, :cve_nist:`2017-12153`, :cve_nist:`2017-12154`, :cve_nist:`2017-12168`, :cve_nist:`2017-12188`, :cve_nist:`2017-12190`, :cve_nist:`2017-12192`, :cve_nist:`2017-12193`, :cve_nist:`2017-12762`, :cve_nist:`2017-13080`, :cve_nist:`2017-13166`, :cve_nist:`2017-13167`, :cve_nist:`2017-13168`, :cve_nist:`2017-13215`, :cve_nist:`2017-13216`, :cve_nist:`2017-13220`, :cve_nist:`2017-13305`, :cve_nist:`2017-13686`, :cve_nist:`2017-13695`, :cve_nist:`2017-13715`, :cve_nist:`2017-14051`, :cve_nist:`2017-14106`, :cve_nist:`2017-14140`, :cve_nist:`2017-14156`, :cve_nist:`2017-14340`, :cve_nist:`2017-14489`, :cve_nist:`2017-14497`, :cve_nist:`2017-14954`, :cve_nist:`2017-14991`, :cve_nist:`2017-15102`, :cve_nist:`2017-15115`, :cve_nist:`2017-15116`, :cve_nist:`2017-15121`, :cve_nist:`2017-15126`, :cve_nist:`2017-15127`, :cve_nist:`2017-15128`, :cve_nist:`2017-15129`, :cve_nist:`2017-15265`, :cve_nist:`2017-15274`, :cve_nist:`2017-15299`, :cve_nist:`2017-15306`, :cve_nist:`2017-15537`, :cve_nist:`2017-15649`, :cve_nist:`2017-15868`, :cve_nist:`2017-15951`, :cve_nist:`2017-16525`, :cve_nist:`2017-16526`, :cve_nist:`2017-16527`, :cve_nist:`2017-16528`, :cve_nist:`2017-16529`, :cve_nist:`2017-16530`, :cve_nist:`2017-16531`, :cve_nist:`2017-16532`, :cve_nist:`2017-16533`, :cve_nist:`2017-16534`, :cve_nist:`2017-16535`, :cve_nist:`2017-16536`, :cve_nist:`2017-16537`, :cve_nist:`2017-16538`, :cve_nist:`2017-16643`, :cve_nist:`2017-16644`, :cve_nist:`2017-16645`, :cve_nist:`2017-16646`, :cve_nist:`2017-16647`, :cve_nist:`2017-16648`, :cve_nist:`2017-16649`, :cve_nist:`2017-16650`, :cve_nist:`2017-16911`, :cve_nist:`2017-16912`, :cve_nist:`2017-16913`, :cve_nist:`2017-16914`, :cve_nist:`2017-16939`, :cve_nist:`2017-16994`, :cve_nist:`2017-16995`, :cve_nist:`2017-16996`, :cve_nist:`2017-17052`, :cve_nist:`2017-17053`, :cve_nist:`2017-17448`, :cve_nist:`2017-17449`, :cve_nist:`2017-17450`, :cve_nist:`2017-17558`, :cve_nist:`2017-17712`, :cve_nist:`2017-17741`, :cve_nist:`2017-17805`, :cve_nist:`2017-17806`, :cve_nist:`2017-17807`, :cve_nist:`2017-17852`, :cve_nist:`2017-17853`, :cve_nist:`2017-17854`, :cve_nist:`2017-17855`, :cve_nist:`2017-17856`, :cve_nist:`2017-17857`, :cve_nist:`2017-17862`, :cve_nist:`2017-17863`, :cve_nist:`2017-17864`, :cve_nist:`2017-17975`, :cve_nist:`2017-18017`, :cve_nist:`2017-18075`, :cve_nist:`2017-18079`, :cve_nist:`2017-18174`, :cve_nist:`2017-18193`, :cve_nist:`2017-18200`, :cve_nist:`2017-18202`, :cve_nist:`2017-18203`, :cve_nist:`2017-18204`, :cve_nist:`2017-18208`, :cve_nist:`2017-18216`, :cve_nist:`2017-18218`, :cve_nist:`2017-18221`, :cve_nist:`2017-18222`, :cve_nist:`2017-18224`, :cve_nist:`2017-18232`, :cve_nist:`2017-18241`, :cve_nist:`2017-18249`, :cve_nist:`2017-18255`, :cve_nist:`2017-18257`, :cve_nist:`2017-18261`, :cve_nist:`2017-18270`, :cve_nist:`2017-18344`, :cve_nist:`2017-18360`, :cve_nist:`2017-18379`, :cve_nist:`2017-18509`, :cve_nist:`2017-18549`, :cve_nist:`2017-18550`, :cve_nist:`2017-18551`, :cve_nist:`2017-18552`, :cve_nist:`2017-18595`, :cve_nist:`2017-2583`, :cve_nist:`2017-2584`, :cve_nist:`2017-2596`, :cve_nist:`2017-2618`, :cve_nist:`2017-2634`, :cve_nist:`2017-2636`, :cve_nist:`2017-2647`, :cve_nist:`2017-2671`, :cve_nist:`2017-5123`, :cve_nist:`2017-5546`, :cve_nist:`2017-5547`, :cve_nist:`2017-5548`, :cve_nist:`2017-5549`, :cve_nist:`2017-5550`, :cve_nist:`2017-5551`, :cve_nist:`2017-5576`, :cve_nist:`2017-5577`, :cve_nist:`2017-5669`, :cve_nist:`2017-5715`, :cve_nist:`2017-5753`, :cve_nist:`2017-5754`, :cve_nist:`2017-5897`, :cve_nist:`2017-5967`, :cve_nist:`2017-5970`, :cve_nist:`2017-5972`, :cve_nist:`2017-5986`, :cve_nist:`2017-6001`, :cve_nist:`2017-6074`, :cve_nist:`2017-6214`, :cve_nist:`2017-6345`, :cve_nist:`2017-6346`, :cve_nist:`2017-6347`, :cve_nist:`2017-6348`, :cve_nist:`2017-6353`, :cve_nist:`2017-6874`, :cve_nist:`2017-6951`, :cve_nist:`2017-7184`, :cve_nist:`2017-7187`, :cve_nist:`2017-7261`, :cve_nist:`2017-7273`, :cve_nist:`2017-7277`, :cve_nist:`2017-7294`, :cve_nist:`2017-7308`, :cve_nist:`2017-7346`, :cve_nist:`2017-7374`, :cve_nist:`2017-7472`, :cve_nist:`2017-7477`, :cve_nist:`2017-7482`, :cve_nist:`2017-7487`, :cve_nist:`2017-7495`, :cve_nist:`2017-7518`, :cve_nist:`2017-7533`, :cve_nist:`2017-7541`, :cve_nist:`2017-7542`, :cve_nist:`2017-7558`, :cve_nist:`2017-7616`, :cve_nist:`2017-7618`, :cve_nist:`2017-7645`, :cve_nist:`2017-7889`, :cve_nist:`2017-7895`, :cve_nist:`2017-7979`, :cve_nist:`2017-8061`, :cve_nist:`2017-8062`, :cve_nist:`2017-8063`, :cve_nist:`2017-8064`, :cve_nist:`2017-8065`, :cve_nist:`2017-8066`, :cve_nist:`2017-8067`, :cve_nist:`2017-8068`, :cve_nist:`2017-8069`, :cve_nist:`2017-8070`, :cve_nist:`2017-8071`, :cve_nist:`2017-8072`, :cve_nist:`2017-8106`, :cve_nist:`2017-8240`, :cve_nist:`2017-8797`, :cve_nist:`2017-8824`, :cve_nist:`2017-8831`, :cve_nist:`2017-8890`, :cve_nist:`2017-8924`, :cve_nist:`2017-8925`, :cve_nist:`2017-9059`, :cve_nist:`2017-9074`, :cve_nist:`2017-9075`, :cve_nist:`2017-9076`, :cve_nist:`2017-9077`, :cve_nist:`2017-9150`, :cve_nist:`2017-9211`, :cve_nist:`2017-9242`, :cve_nist:`2017-9605`, :cve_nist:`2017-9725`, :cve_nist:`2017-9984`, :cve_nist:`2017-9985`, :cve_nist:`2017-9986`, :cve_nist:`2018-1000004`, :cve_nist:`2018-1000026`, :cve_nist:`2018-1000028`, :cve_nist:`2018-1000199`, :cve_nist:`2018-1000200`, :cve_nist:`2018-1000204`, :cve_nist:`2018-10021`, :cve_nist:`2018-10074`, :cve_nist:`2018-10087`, :cve_nist:`2018-10124`, :cve_nist:`2018-10322`, :cve_nist:`2018-10323`, :cve_nist:`2018-1065`, :cve_nist:`2018-1066`, :cve_nist:`2018-10675`, :cve_nist:`2018-1068`, :cve_nist:`2018-10840`, :cve_nist:`2018-10853`, :cve_nist:`2018-1087`, :cve_nist:`2018-10876`, :cve_nist:`2018-10877`, :cve_nist:`2018-10878`, :cve_nist:`2018-10879`, :cve_nist:`2018-10880`, :cve_nist:`2018-10881`, :cve_nist:`2018-10882`, :cve_nist:`2018-10883`, :cve_nist:`2018-10901`, :cve_nist:`2018-10902`, :cve_nist:`2018-1091`, :cve_nist:`2018-1092`, :cve_nist:`2018-1093`, :cve_nist:`2018-10938`, :cve_nist:`2018-1094`, :cve_nist:`2018-10940`, :cve_nist:`2018-1095`, :cve_nist:`2018-1108`, :cve_nist:`2018-1118`, :cve_nist:`2018-1120`, :cve_nist:`2018-11232`, :cve_nist:`2018-1128`, :cve_nist:`2018-1129`, :cve_nist:`2018-1130`, :cve_nist:`2018-11412`, :cve_nist:`2018-11506`, :cve_nist:`2018-11508`, :cve_nist:`2018-12126`, :cve_nist:`2018-12127`, :cve_nist:`2018-12130`, :cve_nist:`2018-12207`, :cve_nist:`2018-12232`, :cve_nist:`2018-12233`, :cve_nist:`2018-12633`, :cve_nist:`2018-12714`, :cve_nist:`2018-12896`, :cve_nist:`2018-12904`, :cve_nist:`2018-13053`, :cve_nist:`2018-13093`, :cve_nist:`2018-13094`, :cve_nist:`2018-13095`, :cve_nist:`2018-13096`, :cve_nist:`2018-13097`, :cve_nist:`2018-13098`, :cve_nist:`2018-13099`, :cve_nist:`2018-13100`, :cve_nist:`2018-13405`, :cve_nist:`2018-13406`, :cve_nist:`2018-14609`, :cve_nist:`2018-14610`, :cve_nist:`2018-14611`, :cve_nist:`2018-14612`, :cve_nist:`2018-14613`, :cve_nist:`2018-14614`, :cve_nist:`2018-14615`, :cve_nist:`2018-14616`, :cve_nist:`2018-14617`, :cve_nist:`2018-14619`, :cve_nist:`2018-14625`, :cve_nist:`2018-14633`, :cve_nist:`2018-14634`, :cve_nist:`2018-14641`, :cve_nist:`2018-14646`, :cve_nist:`2018-14656`, :cve_nist:`2018-14678`, :cve_nist:`2018-14734`, :cve_nist:`2018-15471`, :cve_nist:`2018-15572`, :cve_nist:`2018-15594`, :cve_nist:`2018-16276`, :cve_nist:`2018-16597`, :cve_nist:`2018-16658`, :cve_nist:`2018-16862`, :cve_nist:`2018-16871`, :cve_nist:`2018-16880`, :cve_nist:`2018-16882`, :cve_nist:`2018-16884`, :cve_nist:`2018-17182`, :cve_nist:`2018-17972`, :cve_nist:`2018-18021`, :cve_nist:`2018-18281`, :cve_nist:`2018-18386`, :cve_nist:`2018-18397`, :cve_nist:`2018-18445`, :cve_nist:`2018-18559`, :cve_nist:`2018-18690`, :cve_nist:`2018-18710`, :cve_nist:`2018-18955`, :cve_nist:`2018-19406`, :cve_nist:`2018-19407`, :cve_nist:`2018-19824`, :cve_nist:`2018-19854`, :cve_nist:`2018-19985`, :cve_nist:`2018-20169`, :cve_nist:`2018-20449`, :cve_nist:`2018-20509`, :cve_nist:`2018-20510`, :cve_nist:`2018-20511`, :cve_nist:`2018-20669`, :cve_nist:`2018-20784`, :cve_nist:`2018-20836`, :cve_nist:`2018-20854`, :cve_nist:`2018-20855`, :cve_nist:`2018-20856`, :cve_nist:`2018-20961`, :cve_nist:`2018-20976`, :cve_nist:`2018-21008`, :cve_nist:`2018-25015`, :cve_nist:`2018-25020`, :cve_nist:`2018-3620`, :cve_nist:`2018-3639`, :cve_nist:`2018-3646`, :cve_nist:`2018-3665`, :cve_nist:`2018-3693`, :cve_nist:`2018-5332`, :cve_nist:`2018-5333`, :cve_nist:`2018-5344`, :cve_nist:`2018-5390`, :cve_nist:`2018-5391`, :cve_nist:`2018-5703`, :cve_nist:`2018-5750`, :cve_nist:`2018-5803`, :cve_nist:`2018-5814`, :cve_nist:`2018-5848`, :cve_nist:`2018-5873`, :cve_nist:`2018-5953`, :cve_nist:`2018-5995`, :cve_nist:`2018-6412`, :cve_nist:`2018-6554`, :cve_nist:`2018-6555`, :cve_nist:`2018-6927`, :cve_nist:`2018-7191`, :cve_nist:`2018-7273`, :cve_nist:`2018-7480`, :cve_nist:`2018-7492`, :cve_nist:`2018-7566`, :cve_nist:`2018-7740`, :cve_nist:`2018-7754`, :cve_nist:`2018-7755`, :cve_nist:`2018-7757`, :cve_nist:`2018-7995`, :cve_nist:`2018-8043`, :cve_nist:`2018-8087`, :cve_nist:`2018-8781`, :cve_nist:`2018-8822`, :cve_nist:`2018-8897`, :cve_nist:`2018-9363`, :cve_nist:`2018-9385`, :cve_nist:`2018-9415`, :cve_nist:`2018-9422`, :cve_nist:`2018-9465`, :cve_nist:`2018-9516`, :cve_nist:`2018-9517`, :cve_nist:`2018-9518`, :cve_nist:`2018-9568`, :cve_nist:`2019-0136`, :cve_nist:`2019-0145`, :cve_nist:`2019-0146`, :cve_nist:`2019-0147`, :cve_nist:`2019-0148`, :cve_nist:`2019-0149`, :cve_nist:`2019-0154`, :cve_nist:`2019-0155`, :cve_nist:`2019-10124`, :cve_nist:`2019-10125`, :cve_nist:`2019-10126`, :cve_nist:`2019-10142`, :cve_nist:`2019-10207`, :cve_nist:`2019-10220`, :cve_nist:`2019-10638`, :cve_nist:`2019-10639`, :cve_nist:`2019-11085`, :cve_nist:`2019-11091`, :cve_nist:`2019-11135`, :cve_nist:`2019-11190`, :cve_nist:`2019-11191`, :cve_nist:`2019-1125`, :cve_nist:`2019-11477`, :cve_nist:`2019-11478`, :cve_nist:`2019-11479`, :cve_nist:`2019-11486`, :cve_nist:`2019-11487`, :cve_nist:`2019-11599`, :cve_nist:`2019-11683`, :cve_nist:`2019-11810`, :cve_nist:`2019-11811`, :cve_nist:`2019-11815`, :cve_nist:`2019-11833`, :cve_nist:`2019-11884`, :cve_nist:`2019-12378`, :cve_nist:`2019-12379`, :cve_nist:`2019-12380`, :cve_nist:`2019-12381`, :cve_nist:`2019-12382`, :cve_nist:`2019-12454`, :cve_nist:`2019-12455`, :cve_nist:`2019-12614`, :cve_nist:`2019-12615`, :cve_nist:`2019-12817`, :cve_nist:`2019-12818`, :cve_nist:`2019-12819`, :cve_nist:`2019-12881`, :cve_nist:`2019-12984`, :cve_nist:`2019-13233`, :cve_nist:`2019-13272`, :cve_nist:`2019-13631`, :cve_nist:`2019-13648`, :cve_nist:`2019-14283`, :cve_nist:`2019-14284`, :cve_nist:`2019-14615`, :cve_nist:`2019-14763`, :cve_nist:`2019-14814`, :cve_nist:`2019-14815`, :cve_nist:`2019-14816`, :cve_nist:`2019-14821`, :cve_nist:`2019-14835`, :cve_nist:`2019-14895`, :cve_nist:`2019-14896`, :cve_nist:`2019-14897`, :cve_nist:`2019-14901`, :cve_nist:`2019-15030`, :cve_nist:`2019-15031`, :cve_nist:`2019-15090`, :cve_nist:`2019-15098`, :cve_nist:`2019-15099`, :cve_nist:`2019-15117`, :cve_nist:`2019-15118`, :cve_nist:`2019-15211`, :cve_nist:`2019-15212`, :cve_nist:`2019-15213`, :cve_nist:`2019-15214`, :cve_nist:`2019-15215`, :cve_nist:`2019-15216`, :cve_nist:`2019-15217`, :cve_nist:`2019-15218`, :cve_nist:`2019-15219`, :cve_nist:`2019-15220`, :cve_nist:`2019-15221`, :cve_nist:`2019-15222`, :cve_nist:`2019-15223`, :cve_nist:`2019-15291`, :cve_nist:`2019-15292`, :cve_nist:`2019-15504`, :cve_nist:`2019-15505`, :cve_nist:`2019-15538`, :cve_nist:`2019-15666`, :cve_nist:`2019-15807`, :cve_nist:`2019-15916`, :cve_nist:`2019-15917`, :cve_nist:`2019-15918`, :cve_nist:`2019-15919`, :cve_nist:`2019-15920`, :cve_nist:`2019-15921`, :cve_nist:`2019-15922`, :cve_nist:`2019-15923`, :cve_nist:`2019-15924`, :cve_nist:`2019-15925`, :cve_nist:`2019-15926`, :cve_nist:`2019-15927`, :cve_nist:`2019-16229`, :cve_nist:`2019-16230`, :cve_nist:`2019-16231`, :cve_nist:`2019-16232`, :cve_nist:`2019-16233`, :cve_nist:`2019-16234`, :cve_nist:`2019-16413`, :cve_nist:`2019-16714`, :cve_nist:`2019-16746`, :cve_nist:`2019-16921`, :cve_nist:`2019-16994`, :cve_nist:`2019-16995`, :cve_nist:`2019-17052`, :cve_nist:`2019-17053`, :cve_nist:`2019-17054`, :cve_nist:`2019-17055`, :cve_nist:`2019-17056`, :cve_nist:`2019-17075`, :cve_nist:`2019-17133`, :cve_nist:`2019-17351`, :cve_nist:`2019-17666`, :cve_nist:`2019-18198`, :cve_nist:`2019-18282`, :cve_nist:`2019-18660`, :cve_nist:`2019-18675`, :cve_nist:`2019-18683`, :cve_nist:`2019-18786`, :cve_nist:`2019-18805`, :cve_nist:`2019-18806`, :cve_nist:`2019-18807`, :cve_nist:`2019-18808`, :cve_nist:`2019-18809`, :cve_nist:`2019-18810`, :cve_nist:`2019-18811`, :cve_nist:`2019-18812`, :cve_nist:`2019-18813`, :cve_nist:`2019-18814`, :cve_nist:`2019-18885`, :cve_nist:`2019-19036`, :cve_nist:`2019-19037`, :cve_nist:`2019-19039`, :cve_nist:`2019-19043`, :cve_nist:`2019-19044`, :cve_nist:`2019-19045`, :cve_nist:`2019-19046`, :cve_nist:`2019-19047`, :cve_nist:`2019-19048`, :cve_nist:`2019-19049`, :cve_nist:`2019-19050`, :cve_nist:`2019-19051`, :cve_nist:`2019-19052`, :cve_nist:`2019-19053`, :cve_nist:`2019-19054`, :cve_nist:`2019-19055`, :cve_nist:`2019-19056`, :cve_nist:`2019-19057`, :cve_nist:`2019-19058`, :cve_nist:`2019-19059`, :cve_nist:`2019-19060`, :cve_nist:`2019-19061`, :cve_nist:`2019-19062`, :cve_nist:`2019-19063`, :cve_nist:`2019-19064`, :cve_nist:`2019-19065`, :cve_nist:`2019-19066`, :cve_nist:`2019-19067`, :cve_nist:`2019-19068`, :cve_nist:`2019-19069`, :cve_nist:`2019-19070`, :cve_nist:`2019-19071`, :cve_nist:`2019-19072`, :cve_nist:`2019-19073`, :cve_nist:`2019-19074`, :cve_nist:`2019-19075`, :cve_nist:`2019-19076`, :cve_nist:`2019-19077`, :cve_nist:`2019-19078`, :cve_nist:`2019-19079`, :cve_nist:`2019-19080`, :cve_nist:`2019-19081`, :cve_nist:`2019-19082`, :cve_nist:`2019-19083`, :cve_nist:`2019-19227`, :cve_nist:`2019-19241`, :cve_nist:`2019-19252`, :cve_nist:`2019-19318`, :cve_nist:`2019-19319`, :cve_nist:`2019-19332`, :cve_nist:`2019-19338`, :cve_nist:`2019-19377`, :cve_nist:`2019-19447`, :cve_nist:`2019-19448`, :cve_nist:`2019-19449`, :cve_nist:`2019-19462`, :cve_nist:`2019-19523`, :cve_nist:`2019-19524`, :cve_nist:`2019-19525`, :cve_nist:`2019-19526`, :cve_nist:`2019-19527`, :cve_nist:`2019-19528`, :cve_nist:`2019-19529`, :cve_nist:`2019-19530`, :cve_nist:`2019-19531`, :cve_nist:`2019-19532`, :cve_nist:`2019-19533`, :cve_nist:`2019-19534`, :cve_nist:`2019-19535`, :cve_nist:`2019-19536`, :cve_nist:`2019-19537`, :cve_nist:`2019-19543`, :cve_nist:`2019-19602`, :cve_nist:`2019-19767`, :cve_nist:`2019-19768`, :cve_nist:`2019-19769`, :cve_nist:`2019-19770`, :cve_nist:`2019-19807`, :cve_nist:`2019-19813`, :cve_nist:`2019-19815`, :cve_nist:`2019-19816`, :cve_nist:`2019-19922`, :cve_nist:`2019-19927`, :cve_nist:`2019-19947`, :cve_nist:`2019-19965`, :cve_nist:`2019-19966`, :cve_nist:`2019-1999`, :cve_nist:`2019-20054`, :cve_nist:`2019-20095`, :cve_nist:`2019-20096`, :cve_nist:`2019-2024`, :cve_nist:`2019-2025`, :cve_nist:`2019-20422`, :cve_nist:`2019-2054`, :cve_nist:`2019-20636`, :cve_nist:`2019-20806`, :cve_nist:`2019-20810`, :cve_nist:`2019-20811`, :cve_nist:`2019-20812`, :cve_nist:`2019-20908`, :cve_nist:`2019-20934`, :cve_nist:`2019-2101`, :cve_nist:`2019-2181`, :cve_nist:`2019-2182`, :cve_nist:`2019-2213`, :cve_nist:`2019-2214`, :cve_nist:`2019-2215`, :cve_nist:`2019-25044`, :cve_nist:`2019-25045`, :cve_nist:`2019-3016`, :cve_nist:`2019-3459`, :cve_nist:`2019-3460`, :cve_nist:`2019-3701`, :cve_nist:`2019-3819`, :cve_nist:`2019-3837`, :cve_nist:`2019-3846`, :cve_nist:`2019-3874`, :cve_nist:`2019-3882`, :cve_nist:`2019-3887`, :cve_nist:`2019-3892`, :cve_nist:`2019-3896`, :cve_nist:`2019-3900`, :cve_nist:`2019-3901`, :cve_nist:`2019-5108`, :cve_nist:`2019-6133`, :cve_nist:`2019-6974`, :cve_nist:`2019-7221`, :cve_nist:`2019-7222`, :cve_nist:`2019-7308`, :cve_nist:`2019-8912`, :cve_nist:`2019-8956`, :cve_nist:`2019-8980`, :cve_nist:`2019-9003`, :cve_nist:`2019-9162`, :cve_nist:`2019-9213`, :cve_nist:`2019-9245`, :cve_nist:`2019-9444`, :cve_nist:`2019-9445`, :cve_nist:`2019-9453`, :cve_nist:`2019-9454`, :cve_nist:`2019-9455`, :cve_nist:`2019-9456`, :cve_nist:`2019-9457`, :cve_nist:`2019-9458`, :cve_nist:`2019-9466`, :cve_nist:`2019-9500`, :cve_nist:`2019-9503`, :cve_nist:`2019-9506`, :cve_nist:`2019-9857`, :cve_nist:`2020-0009`, :cve_nist:`2020-0030`, :cve_nist:`2020-0041`, :cve_nist:`2020-0066`, :cve_nist:`2020-0067`, :cve_nist:`2020-0110`, :cve_nist:`2020-0255`, :cve_nist:`2020-0305`, :cve_nist:`2020-0404`, :cve_nist:`2020-0423`, :cve_nist:`2020-0427`, :cve_nist:`2020-0429`, :cve_nist:`2020-0430`, :cve_nist:`2020-0431`, :cve_nist:`2020-0432`, :cve_nist:`2020-0433`, :cve_nist:`2020-0435`, :cve_nist:`2020-0444`, :cve_nist:`2020-0465`, :cve_nist:`2020-0466`, :cve_nist:`2020-0543`, :cve_nist:`2020-10135`, :cve_nist:`2020-10690`, :cve_nist:`2020-10711`, :cve_nist:`2020-10720`, :cve_nist:`2020-10732`, :cve_nist:`2020-10742`, :cve_nist:`2020-10751`, :cve_nist:`2020-10757`, :cve_nist:`2020-10766`, :cve_nist:`2020-10767`, :cve_nist:`2020-10768`, :cve_nist:`2020-10769`, :cve_nist:`2020-10773`, :cve_nist:`2020-10781`, :cve_nist:`2020-10942`, :cve_nist:`2020-11494`, :cve_nist:`2020-11565`, :cve_nist:`2020-11608`, :cve_nist:`2020-11609`, :cve_nist:`2020-11668`, :cve_nist:`2020-11669`, :cve_nist:`2020-11884`, :cve_nist:`2020-12114`, :cve_nist:`2020-12351`, :cve_nist:`2020-12352`, :cve_nist:`2020-12464`, :cve_nist:`2020-12465`, :cve_nist:`2020-12652`, :cve_nist:`2020-12653`, :cve_nist:`2020-12654`, :cve_nist:`2020-12655`, :cve_nist:`2020-12656`, :cve_nist:`2020-12657`, :cve_nist:`2020-12659`, :cve_nist:`2020-12768`, :cve_nist:`2020-12769`, :cve_nist:`2020-12770`, :cve_nist:`2020-12771`, :cve_nist:`2020-12826`, :cve_nist:`2020-12888`, :cve_nist:`2020-12912`, :cve_nist:`2020-13143`, :cve_nist:`2020-13974`, :cve_nist:`2020-14305`, :cve_nist:`2020-14314`, :cve_nist:`2020-14331`, :cve_nist:`2020-14351`, :cve_nist:`2020-14353`, :cve_nist:`2020-14356`, :cve_nist:`2020-14381`, :cve_nist:`2020-14385`, :cve_nist:`2020-14386`, :cve_nist:`2020-14390`, :cve_nist:`2020-14416`, :cve_nist:`2020-15393`, :cve_nist:`2020-15436`, :cve_nist:`2020-15437`, :cve_nist:`2020-15780`, :cve_nist:`2020-15852`, :cve_nist:`2020-16119`, :cve_nist:`2020-16120`, :cve_nist:`2020-16166`, :cve_nist:`2020-1749`, :cve_nist:`2020-24394`, :cve_nist:`2020-24490`, :cve_nist:`2020-24586`, :cve_nist:`2020-24587`, :cve_nist:`2020-24588`, :cve_nist:`2020-25211`, :cve_nist:`2020-25212`, :cve_nist:`2020-25221`, :cve_nist:`2020-25284`, :cve_nist:`2020-25285`, :cve_nist:`2020-25639`, :cve_nist:`2020-25641`, :cve_nist:`2020-25643`, :cve_nist:`2020-25645`, :cve_nist:`2020-25656`, :cve_nist:`2020-25668`, :cve_nist:`2020-25669`, :cve_nist:`2020-25670`, :cve_nist:`2020-25671`, :cve_nist:`2020-25672`, :cve_nist:`2020-25673`, :cve_nist:`2020-25704`, :cve_nist:`2020-25705`, :cve_nist:`2020-26088`, :cve_nist:`2020-26139`, :cve_nist:`2020-26141`, :cve_nist:`2020-26145`, :cve_nist:`2020-26147`, :cve_nist:`2020-26541`, :cve_nist:`2020-26555`, :cve_nist:`2020-26558`, :cve_nist:`2020-27066`, :cve_nist:`2020-27067`, :cve_nist:`2020-27068`, :cve_nist:`2020-27152`, :cve_nist:`2020-27170`, :cve_nist:`2020-27171`, :cve_nist:`2020-27194`, :cve_nist:`2020-2732`, :cve_nist:`2020-27418`, :cve_nist:`2020-27673`, :cve_nist:`2020-27675`, :cve_nist:`2020-27777`, :cve_nist:`2020-27784`, :cve_nist:`2020-27786`, :cve_nist:`2020-27815`, :cve_nist:`2020-27820`, :cve_nist:`2020-27825`, :cve_nist:`2020-27830`, :cve_nist:`2020-27835`, :cve_nist:`2020-28097`, :cve_nist:`2020-28374`, :cve_nist:`2020-28588`, :cve_nist:`2020-28915`, :cve_nist:`2020-28941`, :cve_nist:`2020-28974`, :cve_nist:`2020-29368`, :cve_nist:`2020-29369`, :cve_nist:`2020-29370`, :cve_nist:`2020-29371`, :cve_nist:`2020-29372`, :cve_nist:`2020-29373`, :cve_nist:`2020-29374`, :cve_nist:`2020-29534`, :cve_nist:`2020-29568`, :cve_nist:`2020-29569`, :cve_nist:`2020-29660`, :cve_nist:`2020-29661`, :cve_nist:`2020-35499`, :cve_nist:`2020-35508`, :cve_nist:`2020-35513`, :cve_nist:`2020-35519`, :cve_nist:`2020-36158`, :cve_nist:`2020-36310`, :cve_nist:`2020-36311`, :cve_nist:`2020-36312`, :cve_nist:`2020-36313`, :cve_nist:`2020-36322`, :cve_nist:`2020-36385`, :cve_nist:`2020-36386`, :cve_nist:`2020-36387`, :cve_nist:`2020-36516`, :cve_nist:`2020-36557`, :cve_nist:`2020-36558`, :cve_nist:`2020-36691`, :cve_nist:`2020-36694`, :cve_nist:`2020-36766`, :cve_nist:`2020-3702`, :cve_nist:`2020-4788`, :cve_nist:`2020-7053`, :cve_nist:`2020-8428`, :cve_nist:`2020-8647`, :cve_nist:`2020-8648`, :cve_nist:`2020-8649`, :cve_nist:`2020-8694`, :cve_nist:`2020-8834`, :cve_nist:`2020-8835`, :cve_nist:`2020-8992`, :cve_nist:`2020-9383`, :cve_nist:`2020-9391`, :cve_nist:`2021-0129`, :cve_nist:`2021-0342`, :cve_mitre:`2021-0447`, :cve_mitre:`2021-0448`, :cve_nist:`2021-0512`, :cve_nist:`2021-0605`, :cve_nist:`2021-0707`, :cve_nist:`2021-0920`, :cve_nist:`2021-0929`, :cve_nist:`2021-0935`, :cve_mitre:`2021-0937`, :cve_nist:`2021-0938`, :cve_nist:`2021-0941`, :cve_nist:`2021-1048`, :cve_nist:`2021-20177`, :cve_nist:`2021-20194`, :cve_nist:`2021-20226`, :cve_nist:`2021-20239`, :cve_nist:`2021-20261`, :cve_nist:`2021-20265`, :cve_nist:`2021-20268`, :cve_nist:`2021-20292`, :cve_nist:`2021-20317`, :cve_nist:`2021-20320`, :cve_nist:`2021-20321`, :cve_nist:`2021-20322`, :cve_nist:`2021-21781`, :cve_nist:`2021-22543`, :cve_nist:`2021-22555`, :cve_nist:`2021-22600`, :cve_nist:`2021-23133`, :cve_nist:`2021-23134`, :cve_nist:`2021-26401`, :cve_nist:`2021-26708`, :cve_nist:`2021-26930`, :cve_nist:`2021-26931`, :cve_nist:`2021-26932`, :cve_nist:`2021-27363`, :cve_nist:`2021-27364`, :cve_nist:`2021-27365`, :cve_nist:`2021-28038`, :cve_nist:`2021-28039`, :cve_nist:`2021-28375`, :cve_nist:`2021-28660`, :cve_nist:`2021-28688`, :cve_nist:`2021-28691`, :cve_nist:`2021-28711`, :cve_nist:`2021-28712`, :cve_nist:`2021-28713`, :cve_nist:`2021-28714`, :cve_nist:`2021-28715`, :cve_nist:`2021-28950`, :cve_nist:`2021-28951`, :cve_nist:`2021-28952`, :cve_nist:`2021-28964`, :cve_nist:`2021-28971`, :cve_nist:`2021-28972`, :cve_nist:`2021-29154`, :cve_nist:`2021-29155`, :cve_nist:`2021-29264`, :cve_nist:`2021-29265`, :cve_nist:`2021-29266`, :cve_nist:`2021-29646`, :cve_nist:`2021-29647`, :cve_nist:`2021-29648`, :cve_nist:`2021-29649`, :cve_nist:`2021-29650`, :cve_nist:`2021-29657`, :cve_nist:`2021-30002`, :cve_nist:`2021-30178`, :cve_nist:`2021-31440`, :cve_nist:`2021-3178`, :cve_nist:`2021-31829`, :cve_nist:`2021-31916`, :cve_nist:`2021-32399`, :cve_nist:`2021-32606`, :cve_nist:`2021-33033`, :cve_nist:`2021-33034`, :cve_nist:`2021-33098`, :cve_nist:`2021-33135`, :cve_nist:`2021-33200`, :cve_nist:`2021-3347`, :cve_nist:`2021-3348`, :cve_nist:`2021-33624`, :cve_nist:`2021-33655`, :cve_nist:`2021-33656`, :cve_nist:`2021-33909`, :cve_nist:`2021-3411`, :cve_nist:`2021-3428`, :cve_nist:`2021-3444`, :cve_nist:`2021-34556`, :cve_nist:`2021-34693`, :cve_nist:`2021-3483`, :cve_nist:`2021-34866`, :cve_nist:`2021-3489`, :cve_nist:`2021-3490`, :cve_nist:`2021-3491`, :cve_mitre:`2021-34981`, :cve_nist:`2021-3501`, :cve_nist:`2021-35039`, :cve_nist:`2021-3506`, :cve_nist:`2021-3543`, :cve_nist:`2021-35477`, :cve_nist:`2021-3564`, :cve_nist:`2021-3573`, :cve_nist:`2021-3587`, :cve_mitre:`2021-3600`, :cve_nist:`2021-3609`, :cve_nist:`2021-3612`, :cve_nist:`2021-3635`, :cve_nist:`2021-3640`, :cve_nist:`2021-3653`, :cve_nist:`2021-3655`, :cve_nist:`2021-3656`, :cve_nist:`2021-3659`, :cve_nist:`2021-3679`, :cve_nist:`2021-3715`, :cve_nist:`2021-37159`, :cve_nist:`2021-3732`, :cve_nist:`2021-3736`, :cve_nist:`2021-3739`, :cve_nist:`2021-3743`, :cve_nist:`2021-3744`, :cve_nist:`2021-3752`, :cve_nist:`2021-3753`, :cve_nist:`2021-37576`, :cve_nist:`2021-3759`, :cve_nist:`2021-3760`, :cve_nist:`2021-3764`, :cve_nist:`2021-3772`, :cve_nist:`2021-38160`, :cve_nist:`2021-38166`, :cve_nist:`2021-38198`, :cve_nist:`2021-38199`, :cve_nist:`2021-38200`, :cve_nist:`2021-38201`, :cve_nist:`2021-38202`, :cve_nist:`2021-38203`, :cve_nist:`2021-38204`, :cve_nist:`2021-38205`, :cve_nist:`2021-38206`, :cve_nist:`2021-38207`, :cve_nist:`2021-38208`, :cve_nist:`2021-38209`, :cve_nist:`2021-38300`, :cve_nist:`2021-3894`, :cve_nist:`2021-3896`, :cve_nist:`2021-3923`, :cve_nist:`2021-39633`, :cve_nist:`2021-39634`, :cve_nist:`2021-39636`, :cve_nist:`2021-39648`, :cve_nist:`2021-39656`, :cve_nist:`2021-39657`, :cve_nist:`2021-39685`, :cve_nist:`2021-39686`, :cve_nist:`2021-39698`, :cve_nist:`2021-39711`, :cve_nist:`2021-39713`, :cve_nist:`2021-39714`, :cve_nist:`2021-4001`, :cve_nist:`2021-4002`, :cve_nist:`2021-4028`, :cve_nist:`2021-4032`, :cve_nist:`2021-4037`, :cve_nist:`2021-40490`, :cve_nist:`2021-4083`, :cve_nist:`2021-4090`, :cve_nist:`2021-4093`, :cve_nist:`2021-4095`, :cve_nist:`2021-41073`, :cve_nist:`2021-4135`, :cve_nist:`2021-4148`, :cve_nist:`2021-4149`, :cve_nist:`2021-4154`, :cve_nist:`2021-4155`, :cve_nist:`2021-4157`, :cve_nist:`2021-4159`, :cve_nist:`2021-41864`, :cve_nist:`2021-4197`, :cve_nist:`2021-42008`, :cve_nist:`2021-4202`, :cve_nist:`2021-4203`, :cve_nist:`2021-4218`, :cve_nist:`2021-42252`, :cve_nist:`2021-42327`, :cve_nist:`2021-42739`, :cve_nist:`2021-43056`, :cve_nist:`2021-43057`, :cve_nist:`2021-43267`, :cve_nist:`2021-43389`, :cve_nist:`2021-43975`, :cve_nist:`2021-43976`, :cve_nist:`2021-44733`, :cve_nist:`2021-45095`, :cve_nist:`2021-45100`, :cve_nist:`2021-45402`, :cve_nist:`2021-45469`, :cve_nist:`2021-45480`, :cve_nist:`2021-45485`, :cve_nist:`2021-45486`, :cve_nist:`2021-45868`, :cve_nist:`2021-46283`, :cve_nist:`2022-0001`, :cve_nist:`2022-0002`, :cve_nist:`2022-0168`, :cve_nist:`2022-0171`, :cve_nist:`2022-0185`, :cve_nist:`2022-0264`, :cve_nist:`2022-0286`, :cve_nist:`2022-0322`, :cve_nist:`2022-0330`, :cve_nist:`2022-0433`, :cve_nist:`2022-0435`, :cve_nist:`2022-0487`, :cve_nist:`2022-0492`, :cve_nist:`2022-0494`, :cve_nist:`2022-0516`, :cve_nist:`2022-0617`, :cve_nist:`2022-0644`, :cve_nist:`2022-0646`, :cve_nist:`2022-0742`, :cve_nist:`2022-0812`, :cve_nist:`2022-0847`, :cve_nist:`2022-0850`, :cve_nist:`2022-0854`, :cve_nist:`2022-0995`, :cve_nist:`2022-1011`, :cve_nist:`2022-1012`, :cve_nist:`2022-1015`, :cve_nist:`2022-1016`, :cve_nist:`2022-1043`, :cve_nist:`2022-1048`, :cve_nist:`2022-1055`, :cve_nist:`2022-1158`, :cve_nist:`2022-1184`, :cve_nist:`2022-1195`, :cve_nist:`2022-1198`, :cve_nist:`2022-1199`, :cve_nist:`2022-1204`, :cve_nist:`2022-1205`, :cve_nist:`2022-1353`, :cve_nist:`2022-1419`, :cve_nist:`2022-1462`, :cve_nist:`2022-1516`, :cve_nist:`2022-1651`, :cve_nist:`2022-1652`, :cve_nist:`2022-1671`, :cve_nist:`2022-1678`, :cve_nist:`2022-1679`, :cve_nist:`2022-1729`, :cve_nist:`2022-1734`, :cve_nist:`2022-1786`, :cve_nist:`2022-1789`, :cve_nist:`2022-1836`, :cve_nist:`2022-1852`, :cve_nist:`2022-1882`, :cve_nist:`2022-1943`, :cve_nist:`2022-1966`, :cve_nist:`2022-1972`, :cve_nist:`2022-1973`, :cve_nist:`2022-1974`, :cve_nist:`2022-1975`, :cve_nist:`2022-1976`, :cve_nist:`2022-1998`, :cve_nist:`2022-20008`, :cve_nist:`2022-20132`, :cve_nist:`2022-20141`, :cve_nist:`2022-20153`, :cve_nist:`2022-20154`, :cve_nist:`2022-20158`, :cve_nist:`2022-20166`, :cve_nist:`2022-20368`, :cve_nist:`2022-20369`, :cve_nist:`2022-20421`, :cve_nist:`2022-20422`, :cve_nist:`2022-20423`, :cve_mitre:`2022-20565`, :cve_nist:`2022-20566`, :cve_nist:`2022-20567`, :cve_nist:`2022-20572`, :cve_nist:`2022-2078`, :cve_nist:`2022-21123`, :cve_nist:`2022-21125`, :cve_nist:`2022-21166`, :cve_nist:`2022-21385`, :cve_nist:`2022-21499`, :cve_mitre:`2022-21505`, :cve_nist:`2022-2153`, :cve_nist:`2022-2196`, :cve_mitre:`2022-22942`, :cve_nist:`2022-23036`, :cve_nist:`2022-23037`, :cve_nist:`2022-23038`, :cve_nist:`2022-23039`, :cve_nist:`2022-23040`, :cve_nist:`2022-23041`, :cve_nist:`2022-23042`, :cve_nist:`2022-2308`, :cve_nist:`2022-2318`, :cve_nist:`2022-2380`, :cve_nist:`2022-23816`, :cve_nist:`2022-23960`, :cve_nist:`2022-24122`, :cve_nist:`2022-24448`, :cve_nist:`2022-24958`, :cve_nist:`2022-24959`, :cve_nist:`2022-2503`, :cve_nist:`2022-25258`, :cve_nist:`2022-25375`, :cve_nist:`2022-25636`, :cve_mitre:`2022-2585`, :cve_mitre:`2022-2586`, :cve_mitre:`2022-2588`, :cve_nist:`2022-2590`, :cve_mitre:`2022-2602`, :cve_nist:`2022-26365`, :cve_nist:`2022-26373`, :cve_nist:`2022-2639`, :cve_nist:`2022-26490`, :cve_nist:`2022-2663`, :cve_nist:`2022-26966`, :cve_nist:`2022-27223`, :cve_nist:`2022-27666`, :cve_nist:`2022-2785`, :cve_nist:`2022-27950`, :cve_nist:`2022-28356`, :cve_nist:`2022-28388`, :cve_nist:`2022-28389`, :cve_nist:`2022-28390`, :cve_nist:`2022-2873`, :cve_nist:`2022-28796`, :cve_nist:`2022-28893`, :cve_nist:`2022-2905`, :cve_nist:`2022-29156`, :cve_nist:`2022-2938`, :cve_nist:`2022-29581`, :cve_nist:`2022-29582`, :cve_nist:`2022-2959`, :cve_nist:`2022-2964`, :cve_nist:`2022-2977`, :cve_nist:`2022-2978`, :cve_nist:`2022-29900`, :cve_nist:`2022-29901`, :cve_nist:`2022-29968`, :cve_nist:`2022-3028`, :cve_nist:`2022-30594`, :cve_nist:`2022-3061`, :cve_nist:`2022-3077`, :cve_nist:`2022-3078`, :cve_nist:`2022-3103`, :cve_nist:`2022-3104`, :cve_nist:`2022-3105`, :cve_nist:`2022-3106`, :cve_nist:`2022-3107`, :cve_nist:`2022-3110`, :cve_nist:`2022-3111`, :cve_nist:`2022-3112`, :cve_nist:`2022-3113`, :cve_nist:`2022-3114`, :cve_nist:`2022-3115`, :cve_nist:`2022-3169`, :cve_nist:`2022-3170`, :cve_nist:`2022-3202`, :cve_nist:`2022-32250`, :cve_nist:`2022-32296`, :cve_nist:`2022-3239`, :cve_nist:`2022-32981`, :cve_nist:`2022-3303`, :cve_nist:`2022-33740`, :cve_nist:`2022-33741`, :cve_nist:`2022-33742`, :cve_nist:`2022-33743`, :cve_nist:`2022-33744`, :cve_nist:`2022-33981`, :cve_nist:`2022-3424`, :cve_nist:`2022-3435`, :cve_nist:`2022-34494`, :cve_nist:`2022-34495`, :cve_nist:`2022-34918`, :cve_nist:`2022-3521`, :cve_nist:`2022-3524`, :cve_nist:`2022-3526`, :cve_nist:`2022-3531`, :cve_nist:`2022-3532`, :cve_nist:`2022-3534`, :cve_nist:`2022-3535`, :cve_nist:`2022-3541`, :cve_nist:`2022-3542`, :cve_nist:`2022-3543`, :cve_nist:`2022-3545`, :cve_nist:`2022-3564`, :cve_nist:`2022-3565`, :cve_nist:`2022-3577`, :cve_nist:`2022-3586`, :cve_nist:`2022-3594`, :cve_nist:`2022-36123`, :cve_nist:`2022-3619`, :cve_nist:`2022-3621`, :cve_nist:`2022-3623`, :cve_nist:`2022-3625`, :cve_nist:`2022-3628`, :cve_nist:`2022-36280`, :cve_nist:`2022-3629`, :cve_nist:`2022-3630`, :cve_nist:`2022-3633`, :cve_nist:`2022-3635`, :cve_nist:`2022-3640`, :cve_nist:`2022-3643`, :cve_nist:`2022-3646`, :cve_nist:`2022-3649`, :cve_nist:`2022-36879`, :cve_nist:`2022-36946`, :cve_nist:`2022-3707`, :cve_nist:`2022-3910`, :cve_nist:`2022-39189`, :cve_nist:`2022-39190`, :cve_nist:`2022-3977`, :cve_nist:`2022-39842`, :cve_nist:`2022-40307`, :cve_nist:`2022-40476`, :cve_nist:`2022-40768`, :cve_nist:`2022-4095`, :cve_nist:`2022-40982`, :cve_nist:`2022-41218`, :cve_nist:`2022-41222`, :cve_nist:`2022-4127`, :cve_nist:`2022-4128`, :cve_nist:`2022-4129`, :cve_nist:`2022-4139`, :cve_nist:`2022-41674`, :cve_nist:`2022-41849`, :cve_nist:`2022-41850`, :cve_nist:`2022-41858`, :cve_nist:`2022-42328`, :cve_nist:`2022-42329`, :cve_nist:`2022-42432`, :cve_nist:`2022-4269`, :cve_nist:`2022-42703`, :cve_nist:`2022-42719`, :cve_nist:`2022-42720`, :cve_nist:`2022-42721`, :cve_nist:`2022-42722`, :cve_nist:`2022-42895`, :cve_nist:`2022-42896`, :cve_nist:`2022-43750`, :cve_nist:`2022-4378`, :cve_nist:`2022-4379`, :cve_nist:`2022-4382`, :cve_nist:`2022-43945`, :cve_nist:`2022-45869`, :cve_nist:`2022-45886`, :cve_nist:`2022-45887`, :cve_nist:`2022-45888`, :cve_nist:`2022-45919`, :cve_nist:`2022-45934`, :cve_nist:`2022-4662`, :cve_nist:`2022-4744`, :cve_nist:`2022-47518`, :cve_nist:`2022-47519`, :cve_nist:`2022-47520`, :cve_nist:`2022-47521`, :cve_nist:`2022-47929`, :cve_nist:`2022-47938`, :cve_nist:`2022-47939`, :cve_nist:`2022-47940`, :cve_nist:`2022-47941`, :cve_nist:`2022-47942`, :cve_nist:`2022-47943`, :cve_nist:`2022-4842`, :cve_nist:`2022-48423`, :cve_nist:`2022-48424`, :cve_nist:`2022-48425`, :cve_nist:`2022-48502`, :cve_nist:`2023-0030`, :cve_nist:`2023-0045`, :cve_nist:`2023-0047`, :cve_nist:`2023-0122`, :cve_nist:`2023-0160`, :cve_nist:`2023-0179`, :cve_nist:`2023-0210`, :cve_nist:`2023-0240`, :cve_nist:`2023-0266`, :cve_nist:`2023-0394`, :cve_nist:`2023-0458`, :cve_nist:`2023-0459`, :cve_nist:`2023-0461`, :cve_nist:`2023-0468`, :cve_nist:`2023-0469`, :cve_nist:`2023-0590`, :cve_nist:`2023-0615`, :cve_mitre:`2023-1032`, :cve_nist:`2023-1073`, :cve_nist:`2023-1074`, :cve_nist:`2023-1076`, :cve_nist:`2023-1077`, :cve_nist:`2023-1078`, :cve_nist:`2023-1079`, :cve_nist:`2023-1095`, :cve_nist:`2023-1118`, :cve_nist:`2023-1192`, :cve_nist:`2023-1194`, :cve_nist:`2023-1195`, :cve_nist:`2023-1206`, :cve_nist:`2023-1249`, :cve_nist:`2023-1252`, :cve_nist:`2023-1281`, :cve_nist:`2023-1380`, :cve_nist:`2023-1382`, :cve_nist:`2023-1390`, :cve_nist:`2023-1513`, :cve_nist:`2023-1582`, :cve_nist:`2023-1583`, :cve_nist:`2023-1611`, :cve_nist:`2023-1637`, :cve_nist:`2023-1652`, :cve_nist:`2023-1670`, :cve_nist:`2023-1829`, :cve_nist:`2023-1838`, :cve_nist:`2023-1855`, :cve_nist:`2023-1859`, :cve_nist:`2023-1989`, :cve_nist:`2023-1990`, :cve_nist:`2023-1998`, :cve_nist:`2023-2002`, :cve_nist:`2023-2006`, :cve_nist:`2023-2008`, :cve_nist:`2023-2019`, :cve_nist:`2023-20569`, :cve_nist:`2023-20588`, :cve_nist:`2023-20593`, :cve_nist:`2023-20938`, :cve_nist:`2023-21102`, :cve_nist:`2023-21106`, :cve_nist:`2023-2124`, :cve_nist:`2023-21255`, :cve_nist:`2023-21264`, :cve_nist:`2023-2156`, :cve_nist:`2023-2162`, :cve_nist:`2023-2163`, :cve_nist:`2023-2166`, :cve_nist:`2023-2177`, :cve_nist:`2023-2194`, :cve_nist:`2023-2235`, :cve_nist:`2023-2236`, :cve_nist:`2023-2248`, :cve_nist:`2023-2269`, :cve_nist:`2023-22996`, :cve_nist:`2023-22997`, :cve_nist:`2023-22998`, :cve_nist:`2023-22999`, :cve_nist:`2023-23001`, :cve_nist:`2023-23002`, :cve_nist:`2023-23003`, :cve_nist:`2023-23004`, :cve_nist:`2023-23005`, :cve_nist:`2023-23006`, :cve_nist:`2023-23454`, :cve_nist:`2023-23455`, :cve_nist:`2023-23559`, :cve_nist:`2023-2483`, :cve_nist:`2023-25012`, :cve_nist:`2023-2513`, :cve_nist:`2023-25775`, :cve_nist:`2023-2598`, :cve_nist:`2023-26544`, :cve_nist:`2023-26545`, :cve_nist:`2023-26605`, :cve_nist:`2023-26606`, :cve_nist:`2023-26607`, :cve_nist:`2023-28327`, :cve_nist:`2023-28328`, :cve_nist:`2023-28410`, :cve_nist:`2023-28464`, :cve_nist:`2023-28466`, :cve_nist:`2023-2860`, :cve_nist:`2023-28772`, :cve_nist:`2023-28866`, :cve_nist:`2023-2898`, :cve_nist:`2023-2985`, :cve_nist:`2023-3006`, :cve_nist:`2023-30456`, :cve_nist:`2023-30772`, :cve_nist:`2023-3090`, :cve_nist:`2023-3106`, :cve_nist:`2023-3111`, :cve_nist:`2023-3117`, :cve_nist:`2023-31248`, :cve_nist:`2023-3141`, :cve_nist:`2023-31436`, :cve_nist:`2023-3159`, :cve_nist:`2023-3161`, :cve_nist:`2023-3212`, :cve_nist:`2023-3220`, :cve_nist:`2023-32233`, :cve_nist:`2023-32247`, :cve_nist:`2023-32248`, :cve_nist:`2023-32250`, :cve_nist:`2023-32252`, :cve_nist:`2023-32254`, :cve_nist:`2023-32257`, :cve_nist:`2023-32258`, :cve_nist:`2023-32269`, :cve_nist:`2023-3268`, :cve_nist:`2023-3269`, :cve_nist:`2023-3312`, :cve_nist:`2023-3317`, :cve_nist:`2023-33203`, :cve_nist:`2023-33250`, :cve_nist:`2023-33288`, :cve_nist:`2023-3338`, :cve_nist:`2023-3355`, :cve_nist:`2023-3357`, :cve_nist:`2023-3358`, :cve_nist:`2023-3359`, :cve_nist:`2023-3390`, :cve_nist:`2023-33951`, :cve_nist:`2023-33952`, :cve_nist:`2023-34255`, :cve_nist:`2023-34256`, :cve_nist:`2023-34319`, :cve_nist:`2023-3439`, :cve_nist:`2023-35001`, :cve_nist:`2023-3567`, :cve_nist:`2023-35788`, :cve_nist:`2023-35823`, :cve_nist:`2023-35824`, :cve_nist:`2023-35826`, :cve_nist:`2023-35828`, :cve_nist:`2023-35829`, :cve_nist:`2023-3609`, :cve_nist:`2023-3610`, :cve_nist:`2023-3611`, :cve_nist:`2023-37453`, :cve_nist:`2023-3772`, :cve_nist:`2023-3773`, :cve_nist:`2023-3776`, :cve_nist:`2023-3777`, :cve_nist:`2023-3812`, :cve_nist:`2023-38409`, :cve_nist:`2023-38426`, :cve_nist:`2023-38427`, :cve_nist:`2023-38428`, :cve_nist:`2023-38429`, :cve_nist:`2023-38430`, :cve_nist:`2023-38431`, :cve_nist:`2023-38432`, :cve_nist:`2023-3863`, :cve_mitre:`2023-3865`, :cve_mitre:`2023-3866`, :cve_mitre:`2023-3867`, :cve_nist:`2023-39189`, :cve_nist:`2023-39192`, :cve_nist:`2023-39193`, :cve_nist:`2023-39194`, :cve_nist:`2023-4004`, :cve_nist:`2023-4015`, :cve_nist:`2023-40283`, :cve_nist:`2023-4128`, :cve_nist:`2023-4132`, :cve_nist:`2023-4147`, :cve_nist:`2023-4155`, :cve_nist:`2023-4194`, :cve_nist:`2023-4206`, :cve_nist:`2023-4207`, :cve_nist:`2023-4208`, :cve_nist:`2023-4273`, :cve_nist:`2023-42752`, :cve_nist:`2023-42753`, :cve_nist:`2023-42755`, :cve_nist:`2023-42756`, :cve_nist:`2023-4385`, :cve_nist:`2023-4387`, :cve_nist:`2023-4389`, :cve_nist:`2023-4394`, :cve_nist:`2023-44466`, :cve_nist:`2023-4459`, :cve_nist:`2023-4569`, :cve_nist:`2023-45862`, :cve_nist:`2023-45871`, :cve_nist:`2023-4611`, :cve_nist:`2023-4623`, :cve_nist:`2023-4732`, :cve_nist:`2023-4921` and :cve_nist:`2023-5345` +- linux-yocto/5.15: Ignore :cve_nist:`2022-45886`, :cve_nist:`2022-45887`, :cve_nist:`2022-45919`, :cve_nist:`2022-48502`, :cve_nist:`2023-0160`, :cve_nist:`2023-1206`, :cve_nist:`2023-20593`, :cve_nist:`2023-21264`, :cve_nist:`2023-2898`, :cve_nist:`2023-31248`, :cve_nist:`2023-33250`, :cve_nist:`2023-34319`, :cve_nist:`2023-35001`, :cve_nist:`2023-3611`, :cve_nist:`2023-37453`, :cve_nist:`2023-3773`, :cve_nist:`2023-3776`, :cve_nist:`2023-3777`, :cve_nist:`2023-38432`, :cve_nist:`2023-3863`, :cve_mitre:`2023-3865`, :cve_mitre:`2023-3866`, :cve_nist:`2023-4004`, :cve_nist:`2023-4015`, :cve_nist:`2023-4132`, :cve_nist:`2023-4147`, :cve_nist:`2023-4194`, :cve_nist:`2023-4385`, :cve_nist:`2023-4387`, :cve_nist:`2023-4389`, :cve_nist:`2023-4394`, :cve_nist:`2023-4459` and :cve_nist:`2023-4611` +- openssl: Fix :cve_nist:`2023-4807` and :cve_nist:`2023-5363` +- python3-git: Fix :cve_nist:`2023-40590` and :cve_nist:`2023-41040` +- python3-urllib3: Fix :cve_nist:`2023-43804` +- qemu: Ignore :cve_nist:`2023-2680` +- ruby: Fix :cve_nist:`2023-36617` - shadow: Fix :cve_mitre:`2023-4641` -- tiff: Fix :cve:`2023-3576` and :cve:`2023-40745` -- vim: Fix :cve:`2023-5441` and :cve:`2023-5535` -- webkitgtk: Fix :cve:`2023-32439` -- xdg-utils: Fix :cve:`2022-4055` -- xserver-xorg: ignore :cve:`2022-3553` (XQuartz-specific) -- zlib: Fix :cve:`2023-45853` +- tiff: Fix :cve_nist:`2023-3576` and :cve_nist:`2023-40745` +- vim: Fix :cve_nist:`2023-5441` and :cve_nist:`2023-5535` +- webkitgtk: Fix :cve_nist:`2023-32439` +- xdg-utils: Fix :cve_nist:`2022-4055` +- xserver-xorg: ignore :cve_nist:`2022-3553` (XQuartz-specific) +- zlib: Fix :cve_nist:`2023-45853` diff --git a/poky/documentation/migration-guides/release-notes-4.0.15.rst b/poky/documentation/migration-guides/release-notes-4.0.15.rst index b2731530e8..e05cd6f143 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.15.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.15.rst @@ -6,24 +6,24 @@ Release notes for Yocto-4.0.15 (Kirkstone) Security Fixes in Yocto-4.0.15 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- avahi: Fix :cve:`2023-1981`, :cve:`2023-38469`, :cve:`2023-38470`, :cve:`2023-38471`, :cve:`2023-38472` and :cve:`2023-38473` -- binutils: Fix :cve:`2022-47007`, :cve:`2022-47010` and :cve:`2022-48064` -- bluez5: Fix :cve:`2023-45866` -- ghostscript: Ignore GhostPCL :cve:`2023-38560` -- gnutls: Fix :cve:`2023-5981` -- go: Ignore :cve:`2023-45283` and :cve:`2023-45284` -- grub: Fix :cve:`2023-4692` and :cve:`2023-4693` +- avahi: Fix :cve_nist:`2023-1981`, :cve_nist:`2023-38469`, :cve_nist:`2023-38470`, :cve_nist:`2023-38471`, :cve_nist:`2023-38472` and :cve_nist:`2023-38473` +- binutils: Fix :cve_nist:`2022-47007`, :cve_nist:`2022-47010` and :cve_nist:`2022-48064` +- bluez5: Fix :cve_nist:`2023-45866` +- ghostscript: Ignore GhostPCL :cve_nist:`2023-38560` +- gnutls: Fix :cve_nist:`2023-5981` +- go: Ignore :cve_nist:`2023-45283` and :cve_nist:`2023-45284` +- grub: Fix :cve_nist:`2023-4692` and :cve_nist:`2023-4693` - gstreamer1.0-plugins-bad: Fix :cve_mitre:`2023-44429` -- libsndfile: Fix :cve:`2022-33065` -- libwebp: Fix :cve:`2023-4863` -- openssl: Fix :cve:`2023-5678` -- python3-cryptography: Fix :cve:`2023-49083` -- qemu: Fix :cve:`2023-1544` -- sudo: :cve:`2023-42456` and :cve_mitre:`2023-42465` -- tiff: Fix :cve:`2023-41175` -- vim: Fix :cve:`2023-46246`, :cve:`2023-48231`, :cve:`2023-48232`, :cve:`2023-48233`, :cve:`2023-48234`, :cve:`2023-48235`, :cve:`2023-48236`, :cve:`2023-48237` and :cve:`2023-48706` -- xserver-xorg: Fix :cve:`2023-5367` and :cve:`2023-5380` -- xwayland: Fix :cve:`2023-5367` +- libsndfile: Fix :cve_nist:`2022-33065` +- libwebp: Fix :cve_nist:`2023-4863` +- openssl: Fix :cve_nist:`2023-5678` +- python3-cryptography: Fix :cve_nist:`2023-49083` +- qemu: Fix :cve_nist:`2023-1544` +- sudo: :cve_nist:`2023-42456` and :cve_mitre:`2023-42465` +- tiff: Fix :cve_nist:`2023-41175` +- vim: Fix :cve_nist:`2023-46246`, :cve_nist:`2023-48231`, :cve_nist:`2023-48232`, :cve_nist:`2023-48233`, :cve_nist:`2023-48234`, :cve_nist:`2023-48235`, :cve_nist:`2023-48236`, :cve_nist:`2023-48237` and :cve_nist:`2023-48706` +- xserver-xorg: Fix :cve_nist:`2023-5367` and :cve_nist:`2023-5380` +- xwayland: Fix :cve_nist:`2023-5367` Fixes in Yocto-4.0.15 diff --git a/poky/documentation/migration-guides/release-notes-4.0.16.rst b/poky/documentation/migration-guides/release-notes-4.0.16.rst index 0eb31832ab..dea5b4c2bf 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.16.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.16.rst @@ -8,22 +8,22 @@ Security Fixes in Yocto-4.0.16 - cpio: Fix :cve_mitre:`2023-7207` - curl: Revert "curl: Backport fix CVE-2023-32001" -- curl: Fix :cve:`2023-46218` -- dropbear:Fix :cve:`2023-48795` -- ffmpeg: Fix :cve:`2022-3964` and :cve:`2022-3965` -- ghostscript: Fix :cve:`2023-46751` -- gnutls: Fix :cve:`2024-0553` and :cve:`2024-0567` -- go: Fix :cve:`2023-39326` -- openssh: Fix :cve:`2023-48795`, :cve:`2023-51384` and :cve:`2023-51385` -- openssl: Fix :cve:`2023-6129` and :cve_mitre:`2023-6237` +- curl: Fix :cve_nist:`2023-46218` +- dropbear:Fix :cve_nist:`2023-48795` +- ffmpeg: Fix :cve_nist:`2022-3964` and :cve_nist:`2022-3965` +- ghostscript: Fix :cve_nist:`2023-46751` +- gnutls: Fix :cve_nist:`2024-0553` and :cve_nist:`2024-0567` +- go: Fix :cve_nist:`2023-39326` +- openssh: Fix :cve_nist:`2023-48795`, :cve_nist:`2023-51384` and :cve_nist:`2023-51385` +- openssl: Fix :cve_nist:`2023-6129` and :cve_mitre:`2023-6237` - pam: Fix :cve_mitre:`2024-22365` -- perl: Fix :cve:`2023-47038` -- qemu: Fix :cve:`2023-5088` -- sqlite3: Fix :cve:`2023-7104` -- systemd: Fix :cve:`2023-7008` -- tiff: Fix :cve:`2023-6228` -- xserver-xorg: Fix :cve:`2023-6377`, :cve:`2023-6478`, :cve:`2023-6816`, :cve_mitre:`2024-0229`, :cve:`2024-0408`, :cve:`2024-0409`, :cve_mitre:`2024-21885` and :cve_mitre:`2024-21886` -- zlib: Ignore :cve:`2023-6992` +- perl: Fix :cve_nist:`2023-47038` +- qemu: Fix :cve_nist:`2023-5088` +- sqlite3: Fix :cve_nist:`2023-7104` +- systemd: Fix :cve_nist:`2023-7008` +- tiff: Fix :cve_nist:`2023-6228` +- xserver-xorg: Fix :cve_nist:`2023-6377`, :cve_nist:`2023-6478`, :cve_nist:`2023-6816`, :cve_mitre:`2024-0229`, :cve_nist:`2024-0408`, :cve_nist:`2024-0409`, :cve_mitre:`2024-21885` and :cve_mitre:`2024-21886` +- zlib: Ignore :cve_nist:`2023-6992` Fixes in Yocto-4.0.16 diff --git a/poky/documentation/migration-guides/release-notes-4.0.17.rst b/poky/documentation/migration-guides/release-notes-4.0.17.rst index 07242584b8..e917dc9bf8 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.17.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.17.rst @@ -6,27 +6,27 @@ Release notes for Yocto-4.0.17 (Kirkstone) Security Fixes in Yocto-4.0.17 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bind: Fix :cve:`2023-4408`, :cve:`2023-5517`, :cve:`2023-5679`, :cve:`2023-50868` and :cve:`2023-50387` -- binutils: Fix :cve:`2023-39129` and :cve:`2023-39130` -- curl: Fix :cve:`2023-46219` -- curl: Ignore :cve:`2023-42915` -- gcc: Ignore :cve:`2023-4039` -- gdb: Fix :cve:`2023-39129` and :cve:`2023-39130` -- glibc: Ignore :cve:`2023-0687` -- go: Fix :cve:`2023-29406`, :cve:`2023-45285`, :cve:`2023-45287`, :cve:`2023-45289`, :cve:`2023-45290`, :cve:`2024-24784` and :cve:`2024-24785` -- less: Fix :cve:`2022-48624` -- libgit2: Fix :cve:`2024-24575` and :cve:`2024-24577` -- libuv: fix :cve:`2024-24806` -- libxml2: Fix for :cve:`2024-25062` -- linux-yocto/5.15: Fix :cve:`2022-36402`, :cve:`2022-40982`, :cve:`2022-47940`, :cve:`2023-1193`, :cve:`2023-1194`, :cve:`2023-3772`, :cve_mitre:`2023-3867`, :cve:`2023-4128`, :cve:`2023-4206`, :cve:`2023-4207`, :cve:`2023-4208`, :cve:`2023-4244`, :cve:`2023-4273`, :cve:`2023-4563`, :cve:`2023-4569`, :cve:`2023-4623`, :cve:`2023-4881`, :cve:`2023-4921`, :cve:`2023-5158`, :cve:`2023-5717`, :cve:`2023-6040`, :cve:`2023-6121`, :cve:`2023-6176`, :cve:`2023-6546`, :cve:`2023-6606`, :cve:`2023-6622`, :cve:`2023-6817`, :cve:`2023-6915`, :cve:`2023-6931`, :cve:`2023-6932`, :cve:`2023-20569`, :cve:`2023-20588`, :cve:`2023-25775`, :cve:`2023-31085`, :cve:`2023-32247`, :cve:`2023-32250`, :cve:`2023-32252`, :cve:`2023-32254`, :cve:`2023-32257`, :cve:`2023-32258`, :cve:`2023-34324`, :cve:`2023-35827`, :cve:`2023-38427`, :cve:`2023-38430`, :cve:`2023-38431`, :cve:`2023-39189`, :cve:`2023-39192`, :cve:`2023-39193`, :cve:`2023-39194`, :cve:`2023-39198`, :cve:`2023-40283`, :cve:`2023-42752`, :cve:`2023-42753`, :cve:`2023-42754`, :cve:`2023-42755`, :cve:`2023-45871`, :cve:`2023-46343`, :cve:`2023-46813`, :cve:`2023-46838`, :cve:`2023-46862`, :cve:`2023-51042`, :cve:`2023-51779`, :cve_mitre:`2023-52340`, :cve:`2023-52429`, :cve:`2023-52435`, :cve:`2023-52436`, :cve:`2023-52438`, :cve:`2023-52439`, :cve:`2023-52441`, :cve:`2023-52442`, :cve:`2023-52443`, :cve:`2023-52444`, :cve:`2023-52445`, :cve:`2023-52448`, :cve:`2023-52449`, :cve:`2023-52451`, :cve:`2023-52454`, :cve:`2023-52456`, :cve:`2023-52457`, :cve:`2023-52458`, :cve:`2023-52463`, :cve:`2023-52464`, :cve:`2024-0340`, :cve:`2024-0584`, :cve:`2024-0607`, :cve:`2024-0641`, :cve:`2024-0646`, :cve:`2024-1085`, :cve:`2024-1086`, :cve:`2024-1151`, :cve:`2024-22705`, :cve:`2024-23849`, :cve:`2024-23850`, :cve:`2024-23851`, :cve:`2024-24860`, :cve:`2024-26586`, :cve:`2024-26589`, :cve:`2024-26591`, :cve:`2024-26592`, :cve:`2024-26593`, :cve:`2024-26594`, :cve:`2024-26597` and :cve:`2024-26598` -- linux-yocto/5.15: Ignore :cve:`2020-27418`, :cve:`2020-36766`, :cve:`2021-33630`, :cve:`2021-33631`, :cve:`2022-48619`, :cve:`2023-2430`, :cve:`2023-4610`, :cve:`2023-4732`, :cve:`2023-5090`, :cve:`2023-5178`, :cve:`2023-5197`, :cve:`2023-5345`, :cve:`2023-5633`, :cve:`2023-5972`, :cve:`2023-6111`, :cve:`2023-6200`, :cve:`2023-6531`, :cve:`2023-6679`, :cve:`2023-7192`, :cve:`2023-40791`, :cve:`2023-42756`, :cve:`2023-44466`, :cve:`2023-45862`, :cve:`2023-45863`, :cve:`2023-45898`, :cve:`2023-51043`, :cve:`2023-51780`, :cve:`2023-51781`, :cve:`2023-51782`, :cve:`2023-52433`, :cve:`2023-52440`, :cve:`2023-52446`, :cve:`2023-52450`, :cve:`2023-52453`, :cve:`2023-52455`, :cve:`2023-52459`, :cve:`2023-52460`, :cve:`2023-52461`, :cve:`2023-52462`, :cve:`2024-0193`, :cve:`2024-0443`, :cve:`2024-0562`, :cve:`2024-0582`, :cve:`2024-0639`, :cve:`2024-0775`, :cve:`2024-26581`, :cve:`2024-26582`, :cve:`2024-26590`, :cve:`2024-26596` and :cve:`2024-26599` -- linux-yocto/5.10: Fix :cve:`2023-6040`, :cve:`2023-6121`, :cve:`2023-6606`, :cve:`2023-6817`, :cve:`2023-6915`, :cve:`2023-6931`, :cve:`2023-6932`, :cve:`2023-39198`, :cve:`2023-46838`, :cve:`2023-51779`, :cve:`2023-51780`, :cve:`2023-51781`, :cve:`2023-51782`, :cve_mitre:`2023-52340`, :cve:`2024-0584` and :cve:`2024-0646` -- linux-yocto/5.10: Ignore :cve:`2021-33630`, :cve:`2021-33631`, :cve:`2022-1508`, :cve:`2022-36402`, :cve:`2022-48619`, :cve:`2023-2430`, :cve:`2023-4610`, :cve:`2023-5972`, :cve:`2023-6039`, :cve:`2023-6200`, :cve:`2023-6531`, :cve:`2023-6546`, :cve:`2023-6622`, :cve:`2023-6679`, :cve:`2023-7192`, :cve:`2023-46343`, :cve:`2023-51042`, :cve:`2023-51043`, :cve:`2024-0193`, :cve:`2024-0443`, :cve:`2024-0562`, :cve:`2024-0582`, :cve:`2024-0639`, :cve:`2024-0641`, :cve:`2024-0775`, :cve:`2024-1085` and :cve:`2024-22705` -- openssl: Fix :cve:`2024-0727` -- python3-pycryptodome: Fix :cve:`2023-52323` -- qemu: Fix :cve:`2023-6693`, :cve:`2023-42467` and :cve:`2024-24474` -- vim: Fix :cve:`2024-22667` -- xwayland: Fix :cve:`2023-6377` and :cve:`2023-6478` +- bind: Fix :cve_nist:`2023-4408`, :cve_nist:`2023-5517`, :cve_nist:`2023-5679`, :cve_nist:`2023-50868` and :cve_nist:`2023-50387` +- binutils: Fix :cve_nist:`2023-39129` and :cve_nist:`2023-39130` +- curl: Fix :cve_nist:`2023-46219` +- curl: Ignore :cve_nist:`2023-42915` +- gcc: Ignore :cve_nist:`2023-4039` +- gdb: Fix :cve_nist:`2023-39129` and :cve_nist:`2023-39130` +- glibc: Ignore :cve_nist:`2023-0687` +- go: Fix :cve_nist:`2023-29406`, :cve_nist:`2023-45285`, :cve_nist:`2023-45287`, :cve_nist:`2023-45289`, :cve_nist:`2023-45290`, :cve_nist:`2024-24784` and :cve_nist:`2024-24785` +- less: Fix :cve_nist:`2022-48624` +- libgit2: Fix :cve_nist:`2024-24575` and :cve_nist:`2024-24577` +- libuv: fix :cve_nist:`2024-24806` +- libxml2: Fix for :cve_nist:`2024-25062` +- linux-yocto/5.15: Fix :cve_nist:`2022-36402`, :cve_nist:`2022-40982`, :cve_nist:`2022-47940`, :cve_nist:`2023-1193`, :cve_nist:`2023-1194`, :cve_nist:`2023-3772`, :cve_mitre:`2023-3867`, :cve_nist:`2023-4128`, :cve_nist:`2023-4206`, :cve_nist:`2023-4207`, :cve_nist:`2023-4208`, :cve_nist:`2023-4244`, :cve_nist:`2023-4273`, :cve_nist:`2023-4563`, :cve_nist:`2023-4569`, :cve_nist:`2023-4623`, :cve_nist:`2023-4881`, :cve_nist:`2023-4921`, :cve_nist:`2023-5158`, :cve_nist:`2023-5717`, :cve_nist:`2023-6040`, :cve_nist:`2023-6121`, :cve_nist:`2023-6176`, :cve_nist:`2023-6546`, :cve_nist:`2023-6606`, :cve_nist:`2023-6622`, :cve_nist:`2023-6817`, :cve_nist:`2023-6915`, :cve_nist:`2023-6931`, :cve_nist:`2023-6932`, :cve_nist:`2023-20569`, :cve_nist:`2023-20588`, :cve_nist:`2023-25775`, :cve_nist:`2023-31085`, :cve_nist:`2023-32247`, :cve_nist:`2023-32250`, :cve_nist:`2023-32252`, :cve_nist:`2023-32254`, :cve_nist:`2023-32257`, :cve_nist:`2023-32258`, :cve_nist:`2023-34324`, :cve_nist:`2023-35827`, :cve_nist:`2023-38427`, :cve_nist:`2023-38430`, :cve_nist:`2023-38431`, :cve_nist:`2023-39189`, :cve_nist:`2023-39192`, :cve_nist:`2023-39193`, :cve_nist:`2023-39194`, :cve_nist:`2023-39198`, :cve_nist:`2023-40283`, :cve_nist:`2023-42752`, :cve_nist:`2023-42753`, :cve_nist:`2023-42754`, :cve_nist:`2023-42755`, :cve_nist:`2023-45871`, :cve_nist:`2023-46343`, :cve_nist:`2023-46813`, :cve_nist:`2023-46838`, :cve_nist:`2023-46862`, :cve_nist:`2023-51042`, :cve_nist:`2023-51779`, :cve_mitre:`2023-52340`, :cve_nist:`2023-52429`, :cve_nist:`2023-52435`, :cve_nist:`2023-52436`, :cve_nist:`2023-52438`, :cve_nist:`2023-52439`, :cve_nist:`2023-52441`, :cve_nist:`2023-52442`, :cve_nist:`2023-52443`, :cve_nist:`2023-52444`, :cve_nist:`2023-52445`, :cve_nist:`2023-52448`, :cve_nist:`2023-52449`, :cve_nist:`2023-52451`, :cve_nist:`2023-52454`, :cve_nist:`2023-52456`, :cve_nist:`2023-52457`, :cve_nist:`2023-52458`, :cve_nist:`2023-52463`, :cve_nist:`2023-52464`, :cve_nist:`2024-0340`, :cve_nist:`2024-0584`, :cve_nist:`2024-0607`, :cve_nist:`2024-0641`, :cve_nist:`2024-0646`, :cve_nist:`2024-1085`, :cve_nist:`2024-1086`, :cve_nist:`2024-1151`, :cve_nist:`2024-22705`, :cve_nist:`2024-23849`, :cve_nist:`2024-23850`, :cve_nist:`2024-23851`, :cve_nist:`2024-24860`, :cve_nist:`2024-26586`, :cve_nist:`2024-26589`, :cve_nist:`2024-26591`, :cve_nist:`2024-26592`, :cve_nist:`2024-26593`, :cve_nist:`2024-26594`, :cve_nist:`2024-26597` and :cve_nist:`2024-26598` +- linux-yocto/5.15: Ignore :cve_nist:`2020-27418`, :cve_nist:`2020-36766`, :cve_nist:`2021-33630`, :cve_nist:`2021-33631`, :cve_nist:`2022-48619`, :cve_nist:`2023-2430`, :cve_nist:`2023-4610`, :cve_nist:`2023-4732`, :cve_nist:`2023-5090`, :cve_nist:`2023-5178`, :cve_nist:`2023-5197`, :cve_nist:`2023-5345`, :cve_nist:`2023-5633`, :cve_nist:`2023-5972`, :cve_nist:`2023-6111`, :cve_nist:`2023-6200`, :cve_nist:`2023-6531`, :cve_nist:`2023-6679`, :cve_nist:`2023-7192`, :cve_nist:`2023-40791`, :cve_nist:`2023-42756`, :cve_nist:`2023-44466`, :cve_nist:`2023-45862`, :cve_nist:`2023-45863`, :cve_nist:`2023-45898`, :cve_nist:`2023-51043`, :cve_nist:`2023-51780`, :cve_nist:`2023-51781`, :cve_nist:`2023-51782`, :cve_nist:`2023-52433`, :cve_nist:`2023-52440`, :cve_nist:`2023-52446`, :cve_nist:`2023-52450`, :cve_nist:`2023-52453`, :cve_nist:`2023-52455`, :cve_nist:`2023-52459`, :cve_nist:`2023-52460`, :cve_nist:`2023-52461`, :cve_nist:`2023-52462`, :cve_nist:`2024-0193`, :cve_nist:`2024-0443`, :cve_nist:`2024-0562`, :cve_nist:`2024-0582`, :cve_nist:`2024-0639`, :cve_nist:`2024-0775`, :cve_nist:`2024-26581`, :cve_nist:`2024-26582`, :cve_nist:`2024-26590`, :cve_nist:`2024-26596` and :cve_nist:`2024-26599` +- linux-yocto/5.10: Fix :cve_nist:`2023-6040`, :cve_nist:`2023-6121`, :cve_nist:`2023-6606`, :cve_nist:`2023-6817`, :cve_nist:`2023-6915`, :cve_nist:`2023-6931`, :cve_nist:`2023-6932`, :cve_nist:`2023-39198`, :cve_nist:`2023-46838`, :cve_nist:`2023-51779`, :cve_nist:`2023-51780`, :cve_nist:`2023-51781`, :cve_nist:`2023-51782`, :cve_mitre:`2023-52340`, :cve_nist:`2024-0584` and :cve_nist:`2024-0646` +- linux-yocto/5.10: Ignore :cve_nist:`2021-33630`, :cve_nist:`2021-33631`, :cve_nist:`2022-1508`, :cve_nist:`2022-36402`, :cve_nist:`2022-48619`, :cve_nist:`2023-2430`, :cve_nist:`2023-4610`, :cve_nist:`2023-5972`, :cve_nist:`2023-6039`, :cve_nist:`2023-6200`, :cve_nist:`2023-6531`, :cve_nist:`2023-6546`, :cve_nist:`2023-6622`, :cve_nist:`2023-6679`, :cve_nist:`2023-7192`, :cve_nist:`2023-46343`, :cve_nist:`2023-51042`, :cve_nist:`2023-51043`, :cve_nist:`2024-0193`, :cve_nist:`2024-0443`, :cve_nist:`2024-0562`, :cve_nist:`2024-0582`, :cve_nist:`2024-0639`, :cve_nist:`2024-0641`, :cve_nist:`2024-0775`, :cve_nist:`2024-1085` and :cve_nist:`2024-22705` +- openssl: Fix :cve_nist:`2024-0727` +- python3-pycryptodome: Fix :cve_nist:`2023-52323` +- qemu: Fix :cve_nist:`2023-6693`, :cve_nist:`2023-42467` and :cve_nist:`2024-24474` +- vim: Fix :cve_nist:`2024-22667` +- xwayland: Fix :cve_nist:`2023-6377` and :cve_nist:`2023-6478` Fixes in Yocto-4.0.17 diff --git a/poky/documentation/migration-guides/release-notes-4.0.18.rst b/poky/documentation/migration-guides/release-notes-4.0.18.rst index fc8cd83c02..890148b5d6 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.18.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.18.rst @@ -6,22 +6,22 @@ Release notes for Yocto-4.0.18 (Kirkstone) Security Fixes in Yocto-4.0.18 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- curl: Fix :cve:`2024-2398` -- expat: fix :cve:`2023-52426` and :cve:`2024-28757` -- libssh2: fix :cve:`2023-48795` -- ncurses: Fix :cve:`2023-50495` -- nghttp2: Fix :cve:`2024-28182` and :cve:`2023-44487` -- openssh: Ignore :cve:`2023-51767` -- openssl: Fix :cve:`2024-2511` -- perl: Ignore :cve:`2023-47100` -- python3-cryptography: Fix :cve:`2024-26130` -- python3-urllib3: Fix :cve:`2023-45803` -- qemu: Fix :cve:`2023-6683` +- curl: Fix :cve_nist:`2024-2398` +- expat: fix :cve_nist:`2023-52426` and :cve_nist:`2024-28757` +- libssh2: fix :cve_nist:`2023-48795` +- ncurses: Fix :cve_nist:`2023-50495` +- nghttp2: Fix :cve_nist:`2024-28182` and :cve_nist:`2023-44487` +- openssh: Ignore :cve_nist:`2023-51767` +- openssl: Fix :cve_nist:`2024-2511` +- perl: Ignore :cve_nist:`2023-47100` +- python3-cryptography: Fix :cve_nist:`2024-26130` +- python3-urllib3: Fix :cve_nist:`2023-45803` +- qemu: Fix :cve_nist:`2023-6683` - ruby: fix :cve_mitre:`2024-27281` -- rust: Ignore :cve:`2024-24576` -- tiff: Fix :cve:`2023-52356` and :cve:`2023-6277` -- xserver-xorg: Fix :cve:`2024-31080` and :cve:`2024-31081` -- xwayland: Fix :cve:`2023-6816`, :cve:`2024-0408` and :cve:`2024-0409` +- rust: Ignore :cve_nist:`2024-24576` +- tiff: Fix :cve_nist:`2023-52356` and :cve_nist:`2023-6277` +- xserver-xorg: Fix :cve_nist:`2024-31080` and :cve_nist:`2024-31081` +- xwayland: Fix :cve_nist:`2023-6816`, :cve_nist:`2024-0408` and :cve_nist:`2024-0409` Fixes in Yocto-4.0.18 @@ -31,7 +31,7 @@ Fixes in Yocto-4.0.18 - common-licenses: Backport missing license - contributor-guide: add notes for tests - contributor-guide: be more specific about meta-* trees -- cups: fix typo in :cve:`2023-32360` backport patch +- cups: fix typo in :cve_nist:`2023-32360` backport patch - cve-update-nvd2-native: Add an age threshold for incremental update - cve-update-nvd2-native: Fix CVE configuration update - cve-update-nvd2-native: Fix typo in comment diff --git a/poky/documentation/migration-guides/release-notes-4.0.19.rst b/poky/documentation/migration-guides/release-notes-4.0.19.rst new file mode 100644 index 0000000000..e363f05d7d --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.19.rst @@ -0,0 +1,159 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-4.0.19 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.19 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- bluez5: Fix :cve_nist:`2023-27349`, :cve_nist:`2023-50229` and :cve_nist:`2023-50230` +- ghostscript: Fix :cve_nist:`2023-52722`, :cve_mitre:`2024-29510`, :cve_mitre:`2024-33869`, :cve_mitre:`2024-33870` and :cve_mitre:`2024-33871` +- git: Fix :cve_nist:`2024-32002`, :cve_nist:`2024-32004`, :cve_nist:`2024-32020`, :cve_nist:`2024-32021` and :cve_nist:`2024-32465` +- glibc: Fix :cve_nist:`2024-2961`, :cve_nist:`2024-33599`, :cve_nist:`2024-33600`, :cve_nist:`2024-33601` and :cve_nist:`2024-33602` +- gnutls: Fix :cve_nist:`2024-28834` and :cve_nist:`2024-28835` +- go: Fix :cve_nist:`2023-45288` +- gstreamer1.0-plugins-bad: Fix :cve_nist:`2023-44446`, :cve_nist:`2023-50186` and :cve_mitre:`2024-0444` +- less: Fix :cve_nist:`2024-32487` +- libarchive: Fix :cve_nist:`2024-26256` +- libarchive: Fix multiple null deference and heap overflow in pax writer (no CVE assigned) +- linux-yocto/5.15: Fix :cve_nist:`2023-6270`, :cve_nist:`2023-7042`, :cve_nist:`2023-52447`, :cve_nist:`2023-52620`, :cve_nist:`2024-22099`, :cve_nist:`2024-26622`, :cve_nist:`2024-26651`, :cve_nist:`2024-26659`, :cve_nist:`2024-26688`, :cve_nist:`2024-26782`, :cve_nist:`2024-26787`, :cve_nist:`2024-26788`, :cve_nist:`2024-26790`, :cve_nist:`2024-26791`, :cve_nist:`2024-26793`, :cve_nist:`2024-26795`, :cve_nist:`2024-26798`, :cve_nist:`2024-26801`, :cve_nist:`2024-26802`, :cve_nist:`2024-26803`, :cve_nist:`2024-26804`, :cve_nist:`2024-26805` and :cve_nist:`2024-26809` +- linux-yocto/5.15: Ignore :cve_nist:`2019-25160`, :cve_nist:`2019-25162`, :cve_nist:`2020-36775`, :cve_nist:`2020-36776`, :cve_nist:`2020-36777`, :cve_nist:`2020-36778`, :cve_nist:`2020-36779`, :cve_nist:`2020-36780`, :cve_nist:`2020-36781`, :cve_nist:`2020-36782`, :cve_nist:`2020-36783`, :cve_nist:`2020-36784`, :cve_nist:`2020-36785`, :cve_nist:`2020-36786`, :cve_nist:`2020-36787`, :cve_nist:`2021-46904`, :cve_nist:`2021-46905`, :cve_nist:`2021-46906`, :cve_nist:`2021-46908`, :cve_nist:`2021-46909`, :cve_nist:`2021-46910`, :cve_nist:`2021-46911`, :cve_nist:`2021-46912`, :cve_nist:`2021-46913`, :cve_nist:`2021-46914`, :cve_nist:`2021-46915`, :cve_nist:`2021-46916`, :cve_nist:`2021-46917`, :cve_nist:`2021-46918`, :cve_nist:`2021-46919`, :cve_nist:`2021-46920`, :cve_nist:`2021-46921`, :cve_nist:`2021-46922`, :cve_nist:`2021-46923`, :cve_nist:`2021-46924`, :cve_nist:`2021-46925`, :cve_nist:`2021-46926`, :cve_nist:`2021-46927`, :cve_nist:`2021-46928`, :cve_nist:`2021-46929`, :cve_nist:`2021-46930`, :cve_nist:`2021-46931`, :cve_nist:`2021-46932`, :cve_nist:`2021-46933`, :cve_nist:`2021-46934`, :cve_nist:`2021-46935`, :cve_nist:`2021-46936`, :cve_nist:`2021-46937`, :cve_nist:`2021-46938`, :cve_nist:`2021-46939`, :cve_nist:`2021-46940`, :cve_nist:`2021-46941`, :cve_nist:`2021-46942`, :cve_nist:`2021-46943`, :cve_nist:`2021-46944`, :cve_nist:`2021-46945`, :cve_nist:`2021-46947`, :cve_nist:`2021-46948`, :cve_nist:`2021-46949`, :cve_nist:`2021-46950`, :cve_nist:`2021-46951`, :cve_nist:`2021-46952`, :cve_nist:`2021-46953`, :cve_nist:`2021-46954`, :cve_nist:`2021-46955`, :cve_nist:`2021-46956`, :cve_nist:`2021-46957`, :cve_nist:`2021-46958`, :cve_nist:`2021-46959`, :cve_nist:`2021-46960`, :cve_nist:`2021-46961`, :cve_nist:`2021-46962`, :cve_nist:`2021-46963`, :cve_nist:`2021-46964`, :cve_nist:`2021-46965`, :cve_nist:`2021-46966`, :cve_nist:`2021-46967`, :cve_nist:`2021-46968`, :cve_nist:`2021-46969`, :cve_nist:`2021-46970`, :cve_nist:`2021-46971`, :cve_nist:`2021-46972`, :cve_nist:`2021-46973`, :cve_nist:`2021-46974`, :cve_nist:`2021-46976`, :cve_nist:`2021-46977`, :cve_nist:`2021-46978`, :cve_nist:`2021-46979`, :cve_nist:`2021-46980`, :cve_nist:`2021-46981`, :cve_nist:`2021-46982`, :cve_nist:`2021-46983`, :cve_nist:`2021-46984`, :cve_nist:`2021-46985`, :cve_nist:`2021-46986`, :cve_nist:`2021-46987`, :cve_nist:`2021-46988`, :cve_nist:`2021-46989`, :cve_nist:`2021-46990`, :cve_nist:`2021-46991`, :cve_nist:`2021-46992`, :cve_nist:`2021-46993`, :cve_nist:`2021-46994`, :cve_nist:`2021-46995`, :cve_nist:`2021-46996`, :cve_nist:`2021-46997`, :cve_nist:`2021-46998`, :cve_nist:`2021-46999`, :cve_nist:`2021-47000`, :cve_nist:`2021-47001`, :cve_nist:`2021-47002`, :cve_nist:`2021-47003`, :cve_nist:`2021-47004`, :cve_nist:`2021-47005`, :cve_nist:`2021-47006`, :cve_nist:`2021-47007`, :cve_nist:`2021-47008`, :cve_nist:`2021-47009`, :cve_nist:`2021-47010`, :cve_nist:`2021-47011`, :cve_nist:`2021-47012`, :cve_nist:`2021-47013`, :cve_nist:`2021-47014`, :cve_nist:`2021-47015`, :cve_nist:`2021-47016`, :cve_nist:`2021-47017`, :cve_nist:`2021-47018`, :cve_nist:`2021-47019`, :cve_nist:`2021-47020`, :cve_nist:`2021-47021`, :cve_nist:`2021-47022`, :cve_nist:`2021-47023`, :cve_nist:`2021-47024`, :cve_nist:`2021-47025`, :cve_nist:`2021-47026`, :cve_nist:`2021-47027`, :cve_nist:`2021-47028`, :cve_nist:`2021-47029`, :cve_nist:`2021-47030`, :cve_nist:`2021-47031`, :cve_nist:`2021-47032`, :cve_nist:`2021-47033`, :cve_nist:`2021-47034`, :cve_nist:`2021-47035`, :cve_nist:`2021-47036`, :cve_nist:`2021-47037`, :cve_nist:`2021-47038`, :cve_nist:`2021-47039`, :cve_nist:`2021-47040`, :cve_nist:`2021-47041`, :cve_nist:`2021-47042`, :cve_nist:`2021-47043`, :cve_nist:`2021-47044`, :cve_nist:`2021-47045`, :cve_nist:`2021-47046`, :cve_nist:`2021-47047`, :cve_nist:`2021-47048`, :cve_nist:`2021-47049`, :cve_nist:`2021-47050`, :cve_nist:`2021-47051`, :cve_nist:`2021-47052`, :cve_nist:`2021-47053`, :cve_nist:`2021-47054`, :cve_nist:`2021-47055`, :cve_nist:`2021-47056`, :cve_nist:`2021-47057`, :cve_nist:`2021-47058`, :cve_nist:`2021-47059`, :cve_nist:`2021-47060`, :cve_nist:`2021-47061`, :cve_nist:`2021-47062`, :cve_nist:`2021-47063`, :cve_nist:`2021-47064`, :cve_nist:`2021-47065`, :cve_nist:`2021-47066`, :cve_nist:`2021-47067`, :cve_nist:`2021-47068`, :cve_nist:`2021-47069`, :cve_nist:`2021-47070`, :cve_nist:`2021-47071`, :cve_nist:`2021-47072`, :cve_nist:`2021-47073`, :cve_nist:`2021-47074`, :cve_nist:`2021-47075`, :cve_nist:`2021-47076`, :cve_nist:`2021-47077`, :cve_nist:`2021-47078`, :cve_nist:`2021-47079`, :cve_nist:`2021-47080`, :cve_nist:`2021-47081`, :cve_nist:`2021-47082`, :cve_nist:`2021-47083`, :cve_nist:`2021-47086`, :cve_nist:`2021-47087`, :cve_nist:`2021-47088`, :cve_nist:`2021-47089`, :cve_nist:`2021-47090`, :cve_nist:`2021-47091`, :cve_nist:`2021-47092`, :cve_nist:`2021-47093`, :cve_nist:`2021-47094`, :cve_nist:`2021-47095`, :cve_nist:`2021-47096`, :cve_nist:`2021-47097`, :cve_nist:`2021-47098`, :cve_nist:`2021-47099`, :cve_nist:`2021-47100`, :cve_nist:`2021-47101`, :cve_nist:`2021-47102`, :cve_nist:`2021-47103`, :cve_nist:`2021-47104`, :cve_nist:`2021-47105`, :cve_nist:`2021-47106`, :cve_nist:`2021-47107`, :cve_nist:`2021-47108`, :cve_nist:`2021-47109`, :cve_nist:`2021-47110`, :cve_nist:`2021-47111`, :cve_nist:`2021-47112`, :cve_nist:`2021-47113`, :cve_nist:`2021-47114`, :cve_nist:`2021-47116`, :cve_nist:`2021-47117`, :cve_nist:`2021-47118`, :cve_nist:`2021-47119`, :cve_nist:`2021-47120`, :cve_nist:`2021-47121`, :cve_nist:`2021-47122`, :cve_nist:`2021-47123`, :cve_nist:`2021-47124`, :cve_nist:`2021-47125`, :cve_nist:`2021-47126`, :cve_nist:`2021-47127`, :cve_nist:`2021-47128`, :cve_nist:`2021-47129`, :cve_nist:`2021-47130`, :cve_nist:`2021-47131`, :cve_nist:`2021-47132`, :cve_nist:`2021-47133`, :cve_nist:`2021-47134`, :cve_nist:`2021-47135`, :cve_nist:`2021-47136`, :cve_nist:`2021-47137`, :cve_nist:`2021-47138`, :cve_nist:`2021-47139`, :cve_nist:`2021-47140`, :cve_nist:`2021-47141`, :cve_nist:`2021-47142`, :cve_nist:`2021-47143`, :cve_nist:`2021-47144`, :cve_nist:`2021-47145`, :cve_nist:`2021-47146`, :cve_nist:`2021-47147`, :cve_nist:`2021-47148`, :cve_nist:`2021-47149`, :cve_nist:`2021-47150`, :cve_nist:`2021-47151`, :cve_nist:`2021-47152`, :cve_nist:`2021-47153`, :cve_nist:`2021-47158`, :cve_nist:`2021-47159`, :cve_nist:`2021-47160`, :cve_nist:`2021-47161`, :cve_nist:`2021-47162`, :cve_nist:`2021-47163`, :cve_nist:`2021-47164`, :cve_nist:`2021-47165`, :cve_nist:`2021-47166`, :cve_nist:`2021-47167`, :cve_nist:`2021-47168`, :cve_nist:`2021-47169`, :cve_nist:`2021-47170`, :cve_nist:`2021-47171`, :cve_nist:`2021-47172`, :cve_nist:`2021-47173`, :cve_nist:`2021-47174`, :cve_nist:`2021-47175`, :cve_nist:`2021-47176`, :cve_nist:`2021-47177`, :cve_nist:`2021-47178`, :cve_nist:`2021-47179` and :cve_nist:`2021-47180` +- linux-yocto/5.15 (cont.): Ignore :cve_nist:`2022-48626`, :cve_nist:`2022-48627`, :cve_nist:`2022-48629`, :cve_nist:`2022-48630`, :cve_nist:`2023-6356`, :cve_nist:`2023-6536`, :cve_nist:`2023-52434`, :cve_nist:`2023-52465`, :cve_nist:`2023-52467`, :cve_nist:`2023-52468`, :cve_nist:`2023-52469`, :cve_nist:`2023-52470`, :cve_nist:`2023-52471`, :cve_nist:`2023-52472`, :cve_nist:`2023-52473`, :cve_nist:`2023-52474`, :cve_nist:`2023-52475`, :cve_nist:`2023-52476`, :cve_nist:`2023-52477`, :cve_nist:`2023-52478`, :cve_nist:`2023-52479`, :cve_nist:`2023-52480`, :cve_nist:`2023-52482`, :cve_nist:`2023-52483`, :cve_nist:`2023-52484`, :cve_nist:`2023-52486`, :cve_nist:`2023-52487`, :cve_nist:`2023-52489`, :cve_nist:`2023-52490`, :cve_nist:`2023-52491`, :cve_nist:`2023-52492`, :cve_nist:`2023-52493`, :cve_nist:`2023-52494`, :cve_nist:`2023-52495`, :cve_nist:`2023-52497`, :cve_nist:`2023-52498`, :cve_nist:`2023-52499`, :cve_nist:`2023-52500`, :cve_nist:`2023-52501`, :cve_nist:`2023-52502`, :cve_nist:`2023-52503`, :cve_nist:`2023-52504`, :cve_nist:`2023-52505`, :cve_nist:`2023-52507`, :cve_nist:`2023-52509`, :cve_nist:`2023-52510`, :cve_nist:`2023-52511`, :cve_nist:`2023-52512`, :cve_nist:`2023-52513`, :cve_nist:`2023-52515`, :cve_nist:`2023-52516`, :cve_nist:`2023-52517`, :cve_nist:`2023-52518`, :cve_nist:`2023-52519`, :cve_nist:`2023-52520`, :cve_nist:`2023-52522`, :cve_nist:`2023-52523`, :cve_nist:`2023-52524`, :cve_nist:`2023-52525`, :cve_nist:`2023-52526`, :cve_nist:`2023-52527`, :cve_nist:`2023-52528`, :cve_nist:`2023-52529`, :cve_nist:`2023-52531`, :cve_nist:`2023-52559`, :cve_nist:`2023-52560`, :cve_nist:`2023-52562`, :cve_nist:`2023-52563`, :cve_nist:`2023-52564`, :cve_nist:`2023-52566`, :cve_nist:`2023-52567`, :cve_nist:`2023-52570`, :cve_nist:`2023-52573`, :cve_nist:`2023-52574`, :cve_nist:`2023-52575`, :cve_nist:`2023-52577`, :cve_nist:`2023-52578`, :cve_nist:`2023-52580`, :cve_nist:`2023-52581`, :cve_nist:`2023-52583`, :cve_nist:`2023-52587`, :cve_nist:`2023-52588`, :cve_nist:`2023-52594`, :cve_nist:`2023-52595`, :cve_nist:`2023-52597`, :cve_nist:`2023-52598`, :cve_nist:`2023-52599`, :cve_nist:`2023-52600`, :cve_nist:`2023-52601`, :cve_nist:`2023-52602`, :cve_nist:`2023-52603`, :cve_nist:`2023-52604`, :cve_nist:`2023-52606`, :cve_nist:`2023-52607`, :cve_nist:`2023-52608`, :cve_nist:`2023-52609`, :cve_nist:`2023-52610`, :cve_nist:`2023-52611`, :cve_nist:`2023-52612`, :cve_nist:`2023-52613`, :cve_nist:`2023-52614`, :cve_nist:`2023-52615`, :cve_nist:`2023-52616`, :cve_nist:`2023-52617`, :cve_nist:`2023-52618`, :cve_nist:`2023-52619`, :cve_nist:`2023-52622`, :cve_nist:`2023-52623`, :cve_nist:`2023-52626`, :cve_nist:`2023-52627`, :cve_nist:`2023-52628`, :cve_nist:`2023-52630`, :cve_nist:`2023-52631`, :cve_nist:`2023-52633`, :cve_nist:`2023-52635`, :cve_nist:`2023-52636`, :cve_nist:`2023-52637`, :cve_nist:`2023-52638`, :cve_nist:`2023-52640`, :cve_nist:`2023-52641`, :cve_nist:`2024-0565`, :cve_nist:`2024-0841`, :cve_nist:`2024-23196`, :cve_nist:`2024-26587`, :cve_nist:`2024-26588`, :cve_nist:`2024-26600`, :cve_nist:`2024-26601`, :cve_nist:`2024-26602`, :cve_nist:`2024-26603`, :cve_nist:`2024-26604`, :cve_nist:`2024-26605`, :cve_nist:`2024-26606`, :cve_nist:`2024-26608`, :cve_nist:`2024-26610`, :cve_nist:`2024-26611`, :cve_nist:`2024-26612`, :cve_nist:`2024-26614`, :cve_nist:`2024-26615`, :cve_nist:`2024-26616`, :cve_nist:`2024-26617`, :cve_nist:`2024-26618`, :cve_nist:`2024-26619`, :cve_nist:`2024-26620`, :cve_nist:`2024-26621`, :cve_nist:`2024-26625`, :cve_nist:`2024-26626`, :cve_nist:`2024-26627`, :cve_nist:`2024-26629`, :cve_nist:`2024-26630`, :cve_nist:`2024-26631`, :cve_nist:`2024-26632`, :cve_nist:`2024-26633`, :cve_nist:`2024-26634`, :cve_nist:`2024-26635`, :cve_nist:`2024-26636`, :cve_nist:`2024-26637`, :cve_nist:`2024-26638`, :cve_nist:`2024-26639`, :cve_nist:`2024-26640`, :cve_nist:`2024-26641`, :cve_nist:`2024-26643`, :cve_nist:`2024-26644`, :cve_nist:`2024-26645`, :cve_nist:`2024-26649`, :cve_nist:`2024-26652`, :cve_nist:`2024-26653`, :cve_nist:`2024-26657`, :cve_nist:`2024-26660`, :cve_nist:`2024-26663`, :cve_nist:`2024-26664`, :cve_nist:`2024-26665`, :cve_nist:`2024-26666`, :cve_nist:`2024-26667`, :cve_nist:`2024-26668`, :cve_nist:`2024-26670`, :cve_nist:`2024-26671`, :cve_nist:`2024-26673`, :cve_nist:`2024-26674`, :cve_nist:`2024-26675`, :cve_nist:`2024-26676`, :cve_nist:`2024-26678`, :cve_nist:`2024-26679`, :cve_nist:`2024-26681`, :cve_nist:`2024-26682`, :cve_nist:`2024-26683`, :cve_nist:`2024-26684`, :cve_nist:`2024-26685`, :cve_nist:`2024-26689`, :cve_nist:`2024-26690`, :cve_nist:`2024-26692`, :cve_nist:`2024-26693`, :cve_nist:`2024-26694`, :cve_nist:`2024-26695`, :cve_nist:`2024-26696`, :cve_nist:`2024-26697`, :cve_nist:`2024-26698`, :cve_nist:`2024-26702`, :cve_nist:`2024-26703`, :cve_nist:`2024-26704`, :cve_nist:`2024-26705`, :cve_nist:`2024-26707`, :cve_nist:`2024-26708`, :cve_nist:`2024-26709`, :cve_nist:`2024-26710`, :cve_nist:`2024-26711`, :cve_nist:`2024-26712`, :cve_nist:`2024-26715`, :cve_nist:`2024-26716`, :cve_nist:`2024-26717`, :cve_nist:`2024-26720`, :cve_nist:`2024-26721`, :cve_nist:`2024-26722`, :cve_nist:`2024-26723`, :cve_nist:`2024-26724`, :cve_nist:`2024-26725`, :cve_nist:`2024-26727`, :cve_nist:`2024-26728`, :cve_nist:`2024-26729`, :cve_nist:`2024-26730`, :cve_nist:`2024-26731`, :cve_nist:`2024-26732`, :cve_nist:`2024-26733`, :cve_nist:`2024-26734`, :cve_nist:`2024-26735`, :cve_nist:`2024-26736`, :cve_nist:`2024-26737`, :cve_nist:`2024-26741`, :cve_nist:`2024-26742`, :cve_nist:`2024-26743`, :cve_nist:`2024-26744`, :cve_nist:`2024-26746`, :cve_nist:`2024-26747`, :cve_nist:`2024-26748`, :cve_nist:`2024-26749`, :cve_nist:`2024-26750`, :cve_nist:`2024-26751`, :cve_nist:`2024-26752`, :cve_nist:`2024-26753`, :cve_nist:`2024-26754`, :cve_nist:`2024-26755`, :cve_nist:`2024-26760`, :cve_nist:`2024-26761`, :cve_nist:`2024-26762`, :cve_nist:`2024-26763`, :cve_nist:`2024-26764`, :cve_nist:`2024-26766`, :cve_nist:`2024-26769`, :cve_nist:`2024-26771`, :cve_nist:`2024-26772`, :cve_nist:`2024-26773`, :cve_nist:`2024-26774`, :cve_nist:`2024-26776`, :cve_nist:`2024-26777`, :cve_nist:`2024-26778`, :cve_nist:`2024-26779`, :cve_nist:`2024-26780`, :cve_nist:`2024-26781`, :cve_nist:`2024-26783`, :cve_nist:`2024-26785`, :cve_nist:`2024-26786`, :cve_nist:`2024-26792`, :cve_nist:`2024-26794`, :cve_nist:`2024-26796`, :cve_nist:`2024-26799`, :cve_nist:`2024-26800`, :cve_nist:`2024-26807` and :cve_nist:`2024-26808` +- ncurses: Fix :cve_nist:`2023-45918` +- ofono: Fix :cve_nist:`2023-4233` and :cve_nist:`2023-4234` +- openssl: Fix :cve_nist:`2024-4603` +- util-linux: Fix :cve_nist:`2024-28085` +- xserver-xorg: Fix :cve_nist:`2024-31082` and :cve_nist:`2024-31083` + + +Fixes in Yocto-4.0.19 +~~~~~~~~~~~~~~~~~~~~~ + +- binutils: Rename CVE-2022-38126 patch to :cve_nist:`2022-35205` +- bitbake: parse: Improve/fix cache invalidation via mtime +- build-appliance-image: Update to kirkstone head revision +- go-mod.bbclass: do not pack go mod cache +- dev-manual: update custom distribution section +- docs: poky.yaml.in: drop mesa/sdl from essential host packages +- docs: standards.md: align with master branch +- glibc: Update to latest on stable 2.35 branch (54a666dc5c...) +- go.bbclass: fix path to linker in native Go builds +- go.bbclass: Always pass interpreter to linker +- initscripts: Add custom mount args for /var/lib +- kernel.bbclass: check if directory exists before removing empty module directory +- libpciaccess: Remove duplicated license entry +- linux-yocto/5.15: cfg: remove obselete CONFIG_NFSD_V3 option +- linux-yocto/5.15: update to v5.15.157 +- migration-notes: add release notes for 4.0.18 +- poky.conf: bump version for 4.0.19 +- ppp: Add RSA-MD in :term:`LICENSE` +- python3: Upgrade to 3.10.14 +- ref-manual: update releases.svg +- ref-manual: variables: Update default :term:`INHERIT_DISTRO` value +- rootfs-postcommands.bbclass: Only set DROPBEAR_RSAKEY_DIR once +- systemd-systemctl: Fix WantedBy processing + + +Known Issues in Yocto-4.0.19 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.19 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Alexander Kanavin +- Archana Polampalli +- Bhabu Bindu +- Bob Henz +- Bruce Ashfield +- Colin McAllister +- Dmitry Baryshkov +- Geoff Parker +- Heiko Thole +- Joerg Vehlow +- Lee Chee Yang +- Michael Glembotzki +- Michael Opdenacker +- Paul Eggleton +- Peter Marko +- Poonam Jadhav +- Richard Purdie +- Soumya Sambu +- Stefan Herbrechtsmeier +- Steve Sakoman +- Vijay Anusuri +- Yogita Urade + + +Repositories / Downloads for Yocto-4.0.19 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.19 </poky/log/?h=yocto-4.0.19>` +- Git Revision: :yocto_git:`e139e9d0ce343ba77a09601a976c92acd562c9df </poky/commit/?id=e139e9d0ce343ba77a09601a976c92acd562c9df>` +- Release Artefact: poky-e139e9d0ce343ba77a09601a976c92acd562c9df +- sha: 3e568af60ee599e262a359b50446c6cbe239481d8be2ee55403bda497735d636 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.19/poky-e139e9d0ce343ba77a09601a976c92acd562c9df.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.19/poky-e139e9d0ce343ba77a09601a976c92acd562c9df.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.19 </openembedded-core/log/?h=yocto-4.0.19>` +- Git Revision: :oe_git:`ab2649ef6c83f0ae7cac554a72e6bea4dcda0e99 </openembedded-core/commit/?id=ab2649ef6c83f0ae7cac554a72e6bea4dcda0e99>` +- Release Artefact: oecore-ab2649ef6c83f0ae7cac554a72e6bea4dcda0e99 +- sha: abc7601650651a2d2260f7e7e9e2e0709f25233148d66cb2d9481775b7b59a0c +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.19/oecore-ab2649ef6c83f0ae7cac554a72e6bea4dcda0e99.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.19/oecore-ab2649ef6c83f0ae7cac554a72e6bea4dcda0e99.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.19 </meta-mingw/log/?h=yocto-4.0.19>` +- Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>` +- Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7 +- sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.19/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.19/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.19 </meta-gplv2/log/?h=yocto-4.0.19>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.19/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.19/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.19 </bitbake/log/?h=yocto-4.0.19>` +- Git Revision: :oe_git:`5a90927f31c4f9fccbe5d9d07d08e6e69485baa8 </bitbake/commit/?id=5a90927f31c4f9fccbe5d9d07d08e6e69485baa8>` +- Release Artefact: bitbake-5a90927f31c4f9fccbe5d9d07d08e6e69485baa8 +- sha: e64b7f747718d10565d733057a8e6ee592c6b64983c7ffe623f9315ad35b6e0c +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.19/bitbake-5a90927f31c4f9fccbe5d9d07d08e6e69485baa8.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.19/bitbake-5a90927f31c4f9fccbe5d9d07d08e6e69485baa8.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.19 </yocto-docs/log/?h=yocto-4.0.19>` +- Git Revision: :yocto_git:`78b8d5b18274a41ffec43ca4e136abc717585f6d </yocto-docs/commit/?id=78b8d5b18274a41ffec43ca4e136abc717585f6d>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.2.rst b/poky/documentation/migration-guides/release-notes-4.0.2.rst index 2f724e33c4..57881fa359 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.2.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.2.rst @@ -6,13 +6,13 @@ Release notes for Yocto-4.0.2 (Kirkstone) Security Fixes in Yocto-4.0.2 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- libxslt: Mark :cve:`2022-29824` as not applying -- tiff: Add jbig :term:`PACKAGECONFIG` and clarify IGNORE :cve:`2022-1210` -- tiff: mark :cve:`2022-1622` and :cve:`2022-1623` as invalid -- pcre2:fix :cve:`2022-1586` Out-of-bounds read -- curl: fix :cve:`2022-22576`, :cve:`2022-27775`, :cve:`2022-27776`, :cve:`2022-27774`, :cve:`2022-30115`, :cve:`2022-27780`, :cve:`2022-27781`, :cve:`2022-27779` and :cve:`2022-27782` -- qemu: fix :cve:`2021-4206` and :cve:`2021-4207` -- freetype: fix :cve:`2022-27404`, :cve:`2022-27405` and :cve:`2022-27406` +- libxslt: Mark :cve_nist:`2022-29824` as not applying +- tiff: Add jbig :term:`PACKAGECONFIG` and clarify IGNORE :cve_nist:`2022-1210` +- tiff: mark :cve_nist:`2022-1622` and :cve_nist:`2022-1623` as invalid +- pcre2:fix :cve_nist:`2022-1586` Out-of-bounds read +- curl: fix :cve_nist:`2022-22576`, :cve_nist:`2022-27775`, :cve_nist:`2022-27776`, :cve_nist:`2022-27774`, :cve_nist:`2022-30115`, :cve_nist:`2022-27780`, :cve_nist:`2022-27781`, :cve_nist:`2022-27779` and :cve_nist:`2022-27782` +- qemu: fix :cve_nist:`2021-4206` and :cve_nist:`2021-4207` +- freetype: fix :cve_nist:`2022-27404`, :cve_nist:`2022-27405` and :cve_nist:`2022-27406` Fixes in Yocto-4.0.2 ~~~~~~~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-4.0.20.rst b/poky/documentation/migration-guides/release-notes-4.0.20.rst new file mode 100644 index 0000000000..d0f95fff50 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.20.rst @@ -0,0 +1,130 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-4.0.20 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.20 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- acpica: Fix :cve_nist:`2024-24856` +- glib-2.0: Fix :cve_nist:`2024-34397` +- gstreamer1.0-plugins-base: Fix :cve_nist:`2024-4453` +- libxml2: Fix :cve_nist:`2024-34459` +- openssh: fix :cve_nist:`2024-6387` +- openssl: Fix :cve_mitre:`2024-4741` and :cve_nist:`2024-5535` +- ruby: fix :cve_nist:`2024-27280` +- wget: Fix for :cve_nist:`2024-38428` + + +Fixes in Yocto-4.0.20 +~~~~~~~~~~~~~~~~~~~~~ + +- bitbake: tests/fetch: Tweak test to match upstream repo url change Upstream changed their urls, update our test to match. +- build-appliance-image: Update to kirkstone head revision +- glibc-tests: Add missing bash ptest dependency +- glibc-tests: correctly pull in the actual tests when installing -ptest package +- glibc: stable 2.35 branch updates +- gobject-introspection: Do not hardcode objdump name +- linuxloader: add -armhf on arm only for :term:`TARGET_FPU` 'hard' +- man-pages: add an alternative link name for crypt_r.3 +- man-pages: remove conflict pages +- migration-guides: add release notes for 4.0.19 +- openssl: Upgrade 3.0.13 -> 3.0.14 +- poky.conf: bump version for 4.0.20 + + +Known Issues in Yocto-4.0.20 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.20 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Archana Polampalli +- Changqing Li +- Deepthi Hemraj +- Jonas Gorski +- Jose Quaresma +- Khem Raj +- Lee Chee Yang +- Peter Marko +- Poonam Jadhav +- Siddharth Doshi +- Steve Sakoman +- Thomas Perrot +- Vijay Anusuri +- Yogita Urade + + +Repositories / Downloads for Yocto-4.0.20 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.20 </poky/log/?h=yocto-4.0.20>` +- Git Revision: :yocto_git:`6bd3969d32730538608e680653e032e66958fe84 </poky/commit/?id=6bd3969d32730538608e680653e032e66958fe84>` +- Release Artefact: poky-6bd3969d32730538608e680653e032e66958fe84 +- sha: b7ef1bd5ba1af257c4eb07a59b51d69e147723aea010eb2da99ea30dcbbbe2d9 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.20/poky-6bd3969d32730538608e680653e032e66958fe84.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.20/poky-6bd3969d32730538608e680653e032e66958fe84.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.20 </openembedded-core/log/?h=yocto-4.0.20>` +- Git Revision: :oe_git:`5d97b0576e98a2cf402abab1a1edcab223545d87 </openembedded-core/commit/?id=5d97b0576e98a2cf402abab1a1edcab223545d87>` +- Release Artefact: oecore-5d97b0576e98a2cf402abab1a1edcab223545d87 +- sha: 4064a32b8ff1ad8a98aa15e75b27585d2b27236c8cdfa4a28af6d6fef99b93c0 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.20/oecore-5d97b0576e98a2cf402abab1a1edcab223545d87.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.20/oecore-5d97b0576e98a2cf402abab1a1edcab223545d87.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.20 </meta-mingw/log/?h=yocto-4.0.20>` +- Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>` +- Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7 +- sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.20/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.20/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.20 </meta-gplv2/log/?h=yocto-4.0.20>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.20/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.20/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.20 </bitbake/log/?h=yocto-4.0.20>` +- Git Revision: :oe_git:`734b0ea3dfe45eb16ee60f0c2c388e22af4040e0 </bitbake/commit/?id=734b0ea3dfe45eb16ee60f0c2c388e22af4040e0>` +- Release Artefact: bitbake-734b0ea3dfe45eb16ee60f0c2c388e22af4040e0 +- sha: 99f4c6786fec790fd6c4577b5dea3c97c580cc4815bd409ce554a68ee99b0180 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.20/bitbake-734b0ea3dfe45eb16ee60f0c2c388e22af4040e0.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.20/bitbake-734b0ea3dfe45eb16ee60f0c2c388e22af4040e0.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.20 </yocto-docs/log/?h=yocto-4.0.20>` +- Git Revision: :yocto_git:`b15b1d369edf33cd91232fefa0278e7e89653a01 </yocto-docs/commit/?id=b15b1d369edf33cd91232fefa0278e7e89653a01>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.21.rst b/poky/documentation/migration-guides/release-notes-4.0.21.rst new file mode 100644 index 0000000000..abf2199ee5 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.21.rst @@ -0,0 +1,166 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-4.0.21 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.21 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- bind: Fix :cve_nist:`2024-4076`, :cve_nist:`2024-1737`, :cve_nist:`2024-0760` and :cve_nist:`2024-1975` +- apr: Fix :cve_nist:`2023-49582` +- busybox: Fix :cve_nist:`2023-42363`, :cve_nist:`2023-42364`, :cve_nist:`2023-42365`, :cve_nist:`2023-42366` and :cve_nist:`2021-42380` +- curl: Ignore :cve_nist:`2024-32928` +- curl: Fix :cve_nist:`2024-7264` +- ghostscript: Fix :cve_nist:`2024-29506`, :cve_nist:`2024-29509` and :cve_nist:`2024-29511` +- go: Fix :cve_nist:`2024-24789` and :cve_nist:`2024-24791` +- gtk+3: Fix :cve_nist:`2024-6655` +- libarchive: Ignore :cve_nist:`2024-37407` +- libyaml: Ignore :cve_nist:`2024-35325`, :cve_nist:`2024-35326` and :cve_nist:`2024-35328` +- linux-yocto/5.15: Fix :cve_nist:`2022-48772`, :cve_nist:`2024-35972`, :cve_nist:`2024-35984`, :cve_nist:`2024-35990`, :cve_nist:`2024-35997`, :cve_nist:`2024-36008`, :cve_nist:`2024-36270`, :cve_nist:`2024-36489`, :cve_nist:`2024-36897`, :cve_nist:`2024-36938`, :cve_nist:`2024-36965`, :cve_nist:`2024-36967`, :cve_nist:`2024-36969`, :cve_nist:`2024-36971`, :cve_nist:`2024-36978`, :cve_nist:`2024-38546`, :cve_nist:`2024-38547`, :cve_nist:`2024-38549`, :cve_nist:`2024-38552`, :cve_nist:`2024-38555`, :cve_nist:`2024-38571`, :cve_nist:`2024-38583`, :cve_nist:`2024-38591`, :cve_nist:`2024-38597`, :cve_nist:`2024-38598`, :cve_nist:`2024-38600`, :cve_nist:`2024-38627`, :cve_nist:`2024-38633`, :cve_nist:`2024-38661`, :cve_nist:`2024-38662`, :cve_nist:`2024-38780`, :cve_nist:`2024-39277`, :cve_nist:`2024-39292`, :cve_nist:`2024-39301`, :cve_nist:`2024-39466`, :cve_nist:`2024-39468`, :cve_nist:`2024-39471`, :cve_nist:`2024-39475`, :cve_nist:`2024-39476`, :cve_nist:`2024-39480`, :cve_nist:`2024-39482`, :cve_nist:`2024-39484`, :cve_nist:`2024-39487`, :cve_nist:`2024-39489`, :cve_nist:`2024-39493`, :cve_nist:`2024-39495`, :cve_nist:`2024-39506`, :cve_nist:`2024-40902`, :cve_nist:`2024-40911`, :cve_nist:`2024-40912`, :cve_nist:`2024-40932`, :cve_nist:`2024-40934`, :cve_nist:`2024-40954`, :cve_nist:`2024-40956`, :cve_nist:`2024-40957`, :cve_nist:`2024-40958`, :cve_nist:`2024-40959`, :cve_nist:`2024-40960`, :cve_nist:`2024-40961`, :cve_nist:`2024-40967`, :cve_nist:`2024-40970`, :cve_nist:`2024-40980`, :cve_nist:`2024-40981`, :cve_nist:`2024-40994`, :cve_nist:`2024-40995`, :cve_nist:`2024-41000`, :cve_nist:`2024-41002`, :cve_nist:`2024-41006`, :cve_nist:`2024-41007`, :cve_nist:`2024-41046`, :cve_nist:`2024-41049`, :cve_nist:`2024-41055`, :cve_nist:`2024-41064`, :cve_nist:`2024-41070`, :cve_nist:`2024-41073`, :cve_nist:`2024-41087`, :cve_nist:`2024-41089`, :cve_nist:`2024-41092`, :cve_nist:`2024-41093`, :cve_nist:`2024-41095`, :cve_nist:`2024-41097`, :cve_nist:`2024-42068`, :cve_nist:`2024-42070`, :cve_nist:`2024-42076`, :cve_nist:`2024-42077`, :cve_nist:`2024-42080`, :cve_nist:`2024-42082`, :cve_nist:`2024-42085`, :cve_nist:`2024-42090`, :cve_nist:`2024-42093`, :cve_nist:`2024-42094`, :cve_nist:`2024-42101`, :cve_nist:`2024-42102`, :cve_nist:`2024-42104`, :cve_nist:`2024-42109`, :cve_nist:`2024-42140`, :cve_nist:`2024-42148`, :cve_nist:`2024-42152`, :cve_nist:`2024-42153`, :cve_nist:`2024-42154`, :cve_nist:`2024-42157`, :cve_nist:`2024-42161`, :cve_nist:`2024-42223`, :cve_nist:`2024-42224`, :cve_nist:`2024-42225`, :cve_nist:`2024-42229`, :cve_nist:`2024-42232`, :cve_nist:`2024-42236`, :cve_nist:`2024-42244` and :cve_nist:`2024-42247` +- llvm: Fix :cve_nist:`2023-46049` and :cve_nist:`2024-31852` +- ofono: fix :cve_nist:`2023-2794` +- orc: Fix :cve_nist:`2024-40897` +- python3-certifi: Fix :cve_nist:`2024-39689` +- python3-jinja2: Fix :cve_nist:`2024-34064` +- python3: Fix :cve_nist:`2024-8088` +- qemu: Fix :cve_nist:`2024-7409` +- ruby: Fix for :cve_nist:`2024-27282` +- tiff: Fix :cve_nist:`2024-7006` +- vim: Fix :cve_nist:`2024-22667`, :cve_nist:`2024-41957`, :cve_nist:`2024-41965` and :cve_nist:`2024-43374` +- wpa-supplicant: Fix :cve_nist:`2023-52160` + + +Fixes in Yocto-4.0.21 +~~~~~~~~~~~~~~~~~~~~~ + +- apr: upgrade to 1.7.5 +- bind: Upgrade to 9.18.28 +- bitbake: data_smart: Improve performance for VariableHistory +- build-appliance-image: Update to kirkstone head revision +- cryptodev-module: Fix build for linux 5.10.220 +- gcc-runtime: remove bashism +- grub: fs/fat: Don't error when mtime is 0 +- image_types.bbclass: Use --force also with lz4,lzop +- libsoup: fix compile error on centos7 +- linux-yocto/5.15: upgrade to v5.15.164 +- lttng-modules: Upgrade to 2.13.14 +- migration-guide: add release notes for 4.0.20 +- orc: upgrade to 0.4.39 +- poky.conf: bump version for 4.0.21 +- python3-jinja2: upgrade to 3.1.4 +- python3-pycryptodome(x): use python_setuptools_build_meta build class +- python3: add PACKAGECONFIG[editline] +- ref-manual: fix typo and move :term:`SYSROOT_DIRS` example +- sqlite3: CVE_ID correction for :cve_nist:`2023-7104` as patched +- sqlite3: Rename patch for :cve_nist:`2022-35737` +- uboot-sign: Fix index error in concat_dtb_helper() with multiple configs +- vim: upgrade to 9.1.0682 +- wireless-regdb: upgrade to 2024.07.04 + + +Known Issues in Yocto-4.0.21 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.21 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Archana Polampalli +- Ashish Sharma +- Bruce Ashfield +- Deepthi Hemraj +- Divya Chellam +- Florian Amstutz +- Guocai He +- Hitendra Prajapati +- Hugo SIMELIERE +- Lee Chee Yang +- Leon Anavi +- Matthias Pritschet +- Ming Liu +- Niko Mauno +- Peter Marko +- Robert Yang +- Rohini Sangam +- Ross Burton +- Siddharth Doshi +- Soumya Sambu +- Steve Sakoman +- Vijay Anusuri +- Vrushti Dabhi +- Wang Mingyu +- Yogita Urade + + +Repositories / Downloads for Yocto-4.0.21 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.21 </poky/log/?h=yocto-4.0.21>` +- Git Revision: :yocto_git:`4cdc553814640851cce85f84ee9c0b58646cd33b </poky/commit/?id=4cdc553814640851cce85f84ee9c0b58646cd33b>` +- Release Artefact: poky-4cdc553814640851cce85f84ee9c0b58646cd33b +- sha: 460e3a4ede491a9b66c5d262cd9498d5bcca1f2d880885342b08dc32b967f33d +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/poky-4cdc553814640851cce85f84ee9c0b58646cd33b.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/poky-4cdc553814640851cce85f84ee9c0b58646cd33b.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.21 </openembedded-core/log/?h=yocto-4.0.21>` +- Git Revision: :oe_git:`c40a3fec49942ac6d25ba33e57e801a550e252c9 </openembedded-core/commit/?id=c40a3fec49942ac6d25ba33e57e801a550e252c9>` +- Release Artefact: oecore-c40a3fec49942ac6d25ba33e57e801a550e252c9 +- sha: afc2aaf312f9fb2590ae006615557ec605c98eff42bc380a1b2d6e39cfdf8930 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/oecore-c40a3fec49942ac6d25ba33e57e801a550e252c9.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/oecore-c40a3fec49942ac6d25ba33e57e801a550e252c9.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.21 </meta-mingw/log/?h=yocto-4.0.21>` +- Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>` +- Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7 +- sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.21 </meta-gplv2/log/?h=yocto-4.0.21>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.21 </bitbake/log/?h=yocto-4.0.21>` +- Git Revision: :oe_git:`ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1 </bitbake/commit/?id=ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1>` +- Release Artefact: bitbake-ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1 +- sha: 1cb102f4c8dbd067f0262072e4e629ec7cb423103111ccdde75a09fcb8f55e5f +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.21/bitbake-ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.21/bitbake-ec2a99a077da9aa0e99e8b05e0c65dcbd45864b1.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.21 </yocto-docs/log/?h=yocto-4.0.21>` +- Git Revision: :yocto_git:`512025edd9b3b6b8d0938b35bb6188c9f3b7f17d </yocto-docs/commit/?id=512025edd9b3b6b8d0938b35bb6188c9f3b7f17d>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.22.rst b/poky/documentation/migration-guides/release-notes-4.0.22.rst new file mode 100644 index 0000000000..b2b98bd907 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.22.rst @@ -0,0 +1,196 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-4.0.22 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.22 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- cups: Fix :cve_nist:`2024-35235` and :cve_nist:`2024-47175` +- curl: Fix :cve_nist:`2024-8096` +- expat: Fix :cve_nist:`2024-45490`, :cve_nist:`2024-45491` and :cve_nist:`2024-45492` +- gnupg: Ignore :cve_nist:`2022-3219` +- libpcap: Fix :cve_nist:`2023-7256` and :cve_nist:`2024-8006` +- linux-yocto/5.10: Fix :cve_nist:`2022-48772`, :cve_nist:`2023-52434`, :cve_nist:`2023-52447`, :cve_nist:`2023-52458`, :cve_nist:`2024-0841`, :cve_nist:`2024-26601`, :cve_nist:`2024-26882`, :cve_nist:`2024-26883`, :cve_nist:`2024-26884`, :cve_nist:`2024-26885`, :cve_nist:`2024-26898`, :cve_nist:`2024-26901`, :cve_nist:`2024-26903`, :cve_nist:`2024-26907`, :cve_nist:`2024-26934`, :cve_nist:`2024-26978`, :cve_nist:`2024-27013`, :cve_nist:`2024-27020`, :cve_nist:`2024-35972`, :cve_nist:`2024-35978`, :cve_nist:`2024-35982`, :cve_nist:`2024-35984`, :cve_nist:`2024-35990`, :cve_nist:`2024-35997`, :cve_nist:`2024-36008`, :cve_nist:`2024-36270`, :cve_nist:`2024-36489`, :cve_nist:`2024-36902`, :cve_nist:`2024-36971`, :cve_nist:`2024-36978`, :cve_nist:`2024-38546`, :cve_nist:`2024-38547`, :cve_nist:`2024-38549`, :cve_nist:`2024-38552`, :cve_nist:`2024-38555`, :cve_nist:`2024-38583`, :cve_nist:`2024-38590`, :cve_nist:`2024-38597`, :cve_nist:`2024-38598`, :cve_nist:`2024-38627`, :cve_nist:`2024-38633`, :cve_nist:`2024-38661`, :cve_nist:`2024-38662`, :cve_nist:`2024-38780`, :cve_nist:`2024-39292`, :cve_nist:`2024-39301`, :cve_nist:`2024-39468`, :cve_nist:`2024-39471`, :cve_nist:`2024-39475`, :cve_nist:`2024-39476`, :cve_nist:`2024-39480`, :cve_nist:`2024-39482`, :cve_nist:`2024-39484`, :cve_nist:`2024-39487`, :cve_nist:`2024-39489`, :cve_nist:`2024-39495`, :cve_nist:`2024-39506`, :cve_nist:`2024-40902`, :cve_nist:`2024-40904`, :cve_nist:`2024-40905`, :cve_nist:`2024-40912`, :cve_nist:`2024-40932`, :cve_nist:`2024-40934`, :cve_nist:`2024-40958`, :cve_nist:`2024-40959`, :cve_nist:`2024-40960`, :cve_nist:`2024-40961`, :cve_nist:`2024-40980`, :cve_nist:`2024-40981`, :cve_nist:`2024-40995`, :cve_nist:`2024-41000`, :cve_nist:`2024-41006`, :cve_nist:`2024-41007`, :cve_nist:`2024-41012`, :cve_nist:`2024-41040`, :cve_nist:`2024-41046`, :cve_nist:`2024-41049`, :cve_nist:`2024-41059`, :cve_nist:`2024-41063`, :cve_nist:`2024-41064`, :cve_nist:`2024-41070`, :cve_nist:`2024-41087`, :cve_nist:`2024-41089`, :cve_nist:`2024-41092`, :cve_nist:`2024-41095`, :cve_nist:`2024-41097`, :cve_nist:`2024-42070`, :cve_nist:`2024-42076`, :cve_nist:`2024-42077`, :cve_nist:`2024-42082`, :cve_nist:`2024-42090`, :cve_nist:`2024-42093`, :cve_nist:`2024-42094`, :cve_nist:`2024-42101`, :cve_nist:`2024-42102`, :cve_nist:`2024-42104`, :cve_nist:`2024-42131`, :cve_nist:`2024-42137`, :cve_nist:`2024-42148`, :cve_nist:`2024-42152`, :cve_nist:`2024-42153`, :cve_nist:`2024-42154`, :cve_nist:`2024-42157`, :cve_nist:`2024-42161`, :cve_nist:`2024-42223`, :cve_nist:`2024-42224`, :cve_nist:`2024-42229`, :cve_nist:`2024-42232`, :cve_nist:`2024-42236`, :cve_nist:`2024-42244` and :cve_nist:`2024-42247` +- linux-yocto/5.15: Fix :cve_nist:`2023-52889`, :cve_nist:`2024-41011`, :cve_nist:`2024-42114`, :cve_nist:`2024-42259`, :cve_nist:`2024-42271`, :cve_nist:`2024-42272`, :cve_nist:`2024-42277`, :cve_nist:`2024-42280`, :cve_nist:`2024-42283`, :cve_nist:`2024-42284`, :cve_nist:`2024-42285`, :cve_nist:`2024-42286`, :cve_nist:`2024-42287`, :cve_nist:`2024-42288`, :cve_nist:`2024-42289`, :cve_nist:`2024-42301`, :cve_nist:`2024-42302`, :cve_nist:`2024-42309`, :cve_nist:`2024-42310`, :cve_nist:`2024-42311`, :cve_nist:`2024-42313`, :cve_nist:`2024-43817`, :cve_nist:`2024-43828`, :cve_nist:`2024-43854`, :cve_nist:`2024-43856`, :cve_nist:`2024-43858`, :cve_nist:`2024-43860`, :cve_nist:`2024-43861`, :cve_nist:`2024-43863`, :cve_nist:`2024-43871`, :cve_nist:`2024-43873`, :cve_nist:`2024-43882`, :cve_nist:`2024-43889`, :cve_nist:`2024-43890`, :cve_nist:`2024-43893`, :cve_nist:`2024-43894`, :cve_nist:`2024-43902`, :cve_nist:`2024-43907`, :cve_nist:`2024-43908`, :cve_nist:`2024-43909`, :cve_nist:`2024-43914`, :cve_nist:`2024-44934`, :cve_nist:`2024-44935`, :cve_nist:`2024-44944`, :cve_nist:`2024-44947`, :cve_nist:`2024-44952`, :cve_nist:`2024-44954`, :cve_nist:`2024-44958`, :cve_nist:`2024-44960`, :cve_nist:`2024-44965`, :cve_nist:`2024-44966`, :cve_nist:`2024-44969`, :cve_nist:`2024-44971`, :cve_nist:`2024-44982`, :cve_nist:`2024-44983`, :cve_nist:`2024-44985`, :cve_nist:`2024-44986`, :cve_nist:`2024-44987`, :cve_nist:`2024-44988`, :cve_nist:`2024-44989`, :cve_nist:`2024-44990`, :cve_nist:`2024-44995`, :cve_nist:`2024-44998`, :cve_nist:`2024-44999`, :cve_nist:`2024-45003`, :cve_nist:`2024-45006`, :cve_nist:`2024-45011`, :cve_nist:`2024-45016`, :cve_nist:`2024-45018`, :cve_nist:`2024-45021`, :cve_nist:`2024-45025`, :cve_nist:`2024-45026`, :cve_nist:`2024-45028`, :cve_nist:`2024-46673`, :cve_nist:`2024-46674`, :cve_nist:`2024-46675`, :cve_nist:`2024-46676`, :cve_nist:`2024-46677`, :cve_nist:`2024-46679`, :cve_nist:`2024-46685`, :cve_nist:`2024-46689`, :cve_nist:`2024-46702` and :cve_nist:`2024-46707` +- openssl: Fix :cve_nist:`2024-6119` +- procps: Fix :cve_nist:`2023-4016` +- python3: Fix :cve_nist:`2023-27043`, :cve_nist:`2024-4030`, :cve_nist:`2024-4032`, :cve_nist:`2024-6923`, :cve_nist:`2024-6232`, :cve_nist:`2024-7592` and :cve_nist:`2024-8088` +- qemu: Fix :cve_nist:`2024-4467` +- rust: Ignore :cve_nist:`2024-43402` +- webkitgtk: Fix :cve_nist:`2024-40779` +- wpa-supplicant: Ignore :cve_nist:`2024-5290` +- wpa-supplicant: Fix :cve_nist:`2024-3596` + + +Fixes in Yocto-4.0.22 +~~~~~~~~~~~~~~~~~~~~~ + +- bintuils: stable 2.38 branch update +- bitbake: fetch2/wget: Canonicalize :term:`DL_DIR` paths for wget2 compatibility +- bitbake: fetch/wget: Move files into place atomically +- bitbake: hashserv: tests: Omit client in slow server start test +- bitbake: tests/fetch: Tweak to work on Fedora40 +- bitbake: wget: Make wget --passive-ftp option conditional on ftp/ftps +- build-appliance-image: Update to kirkstone head revision +- buildhistory: Fix intermittent package file list creation +- buildhistory: Restoring files from preserve list +- buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage +- busybox: Fix cut with "-s" flag +- cdrtools-native: fix build with gcc-14 +- curl: free old conn better on reuse +- cve-exclusion: Drop the version comparision/warning +- dejagnu: Fix :term:`LICENSE` (change to GPL-3.0-only) +- doc/features: remove duplicate word in distribution feature ext2 +- gcc: upgrade to v11.5 +- gcr: Fix :term:`LICENSE` (change to LGPL-2.0-only) +- glibc: stable 2.35 branch updates +- install-buildtools: fix "test installation" step +- install-buildtools: remove md5 checksum validation +- install-buildtools: support buildtools-make-tarball and update to 4.1 +- iw: Fix :term:`LICENSE` (change to ISC) +- kmscube: Add patch to fix -int-conversion build error +- lib/oeqa: rename assertRaisesRegexp to assertRaisesRegex +- libedit: Make docs generation deterministic +- linux-yocto/5.10: fix NFSV3 config warning +- linux-yocto/5.10: remove obsolete options +- linux-yocto/5.10: update to v5.10.223 +- linux-yocto/5.15: update to v5.15.166 +- meta-world-pkgdata: Inherit nopackages +- migration-guide: add release notes for 4.0.21 +- openssl: Upgrade to 3.0.15 +- poky.conf: bump version for 4.0.22 +- populate_sdk_base: inherit nopackages +- python3: Upgrade to 3.10.15 +- ruby: Make docs generation deterministic +- runqemu: keep generating tap devices +- scripts/install-buildtools: Update to 4.0.21 +- selftest/runtime_test/virgl: Disable for all fedora +- testexport: fallback for empty :term:`IMAGE_LINK_NAME` +- testimage: fallback for empty :term:`IMAGE_LINK_NAME` +- tiff: Fix :term:`LICENSE` (change to libtiff) +- udev-extraconf: Add collect flag to mount +- unzip: Fix :term:`LICENSE` (change to Info-ZIP) +- valgrind: disable avx_estimate_insn.vgtest +- wpa-supplicant: Patch security advisory 2024-2 +- yocto-uninative: Update to 4.5 for gcc 14 +- yocto-uninative: Update to 4.6 for glibc 2.40 +- zip: Fix :term:`LICENSE` (change to Info-ZIP) +- zstd: fix :term:`LICENSE` statement (change to "BSD-3-Clause | GPL-2.0-only") + + +Known Issues in Yocto-4.0.22 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- ``oeqa/runtime``: the ``beaglebone-yocto`` target fails the ``parselogs`` + runtime test due to unexpected kernel error messages in the log (see + :yocto_bugs:`bug 15624 </show_bug.cgi?id=15624>` on Bugzilla). + + +Contributors to Yocto-4.0.22 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Aleksandar Nikolic +- Alexandre Belloni +- Archana Polampalli +- Bruce Ashfield +- Colin McAllister +- Deepthi Hemraj +- Divya Chellam +- Hitendra Prajapati +- Hugo SIMELIERE +- Jinfeng Wang +- Joshua Watt +- Jörg Sommer +- Konrad Weihmann +- Lee Chee Yang +- Martin Jansa +- Massimiliano Minella +- Michael Halstead +- Mingli Yu +- Niko Mauno +- Paul Eggleton +- Pedro Ferreira +- Peter Marko +- Purushottam Choudhary +- Richard Purdie +- Rob Woolley +- Rohini Sangam +- Ross Burton +- Rudolf J Streif +- Siddharth Doshi +- Steve Sakoman +- Vijay Anusuri +- Vivek Kumbhar + + +Repositories / Downloads for Yocto-4.0.22 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.22 </poky/log/?h=yocto-4.0.22>` +- Git Revision: :yocto_git:`7e87dc422d972e0dc98372318fcdc63a76347d16 </poky/commit/?id=7e87dc422d972e0dc98372318fcdc63a76347d16>` +- Release Artefact: poky-7e87dc422d972e0dc98372318fcdc63a76347d16 +- sha: 5058e7b2474f8cb73c19e776ef58d9784321ef42109d5982747c8c432531239f +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.22/poky-7e87dc422d972e0dc98372318fcdc63a76347d16.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.22/poky-7e87dc422d972e0dc98372318fcdc63a76347d16.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.22 </openembedded-core/log/?h=yocto-4.0.22>` +- Git Revision: :oe_git:`f09fca692f96c9c428e89c5ef53fbcb92ac0c9bf </openembedded-core/commit/?id=f09fca692f96c9c428e89c5ef53fbcb92ac0c9bf>` +- Release Artefact: oecore-f09fca692f96c9c428e89c5ef53fbcb92ac0c9bf +- sha: 378bcc840ba9fbf06a15fea1b5dacdd446f3ad4d85115d708e7bbb20629cdeb4 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.22/oecore-f09fca692f96c9c428e89c5ef53fbcb92ac0c9bf.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.22/oecore-f09fca692f96c9c428e89c5ef53fbcb92ac0c9bf.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.22 </meta-mingw/log/?h=yocto-4.0.22>` +- Git Revision: :yocto_git:`f6b38ce3c90e1600d41c2ebb41e152936a0357d7 </meta-mingw/commit/?id=f6b38ce3c90e1600d41c2ebb41e152936a0357d7>` +- Release Artefact: meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7 +- sha: 7d57167c19077f4ab95623d55a24c2267a3a3fb5ed83688659b4c03586373b25 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.22/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.22/meta-mingw-f6b38ce3c90e1600d41c2ebb41e152936a0357d7.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.22 </meta-gplv2/log/?h=yocto-4.0.22>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.22/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.22/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.22 </bitbake/log/?h=yocto-4.0.22>` +- Git Revision: :oe_git:`eb5c1ce6b1b8f33535ff7b9263ec7648044163ea </bitbake/commit/?id=eb5c1ce6b1b8f33535ff7b9263ec7648044163ea>` +- Release Artefact: bitbake-eb5c1ce6b1b8f33535ff7b9263ec7648044163ea +- sha: 473d3e9539160633f3de9d88cce69123f6c623e4c8ab35beb7875868564593cf +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.22/bitbake-eb5c1ce6b1b8f33535ff7b9263ec7648044163ea.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.22/bitbake-eb5c1ce6b1b8f33535ff7b9263ec7648044163ea.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.22 </yocto-docs/log/?h=yocto-4.0.22>` +- Git Revision: :yocto_git:`2169a52a24ebd1906039c42632bae6c4285a3aca </yocto-docs/commit/?id=2169a52a24ebd1906039c42632bae6c4285a3aca>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.23.rst b/poky/documentation/migration-guides/release-notes-4.0.23.rst new file mode 100644 index 0000000000..abf7c69759 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.23.rst @@ -0,0 +1,209 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-4.0.23 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.23 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- ``curl``: Fix :cve_nist:`2024-9681` +- ``expat``: Fix :cve_nist:`2024-50602` +- ``gcc``: Ignore :cve_nist:`2023-4039` +- ``ghostscript``: Fix :cve_nist:`2023-46361` and :cve_nist:`2024-29508` +- ``gstreamer1.0``: Ignore :cve_nist:`2024-0444` +- ``libarchive``: Fix :cve_nist:`2024-48957` and :cve_nist:`2024-48958` +- ``openssl``: Fix :cve_nist:`2024-9143` +- ``orc``: Fix :cve_nist:`2024-40897` +- ``python3``: Ignore :cve_nist:`2023-27043`, :cve_nist:`2024-6232` and :cve_nist:`2024-7592` +- ``qemu``: Fix :cve_nist:`2023-3019` +- ``vim``: Fix :cve_nist:`2024-43790`, :cve_nist:`2024-43802`, :cve_nist:`2024-45306` and :cve_nist:`2024-47814` +- ``zstd``: Fix :cve_nist:`2022-4899` + + +Fixes in Yocto-4.0.23 +~~~~~~~~~~~~~~~~~~~~~ + +- at-spi2-core: backport a patch to fix build with gcc-14 on host +- bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM +- bitbake: codeparser: Fix handling of string AST nodes with older Python versions +- bitbake: fetch2/git: Use quote from shlex, not pipes +- bitbake: gitsm: Add call_process_submodules() to remove duplicated code +- bitbake: gitsm: Remove downloads/tmpdir when failed +- bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab +- bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab +- bmap-tools: update :term:`HOMEPAGE` and :term:`SRC_URI` +- build-appliance-image: Update to kirkstone head revision +- cmake: Fix sporadic issues when determining compiler internals +- cracklib: Modify patch to compile with GCC 14 +- cve-check: add CVSS vector string to CVE database and reports +- cve-check: add support for cvss v4.0 +- cve_check: Use a local copy of the database during builds +- dev-manual: document how to provide confs from layer.conf +- documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint +- documentation: Makefile: fix epub and latexpdf targets +- documentation: README: add instruction to run Vale on a subset +- documentation: brief-yoctoprojectqs: update BB_HASHSERVE_UPSTREAM for new infrastructure +- documentation: conf.py: add a bitbake_git extlink +- documentation: rename :cve: role to :cve_nist: +- documentation: styles: vocabularies: Yocto: add sstate +- documnetation: contributor-guide: Remove duplicated words +- gcc: restore a patch for Neoverse N2 core +- glib-2.0: patch regression of :cve_nist:`2023-32665` +- kmscube: create_framebuffer: backport modifier fix +- libffi: backport a fix to build libffi-native with gcc-14 +- linux-firmware: Upgrade to 20240909 +- local.conf.sample: update BB_HASHSERVE_UPSTREAM for new infrastructure +- migration-guide: add release notes for 4.0.22 +- migration-guide: release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure +- nativesdk-intercept: Fix bad intercept chgrp/chown logic +- orc: Upgrade to 0.4.40 +- overlayfs-etc: add option to skip creation of mount dirs +- overview-manual: concepts: add details on package splitting +- package: Switch debug source handling to use prefix map +- patch.py: Use shlex instead of deprecated pipe +- poky.conf: bump version for 4.0.23 +- pseudo: Disable LFS on 32bit arches +- pseudo: Fix envp bug and add posix_spawn wrapper +- pseudo: Fix to work with glibc 2.40 +- pseudo: Switch back to the master branch +- pseudo: Update to include logic fix +- pseudo: Update to include open symlink handling bugfix +- pseudo: Update to pull in fchmodat fix +- pseudo: Update to pull in fd leak fix +- pseudo: Update to pull in gcc14 fix and missing statvfs64 intercept +- pseudo: Update to pull in linux-libc-headers race fix +- pseudo: Update to pull in python 3.12+ fix +- pseudo: Update to pull in syncfs probe fix +- ref-manual: add description for the "sysroot" term +- ref-manual: add missing CVE_CHECK manifest variables +- ref-manual: add missing :term:`EXTERNAL_KERNEL_DEVICETREE` variable +- ref-manual: add missing :term:`OPKGBUILDCMD` variable +- ref-manual: devtool-reference: document missing commands +- ref-manual: devtool-reference: refresh example outputs +- ref-manual: introduce :term:`CVE_CHECK_REPORT_PATCHED` variable +- ref-manual: release-process: add a reference to the doc's release +- ref-manual: release-process: refresh the current LTS releases +- ref-manual: release-process: update releases.svg +- ref-manual: release-process: update releases.svg with month after "Current" +- ref-manual: structure.rst: document missing tmp/ dirs +- ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables +- syslinux: Disable error on implicit-function-declaration +- util-linux: Define pidfd_* function signatures +- vala: add -Wno-error=incompatible-pointer-types work around +- vim: Upgrade to 9.1.0764 +- xmlto: backport a patch to fix build with gcc-14 on host +- zip: Fix build with gcc-14 +- zip: Make configure checks to be more robust + + +Known Issues in Yocto-4.0.23 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +-N/A + + +Contributors to Yocto-4.0.23 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Aleksandar Nikolic +- Alexandre Belloni +- Antoine Lubineau +- Antonin Godard +- Archana Polampalli +- Ashish Sharma +- Baruch Siach +- Eilís 'pidge' Ní Fhlannagáin +- Jose Quaresma +- Julien Stephan +- Khem Raj +- Lee Chee Yang +- Macpaul Lin +- Martin Jansa +- Michael Opdenacker +- Ola x Nilsson +- Peter Marko +- Philip Lorenz +- Randolph Sapp +- Richard Purdie +- Robert Yang +- Rohini Sangam +- Ruiqiang Hao +- Siddharth Doshi +- Steve Sakoman +- Talel BELHAJSALEM +- Wang Mingyu +- Yogita Urade +- Zoltan Boszormenyi + + +Repositories / Downloads for Yocto-4.0.23 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.23 </poky/log/?h=yocto-4.0.23>` +- Git Revision: :yocto_git:`8e092852b63e998d990b8f8e1aa91297dec4430f </poky/commit/?id=8e092852b63e998d990b8f8e1aa91297dec4430f>` +- Release Artefact: poky-8e092852b63e998d990b8f8e1aa91297dec4430f +- sha: 339d34d8432070dac948449e732ebf06a888eeb27ff548958b2395c9446b029d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/poky-8e092852b63e998d990b8f8e1aa91297dec4430f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/poky-8e092852b63e998d990b8f8e1aa91297dec4430f.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.23 </openembedded-core/log/?h=yocto-4.0.23>` +- Git Revision: :oe_git:`fb45c5cf8c2b663af293acb069d446610f77ff1a </openembedded-core/commit/?id=fb45c5cf8c2b663af293acb069d446610f77ff1a>` +- Release Artefact: oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a +- sha: 1d394370ea7d43fb885ab8a952d6d1e43f1a850745a5152d5ead5565a283a0f5 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.23 </meta-mingw/log/?h=yocto-4.0.23>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.23 </meta-gplv2/log/?h=yocto-4.0.23>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.23 </bitbake/log/?h=yocto-4.0.23>` +- Git Revision: :oe_git:`fb73c495c45d1d4107cfd60b67a5b4f11a99647b </bitbake/commit/?id=fb73c495c45d1d4107cfd60b67a5b4f11a99647b>` +- Release Artefact: bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b +- sha: 5cd271299951f25912a2e8d4de6d8769a4c0bb3bbcfc90815be41f23fd299a0b +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.23 </yocto-docs/log/?h=yocto-4.0.23>` +- Git Revision: :yocto_git:`TBD </yocto-docs/commit/?id=TBD>` + + diff --git a/poky/documentation/migration-guides/release-notes-4.0.24.rst b/poky/documentation/migration-guides/release-notes-4.0.24.rst new file mode 100644 index 0000000000..33372dc89e --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.24.rst @@ -0,0 +1,383 @@ +Release notes for Yocto-4.0.24 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.24 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- coreutils: Fix :cve_nist:`2024-0684` +- cpio: Ignore :cve_nist:`2023-7216` +- diffoscope: Fix :cve_nist:`2024-25711` +- ffmpeg: fix :cve_mitre:`2023-47342`, :cve_nist:`2023-50007`, :cve_nist:`2023-50008`, + :cve_nist:`2023-51793`, :cve_nist:`2023-51794`, :cve_nist:`2023-51796`, :cve_nist:`2023-51798`, + :cve_nist:`2024-7055`, :cve_nist:`2024-31578`, :cve_nist:`2024-31582`, :cve_nist:`2024-32230`, + :cve_nist:`2024-35366`, :cve_nist:`2024-35367` and :cve_nist:`2024-35368` +- ghostscript: Fix :cve_nist:`2024-46951`, :cve_nist:`2024-46952`, :cve_nist:`2024-46953`, + :cve_nist:`2024-46955` and :cve_nist:`2024-46956` +- ghostscript: Ignore :cve_nist:`2024-46954` +- glib-2.0: Fix :cve_nist:`2024-52533` +- gnupg: Ignore :cve_nist:`2022-3515` +- grub: Ignore :cve_nist:`2024-1048` and :cve_nist:`2023-4001` +- gstreame1.0: Ignore :cve_nist:`2023-40474`, :cve_nist:`2023-40475`, :cve_nist:`2023-40476`, + :cve_nist:`2023-44429`, :cve_nist:`2023-44446`, :cve_nist:`2023-50186` and :cve_nist:`2024-0444` +- gstreamer1.0-plugins-base: Fix :cve_nist:`2024-47538`, :cve_nist:`2024-47541`, + :cve_nist:`2024-47542`, :cve_nist:`2024-47600`, :cve_nist:`2024-47607`, :cve_nist:`2024-47615` + and :cve_nist:`2024-47835` +- gstreamer1.0-plugins-good: Fix :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, + :cve_nist:`2024-47540`, :cve_nist:`2024-47543`, :cve_nist:`2024-47544`, :cve_nist:`2024-47545`, + :cve_nist:`2024-47546`, :cve_nist:`2024-47596`, :cve_nist:`2024-47597`, :cve_nist:`2024-47598`, + :cve_nist:`2024-47599`, :cve_nist:`2024-47601`, :cve_nist:`2024-47602`, :cve_nist:`2024-47603`, + :cve_nist:`2024-47606`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775`, + :cve_nist:`2024-47776`, :cve_nist:`2024-47777`, :cve_nist:`2024-47778` and :cve_nist:`2024-47834` +- gstreamer1.0: Fix :cve_nist:`2024-47606` +- libarchive: Fix :cve_nist:`2024-20696` +- libpam: Fix :cve_nist:`2024-10041` +- libsdl2: Ignore :cve_nist:`2020-14409` and :cve_nist:`2020-14410` +- libsndfile1: Fix :cve_nist:`2022-33065` and :cve_nist:`2024-50612` +- libsoup-2.4: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531` and :cve_nist:`2024-52532` +- libsoup: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531` and :cve_nist:`2024-52532` +- linux-yocto/5.10: Fix :cve_nist:`2023-52889`, :cve_nist:`2023-52917`, :cve_nist:`2023-52918`, + :cve_nist:`2024-41011`, :cve_nist:`2024-42259`, :cve_nist:`2024-42271`, :cve_nist:`2024-42272`, + :cve_nist:`2024-42280`, :cve_nist:`2024-42283`, :cve_nist:`2024-42284`, :cve_nist:`2024-42285`, + :cve_nist:`2024-42286`, :cve_nist:`2024-42287`, :cve_nist:`2024-42288`, :cve_nist:`2024-42289`, + :cve_nist:`2024-42301`, :cve_nist:`2024-42302`, :cve_nist:`2024-42309`, :cve_nist:`2024-42310`, + :cve_nist:`2024-42311`, :cve_nist:`2024-42313`, :cve_nist:`2024-43828`, :cve_nist:`2024-43856`, + :cve_nist:`2024-43858`, :cve_nist:`2024-43860`, :cve_nist:`2024-43861`, :cve_nist:`2024-43871`, + :cve_nist:`2024-43882`, :cve_nist:`2024-43889`, :cve_nist:`2024-43890`, :cve_nist:`2024-43893`, + :cve_nist:`2024-43894`, :cve_nist:`2024-43907`, :cve_nist:`2024-43908`, :cve_nist:`2024-43914`, + :cve_nist:`2024-44935`, :cve_nist:`2024-44944`, :cve_nist:`2024-44947`, :cve_nist:`2024-44954`, + :cve_nist:`2024-44960`, :cve_nist:`2024-44965`, :cve_nist:`2024-44969`, :cve_nist:`2024-44971`, + :cve_nist:`2024-44987`, :cve_nist:`2024-44988`, :cve_nist:`2024-44989`, :cve_nist:`2024-44990`, + :cve_nist:`2024-44995`, :cve_nist:`2024-44998`, :cve_nist:`2024-44999`, :cve_nist:`2024-45003`, + :cve_nist:`2024-45006`, :cve_nist:`2024-45016`, :cve_nist:`2024-45018`, :cve_nist:`2024-45021`, + :cve_nist:`2024-45025`, :cve_nist:`2024-45026`, :cve_nist:`2024-45028`, :cve_nist:`2024-46673`, + :cve_nist:`2024-46674`, :cve_nist:`2024-46675`, :cve_nist:`2024-46676`, :cve_nist:`2024-46677`, + :cve_nist:`2024-46679`, :cve_nist:`2024-46685`, :cve_nist:`2024-46689`, :cve_nist:`2024-46702`, + :cve_nist:`2024-46707`, :cve_nist:`2024-46714`, :cve_nist:`2024-46719`, :cve_nist:`2024-46721`, + :cve_nist:`2024-46722`, :cve_nist:`2024-46723`, :cve_nist:`2024-46724`, :cve_nist:`2024-46725`, + :cve_nist:`2024-46731`, :cve_nist:`2024-46737`, :cve_nist:`2024-46738`, :cve_nist:`2024-46739`, + :cve_nist:`2024-46740`, :cve_nist:`2024-46743`, :cve_nist:`2024-46744`, :cve_nist:`2024-46747`, + :cve_nist:`2024-46750`, :cve_nist:`2024-46755`, :cve_nist:`2024-46759`, :cve_nist:`2024-46761`, + :cve_nist:`2024-46763`, :cve_nist:`2024-46771`, :cve_nist:`2024-46777`, :cve_nist:`2024-46780`, + :cve_nist:`2024-46781`, :cve_nist:`2024-46782`, :cve_nist:`2024-46783`, :cve_nist:`2024-46791`, + :cve_nist:`2024-46798`, :cve_nist:`2024-46800`, :cve_nist:`2024-46804`, :cve_nist:`2024-46814`, + :cve_nist:`2024-46815`, :cve_nist:`2024-46817`, :cve_nist:`2024-46818`, :cve_nist:`2024-46819`, + :cve_nist:`2024-46822`, :cve_nist:`2024-46828`, :cve_nist:`2024-46829`, :cve_nist:`2024-46832`, + :cve_nist:`2024-46840`, :cve_nist:`2024-46844`, :cve_nist:`2024-47659`, :cve_nist:`2024-47660`, + :cve_nist:`2024-47663`, :cve_nist:`2024-47667`, :cve_nist:`2024-47668`, :cve_nist:`2024-47669`, + :cve_nist:`2024-47679`, :cve_nist:`2024-47684`, :cve_nist:`2024-47685`, :cve_nist:`2024-47692`, + :cve_nist:`2024-47697`, :cve_nist:`2024-47698`, :cve_nist:`2024-47699`, :cve_nist:`2024-47701`, + :cve_nist:`2024-47705`, :cve_nist:`2024-47706`, :cve_nist:`2024-47710`, :cve_nist:`2024-47712`, + :cve_nist:`2024-47713`, :cve_nist:`2024-47718`, :cve_nist:`2024-47723`, :cve_nist:`2024-47735`, + :cve_nist:`2024-47737`, :cve_nist:`2024-47739`, :cve_nist:`2024-47742`, :cve_nist:`2024-47747`, + :cve_nist:`2024-47748`, :cve_nist:`2024-47749`, :cve_nist:`2024-47757`, :cve_nist:`2024-49851`, + :cve_nist:`2024-49858`, :cve_nist:`2024-49860`, :cve_nist:`2024-49863`, :cve_nist:`2024-49867`, + :cve_nist:`2024-49868`, :cve_nist:`2024-49875`, :cve_nist:`2024-49877`, :cve_nist:`2024-49878`, + :cve_nist:`2024-49879`, :cve_nist:`2024-49881`, :cve_nist:`2024-49882`, :cve_nist:`2024-49883`, + :cve_nist:`2024-49884`, :cve_nist:`2024-49889`, :cve_nist:`2024-49890`, :cve_nist:`2024-49892`, + :cve_nist:`2024-49894`, :cve_nist:`2024-49895`, :cve_nist:`2024-49896`, :cve_nist:`2024-49900`, + :cve_nist:`2024-49902`, :cve_nist:`2024-49903`, :cve_nist:`2024-49907`, :cve_nist:`2024-49913`, + :cve_nist:`2024-49924`, :cve_nist:`2024-49930`, :cve_nist:`2024-49933`, :cve_nist:`2024-49936`, + :cve_nist:`2024-49938`, :cve_nist:`2024-49944`, :cve_nist:`2024-49948`, :cve_nist:`2024-49949`, + :cve_nist:`2024-49952`, :cve_nist:`2024-49955`, :cve_nist:`2024-49957`, :cve_nist:`2024-49958`, + :cve_nist:`2024-49959`, :cve_nist:`2024-49962`, :cve_nist:`2024-49963`, :cve_nist:`2024-49965`, + :cve_nist:`2024-49966`, :cve_nist:`2024-49969`, :cve_nist:`2024-49973`, :cve_nist:`2024-49975`, + :cve_nist:`2024-49977`, :cve_nist:`2024-49981`, :cve_nist:`2024-49982`, :cve_nist:`2024-49983`, + :cve_nist:`2024-49985`, :cve_nist:`2024-49995`, :cve_nist:`2024-49997`, :cve_nist:`2024-50001`, + :cve_nist:`2024-50006`, :cve_nist:`2024-50007`, :cve_nist:`2024-50008`, :cve_nist:`2024-50013`, + :cve_nist:`2024-50015`, :cve_nist:`2024-50024`, :cve_nist:`2024-50033`, :cve_nist:`2024-50035`, + :cve_nist:`2024-50039`, :cve_nist:`2024-50040`, :cve_nist:`2024-50044`, :cve_nist:`2024-50045`, + :cve_nist:`2024-50046`, :cve_nist:`2024-50049`, :cve_nist:`2024-50059`, :cve_nist:`2024-50095`, + :cve_nist:`2024-50096`, :cve_nist:`2024-50179`, :cve_nist:`2024-50180`, :cve_nist:`2024-50181`, + :cve_nist:`2024-50184` and :cve_nist:`2024-50188` +- linux-yocto/5.15: Fix :cve_nist:`2022-48695`, :cve_nist:`2023-52530`, :cve_nist:`2023-52917`, + :cve_nist:`2024-45009`, :cve_nist:`2024-46714`, :cve_nist:`2024-46719`, :cve_nist:`2024-46721`, + :cve_nist:`2024-46722`, :cve_nist:`2024-46723`, :cve_nist:`2024-46724`, :cve_nist:`2024-46725`, + :cve_nist:`2024-46731`, :cve_nist:`2024-46732`, :cve_nist:`2024-46737`, :cve_nist:`2024-46738`, + :cve_nist:`2024-46739`, :cve_nist:`2024-46740`, :cve_nist:`2024-46743`, :cve_nist:`2024-46744`, + :cve_nist:`2024-46746`, :cve_nist:`2024-46747`, :cve_nist:`2024-46750`, :cve_nist:`2024-46755`, + :cve_nist:`2024-46759`, :cve_nist:`2024-46761`, :cve_nist:`2024-46763`, :cve_nist:`2024-46771`, + :cve_nist:`2024-46777`, :cve_nist:`2024-46780`, :cve_nist:`2024-46781`, :cve_nist:`2024-46782`, + :cve_nist:`2024-46783`, :cve_nist:`2024-46791`, :cve_nist:`2024-46795`, :cve_nist:`2024-46798`, + :cve_nist:`2024-46800`, :cve_nist:`2024-46804`, :cve_nist:`2024-46805`, :cve_nist:`2024-46807`, + :cve_nist:`2024-46810`, :cve_nist:`2024-46814`, :cve_nist:`2024-46815`, :cve_nist:`2024-46817`, + :cve_nist:`2024-46818`, :cve_nist:`2024-46819`, :cve_nist:`2024-46822`, :cve_nist:`2024-46828`, + :cve_nist:`2024-46829`, :cve_nist:`2024-46832`, :cve_nist:`2024-46840`, :cve_nist:`2024-46844`, + :cve_nist:`2024-47659`, :cve_nist:`2024-47660`, :cve_nist:`2024-47663`, :cve_nist:`2024-47665`, + :cve_nist:`2024-47667`, :cve_nist:`2024-47668`, :cve_nist:`2024-47669`, :cve_nist:`2024-47674`, + :cve_nist:`2024-47679`, :cve_nist:`2024-47684`, :cve_nist:`2024-47685`, :cve_nist:`2024-47690`, + :cve_nist:`2024-47692`, :cve_nist:`2024-47693`, :cve_nist:`2024-47695`, :cve_nist:`2024-47696`, + :cve_nist:`2024-47697`, :cve_nist:`2024-47698`, :cve_nist:`2024-47699`, :cve_nist:`2024-47701`, + :cve_nist:`2024-47705`, :cve_nist:`2024-47706`, :cve_nist:`2024-47710`, :cve_nist:`2024-47712`, + :cve_nist:`2024-47713`, :cve_nist:`2024-47718`, :cve_nist:`2024-47720`, :cve_nist:`2024-47723`, + :cve_nist:`2024-47734`, :cve_nist:`2024-47735`, :cve_nist:`2024-47737`, :cve_nist:`2024-47739`, + :cve_nist:`2024-47742`, :cve_nist:`2024-47747`, :cve_nist:`2024-47748`, :cve_nist:`2024-47749`, + :cve_nist:`2024-47757`, :cve_nist:`2024-49851`, :cve_nist:`2024-49852`, :cve_nist:`2024-49854`, + :cve_nist:`2024-49856`, :cve_nist:`2024-49858`, :cve_nist:`2024-49860`, :cve_nist:`2024-49863`, + :cve_nist:`2024-49866`, :cve_nist:`2024-49867`, :cve_nist:`2024-49868`, :cve_nist:`2024-49871`, + :cve_nist:`2024-49875`, :cve_nist:`2024-49877`, :cve_nist:`2024-49878`, :cve_nist:`2024-49879`, + :cve_nist:`2024-49881`, :cve_nist:`2024-49882`, :cve_nist:`2024-49883`, :cve_nist:`2024-49884`, + :cve_nist:`2024-49886`, :cve_nist:`2024-49889`, :cve_nist:`2024-49890`, :cve_nist:`2024-49892`, + :cve_nist:`2024-49894`, :cve_nist:`2024-49895`, :cve_nist:`2024-49896`, :cve_nist:`2024-49900`, + :cve_nist:`2024-49902`, :cve_nist:`2024-49903`, :cve_nist:`2024-49907`, :cve_nist:`2024-49913`, + :cve_nist:`2024-49924`, :cve_nist:`2024-49927`, :cve_nist:`2024-49930`, :cve_nist:`2024-49933`, + :cve_nist:`2024-49935`, :cve_nist:`2024-49936`, :cve_nist:`2024-49938`, :cve_nist:`2024-49944`, + :cve_nist:`2024-49946`, :cve_nist:`2024-49948`, :cve_nist:`2024-49949`, :cve_nist:`2024-49952`, + :cve_nist:`2024-49954`, :cve_nist:`2024-49955`, :cve_nist:`2024-49957`, :cve_nist:`2024-49958`, + :cve_nist:`2024-49959`, :cve_nist:`2024-49962`, :cve_nist:`2024-49963`, :cve_nist:`2024-49965`, + :cve_nist:`2024-49966`, :cve_nist:`2024-49969`, :cve_nist:`2024-49973`, :cve_nist:`2024-49975`, + :cve_nist:`2024-49977`, :cve_nist:`2024-49981`, :cve_nist:`2024-49982`, :cve_nist:`2024-49983`, + :cve_nist:`2024-49985`, :cve_nist:`2024-49995`, :cve_nist:`2024-49997`, :cve_nist:`2024-50000`, + :cve_nist:`2024-50001`, :cve_nist:`2024-50002`, :cve_nist:`2024-50003`, :cve_nist:`2024-50006`, + :cve_nist:`2024-50007`, :cve_nist:`2024-50008`, :cve_nist:`2024-50013`, :cve_nist:`2024-50015`, + :cve_nist:`2024-50019`, :cve_nist:`2024-50024`, :cve_nist:`2024-50031`, :cve_nist:`2024-50033`, + :cve_nist:`2024-50035`, :cve_nist:`2024-50038`, :cve_nist:`2024-50039`, :cve_nist:`2024-50040`, + :cve_nist:`2024-50041`, :cve_nist:`2024-50044`, :cve_nist:`2024-50045`, :cve_nist:`2024-50046`, + :cve_nist:`2024-50049`, :cve_nist:`2024-50059`, :cve_nist:`2024-50062`, :cve_nist:`2024-50074`, + :cve_nist:`2024-50082`, :cve_nist:`2024-50083`, :cve_nist:`2024-50093`, :cve_nist:`2024-50095`, + :cve_nist:`2024-50096`, :cve_nist:`2024-50099`, :cve_nist:`2024-50101`, :cve_nist:`2024-50103`, + :cve_nist:`2024-50110`, :cve_nist:`2024-50115`, :cve_nist:`2024-50116`, :cve_nist:`2024-50117`, + :cve_nist:`2024-50127`, :cve_nist:`2024-50128`, :cve_nist:`2024-50131`, :cve_nist:`2024-50134`, + :cve_nist:`2024-50141`, :cve_nist:`2024-50142`, :cve_nist:`2024-50143`, :cve_nist:`2024-50148`, + :cve_nist:`2024-50150`, :cve_nist:`2024-50151`, :cve_nist:`2024-50153`, :cve_nist:`2024-50154`, + :cve_nist:`2024-50156`, :cve_nist:`2024-50160`, :cve_nist:`2024-50162`, :cve_nist:`2024-50163`, + :cve_nist:`2024-50167`, :cve_nist:`2024-50168`, :cve_nist:`2024-50171`, :cve_nist:`2024-50179`, + :cve_nist:`2024-50180`, :cve_nist:`2024-50181`, :cve_nist:`2024-50182`, :cve_nist:`2024-50184`, + :cve_nist:`2024-50185`, :cve_nist:`2024-50186`, :cve_nist:`2024-50188`, :cve_nist:`2024-50189`, + :cve_nist:`2024-50191`, :cve_nist:`2024-50192`, :cve_nist:`2024-50193`, :cve_nist:`2024-50194`, + :cve_nist:`2024-50195`, :cve_nist:`2024-50196`, :cve_nist:`2024-50198`, :cve_nist:`2024-50201`, + :cve_nist:`2024-50202`, :cve_nist:`2024-50205`, :cve_nist:`2024-50208`, :cve_nist:`2024-50209`, + :cve_nist:`2024-50229`, :cve_nist:`2024-50230`, :cve_nist:`2024-50232`, :cve_nist:`2024-50233`, + :cve_nist:`2024-50234`, :cve_nist:`2024-50236`, :cve_nist:`2024-50237`, :cve_nist:`2024-50244`, + :cve_nist:`2024-50245`, :cve_nist:`2024-50247`, :cve_nist:`2024-50251`, :cve_nist:`2024-50257`, + :cve_nist:`2024-50259`, :cve_nist:`2024-50262`, :cve_nist:`2024-50264`, :cve_nist:`2024-50265`, + :cve_nist:`2024-50267`, :cve_nist:`2024-50268`, :cve_nist:`2024-50269`, :cve_nist:`2024-50273`, + :cve_nist:`2024-50278`, :cve_nist:`2024-50279`, :cve_nist:`2024-50282`, :cve_nist:`2024-50287`, + :cve_nist:`2024-50292`, :cve_nist:`2024-50296`, :cve_nist:`2024-50299`, :cve_nist:`2024-50301`, + :cve_nist:`2024-50302`, :cve_nist:`2024-53052`, :cve_nist:`2024-53055`, :cve_nist:`2024-53057`, + :cve_nist:`2024-53058`, :cve_nist:`2024-53059`, :cve_nist:`2024-53060`, :cve_nist:`2024-53061`, + :cve_nist:`2024-53063`, :cve_nist:`2024-53066`, :cve_nist:`2024-53088`, :cve_nist:`2024-53096`, + :cve_nist:`2024-53101`, :cve_nist:`2024-53103`, :cve_nist:`2024-53145`, :cve_nist:`2024-53146`, + :cve_nist:`2024-53150`, :cve_nist:`2024-53151`, :cve_nist:`2024-53155`, :cve_nist:`2024-53156`, + :cve_nist:`2024-53157`, :cve_nist:`2024-53165`, :cve_nist:`2024-53171`, :cve_nist:`2024-53173`, + :cve_nist:`2024-53226`, :cve_nist:`2024-53227`, :cve_nist:`2024-53237`, :cve_nist:`2024-56567`, + :cve_nist:`2024-56572`, :cve_nist:`2024-56574`, :cve_nist:`2024-56578`, :cve_nist:`2024-56581`, + :cve_nist:`2024-56593`, :cve_nist:`2024-56600`, :cve_nist:`2024-56601`, :cve_nist:`2024-56602`, + :cve_nist:`2024-56603`, :cve_nist:`2024-56605`, :cve_nist:`2024-56606`, :cve_nist:`2024-56614`, + :cve_nist:`2024-56622`, :cve_nist:`2024-56623`, :cve_nist:`2024-56629`, :cve_nist:`2024-56634`, + :cve_nist:`2024-56640`, :cve_nist:`2024-56642`, :cve_nist:`2024-56643`, :cve_nist:`2024-56648`, + :cve_nist:`2024-56650`, :cve_nist:`2024-56659`, :cve_nist:`2024-56662`, :cve_nist:`2024-56670`, + :cve_nist:`2024-56688`, :cve_nist:`2024-56694`, :cve_nist:`2024-56704`, :cve_nist:`2024-56708`, + :cve_nist:`2024-56720`, :cve_nist:`2024-56723`, :cve_nist:`2024-56724`, :cve_nist:`2024-56726`, + :cve_nist:`2024-56728`, :cve_nist:`2024-56739`, :cve_nist:`2024-56741`, :cve_nist:`2024-56745`, + :cve_nist:`2024-56746`, :cve_nist:`2024-56747`, :cve_nist:`2024-56748`, :cve_nist:`2024-56754`, + :cve_nist:`2024-56756`, :cve_nist:`2024-56770`, :cve_nist:`2024-56774`, :cve_nist:`2024-56776`, + :cve_nist:`2024-56777`, :cve_nist:`2024-56778`, :cve_nist:`2024-56779`, :cve_nist:`2024-56780`, + :cve_nist:`2024-56781`, :cve_nist:`2024-56785` and :cve_nist:`2024-56787` +- ovmf: Fix :cve_nist:`2022-36763`, :cve_nist:`2022-36764`, :cve_nist:`2022-36765`, + :cve_nist:`2023-45229`, :cve_nist:`2023-45230`, :cve_nist:`2023-45231`, :cve_nist:`2023-45232`, + :cve_nist:`2023-45233`, :cve_nist:`2023-45234`, :cve_nist:`2023-45235`, :cve_nist:`2023-45236`, + :cve_nist:`2023-45237`, :cve_nist:`2024-1298` and :cve_nist:`2024-38796` +- pixman: Ignore :cve_nist:`2023-37769` +- python3: Fix :cve_nist:`2024-9287`, :cve_nist:`2024-11168` and :cve_nist:`2024-50602` +- python3-pip: Fix :cve_nist:`2023-5752` +- python3-requests: Fix :cve_nist:`2024-35195` +- python3-zipp: Fix :cve_nist:`2024-5569` +- qemu: Fix :cve_nist:`2024-3446`, :cve_nist:`2024-3447` and :cve_nist:`2024-6505` +- qemu: Ignore :cve_nist:`2022-36648` +- subversion: Fix :cve_nist:`2024-46901` +- tiff: Fix :cve_nist:`2023-3164` +- tiff: Ignore :cve_nist:`2023-2731` +- webkitgtk: Fix :cve_nist:`2024-40776` and :cve_nist:`2024-40780` +- xserver-xorg: Fix :cve_nist:`2024-9632` +- xwayland: Fix :cve_nist:`2023-5380` and :cve_nist:`2024-0229` + + +Fixes in Yocto-4.0.24 +~~~~~~~~~~~~~~~~~~~~~ + +- base-passwd: Add the sgx group +- base-passwd: Regenerate the patches +- base-passwd: Update the status for two patches +- base-passwd: Update to 3.5.52 +- base-passwd: add the wheel group +- base-passwd: fix patchreview warning +- bitbake: fetch2: use persist_data context managers +- bitbake: fetch/wget: Increase timeout to 100s from 30s +- bitbake: persist_data: close connection in SQLTable __exit__ +- build-appliance-image: Update to kirkstone head revision +- builder: set :term:`CVE_PRODUCT` +- contributor-guide: submit-changes.rst: suggest to remove the git signature +- cve-update-nvd2-native: Tweak to work better with NFS :term:`DL_DIR` +- dbus: disable assertions and enable only modular tests +- do_package/sstate/sstatesig: Change timestamp clamping to hash output only +- docs: Gather dependencies in poky.yaml.in +- docs: standards.md: add a section on admonitions +- gstreamer1.0: improve test reliability +- linux-yocto/5.10: update to v5.10.227 +- linux-yocto/5.15: update to v5.15.175 +- llvm: reduce size of -dbg package +- lttng-modules: fix build error after kernel update to 5.15.171 +- migration-guides: add release notes for 4.0.23 +- ninja: fix build with python 3.13 +- oeqa/utils/gitarchive: Return tag name and improve exclude handling +- ovmf-native: remove .pyc files from install +- package.bbclass: Use shlex instead of deprecated pipes +- package_rpm: restrict rpm to 4 threads +- package_rpm: use zstd's default compression level +- poky.conf: add new tested distros +- poky.conf: bump version for 4.0.24 +- poky.yaml.in: add missing locales dependency +- python3: upgrade to 3.10.16 +- ref-manual: SSTATE_MIRRORS/SOURCE_MIRROR_URL: add instructions for mirror authentication +- ref-manual: classes: fix bin_package description +- ref-manual: devtool-reference: add warning note on deploy-target and shared objects +- ref-manual: move runtime-testing section to the test-manual +- ref-manual: packages: move ptest section to the test-manual +- ref-manual: system-requirements: update list of supported distros +- ref-manual: use standardized method accross both ubuntu and debian for locale install +- resulttool: Add --logfile-archive option to store mode +- resulttool: Allow store to filter to specific revisions +- resulttool: Clean up repoducible build logs +- resulttool: Fix passthrough of --all files in store mode +- resulttool: Handle ltp rawlogs as well as ptest +- resulttool: Improve repo layout for oeselftest results +- resulttool: Trim the precision of duration information +- resulttool: Use single space indentation in json output +- rootfs-postcommands.bbclass: make opkg status reproducible +- rxvt-unicode.inc: disable the terminfo installation by setting TIC to : +- sanity: check for working user namespaces +- scripts/install-buildtools: Update to 4.0.22 +- selftest/reproducible: Clean up pathnames +- selftest/reproducible: Drop rawlogs +- test-manual: reproducible-builds.rst: document :term:`OEQA_REPRODUCIBLE_TEST_TARGET` and + :term:`OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS` +- test-manual: reproducible-builds.rst: show how to build a single package +- toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails +- tzdata & tzcode-native: upgrade 2024b +- udev-extraconf: fix network.sh script did not configure hotplugged interfaces +- unzip: Fix configure tests to use modern C +- webkitgtk: Fix build on 32bit arm +- webkitgtk: fix perl-native dependency +- webkitgtk: reduce size of -dbg package +- wireless-regdb: upgrade to 2024.10.07 + + +Known Issues in Yocto-4.0.24 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-4.0.24 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Aleksandar Nikolic +- Alex Kiernan +- Alexander Kanavin +- Alexandre Belloni +- Antonin Godard +- Archana Polampalli +- Bruce Ashfield +- Changqing Li +- Chen Qi +- Chris Laplante +- Divya Chellam +- Ernst Persson +- Guénaël Muller +- Hitendra Prajapati +- Hongxu Jia +- Jiaying Song +- Jinfeng Wang +- Khem Raj +- Lee Chee Yang +- Liyin Zhang +- Louis Rannou +- Markus Volk +- Mikko Rapeli +- Ovidiu Panait +- Peter Kjellerstedt +- Peter Marko +- Regis Dargent +- Richard Purdie +- Rohini Sangam +- Ross Burton +- Soumya Sambu +- Steve Sakoman +- Trevor Gamblin +- Vijay Anusuri +- Wang Mingyu +- Yogita Urade +- Zahir Hussain + + +Repositories / Downloads for Yocto-4.0.24 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.24 </poky/log/?h=yocto-4.0.24>` +- Git Revision: :yocto_git:`f50532593651dff82bc952288d786c55038c2c86 </poky/commit/?id=f50532593651dff82bc952288d786c55038c2c86>` +- Release Artefact: poky-f50532593651dff82bc952288d786c55038c2c86 +- sha: 0aa062d19510394748db9a2d6ded2d764f435383296d9c94fb6b25755280556e +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/poky-f50532593651dff82bc952288d786c55038c2c86.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/poky-f50532593651dff82bc952288d786c55038c2c86.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.24 </openembedded-core/log/?h=yocto-4.0.24>` +- Git Revision: :oe_git:`a270d4c957259761bcc7382fcc54642a02f9fc7d </openembedded-core/commit/?id=a270d4c957259761bcc7382fcc54642a02f9fc7d>` +- Release Artefact: oecore-a270d4c957259761bcc7382fcc54642a02f9fc7d +- sha: b08b9b16c8ffa587d521ad28e24e38c79d757a6f0839d18165ebac3081a34b68 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/oecore-a270d4c957259761bcc7382fcc54642a02f9fc7d.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/oecore-a270d4c957259761bcc7382fcc54642a02f9fc7d.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.24 </meta-mingw/log/?h=yocto-4.0.24>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.24 </meta-gplv2/log/?h=yocto-4.0.24>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.24 </bitbake/log/?h=yocto-4.0.24>` +- Git Revision: :oe_git:`3f88b005244a0afb5d5c7260e54a94a453ec9b3e </bitbake/commit/?id=3f88b005244a0afb5d5c7260e54a94a453ec9b3e>` +- Release Artefact: bitbake-3f88b005244a0afb5d5c7260e54a94a453ec9b3e +- sha: 31f442b72ec7d81ca75509b1a7179c3fe3942528b1e31c823b21a413244bd15b +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/bitbake-3f88b005244a0afb5d5c7260e54a94a453ec9b3e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/bitbake-3f88b005244a0afb5d5c7260e54a94a453ec9b3e.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.24 </yocto-docs/log/?h=yocto-4.0.24>` +- Git Revision: :yocto_git:`3128bf149f40928e6c2a3e264590a0c6c9778c6a </yocto-docs/commit/?id=3128bf149f40928e6c2a3e264590a0c6c9778c6a>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.25.rst b/poky/documentation/migration-guides/release-notes-4.0.25.rst new file mode 100644 index 0000000000..e52f57913f --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.25.rst @@ -0,0 +1,167 @@ +Release notes for Yocto-4.0.25 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.25 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- avahi: Fix :cve_nist:`2024-52616` +- binutils: Fix :cve_nist:`2024-53589` +- gdb: Fix :cve_nist:`2024-53589` +- go: Fix :cve_nist:`2024-34155`, :cve_nist:`2024-34156`, :cve_nist:`2024-34158` and + :cve_nist:`2024-45336` +- gstreamer1.0: Ignore :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, :cve_nist:`2024-47540`, + :cve_nist:`2024-47543`, :cve_nist:`2024-47544`, :cve_nist:`2024-47545`, :cve_nist:`2024-47538`, + :cve_nist:`2024-47541`, :cve_nist:`2024-47542`, :cve_nist:`2024-47600`, :cve_nist:`2024-47607`, + :cve_nist:`2024-47615`, :cve_nist:`2024-47835`, :cve_nist:`2024-47546`, :cve_nist:`2024-47596`, + :cve_nist:`2024-47597`, :cve_nist:`2024-47598`, :cve_nist:`2024-47599`, :cve_nist:`2024-47601`, + :cve_nist:`2024-47777`, :cve_nist:`2024-47778`, :cve_nist:`2024-47834`, :cve_nist:`2024-47602`, + :cve_nist:`2024-47603`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775` + and :cve_nist:`2024-47776` +- linux-yocto/5.15: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-55916`, :cve_nist:`2024-56369`, + :cve_nist:`2024-56626`, :cve_nist:`2024-56627`, :cve_nist:`2024-56715`, :cve_nist:`2024-56716`, + :cve_nist:`2024-57802`, :cve_nist:`2024-57807`, :cve_nist:`2024-57841`, :cve_nist:`2024-57890`, + :cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57910`, :cve_nist:`2024-57911`, + :cve_nist:`2024-57938`, :cve_nist:`2024-57951`, :cve_nist:`2025-21631`, :cve_nist:`2025-21665`, + :cve_nist:`2025-21666`, :cve_nist:`2025-21669`, :cve_nist:`2025-21680`, :cve_nist:`2025-21683`, + :cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699` +- ofono: Fix :cve_nist:`2024-7539`, :cve_nist:`2024-7540`, :cve_nist:`2024-7541`, + :cve_nist:`2024-7542`, :cve_nist:`2024-7543`, :cve_nist:`2024-7544`, :cve_nist:`2024-7545`, + :cve_nist:`2024-7546` and :cve_nist:`2024-7547` +- openssl: Fix :cve_nist:`2024-13176` +- rsync: Fix :cve_nist:`2024-12084`, :cve_nist:`2024-12085`, :cve_nist:`2024-12086`, + :cve_nist:`2024-12087`, :cve_nist:`2024-12088` and :cve_nist:`2024-12747` +- ruby: Fix :cve_nist:`2024-49761` +- socat: Fix :cve_nist:`2024-54661` +- vte: Fix :cve_nist:`2024-37535` +- wget: Fix :cve_nist:`2024-10524` + + +Fixes in Yocto-4.0.25 +~~~~~~~~~~~~~~~~~~~~~ + +- bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48 +- build-appliance-image: Update to kirkstone head revision +- classes-global/insane: Look up all runtime providers for file-rdeps +- classes/nativesdk: also override :term:`TUNE_PKGARCH` +- classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture +- cmake: apply parallel build settings to ptest tasks +- dev-manual/building: document the initramfs-framework recipe +- docs: Update autobuilder URLs to valkyrie +- documentation: Fix typo in standards.md +- glibc: Suppress GCC -Os warning on user2netname for sunrpc +- glibc: stable 2.35 branch updates +- lib/packagedata.py: Add API to iterate over rprovides +- linux-yocto/5.15: upgrade to v5.15.178 +- migration-guides: add release notes for 4.0.24 +- openssl: upgrade to 3.0.16 +- poky.conf: bump version for 4.0.25 +- python3: Treat UID/GID overflow as failure +- rsync: Delete pedantic errors re-ordering patch +- rsync: upgrade to 3.2.7 +- rust-common.bbclass: soft assignment for RUSTLIB path +- scripts/install-buildtools: Update to 4.0.23 +- test-manual/reproducible-builds: fix reproducible links + + +Known Issues in Yocto-4.0.25 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.25 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Aleksandar Nikolic +- Alexander Kanavin +- Antonin Godard +- Archana Polampalli +- Bruce Ashfield +- Deepesh Varatharajan +- Divya Chellam +- Joshua Watt +- Khem Raj +- Lee Chee Yang +- Nikhil R +- Pedro Ferreira +- Peter Marko +- Praveen Kumar +- Richard Purdie +- Ross Burton +- Simon A. Eugster +- Steve Sakoman +- Yash Shinde +- Yogita Urade +- Zhang Peng + + +Repositories / Downloads for Yocto-4.0.25 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.25 </poky/log/?h=yocto-4.0.25>` +- Git Revision: :yocto_git:`b5aa03f336c121269551f9e7baed4c677c76bb39 </poky/commit/?id=b5aa03f336c121269551f9e7baed4c677c76bb39>` +- Release Artefact: poky-b5aa03f336c121269551f9e7baed4c677c76bb39 +- sha: 7afbcb25f0dd89a4fb6dd4c5945061705ef9ce79a6863806278603273c2b3b4a +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/poky-b5aa03f336c121269551f9e7baed4c677c76bb39.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/poky-b5aa03f336c121269551f9e7baed4c677c76bb39.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.25 </openembedded-core/log/?h=yocto-4.0.25>` +- Git Revision: :oe_git:`5a794fd244f7fdeb426bd5e3def6b4effc0e8c62 </openembedded-core/commit/?id=5a794fd244f7fdeb426bd5e3def6b4effc0e8c62>` +- Release Artefact: oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62 +- sha: 8fc93109693e5f4702b3fe0633b6be833605291b3d595dc8bdeb6379f40cd2de +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.25 </meta-mingw/log/?h=yocto-4.0.25>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.25 </meta-gplv2/log/?h=yocto-4.0.25>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.25 </bitbake/log/?h=yocto-4.0.25>` +- Git Revision: :oe_git:`e71f1ce53cf3b8320caa481ae62d1ce2900c4670 </bitbake/commit/?id=e71f1ce53cf3b8320caa481ae62d1ce2900c4670>` +- Release Artefact: bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670 +- sha: 007eef35174586c85b233f4ec91578956fe21e0236f7ca2c3f90f9d034f94b5b +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.25 </yocto-docs/log/?h=yocto-4.0.25>` +- Git Revision: :yocto_git:`c6dce0c77481dee7b0a0fcdc803f755ceccef234 </yocto-docs/commit/?id=c6dce0c77481dee7b0a0fcdc803f755ceccef234>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.26.rst b/poky/documentation/migration-guides/release-notes-4.0.26.rst new file mode 100644 index 0000000000..42ff28c6a2 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.26.rst @@ -0,0 +1,263 @@ +Release notes for Yocto-4.0.26 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.26 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + + +- bind: Fix :cve_nist:`2024-11187` and :cve_nist:`2024-12705` +- binutils: Fix :cve_nist:`2025-0840` +- elfutils: Fix :cve_nist:`2025-1352` and :cve_nist:`2025-1372` +- ffmpeg: Fix CVE-2024-28661, :cve_nist:`2024-35369`, :cve_nist:`2024-36613`, :cve_nist:`2024-36616`, + :cve_nist:`2024-36617`, :cve_nist:`2024-36618`, :cve_nist:`2025-0518` and :cve_nist:`2025-25473` +- ffmpeg: Ignore :cve_nist:`2023-46407`, :cve_nist:`2023-47470`, :cve_nist:`2024-7272`, + :cve_nist:`2024-22860`, :cve_nist:`2024-22861` and :cve_nist:`2024-22862` +- freetype: Fix :cve_nist:`2025-27363` +- gnutls: Fix :cve_nist:`2024-12243` +- grub: Fix :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2024-45776`, + :cve_nist:`2024-45777`, :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2024-45780`, + :cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-45783`, :cve_nist:`2024-56737`, + :cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`, + :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, :cve_nist:`2025-0678`, + :cve_nist:`2025-0690`, :cve_nist:`2025-1118` and :cve_nist:`2025-1125` +- gstreamer1.0-rtsp-server: fix :cve_nist:`2024-44331` +- libarchive: Fix :cve_nist:`2025-25724` +- libarchive: Ignore :cve_nist:`2025-1632` +- libcap: Fix :cve_nist:`2025-1390` +- linux-yocto/5.10: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-43098`, :cve_nist:`2024-47143`, + :cve_nist:`2024-48881`, :cve_nist:`2024-50051`, :cve_nist:`2024-50074`, :cve_nist:`2024-50082`, + :cve_nist:`2024-50083`, :cve_nist:`2024-50099`, :cve_nist:`2024-50115`, :cve_nist:`2024-50116`, + :cve_nist:`2024-50117`, :cve_nist:`2024-50142`, :cve_nist:`2024-50148`, :cve_nist:`2024-50150`, + :cve_nist:`2024-50151`, :cve_nist:`2024-50167`, :cve_nist:`2024-50168`, :cve_nist:`2024-50171`, + :cve_nist:`2024-50185`, :cve_nist:`2024-50192`, :cve_nist:`2024-50193`, :cve_nist:`2024-50194`, + :cve_nist:`2024-50195`, :cve_nist:`2024-50198`, :cve_nist:`2024-50201`, :cve_nist:`2024-50202`, + :cve_nist:`2024-50205`, :cve_nist:`2024-50208`, :cve_nist:`2024-50209`, :cve_nist:`2024-50229`, + :cve_nist:`2024-50230`, :cve_nist:`2024-50233`, :cve_nist:`2024-50234`, :cve_nist:`2024-50236`, + :cve_nist:`2024-50237`, :cve_nist:`2024-50251`, :cve_nist:`2024-50262`, :cve_nist:`2024-50264`, + :cve_nist:`2024-50265`, :cve_nist:`2024-50267`, :cve_nist:`2024-50268`, :cve_nist:`2024-50269`, + :cve_nist:`2024-50273`, :cve_nist:`2024-50278`, :cve_nist:`2024-50279`, :cve_nist:`2024-50282`, + :cve_nist:`2024-50287`, :cve_nist:`2024-50292`, :cve_nist:`2024-50296`, :cve_nist:`2024-50299`, + :cve_nist:`2024-50301`, :cve_nist:`2024-50302`, :cve_nist:`2024-53042`, :cve_nist:`2024-53052`, + :cve_nist:`2024-53057`, :cve_nist:`2024-53059`, :cve_nist:`2024-53060`, :cve_nist:`2024-53061`, + :cve_nist:`2024-53063`, :cve_nist:`2024-53066`, :cve_nist:`2024-53096`, :cve_nist:`2024-53097`, + :cve_nist:`2024-53101`, :cve_nist:`2024-53103`, :cve_nist:`2024-53104`, :cve_nist:`2024-53145`, + :cve_nist:`2024-53146`, :cve_nist:`2024-53150`, :cve_nist:`2024-53155`, :cve_nist:`2024-53156`, + :cve_nist:`2024-53157`, :cve_nist:`2024-53161`, :cve_nist:`2024-53165`, :cve_nist:`2024-53171`, + :cve_nist:`2024-53173`, :cve_nist:`2024-53174`, :cve_nist:`2024-53194`, :cve_nist:`2024-53197`, + :cve_nist:`2024-53217`, :cve_nist:`2024-53226`, :cve_nist:`2024-53227`, :cve_nist:`2024-53237`, + :cve_nist:`2024-53239`, :cve_nist:`2024-55916`, :cve_nist:`2024-56548`, :cve_nist:`2024-56558`, + :cve_nist:`2024-56567`, :cve_nist:`2024-56568`, :cve_nist:`2024-56569`, :cve_nist:`2024-56572`, + :cve_nist:`2024-56574`, :cve_nist:`2024-56581`, :cve_nist:`2024-56587`, :cve_nist:`2024-56593`, + :cve_nist:`2024-56595`, :cve_nist:`2024-56596`, :cve_nist:`2024-56598`, :cve_nist:`2024-56600`, + :cve_nist:`2024-56601`, :cve_nist:`2024-56602`, :cve_nist:`2024-56603`, :cve_nist:`2024-56605`, + :cve_nist:`2024-56606`, :cve_nist:`2024-56615`, :cve_nist:`2024-56619`, :cve_nist:`2024-56623`, + :cve_nist:`2024-56629`, :cve_nist:`2024-56634`, :cve_nist:`2024-56642`, :cve_nist:`2024-56643`, + :cve_nist:`2024-56648`, :cve_nist:`2024-56650`, :cve_nist:`2024-56659`, :cve_nist:`2024-56662`, + :cve_nist:`2024-56670`, :cve_nist:`2024-56688`, :cve_nist:`2024-56698`, :cve_nist:`2024-56704`, + :cve_nist:`2024-56716`, :cve_nist:`2024-56720`, :cve_nist:`2024-56723`, :cve_nist:`2024-56724`, + :cve_nist:`2024-56728`, :cve_nist:`2024-56739`, :cve_nist:`2024-56746`, :cve_nist:`2024-56747`, + :cve_nist:`2024-56748`, :cve_nist:`2024-56754`, :cve_nist:`2024-56756`, :cve_nist:`2024-56770`, + :cve_nist:`2024-56779`, :cve_nist:`2024-56780`, :cve_nist:`2024-56781`, :cve_nist:`2024-56785`, + :cve_nist:`2024-57802`, :cve_nist:`2024-57807`, :cve_nist:`2024-57850`, :cve_nist:`2024-57874`, + :cve_nist:`2024-57890`, :cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57901`, + :cve_nist:`2024-57902`, :cve_nist:`2024-57910`, :cve_nist:`2024-57911`, :cve_nist:`2024-57913`, + :cve_nist:`2024-57922`, :cve_nist:`2024-57938`, :cve_nist:`2024-57939`, :cve_nist:`2024-57946`, + :cve_nist:`2024-57951`, :cve_nist:`2025-21638`, :cve_nist:`2025-21687`, :cve_nist:`2025-21689`, + :cve_nist:`2025-21692`, :cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699` +- linux-yocto/5.15: Fix :cve_nist:`2024-57979`, :cve_nist:`2024-58034`, :cve_nist:`2024-58052`, + :cve_nist:`2024-58055`, :cve_nist:`2024-58058`, :cve_nist:`2024-58063`, :cve_nist:`2024-58069`, + :cve_nist:`2024-58071`, :cve_nist:`2024-58076`, :cve_nist:`2024-58083`, :cve_nist:`2025-21700`, + :cve_nist:`2025-21703`, :cve_nist:`2025-21715`, :cve_nist:`2025-21722`, :cve_nist:`2025-21727`, + :cve_nist:`2025-21731`, :cve_nist:`2025-21753`, :cve_nist:`2025-21756`, :cve_nist:`2025-21760`, + :cve_nist:`2025-21761`, :cve_nist:`2025-21762`, :cve_nist:`2025-21763`, :cve_nist:`2025-21764`, + :cve_nist:`2025-21796`, :cve_nist:`2025-21811`, :cve_nist:`2025-21887`, :cve_nist:`2025-21898`, + :cve_nist:`2025-21904`, :cve_nist:`2025-21905`, :cve_nist:`2025-21912`, :cve_nist:`2025-21917`, + :cve_nist:`2025-21919`, :cve_nist:`2025-21920`, :cve_nist:`2025-21922`, :cve_nist:`2025-21934`, + :cve_nist:`2025-21943`, :cve_nist:`2025-21948` and :cve_nist:`2025-21951` +- libpcre2: Ignore :cve_nist:`2022-1586` +- libtasn1: Fix :cve_nist:`2024-12133` +- libxml2: Fix :cve_nist:`2022-49043`, :cve_nist:`2024-56171`, :cve_nist:`2025-24928` and + :cve_nist:`2025-27113` +- libxslt: Fix :cve_nist:`2024-55549` and :cve_nist:`2025-24855` +- llvm: Fix :cve_nist:`2024-0151` +- mpg123: Fix :cve_nist:`2024-10573` +- openssh: Fix :cve_nist:`2025-26465` +- ovmf: Revert Fix for CVE-2023-45236 :cve_nist:`2023-45237` +- perl: Ignore :cve_nist:`2023-47038` +- puzzles: Ignore :cve_nist:`2024-13769`, :cve_nist:`2024-13770` and :cve_nist:`2025-0837` +- python3: Fix :cve_nist:`2025-0938` +- ruby: Fix :cve_nist:`2024-41946`, :cve_nist:`2025-27219` and :cve_nist:`2025-27220` +- subversion: Ignore :cve_nist:`2024-45720` +- systemd: Fix :cve_nist:`2022-3821`, :cve_nist:`2022-4415`, :cve_nist:`2022-45873` and + :cve_nist:`2023-7008` +- tiff: mark :cve_nist:`2023-30774` as patched with existing patch +- u-boot: Fix :cve_nist:`2022-2347`, :cve_nist:`2022-30767`, :cve_nist:`2022-30790`, + :cve_nist:`2024-57254`, :cve_nist:`2024-57255`, :cve_nist:`2024-57256`, :cve_nist:`2024-57257`, + :cve_nist:`2024-57258` and :cve_nist:`2024-57259` +- vim: Fix :cve_nist:`2025-1215`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`, + :cve_nist:`2025-26603`, :cve_nist:`2025-27423` and :cve_nist:`2025-29768` +- xserver-xorg: Fix :cve_nist:`2022-49737`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, + :cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, + :cve_nist:`2025-26600` and :cve_nist:`2025-26601` +- xwayland: Fix :cve_nist:`2022-49737`, :cve_nist:`2024-9632`, :cve_nist:`2024-21885`, + :cve_nist:`2024-21886`, :cve_nist:`2024-31080`, :cve_nist:`2024-31081`, :cve_nist:`2024-31083`, + :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, :cve_nist:`2025-26597`, + :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600` and :cve_nist:`2025-26601` +- zlib: Fix :cve_nist:`2014-9485` + + + +Fixes in Yocto-4.0.26 +~~~~~~~~~~~~~~~~~~~~~ + +- bind: Upgrade to 9.18.33 +- bitbake: cache: bump cache version +- bitbake: siggen.py: Improve taskhash reproducibility +- boost: fix do_fetch error +- build-appliance-image: Update to kirkstone head revision +- contributor-guide/submit-changes: add policy on AI generated code +- cve-update-nvd2-native: handle missing vulnStatus +- docs: Add favicon for the documentation html +- docs: Remove all mention of core-image-lsb +- libtasn1: upgrade to 4.20.0 +- libxcrypt-compat: Remove libcrypt.so to fix conflict with libcrypt +- libxml2: fix compilation of explicit child axis in pattern +- linux-yocto/5.10: update to v5.10.234 +- linux-yocto/5.15: update to v5.15.179 +- mesa: Fix missing GLES3 headers in SDK sysroot +- mesa: Update :term:`SRC_URI` +- meta: Enable '-o pipefail' for the SDK installer +- migration-guides: add release notes for 4.0.25 +- poky.conf: add ubuntu2404 to :term:`SANITY_TESTED_DISTROS` +- poky.conf: bump version for 4.0.26 +- procps: replaced one use of fputs(3) with a write(2) call +- ref-manual: don't refer to poky-lsb +- scripts/install-buildtools: Update to 4.0.24 +- scritps/runqemu: Ensure we only have two serial ports +- systemd: upgrade to 250.14 +- tzcode-native: Fix compiler setting from 2023d version +- tzcode: Update :term:`SRC_URI` +- tzdata/tzcode-native: upgrade 2025a +- vim: Upgrade to 9.1.1198 +- virglrenderer: fix do_fetch error +- vulnerabilities/classes: remove references to cve-check text format +- xz: Update :term:`SRC_URI` +- yocto-uninative: Update to 4.7 for glibc 2.41 + + +Known Issues in Yocto-4.0.26 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.26 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Aleksandar Nikolic +- Alessio Cascone +- Antonin Godard +- Archana Polampalli +- Ashish Sharma +- Bruce Ashfield +- Carlos Dominguez +- Deepesh Varatharajan +- Divya Chellam +- Guocai He +- Hitendra Prajapati +- Hongxu Jia +- Jiaying Song +- Johannes Kauffmann +- Kai Kang +- Lee Chee Yang +- Libo Chen +- Marta Rybczynska +- Michael Halstead +- Mingli Yu +- Moritz Haase +- Narpat Mali +- Paulo Neves +- Peter Marko +- Priyal Doshi +- Richard Purdie +- Robert Yang +- Ross Burton +- Sakib Sajal +- Steve Sakoman +- Vijay Anusuri +- Yogita Urade +- Zhang Peng + + +Repositories / Downloads for Yocto-4.0.26 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.26 </poky/log/?h=yocto-4.0.26>` +- Git Revision: :yocto_git:`d70d287a77d5026b698ac237ab865b2dafd36bb8 </poky/commit/?id=d70d287a77d5026b698ac237ab865b2dafd36bb8>` +- Release Artefact: poky-d70d287a77d5026b698ac237ab865b2dafd36bb8 +- sha: 3ebfadb8bff4c1ca12b3cf3e4ef6e3ac2ce52b73570266daa98436c9959249f2 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/poky-d70d287a77d5026b698ac237ab865b2dafd36bb8.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/poky-d70d287a77d5026b698ac237ab865b2dafd36bb8.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.26 </openembedded-core/log/?h=yocto-4.0.26>` +- Git Revision: :oe_git:`1efbe1004bc82e7c14c1e8bd4ce644f5015c3346 </openembedded-core/commit/?id=1efbe1004bc82e7c14c1e8bd4ce644f5015c3346>` +- Release Artefact: oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346 +- sha: d3805e034dabd0865dbf55488b2c16d4ea0351d37aa826f0054a6bfdde5a8be9 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.26 </meta-mingw/log/?h=yocto-4.0.26>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.26 </meta-gplv2/log/?h=yocto-4.0.26>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.26 </bitbake/log/?h=yocto-4.0.26>` +- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>` +- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e +- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.26 </yocto-docs/log/?h=yocto-4.0.26>` +- Git Revision: :yocto_git:`9b4c36f7b02dd4bedfec90206744a1e90e37733c </yocto-docs/commit/?id=9b4c36f7b02dd4bedfec90206744a1e90e37733c>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.27.rst b/poky/documentation/migration-guides/release-notes-4.0.27.rst new file mode 100644 index 0000000000..e37e2f78b6 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.27.rst @@ -0,0 +1,153 @@ +Release notes for Yocto-4.0.27 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.27 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- binutils: Fix :cve_nist:`2025-1178` +- busybox: fix :cve_nist:`2023-39810` +- connman :fix :cve_nist:`2025-32743` +- curl: Ignore :cve_nist:`2025-0725` +- ghostscript: Fix :cve_nist:`2025-27830`, :cve_nist:`2025-27831`, :cve_nist:`2025-27832`, + :cve_nist:`2025-27834`, :cve_nist:`2025-27835` and :cve_nist:`2025-27836` +- ghostscript: Ignore :cve_nist:`2024-29507`, :cve_nist:`2025-27833` and :cve_nist:`2025-27837` +- glib-2.0: Fix :cve_nist:`2025-3360` +- go: Fix :cve_nist:`2025-22871` +- libarchive: Ignore :cve_nist:`2024-48615` +- libpam: Fix :cve_nist:`2024-10041` +- libsoup-2.4: Fix :cve_nist:`2024-52532`, :cve_nist:`2025-32906` and :cve_nist:`2025-32909` +- libsoup: Fix :cve_nist:`2024-52532`, :cve_nist:`2025-32906`, :cve_nist:`2025-32909`, + :cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`, :cve_nist:`2025-32913` + and :cve_nist:`2025-32914` +- libxml2: Fix :cve_nist:`2025-32414` and :cve_nist:`2025-32415` +- ofono: Fix :cve_nist:`2024-7537` +- perl: Fix :cve_nist:`2024-56406` +- ppp: Fix :cve_nist:`2024-58250` +- python3-setuptools: Fix :cve_nist:`2024-6345` +- qemu: Ignore :cve_nist:`2023-1386` +- ruby: Fix :cve_nist:`2024-43398` +- sqlite3: Fix :cve_nist:`2025-29088` +- systemd: Ignore :cve_nist:`2022-3821`, :cve_nist:`2022-4415` and :cve_nist:`2022-45873` + + +Fixes in Yocto-4.0.27 +~~~~~~~~~~~~~~~~~~~~~ + +- Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR" +- build-appliance-image: Update to kirkstone head revision +- cve-update-nvd2-native: add workaround for json5 style list +- docs: Fix dead links that use the :term:`DISTRO` macro +- docs: manuals: remove repeated word +- docs: poky.yaml: introduce DISTRO_LATEST_TAG +- glibc: Add single-threaded fast path to rand() +- glibc: stable 2.35 branch updates +- module.bbclass: add KBUILD_EXTRA_SYMBOLS to install +- perl: enable _GNU_SOURCE define via d_gnulibc +- poky.conf: bump version for 4.0.27 +- ref-manual/variables.rst: document autotools class related variables +- scripts/install-buildtools: Update to 4.0.26 +- systemd: backport patch to fix journal issue +- systemd: systemd-journald fails to setup LogNamespace +- tzdata/tzcode-native: upgrade to 2025b + + +Known Issues in Yocto-4.0.27 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.27 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Aleksandar Nikolic +- Alexander Kanavin +- Alon Bar-Lev +- Andrew Kreimer +- Antonin Godard +- Chen Qi +- Deepesh Varatharajan +- Divya Chellam +- Haitao Liu +- Haixiao Yan +- Hitendra Prajapati +- Peter Marko +- Praveen Kumar +- Priyal Doshi +- Shubham Kulkarni +- Soumya Sambu +- Steve Sakoman +- Vijay Anusuri +- Yogita Urade + + +Repositories / Downloads for Yocto-4.0.27 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.27 </poky/log/?h=yocto-4.0.27>` +- Git Revision: :yocto_git:`ab9a994a8cd8e06b519a693db444030999d273b7 </poky/commit/?id=ab9a994a8cd8e06b519a693db444030999d273b7>` +- Release Artefact: poky-ab9a994a8cd8e06b519a693db444030999d273b7 +- sha: 77a366c17cf29eef15c6ff3f44e73f81c07288c723fd4a6dbd8c7ee9b79933f3 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/poky-ab9a994a8cd8e06b519a693db444030999d273b7.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/poky-ab9a994a8cd8e06b519a693db444030999d273b7.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.27 </openembedded-core/log/?h=yocto-4.0.27>` +- Git Revision: :oe_git:`e8be08a624b2d024715a5c8b0c37f2345a02336b </openembedded-core/commit/?id=e8be08a624b2d024715a5c8b0c37f2345a02336b>` +- Release Artefact: oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b +- sha: cc5b0fadab021c6dc61f37fc4ff01a1cf657e7c219488ce264bede42f7f6212f +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.27 </meta-mingw/log/?h=yocto-4.0.27>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.27 </meta-gplv2/log/?h=yocto-4.0.27>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.27 </bitbake/log/?h=yocto-4.0.27>` +- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>` +- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e +- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.27 </yocto-docs/log/?h=yocto-4.0.27>` +- Git Revision: :yocto_git:`0d51e553d5f83eea6634e03ddc9c7740bf72fcea </yocto-docs/commit/?id=0d51e553d5f83eea6634e03ddc9c7740bf72fcea>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.28.rst b/poky/documentation/migration-guides/release-notes-4.0.28.rst new file mode 100644 index 0000000000..48f618980e --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.28.rst @@ -0,0 +1,224 @@ +Release notes for Yocto-4.0.28 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.28 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- binutils: Fix :cve_nist:`2025-1180`, :cve_nist:`2025-1182`, :cve_nist:`2025-5244` and + :cve_nist:`2025-5245` +- connman: Fix :cve_nist:`2025-32366` +- ffmpeg: Fix :cve_nist:`2025-1373`, :cve_nist:`2025-22919` and :cve_nist:`2025-22921` +- ffmpeg: Ignore :cve_nist:`2022-48434` +- ghostscript: Fix :cve_nist:`2025-48708` +- git: Fix :cve_nist:`2024-50349` and :cve_nist:`2024-52006` +- glib-2.0: Fix :cve_nist:`2025-4373` +- glibc: Fix for :cve_nist:`2025-4802` +- go: Fix :cve_nist:`2025-4673` +- go: ignore :cve_nist:`2024-3566` +- icu: Fix :cve_nist:`2025-5222` +- iputils: Fix :cve_nist:`2025-47268` +- libsoup-2.4: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4948`, + :cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32052`, :cve_nist:`2025-32053`, + :cve_nist:`2025-32907`, :cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`, + :cve_nist:`2025-32913`, :cve_nist:`2025-32914`, :cve_nist:`2025-46420` and :cve_nist:`2025-46421` +- libsoup: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4948`, + :cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32051`, :cve_nist:`2025-32052`, + :cve_nist:`2025-32053`, :cve_nist:`2025-32907`, :cve_nist:`2025-46420` and :cve_nist:`2025-46421` +- linux-yocto/5.15: Fix :cve_nist:`2024-26952`, :cve_nist:`2025-21941`, :cve_nist:`2025-21957`, + :cve_nist:`2025-21959`, :cve_nist:`2025-21962`, :cve_nist:`2025-21963`, :cve_nist:`2025-21964`, + :cve_nist:`2025-21968`, :cve_nist:`2025-21996`, :cve_nist:`2025-22018`, :cve_nist:`2025-22020`, + :cve_nist:`2025-22035`, :cve_nist:`2025-22054`, :cve_nist:`2025-22056`, :cve_nist:`2025-22063`, + :cve_nist:`2025-22066`, :cve_nist:`2025-22081`, :cve_nist:`2025-22097`, :cve_nist:`2025-23136`, + :cve_nist:`2025-37785`, :cve_nist:`2025-37803`, :cve_nist:`2025-37805`, :cve_nist:`2025-38152`, + :cve_nist:`2025-39728` and :cve_nist:`2025-39735` +- net-tools: Fix :cve_nist:`2025-46836` +- openssh: Fix :cve_nist:`2025-32728` +- python3: Fix :cve_nist:`2024-12718`, :cve_nist:`2025-0938`, :cve_nist:`2025-4138`, + :cve_nist:`2025-4330`, :cve_nist:`2025-4435`, :cve_nist:`2025-4516` and :cve_nist:`2025-4517` +- python3-requests: Fix :cve_nist:`2024-47081` +- python3-setuptools: Fix :cve_nist:`2025-47273` +- ruby: Fix :cve_nist:`2025-27221` +- screen: Fix :cve_nist:`2025-46802`, :cve_nist:`2025-46804` and :cve_nist:`2025-46805` +- taglib: Fix :cve_nist:`2023-47466` + + +Fixes in Yocto-4.0.28 +~~~~~~~~~~~~~~~~~~~~~ + +- babeltrace/libatomic-ops: correct the :term:`SRC_URI` +- brief-yoctoprojectqs/ref-manual: Switch to new CDN +- bsp guide: update kernel version example to 6.12 +- bsp-guide: update lonely "4.12" kernel reference to "6.12" +- build-appliance-image: Update to kirkstone head revision +- cmake: Correctly handle cost data of tests with arbitrary chars in name +- conf.py: tweak SearchEnglish to be hyphen-friendly +- contributor-guide/submit-changes: encourage patch version changelogs +- dev-manual/sbom.rst: fix wrong build outputs +- docs: Clean up explanation of minimum required version numbers +- docs: README: specify how to contribute instead of pointing at another file +- docs: conf.py: silence SyntaxWarning on js_splitter_code +- e2fsprogs: removed 'sed -u' option +- ffmpeg: Add "libswresample libavcodec" to :term:`CVE_PRODUCT` +- ffmpeg: upgrade to 5.0.3 +- gcc: AArch64 - Fix strict-align cpymem/setmem +- glibc: nptl Fix indentation +- glibc: nptl Remove unnecessary catch-all-wake in condvar group switch +- glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait +- glibc: nptl Update comments and indentation for new condvar implementation +- glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop +- glibc: nptl Use all of g1_start and g_signals +- glibc: nptl rename __condvar_quiesce_and_switch_g1 +- glibc: pthreads NPTL lost wakeup fix 2 +- kernel.bbclass: add original package name to :term:`RPROVIDES` for -image and -base +- libpng: Improve ptest +- linux-yocto/5.15: update to v5.15.184 +- migration-guides: add release notes for 4.0.26 and 4.0.27 +- nfs-utils: don't use signals to shut down nfs server. +- poky.conf: bump version for 4.0.28 +- python3: upgrade to 3.10.18 +- ref-manual/release-process: update releases.svg +- ref-manual/variables.rst: document :term:`INHIBIT_DEFAULT_RUST_DEPS` + :term:`INHIBIT_UPDATERCD_BBCLASS` :term:`SSTATE_SKIP_CREATION` :term:`WIC_CREATE_EXTRA_ARGS` + :term:`IMAGE_ROOTFS_MAXSIZE` :term:`INITRAMFS_MAXSIZE` +- ref-manual: clarify :term:`KCONFIG_MODE` default behaviour +- ref-manual: classes: nativesdk: move note to appropriate section +- ref-manual: classes: reword to clarify that native/nativesdk options are exclusive +- ref-manual: kernel-fitimage.bbclass does not use :term:`SPL_SIGN_KEYNAME` +- scripts/install-buildtools: Update to 4.0.27 +- sphinx-lint: role missing opening tag colon +- sphinx-lint: trailing whitespace +- sphinx-lint: unbalanced inline literal markup +- sysstat: correct the :term:`SRC_URI` +- systemtap: add sysroot Python paths to configure flags +- test-manual/intro: remove Buildbot version used +- util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB +- xz: Update :term:`LICENSE` variable for xz packages + + +Known Issues in Yocto-4.0.28 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.28 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Aditya Tayade +- Adrian Freihofer +- Aleksandar Nikolic +- Alper Ak +- Antonin Godard +- Archana Polampalli +- Ashish Sharma +- Bruce Ashfield +- Carlos Sánchez de La Lama +- Changqing Li +- Christos Gavros +- Colin Pinnell McAllister +- Deepesh Varatharajan +- Divya Chellam +- Enrico Jörns +- Etienne Cordonnier +- Guocai He +- Harish Sadineni +- Hitendra Prajapati +- Jiaying Song +- Lee Chee Yang +- Martin Jansa +- Moritz Haase +- NeilBrown +- Peter Marko +- Poonam Jadhav +- Praveen Kumar +- Quentin Schulz +- Richard Purdie +- Robert P. J. Day +- Soumya Sambu +- Steve Sakoman +- Sundeep KOKKONDA +- Sunil Dora +- Trevor Woerner +- Vijay Anusuri +- Virendra Thakur +- Yi Zhao +- aszh07 + + +Repositories / Downloads for Yocto-4.0.28 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.28 </poky/log/?h=yocto-4.0.28>` +- Git Revision: :yocto_git:`78c9cb3eaf071932567835742608404d5ce23cc4 </poky/commit/?id=78c9cb3eaf071932567835742608404d5ce23cc4>` +- Release Artefact: poky-78c9cb3eaf071932567835742608404d5ce23cc4 +- sha: 9c73c6f89e70c2041a52851e5cc582e5a2f05ad2fdc110d2c518f2c4994e8de3 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/poky-78c9cb3eaf071932567835742608404d5ce23cc4.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/poky-78c9cb3eaf071932567835742608404d5ce23cc4.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.28 </openembedded-core/log/?h=yocto-4.0.28>` +- Git Revision: :oe_git:`75e54301c5076eb0454aee33c870adf078f563fd </openembedded-core/commit/?id=75e54301c5076eb0454aee33c870adf078f563fd>` +- Release Artefact: oecore-75e54301c5076eb0454aee33c870adf078f563fd +- sha: c5ffceab90881c4041ec4304da8b7b32d9c1f89a4c63ee7b8cbd53c796b0187b +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/oecore-75e54301c5076eb0454aee33c870adf078f563fd.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/oecore-75e54301c5076eb0454aee33c870adf078f563fd.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.28 </meta-mingw/log/?h=yocto-4.0.28>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.28 </meta-gplv2/log/?h=yocto-4.0.28>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.28 </bitbake/log/?h=yocto-4.0.28>` +- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>` +- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e +- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.28 </meta-yocto/log/?h=yocto-4.0.28>` +- Git Revision: :yocto_git:`0bf3dcef1caa80fb047bf9c3514314ab658e30ea </meta-yocto/commit/?id=0bf3dcef1caa80fb047bf9c3514314ab658e30ea>` + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.28 </yocto-docs/log/?h=yocto-4.0.28>` +- Git Revision: :yocto_git:`97cd3ee7f3bf1de8454708d1852ea9cdbd45c39b </yocto-docs/commit/?id=97cd3ee7f3bf1de8454708d1852ea9cdbd45c39b>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.29.rst b/poky/documentation/migration-guides/release-notes-4.0.29.rst new file mode 100644 index 0000000000..668a5012bb --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.29.rst @@ -0,0 +1,178 @@ +Release notes for Yocto-4.0.29 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.29 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- avahi: Fix :cve_nist:`2024-52615` +- binutils: Fix :cve_nist:`2025-7545` and :cve_nist:`2025-7546` +- coreutils: Fix :cve_nist:`2025-5278` +- curl: Fix :cve_nist:`2024-11053` and :cve_nist:`2025-0167` +- dropbear: Fix :cve_nist:`2025-47203` +- ffmpeg: Ignore :cve_nist:`2022-3109` and :cve_nist:`2022-3341` +- gdk-pixbuf: Fix :cve_nist:`2025-7345` +- ghostscript: Ignore :cve_nist:`2025-46646` +- gnupg: Fix :cve_nist:`2025-30258` +- gnutls: Fix :cve_nist:`2025-6395`, :cve_nist:`2025-32988`, :cve_nist:`2025-32989` and + :cve_nist:`2025-32990` +- iputils: Fix :cve_nist:`2025-48964` +- libarchive: Fix :cve_nist:`2025-5914`, :cve_nist:`2025-5915`, :cve_nist:`2025-5916` and + :cve_nist:`2025-5917` +- libpam: Fix :cve_nist:`2025-6020` +- libsoup-2.4: Fix :cve_nist:`2025-4945` +- libsoup-2.4: Fix :cve_nist:`2025-4969` (update patch) +- libsoup: Fix :cve_nist:`2025-4945`, :cve_nist:`2025-6021`, :cve_nist:`2025-6170`, + :cve_nist:`2025-49794` and :cve_nist:`2025-49796` +- ncurses: Fix :cve_nist:`2025-6141` +- ofono: Fix :cve_nist:`2023-4232` and :cve_nist:`2023-4235` +- openssl: Fix :cve_nist:`2024-41996` +- python3-urllib3: Fix :cve_nist:`2025-50181` +- ruby: Fix :cve_nist:`2024-43398` (update patches) +- sqlite3: Fix :cve_nist:`2025-6965` and :cve_nist:`2025-7458` +- sqlite3: Ignore :cve_nist:`2025-3277` +- systemd: Fix :cve_nist:`2025-4598` +- xwayland: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`, + :cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180` + + +Fixes in Yocto-4.0.29 +~~~~~~~~~~~~~~~~~~~~~ + +- bintuils: stable 2.38 branch update +- bitbake: test/fetch: Switch u-boot based test to use our own mirror +- build-appliance-image: Update to kirkstone head revision +- conf.py: improve SearchEnglish to handle terms with dots +- db: ignore implicit-int and implicit-function-declaration issues fatal with gcc-14 +- dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart +- glibc: stable 2.35 branch updates +- gnutls: patch read buffer overrun in the "pre_shared_key" extension +- gnutls: patch reject zero-length version in certificate request +- linux-yocto/5.15: update to v5.15.186 +- migration-guides: add release notes for 4.0.28 +- oeqa/core/decorator: add decorators to skip based on :term:`HOST_ARCH` +- openssl: upgrade to 3.0.17 +- orc: set :term:`CVE_PRODUCT` +- overview-manual/concepts.rst: fix sayhello hardcoded bindir +- poky.conf: bump version for 4.0.29 +- python3: update CVE product +- ref-manual: document :term:`KERNEL_SPLIT_MODULES` variable +- scripts/install-buildtools: Update to 4.0.28 +- sudo: upgrade to 1.9.17p1 +- tcf-agent: correct the :term:`SRC_URI` + + +Known Issues in Yocto-4.0.29 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-4.0.29 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Aleksandar Nikolic +- Antonin Godard +- Archana Polampalli +- Bruce Ashfield +- Changqing Li +- Chen Qi +- Colin Pinnell McAllister +- Daniel Díaz +- Deepesh Varatharajan +- Divya Chellam +- Dixit Parmar +- Enrico Jörns +- Guocai He +- Hitendra Prajapati +- Lee Chee Yang +- Marco Cavallini +- Martin Jansa +- Peter Marko +- Praveen Kumar +- Richard Purdie +- Rob Woolley +- Ross Burton +- Steve Sakoman +- Vijay Anusuri +- Yash Shinde +- Yogita Urade +- Zhang Peng + + +Repositories / Downloads for Yocto-4.0.29 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.29 </poky/log/?h=yocto-4.0.29>` +- Git Revision: :yocto_git:`81ab000fa437ca04f584a3327b076f7a512dc6d0 </poky/commit/?id=81ab000fa437ca04f584a3327b076f7a512dc6d0>` +- Release Artefact: poky-81ab000fa437ca04f584a3327b076f7a512dc6d0 +- sha: 2fecf3cac5c2361c201b5ae826960af92289862ec9be13837a8431138e534fd2 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/poky-81ab000fa437ca04f584a3327b076f7a512dc6d0.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/poky-81ab000fa437ca04f584a3327b076f7a512dc6d0.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.29 </openembedded-core/log/?h=yocto-4.0.29>` +- Git Revision: :oe_git:`bd620eb14660075fd0f7476bbbb65d5da6293874 </openembedded-core/commit/?id=bd620eb14660075fd0f7476bbbb65d5da6293874>` +- Release Artefact: oecore-bd620eb14660075fd0f7476bbbb65d5da6293874 +- sha: f32ab195c7090268e6e87ccf8db2813cf705c517030654326d14b25d926de88e +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/oecore-bd620eb14660075fd0f7476bbbb65d5da6293874.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/oecore-bd620eb14660075fd0f7476bbbb65d5da6293874.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.29 </meta-mingw/log/?h=yocto-4.0.29>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.29 </meta-gplv2/log/?h=yocto-4.0.29>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.29 </bitbake/log/?h=yocto-4.0.29>` +- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>` +- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2 +- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.29 </meta-yocto/log/?h=yocto-4.0.29>` +- Git Revision: :yocto_git:`e916d3bad58f955b73e2c67aba975e63cd191394 </meta-yocto/commit/?id=e916d3bad58f955b73e2c67aba975e63cd191394>` + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.29 </yocto-docs/log/?h=yocto-4.0.29>` +- Git Revision: :yocto_git:`bf855ecaf4bec4cef9bbfea2e50caa65a8339828 </yocto-docs/commit/?id=bf855ecaf4bec4cef9bbfea2e50caa65a8339828>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.3.rst b/poky/documentation/migration-guides/release-notes-4.0.3.rst index 46fe858cb7..1b9559a962 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.3.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.3.rst @@ -6,21 +6,21 @@ Release notes for Yocto-4.0.3 (Kirkstone) Security Fixes in Yocto-4.0.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- binutils: fix :cve:`2019-1010204` -- busybox: fix :cve:`2022-30065` -- cups: ignore :cve:`2022-26691` -- curl: Fix :cve:`2022-32205`, :cve:`2022-32206`, :cve:`2022-32207` and :cve:`2022-32208` -- dpkg: fix :cve:`2022-1664` -- ghostscript: fix :cve:`2022-2085` -- harfbuzz: fix :cve:`2022-33068` -- libtirpc: fix :cve:`2021-46828` -- lua: fix :cve:`2022-33099` -- nasm: ignore :cve:`2020-18974` -- qemu: fix :cve:`2022-35414` -- qemu: ignore :cve:`2021-20255` and :cve:`2019-12067` -- tiff: fix :cve:`2022-1354`, :cve:`2022-1355`, :cve:`2022-2056`, :cve:`2022-2057` and :cve:`2022-2058` -- u-boot: fix :cve:`2022-34835` -- unzip: fix :cve:`2022-0529` and :cve:`2022-0530` +- binutils: fix :cve_nist:`2019-1010204` +- busybox: fix :cve_nist:`2022-30065` +- cups: ignore :cve_nist:`2022-26691` +- curl: Fix :cve_nist:`2022-32205`, :cve_nist:`2022-32206`, :cve_nist:`2022-32207` and :cve_nist:`2022-32208` +- dpkg: fix :cve_nist:`2022-1664` +- ghostscript: fix :cve_nist:`2022-2085` +- harfbuzz: fix :cve_nist:`2022-33068` +- libtirpc: fix :cve_nist:`2021-46828` +- lua: fix :cve_nist:`2022-33099` +- nasm: ignore :cve_nist:`2020-18974` +- qemu: fix :cve_nist:`2022-35414` +- qemu: ignore :cve_nist:`2021-20255` and :cve_nist:`2019-12067` +- tiff: fix :cve_nist:`2022-1354`, :cve_nist:`2022-1355`, :cve_nist:`2022-2056`, :cve_nist:`2022-2057` and :cve_nist:`2022-2058` +- u-boot: fix :cve_nist:`2022-34835` +- unzip: fix :cve_nist:`2022-0529` and :cve_nist:`2022-0530` Fixes in Yocto-4.0.3 diff --git a/poky/documentation/migration-guides/release-notes-4.0.30.rst b/poky/documentation/migration-guides/release-notes-4.0.30.rst new file mode 100644 index 0000000000..6c8e1da91e --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-4.0.30.rst @@ -0,0 +1,170 @@ +Release notes for Yocto-4.0.30 (Kirkstone) +------------------------------------------ + +Security Fixes in Yocto-4.0.30 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- cups: Fix :cve_nist:`2025-58060` and :cve_nist:`2025-58364` +- dpkg: Fix :cve_nist:`2025-6297` +- ffmpeg: Fix :cve_nist:`2023-6602`, :cve_nist:`2023-6604`, :cve_nist:`2023-6605`, + :cve_nist:`2025-1594` and CVE-2025-7700 +- git: Fix :cve_nist:`2025-27613`, :cve_nist:`2025-27614`, :cve_nist:`2025-46334`, + :cve_nist:`2025-46835` and :cve_nist:`2025-48384` +- glib-2.0: Fix :cve_nist:`2025-7039` +- glib-2.0: Ignore :cve_nist:`2025-4056` +- go: Ignore :cve_nist:`2024-24790` and :cve_nist:`2025-0913` +- gstreamer1.0-plugins-base: Fix :cve_nist:`2025-47806`, :cve_nist:`2025-47807` and + :cve_nist:`2025-47808` +- gstreamer1.0-plugins-good: Fix :cve_nist:`2025-47183` and :cve_nist:`2025-47219` +- libarchive: Fix :cve_nist:`2025-5918` +- libxslt: Fix :cve_nist:`2023-40403` +- openssl: Fix :cve_nist:`2023-50781` +- python3: Fix :cve_nist:`2025-8194` +- qemu: Ignore :cve_nist:`2024-7730` +- sqlite3: Revert "sqlite3: patch CVE-2025-7458" +- tiff: Fix :cve_nist:`2024-13978`, :cve_nist:`2025-8176`, :cve_nist:`2025-8177`, + :cve_nist:`2025-8534` and :cve_nist:`2025-8851` +- vim: Fix :cve_nist:`2025-53905` and :cve_nist:`2025-53906` +- wpa-supplicant: Fix :cve_nist:`2022-37660` +- xserver-xorg: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`, + :cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180` + + +Fixes in Yocto-4.0.30 +~~~~~~~~~~~~~~~~~~~~~ + +- build-appliance-image: Update to kirkstone head revision +- default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue +- dev-manual/security-subjects.rst: update mailing lists +- gnupg: disable tests to avoid running target binaries at build time +- go-helloworld: fix license +- insane: Ensure that `src-uri-bad` fails correctly +- insane: Improve patch warning/error handling +- libubootenv: backport patch to fix unknown type name 'size_t' +- llvm: fix typo in CVE-2024-0151.patch +- migration-guides: add release notes for 4.0.29 +- overview-manual/yp-intro.rst: fix broken link to article +- poky.conf: bump version for 4.0.30 +- pulseaudio: Add audio group explicitly +- ref-manual/classes.rst: document the testexport class +- ref-manual/system-requirements.rst: update supported distributions +- ref-manual/variables.rst: document :term:`FIT_CONF_PREFIX` :term:`SPL_DTB_BINARY` variable +- ref-manual/variables.rst: expand :term:`IMAGE_OVERHEAD_FACTOR` glossary entry +- sdk: The main in the C example should return an int +- sudo: remove devtool FIXME comment +- systemd: Fix manpage build after :cve_nist:`2025-4598` +- vim: not adjust script pathnames for native scripts either +- vim: upgrade to 9.1.1652 + + +Known Issues in Yocto-4.0.30 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-4.0.30 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Antonin Godard +- Archana Polampalli +- Dan McGregor +- Deepak Rathore +- Divya Chellam +- Erik Lindsten +- Guocai He +- Gyorgy Sarvari +- Hitendra Prajapati +- Jan Vermaete +- Jiaying Song +- Joao Marcos Costa +- Kyungjik Min +- Lee Chee Yang +- Mingli Yu +- Peter Marko +- Philip Lorenz +- Praveen Kumar +- Quentin Schulz +- Richard Purdie +- Steve Sakoman +- Vijay Anusuri +- Yogita Urade +- Youngseok Jeong + + +Repositories / Downloads for Yocto-4.0.30 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.30 </poky/log/?h=yocto-4.0.30>` +- Git Revision: :yocto_git:`51dc9c464de0703bfbc6f1ee71ac9bea20933a45 </poky/commit/?id=51dc9c464de0703bfbc6f1ee71ac9bea20933a45>` +- Release Artefact: poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45 +- sha: 2b5db0a07598df7684975c0839e6f31515a8e78d366503feb9917ef1ca56c0b2 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>` +- Tag: :oe_git:`yocto-4.0.30 </openembedded-core/log/?h=yocto-4.0.30>` +- Git Revision: :oe_git:`d381eeb5e70bd0ce9e78032c909e4a23564f4dd7 </openembedded-core/commit/?id=d381eeb5e70bd0ce9e78032c909e4a23564f4dd7>` +- Release Artefact: oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7 +- sha: 022ab4ef5ac59ac3f01a9dacd8b1d6310cc117c6bed2e86e195ced88e0689c85 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.30 </meta-mingw/log/?h=yocto-4.0.30>` +- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>` +- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e +- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2 + +meta-gplv2 + +- Repository Location: :yocto_git:`/meta-gplv2` +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.30 </meta-gplv2/log/?h=yocto-4.0.30>` +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>` +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>` +- Tag: :oe_git:`yocto-4.0.30 </bitbake/log/?h=yocto-4.0.30>` +- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>` +- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2 +- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.30 </meta-yocto/log/?h=yocto-4.0.30>` +- Git Revision: :yocto_git:`edf7950e4d81dd31f29a58acdd8022dabd2be494 </meta-yocto/commit/?id=edf7950e4d81dd31f29a58acdd8022dabd2be494>` + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>` +- Tag: :yocto_git:`yocto-4.0.30 </yocto-docs/log/?h=yocto-4.0.30>` +- Git Revision: :yocto_git:`71a3933c609ce73ff07e5be48d9e7b03f22ef8d7 </yocto-docs/commit/?id=71a3933c609ce73ff07e5be48d9e7b03f22ef8d7>` + diff --git a/poky/documentation/migration-guides/release-notes-4.0.4.rst b/poky/documentation/migration-guides/release-notes-4.0.4.rst index 1d6e525bbc..41ef095c45 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.4.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.4.rst @@ -6,17 +6,17 @@ Release notes for Yocto-4.0.4 (Kirkstone) Security Fixes in Yocto-4.0.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- binutils : fix :cve:`2022-38533` -- curl: fix :cve:`2022-35252` -- sqlite: fix :cve:`2022-35737` -- grub2: fix :cve:`2021-3695`, :cve:`2021-3696`, :cve:`2021-3697`, :cve:`2022-28733`, :cve:`2022-28734` and :cve:`2022-28735` -- u-boot: fix :cve:`2022-30552` and :cve:`2022-33967` -- libxml2: Ignore :cve:`2016-3709` -- libtiff: fix :cve:`2022-34526` -- zlib: fix :cve:`2022-37434` -- gnutls: fix :cve:`2022-2509` -- u-boot: fix :cve:`2022-33103` -- qemu: fix :cve:`2021-3507`, :cve:`2021-3929`, :cve:`2021-4158`, :cve:`2022-0216` and :cve:`2022-0358` +- binutils : fix :cve_nist:`2022-38533` +- curl: fix :cve_nist:`2022-35252` +- sqlite: fix :cve_nist:`2022-35737` +- grub2: fix :cve_nist:`2021-3695`, :cve_nist:`2021-3696`, :cve_nist:`2021-3697`, :cve_nist:`2022-28733`, :cve_nist:`2022-28734` and :cve_nist:`2022-28735` +- u-boot: fix :cve_nist:`2022-30552` and :cve_nist:`2022-33967` +- libxml2: Ignore :cve_nist:`2016-3709` +- libtiff: fix :cve_nist:`2022-34526` +- zlib: fix :cve_nist:`2022-37434` +- gnutls: fix :cve_nist:`2022-2509` +- u-boot: fix :cve_nist:`2022-33103` +- qemu: fix :cve_nist:`2021-3507`, :cve_nist:`2021-3929`, :cve_nist:`2021-4158`, :cve_nist:`2022-0216` and :cve_nist:`2022-0358` Fixes in Yocto-4.0.4 diff --git a/poky/documentation/migration-guides/release-notes-4.0.5.rst b/poky/documentation/migration-guides/release-notes-4.0.5.rst index cdfe85b750..ae061ed633 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.5.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.5.rst @@ -6,11 +6,11 @@ Release notes for Yocto-4.0.5 (Kirkstone) Security Fixes in Yocto-4.0.5 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- qemu: fix :cve:`2021-3750`, :cve:`2021-3611` and :cve:`2022-2962` -- binutils : fix :cve:`2022-38126`, :cve:`2022-38127` and :cve:`2022-38128` -- tff: fix :cve:`2022-2867`, :cve:`2022-2868` and :cve:`2022-2869` -- inetutils: fix :cve:`2022-39028` -- go: fix :cve:`2022-27664` +- qemu: fix :cve_nist:`2021-3750`, :cve_nist:`2021-3611` and :cve_nist:`2022-2962` +- binutils : fix :cve_nist:`2022-38126`, :cve_nist:`2022-38127` and :cve_nist:`2022-38128` +- tff: fix :cve_nist:`2022-2867`, :cve_nist:`2022-2868` and :cve_nist:`2022-2869` +- inetutils: fix :cve_nist:`2022-39028` +- go: fix :cve_nist:`2022-27664` Fixes in Yocto-4.0.5 ~~~~~~~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-4.0.6.rst b/poky/documentation/migration-guides/release-notes-4.0.6.rst index 76d23fcf0c..e0c0cc09b9 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.6.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.6.rst @@ -6,28 +6,28 @@ Release notes for Yocto-4.0.6 (Kirkstone) Security Fixes in Yocto-4.0.6 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bash: Fix :cve:`2022-3715` -- curl: Fix :cve:`2022-32221`, :cve:`2022-42915` and :cve:`2022-42916` -- dbus: Fix :cve:`2022-42010`, :cve:`2022-42011` and :cve:`2022-42012` -- dropbear: Fix :cve:`2021-36369` -- ffmpeg: Fix :cve:`2022-3964`, :cve:`2022-3965` -- go: Fix :cve:`2022-2880` -- grub2: Fix :cve:`2022-2601`, :cve:`2022-3775` and :cve:`2022-28736` -- libarchive: Fix :cve:`2022-36227` -- libpam: Fix :cve:`2022-28321` -- libsndfile1: Fix :cve:`2021-4156` -- lighttpd: Fix :cve:`2022-41556` -- openssl: Fix :cve:`2022-3358` -- pixman: Fix :cve:`2022-44638` -- python3-mako: Fix :cve:`2022-40023` -- python3: Fix :cve:`2022-42919` -- qemu: Fix :cve:`2022-3165` -- sysstat: Fix :cve:`2022-39377` -- systemd: Fix :cve:`2022-3821` -- tiff: Fix :cve:`2022-2953`, :cve:`2022-3599`, :cve:`2022-3597`, :cve:`2022-3626`, :cve:`2022-3627`, :cve:`2022-3570`, :cve:`2022-3598` and :cve:`2022-3970` -- vim: Fix :cve:`2022-3352`, :cve:`2022-3705` and :cve:`2022-4141` -- wayland: Fix :cve:`2021-3782` -- xserver-xorg: Fix :cve:`2022-3550` and :cve:`2022-3551` +- bash: Fix :cve_nist:`2022-3715` +- curl: Fix :cve_nist:`2022-32221`, :cve_nist:`2022-42915` and :cve_nist:`2022-42916` +- dbus: Fix :cve_nist:`2022-42010`, :cve_nist:`2022-42011` and :cve_nist:`2022-42012` +- dropbear: Fix :cve_nist:`2021-36369` +- ffmpeg: Fix :cve_nist:`2022-3964`, :cve_nist:`2022-3965` +- go: Fix :cve_nist:`2022-2880` +- grub2: Fix :cve_nist:`2022-2601`, :cve_nist:`2022-3775` and :cve_nist:`2022-28736` +- libarchive: Fix :cve_nist:`2022-36227` +- libpam: Fix :cve_nist:`2022-28321` +- libsndfile1: Fix :cve_nist:`2021-4156` +- lighttpd: Fix :cve_nist:`2022-41556` +- openssl: Fix :cve_nist:`2022-3358` +- pixman: Fix :cve_nist:`2022-44638` +- python3-mako: Fix :cve_nist:`2022-40023` +- python3: Fix :cve_nist:`2022-42919` +- qemu: Fix :cve_nist:`2022-3165` +- sysstat: Fix :cve_nist:`2022-39377` +- systemd: Fix :cve_nist:`2022-3821` +- tiff: Fix :cve_nist:`2022-2953`, :cve_nist:`2022-3599`, :cve_nist:`2022-3597`, :cve_nist:`2022-3626`, :cve_nist:`2022-3627`, :cve_nist:`2022-3570`, :cve_nist:`2022-3598` and :cve_nist:`2022-3970` +- vim: Fix :cve_nist:`2022-3352`, :cve_nist:`2022-3705` and :cve_nist:`2022-4141` +- wayland: Fix :cve_nist:`2021-3782` +- xserver-xorg: Fix :cve_nist:`2022-3550` and :cve_nist:`2022-3551` Fixes in Yocto-4.0.6 diff --git a/poky/documentation/migration-guides/release-notes-4.0.7.rst b/poky/documentation/migration-guides/release-notes-4.0.7.rst index c3885d9e0e..a11a29889d 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.7.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.7.rst @@ -6,25 +6,25 @@ Release notes for Yocto-4.0.7 (Kirkstone) Security Fixes in Yocto-4.0.7 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- binutils: Fix :cve:`2022-4285` -- curl: Fix :cve:`2022-43551` and :cve_mitre:`2022-43552` -- ffmpeg: Fix :cve:`2022-3109` and :cve:`2022-3341` -- go: Fix :cve:`2022-41715` and :cve:`2022-41717` -- libX11: Fix :cve:`2022-3554` and :cve:`2022-3555` -- libarchive: Fix :cve:`2022-36227` -- libksba: Fix :cve:`2022-47629` -- libpng: Fix :cve:`2019-6129` -- libxml2: Fix :cve:`2022-40303` and :cve:`2022-40304` -- openssl: Fix :cve:`2022-3996` -- python3: Fix :cve:`2022-45061` -- python3-git: Fix :cve:`2022-24439` -- python3-setuptools: Fix :cve:`2022-40897` -- python3-wheel: Fix :cve:`2022-40898` -- qemu: Fix :cve:`2022-4144` -- sqlite: Fix :cve:`2022-46908` -- systemd: Fix :cve:`2022-45873` -- vim: Fix :cve:`2023-0049`, :cve:`2023-0051`, :cve:`2023-0054` and :cve:`2023-0088` -- webkitgtk: Fix :cve:`2022-32886`, :cve_mitre:`2022-32891` and :cve:`2022-32912` +- binutils: Fix :cve_nist:`2022-4285` +- curl: Fix :cve_nist:`2022-43551` and :cve_mitre:`2022-43552` +- ffmpeg: Fix :cve_nist:`2022-3109` and :cve_nist:`2022-3341` +- go: Fix :cve_nist:`2022-41715` and :cve_nist:`2022-41717` +- libX11: Fix :cve_nist:`2022-3554` and :cve_nist:`2022-3555` +- libarchive: Fix :cve_nist:`2022-36227` +- libksba: Fix :cve_nist:`2022-47629` +- libpng: Fix :cve_nist:`2019-6129` +- libxml2: Fix :cve_nist:`2022-40303` and :cve_nist:`2022-40304` +- openssl: Fix :cve_nist:`2022-3996` +- python3: Fix :cve_nist:`2022-45061` +- python3-git: Fix :cve_nist:`2022-24439` +- python3-setuptools: Fix :cve_nist:`2022-40897` +- python3-wheel: Fix :cve_nist:`2022-40898` +- qemu: Fix :cve_nist:`2022-4144` +- sqlite: Fix :cve_nist:`2022-46908` +- systemd: Fix :cve_nist:`2022-45873` +- vim: Fix :cve_nist:`2023-0049`, :cve_nist:`2023-0051`, :cve_nist:`2023-0054` and :cve_nist:`2023-0088` +- webkitgtk: Fix :cve_nist:`2022-32886`, :cve_mitre:`2022-32891` and :cve_nist:`2022-32912` Fixes in Yocto-4.0.7 @@ -39,7 +39,7 @@ Fixes in Yocto-4.0.7 - busybox: always start do_compile with orig config files - busybox: rm temporary files if do_compile was interrupted - cairo: fix CVE patches assigned wrong CVE number -- cairo: update patch for :cve:`2019-6461` with upstream solution +- cairo: update patch for :cve_nist:`2019-6461` with upstream solution - classes/create-spdx: Add SPDX_PRETTY option - classes: image: Set empty weak default IMAGE_LINGUAS - combo-layer: add sync-revs command diff --git a/poky/documentation/migration-guides/release-notes-4.0.8.rst b/poky/documentation/migration-guides/release-notes-4.0.8.rst index 223b74fbaf..af58d0462c 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.8.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.8.rst @@ -6,16 +6,16 @@ Release notes for Yocto-4.0.8 (Kirkstone) Security Fixes in Yocto-4.0.8 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- apr-util: Fix :cve:`2022-25147` -- apr: Fix :cve:`2022-24963`, :cve:`2022-28331` and :cve:`2021-35940` -- bind: Fix :cve:`2022-3094`, :cve:`2022-3736` and :cve:`2022-3924` -- git: Ignore :cve:`2022-41953` -- git: Fix :cve:`2022-23521` and :cve:`2022-41903` -- libgit2: Fix :cve:`2023-22742` -- ppp: Fix :cve:`2022-4603` -- python3-certifi: Fix :cve:`2022-23491` -- sudo: Fix :cve:`2023-22809` -- tar: Fix :cve:`2022-48303` +- apr-util: Fix :cve_nist:`2022-25147` +- apr: Fix :cve_nist:`2022-24963`, :cve_nist:`2022-28331` and :cve_nist:`2021-35940` +- bind: Fix :cve_nist:`2022-3094`, :cve_nist:`2022-3736` and :cve_nist:`2022-3924` +- git: Ignore :cve_nist:`2022-41953` +- git: Fix :cve_nist:`2022-23521` and :cve_nist:`2022-41903` +- libgit2: Fix :cve_nist:`2023-22742` +- ppp: Fix :cve_nist:`2022-4603` +- python3-certifi: Fix :cve_nist:`2022-23491` +- sudo: Fix :cve_nist:`2023-22809` +- tar: Fix :cve_nist:`2022-48303` Fixes in Yocto-4.0.8 diff --git a/poky/documentation/migration-guides/release-notes-4.0.9.rst b/poky/documentation/migration-guides/release-notes-4.0.9.rst index 236477443a..a571e95724 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.9.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.9.rst @@ -6,26 +6,26 @@ Release notes for Yocto-4.0.9 (Kirkstone) Security Fixes in Yocto-4.0.9 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- binutils: Fix :cve:`2023-22608` -- curl: Fix :cve:`2023-23914`, :cve:`2023-23915` and :cve:`2023-23916` -- epiphany: Fix :cve:`2023-26081` -- git: Ignore :cve:`2023-22743` -- glibc: Fix :cve:`2023-0687` -- gnutls: Fix :cve:`2023-0361` -- go: Fix :cve:`2022-2879`, :cve:`2022-41720` and :cve:`2022-41723` -- harfbuzz: Fix :cve:`2023-25193` -- less: Fix :cve:`2022-46663` -- libmicrohttpd: Fix :cve:`2023-27371` -- libsdl2: Fix :cve:`2022-4743` -- openssl: Fix :cve:`2022-3996`, :cve:`2023-0464`, :cve:`2023-0465` and :cve:`2023-0466` -- pkgconf: Fix :cve:`2023-24056` -- python3: Fix :cve:`2023-24329` -- shadow: Ignore :cve:`2016-15024` -- systemd: Fix :cve:`2022-4415` -- tiff: Fix :cve:`2023-0800`, :cve:`2023-0801`, :cve:`2023-0802`, :cve:`2023-0803` and :cve:`2023-0804` -- vim: Fix :cve:`2023-0433`, :cve:`2023-0512`, :cve:`2023-1127`, :cve:`2023-1170`, :cve:`2023-1175`, :cve:`2023-1264` and :cve:`2023-1355` -- xserver-xorg: Fix :cve:`2023-0494` -- xwayland: Fix :cve:`2023-0494` +- binutils: Fix :cve_nist:`2023-22608` +- curl: Fix :cve_nist:`2023-23914`, :cve_nist:`2023-23915` and :cve_nist:`2023-23916` +- epiphany: Fix :cve_nist:`2023-26081` +- git: Ignore :cve_nist:`2023-22743` +- glibc: Fix :cve_nist:`2023-0687` +- gnutls: Fix :cve_nist:`2023-0361` +- go: Fix :cve_nist:`2022-2879`, :cve_nist:`2022-41720` and :cve_nist:`2022-41723` +- harfbuzz: Fix :cve_nist:`2023-25193` +- less: Fix :cve_nist:`2022-46663` +- libmicrohttpd: Fix :cve_nist:`2023-27371` +- libsdl2: Fix :cve_nist:`2022-4743` +- openssl: Fix :cve_nist:`2022-3996`, :cve_nist:`2023-0464`, :cve_nist:`2023-0465` and :cve_nist:`2023-0466` +- pkgconf: Fix :cve_nist:`2023-24056` +- python3: Fix :cve_nist:`2023-24329` +- shadow: Ignore :cve_nist:`2016-15024` +- systemd: Fix :cve_nist:`2022-4415` +- tiff: Fix :cve_nist:`2023-0800`, :cve_nist:`2023-0801`, :cve_nist:`2023-0802`, :cve_nist:`2023-0803` and :cve_nist:`2023-0804` +- vim: Fix :cve_nist:`2023-0433`, :cve_nist:`2023-0512`, :cve_nist:`2023-1127`, :cve_nist:`2023-1170`, :cve_nist:`2023-1175`, :cve_nist:`2023-1264` and :cve_nist:`2023-1355` +- xserver-xorg: Fix :cve_nist:`2023-0494` +- xwayland: Fix :cve_nist:`2023-0494` Fixes in Yocto-4.0.9 @@ -90,7 +90,7 @@ Fixes in Yocto-4.0.9 - pybootchartui: Fix python syntax issue - python3-git: fix indent error - python3-setuptools-rust-native: Add direct dependency of native python3 modules -- qemu: Revert "fix :cve:`2021-3507`" as not applicable for qemu 6.2 +- qemu: Revert "fix :cve_nist:`2021-3507`" as not applicable for qemu 6.2 - rsync: Add missing prototypes to function declarations - rsync: Turn on -pedantic-errors at the end of 'configure' - runqemu: kill qemu if it hangs diff --git a/poky/documentation/migration-guides/release-notes-4.0.rst b/poky/documentation/migration-guides/release-notes-4.0.rst index a5d66c0410..e9e6949527 100644 --- a/poky/documentation/migration-guides/release-notes-4.0.rst +++ b/poky/documentation/migration-guides/release-notes-4.0.rst @@ -25,7 +25,7 @@ New Features / Enhancements in 4.0 BB_SIGNATURE_HANDLER = "OEEquivHash" BB_HASHSERVE = "auto" - BB_HASHSERVE_UPSTREAM = "hashserv.yocto.io:8687" + BB_HASHSERVE_UPSTREAM = "hashserv.yoctoproject.org:8686" SSTATE_MIRRORS ?= "file://.* https://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH" - The Python package build process is now based on `wheels <https://pythonwheels.com/>`__ @@ -337,37 +337,37 @@ Other license-related notes: Security Fixes in 4.0 ~~~~~~~~~~~~~~~~~~~~~ -- binutils: :cve:`2021-42574`, :cve:`2021-45078` -- curl: :cve:`2021-22945`, :cve:`2021-22946`, :cve:`2021-22947` -- epiphany: :cve:`2021-45085`, :cve:`2021-45086`, :cve:`2021-45087`, :cve:`2021-45088` -- expat: :cve:`2021-45960`, :cve:`2021-46143`, :cve:`2022-22822`, :cve:`2022-22823`, :cve:`2022-22824`, :cve:`2022-22825`, :cve:`2022-22826`, :cve:`2022-22827`, :cve:`2022-23852`, :cve:`2022-23990`, :cve:`2022-25235`, :cve:`2022-25236`, :cve:`2022-25313`, :cve:`2022-25314`, :cve:`2022-25315` -- ffmpeg: :cve:`2021-38114` -- gcc: :cve:`2021-35465`, :cve:`2021-42574`, :cve:`2021-46195`, :cve:`2022-24765` -- glibc: :cve:`2021-3998`, :cve:`2021-3999`, :cve:`2021-43396`, :cve:`2022-23218`, :cve:`2022-23219` -- gmp: :cve:`2021-43618` -- go: :cve:`2021-41771` and :cve:`2021-41772` -- grub2: :cve:`2021-3981` -- gzip: :cve:`2022-1271` -- libarchive : :cve:`2021-31566`, :cve:`2021-36976` -- libxml2: :cve:`2022-23308` -- libxslt: :cve:`2021-30560` -- lighttpd: :cve:`2022-22707` -- linux-yocto/5.10: amdgpu: :cve:`2021-42327` -- lua: :cve:`2021-43396` -- openssl: :cve:`2021-4044`, :cve:`2022-0778` -- qemu: :cve:`2022-1050`, :cve:`2022-26353`, :cve:`2022-26354` -- rpm: :cve:`2021-3521` -- seatd: :cve:`2022-25643` -- speex: :cve:`2020-23903` -- squashfs-tools: :cve:`2021-41072` -- systemd: :cve:`2021-4034` -- tiff: :cve:`2022-0561`, :cve:`2022-0562`, :cve:`2022-0865`, :cve:`2022-0891`, :cve:`2022-0907`, :cve:`2022-0908`, :cve:`2022-0909`, :cve:`2022-0924`, :cve:`2022-1056`, :cve:`2022-22844` -- unzip: :cve:`2021-4217` -- vim: :cve:`2021-3796`, :cve:`2021-3872`, :cve:`2021-3875`, :cve:`2021-3927`, :cve:`2021-3928`, :cve:`2021-3968`, :cve:`2021-3973`, :cve:`2021-4187`, :cve:`2022-0128`, :cve:`2022-0156`, :cve:`2022-0158`, :cve:`2022-0261`, :cve:`2022-0318`, :cve:`2022-0319`, :cve:`2022-0554`, :cve:`2022-0696`, :cve:`2022-0714`, :cve:`2022-0729`, :cve:`2022-0943` -- virglrenderer: :cve:`2022-0135`, :cve:`2022-0175` -- webkitgtk: :cve:`2022-22589`, :cve:`2022-22590`, :cve:`2022-22592` -- xz: :cve:`2022-1271` -- zlib: :cve:`2018-25032` +- binutils: :cve_nist:`2021-42574`, :cve_nist:`2021-45078` +- curl: :cve_nist:`2021-22945`, :cve_nist:`2021-22946`, :cve_nist:`2021-22947` +- epiphany: :cve_nist:`2021-45085`, :cve_nist:`2021-45086`, :cve_nist:`2021-45087`, :cve_nist:`2021-45088` +- expat: :cve_nist:`2021-45960`, :cve_nist:`2021-46143`, :cve_nist:`2022-22822`, :cve_nist:`2022-22823`, :cve_nist:`2022-22824`, :cve_nist:`2022-22825`, :cve_nist:`2022-22826`, :cve_nist:`2022-22827`, :cve_nist:`2022-23852`, :cve_nist:`2022-23990`, :cve_nist:`2022-25235`, :cve_nist:`2022-25236`, :cve_nist:`2022-25313`, :cve_nist:`2022-25314`, :cve_nist:`2022-25315` +- ffmpeg: :cve_nist:`2021-38114` +- gcc: :cve_nist:`2021-35465`, :cve_nist:`2021-42574`, :cve_nist:`2021-46195`, :cve_nist:`2022-24765` +- glibc: :cve_nist:`2021-3998`, :cve_nist:`2021-3999`, :cve_nist:`2021-43396`, :cve_nist:`2022-23218`, :cve_nist:`2022-23219` +- gmp: :cve_nist:`2021-43618` +- go: :cve_nist:`2021-41771` and :cve_nist:`2021-41772` +- grub2: :cve_nist:`2021-3981` +- gzip: :cve_nist:`2022-1271` +- libarchive : :cve_nist:`2021-31566`, :cve_nist:`2021-36976` +- libxml2: :cve_nist:`2022-23308` +- libxslt: :cve_nist:`2021-30560` +- lighttpd: :cve_nist:`2022-22707` +- linux-yocto/5.10: amdgpu: :cve_nist:`2021-42327` +- lua: :cve_nist:`2021-43396` +- openssl: :cve_nist:`2021-4044`, :cve_nist:`2022-0778` +- qemu: :cve_nist:`2022-1050`, :cve_nist:`2022-26353`, :cve_nist:`2022-26354` +- rpm: :cve_nist:`2021-3521` +- seatd: :cve_nist:`2022-25643` +- speex: :cve_nist:`2020-23903` +- squashfs-tools: :cve_nist:`2021-41072` +- systemd: :cve_nist:`2021-4034` +- tiff: :cve_nist:`2022-0561`, :cve_nist:`2022-0562`, :cve_nist:`2022-0865`, :cve_nist:`2022-0891`, :cve_nist:`2022-0907`, :cve_nist:`2022-0908`, :cve_nist:`2022-0909`, :cve_nist:`2022-0924`, :cve_nist:`2022-1056`, :cve_nist:`2022-22844` +- unzip: :cve_nist:`2021-4217` +- vim: :cve_nist:`2021-3796`, :cve_nist:`2021-3872`, :cve_nist:`2021-3875`, :cve_nist:`2021-3927`, :cve_nist:`2021-3928`, :cve_nist:`2021-3968`, :cve_nist:`2021-3973`, :cve_nist:`2021-4187`, :cve_nist:`2022-0128`, :cve_nist:`2022-0156`, :cve_nist:`2022-0158`, :cve_nist:`2022-0261`, :cve_nist:`2022-0318`, :cve_nist:`2022-0319`, :cve_nist:`2022-0554`, :cve_nist:`2022-0696`, :cve_nist:`2022-0714`, :cve_nist:`2022-0729`, :cve_nist:`2022-0943` +- virglrenderer: :cve_nist:`2022-0135`, :cve_nist:`2022-0175` +- webkitgtk: :cve_nist:`2022-22589`, :cve_nist:`2022-22590`, :cve_nist:`2022-22592` +- xz: :cve_nist:`2022-1271` +- zlib: :cve_nist:`2018-25032` diff --git a/poky/documentation/migration-guides/release-notes-4.1.1.rst b/poky/documentation/migration-guides/release-notes-4.1.1.rst index 4f31fbf1c7..8393bc5320 100644 --- a/poky/documentation/migration-guides/release-notes-4.1.1.rst +++ b/poky/documentation/migration-guides/release-notes-4.1.1.rst @@ -6,16 +6,16 @@ Release notes for Yocto-4.1.1 (Langdale) Security Fixes in Yocto-4.1.1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- curl: Fix :cve:`2022-32221`, :cve:`2022-35260`, :cve:`2022-42915` and :cve:`2022-42916` -- libx11: Fix :cve:`2022-3554` -- lighttpd: Fix :cve:`2022-41556` -- openssl: Fix :cve:`2022-3358`, :cve:`2022-3602` and :cve:`2022-3786` -- pixman: Fix :cve:`2022-44638` -- qemu: Fix :cve:`2022-3165` -- sudo: Fix :cve:`2022-43995` -- tiff: Fix :cve:`2022-3599`, :cve:`2022-3597`, :cve:`2022-3626`, :cve:`2022-3627`, :cve:`2022-3570` and :cve:`2022-3598` -- xserver-xorg: Fix :cve:`2022-3550` and :cve:`2022-3551` -- xserver-xorg: Ignore :cve:`2022-3553` +- curl: Fix :cve_nist:`2022-32221`, :cve_nist:`2022-35260`, :cve_nist:`2022-42915` and :cve_nist:`2022-42916` +- libx11: Fix :cve_nist:`2022-3554` +- lighttpd: Fix :cve_nist:`2022-41556` +- openssl: Fix :cve_nist:`2022-3358`, :cve_nist:`2022-3602` and :cve_nist:`2022-3786` +- pixman: Fix :cve_nist:`2022-44638` +- qemu: Fix :cve_nist:`2022-3165` +- sudo: Fix :cve_nist:`2022-43995` +- tiff: Fix :cve_nist:`2022-3599`, :cve_nist:`2022-3597`, :cve_nist:`2022-3626`, :cve_nist:`2022-3627`, :cve_nist:`2022-3570` and :cve_nist:`2022-3598` +- xserver-xorg: Fix :cve_nist:`2022-3550` and :cve_nist:`2022-3551` +- xserver-xorg: Ignore :cve_nist:`2022-3553` Fixes in Yocto-4.1.1 @@ -179,7 +179,7 @@ Fixes in Yocto-4.1.1 - shadow: update 4.12.1 -> 4.12.3 - systemd: add systemd-creds and systemd-cryptenroll to systemd-extra-utils - test-manual: fix typo in machine name -- tiff: fix a typo for :cve:`2022-2953`.patch +- tiff: fix a typo for :cve_nist:`2022-2953`.patch - u-boot: Add savedefconfig task - u-boot: Remove duplicate inherit of cml1 - uboot-sign: Fix using wrong KEY_REQ_ARGS diff --git a/poky/documentation/migration-guides/release-notes-4.1.2.rst b/poky/documentation/migration-guides/release-notes-4.1.2.rst index ee5d4ccc51..ea20ced1be 100644 --- a/poky/documentation/migration-guides/release-notes-4.1.2.rst +++ b/poky/documentation/migration-guides/release-notes-4.1.2.rst @@ -6,18 +6,18 @@ Release notes for Yocto-4.1.2 (Langdale) Security Fixes in Yocto-4.1.2 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- sudo: Fix :cve:`2022-43995` -- binutils: Fix :cve:`2022-4285` -- cairo: update patch for :cve:`2019-6461` with upstream solution -- expat: Fix :cve:`2022-43680` -- ffmpeg: Fix :cve:`2022-3964` and :cve:`2022-3965` -- grub: Fix :cve:`2022-28736` -- libarchive: Fix :cve:`2022-36227` -- libpam: Fix :cve:`2022-28321` -- libpng: Fix :cve:`2019-6129` -- ruby: Fix :cve:`2022-28738` and :cve:`2022-28739` -- tiff: Fix :cve:`2022-3970` -- vim: Fix :cve:`2022-4141` +- sudo: Fix :cve_nist:`2022-43995` +- binutils: Fix :cve_nist:`2022-4285` +- cairo: update patch for :cve_nist:`2019-6461` with upstream solution +- expat: Fix :cve_nist:`2022-43680` +- ffmpeg: Fix :cve_nist:`2022-3964` and :cve_nist:`2022-3965` +- grub: Fix :cve_nist:`2022-28736` +- libarchive: Fix :cve_nist:`2022-36227` +- libpam: Fix :cve_nist:`2022-28321` +- libpng: Fix :cve_nist:`2019-6129` +- ruby: Fix :cve_nist:`2022-28738` and :cve_nist:`2022-28739` +- tiff: Fix :cve_nist:`2022-3970` +- vim: Fix :cve_nist:`2022-4141` Fixes in Yocto-4.1.2 diff --git a/poky/documentation/migration-guides/release-notes-4.1.3.rst b/poky/documentation/migration-guides/release-notes-4.1.3.rst index d8474cda68..b07cfa4689 100644 --- a/poky/documentation/migration-guides/release-notes-4.1.3.rst +++ b/poky/documentation/migration-guides/release-notes-4.1.3.rst @@ -6,24 +6,24 @@ Release notes for Yocto-4.1.3 (Langdale) Security Fixes in Yocto-4.1.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- apr-util: Fix :cve:`2022-25147` -- apr: Fix :cve:`2022-24963` and :cve:`2022-28331` -- bind: Fix :cve:`2022-3094`, :cve:`2022-3736` and :cve:`2022-3924` -- curl: Fix :cve:`2022-43551` and :cve:`2022-43552` -- dbus: Fix :cve:`2022-42010`, :cve:`2022-42011` and :cve:`2022-42012` -- git: Fix :cve:`2022-23521`, :cve:`2022-39253`, :cve:`2022-39260` and :cve:`2022-41903` -- git: Ignore :cve:`2022-41953` -- go: Fix :cve:`2022-41717` and :cve:`2022-41720` -- grub2: Fix :cve:`2022-2601` and :cve:`2022-3775` -- less: Fix :cve:`2022-46663` -- libarchive: Fix :cve:`2022-36227` -- libksba: Fix :cve:`2022-47629` -- openssl: Fix :cve:`2022-3996` -- pkgconf: Fix :cve:`2023-24056` -- ppp: Fix :cve:`2022-4603` -- sudo: Fix :cve:`2023-22809` -- tar: Fix :cve:`2022-48303` -- vim: Fix :cve:`2023-0049`, :cve:`2023-0051`, :cve:`2023-0054`, :cve:`2023-0288`, :cve:`2023-0433` and :cve:`2023-0512` +- apr-util: Fix :cve_nist:`2022-25147` +- apr: Fix :cve_nist:`2022-24963` and :cve_nist:`2022-28331` +- bind: Fix :cve_nist:`2022-3094`, :cve_nist:`2022-3736` and :cve_nist:`2022-3924` +- curl: Fix :cve_nist:`2022-43551` and :cve_nist:`2022-43552` +- dbus: Fix :cve_nist:`2022-42010`, :cve_nist:`2022-42011` and :cve_nist:`2022-42012` +- git: Fix :cve_nist:`2022-23521`, :cve_nist:`2022-39253`, :cve_nist:`2022-39260` and :cve_nist:`2022-41903` +- git: Ignore :cve_nist:`2022-41953` +- go: Fix :cve_nist:`2022-41717` and :cve_nist:`2022-41720` +- grub2: Fix :cve_nist:`2022-2601` and :cve_nist:`2022-3775` +- less: Fix :cve_nist:`2022-46663` +- libarchive: Fix :cve_nist:`2022-36227` +- libksba: Fix :cve_nist:`2022-47629` +- openssl: Fix :cve_nist:`2022-3996` +- pkgconf: Fix :cve_nist:`2023-24056` +- ppp: Fix :cve_nist:`2022-4603` +- sudo: Fix :cve_nist:`2023-22809` +- tar: Fix :cve_nist:`2022-48303` +- vim: Fix :cve_nist:`2023-0049`, :cve_nist:`2023-0051`, :cve_nist:`2023-0054`, :cve_nist:`2023-0288`, :cve_nist:`2023-0433` and :cve_nist:`2023-0512` - xserver-xorg: Fix :cve_mitre:`2023-0494` - xwayland: Fix :cve_mitre:`2023-0494` diff --git a/poky/documentation/migration-guides/release-notes-4.1.4.rst b/poky/documentation/migration-guides/release-notes-4.1.4.rst index de469f4bee..147dd371b1 100644 --- a/poky/documentation/migration-guides/release-notes-4.1.4.rst +++ b/poky/documentation/migration-guides/release-notes-4.1.4.rst @@ -6,23 +6,23 @@ Release notes for Yocto-4.1.4 (Langdale) Security Fixes in Yocto-4.1.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- cve-extra-exclusions/linux-yocto: Ignore :cve:`2020-27784`, :cve:`2021-3669`, :cve:`2021-3759`, :cve:`2021-4218`, :cve:`2022-0480`, :cve:`2022-1184`, :cve:`2022-1462`, :cve:`2022-2308`, :cve:`2022-2327`, :cve:`2022-26365`, :cve:`2022-2663`, :cve:`2022-2785`, :cve:`2022-3176`, :cve:`2022-33740`, :cve:`2022-33741`, :cve:`2022-33742`, :cve:`2022-3526`, :cve:`2022-3563`, :cve:`2022-3621`, :cve:`2022-3623`, :cve:`2022-3624`, :cve:`2022-3625`, :cve:`2022-3629`, :cve:`2022-3630`, :cve:`2022-3633`, :cve:`2022-3635`, :cve:`2022-3636`, :cve:`2022-3637`, :cve:`2022-3646` and :cve:`2022-3649` -- cve-extra-exclusions/linux-yocto 5.15: Ignore :cve:`2022-3435`, :cve:`2022-3534`, :cve:`2022-3564`, :cve:`2022-3564`, :cve:`2022-3619`, :cve:`2022-3640`, :cve:`2022-42895`, :cve:`2022-42896`, :cve:`2022-4382`, :cve:`2023-0266` and :cve:`2023-0394` -- epiphany: Fix :cve:`2023-26081` -- git: Ignore :cve:`2023-22743` -- go: Fix :cve:`2022-41722`, :cve:`2022-41723`, :cve:`2022-41724`, :cve:`2022-41725` and :cve:`2023-24532` -- harfbuzz: Fix :cve:`2023-25193` -- libmicrohttpd: Fix :cve:`2023-27371` -- libxml2: Fix :cve:`2022-40303` and :cve:`2022-40304` -- openssl: Fix :cve:`2023-0464`, :cve:`2023-0465` and :cve:`2023-0466` -- python3-setuptools: Fix :cve:`2022-40897` -- qemu: Fix :cve:`2022-4144` -- screen: Fix :cve:`2023-24626` -- shadow: Ignore :cve:`2016-15024` -- tiff: Fix :cve:`2022-48281`, :cve:`2023-0795`, :cve:`2023-0796`, :cve:`2023-0797`, :cve:`2023-0798`, :cve:`2023-0799`, :cve:`2023-0800`, :cve:`2023-0801`, :cve:`2023-0802`, :cve:`2023-0803` and :cve:`2023-0804` -- vim: Fix :cve:`2023-1127`, :cve:`2023-1170`, :cve:`2023-1175`, :cve:`2023-1264` and :cve:`2023-1355` -- xdg-utils: Fix :cve:`2022-4055` -- xserver-xorg: Fix for :cve:`2023-1393` +- cve-extra-exclusions/linux-yocto: Ignore :cve_nist:`2020-27784`, :cve_nist:`2021-3669`, :cve_nist:`2021-3759`, :cve_nist:`2021-4218`, :cve_nist:`2022-0480`, :cve_nist:`2022-1184`, :cve_nist:`2022-1462`, :cve_nist:`2022-2308`, :cve_nist:`2022-2327`, :cve_nist:`2022-26365`, :cve_nist:`2022-2663`, :cve_nist:`2022-2785`, :cve_nist:`2022-3176`, :cve_nist:`2022-33740`, :cve_nist:`2022-33741`, :cve_nist:`2022-33742`, :cve_nist:`2022-3526`, :cve_nist:`2022-3563`, :cve_nist:`2022-3621`, :cve_nist:`2022-3623`, :cve_nist:`2022-3624`, :cve_nist:`2022-3625`, :cve_nist:`2022-3629`, :cve_nist:`2022-3630`, :cve_nist:`2022-3633`, :cve_nist:`2022-3635`, :cve_nist:`2022-3636`, :cve_nist:`2022-3637`, :cve_nist:`2022-3646` and :cve_nist:`2022-3649` +- cve-extra-exclusions/linux-yocto 5.15: Ignore :cve_nist:`2022-3435`, :cve_nist:`2022-3534`, :cve_nist:`2022-3564`, :cve_nist:`2022-3564`, :cve_nist:`2022-3619`, :cve_nist:`2022-3640`, :cve_nist:`2022-42895`, :cve_nist:`2022-42896`, :cve_nist:`2022-4382`, :cve_nist:`2023-0266` and :cve_nist:`2023-0394` +- epiphany: Fix :cve_nist:`2023-26081` +- git: Ignore :cve_nist:`2023-22743` +- go: Fix :cve_nist:`2022-41722`, :cve_nist:`2022-41723`, :cve_nist:`2022-41724`, :cve_nist:`2022-41725` and :cve_nist:`2023-24532` +- harfbuzz: Fix :cve_nist:`2023-25193` +- libmicrohttpd: Fix :cve_nist:`2023-27371` +- libxml2: Fix :cve_nist:`2022-40303` and :cve_nist:`2022-40304` +- openssl: Fix :cve_nist:`2023-0464`, :cve_nist:`2023-0465` and :cve_nist:`2023-0466` +- python3-setuptools: Fix :cve_nist:`2022-40897` +- qemu: Fix :cve_nist:`2022-4144` +- screen: Fix :cve_nist:`2023-24626` +- shadow: Ignore :cve_nist:`2016-15024` +- tiff: Fix :cve_nist:`2022-48281`, :cve_nist:`2023-0795`, :cve_nist:`2023-0796`, :cve_nist:`2023-0797`, :cve_nist:`2023-0798`, :cve_nist:`2023-0799`, :cve_nist:`2023-0800`, :cve_nist:`2023-0801`, :cve_nist:`2023-0802`, :cve_nist:`2023-0803` and :cve_nist:`2023-0804` +- vim: Fix :cve_nist:`2023-1127`, :cve_nist:`2023-1170`, :cve_nist:`2023-1175`, :cve_nist:`2023-1264` and :cve_nist:`2023-1355` +- xdg-utils: Fix :cve_nist:`2022-4055` +- xserver-xorg: Fix for :cve_nist:`2023-1393` Fixes in Yocto-4.1.4 diff --git a/poky/documentation/migration-guides/release-notes-4.1.rst b/poky/documentation/migration-guides/release-notes-4.1.rst index a0d5196128..3ad3611b80 100644 --- a/poky/documentation/migration-guides/release-notes-4.1.rst +++ b/poky/documentation/migration-guides/release-notes-4.1.rst @@ -225,36 +225,36 @@ The following corrections have been made to the :term:`LICENSE` values set by re Security Fixes in 4.1 ~~~~~~~~~~~~~~~~~~~~~ -- bind: :cve:`2022-1183`, :cve:`2022-2795`, :cve:`2022-2881`, :cve:`2022-2906`, :cve:`2022-3080`, :cve:`2022-38178` -- binutils: :cve:`2019-1010204`, :cve:`2022-38126`, :cve:`2022-38127`, :cve:`2022-38128`, :cve:`2022-38533` -- busybox: :cve:`2022-30065` -- connman: :cve:`2022-32292`, :cve:`2022-32293` -- cups: :cve:`2022-26691` -- e2fsprogs: :cve:`2022-1304` -- expat: :cve:`2022-40674` -- freetype: :cve:`2022-27404` -- glibc: :cve:`2022-39046` -- gnupg: :cve:`2022-34903` -- grub2: :cve:`2021-3695`, :cve:`2021-3696`, :cve:`2021-3697`, :cve:`2022-28733`, :cve:`2022-28734`, :cve:`2022-28735` -- inetutils: :cve:`2022-39028` -- libtirpc: :cve:`2021-46828` -- libxml2: :cve:`2016-3709` (ignored) -- libxslt: :cve:`2022-29824` (not applicable) -- linux-yocto/5.15: :cve:`2022-28796` -- logrotate: :cve:`2022-1348` -- lua: :cve:`2022-33099` -- nasm: :cve:`2020-18974` (ignored) -- ncurses: :cve:`2022-29458` -- openssl: :cve:`2022-1292`, :cve:`2022-1343`, :cve:`2022-1434`, :cve:`2022-1473`, :cve:`2022-2068`, :cve:`2022-2274`, :cve:`2022-2097` -- python3: :cve:`2015-20107` (ignored) -- qemu: :cve:`2021-20255` (ignored), :cve:`2019-12067` (ignored), :cve:`2021-3507`, :cve:`2022-0216`, :cve:`2022-2962`, :cve:`2022-35414` -- rpm: :cve:`2021-35937`, :cve:`2021-35938`, :cve:`2021-35939` -- rsync: :cve:`2022-29154` -- subversion: :cve:`2021-28544`, :cve:`2022-24070` -- tiff: :cve:`2022-1210` (not applicable), :cve:`2022-1622`, :cve:`2022-1623` (invalid), :cve:`2022-2056`, :cve:`2022-2057`, :cve:`2022-2058`, :cve:`2022-2953`, :cve:`2022-34526` -- unzip: :cve:`2022-0529`, :cve:`2022-0530` -- vim: :cve:`2022-1381`, :cve:`2022-1420`, :cve:`2022-1621`, :cve:`2022-1629`, :cve:`2022-1674`, :cve:`2022-1733`, :cve:`2022-1735`, :cve:`2022-1769`, :cve:`2022-1771`, :cve:`2022-1785`, :cve:`2022-1796`, :cve:`2022-1927`, :cve:`2022-1942`, :cve:`2022-2257`, :cve:`2022-2264`, :cve:`2022-2284`, :cve:`2022-2285`, :cve:`2022-2286`, :cve:`2022-2287`, :cve:`2022-2816`, :cve:`2022-2817`, :cve:`2022-2819`, :cve:`2022-2845`, :cve:`2022-2849`, :cve:`2022-2862`, :cve:`2022-2874`, :cve:`2022-2889`, :cve:`2022-2980`, :cve:`2022-2946`, :cve:`2022-2982`, :cve:`2022-3099`, :cve:`2022-3134`, :cve:`2022-3234`, :cve:`2022-3278` -- zlib: :cve:`2022-37434` +- bind: :cve_nist:`2022-1183`, :cve_nist:`2022-2795`, :cve_nist:`2022-2881`, :cve_nist:`2022-2906`, :cve_nist:`2022-3080`, :cve_nist:`2022-38178` +- binutils: :cve_nist:`2019-1010204`, :cve_nist:`2022-38126`, :cve_nist:`2022-38127`, :cve_nist:`2022-38128`, :cve_nist:`2022-38533` +- busybox: :cve_nist:`2022-30065` +- connman: :cve_nist:`2022-32292`, :cve_nist:`2022-32293` +- cups: :cve_nist:`2022-26691` +- e2fsprogs: :cve_nist:`2022-1304` +- expat: :cve_nist:`2022-40674` +- freetype: :cve_nist:`2022-27404` +- glibc: :cve_nist:`2022-39046` +- gnupg: :cve_nist:`2022-34903` +- grub2: :cve_nist:`2021-3695`, :cve_nist:`2021-3696`, :cve_nist:`2021-3697`, :cve_nist:`2022-28733`, :cve_nist:`2022-28734`, :cve_nist:`2022-28735` +- inetutils: :cve_nist:`2022-39028` +- libtirpc: :cve_nist:`2021-46828` +- libxml2: :cve_nist:`2016-3709` (ignored) +- libxslt: :cve_nist:`2022-29824` (not applicable) +- linux-yocto/5.15: :cve_nist:`2022-28796` +- logrotate: :cve_nist:`2022-1348` +- lua: :cve_nist:`2022-33099` +- nasm: :cve_nist:`2020-18974` (ignored) +- ncurses: :cve_nist:`2022-29458` +- openssl: :cve_nist:`2022-1292`, :cve_nist:`2022-1343`, :cve_nist:`2022-1434`, :cve_nist:`2022-1473`, :cve_nist:`2022-2068`, :cve_nist:`2022-2274`, :cve_nist:`2022-2097` +- python3: :cve_nist:`2015-20107` (ignored) +- qemu: :cve_nist:`2021-20255` (ignored), :cve_nist:`2019-12067` (ignored), :cve_nist:`2021-3507`, :cve_nist:`2022-0216`, :cve_nist:`2022-2962`, :cve_nist:`2022-35414` +- rpm: :cve_nist:`2021-35937`, :cve_nist:`2021-35938`, :cve_nist:`2021-35939` +- rsync: :cve_nist:`2022-29154` +- subversion: :cve_nist:`2021-28544`, :cve_nist:`2022-24070` +- tiff: :cve_nist:`2022-1210` (not applicable), :cve_nist:`2022-1622`, :cve_nist:`2022-1623` (invalid), :cve_nist:`2022-2056`, :cve_nist:`2022-2057`, :cve_nist:`2022-2058`, :cve_nist:`2022-2953`, :cve_nist:`2022-34526` +- unzip: :cve_nist:`2022-0529`, :cve_nist:`2022-0530` +- vim: :cve_nist:`2022-1381`, :cve_nist:`2022-1420`, :cve_nist:`2022-1621`, :cve_nist:`2022-1629`, :cve_nist:`2022-1674`, :cve_nist:`2022-1733`, :cve_nist:`2022-1735`, :cve_nist:`2022-1769`, :cve_nist:`2022-1771`, :cve_nist:`2022-1785`, :cve_nist:`2022-1796`, :cve_nist:`2022-1927`, :cve_nist:`2022-1942`, :cve_nist:`2022-2257`, :cve_nist:`2022-2264`, :cve_nist:`2022-2284`, :cve_nist:`2022-2285`, :cve_nist:`2022-2286`, :cve_nist:`2022-2287`, :cve_nist:`2022-2816`, :cve_nist:`2022-2817`, :cve_nist:`2022-2819`, :cve_nist:`2022-2845`, :cve_nist:`2022-2849`, :cve_nist:`2022-2862`, :cve_nist:`2022-2874`, :cve_nist:`2022-2889`, :cve_nist:`2022-2980`, :cve_nist:`2022-2946`, :cve_nist:`2022-2982`, :cve_nist:`2022-3099`, :cve_nist:`2022-3134`, :cve_nist:`2022-3234`, :cve_nist:`2022-3278` +- zlib: :cve_nist:`2022-37434` diff --git a/poky/documentation/migration-guides/release-notes-4.2.1.rst b/poky/documentation/migration-guides/release-notes-4.2.1.rst index 948c35fd67..0b2ef060fc 100644 --- a/poky/documentation/migration-guides/release-notes-4.2.1.rst +++ b/poky/documentation/migration-guides/release-notes-4.2.1.rst @@ -6,13 +6,13 @@ Release notes for Yocto-4.2.1 (Mickledore) Security Fixes in Yocto-4.2.1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- connman: Fix :cve:`2023-28488` -- linux-yocto: Ignore :cve:`2023-1652` and :cve:`2023-1829` -- ghostscript: Fix :cve:`2023-28879` -- qemu: Ignore :cve:`2023-0664` -- ruby: Fix :cve:`2022-28738` and :cve:`2022-28739` -- tiff: Fix :cve:`2022-4645` -- xwayland: Fix :cve:`2023-1393` +- connman: Fix :cve_nist:`2023-28488` +- linux-yocto: Ignore :cve_nist:`2023-1652` and :cve_nist:`2023-1829` +- ghostscript: Fix :cve_nist:`2023-28879` +- qemu: Ignore :cve_nist:`2023-0664` +- ruby: Fix :cve_nist:`2022-28738` and :cve_nist:`2022-28739` +- tiff: Fix :cve_nist:`2022-4645` +- xwayland: Fix :cve_nist:`2023-1393` Fixes in Yocto-4.2.1 diff --git a/poky/documentation/migration-guides/release-notes-4.2.2.rst b/poky/documentation/migration-guides/release-notes-4.2.2.rst index 74f2d0e82a..0795c8e938 100644 --- a/poky/documentation/migration-guides/release-notes-4.2.2.rst +++ b/poky/documentation/migration-guides/release-notes-4.2.2.rst @@ -6,21 +6,21 @@ Release notes for Yocto-4.2.2 (Mickledore) Security Fixes in Yocto-4.2.2 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- binutils: Fix :cve:`2023-1972` -- cups: Fix :cve:`2023-32324` -- curl: Fix :cve:`2023-28319`, :cve:`2023-28320`, :cve:`2023-28321` and :cve:`2023-28322` -- dbus: Fix :cve:`2023-34969` -- git: Fix :cve:`2023-25652` and :cve:`2023-29007` -- git: Ignore :cve:`2023-25815` -- libwebp: Fix :cve:`2023-1999` -- libxml2: Fix :cve:`2023-28484` and :cve:`2023-29469` -- libxpm: Fix :cve:`2022-44617` -- ninja: Ignore :cve:`2021-4336` -- openssl: Fix :cve:`2023-0464`, :cve:`2023-0465`, :cve:`2023-0466`, :cve:`2023-1255` and :cve:`2023-2650` -- perl: Fix :cve:`2023-31484` and :cve:`2023-31486` -- sysstat: Fix :cve:`2023-33204` -- tiff: Fix :cve_mitre:`2023-25434`, :cve:`2023-26965` and :cve:`2023-2731` -- vim: Fix :cve:`2023-2426` +- binutils: Fix :cve_nist:`2023-1972` +- cups: Fix :cve_nist:`2023-32324` +- curl: Fix :cve_nist:`2023-28319`, :cve_nist:`2023-28320`, :cve_nist:`2023-28321` and :cve_nist:`2023-28322` +- dbus: Fix :cve_nist:`2023-34969` +- git: Fix :cve_nist:`2023-25652` and :cve_nist:`2023-29007` +- git: Ignore :cve_nist:`2023-25815` +- libwebp: Fix :cve_nist:`2023-1999` +- libxml2: Fix :cve_nist:`2023-28484` and :cve_nist:`2023-29469` +- libxpm: Fix :cve_nist:`2022-44617` +- ninja: Ignore :cve_nist:`2021-4336` +- openssl: Fix :cve_nist:`2023-0464`, :cve_nist:`2023-0465`, :cve_nist:`2023-0466`, :cve_nist:`2023-1255` and :cve_nist:`2023-2650` +- perl: Fix :cve_nist:`2023-31484` and :cve_nist:`2023-31486` +- sysstat: Fix :cve_nist:`2023-33204` +- tiff: Fix :cve_mitre:`2023-25434`, :cve_nist:`2023-26965` and :cve_nist:`2023-2731` +- vim: Fix :cve_nist:`2023-2426` Fixes in Yocto-4.2.2 diff --git a/poky/documentation/migration-guides/release-notes-4.2.3.rst b/poky/documentation/migration-guides/release-notes-4.2.3.rst index 3b568a1c29..86ce5b7025 100644 --- a/poky/documentation/migration-guides/release-notes-4.2.3.rst +++ b/poky/documentation/migration-guides/release-notes-4.2.3.rst @@ -6,24 +6,24 @@ Release notes for Yocto-4.2.3 (Mickledore) Security Fixes in Yocto-4.2.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bind: Fix :cve:`2023-2828` and :cve:`2023-2911` -- cups: Fix :cve:`2023-34241` -- dmidecode: Fix :cve:`2023-30630` -- erofs-utils: Fix :cve:`2023-33551` and :cve:`2023-33552` -- ghostscript: Fix :cve:`2023-36664` +- bind: Fix :cve_nist:`2023-2828` and :cve_nist:`2023-2911` +- cups: Fix :cve_nist:`2023-34241` +- dmidecode: Fix :cve_nist:`2023-30630` +- erofs-utils: Fix :cve_nist:`2023-33551` and :cve_nist:`2023-33552` +- ghostscript: Fix :cve_nist:`2023-36664` - go: Fix :cve_mitre:`2023-24531` -- libarchive: ignore :cve:`2023-30571` -- libjpeg-turbo: Fix :cve:`2023-2804` -- libx11: Fix :cve:`2023-3138` -- ncurses: Fix :cve:`2023-29491` -- openssh: Fix :cve:`2023-38408` -- python3-certifi: Fix :cve:`2023-37920` -- python3-requests: Fix :cve:`2023-32681` -- python3: Ignore :cve:`2023-36632` -- qemu: fix :cve:`2023-0330`, :cve_mitre:`2023-2861`, :cve_mitre:`2023-3255` and :cve_mitre:`2023-3301` -- ruby: Fix :cve:`2023-36617` -- vim: Fix :cve:`2023-2609` and :cve:`2023-2610` -- webkitgtk: Fix :cve:`2023-27932` and :cve:`2023-27954` +- libarchive: ignore :cve_nist:`2023-30571` +- libjpeg-turbo: Fix :cve_nist:`2023-2804` +- libx11: Fix :cve_nist:`2023-3138` +- ncurses: Fix :cve_nist:`2023-29491` +- openssh: Fix :cve_nist:`2023-38408` +- python3-certifi: Fix :cve_nist:`2023-37920` +- python3-requests: Fix :cve_nist:`2023-32681` +- python3: Ignore :cve_nist:`2023-36632` +- qemu: fix :cve_nist:`2023-0330`, :cve_mitre:`2023-2861`, :cve_mitre:`2023-3255` and :cve_mitre:`2023-3301` +- ruby: Fix :cve_nist:`2023-36617` +- vim: Fix :cve_nist:`2023-2609` and :cve_nist:`2023-2610` +- webkitgtk: Fix :cve_nist:`2023-27932` and :cve_nist:`2023-27954` Fixes in Yocto-4.2.3 diff --git a/poky/documentation/migration-guides/release-notes-4.2.4.rst b/poky/documentation/migration-guides/release-notes-4.2.4.rst index 3c20140e29..60f878c3b0 100644 --- a/poky/documentation/migration-guides/release-notes-4.2.4.rst +++ b/poky/documentation/migration-guides/release-notes-4.2.4.rst @@ -6,44 +6,44 @@ Release notes for Yocto-4.2.4 (Mickledore) Security Fixes in Yocto-4.2.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bind: Fix :cve:`2023-3341` and :cve:`2023-4236` -- binutils: Fix :cve:`2023-39128` -- cups: fix :cve:`2023-4504` -- curl: Fix :cve:`2023-28320`, :cve:`2023-32001`, :cve:`2023-38039`, :cve:`2023-38545` and :cve:`2023-38546` -- dmidecode: fix for :cve:`2023-30630` -- dropbear: fix :cve:`2023-36328` -- ffmpeg: Ignore :cve:`2023-39018` -- gcc: Fix :cve:`2023-4039` -- gdb: Fix :cve:`2023-39128` -- ghostscript: Fix :cve:`2023-38559` and :cve:`2023-43115` -- glibc: Fix :cve:`2023-4527` and :cve:`2023-4806` -- go: Fix :cve:`2023-29409` and :cve:`2023-39533` -- grub: Fix :cve:`2023-4692` and :cve:`2023-4693` +- bind: Fix :cve_nist:`2023-3341` and :cve_nist:`2023-4236` +- binutils: Fix :cve_nist:`2023-39128` +- cups: fix :cve_nist:`2023-4504` +- curl: Fix :cve_nist:`2023-28320`, :cve_nist:`2023-32001`, :cve_nist:`2023-38039`, :cve_nist:`2023-38545` and :cve_nist:`2023-38546` +- dmidecode: fix for :cve_nist:`2023-30630` +- dropbear: fix :cve_nist:`2023-36328` +- ffmpeg: Ignore :cve_nist:`2023-39018` +- gcc: Fix :cve_nist:`2023-4039` +- gdb: Fix :cve_nist:`2023-39128` +- ghostscript: Fix :cve_nist:`2023-38559` and :cve_nist:`2023-43115` +- glibc: Fix :cve_nist:`2023-4527` and :cve_nist:`2023-4806` +- go: Fix :cve_nist:`2023-29409` and :cve_nist:`2023-39533` +- grub: Fix :cve_nist:`2023-4692` and :cve_nist:`2023-4693` - gstreamer: Fix :cve_mitre:`2023-40474`, :cve_mitre:`2023-40475` and :cve_mitre:`2023-40476` -- inetutils: fix :cve:`2023-40303` -- librsvg: Fix :cve:`2023-38633` -- libssh2: Fix :cve:`2020-22218` -- libwebp: Fix :cve:`2023-4863` and :cve:`2023-5129` -- libx11: Fix :cve:`2023-43785`, :cve:`2023-43786` and :cve:`2023-43787` -- libxpm: Fix :cve:`2023-43788` and :cve:`2023-43789` -- linux-yocto/6.1: Ignore :cve:`2003-1604`, :cve:`2004-0230`, :cve:`2006-3635`, :cve:`2006-5331`, :cve:`2006-6128`, :cve:`2007-4774`, :cve:`2007-6761`, :cve:`2007-6762`, :cve:`2008-7316`, :cve:`2009-2692`, :cve:`2010-0008`, :cve:`2010-3432`, :cve:`2010-4648`, :cve:`2010-5313`, :cve:`2010-5328`, :cve:`2010-5329`, :cve:`2010-5331`, :cve:`2010-5332`, :cve:`2011-4098`, :cve:`2011-4131`, :cve:`2011-4915`, :cve:`2011-5321`, :cve:`2011-5327`, :cve:`2012-0957`, :cve:`2012-2119`, :cve:`2012-2136`, :cve:`2012-2137`, :cve:`2012-2313`, :cve:`2012-2319`, :cve:`2012-2372`, :cve:`2012-2375`, :cve:`2012-2390`, :cve:`2012-2669`, :cve:`2012-2744`, :cve:`2012-2745`, :cve:`2012-3364`, :cve:`2012-3375`, :cve:`2012-3400`, :cve:`2012-3412`, :cve:`2012-3430`, :cve:`2012-3510`, :cve:`2012-3511`, :cve:`2012-3520`, :cve:`2012-3552`, :cve:`2012-4398`, :cve:`2012-4444`, :cve:`2012-4461`, :cve:`2012-4467`, :cve:`2012-4508`, :cve:`2012-4530`, :cve:`2012-4565`, :cve:`2012-5374`, :cve:`2012-5375`, :cve:`2012-5517`, :cve:`2012-6536`, :cve:`2012-6537`, :cve:`2012-6538`, :cve:`2012-6539`, :cve:`2012-6540`, :cve:`2012-6541`, :cve:`2012-6542`, :cve:`2012-6543`, :cve:`2012-6544`, :cve:`2012-6545`, :cve:`2012-6546`, :cve:`2012-6547`, :cve:`2012-6548`, :cve:`2012-6549`, :cve:`2012-6638`, :cve:`2012-6647`, :cve:`2012-6657`, :cve:`2012-6689`, :cve:`2012-6701`, :cve:`2012-6703`, :cve:`2012-6704`, :cve:`2012-6712`, :cve:`2013-0160`, :cve:`2013-0190`, :cve:`2013-0216`, :cve:`2013-0217`, :cve:`2013-0228`, :cve:`2013-0231`, :cve:`2013-0268`, :cve:`2013-0290`, :cve:`2013-0309`, :cve:`2013-0310`, :cve:`2013-0311`, :cve:`2013-0313`, :cve:`2013-0343`, :cve:`2013-0349`, :cve:`2013-0871`, :cve:`2013-0913`, :cve:`2013-0914`, :cve:`2013-1059`, :cve:`2013-1763`, :cve:`2013-1767`, :cve:`2013-1772`, :cve:`2013-1773`, :cve:`2013-1774`, :cve:`2013-1792`, :cve:`2013-1796`, :cve:`2013-1797`, :cve:`2013-1798`, :cve:`2013-1819`, :cve:`2013-1826`, :cve:`2013-1827`, :cve:`2013-1828`, :cve:`2013-1848`, :cve:`2013-1858`, :cve:`2013-1860`, :cve:`2013-1928`, :cve:`2013-1929`, :cve:`2013-1943`, :cve:`2013-1956`, :cve:`2013-1957`, :cve:`2013-1958`, :cve:`2013-1959`, :cve:`2013-1979`, :cve:`2013-2015`, :cve:`2013-2017`, :cve:`2013-2058`, :cve:`2013-2094`, :cve:`2013-2128`, :cve:`2013-2140`, :cve:`2013-2141`, :cve:`2013-2146`, :cve:`2013-2147`, :cve:`2013-2148`, :cve:`2013-2164`, :cve:`2013-2206`, :cve:`2013-2232`, :cve:`2013-2234`, :cve:`2013-2237`, :cve:`2013-2546`, :cve:`2013-2547`, :cve:`2013-2548`, :cve:`2013-2596`, :cve:`2013-2634`, :cve:`2013-2635`, :cve:`2013-2636`, :cve:`2013-2850`, :cve:`2013-2851`, :cve:`2013-2852`, :cve:`2013-2888`, :cve:`2013-2889`, :cve:`2013-2890`, :cve:`2013-2891`, :cve:`2013-2892`, :cve:`2013-2893`, :cve:`2013-2894`, :cve:`2013-2895`, :cve:`2013-2896`, :cve:`2013-2897`, :cve:`2013-2898`, :cve:`2013-2899`, :cve:`2013-2929`, :cve:`2013-2930`, :cve:`2013-3076`, :cve:`2013-3222`, :cve:`2013-3223`, :cve:`2013-3224`, :cve:`2013-3225`, :cve:`2013-3226`, :cve:`2013-3227`, :cve:`2013-3228`, :cve:`2013-3229`, :cve:`2013-3230`, :cve:`2013-3231`, :cve:`2013-3232`, :cve:`2013-3233`, :cve:`2013-3234`, :cve:`2013-3235`, :cve:`2013-3236`, :cve:`2013-3237`, :cve:`2013-3301`, :cve:`2013-3302`, :cve:`2013-4125`, :cve:`2013-4127`, :cve:`2013-4129`, :cve:`2013-4162`, :cve:`2013-4163`, :cve:`2013-4205`, :cve:`2013-4220`, :cve:`2013-4247`, :cve:`2013-4254`, :cve:`2013-4270`, :cve:`2013-4299`, :cve:`2013-4300`, :cve:`2013-4312`, :cve:`2013-4343`, :cve:`2013-4345`, :cve:`2013-4348`, :cve:`2013-4350`, :cve:`2013-4387`, :cve:`2013-4470`, :cve:`2013-4483`, :cve:`2013-4511`, :cve:`2013-4512`, :cve:`2013-4513`, :cve:`2013-4514`, :cve:`2013-4515`, :cve:`2013-4516`, :cve:`2013-4563`, :cve:`2013-4579`, :cve:`2013-4587`, :cve:`2013-4588`, :cve:`2013-4591`, :cve:`2013-4592`, :cve:`2013-5634`, :cve:`2013-6282`, :cve:`2013-6367`, :cve:`2013-6368`, :cve:`2013-6376`, :cve:`2013-6378`, :cve:`2013-6380`, :cve:`2013-6381`, :cve:`2013-6382`, :cve:`2013-6383`, :cve:`2013-6431`, :cve:`2013-6432`, :cve:`2013-6885`, :cve:`2013-7026`, :cve:`2013-7027`, :cve:`2013-7263`, :cve:`2013-7264`, :cve:`2013-7265`, :cve:`2013-7266`, :cve:`2013-7267`, :cve:`2013-7268`, :cve:`2013-7269`, :cve:`2013-7270`, :cve:`2013-7271`, :cve:`2013-7281`, :cve:`2013-7339`, :cve:`2013-7348`, :cve:`2013-7421`, :cve:`2013-7446`, :cve:`2013-7470`, :cve:`2014-0038`, :cve:`2014-0049`, :cve:`2014-0055`, :cve:`2014-0069`, :cve:`2014-0077`, :cve:`2014-0100`, :cve:`2014-0101`, :cve:`2014-0102`, :cve:`2014-0131`, :cve:`2014-0155`, :cve:`2014-0181`, :cve:`2014-0196`, :cve:`2014-0203`, :cve:`2014-0205`, :cve:`2014-0206`, :cve:`2014-1438`, :cve:`2014-1444`, :cve:`2014-1445`, :cve:`2014-1446`, :cve:`2014-1690`, :cve:`2014-1737`, :cve:`2014-1738`, :cve:`2014-1739`, :cve:`2014-1874`, :cve:`2014-2038`, :cve:`2014-2039`, :cve:`2014-2309`, :cve:`2014-2523`, :cve:`2014-2568`, :cve:`2014-2580`, :cve:`2014-2672`, :cve:`2014-2673`, :cve:`2014-2678`, :cve:`2014-2706`, :cve:`2014-2739`, :cve:`2014-2851`, :cve:`2014-2889`, :cve:`2014-3122`, :cve:`2014-3144`, :cve:`2014-3145`, :cve:`2014-3153`, :cve:`2014-3180`, :cve:`2014-3181`, :cve:`2014-3182`, :cve:`2014-3183`, :cve:`2014-3184`, :cve:`2014-3185`, :cve:`2014-3186`, :cve:`2014-3534`, :cve:`2014-3535`, :cve:`2014-3601`, :cve:`2014-3610`, :cve:`2014-3611`, :cve:`2014-3631`, :cve:`2014-3645`, :cve:`2014-3646`, :cve:`2014-3647`, :cve:`2014-3673`, :cve:`2014-3687`, :cve:`2014-3688`, :cve:`2014-3690`, :cve:`2014-3917`, :cve:`2014-3940`, :cve:`2014-4014`, :cve:`2014-4027`, :cve:`2014-4157`, :cve:`2014-4171`, :cve:`2014-4508`, :cve:`2014-4608`, :cve:`2014-4611`, :cve:`2014-4652`, :cve:`2014-4653`, :cve:`2014-4654`, :cve:`2014-4655`, :cve:`2014-4656`, :cve:`2014-4667`, :cve:`2014-4699`, :cve:`2014-4943`, :cve:`2014-5045`, :cve:`2014-5077`, :cve:`2014-5206`, :cve:`2014-5207`, :cve:`2014-5471`, :cve:`2014-5472`, :cve:`2014-6410`, :cve:`2014-6416`, :cve:`2014-6417`, :cve:`2014-6418`, :cve:`2014-7145`, :cve:`2014-7283`, :cve:`2014-7284`, :cve:`2014-7822`, :cve:`2014-7825`, :cve:`2014-7826`, :cve:`2014-7841`, :cve:`2014-7842`, :cve:`2014-7843`, :cve:`2014-7970`, :cve:`2014-7975`, :cve:`2014-8086`, :cve:`2014-8133`, :cve:`2014-8134`, :cve:`2014-8159`, :cve:`2014-8160`, :cve:`2014-8171`, :cve:`2014-8172`, :cve:`2014-8173`, :cve:`2014-8369`, :cve:`2014-8480`, :cve:`2014-8481`, :cve:`2014-8559`, :cve:`2014-8709`, :cve:`2014-8884`, :cve:`2014-8989`, :cve:`2014-9090`, :cve:`2014-9322`, :cve:`2014-9419`, :cve:`2014-9420`, :cve:`2014-9428`, :cve:`2014-9529`, :cve:`2014-9584`, :cve:`2014-9585`, :cve:`2014-9644`, :cve:`2014-9683`, :cve:`2014-9710`, :cve:`2014-9715`, :cve:`2014-9717`, :cve:`2014-9728`, :cve:`2014-9729`, :cve:`2014-9730`, :cve:`2014-9731`, :cve:`2014-9803`, :cve:`2014-9870`, :cve:`2014-9888`, :cve:`2014-9895`, :cve:`2014-9903`, :cve:`2014-9904`, :cve:`2014-9914`, :cve:`2014-9922`, :cve:`2014-9940`, :cve:`2015-0239`, :cve:`2015-0274`, :cve:`2015-0275`, :cve:`2015-1333`, :cve:`2015-1339`, :cve:`2015-1350`, :cve:`2015-1420`, :cve:`2015-1421`, :cve:`2015-1465`, :cve:`2015-1573`, :cve:`2015-1593`, :cve:`2015-1805`, :cve:`2015-2041`, :cve:`2015-2042`, :cve:`2015-2150`, :cve:`2015-2666`, :cve:`2015-2672`, :cve:`2015-2686`, :cve:`2015-2830`, :cve:`2015-2922`, :cve:`2015-2925`, :cve:`2015-3212`, :cve:`2015-3214`, :cve:`2015-3288`, :cve:`2015-3290`, :cve:`2015-3291`, :cve:`2015-3331`, :cve:`2015-3339`, :cve:`2015-3636`, :cve:`2015-4001`, :cve:`2015-4002`, :cve:`2015-4003`, :cve:`2015-4004`, :cve:`2015-4036`, :cve:`2015-4167`, :cve:`2015-4170`, :cve:`2015-4176`, :cve:`2015-4177`, :cve:`2015-4178`, :cve:`2015-4692`, :cve:`2015-4700`, :cve:`2015-5156`, :cve:`2015-5157`, :cve:`2015-5257`, :cve:`2015-5283`, :cve:`2015-5307`, :cve:`2015-5327`, :cve:`2015-5364`, :cve:`2015-5366`, :cve:`2015-5697`, :cve:`2015-5706`, :cve:`2015-5707`, :cve:`2015-6252`, :cve:`2015-6526`, :cve:`2015-6937`, :cve:`2015-7509`, :cve:`2015-7513`, :cve:`2015-7515`, :cve:`2015-7550`, :cve:`2015-7566`, :cve:`2015-7613`, :cve:`2015-7799`, :cve:`2015-7833`, :cve:`2015-7872`, :cve:`2015-7884`, :cve:`2015-7885`, :cve:`2015-7990`, :cve:`2015-8104`, :cve:`2015-8215`, :cve:`2015-8324`, :cve:`2015-8374`, :cve:`2015-8539`, :cve:`2015-8543`, :cve:`2015-8550`, :cve:`2015-8551`, :cve:`2015-8552`, :cve:`2015-8553`, :cve:`2015-8569`, :cve:`2015-8575`, :cve:`2015-8660`, :cve:`2015-8709`, :cve:`2015-8746`, :cve:`2015-8767`, :cve:`2015-8785`, :cve:`2015-8787`, :cve:`2015-8812`, :cve:`2015-8816`, :cve:`2015-8830`, :cve:`2015-8839`, :cve:`2015-8844`, :cve:`2015-8845`, :cve:`2015-8950`, :cve:`2015-8952`, :cve:`2015-8953`, :cve:`2015-8955`, :cve:`2015-8956`, :cve:`2015-8961`, :cve:`2015-8962`, :cve:`2015-8963`, :cve:`2015-8964`, :cve:`2015-8966`, :cve:`2015-8967`, :cve:`2015-8970`, :cve:`2015-9004`, :cve:`2015-9016`, :cve:`2015-9289`, :cve:`2016-0617`, :cve:`2016-0723`, :cve:`2016-0728`, :cve:`2016-0758`, :cve:`2016-0821`, :cve:`2016-0823`, :cve:`2016-10044`, :cve:`2016-10088`, :cve:`2016-10147`, :cve:`2016-10150`, :cve:`2016-10153`, :cve:`2016-10154`, :cve:`2016-10200`, :cve:`2016-10208`, :cve:`2016-10229`, :cve:`2016-10318`, :cve:`2016-10723`, :cve:`2016-10741`, :cve:`2016-10764`, :cve:`2016-10905`, :cve:`2016-10906`, :cve:`2016-10907`, :cve:`2016-1237`, :cve:`2016-1575`, :cve:`2016-1576`, :cve:`2016-1583`, :cve:`2016-2053`, :cve:`2016-2069`, :cve:`2016-2070`, :cve:`2016-2085`, :cve:`2016-2117`, :cve:`2016-2143`, :cve:`2016-2184`, :cve:`2016-2185`, :cve:`2016-2186`, :cve:`2016-2187`, :cve:`2016-2188`, :cve:`2016-2383`, :cve:`2016-2384`, :cve:`2016-2543`, :cve:`2016-2544`, :cve:`2016-2545`, :cve:`2016-2546`, :cve:`2016-2547`, :cve:`2016-2548`, :cve:`2016-2549`, :cve:`2016-2550`, :cve:`2016-2782`, :cve:`2016-2847`, :cve:`2016-3044`, :cve:`2016-3070`, :cve:`2016-3134`, :cve:`2016-3135`, :cve:`2016-3136`, :cve:`2016-3137`, :cve:`2016-3138`, :cve:`2016-3139`, :cve:`2016-3140`, :cve:`2016-3156`, :cve:`2016-3157`, :cve:`2016-3672`, :cve:`2016-3689`, :cve:`2016-3713`, :cve:`2016-3841`, :cve:`2016-3857`, :cve:`2016-3951`, :cve:`2016-3955`, :cve:`2016-3961`, :cve:`2016-4440`, :cve:`2016-4470`, :cve:`2016-4482`, :cve:`2016-4485`, :cve:`2016-4486`, :cve:`2016-4557`, :cve:`2016-4558`, :cve:`2016-4565`, :cve:`2016-4568`, :cve:`2016-4569`, :cve:`2016-4578`, :cve:`2016-4580`, :cve:`2016-4581`, :cve:`2016-4794`, :cve:`2016-4805`, :cve:`2016-4913`, :cve:`2016-4951`, :cve:`2016-4997`, :cve:`2016-4998`, :cve:`2016-5195`, :cve:`2016-5243`, :cve:`2016-5244`, :cve:`2016-5400`, :cve:`2016-5412`, :cve:`2016-5696`, :cve:`2016-5728`, :cve:`2016-5828`, :cve:`2016-5829`, :cve:`2016-6130`, :cve:`2016-6136`, :cve:`2016-6156`, :cve:`2016-6162`, :cve:`2016-6187`, :cve:`2016-6197`, :cve:`2016-6198`, :cve:`2016-6213`, :cve:`2016-6327`, :cve:`2016-6480`, :cve:`2016-6516`, :cve:`2016-6786`, :cve:`2016-6787`, :cve:`2016-6828`, :cve:`2016-7039`, :cve:`2016-7042`, :cve:`2016-7097`, :cve:`2016-7117`, :cve:`2016-7425`, :cve:`2016-7910`, :cve:`2016-7911`, :cve:`2016-7912`, :cve:`2016-7913`, :cve:`2016-7914`, :cve:`2016-7915`, :cve:`2016-7916`, :cve:`2016-7917`, :cve:`2016-8399`, :cve:`2016-8405`, :cve:`2016-8630`, :cve:`2016-8632`, :cve:`2016-8633`, :cve:`2016-8636`, :cve:`2016-8645`, :cve:`2016-8646`, :cve:`2016-8650`, :cve:`2016-8655`, :cve:`2016-8658`, :cve:`2016-8666`, :cve:`2016-9083`, :cve:`2016-9084`, :cve:`2016-9120`, :cve:`2016-9178`, :cve:`2016-9191`, :cve:`2016-9313`, :cve:`2016-9555`, :cve:`2016-9576`, :cve:`2016-9588`, :cve:`2016-9604`, :cve:`2016-9685`, :cve:`2016-9754`, :cve:`2016-9755`, :cve:`2016-9756`, :cve:`2016-9777`, :cve:`2016-9793`, :cve:`2016-9794`, :cve:`2016-9806`, :cve:`2016-9919`, :cve:`2017-0605`, :cve:`2017-0627`, :cve:`2017-0750`, :cve:`2017-0786`, :cve:`2017-0861`, :cve:`2017-1000`, :cve:`2017-1000111`, :cve:`2017-1000112`, :cve:`2017-1000251`, :cve:`2017-1000252`, :cve:`2017-1000253`, :cve:`2017-1000255`, :cve:`2017-1000363`, :cve:`2017-1000364`, :cve:`2017-1000365`, :cve:`2017-1000370`, :cve:`2017-1000371`, :cve:`2017-1000379`, :cve:`2017-1000380`, :cve:`2017-1000405`, :cve:`2017-1000407`, :cve:`2017-1000410`, :cve:`2017-10661`, :cve:`2017-10662`, :cve:`2017-10663`, :cve:`2017-10810`, :cve:`2017-10911`, :cve:`2017-11089`, :cve:`2017-11176`, :cve:`2017-11472`, :cve:`2017-11473`, :cve:`2017-11600`, :cve:`2017-12134`, :cve:`2017-12146`, :cve:`2017-12153`, :cve:`2017-12154`, :cve:`2017-12168`, :cve:`2017-12188`, :cve:`2017-12190`, :cve:`2017-12192`, :cve:`2017-12193`, :cve:`2017-12762`, :cve:`2017-13080`, :cve:`2017-13166`, :cve:`2017-13167`, :cve:`2017-13168`, :cve:`2017-13215`, :cve:`2017-13216`, :cve:`2017-13220`, :cve:`2017-13305`, :cve:`2017-13686`, :cve:`2017-13695`, :cve:`2017-13715`, :cve:`2017-14051`, :cve:`2017-14106`, :cve:`2017-14140`, :cve:`2017-14156`, :cve:`2017-14340`, :cve:`2017-14489`, :cve:`2017-14497`, :cve:`2017-14954`, :cve:`2017-14991`, :cve:`2017-15102`, :cve:`2017-15115`, :cve:`2017-15116`, :cve:`2017-15121`, :cve:`2017-15126`, :cve:`2017-15127`, :cve:`2017-15128`, :cve:`2017-15129`, :cve:`2017-15265`, :cve:`2017-15274`, :cve:`2017-15299`, :cve:`2017-15306`, :cve:`2017-15537`, :cve:`2017-15649`, :cve:`2017-15868`, :cve:`2017-15951`, :cve:`2017-16525`, :cve:`2017-16526`, :cve:`2017-16527`, :cve:`2017-16528`, :cve:`2017-16529`, :cve:`2017-16530`, :cve:`2017-16531`, :cve:`2017-16532`, :cve:`2017-16533`, :cve:`2017-16534`, :cve:`2017-16535`, :cve:`2017-16536`, :cve:`2017-16537`, :cve:`2017-16538`, :cve:`2017-16643`, :cve:`2017-16644`, :cve:`2017-16645`, :cve:`2017-16646`, :cve:`2017-16647`, :cve:`2017-16648`, :cve:`2017-16649`, :cve:`2017-16650`, :cve:`2017-16911`, :cve:`2017-16912`, :cve:`2017-16913`, :cve:`2017-16914`, :cve:`2017-16939`, :cve:`2017-16994`, :cve:`2017-16995`, :cve:`2017-16996`, :cve:`2017-17052`, :cve:`2017-17053`, :cve:`2017-17448`, :cve:`2017-17449`, :cve:`2017-17450`, :cve:`2017-17558`, :cve:`2017-17712`, :cve:`2017-17741`, :cve:`2017-17805`, :cve:`2017-17806`, :cve:`2017-17807`, :cve:`2017-17852`, :cve:`2017-17853`, :cve:`2017-17854`, :cve:`2017-17855`, :cve:`2017-17856`, :cve:`2017-17857`, :cve:`2017-17862`, :cve:`2017-17863`, :cve:`2017-17864`, :cve:`2017-17975`, :cve:`2017-18017`, :cve:`2017-18075`, :cve:`2017-18079`, :cve:`2017-18174`, :cve:`2017-18193`, :cve:`2017-18200`, :cve:`2017-18202`, :cve:`2017-18203`, :cve:`2017-18204`, :cve:`2017-18208`, :cve:`2017-18216`, :cve:`2017-18218`, :cve:`2017-18221`, :cve:`2017-18222`, :cve:`2017-18224`, :cve:`2017-18232`, :cve:`2017-18241`, :cve:`2017-18249`, :cve:`2017-18255`, :cve:`2017-18257`, :cve:`2017-18261`, :cve:`2017-18270`, :cve:`2017-18344`, :cve:`2017-18360`, :cve:`2017-18379`, :cve:`2017-18509`, :cve:`2017-18549`, :cve:`2017-18550`, :cve:`2017-18551`, :cve:`2017-18552`, :cve:`2017-18595`, :cve:`2017-2583`, :cve:`2017-2584`, :cve:`2017-2596`, :cve:`2017-2618`, :cve:`2017-2634`, :cve:`2017-2636`, :cve:`2017-2647`, :cve:`2017-2671`, :cve:`2017-5123`, :cve:`2017-5546`, :cve:`2017-5547`, :cve:`2017-5548`, :cve:`2017-5549`, :cve:`2017-5550`, :cve:`2017-5551`, :cve:`2017-5576`, :cve:`2017-5577`, :cve:`2017-5669`, :cve:`2017-5715`, :cve:`2017-5753`, :cve:`2017-5754`, :cve:`2017-5897`, :cve:`2017-5967`, :cve:`2017-5970`, :cve:`2017-5972`, :cve:`2017-5986`, :cve:`2017-6001`, :cve:`2017-6074`, :cve:`2017-6214`, :cve:`2017-6345`, :cve:`2017-6346`, :cve:`2017-6347`, :cve:`2017-6348`, :cve:`2017-6353`, :cve:`2017-6874`, :cve:`2017-6951`, :cve:`2017-7184`, :cve:`2017-7187`, :cve:`2017-7261`, :cve:`2017-7273`, :cve:`2017-7277`, :cve:`2017-7294`, :cve:`2017-7308`, :cve:`2017-7346`, :cve:`2017-7374`, :cve:`2017-7472`, :cve:`2017-7477`, :cve:`2017-7482`, :cve:`2017-7487`, :cve:`2017-7495`, :cve:`2017-7518`, :cve:`2017-7533`, :cve:`2017-7541`, :cve:`2017-7542`, :cve:`2017-7558`, :cve:`2017-7616`, :cve:`2017-7618`, :cve:`2017-7645`, :cve:`2017-7889`, :cve:`2017-7895`, :cve:`2017-7979`, :cve:`2017-8061`, :cve:`2017-8062`, :cve:`2017-8063`, :cve:`2017-8064`, :cve:`2017-8065`, :cve:`2017-8066`, :cve:`2017-8067`, :cve:`2017-8068`, :cve:`2017-8069`, :cve:`2017-8070`, :cve:`2017-8071`, :cve:`2017-8072`, :cve:`2017-8106`, :cve:`2017-8240`, :cve:`2017-8797`, :cve:`2017-8824`, :cve:`2017-8831`, :cve:`2017-8890`, :cve:`2017-8924`, :cve:`2017-8925`, :cve:`2017-9059`, :cve:`2017-9074`, :cve:`2017-9075`, :cve:`2017-9076`, :cve:`2017-9077`, :cve:`2017-9150`, :cve:`2017-9211`, :cve:`2017-9242`, :cve:`2017-9605`, :cve:`2017-9725`, :cve:`2017-9984`, :cve:`2017-9985`, :cve:`2017-9986`, :cve:`2018-1000004`, :cve:`2018-1000026`, :cve:`2018-1000028`, :cve:`2018-1000199`, :cve:`2018-1000200`, :cve:`2018-1000204`, :cve:`2018-10021`, :cve:`2018-10074`, :cve:`2018-10087`, :cve:`2018-10124`, :cve:`2018-10322`, :cve:`2018-10323`, :cve:`2018-1065`, :cve:`2018-1066`, :cve:`2018-10675`, :cve:`2018-1068`, :cve:`2018-10840`, :cve:`2018-10853`, :cve:`2018-1087`, :cve:`2018-10876`, :cve:`2018-10877`, :cve:`2018-10878`, :cve:`2018-10879`, :cve:`2018-10880`, :cve:`2018-10881`, :cve:`2018-10882`, :cve:`2018-10883`, :cve:`2018-10901`, :cve:`2018-10902`, :cve:`2018-1091`, :cve:`2018-1092`, :cve:`2018-1093`, :cve:`2018-10938`, :cve:`2018-1094`, :cve:`2018-10940`, :cve:`2018-1095`, :cve:`2018-1108`, :cve:`2018-1118`, :cve:`2018-1120`, :cve:`2018-11232`, :cve:`2018-1128`, :cve:`2018-1129`, :cve:`2018-1130`, :cve:`2018-11412`, :cve:`2018-11506`, :cve:`2018-11508`, :cve:`2018-12126`, :cve:`2018-12127`, :cve:`2018-12130`, :cve:`2018-12207`, :cve:`2018-12232`, :cve:`2018-12233`, :cve:`2018-12633`, :cve:`2018-12714`, :cve:`2018-12896`, :cve:`2018-12904`, :cve:`2018-13053`, :cve:`2018-13093`, :cve:`2018-13094`, :cve:`2018-13095`, :cve:`2018-13096`, :cve:`2018-13097`, :cve:`2018-13098`, :cve:`2018-13099`, :cve:`2018-13100`, :cve:`2018-13405`, :cve:`2018-13406`, :cve:`2018-14609`, :cve:`2018-14610`, :cve:`2018-14611`, :cve:`2018-14612`, :cve:`2018-14613`, :cve:`2018-14614`, :cve:`2018-14615`, :cve:`2018-14616`, :cve:`2018-14617`, :cve:`2018-14619`, :cve:`2018-14625`, :cve:`2018-14633`, :cve:`2018-14634`, :cve:`2018-14641`, :cve:`2018-14646`, :cve:`2018-14656`, :cve:`2018-14678`, :cve:`2018-14734`, :cve:`2018-15471`, :cve:`2018-15572`, :cve:`2018-15594`, :cve:`2018-16276`, :cve:`2018-16597`, :cve:`2018-16658`, :cve:`2018-16862`, :cve:`2018-16871`, :cve:`2018-16880`, :cve:`2018-16882`, :cve:`2018-16884`, :cve:`2018-17182`, :cve:`2018-17972`, :cve:`2018-18021`, :cve:`2018-18281`, :cve:`2018-18386`, :cve:`2018-18397`, :cve:`2018-18445`, :cve:`2018-18559`, :cve:`2018-18690`, :cve:`2018-18710`, :cve:`2018-18955`, :cve:`2018-19406`, :cve:`2018-19407`, :cve:`2018-19824`, :cve:`2018-19854`, :cve:`2018-19985`, :cve:`2018-20169`, :cve:`2018-20449`, :cve:`2018-20509`, :cve:`2018-20510`, :cve:`2018-20511`, :cve:`2018-20669`, :cve:`2018-20784`, :cve:`2018-20836`, :cve:`2018-20854`, :cve:`2018-20855`, :cve:`2018-20856`, :cve:`2018-20961`, :cve:`2018-20976`, :cve:`2018-21008`, :cve:`2018-25015`, :cve:`2018-25020`, :cve:`2018-3620`, :cve:`2018-3639`, :cve:`2018-3646`, :cve:`2018-3665`, :cve:`2018-3693`, :cve:`2018-5332`, :cve:`2018-5333`, :cve:`2018-5344`, :cve:`2018-5390`, :cve:`2018-5391`, :cve:`2018-5703`, :cve:`2018-5750`, :cve:`2018-5803`, :cve:`2018-5814`, :cve:`2018-5848`, :cve:`2018-5873`, :cve:`2018-5953`, :cve:`2018-5995`, :cve:`2018-6412`, :cve:`2018-6554`, :cve:`2018-6555`, :cve:`2018-6927`, :cve:`2018-7191`, :cve:`2018-7273`, :cve:`2018-7480`, :cve:`2018-7492`, :cve:`2018-7566`, :cve:`2018-7740`, :cve:`2018-7754`, :cve:`2018-7755`, :cve:`2018-7757`, :cve:`2018-7995`, :cve:`2018-8043`, :cve_mitre:`2018-8087`, :cve_mitre:`2018-8781`, :cve_mitre:`2018-8822`, :cve_mitre:`2018-8897`, :cve_mitre:`2018-9363`, :cve_mitre:`2018-9385`, :cve_mitre:`2018-9415`, :cve_mitre:`2018-9422`, :cve_mitre:`2018-9465`, :cve_mitre:`2018-9516`, :cve_mitre:`2018-9517`, :cve_mitre:`2018-9518` and :cve_mitre:`2018-9568` -- linux-yocto/6.1 (Continued): Ignore :cve:`2019-0136`, :cve:`2019-0145`, :cve:`2019-0146`, :cve:`2019-0147`, :cve:`2019-0148`, :cve:`2019-0149`, :cve:`2019-0154`, :cve:`2019-0155`, :cve:`2019-10124`, :cve:`2019-10125`, :cve:`2019-10126`, :cve:`2019-10142`, :cve:`2019-10207`, :cve:`2019-10220`, :cve:`2019-10638`, :cve:`2019-10639`, :cve:`2019-11085`, :cve:`2019-11091`, :cve:`2019-11135`, :cve:`2019-11190`, :cve:`2019-11191`, :cve:`2019-1125`, :cve:`2019-11477`, :cve:`2019-11478`, :cve:`2019-11479`, :cve:`2019-11486`, :cve:`2019-11487`, :cve:`2019-11599`, :cve:`2019-11683`, :cve:`2019-11810`, :cve:`2019-11811`, :cve:`2019-11815`, :cve:`2019-11833`, :cve:`2019-11884`, :cve:`2019-12378`, :cve:`2019-12379`, :cve:`2019-12380`, :cve:`2019-12381`, :cve:`2019-12382`, :cve:`2019-12454`, :cve:`2019-12455`, :cve:`2019-12614`, :cve:`2019-12615`, :cve:`2019-12817`, :cve:`2019-12818`, :cve:`2019-12819`, :cve:`2019-12881`, :cve:`2019-12984`, :cve:`2019-13233`, :cve:`2019-13272`, :cve:`2019-13631`, :cve:`2019-13648`, :cve:`2019-14283`, :cve:`2019-14284`, :cve:`2019-14615`, :cve:`2019-14763`, :cve:`2019-14814`, :cve:`2019-14815`, :cve:`2019-14816`, :cve:`2019-14821`, :cve:`2019-14835`, :cve:`2019-14895`, :cve:`2019-14896`, :cve:`2019-14897`, :cve:`2019-14901`, :cve:`2019-15030`, :cve:`2019-15031`, :cve:`2019-15090`, :cve:`2019-15098`, :cve:`2019-15099`, :cve:`2019-15117`, :cve:`2019-15118`, :cve:`2019-15211`, :cve:`2019-15212`, :cve:`2019-15213`, :cve:`2019-15214`, :cve:`2019-15215`, :cve:`2019-15216`, :cve:`2019-15217`, :cve:`2019-15218`, :cve:`2019-15219`, :cve:`2019-15220`, :cve:`2019-15221`, :cve:`2019-15222`, :cve:`2019-15223`, :cve:`2019-15291`, :cve:`2019-15292`, :cve:`2019-15504`, :cve:`2019-15505`, :cve:`2019-15538`, :cve:`2019-15666`, :cve:`2019-15794`, :cve:`2019-15807`, :cve:`2019-15916`, :cve:`2019-15917`, :cve:`2019-15918`, :cve:`2019-15919`, :cve:`2019-15920`, :cve:`2019-15921`, :cve:`2019-15922`, :cve:`2019-15923`, :cve:`2019-15924`, :cve:`2019-15925`, :cve:`2019-15926`, :cve:`2019-15927`, :cve:`2019-16229`, :cve:`2019-16230`, :cve:`2019-16231`, :cve:`2019-16232`, :cve:`2019-16233`, :cve:`2019-16234`, :cve:`2019-16413`, :cve:`2019-16714`, :cve:`2019-16746`, :cve:`2019-16921`, :cve:`2019-16994`, :cve:`2019-16995`, :cve:`2019-17052`, :cve:`2019-17053`, :cve:`2019-17054`, :cve:`2019-17055`, :cve:`2019-17056`, :cve:`2019-17075`, :cve:`2019-17133`, :cve:`2019-17351`, :cve:`2019-17666`, :cve:`2019-18198`, :cve:`2019-18282`, :cve:`2019-18660`, :cve:`2019-18675`, :cve:`2019-18683`, :cve:`2019-18786`, :cve:`2019-18805`, :cve:`2019-18806`, :cve:`2019-18807`, :cve:`2019-18808`, :cve:`2019-18809`, :cve:`2019-18810`, :cve:`2019-18811`, :cve:`2019-18812`, :cve:`2019-18813`, :cve:`2019-18814`, :cve:`2019-18885`, :cve:`2019-19036`, :cve:`2019-19037`, :cve:`2019-19039`, :cve:`2019-19043`, :cve:`2019-19044`, :cve:`2019-19045`, :cve:`2019-19046`, :cve:`2019-19047`, :cve:`2019-19048`, :cve:`2019-19049`, :cve:`2019-19050`, :cve:`2019-19051`, :cve:`2019-19052`, :cve:`2019-19053`, :cve:`2019-19054`, :cve:`2019-19055`, :cve:`2019-19056`, :cve:`2019-19057`, :cve:`2019-19058`, :cve:`2019-19059`, :cve:`2019-19060`, :cve:`2019-19061`, :cve:`2019-19062`, :cve:`2019-19063`, :cve:`2019-19064`, :cve:`2019-19065`, :cve:`2019-19066`, :cve:`2019-19067`, :cve:`2019-19068`, :cve:`2019-19069`, :cve:`2019-19070`, :cve:`2019-19071`, :cve:`2019-19072`, :cve:`2019-19073`, :cve:`2019-19074`, :cve:`2019-19075`, :cve:`2019-19076`, :cve:`2019-19077`, :cve:`2019-19078`, :cve:`2019-19079`, :cve:`2019-19080`, :cve:`2019-19081`, :cve:`2019-19082`, :cve:`2019-19083`, :cve:`2019-19227`, :cve:`2019-19241`, :cve:`2019-19252`, :cve:`2019-19318`, :cve:`2019-19319`, :cve:`2019-19332`, :cve:`2019-19338`, :cve:`2019-19377`, :cve:`2019-19447`, :cve:`2019-19448`, :cve:`2019-19449`, :cve:`2019-19462`, :cve:`2019-19523`, :cve:`2019-19524`, :cve:`2019-19525`, :cve:`2019-19526`, :cve:`2019-19527`, :cve:`2019-19528`, :cve:`2019-19529`, :cve:`2019-19530`, :cve:`2019-19531`, :cve:`2019-19532`, :cve:`2019-19533`, :cve:`2019-19534`, :cve:`2019-19535`, :cve:`2019-19536`, :cve:`2019-19537`, :cve:`2019-19543`, :cve:`2019-19602`, :cve:`2019-19767`, :cve:`2019-19768`, :cve:`2019-19769`, :cve:`2019-19770`, :cve:`2019-19807`, :cve:`2019-19813`, :cve:`2019-19815`, :cve:`2019-19816`, :cve:`2019-19922`, :cve:`2019-19927`, :cve:`2019-19947`, :cve:`2019-19965`, :cve:`2019-19966`, :cve:`2019-1999`, :cve:`2019-20054`, :cve:`2019-20095`, :cve:`2019-20096`, :cve:`2019-2024`, :cve:`2019-2025`, :cve:`2019-20422`, :cve:`2019-2054`, :cve:`2019-20636`, :cve:`2019-20806`, :cve:`2019-20810`, :cve:`2019-20811`, :cve:`2019-20812`, :cve:`2019-20908`, :cve:`2019-20934`, :cve:`2019-2101`, :cve:`2019-2181`, :cve:`2019-2182`, :cve:`2019-2213`, :cve:`2019-2214`, :cve:`2019-2215`, :cve:`2019-25044`, :cve:`2019-25045`, :cve:`2019-3016`, :cve:`2019-3459`, :cve:`2019-3460`, :cve:`2019-3701`, :cve:`2019-3819`, :cve:`2019-3837`, :cve:`2019-3846`, :cve:`2019-3874`, :cve:`2019-3882`, :cve:`2019-3887`, :cve:`2019-3892`, :cve:`2019-3896`, :cve:`2019-3900`, :cve:`2019-3901`, :cve:`2019-5108`, :cve:`2019-6133`, :cve:`2019-6974`, :cve:`2019-7221`, :cve:`2019-7222`, :cve:`2019-7308`, :cve:`2019-8912`, :cve:`2019-8956`, :cve:`2019-8980`, :cve:`2019-9003`, :cve:`2019-9162`, :cve:`2019-9213`, :cve:`2019-9245`, :cve:`2019-9444`, :cve:`2019-9445`, :cve:`2019-9453`, :cve:`2019-9454`, :cve:`2019-9455`, :cve:`2019-9456`, :cve:`2019-9457`, :cve:`2019-9458`, :cve:`2019-9466`, :cve:`2019-9500`, :cve:`2019-9503`, :cve:`2019-9506`, :cve:`2019-9857`, :cve:`2020-0009`, :cve:`2020-0030`, :cve:`2020-0041`, :cve:`2020-0066`, :cve:`2020-0067`, :cve:`2020-0110`, :cve:`2020-0255`, :cve:`2020-0305`, :cve:`2020-0404`, :cve:`2020-0423`, :cve:`2020-0427`, :cve:`2020-0429`, :cve:`2020-0430`, :cve:`2020-0431`, :cve:`2020-0432`, :cve:`2020-0433`, :cve:`2020-0435`, :cve:`2020-0444`, :cve:`2020-0465`, :cve:`2020-0466`, :cve:`2020-0543`, :cve:`2020-10135`, :cve:`2020-10690`, :cve:`2020-10711`, :cve:`2020-10720`, :cve:`2020-10732`, :cve:`2020-10742`, :cve:`2020-10751`, :cve:`2020-10757`, :cve:`2020-10766`, :cve:`2020-10767`, :cve:`2020-10768`, :cve:`2020-10769`, :cve:`2020-10773`, :cve:`2020-10781`, :cve:`2020-10942`, :cve:`2020-11494`, :cve:`2020-11565`, :cve:`2020-11608`, :cve:`2020-11609`, :cve:`2020-11668`, :cve:`2020-11669`, :cve:`2020-11884`, :cve:`2020-12114`, :cve:`2020-12351`, :cve:`2020-12352`, :cve:`2020-12362`, :cve:`2020-12363`, :cve:`2020-12364`, :cve:`2020-12464`, :cve:`2020-12465`, :cve:`2020-12652`, :cve:`2020-12653`, :cve:`2020-12654`, :cve:`2020-12655`, :cve:`2020-12656`, :cve:`2020-12657`, :cve:`2020-12659`, :cve:`2020-12768`, :cve:`2020-12769`, :cve:`2020-12770`, :cve:`2020-12771`, :cve:`2020-12826`, :cve:`2020-12888`, :cve:`2020-12912`, :cve:`2020-13143`, :cve:`2020-13974`, :cve:`2020-14305`, :cve:`2020-14314`, :cve:`2020-14331`, :cve:`2020-14351`, :cve:`2020-14353`, :cve:`2020-14356`, :cve:`2020-14381`, :cve:`2020-14385`, :cve:`2020-14386`, :cve:`2020-14390`, :cve:`2020-14416`, :cve:`2020-15393`, :cve:`2020-15436`, :cve:`2020-15437`, :cve:`2020-15780`, :cve:`2020-15852`, :cve:`2020-16119`, :cve:`2020-16120`, :cve:`2020-16166`, :cve:`2020-1749`, :cve:`2020-24394`, :cve:`2020-24490`, :cve:`2020-24504`, :cve:`2020-24586`, :cve:`2020-24587`, :cve:`2020-24588`, :cve:`2020-25211`, :cve:`2020-25212`, :cve:`2020-25221`, :cve:`2020-25284`, :cve:`2020-25285`, :cve:`2020-25639`, :cve:`2020-25641`, :cve:`2020-25643`, :cve:`2020-25645`, :cve:`2020-25656`, :cve:`2020-25668`, :cve:`2020-25669`, :cve:`2020-25670`, :cve:`2020-25671`, :cve:`2020-25672`, :cve:`2020-25673`, :cve:`2020-25704`, :cve:`2020-25705`, :cve:`2020-26088`, :cve:`2020-26139`, :cve:`2020-26141`, :cve:`2020-26145`, :cve:`2020-26147`, :cve:`2020-26541`, :cve:`2020-26555`, :cve:`2020-26558`, :cve:`2020-27066`, :cve:`2020-27067`, :cve:`2020-27068`, :cve:`2020-27152`, :cve:`2020-27170`, :cve:`2020-27171`, :cve:`2020-27194`, :cve:`2020-2732`, :cve:`2020-27673`, :cve:`2020-27675`, :cve:`2020-27777`, :cve:`2020-27784`, :cve:`2020-27786`, :cve:`2020-27815`, :cve:`2020-27820`, :cve:`2020-27825`, :cve:`2020-27830`, :cve:`2020-27835`, :cve:`2020-28097`, :cve:`2020-28374`, :cve:`2020-28588`, :cve:`2020-28915`, :cve:`2020-28941`, :cve:`2020-28974`, :cve:`2020-29368`, :cve:`2020-29369`, :cve:`2020-29370`, :cve:`2020-29371`, :cve:`2020-29372`, :cve:`2020-29373`, :cve:`2020-29374`, :cve:`2020-29534`, :cve:`2020-29568`, :cve:`2020-29569`, :cve:`2020-29660`, :cve:`2020-29661`, :cve:`2020-35499`, :cve:`2020-35508`, :cve:`2020-35513`, :cve:`2020-35519`, :cve:`2020-36158`, :cve:`2020-36310`, :cve:`2020-36311`, :cve:`2020-36312`, :cve:`2020-36313`, :cve:`2020-36322`, :cve:`2020-36385`, :cve:`2020-36386`, :cve:`2020-36387`, :cve:`2020-36516`, :cve:`2020-36557`, :cve:`2020-36558`, :cve:`2020-36691`, :cve:`2020-36694`, :cve:`2020-36766`, :cve:`2020-3702`, :cve:`2020-4788`, :cve:`2020-7053`, :cve:`2020-8428`, :cve:`2020-8647`, :cve:`2020-8648`, :cve:`2020-8649`, :cve:`2020-8694`, :cve:`2020-8834`, :cve:`2020-8835`, :cve:`2020-8992`, :cve:`2020-9383`, :cve:`2020-9391`, :cve:`2021-0129`, :cve:`2021-0342`, :cve_mitre:`2021-0447`, :cve_mitre:`2021-0448`, :cve:`2021-0512`, :cve:`2021-0605`, :cve:`2021-0707`, :cve:`2021-0920`, :cve:`2021-0929`, :cve:`2021-0935`, :cve_mitre:`2021-0937`, :cve:`2021-0938`, :cve:`2021-0941`, :cve:`2021-1048`, :cve:`2021-20177`, :cve:`2021-20194`, :cve:`2021-20226`, :cve:`2021-20239`, :cve:`2021-20261`, :cve:`2021-20265`, :cve:`2021-20268`, :cve:`2021-20292`, :cve:`2021-20317`, :cve:`2021-20320`, :cve:`2021-20321`, :cve:`2021-20322`, :cve:`2021-21781`, :cve:`2021-22543`, :cve:`2021-22555`, :cve:`2021-22600`, :cve:`2021-23133`, :cve:`2021-23134`, :cve:`2021-26401`, :cve:`2021-26708`, :cve:`2021-26930`, :cve:`2021-26931`, :cve:`2021-26932`, :cve:`2021-27363`, :cve:`2021-27364`, :cve:`2021-27365`, :cve:`2021-28038`, :cve:`2021-28039`, :cve:`2021-28375`, :cve:`2021-28660`, :cve:`2021-28688`, :cve:`2021-28691`, :cve:`2021-28711`, :cve:`2021-28712`, :cve:`2021-28713`, :cve:`2021-28714`, :cve:`2021-28715`, :cve:`2021-28950`, :cve:`2021-28951`, :cve:`2021-28952`, :cve:`2021-28964`, :cve:`2021-28971`, :cve:`2021-28972`, :cve:`2021-29154`, :cve:`2021-29155`, :cve:`2021-29264`, :cve:`2021-29265`, :cve:`2021-29266`, :cve:`2021-29646`, :cve:`2021-29647`, :cve:`2021-29648`, :cve:`2021-29649`, :cve:`2021-29650`, :cve:`2021-29657`, :cve:`2021-30002`, :cve:`2021-30178`, :cve:`2021-31440`, :cve:`2021-3178`, :cve:`2021-31829`, :cve:`2021-31916`, :cve:`2021-32078`, :cve:`2021-32399`, :cve:`2021-32606`, :cve:`2021-33033`, :cve:`2021-33034`, :cve:`2021-33061`, :cve:`2021-33098`, :cve:`2021-33135`, :cve:`2021-33200`, :cve:`2021-3347`, :cve:`2021-3348`, :cve:`2021-33624`, :cve:`2021-33655`, :cve:`2021-33656`, :cve:`2021-33909`, :cve:`2021-3411`, :cve:`2021-3428`, :cve:`2021-3444`, :cve:`2021-34556`, :cve:`2021-34693`, :cve:`2021-3483`, :cve:`2021-34866`, :cve:`2021-3489`, :cve:`2021-3490`, :cve:`2021-3491`, :cve:`2021-3493`, :cve_mitre:`2021-34981`, :cve:`2021-3501`, :cve:`2021-35039`, :cve:`2021-3506`, :cve:`2021-3543`, :cve:`2021-35477`, :cve:`2021-3564`, :cve:`2021-3573`, :cve:`2021-3587`, :cve_mitre:`2021-3600`, :cve:`2021-3609`, :cve:`2021-3612`, :cve:`2021-3635`, :cve:`2021-3640`, :cve:`2021-3653`, :cve:`2021-3655`, :cve:`2021-3656`, :cve:`2021-3659`, :cve:`2021-3669`, :cve:`2021-3679`, :cve:`2021-3715`, :cve:`2021-37159`, :cve:`2021-3732`, :cve:`2021-3736`, :cve:`2021-3739`, :cve:`2021-3743`, :cve:`2021-3744`, :cve:`2021-3752`, :cve:`2021-3753`, :cve:`2021-37576`, :cve:`2021-3759`, :cve:`2021-3760`, :cve:`2021-3764`, :cve:`2021-3772`, :cve:`2021-38160`, :cve:`2021-38166`, :cve:`2021-38198`, :cve:`2021-38199`, :cve:`2021-38200`, :cve:`2021-38201`, :cve:`2021-38202`, :cve:`2021-38203`, :cve:`2021-38204`, :cve:`2021-38205`, :cve:`2021-38206`, :cve:`2021-38207`, :cve:`2021-38208`, :cve:`2021-38209`, :cve:`2021-38300`, :cve:`2021-3894`, :cve:`2021-3896`, :cve:`2021-3923`, :cve:`2021-39633`, :cve:`2021-39634`, :cve:`2021-39636`, :cve:`2021-39648`, :cve:`2021-39656`, :cve:`2021-39657`, :cve:`2021-39685`, :cve:`2021-39686`, :cve:`2021-39698`, :cve:`2021-39711`, :cve:`2021-39713`, :cve:`2021-39714`, :cve:`2021-4001`, :cve:`2021-4002`, :cve:`2021-4023`, :cve:`2021-4028`, :cve:`2021-4032`, :cve:`2021-4037`, :cve:`2021-40490`, :cve:`2021-4083`, :cve:`2021-4090`, :cve:`2021-4093`, :cve:`2021-4095`, :cve:`2021-41073`, :cve:`2021-4135`, :cve:`2021-4148`, :cve:`2021-4149`, :cve:`2021-4150`, :cve:`2021-4154`, :cve:`2021-4155`, :cve:`2021-4157`, :cve:`2021-4159`, :cve:`2021-41864`, :cve:`2021-4197`, :cve:`2021-42008`, :cve:`2021-4202`, :cve:`2021-4203`, :cve:`2021-4204`, :cve:`2021-4218`, :cve:`2021-42252`, :cve:`2021-42327`, :cve:`2021-42739`, :cve:`2021-43056`, :cve:`2021-43057`, :cve:`2021-43267`, :cve:`2021-43389`, :cve:`2021-43975`, :cve:`2021-43976`, :cve:`2021-44733`, :cve:`2021-44879`, :cve:`2021-45095`, :cve:`2021-45100`, :cve:`2021-45402`, :cve:`2021-45469`, :cve:`2021-45480`, :cve:`2021-45485`, :cve:`2021-45486`, :cve:`2021-45868`, :cve:`2021-46283`, :cve:`2022-0001`, :cve:`2022-0002`, :cve:`2022-0168`, :cve:`2022-0171`, :cve:`2022-0185`, :cve:`2022-0264`, :cve:`2022-0286`, :cve:`2022-0322`, :cve:`2022-0330`, :cve:`2022-0382`, :cve:`2022-0433`, :cve:`2022-0435`, :cve:`2022-0480`, :cve:`2022-0487`, :cve:`2022-0492`, :cve:`2022-0494`, :cve:`2022-0500`, :cve:`2022-0516`, :cve:`2022-0617`, :cve:`2022-0644`, :cve:`2022-0646`, :cve:`2022-0742`, :cve:`2022-0812`, :cve:`2022-0847`, :cve:`2022-0850`, :cve:`2022-0854`, :cve:`2022-0995`, :cve:`2022-0998`, :cve:`2022-1011`, :cve:`2022-1012`, :cve:`2022-1015`, :cve:`2022-1016`, :cve:`2022-1043`, :cve:`2022-1048`, :cve:`2022-1055`, :cve:`2022-1158`, :cve:`2022-1184`, :cve:`2022-1195`, :cve:`2022-1198`, :cve:`2022-1199`, :cve:`2022-1204`, :cve:`2022-1205`, :cve:`2022-1263`, :cve:`2022-1280`, :cve:`2022-1353`, :cve:`2022-1419`, :cve:`2022-1462`, :cve:`2022-1508`, :cve:`2022-1516`, :cve:`2022-1651`, :cve:`2022-1652`, :cve:`2022-1671`, :cve:`2022-1678`, :cve:`2022-1679`, :cve:`2022-1729`, :cve:`2022-1734`, :cve:`2022-1786`, :cve:`2022-1789`, :cve:`2022-1836`, :cve:`2022-1852`, :cve:`2022-1882`, :cve:`2022-1943`, :cve:`2022-1966`, :cve:`2022-1972`, :cve:`2022-1973`, :cve:`2022-1974`, :cve:`2022-1975`, :cve:`2022-1976`, :cve:`2022-1998`, :cve:`2022-20008`, :cve:`2022-20132`, :cve:`2022-20141`, :cve:`2022-20148`, :cve:`2022-20153`, :cve:`2022-20154`, :cve:`2022-20158`, :cve:`2022-20166`, :cve:`2022-20368`, :cve:`2022-20369`, :cve:`2022-20409`, :cve:`2022-20421`, :cve:`2022-20422`, :cve:`2022-20423`, :cve:`2022-20424`, :cve_mitre:`2022-20565`, :cve:`2022-20566`, :cve:`2022-20567`, :cve:`2022-20568`, :cve:`2022-20572`, :cve:`2022-2078`, :cve:`2022-21123`, :cve:`2022-21125`, :cve:`2022-21166`, :cve:`2022-21385`, :cve:`2022-21499`, :cve_mitre:`2022-21505`, :cve:`2022-2153`, :cve:`2022-2196`, :cve_mitre:`2022-22942`, :cve:`2022-23036`, :cve:`2022-23037`, :cve:`2022-23038`, :cve:`2022-23039`, :cve:`2022-23040`, :cve:`2022-23041`, :cve:`2022-23042`, :cve:`2022-2308`, :cve:`2022-2318`, :cve:`2022-23222`, :cve:`2022-2327`, :cve:`2022-2380`, :cve:`2022-23816`, :cve:`2022-23960`, :cve:`2022-24122`, :cve:`2022-24448`, :cve:`2022-24958`, :cve:`2022-24959`, :cve:`2022-2503`, :cve:`2022-25258`, :cve:`2022-25375`, :cve:`2022-25636`, :cve_mitre:`2022-2585`, :cve_mitre:`2022-2586`, :cve_mitre:`2022-2588`, :cve:`2022-2590`, :cve_mitre:`2022-2602`, :cve:`2022-26365`, :cve:`2022-26373`, :cve:`2022-2639`, :cve:`2022-26490`, :cve:`2022-2663`, :cve:`2022-26966`, :cve:`2022-27223`, :cve:`2022-27666`, :cve:`2022-27672`, :cve:`2022-2785`, :cve:`2022-27950`, :cve:`2022-28356`, :cve:`2022-28388`, :cve:`2022-28389`, :cve:`2022-28390`, :cve:`2022-2873`, :cve:`2022-28796`, :cve:`2022-28893`, :cve:`2022-2905`, :cve:`2022-29156`, :cve:`2022-2938`, :cve:`2022-29581`, :cve:`2022-29582`, :cve:`2022-2959`, :cve:`2022-2964`, :cve:`2022-2977`, :cve:`2022-2978`, :cve:`2022-29900`, :cve:`2022-29901`, :cve:`2022-2991`, :cve:`2022-29968`, :cve:`2022-3028`, :cve:`2022-30594`, :cve:`2022-3061`, :cve:`2022-3077`, :cve:`2022-3078`, :cve:`2022-3103`, :cve:`2022-3104`, :cve:`2022-3105`, :cve:`2022-3106`, :cve:`2022-3107`, :cve:`2022-3108`, :cve:`2022-3110`, :cve:`2022-3111`, :cve:`2022-3112`, :cve:`2022-3113`, :cve:`2022-3114`, :cve:`2022-3115`, :cve:`2022-3169`, :cve:`2022-3170`, :cve:`2022-3176`, :cve:`2022-3202`, :cve:`2022-32250`, :cve:`2022-32296`, :cve:`2022-3239`, :cve:`2022-32981`, :cve:`2022-3303`, :cve:`2022-3344`, :cve:`2022-33740`, :cve:`2022-33741`, :cve:`2022-33742`, :cve:`2022-33743`, :cve:`2022-33744`, :cve:`2022-33981`, :cve:`2022-3424`, :cve:`2022-3435`, :cve:`2022-34494`, :cve:`2022-34495`, :cve:`2022-34918`, :cve:`2022-3521`, :cve:`2022-3522`, :cve:`2022-3524`, :cve:`2022-3526`, :cve:`2022-3531`, :cve:`2022-3532`, :cve:`2022-3534`, :cve:`2022-3535`, :cve:`2022-3541`, :cve:`2022-3542`, :cve:`2022-3543`, :cve:`2022-3545`, :cve:`2022-3564`, :cve:`2022-3565`, :cve:`2022-3577`, :cve:`2022-3586`, :cve:`2022-3594`, :cve:`2022-3595`, :cve:`2022-36123`, :cve:`2022-3619`, :cve:`2022-3621`, :cve:`2022-3623`, :cve:`2022-3624`, :cve:`2022-3625`, :cve:`2022-3628`, :cve:`2022-36280`, :cve:`2022-3629`, :cve:`2022-3630`, :cve:`2022-3633`, :cve:`2022-3635`, :cve:`2022-3636`, :cve:`2022-3640`, :cve:`2022-3643`, :cve:`2022-3646`, :cve:`2022-3649`, :cve:`2022-36879`, :cve:`2022-36946`, :cve:`2022-3707`, :cve:`2022-38457`, :cve:`2022-3903`, :cve:`2022-3910`, :cve:`2022-39188`, :cve:`2022-39189`, :cve:`2022-39190`, :cve:`2022-3977`, :cve:`2022-39842`, :cve:`2022-40133`, :cve:`2022-40307`, :cve:`2022-40476`, :cve:`2022-40768`, :cve:`2022-4095`, :cve:`2022-40982`, :cve:`2022-41218`, :cve:`2022-41222`, :cve:`2022-4127`, :cve:`2022-4128`, :cve:`2022-4129`, :cve:`2022-4139`, :cve:`2022-41674`, :cve:`2022-41849`, :cve:`2022-41850`, :cve:`2022-41858`, :cve:`2022-42328`, :cve:`2022-42329`, :cve:`2022-42432`, :cve:`2022-4269`, :cve:`2022-42703`, :cve:`2022-42719`, :cve:`2022-42720`, :cve:`2022-42721`, :cve:`2022-42722`, :cve:`2022-42895`, :cve:`2022-42896`, :cve:`2022-43750`, :cve:`2022-4378`, :cve:`2022-4379`, :cve:`2022-4382`, :cve:`2022-43945`, :cve:`2022-45869`, :cve:`2022-45886`, :cve:`2022-45887`, :cve:`2022-45919`, :cve:`2022-45934`, :cve:`2022-4662`, :cve:`2022-4696`, :cve:`2022-4744`, :cve:`2022-47518`, :cve:`2022-47519`, :cve:`2022-47520`, :cve:`2022-47521`, :cve:`2022-47929`, :cve:`2022-47938`, :cve:`2022-47939`, :cve:`2022-47940`, :cve:`2022-47941`, :cve:`2022-47942`, :cve:`2022-47943`, :cve:`2022-47946`, :cve:`2022-4842`, :cve:`2022-48423`, :cve:`2022-48424`, :cve:`2022-48425`, :cve:`2022-48502`, :cve:`2023-0030`, :cve:`2023-0045`, :cve:`2023-0047`, :cve:`2023-0122`, :cve:`2023-0160`, :cve:`2023-0179`, :cve:`2023-0210`, :cve:`2023-0240`, :cve:`2023-0266`, :cve:`2023-0386`, :cve:`2023-0394`, :cve:`2023-0458`, :cve:`2023-0459`, :cve:`2023-0461`, :cve:`2023-0468`, :cve:`2023-0469`, :cve:`2023-0590`, :cve:`2023-0615`, :cve_mitre:`2023-1032`, :cve:`2023-1073`, :cve:`2023-1074`, :cve:`2023-1076`, :cve:`2023-1077`, :cve:`2023-1078`, :cve:`2023-1079`, :cve:`2023-1095`, :cve:`2023-1118`, :cve:`2023-1192`, :cve:`2023-1194`, :cve:`2023-1195`, :cve:`2023-1206`, :cve:`2023-1249`, :cve:`2023-1252`, :cve:`2023-1281`, :cve:`2023-1295`, :cve:`2023-1380`, :cve:`2023-1382`, :cve:`2023-1390`, :cve:`2023-1513`, :cve:`2023-1582`, :cve:`2023-1583`, :cve:`2023-1611`, :cve:`2023-1637`, :cve:`2023-1652`, :cve:`2023-1670`, :cve:`2023-1829`, :cve:`2023-1838`, :cve:`2023-1855`, :cve:`2023-1859`, :cve:`2023-1872`, :cve:`2023-1989`, :cve:`2023-1990`, :cve:`2023-1998`, :cve:`2023-2002`, :cve:`2023-2006`, :cve:`2023-2007`, :cve:`2023-2008`, :cve:`2023-2019`, :cve:`2023-20569`, :cve:`2023-20588`, :cve:`2023-20593`, :cve:`2023-20928`, :cve:`2023-20938`, :cve:`2023-21102`, :cve:`2023-21106`, :cve:`2023-2124`, :cve:`2023-21255`, :cve:`2023-2156`, :cve:`2023-2162`, :cve:`2023-2163`, :cve:`2023-2166`, :cve:`2023-2177`, :cve:`2023-2194`, :cve:`2023-2235`, :cve:`2023-2236`, :cve:`2023-2248`, :cve:`2023-2269`, :cve:`2023-22995`, :cve:`2023-22996`, :cve:`2023-22997`, :cve:`2023-22998`, :cve:`2023-22999`, :cve:`2023-23000`, :cve:`2023-23001`, :cve:`2023-23002`, :cve:`2023-23003`, :cve:`2023-23004`, :cve:`2023-23006`, :cve:`2023-23454`, :cve:`2023-23455`, :cve:`2023-23559`, :cve:`2023-23586`, :cve:`2023-2430`, :cve:`2023-2483`, :cve:`2023-25012`, :cve:`2023-2513`, :cve:`2023-25775`, :cve:`2023-2598`, :cve:`2023-26544`, :cve:`2023-26545`, :cve:`2023-26605`, :cve:`2023-26606`, :cve:`2023-26607`, :cve:`2023-28327`, :cve:`2023-28328`, :cve:`2023-28410`, :cve:`2023-28464`, :cve:`2023-28466`, :cve:`2023-2860`, :cve:`2023-28772`, :cve:`2023-28866`, :cve:`2023-2898`, :cve:`2023-2985`, :cve:`2023-3006`, :cve:`2023-30456`, :cve:`2023-30772`, :cve:`2023-3090`, :cve:`2023-3106`, :cve:`2023-3111`, :cve:`2023-3117`, :cve:`2023-31248`, :cve:`2023-3141`, :cve:`2023-31436`, :cve:`2023-3159`, :cve:`2023-3161`, :cve:`2023-3212`, :cve:`2023-3220`, :cve:`2023-32233`, :cve:`2023-32247`, :cve:`2023-32248`, :cve:`2023-32250`, :cve:`2023-32252`, :cve:`2023-32254`, :cve:`2023-32257`, :cve:`2023-32258`, :cve:`2023-32269`, :cve:`2023-3268`, :cve:`2023-3269`, :cve:`2023-3312`, :cve:`2023-3317`, :cve:`2023-33203`, :cve:`2023-33250`, :cve:`2023-33288`, :cve:`2023-3338`, :cve:`2023-3355`, :cve:`2023-3357`, :cve:`2023-3358`, :cve:`2023-3359`, :cve:`2023-3389`, :cve:`2023-3390`, :cve:`2023-33951`, :cve:`2023-33952`, :cve:`2023-34255`, :cve:`2023-34256`, :cve:`2023-34319`, :cve:`2023-3439`, :cve:`2023-35001`, :cve:`2023-3567`, :cve:`2023-35788`, :cve:`2023-35823`, :cve:`2023-35824`, :cve:`2023-35826`, :cve:`2023-35828`, :cve:`2023-35829`, :cve:`2023-3609`, :cve:`2023-3610`, :cve:`2023-3611`, :cve:`2023-37453`, :cve:`2023-3772`, :cve:`2023-3773`, :cve:`2023-3776`, :cve:`2023-3777`, :cve:`2023-3812`, :cve:`2023-38409`, :cve:`2023-38426`, :cve:`2023-38427`, :cve:`2023-38428`, :cve:`2023-38429`, :cve:`2023-38430`, :cve:`2023-38431`, :cve:`2023-38432`, :cve:`2023-3863`, :cve_mitre:`2023-3865`, :cve_mitre:`2023-3866`, :cve_mitre:`2023-3867`, :cve:`2023-4004`, :cve:`2023-4015`, :cve:`2023-40283`, :cve:`2023-4128`, :cve:`2023-4132`, :cve:`2023-4147`, :cve:`2023-4155`, :cve:`2023-4194`, :cve:`2023-4206`, :cve:`2023-4207`, :cve:`2023-4208`, :cve:`2023-4273`, :cve:`2023-42752`, :cve:`2023-42753`, :cve:`2023-4385`, :cve:`2023-4387`, :cve:`2023-4389`, :cve:`2023-4394`, :cve:`2023-4459`, :cve:`2023-4569`, :cve:`2023-4611` and :cve:`2023-4623` -- nghttp2: Fix :cve:`2023-35945` -- openssl: Fix :cve:`2023-2975`, :cve:`2023-3446`, :cve:`2023-3817`, :cve:`2023-4807` and :cve:`2023-5363` -- pixman: Ignore :cve:`2023-37769` -- procps: Fix :cve:`2023-4016` -- python3-git: Fix :cve:`2023-40267`, :cve:`2023-40590` and :cve:`2023-41040` -- python3-pygments: Fix :cve:`2022-40896` -- python3-urllib3: Fix :cve:`2023-43804` and :cve:`2023-45803` -- python3: Fix :cve:`2023-24329` and :cve:`2023-40217` -- qemu: Fix :cve:`2023-3180`, :cve:`2023-3354` and :cve:`2023-42467` -- qemu: Ignore :cve:`2023-2680` -- screen: Fix :cve:`2023-24626` +- inetutils: fix :cve_nist:`2023-40303` +- librsvg: Fix :cve_nist:`2023-38633` +- libssh2: Fix :cve_nist:`2020-22218` +- libwebp: Fix :cve_nist:`2023-4863` and :cve_nist:`2023-5129` +- libx11: Fix :cve_nist:`2023-43785`, :cve_nist:`2023-43786` and :cve_nist:`2023-43787` +- libxpm: Fix :cve_nist:`2023-43788` and :cve_nist:`2023-43789` +- linux-yocto/6.1: Ignore :cve_nist:`2003-1604`, :cve_nist:`2004-0230`, :cve_nist:`2006-3635`, :cve_nist:`2006-5331`, :cve_nist:`2006-6128`, :cve_nist:`2007-4774`, :cve_nist:`2007-6761`, :cve_nist:`2007-6762`, :cve_nist:`2008-7316`, :cve_nist:`2009-2692`, :cve_nist:`2010-0008`, :cve_nist:`2010-3432`, :cve_nist:`2010-4648`, :cve_nist:`2010-5313`, :cve_nist:`2010-5328`, :cve_nist:`2010-5329`, :cve_nist:`2010-5331`, :cve_nist:`2010-5332`, :cve_nist:`2011-4098`, :cve_nist:`2011-4131`, :cve_nist:`2011-4915`, :cve_nist:`2011-5321`, :cve_nist:`2011-5327`, :cve_nist:`2012-0957`, :cve_nist:`2012-2119`, :cve_nist:`2012-2136`, :cve_nist:`2012-2137`, :cve_nist:`2012-2313`, :cve_nist:`2012-2319`, :cve_nist:`2012-2372`, :cve_nist:`2012-2375`, :cve_nist:`2012-2390`, :cve_nist:`2012-2669`, :cve_nist:`2012-2744`, :cve_nist:`2012-2745`, :cve_nist:`2012-3364`, :cve_nist:`2012-3375`, :cve_nist:`2012-3400`, :cve_nist:`2012-3412`, :cve_nist:`2012-3430`, :cve_nist:`2012-3510`, :cve_nist:`2012-3511`, :cve_nist:`2012-3520`, :cve_nist:`2012-3552`, :cve_nist:`2012-4398`, :cve_nist:`2012-4444`, :cve_nist:`2012-4461`, :cve_nist:`2012-4467`, :cve_nist:`2012-4508`, :cve_nist:`2012-4530`, :cve_nist:`2012-4565`, :cve_nist:`2012-5374`, :cve_nist:`2012-5375`, :cve_nist:`2012-5517`, :cve_nist:`2012-6536`, :cve_nist:`2012-6537`, :cve_nist:`2012-6538`, :cve_nist:`2012-6539`, :cve_nist:`2012-6540`, :cve_nist:`2012-6541`, :cve_nist:`2012-6542`, :cve_nist:`2012-6543`, :cve_nist:`2012-6544`, :cve_nist:`2012-6545`, :cve_nist:`2012-6546`, :cve_nist:`2012-6547`, :cve_nist:`2012-6548`, :cve_nist:`2012-6549`, :cve_nist:`2012-6638`, :cve_nist:`2012-6647`, :cve_nist:`2012-6657`, :cve_nist:`2012-6689`, :cve_nist:`2012-6701`, :cve_nist:`2012-6703`, :cve_nist:`2012-6704`, :cve_nist:`2012-6712`, :cve_nist:`2013-0160`, :cve_nist:`2013-0190`, :cve_nist:`2013-0216`, :cve_nist:`2013-0217`, :cve_nist:`2013-0228`, :cve_nist:`2013-0231`, :cve_nist:`2013-0268`, :cve_nist:`2013-0290`, :cve_nist:`2013-0309`, :cve_nist:`2013-0310`, :cve_nist:`2013-0311`, :cve_nist:`2013-0313`, :cve_nist:`2013-0343`, :cve_nist:`2013-0349`, :cve_nist:`2013-0871`, :cve_nist:`2013-0913`, :cve_nist:`2013-0914`, :cve_nist:`2013-1059`, :cve_nist:`2013-1763`, :cve_nist:`2013-1767`, :cve_nist:`2013-1772`, :cve_nist:`2013-1773`, :cve_nist:`2013-1774`, :cve_nist:`2013-1792`, :cve_nist:`2013-1796`, :cve_nist:`2013-1797`, :cve_nist:`2013-1798`, :cve_nist:`2013-1819`, :cve_nist:`2013-1826`, :cve_nist:`2013-1827`, :cve_nist:`2013-1828`, :cve_nist:`2013-1848`, :cve_nist:`2013-1858`, :cve_nist:`2013-1860`, :cve_nist:`2013-1928`, :cve_nist:`2013-1929`, :cve_nist:`2013-1943`, :cve_nist:`2013-1956`, :cve_nist:`2013-1957`, :cve_nist:`2013-1958`, :cve_nist:`2013-1959`, :cve_nist:`2013-1979`, :cve_nist:`2013-2015`, :cve_nist:`2013-2017`, :cve_nist:`2013-2058`, :cve_nist:`2013-2094`, :cve_nist:`2013-2128`, :cve_nist:`2013-2140`, :cve_nist:`2013-2141`, :cve_nist:`2013-2146`, :cve_nist:`2013-2147`, :cve_nist:`2013-2148`, :cve_nist:`2013-2164`, :cve_nist:`2013-2206`, :cve_nist:`2013-2232`, :cve_nist:`2013-2234`, :cve_nist:`2013-2237`, :cve_nist:`2013-2546`, :cve_nist:`2013-2547`, :cve_nist:`2013-2548`, :cve_nist:`2013-2596`, :cve_nist:`2013-2634`, :cve_nist:`2013-2635`, :cve_nist:`2013-2636`, :cve_nist:`2013-2850`, :cve_nist:`2013-2851`, :cve_nist:`2013-2852`, :cve_nist:`2013-2888`, :cve_nist:`2013-2889`, :cve_nist:`2013-2890`, :cve_nist:`2013-2891`, :cve_nist:`2013-2892`, :cve_nist:`2013-2893`, :cve_nist:`2013-2894`, :cve_nist:`2013-2895`, :cve_nist:`2013-2896`, :cve_nist:`2013-2897`, :cve_nist:`2013-2898`, :cve_nist:`2013-2899`, :cve_nist:`2013-2929`, :cve_nist:`2013-2930`, :cve_nist:`2013-3076`, :cve_nist:`2013-3222`, :cve_nist:`2013-3223`, :cve_nist:`2013-3224`, :cve_nist:`2013-3225`, :cve_nist:`2013-3226`, :cve_nist:`2013-3227`, :cve_nist:`2013-3228`, :cve_nist:`2013-3229`, :cve_nist:`2013-3230`, :cve_nist:`2013-3231`, :cve_nist:`2013-3232`, :cve_nist:`2013-3233`, :cve_nist:`2013-3234`, :cve_nist:`2013-3235`, :cve_nist:`2013-3236`, :cve_nist:`2013-3237`, :cve_nist:`2013-3301`, :cve_nist:`2013-3302`, :cve_nist:`2013-4125`, :cve_nist:`2013-4127`, :cve_nist:`2013-4129`, :cve_nist:`2013-4162`, :cve_nist:`2013-4163`, :cve_nist:`2013-4205`, :cve_nist:`2013-4220`, :cve_nist:`2013-4247`, :cve_nist:`2013-4254`, :cve_nist:`2013-4270`, :cve_nist:`2013-4299`, :cve_nist:`2013-4300`, :cve_nist:`2013-4312`, :cve_nist:`2013-4343`, :cve_nist:`2013-4345`, :cve_nist:`2013-4348`, :cve_nist:`2013-4350`, :cve_nist:`2013-4387`, :cve_nist:`2013-4470`, :cve_nist:`2013-4483`, :cve_nist:`2013-4511`, :cve_nist:`2013-4512`, :cve_nist:`2013-4513`, :cve_nist:`2013-4514`, :cve_nist:`2013-4515`, :cve_nist:`2013-4516`, :cve_nist:`2013-4563`, :cve_nist:`2013-4579`, :cve_nist:`2013-4587`, :cve_nist:`2013-4588`, :cve_nist:`2013-4591`, :cve_nist:`2013-4592`, :cve_nist:`2013-5634`, :cve_nist:`2013-6282`, :cve_nist:`2013-6367`, :cve_nist:`2013-6368`, :cve_nist:`2013-6376`, :cve_nist:`2013-6378`, :cve_nist:`2013-6380`, :cve_nist:`2013-6381`, :cve_nist:`2013-6382`, :cve_nist:`2013-6383`, :cve_nist:`2013-6431`, :cve_nist:`2013-6432`, :cve_nist:`2013-6885`, :cve_nist:`2013-7026`, :cve_nist:`2013-7027`, :cve_nist:`2013-7263`, :cve_nist:`2013-7264`, :cve_nist:`2013-7265`, :cve_nist:`2013-7266`, :cve_nist:`2013-7267`, :cve_nist:`2013-7268`, :cve_nist:`2013-7269`, :cve_nist:`2013-7270`, :cve_nist:`2013-7271`, :cve_nist:`2013-7281`, :cve_nist:`2013-7339`, :cve_nist:`2013-7348`, :cve_nist:`2013-7421`, :cve_nist:`2013-7446`, :cve_nist:`2013-7470`, :cve_nist:`2014-0038`, :cve_nist:`2014-0049`, :cve_nist:`2014-0055`, :cve_nist:`2014-0069`, :cve_nist:`2014-0077`, :cve_nist:`2014-0100`, :cve_nist:`2014-0101`, :cve_nist:`2014-0102`, :cve_nist:`2014-0131`, :cve_nist:`2014-0155`, :cve_nist:`2014-0181`, :cve_nist:`2014-0196`, :cve_nist:`2014-0203`, :cve_nist:`2014-0205`, :cve_nist:`2014-0206`, :cve_nist:`2014-1438`, :cve_nist:`2014-1444`, :cve_nist:`2014-1445`, :cve_nist:`2014-1446`, :cve_nist:`2014-1690`, :cve_nist:`2014-1737`, :cve_nist:`2014-1738`, :cve_nist:`2014-1739`, :cve_nist:`2014-1874`, :cve_nist:`2014-2038`, :cve_nist:`2014-2039`, :cve_nist:`2014-2309`, :cve_nist:`2014-2523`, :cve_nist:`2014-2568`, :cve_nist:`2014-2580`, :cve_nist:`2014-2672`, :cve_nist:`2014-2673`, :cve_nist:`2014-2678`, :cve_nist:`2014-2706`, :cve_nist:`2014-2739`, :cve_nist:`2014-2851`, :cve_nist:`2014-2889`, :cve_nist:`2014-3122`, :cve_nist:`2014-3144`, :cve_nist:`2014-3145`, :cve_nist:`2014-3153`, :cve_nist:`2014-3180`, :cve_nist:`2014-3181`, :cve_nist:`2014-3182`, :cve_nist:`2014-3183`, :cve_nist:`2014-3184`, :cve_nist:`2014-3185`, :cve_nist:`2014-3186`, :cve_nist:`2014-3534`, :cve_nist:`2014-3535`, :cve_nist:`2014-3601`, :cve_nist:`2014-3610`, :cve_nist:`2014-3611`, :cve_nist:`2014-3631`, :cve_nist:`2014-3645`, :cve_nist:`2014-3646`, :cve_nist:`2014-3647`, :cve_nist:`2014-3673`, :cve_nist:`2014-3687`, :cve_nist:`2014-3688`, :cve_nist:`2014-3690`, :cve_nist:`2014-3917`, :cve_nist:`2014-3940`, :cve_nist:`2014-4014`, :cve_nist:`2014-4027`, :cve_nist:`2014-4157`, :cve_nist:`2014-4171`, :cve_nist:`2014-4508`, :cve_nist:`2014-4608`, :cve_nist:`2014-4611`, :cve_nist:`2014-4652`, :cve_nist:`2014-4653`, :cve_nist:`2014-4654`, :cve_nist:`2014-4655`, :cve_nist:`2014-4656`, :cve_nist:`2014-4667`, :cve_nist:`2014-4699`, :cve_nist:`2014-4943`, :cve_nist:`2014-5045`, :cve_nist:`2014-5077`, :cve_nist:`2014-5206`, :cve_nist:`2014-5207`, :cve_nist:`2014-5471`, :cve_nist:`2014-5472`, :cve_nist:`2014-6410`, :cve_nist:`2014-6416`, :cve_nist:`2014-6417`, :cve_nist:`2014-6418`, :cve_nist:`2014-7145`, :cve_nist:`2014-7283`, :cve_nist:`2014-7284`, :cve_nist:`2014-7822`, :cve_nist:`2014-7825`, :cve_nist:`2014-7826`, :cve_nist:`2014-7841`, :cve_nist:`2014-7842`, :cve_nist:`2014-7843`, :cve_nist:`2014-7970`, :cve_nist:`2014-7975`, :cve_nist:`2014-8086`, :cve_nist:`2014-8133`, :cve_nist:`2014-8134`, :cve_nist:`2014-8159`, :cve_nist:`2014-8160`, :cve_nist:`2014-8171`, :cve_nist:`2014-8172`, :cve_nist:`2014-8173`, :cve_nist:`2014-8369`, :cve_nist:`2014-8480`, :cve_nist:`2014-8481`, :cve_nist:`2014-8559`, :cve_nist:`2014-8709`, :cve_nist:`2014-8884`, :cve_nist:`2014-8989`, :cve_nist:`2014-9090`, :cve_nist:`2014-9322`, :cve_nist:`2014-9419`, :cve_nist:`2014-9420`, :cve_nist:`2014-9428`, :cve_nist:`2014-9529`, :cve_nist:`2014-9584`, :cve_nist:`2014-9585`, :cve_nist:`2014-9644`, :cve_nist:`2014-9683`, :cve_nist:`2014-9710`, :cve_nist:`2014-9715`, :cve_nist:`2014-9717`, :cve_nist:`2014-9728`, :cve_nist:`2014-9729`, :cve_nist:`2014-9730`, :cve_nist:`2014-9731`, :cve_nist:`2014-9803`, :cve_nist:`2014-9870`, :cve_nist:`2014-9888`, :cve_nist:`2014-9895`, :cve_nist:`2014-9903`, :cve_nist:`2014-9904`, :cve_nist:`2014-9914`, :cve_nist:`2014-9922`, :cve_nist:`2014-9940`, :cve_nist:`2015-0239`, :cve_nist:`2015-0274`, :cve_nist:`2015-0275`, :cve_nist:`2015-1333`, :cve_nist:`2015-1339`, :cve_nist:`2015-1350`, :cve_nist:`2015-1420`, :cve_nist:`2015-1421`, :cve_nist:`2015-1465`, :cve_nist:`2015-1573`, :cve_nist:`2015-1593`, :cve_nist:`2015-1805`, :cve_nist:`2015-2041`, :cve_nist:`2015-2042`, :cve_nist:`2015-2150`, :cve_nist:`2015-2666`, :cve_nist:`2015-2672`, :cve_nist:`2015-2686`, :cve_nist:`2015-2830`, :cve_nist:`2015-2922`, :cve_nist:`2015-2925`, :cve_nist:`2015-3212`, :cve_nist:`2015-3214`, :cve_nist:`2015-3288`, :cve_nist:`2015-3290`, :cve_nist:`2015-3291`, :cve_nist:`2015-3331`, :cve_nist:`2015-3339`, :cve_nist:`2015-3636`, :cve_nist:`2015-4001`, :cve_nist:`2015-4002`, :cve_nist:`2015-4003`, :cve_nist:`2015-4004`, :cve_nist:`2015-4036`, :cve_nist:`2015-4167`, :cve_nist:`2015-4170`, :cve_nist:`2015-4176`, :cve_nist:`2015-4177`, :cve_nist:`2015-4178`, :cve_nist:`2015-4692`, :cve_nist:`2015-4700`, :cve_nist:`2015-5156`, :cve_nist:`2015-5157`, :cve_nist:`2015-5257`, :cve_nist:`2015-5283`, :cve_nist:`2015-5307`, :cve_nist:`2015-5327`, :cve_nist:`2015-5364`, :cve_nist:`2015-5366`, :cve_nist:`2015-5697`, :cve_nist:`2015-5706`, :cve_nist:`2015-5707`, :cve_nist:`2015-6252`, :cve_nist:`2015-6526`, :cve_nist:`2015-6937`, :cve_nist:`2015-7509`, :cve_nist:`2015-7513`, :cve_nist:`2015-7515`, :cve_nist:`2015-7550`, :cve_nist:`2015-7566`, :cve_nist:`2015-7613`, :cve_nist:`2015-7799`, :cve_nist:`2015-7833`, :cve_nist:`2015-7872`, :cve_nist:`2015-7884`, :cve_nist:`2015-7885`, :cve_nist:`2015-7990`, :cve_nist:`2015-8104`, :cve_nist:`2015-8215`, :cve_nist:`2015-8324`, :cve_nist:`2015-8374`, :cve_nist:`2015-8539`, :cve_nist:`2015-8543`, :cve_nist:`2015-8550`, :cve_nist:`2015-8551`, :cve_nist:`2015-8552`, :cve_nist:`2015-8553`, :cve_nist:`2015-8569`, :cve_nist:`2015-8575`, :cve_nist:`2015-8660`, :cve_nist:`2015-8709`, :cve_nist:`2015-8746`, :cve_nist:`2015-8767`, :cve_nist:`2015-8785`, :cve_nist:`2015-8787`, :cve_nist:`2015-8812`, :cve_nist:`2015-8816`, :cve_nist:`2015-8830`, :cve_nist:`2015-8839`, :cve_nist:`2015-8844`, :cve_nist:`2015-8845`, :cve_nist:`2015-8950`, :cve_nist:`2015-8952`, :cve_nist:`2015-8953`, :cve_nist:`2015-8955`, :cve_nist:`2015-8956`, :cve_nist:`2015-8961`, :cve_nist:`2015-8962`, :cve_nist:`2015-8963`, :cve_nist:`2015-8964`, :cve_nist:`2015-8966`, :cve_nist:`2015-8967`, :cve_nist:`2015-8970`, :cve_nist:`2015-9004`, :cve_nist:`2015-9016`, :cve_nist:`2015-9289`, :cve_nist:`2016-0617`, :cve_nist:`2016-0723`, :cve_nist:`2016-0728`, :cve_nist:`2016-0758`, :cve_nist:`2016-0821`, :cve_nist:`2016-0823`, :cve_nist:`2016-10044`, :cve_nist:`2016-10088`, :cve_nist:`2016-10147`, :cve_nist:`2016-10150`, :cve_nist:`2016-10153`, :cve_nist:`2016-10154`, :cve_nist:`2016-10200`, :cve_nist:`2016-10208`, :cve_nist:`2016-10229`, :cve_nist:`2016-10318`, :cve_nist:`2016-10723`, :cve_nist:`2016-10741`, :cve_nist:`2016-10764`, :cve_nist:`2016-10905`, :cve_nist:`2016-10906`, :cve_nist:`2016-10907`, :cve_nist:`2016-1237`, :cve_nist:`2016-1575`, :cve_nist:`2016-1576`, :cve_nist:`2016-1583`, :cve_nist:`2016-2053`, :cve_nist:`2016-2069`, :cve_nist:`2016-2070`, :cve_nist:`2016-2085`, :cve_nist:`2016-2117`, :cve_nist:`2016-2143`, :cve_nist:`2016-2184`, :cve_nist:`2016-2185`, :cve_nist:`2016-2186`, :cve_nist:`2016-2187`, :cve_nist:`2016-2188`, :cve_nist:`2016-2383`, :cve_nist:`2016-2384`, :cve_nist:`2016-2543`, :cve_nist:`2016-2544`, :cve_nist:`2016-2545`, :cve_nist:`2016-2546`, :cve_nist:`2016-2547`, :cve_nist:`2016-2548`, :cve_nist:`2016-2549`, :cve_nist:`2016-2550`, :cve_nist:`2016-2782`, :cve_nist:`2016-2847`, :cve_nist:`2016-3044`, :cve_nist:`2016-3070`, :cve_nist:`2016-3134`, :cve_nist:`2016-3135`, :cve_nist:`2016-3136`, :cve_nist:`2016-3137`, :cve_nist:`2016-3138`, :cve_nist:`2016-3139`, :cve_nist:`2016-3140`, :cve_nist:`2016-3156`, :cve_nist:`2016-3157`, :cve_nist:`2016-3672`, :cve_nist:`2016-3689`, :cve_nist:`2016-3713`, :cve_nist:`2016-3841`, :cve_nist:`2016-3857`, :cve_nist:`2016-3951`, :cve_nist:`2016-3955`, :cve_nist:`2016-3961`, :cve_nist:`2016-4440`, :cve_nist:`2016-4470`, :cve_nist:`2016-4482`, :cve_nist:`2016-4485`, :cve_nist:`2016-4486`, :cve_nist:`2016-4557`, :cve_nist:`2016-4558`, :cve_nist:`2016-4565`, :cve_nist:`2016-4568`, :cve_nist:`2016-4569`, :cve_nist:`2016-4578`, :cve_nist:`2016-4580`, :cve_nist:`2016-4581`, :cve_nist:`2016-4794`, :cve_nist:`2016-4805`, :cve_nist:`2016-4913`, :cve_nist:`2016-4951`, :cve_nist:`2016-4997`, :cve_nist:`2016-4998`, :cve_nist:`2016-5195`, :cve_nist:`2016-5243`, :cve_nist:`2016-5244`, :cve_nist:`2016-5400`, :cve_nist:`2016-5412`, :cve_nist:`2016-5696`, :cve_nist:`2016-5728`, :cve_nist:`2016-5828`, :cve_nist:`2016-5829`, :cve_nist:`2016-6130`, :cve_nist:`2016-6136`, :cve_nist:`2016-6156`, :cve_nist:`2016-6162`, :cve_nist:`2016-6187`, :cve_nist:`2016-6197`, :cve_nist:`2016-6198`, :cve_nist:`2016-6213`, :cve_nist:`2016-6327`, :cve_nist:`2016-6480`, :cve_nist:`2016-6516`, :cve_nist:`2016-6786`, :cve_nist:`2016-6787`, :cve_nist:`2016-6828`, :cve_nist:`2016-7039`, :cve_nist:`2016-7042`, :cve_nist:`2016-7097`, :cve_nist:`2016-7117`, :cve_nist:`2016-7425`, :cve_nist:`2016-7910`, :cve_nist:`2016-7911`, :cve_nist:`2016-7912`, :cve_nist:`2016-7913`, :cve_nist:`2016-7914`, :cve_nist:`2016-7915`, :cve_nist:`2016-7916`, :cve_nist:`2016-7917`, :cve_nist:`2016-8399`, :cve_nist:`2016-8405`, :cve_nist:`2016-8630`, :cve_nist:`2016-8632`, :cve_nist:`2016-8633`, :cve_nist:`2016-8636`, :cve_nist:`2016-8645`, :cve_nist:`2016-8646`, :cve_nist:`2016-8650`, :cve_nist:`2016-8655`, :cve_nist:`2016-8658`, :cve_nist:`2016-8666`, :cve_nist:`2016-9083`, :cve_nist:`2016-9084`, :cve_nist:`2016-9120`, :cve_nist:`2016-9178`, :cve_nist:`2016-9191`, :cve_nist:`2016-9313`, :cve_nist:`2016-9555`, :cve_nist:`2016-9576`, :cve_nist:`2016-9588`, :cve_nist:`2016-9604`, :cve_nist:`2016-9685`, :cve_nist:`2016-9754`, :cve_nist:`2016-9755`, :cve_nist:`2016-9756`, :cve_nist:`2016-9777`, :cve_nist:`2016-9793`, :cve_nist:`2016-9794`, :cve_nist:`2016-9806`, :cve_nist:`2016-9919`, :cve_nist:`2017-0605`, :cve_nist:`2017-0627`, :cve_nist:`2017-0750`, :cve_nist:`2017-0786`, :cve_nist:`2017-0861`, :cve_nist:`2017-1000`, :cve_nist:`2017-1000111`, :cve_nist:`2017-1000112`, :cve_nist:`2017-1000251`, :cve_nist:`2017-1000252`, :cve_nist:`2017-1000253`, :cve_nist:`2017-1000255`, :cve_nist:`2017-1000363`, :cve_nist:`2017-1000364`, :cve_nist:`2017-1000365`, :cve_nist:`2017-1000370`, :cve_nist:`2017-1000371`, :cve_nist:`2017-1000379`, :cve_nist:`2017-1000380`, :cve_nist:`2017-1000405`, :cve_nist:`2017-1000407`, :cve_nist:`2017-1000410`, :cve_nist:`2017-10661`, :cve_nist:`2017-10662`, :cve_nist:`2017-10663`, :cve_nist:`2017-10810`, :cve_nist:`2017-10911`, :cve_nist:`2017-11089`, :cve_nist:`2017-11176`, :cve_nist:`2017-11472`, :cve_nist:`2017-11473`, :cve_nist:`2017-11600`, :cve_nist:`2017-12134`, :cve_nist:`2017-12146`, :cve_nist:`2017-12153`, :cve_nist:`2017-12154`, :cve_nist:`2017-12168`, :cve_nist:`2017-12188`, :cve_nist:`2017-12190`, :cve_nist:`2017-12192`, :cve_nist:`2017-12193`, :cve_nist:`2017-12762`, :cve_nist:`2017-13080`, :cve_nist:`2017-13166`, :cve_nist:`2017-13167`, :cve_nist:`2017-13168`, :cve_nist:`2017-13215`, :cve_nist:`2017-13216`, :cve_nist:`2017-13220`, :cve_nist:`2017-13305`, :cve_nist:`2017-13686`, :cve_nist:`2017-13695`, :cve_nist:`2017-13715`, :cve_nist:`2017-14051`, :cve_nist:`2017-14106`, :cve_nist:`2017-14140`, :cve_nist:`2017-14156`, :cve_nist:`2017-14340`, :cve_nist:`2017-14489`, :cve_nist:`2017-14497`, :cve_nist:`2017-14954`, :cve_nist:`2017-14991`, :cve_nist:`2017-15102`, :cve_nist:`2017-15115`, :cve_nist:`2017-15116`, :cve_nist:`2017-15121`, :cve_nist:`2017-15126`, :cve_nist:`2017-15127`, :cve_nist:`2017-15128`, :cve_nist:`2017-15129`, :cve_nist:`2017-15265`, :cve_nist:`2017-15274`, :cve_nist:`2017-15299`, :cve_nist:`2017-15306`, :cve_nist:`2017-15537`, :cve_nist:`2017-15649`, :cve_nist:`2017-15868`, :cve_nist:`2017-15951`, :cve_nist:`2017-16525`, :cve_nist:`2017-16526`, :cve_nist:`2017-16527`, :cve_nist:`2017-16528`, :cve_nist:`2017-16529`, :cve_nist:`2017-16530`, :cve_nist:`2017-16531`, :cve_nist:`2017-16532`, :cve_nist:`2017-16533`, :cve_nist:`2017-16534`, :cve_nist:`2017-16535`, :cve_nist:`2017-16536`, :cve_nist:`2017-16537`, :cve_nist:`2017-16538`, :cve_nist:`2017-16643`, :cve_nist:`2017-16644`, :cve_nist:`2017-16645`, :cve_nist:`2017-16646`, :cve_nist:`2017-16647`, :cve_nist:`2017-16648`, :cve_nist:`2017-16649`, :cve_nist:`2017-16650`, :cve_nist:`2017-16911`, :cve_nist:`2017-16912`, :cve_nist:`2017-16913`, :cve_nist:`2017-16914`, :cve_nist:`2017-16939`, :cve_nist:`2017-16994`, :cve_nist:`2017-16995`, :cve_nist:`2017-16996`, :cve_nist:`2017-17052`, :cve_nist:`2017-17053`, :cve_nist:`2017-17448`, :cve_nist:`2017-17449`, :cve_nist:`2017-17450`, :cve_nist:`2017-17558`, :cve_nist:`2017-17712`, :cve_nist:`2017-17741`, :cve_nist:`2017-17805`, :cve_nist:`2017-17806`, :cve_nist:`2017-17807`, :cve_nist:`2017-17852`, :cve_nist:`2017-17853`, :cve_nist:`2017-17854`, :cve_nist:`2017-17855`, :cve_nist:`2017-17856`, :cve_nist:`2017-17857`, :cve_nist:`2017-17862`, :cve_nist:`2017-17863`, :cve_nist:`2017-17864`, :cve_nist:`2017-17975`, :cve_nist:`2017-18017`, :cve_nist:`2017-18075`, :cve_nist:`2017-18079`, :cve_nist:`2017-18174`, :cve_nist:`2017-18193`, :cve_nist:`2017-18200`, :cve_nist:`2017-18202`, :cve_nist:`2017-18203`, :cve_nist:`2017-18204`, :cve_nist:`2017-18208`, :cve_nist:`2017-18216`, :cve_nist:`2017-18218`, :cve_nist:`2017-18221`, :cve_nist:`2017-18222`, :cve_nist:`2017-18224`, :cve_nist:`2017-18232`, :cve_nist:`2017-18241`, :cve_nist:`2017-18249`, :cve_nist:`2017-18255`, :cve_nist:`2017-18257`, :cve_nist:`2017-18261`, :cve_nist:`2017-18270`, :cve_nist:`2017-18344`, :cve_nist:`2017-18360`, :cve_nist:`2017-18379`, :cve_nist:`2017-18509`, :cve_nist:`2017-18549`, :cve_nist:`2017-18550`, :cve_nist:`2017-18551`, :cve_nist:`2017-18552`, :cve_nist:`2017-18595`, :cve_nist:`2017-2583`, :cve_nist:`2017-2584`, :cve_nist:`2017-2596`, :cve_nist:`2017-2618`, :cve_nist:`2017-2634`, :cve_nist:`2017-2636`, :cve_nist:`2017-2647`, :cve_nist:`2017-2671`, :cve_nist:`2017-5123`, :cve_nist:`2017-5546`, :cve_nist:`2017-5547`, :cve_nist:`2017-5548`, :cve_nist:`2017-5549`, :cve_nist:`2017-5550`, :cve_nist:`2017-5551`, :cve_nist:`2017-5576`, :cve_nist:`2017-5577`, :cve_nist:`2017-5669`, :cve_nist:`2017-5715`, :cve_nist:`2017-5753`, :cve_nist:`2017-5754`, :cve_nist:`2017-5897`, :cve_nist:`2017-5967`, :cve_nist:`2017-5970`, :cve_nist:`2017-5972`, :cve_nist:`2017-5986`, :cve_nist:`2017-6001`, :cve_nist:`2017-6074`, :cve_nist:`2017-6214`, :cve_nist:`2017-6345`, :cve_nist:`2017-6346`, :cve_nist:`2017-6347`, :cve_nist:`2017-6348`, :cve_nist:`2017-6353`, :cve_nist:`2017-6874`, :cve_nist:`2017-6951`, :cve_nist:`2017-7184`, :cve_nist:`2017-7187`, :cve_nist:`2017-7261`, :cve_nist:`2017-7273`, :cve_nist:`2017-7277`, :cve_nist:`2017-7294`, :cve_nist:`2017-7308`, :cve_nist:`2017-7346`, :cve_nist:`2017-7374`, :cve_nist:`2017-7472`, :cve_nist:`2017-7477`, :cve_nist:`2017-7482`, :cve_nist:`2017-7487`, :cve_nist:`2017-7495`, :cve_nist:`2017-7518`, :cve_nist:`2017-7533`, :cve_nist:`2017-7541`, :cve_nist:`2017-7542`, :cve_nist:`2017-7558`, :cve_nist:`2017-7616`, :cve_nist:`2017-7618`, :cve_nist:`2017-7645`, :cve_nist:`2017-7889`, :cve_nist:`2017-7895`, :cve_nist:`2017-7979`, :cve_nist:`2017-8061`, :cve_nist:`2017-8062`, :cve_nist:`2017-8063`, :cve_nist:`2017-8064`, :cve_nist:`2017-8065`, :cve_nist:`2017-8066`, :cve_nist:`2017-8067`, :cve_nist:`2017-8068`, :cve_nist:`2017-8069`, :cve_nist:`2017-8070`, :cve_nist:`2017-8071`, :cve_nist:`2017-8072`, :cve_nist:`2017-8106`, :cve_nist:`2017-8240`, :cve_nist:`2017-8797`, :cve_nist:`2017-8824`, :cve_nist:`2017-8831`, :cve_nist:`2017-8890`, :cve_nist:`2017-8924`, :cve_nist:`2017-8925`, :cve_nist:`2017-9059`, :cve_nist:`2017-9074`, :cve_nist:`2017-9075`, :cve_nist:`2017-9076`, :cve_nist:`2017-9077`, :cve_nist:`2017-9150`, :cve_nist:`2017-9211`, :cve_nist:`2017-9242`, :cve_nist:`2017-9605`, :cve_nist:`2017-9725`, :cve_nist:`2017-9984`, :cve_nist:`2017-9985`, :cve_nist:`2017-9986`, :cve_nist:`2018-1000004`, :cve_nist:`2018-1000026`, :cve_nist:`2018-1000028`, :cve_nist:`2018-1000199`, :cve_nist:`2018-1000200`, :cve_nist:`2018-1000204`, :cve_nist:`2018-10021`, :cve_nist:`2018-10074`, :cve_nist:`2018-10087`, :cve_nist:`2018-10124`, :cve_nist:`2018-10322`, :cve_nist:`2018-10323`, :cve_nist:`2018-1065`, :cve_nist:`2018-1066`, :cve_nist:`2018-10675`, :cve_nist:`2018-1068`, :cve_nist:`2018-10840`, :cve_nist:`2018-10853`, :cve_nist:`2018-1087`, :cve_nist:`2018-10876`, :cve_nist:`2018-10877`, :cve_nist:`2018-10878`, :cve_nist:`2018-10879`, :cve_nist:`2018-10880`, :cve_nist:`2018-10881`, :cve_nist:`2018-10882`, :cve_nist:`2018-10883`, :cve_nist:`2018-10901`, :cve_nist:`2018-10902`, :cve_nist:`2018-1091`, :cve_nist:`2018-1092`, :cve_nist:`2018-1093`, :cve_nist:`2018-10938`, :cve_nist:`2018-1094`, :cve_nist:`2018-10940`, :cve_nist:`2018-1095`, :cve_nist:`2018-1108`, :cve_nist:`2018-1118`, :cve_nist:`2018-1120`, :cve_nist:`2018-11232`, :cve_nist:`2018-1128`, :cve_nist:`2018-1129`, :cve_nist:`2018-1130`, :cve_nist:`2018-11412`, :cve_nist:`2018-11506`, :cve_nist:`2018-11508`, :cve_nist:`2018-12126`, :cve_nist:`2018-12127`, :cve_nist:`2018-12130`, :cve_nist:`2018-12207`, :cve_nist:`2018-12232`, :cve_nist:`2018-12233`, :cve_nist:`2018-12633`, :cve_nist:`2018-12714`, :cve_nist:`2018-12896`, :cve_nist:`2018-12904`, :cve_nist:`2018-13053`, :cve_nist:`2018-13093`, :cve_nist:`2018-13094`, :cve_nist:`2018-13095`, :cve_nist:`2018-13096`, :cve_nist:`2018-13097`, :cve_nist:`2018-13098`, :cve_nist:`2018-13099`, :cve_nist:`2018-13100`, :cve_nist:`2018-13405`, :cve_nist:`2018-13406`, :cve_nist:`2018-14609`, :cve_nist:`2018-14610`, :cve_nist:`2018-14611`, :cve_nist:`2018-14612`, :cve_nist:`2018-14613`, :cve_nist:`2018-14614`, :cve_nist:`2018-14615`, :cve_nist:`2018-14616`, :cve_nist:`2018-14617`, :cve_nist:`2018-14619`, :cve_nist:`2018-14625`, :cve_nist:`2018-14633`, :cve_nist:`2018-14634`, :cve_nist:`2018-14641`, :cve_nist:`2018-14646`, :cve_nist:`2018-14656`, :cve_nist:`2018-14678`, :cve_nist:`2018-14734`, :cve_nist:`2018-15471`, :cve_nist:`2018-15572`, :cve_nist:`2018-15594`, :cve_nist:`2018-16276`, :cve_nist:`2018-16597`, :cve_nist:`2018-16658`, :cve_nist:`2018-16862`, :cve_nist:`2018-16871`, :cve_nist:`2018-16880`, :cve_nist:`2018-16882`, :cve_nist:`2018-16884`, :cve_nist:`2018-17182`, :cve_nist:`2018-17972`, :cve_nist:`2018-18021`, :cve_nist:`2018-18281`, :cve_nist:`2018-18386`, :cve_nist:`2018-18397`, :cve_nist:`2018-18445`, :cve_nist:`2018-18559`, :cve_nist:`2018-18690`, :cve_nist:`2018-18710`, :cve_nist:`2018-18955`, :cve_nist:`2018-19406`, :cve_nist:`2018-19407`, :cve_nist:`2018-19824`, :cve_nist:`2018-19854`, :cve_nist:`2018-19985`, :cve_nist:`2018-20169`, :cve_nist:`2018-20449`, :cve_nist:`2018-20509`, :cve_nist:`2018-20510`, :cve_nist:`2018-20511`, :cve_nist:`2018-20669`, :cve_nist:`2018-20784`, :cve_nist:`2018-20836`, :cve_nist:`2018-20854`, :cve_nist:`2018-20855`, :cve_nist:`2018-20856`, :cve_nist:`2018-20961`, :cve_nist:`2018-20976`, :cve_nist:`2018-21008`, :cve_nist:`2018-25015`, :cve_nist:`2018-25020`, :cve_nist:`2018-3620`, :cve_nist:`2018-3639`, :cve_nist:`2018-3646`, :cve_nist:`2018-3665`, :cve_nist:`2018-3693`, :cve_nist:`2018-5332`, :cve_nist:`2018-5333`, :cve_nist:`2018-5344`, :cve_nist:`2018-5390`, :cve_nist:`2018-5391`, :cve_nist:`2018-5703`, :cve_nist:`2018-5750`, :cve_nist:`2018-5803`, :cve_nist:`2018-5814`, :cve_nist:`2018-5848`, :cve_nist:`2018-5873`, :cve_nist:`2018-5953`, :cve_nist:`2018-5995`, :cve_nist:`2018-6412`, :cve_nist:`2018-6554`, :cve_nist:`2018-6555`, :cve_nist:`2018-6927`, :cve_nist:`2018-7191`, :cve_nist:`2018-7273`, :cve_nist:`2018-7480`, :cve_nist:`2018-7492`, :cve_nist:`2018-7566`, :cve_nist:`2018-7740`, :cve_nist:`2018-7754`, :cve_nist:`2018-7755`, :cve_nist:`2018-7757`, :cve_nist:`2018-7995`, :cve_nist:`2018-8043`, :cve_mitre:`2018-8087`, :cve_mitre:`2018-8781`, :cve_mitre:`2018-8822`, :cve_mitre:`2018-8897`, :cve_mitre:`2018-9363`, :cve_mitre:`2018-9385`, :cve_mitre:`2018-9415`, :cve_mitre:`2018-9422`, :cve_mitre:`2018-9465`, :cve_mitre:`2018-9516`, :cve_mitre:`2018-9517`, :cve_mitre:`2018-9518` and :cve_mitre:`2018-9568` +- linux-yocto/6.1 (Continued): Ignore :cve_nist:`2019-0136`, :cve_nist:`2019-0145`, :cve_nist:`2019-0146`, :cve_nist:`2019-0147`, :cve_nist:`2019-0148`, :cve_nist:`2019-0149`, :cve_nist:`2019-0154`, :cve_nist:`2019-0155`, :cve_nist:`2019-10124`, :cve_nist:`2019-10125`, :cve_nist:`2019-10126`, :cve_nist:`2019-10142`, :cve_nist:`2019-10207`, :cve_nist:`2019-10220`, :cve_nist:`2019-10638`, :cve_nist:`2019-10639`, :cve_nist:`2019-11085`, :cve_nist:`2019-11091`, :cve_nist:`2019-11135`, :cve_nist:`2019-11190`, :cve_nist:`2019-11191`, :cve_nist:`2019-1125`, :cve_nist:`2019-11477`, :cve_nist:`2019-11478`, :cve_nist:`2019-11479`, :cve_nist:`2019-11486`, :cve_nist:`2019-11487`, :cve_nist:`2019-11599`, :cve_nist:`2019-11683`, :cve_nist:`2019-11810`, :cve_nist:`2019-11811`, :cve_nist:`2019-11815`, :cve_nist:`2019-11833`, :cve_nist:`2019-11884`, :cve_nist:`2019-12378`, :cve_nist:`2019-12379`, :cve_nist:`2019-12380`, :cve_nist:`2019-12381`, :cve_nist:`2019-12382`, :cve_nist:`2019-12454`, :cve_nist:`2019-12455`, :cve_nist:`2019-12614`, :cve_nist:`2019-12615`, :cve_nist:`2019-12817`, :cve_nist:`2019-12818`, :cve_nist:`2019-12819`, :cve_nist:`2019-12881`, :cve_nist:`2019-12984`, :cve_nist:`2019-13233`, :cve_nist:`2019-13272`, :cve_nist:`2019-13631`, :cve_nist:`2019-13648`, :cve_nist:`2019-14283`, :cve_nist:`2019-14284`, :cve_nist:`2019-14615`, :cve_nist:`2019-14763`, :cve_nist:`2019-14814`, :cve_nist:`2019-14815`, :cve_nist:`2019-14816`, :cve_nist:`2019-14821`, :cve_nist:`2019-14835`, :cve_nist:`2019-14895`, :cve_nist:`2019-14896`, :cve_nist:`2019-14897`, :cve_nist:`2019-14901`, :cve_nist:`2019-15030`, :cve_nist:`2019-15031`, :cve_nist:`2019-15090`, :cve_nist:`2019-15098`, :cve_nist:`2019-15099`, :cve_nist:`2019-15117`, :cve_nist:`2019-15118`, :cve_nist:`2019-15211`, :cve_nist:`2019-15212`, :cve_nist:`2019-15213`, :cve_nist:`2019-15214`, :cve_nist:`2019-15215`, :cve_nist:`2019-15216`, :cve_nist:`2019-15217`, :cve_nist:`2019-15218`, :cve_nist:`2019-15219`, :cve_nist:`2019-15220`, :cve_nist:`2019-15221`, :cve_nist:`2019-15222`, :cve_nist:`2019-15223`, :cve_nist:`2019-15291`, :cve_nist:`2019-15292`, :cve_nist:`2019-15504`, :cve_nist:`2019-15505`, :cve_nist:`2019-15538`, :cve_nist:`2019-15666`, :cve_nist:`2019-15794`, :cve_nist:`2019-15807`, :cve_nist:`2019-15916`, :cve_nist:`2019-15917`, :cve_nist:`2019-15918`, :cve_nist:`2019-15919`, :cve_nist:`2019-15920`, :cve_nist:`2019-15921`, :cve_nist:`2019-15922`, :cve_nist:`2019-15923`, :cve_nist:`2019-15924`, :cve_nist:`2019-15925`, :cve_nist:`2019-15926`, :cve_nist:`2019-15927`, :cve_nist:`2019-16229`, :cve_nist:`2019-16230`, :cve_nist:`2019-16231`, :cve_nist:`2019-16232`, :cve_nist:`2019-16233`, :cve_nist:`2019-16234`, :cve_nist:`2019-16413`, :cve_nist:`2019-16714`, :cve_nist:`2019-16746`, :cve_nist:`2019-16921`, :cve_nist:`2019-16994`, :cve_nist:`2019-16995`, :cve_nist:`2019-17052`, :cve_nist:`2019-17053`, :cve_nist:`2019-17054`, :cve_nist:`2019-17055`, :cve_nist:`2019-17056`, :cve_nist:`2019-17075`, :cve_nist:`2019-17133`, :cve_nist:`2019-17351`, :cve_nist:`2019-17666`, :cve_nist:`2019-18198`, :cve_nist:`2019-18282`, :cve_nist:`2019-18660`, :cve_nist:`2019-18675`, :cve_nist:`2019-18683`, :cve_nist:`2019-18786`, :cve_nist:`2019-18805`, :cve_nist:`2019-18806`, :cve_nist:`2019-18807`, :cve_nist:`2019-18808`, :cve_nist:`2019-18809`, :cve_nist:`2019-18810`, :cve_nist:`2019-18811`, :cve_nist:`2019-18812`, :cve_nist:`2019-18813`, :cve_nist:`2019-18814`, :cve_nist:`2019-18885`, :cve_nist:`2019-19036`, :cve_nist:`2019-19037`, :cve_nist:`2019-19039`, :cve_nist:`2019-19043`, :cve_nist:`2019-19044`, :cve_nist:`2019-19045`, :cve_nist:`2019-19046`, :cve_nist:`2019-19047`, :cve_nist:`2019-19048`, :cve_nist:`2019-19049`, :cve_nist:`2019-19050`, :cve_nist:`2019-19051`, :cve_nist:`2019-19052`, :cve_nist:`2019-19053`, :cve_nist:`2019-19054`, :cve_nist:`2019-19055`, :cve_nist:`2019-19056`, :cve_nist:`2019-19057`, :cve_nist:`2019-19058`, :cve_nist:`2019-19059`, :cve_nist:`2019-19060`, :cve_nist:`2019-19061`, :cve_nist:`2019-19062`, :cve_nist:`2019-19063`, :cve_nist:`2019-19064`, :cve_nist:`2019-19065`, :cve_nist:`2019-19066`, :cve_nist:`2019-19067`, :cve_nist:`2019-19068`, :cve_nist:`2019-19069`, :cve_nist:`2019-19070`, :cve_nist:`2019-19071`, :cve_nist:`2019-19072`, :cve_nist:`2019-19073`, :cve_nist:`2019-19074`, :cve_nist:`2019-19075`, :cve_nist:`2019-19076`, :cve_nist:`2019-19077`, :cve_nist:`2019-19078`, :cve_nist:`2019-19079`, :cve_nist:`2019-19080`, :cve_nist:`2019-19081`, :cve_nist:`2019-19082`, :cve_nist:`2019-19083`, :cve_nist:`2019-19227`, :cve_nist:`2019-19241`, :cve_nist:`2019-19252`, :cve_nist:`2019-19318`, :cve_nist:`2019-19319`, :cve_nist:`2019-19332`, :cve_nist:`2019-19338`, :cve_nist:`2019-19377`, :cve_nist:`2019-19447`, :cve_nist:`2019-19448`, :cve_nist:`2019-19449`, :cve_nist:`2019-19462`, :cve_nist:`2019-19523`, :cve_nist:`2019-19524`, :cve_nist:`2019-19525`, :cve_nist:`2019-19526`, :cve_nist:`2019-19527`, :cve_nist:`2019-19528`, :cve_nist:`2019-19529`, :cve_nist:`2019-19530`, :cve_nist:`2019-19531`, :cve_nist:`2019-19532`, :cve_nist:`2019-19533`, :cve_nist:`2019-19534`, :cve_nist:`2019-19535`, :cve_nist:`2019-19536`, :cve_nist:`2019-19537`, :cve_nist:`2019-19543`, :cve_nist:`2019-19602`, :cve_nist:`2019-19767`, :cve_nist:`2019-19768`, :cve_nist:`2019-19769`, :cve_nist:`2019-19770`, :cve_nist:`2019-19807`, :cve_nist:`2019-19813`, :cve_nist:`2019-19815`, :cve_nist:`2019-19816`, :cve_nist:`2019-19922`, :cve_nist:`2019-19927`, :cve_nist:`2019-19947`, :cve_nist:`2019-19965`, :cve_nist:`2019-19966`, :cve_nist:`2019-1999`, :cve_nist:`2019-20054`, :cve_nist:`2019-20095`, :cve_nist:`2019-20096`, :cve_nist:`2019-2024`, :cve_nist:`2019-2025`, :cve_nist:`2019-20422`, :cve_nist:`2019-2054`, :cve_nist:`2019-20636`, :cve_nist:`2019-20806`, :cve_nist:`2019-20810`, :cve_nist:`2019-20811`, :cve_nist:`2019-20812`, :cve_nist:`2019-20908`, :cve_nist:`2019-20934`, :cve_nist:`2019-2101`, :cve_nist:`2019-2181`, :cve_nist:`2019-2182`, :cve_nist:`2019-2213`, :cve_nist:`2019-2214`, :cve_nist:`2019-2215`, :cve_nist:`2019-25044`, :cve_nist:`2019-25045`, :cve_nist:`2019-3016`, :cve_nist:`2019-3459`, :cve_nist:`2019-3460`, :cve_nist:`2019-3701`, :cve_nist:`2019-3819`, :cve_nist:`2019-3837`, :cve_nist:`2019-3846`, :cve_nist:`2019-3874`, :cve_nist:`2019-3882`, :cve_nist:`2019-3887`, :cve_nist:`2019-3892`, :cve_nist:`2019-3896`, :cve_nist:`2019-3900`, :cve_nist:`2019-3901`, :cve_nist:`2019-5108`, :cve_nist:`2019-6133`, :cve_nist:`2019-6974`, :cve_nist:`2019-7221`, :cve_nist:`2019-7222`, :cve_nist:`2019-7308`, :cve_nist:`2019-8912`, :cve_nist:`2019-8956`, :cve_nist:`2019-8980`, :cve_nist:`2019-9003`, :cve_nist:`2019-9162`, :cve_nist:`2019-9213`, :cve_nist:`2019-9245`, :cve_nist:`2019-9444`, :cve_nist:`2019-9445`, :cve_nist:`2019-9453`, :cve_nist:`2019-9454`, :cve_nist:`2019-9455`, :cve_nist:`2019-9456`, :cve_nist:`2019-9457`, :cve_nist:`2019-9458`, :cve_nist:`2019-9466`, :cve_nist:`2019-9500`, :cve_nist:`2019-9503`, :cve_nist:`2019-9506`, :cve_nist:`2019-9857`, :cve_nist:`2020-0009`, :cve_nist:`2020-0030`, :cve_nist:`2020-0041`, :cve_nist:`2020-0066`, :cve_nist:`2020-0067`, :cve_nist:`2020-0110`, :cve_nist:`2020-0255`, :cve_nist:`2020-0305`, :cve_nist:`2020-0404`, :cve_nist:`2020-0423`, :cve_nist:`2020-0427`, :cve_nist:`2020-0429`, :cve_nist:`2020-0430`, :cve_nist:`2020-0431`, :cve_nist:`2020-0432`, :cve_nist:`2020-0433`, :cve_nist:`2020-0435`, :cve_nist:`2020-0444`, :cve_nist:`2020-0465`, :cve_nist:`2020-0466`, :cve_nist:`2020-0543`, :cve_nist:`2020-10135`, :cve_nist:`2020-10690`, :cve_nist:`2020-10711`, :cve_nist:`2020-10720`, :cve_nist:`2020-10732`, :cve_nist:`2020-10742`, :cve_nist:`2020-10751`, :cve_nist:`2020-10757`, :cve_nist:`2020-10766`, :cve_nist:`2020-10767`, :cve_nist:`2020-10768`, :cve_nist:`2020-10769`, :cve_nist:`2020-10773`, :cve_nist:`2020-10781`, :cve_nist:`2020-10942`, :cve_nist:`2020-11494`, :cve_nist:`2020-11565`, :cve_nist:`2020-11608`, :cve_nist:`2020-11609`, :cve_nist:`2020-11668`, :cve_nist:`2020-11669`, :cve_nist:`2020-11884`, :cve_nist:`2020-12114`, :cve_nist:`2020-12351`, :cve_nist:`2020-12352`, :cve_nist:`2020-12362`, :cve_nist:`2020-12363`, :cve_nist:`2020-12364`, :cve_nist:`2020-12464`, :cve_nist:`2020-12465`, :cve_nist:`2020-12652`, :cve_nist:`2020-12653`, :cve_nist:`2020-12654`, :cve_nist:`2020-12655`, :cve_nist:`2020-12656`, :cve_nist:`2020-12657`, :cve_nist:`2020-12659`, :cve_nist:`2020-12768`, :cve_nist:`2020-12769`, :cve_nist:`2020-12770`, :cve_nist:`2020-12771`, :cve_nist:`2020-12826`, :cve_nist:`2020-12888`, :cve_nist:`2020-12912`, :cve_nist:`2020-13143`, :cve_nist:`2020-13974`, :cve_nist:`2020-14305`, :cve_nist:`2020-14314`, :cve_nist:`2020-14331`, :cve_nist:`2020-14351`, :cve_nist:`2020-14353`, :cve_nist:`2020-14356`, :cve_nist:`2020-14381`, :cve_nist:`2020-14385`, :cve_nist:`2020-14386`, :cve_nist:`2020-14390`, :cve_nist:`2020-14416`, :cve_nist:`2020-15393`, :cve_nist:`2020-15436`, :cve_nist:`2020-15437`, :cve_nist:`2020-15780`, :cve_nist:`2020-15852`, :cve_nist:`2020-16119`, :cve_nist:`2020-16120`, :cve_nist:`2020-16166`, :cve_nist:`2020-1749`, :cve_nist:`2020-24394`, :cve_nist:`2020-24490`, :cve_nist:`2020-24504`, :cve_nist:`2020-24586`, :cve_nist:`2020-24587`, :cve_nist:`2020-24588`, :cve_nist:`2020-25211`, :cve_nist:`2020-25212`, :cve_nist:`2020-25221`, :cve_nist:`2020-25284`, :cve_nist:`2020-25285`, :cve_nist:`2020-25639`, :cve_nist:`2020-25641`, :cve_nist:`2020-25643`, :cve_nist:`2020-25645`, :cve_nist:`2020-25656`, :cve_nist:`2020-25668`, :cve_nist:`2020-25669`, :cve_nist:`2020-25670`, :cve_nist:`2020-25671`, :cve_nist:`2020-25672`, :cve_nist:`2020-25673`, :cve_nist:`2020-25704`, :cve_nist:`2020-25705`, :cve_nist:`2020-26088`, :cve_nist:`2020-26139`, :cve_nist:`2020-26141`, :cve_nist:`2020-26145`, :cve_nist:`2020-26147`, :cve_nist:`2020-26541`, :cve_nist:`2020-26555`, :cve_nist:`2020-26558`, :cve_nist:`2020-27066`, :cve_nist:`2020-27067`, :cve_nist:`2020-27068`, :cve_nist:`2020-27152`, :cve_nist:`2020-27170`, :cve_nist:`2020-27171`, :cve_nist:`2020-27194`, :cve_nist:`2020-2732`, :cve_nist:`2020-27673`, :cve_nist:`2020-27675`, :cve_nist:`2020-27777`, :cve_nist:`2020-27784`, :cve_nist:`2020-27786`, :cve_nist:`2020-27815`, :cve_nist:`2020-27820`, :cve_nist:`2020-27825`, :cve_nist:`2020-27830`, :cve_nist:`2020-27835`, :cve_nist:`2020-28097`, :cve_nist:`2020-28374`, :cve_nist:`2020-28588`, :cve_nist:`2020-28915`, :cve_nist:`2020-28941`, :cve_nist:`2020-28974`, :cve_nist:`2020-29368`, :cve_nist:`2020-29369`, :cve_nist:`2020-29370`, :cve_nist:`2020-29371`, :cve_nist:`2020-29372`, :cve_nist:`2020-29373`, :cve_nist:`2020-29374`, :cve_nist:`2020-29534`, :cve_nist:`2020-29568`, :cve_nist:`2020-29569`, :cve_nist:`2020-29660`, :cve_nist:`2020-29661`, :cve_nist:`2020-35499`, :cve_nist:`2020-35508`, :cve_nist:`2020-35513`, :cve_nist:`2020-35519`, :cve_nist:`2020-36158`, :cve_nist:`2020-36310`, :cve_nist:`2020-36311`, :cve_nist:`2020-36312`, :cve_nist:`2020-36313`, :cve_nist:`2020-36322`, :cve_nist:`2020-36385`, :cve_nist:`2020-36386`, :cve_nist:`2020-36387`, :cve_nist:`2020-36516`, :cve_nist:`2020-36557`, :cve_nist:`2020-36558`, :cve_nist:`2020-36691`, :cve_nist:`2020-36694`, :cve_nist:`2020-36766`, :cve_nist:`2020-3702`, :cve_nist:`2020-4788`, :cve_nist:`2020-7053`, :cve_nist:`2020-8428`, :cve_nist:`2020-8647`, :cve_nist:`2020-8648`, :cve_nist:`2020-8649`, :cve_nist:`2020-8694`, :cve_nist:`2020-8834`, :cve_nist:`2020-8835`, :cve_nist:`2020-8992`, :cve_nist:`2020-9383`, :cve_nist:`2020-9391`, :cve_nist:`2021-0129`, :cve_nist:`2021-0342`, :cve_mitre:`2021-0447`, :cve_mitre:`2021-0448`, :cve_nist:`2021-0512`, :cve_nist:`2021-0605`, :cve_nist:`2021-0707`, :cve_nist:`2021-0920`, :cve_nist:`2021-0929`, :cve_nist:`2021-0935`, :cve_mitre:`2021-0937`, :cve_nist:`2021-0938`, :cve_nist:`2021-0941`, :cve_nist:`2021-1048`, :cve_nist:`2021-20177`, :cve_nist:`2021-20194`, :cve_nist:`2021-20226`, :cve_nist:`2021-20239`, :cve_nist:`2021-20261`, :cve_nist:`2021-20265`, :cve_nist:`2021-20268`, :cve_nist:`2021-20292`, :cve_nist:`2021-20317`, :cve_nist:`2021-20320`, :cve_nist:`2021-20321`, :cve_nist:`2021-20322`, :cve_nist:`2021-21781`, :cve_nist:`2021-22543`, :cve_nist:`2021-22555`, :cve_nist:`2021-22600`, :cve_nist:`2021-23133`, :cve_nist:`2021-23134`, :cve_nist:`2021-26401`, :cve_nist:`2021-26708`, :cve_nist:`2021-26930`, :cve_nist:`2021-26931`, :cve_nist:`2021-26932`, :cve_nist:`2021-27363`, :cve_nist:`2021-27364`, :cve_nist:`2021-27365`, :cve_nist:`2021-28038`, :cve_nist:`2021-28039`, :cve_nist:`2021-28375`, :cve_nist:`2021-28660`, :cve_nist:`2021-28688`, :cve_nist:`2021-28691`, :cve_nist:`2021-28711`, :cve_nist:`2021-28712`, :cve_nist:`2021-28713`, :cve_nist:`2021-28714`, :cve_nist:`2021-28715`, :cve_nist:`2021-28950`, :cve_nist:`2021-28951`, :cve_nist:`2021-28952`, :cve_nist:`2021-28964`, :cve_nist:`2021-28971`, :cve_nist:`2021-28972`, :cve_nist:`2021-29154`, :cve_nist:`2021-29155`, :cve_nist:`2021-29264`, :cve_nist:`2021-29265`, :cve_nist:`2021-29266`, :cve_nist:`2021-29646`, :cve_nist:`2021-29647`, :cve_nist:`2021-29648`, :cve_nist:`2021-29649`, :cve_nist:`2021-29650`, :cve_nist:`2021-29657`, :cve_nist:`2021-30002`, :cve_nist:`2021-30178`, :cve_nist:`2021-31440`, :cve_nist:`2021-3178`, :cve_nist:`2021-31829`, :cve_nist:`2021-31916`, :cve_nist:`2021-32078`, :cve_nist:`2021-32399`, :cve_nist:`2021-32606`, :cve_nist:`2021-33033`, :cve_nist:`2021-33034`, :cve_nist:`2021-33061`, :cve_nist:`2021-33098`, :cve_nist:`2021-33135`, :cve_nist:`2021-33200`, :cve_nist:`2021-3347`, :cve_nist:`2021-3348`, :cve_nist:`2021-33624`, :cve_nist:`2021-33655`, :cve_nist:`2021-33656`, :cve_nist:`2021-33909`, :cve_nist:`2021-3411`, :cve_nist:`2021-3428`, :cve_nist:`2021-3444`, :cve_nist:`2021-34556`, :cve_nist:`2021-34693`, :cve_nist:`2021-3483`, :cve_nist:`2021-34866`, :cve_nist:`2021-3489`, :cve_nist:`2021-3490`, :cve_nist:`2021-3491`, :cve_nist:`2021-3493`, :cve_mitre:`2021-34981`, :cve_nist:`2021-3501`, :cve_nist:`2021-35039`, :cve_nist:`2021-3506`, :cve_nist:`2021-3543`, :cve_nist:`2021-35477`, :cve_nist:`2021-3564`, :cve_nist:`2021-3573`, :cve_nist:`2021-3587`, :cve_mitre:`2021-3600`, :cve_nist:`2021-3609`, :cve_nist:`2021-3612`, :cve_nist:`2021-3635`, :cve_nist:`2021-3640`, :cve_nist:`2021-3653`, :cve_nist:`2021-3655`, :cve_nist:`2021-3656`, :cve_nist:`2021-3659`, :cve_nist:`2021-3669`, :cve_nist:`2021-3679`, :cve_nist:`2021-3715`, :cve_nist:`2021-37159`, :cve_nist:`2021-3732`, :cve_nist:`2021-3736`, :cve_nist:`2021-3739`, :cve_nist:`2021-3743`, :cve_nist:`2021-3744`, :cve_nist:`2021-3752`, :cve_nist:`2021-3753`, :cve_nist:`2021-37576`, :cve_nist:`2021-3759`, :cve_nist:`2021-3760`, :cve_nist:`2021-3764`, :cve_nist:`2021-3772`, :cve_nist:`2021-38160`, :cve_nist:`2021-38166`, :cve_nist:`2021-38198`, :cve_nist:`2021-38199`, :cve_nist:`2021-38200`, :cve_nist:`2021-38201`, :cve_nist:`2021-38202`, :cve_nist:`2021-38203`, :cve_nist:`2021-38204`, :cve_nist:`2021-38205`, :cve_nist:`2021-38206`, :cve_nist:`2021-38207`, :cve_nist:`2021-38208`, :cve_nist:`2021-38209`, :cve_nist:`2021-38300`, :cve_nist:`2021-3894`, :cve_nist:`2021-3896`, :cve_nist:`2021-3923`, :cve_nist:`2021-39633`, :cve_nist:`2021-39634`, :cve_nist:`2021-39636`, :cve_nist:`2021-39648`, :cve_nist:`2021-39656`, :cve_nist:`2021-39657`, :cve_nist:`2021-39685`, :cve_nist:`2021-39686`, :cve_nist:`2021-39698`, :cve_nist:`2021-39711`, :cve_nist:`2021-39713`, :cve_nist:`2021-39714`, :cve_nist:`2021-4001`, :cve_nist:`2021-4002`, :cve_nist:`2021-4023`, :cve_nist:`2021-4028`, :cve_nist:`2021-4032`, :cve_nist:`2021-4037`, :cve_nist:`2021-40490`, :cve_nist:`2021-4083`, :cve_nist:`2021-4090`, :cve_nist:`2021-4093`, :cve_nist:`2021-4095`, :cve_nist:`2021-41073`, :cve_nist:`2021-4135`, :cve_nist:`2021-4148`, :cve_nist:`2021-4149`, :cve_nist:`2021-4150`, :cve_nist:`2021-4154`, :cve_nist:`2021-4155`, :cve_nist:`2021-4157`, :cve_nist:`2021-4159`, :cve_nist:`2021-41864`, :cve_nist:`2021-4197`, :cve_nist:`2021-42008`, :cve_nist:`2021-4202`, :cve_nist:`2021-4203`, :cve_nist:`2021-4204`, :cve_nist:`2021-4218`, :cve_nist:`2021-42252`, :cve_nist:`2021-42327`, :cve_nist:`2021-42739`, :cve_nist:`2021-43056`, :cve_nist:`2021-43057`, :cve_nist:`2021-43267`, :cve_nist:`2021-43389`, :cve_nist:`2021-43975`, :cve_nist:`2021-43976`, :cve_nist:`2021-44733`, :cve_nist:`2021-44879`, :cve_nist:`2021-45095`, :cve_nist:`2021-45100`, :cve_nist:`2021-45402`, :cve_nist:`2021-45469`, :cve_nist:`2021-45480`, :cve_nist:`2021-45485`, :cve_nist:`2021-45486`, :cve_nist:`2021-45868`, :cve_nist:`2021-46283`, :cve_nist:`2022-0001`, :cve_nist:`2022-0002`, :cve_nist:`2022-0168`, :cve_nist:`2022-0171`, :cve_nist:`2022-0185`, :cve_nist:`2022-0264`, :cve_nist:`2022-0286`, :cve_nist:`2022-0322`, :cve_nist:`2022-0330`, :cve_nist:`2022-0382`, :cve_nist:`2022-0433`, :cve_nist:`2022-0435`, :cve_nist:`2022-0480`, :cve_nist:`2022-0487`, :cve_nist:`2022-0492`, :cve_nist:`2022-0494`, :cve_nist:`2022-0500`, :cve_nist:`2022-0516`, :cve_nist:`2022-0617`, :cve_nist:`2022-0644`, :cve_nist:`2022-0646`, :cve_nist:`2022-0742`, :cve_nist:`2022-0812`, :cve_nist:`2022-0847`, :cve_nist:`2022-0850`, :cve_nist:`2022-0854`, :cve_nist:`2022-0995`, :cve_nist:`2022-0998`, :cve_nist:`2022-1011`, :cve_nist:`2022-1012`, :cve_nist:`2022-1015`, :cve_nist:`2022-1016`, :cve_nist:`2022-1043`, :cve_nist:`2022-1048`, :cve_nist:`2022-1055`, :cve_nist:`2022-1158`, :cve_nist:`2022-1184`, :cve_nist:`2022-1195`, :cve_nist:`2022-1198`, :cve_nist:`2022-1199`, :cve_nist:`2022-1204`, :cve_nist:`2022-1205`, :cve_nist:`2022-1263`, :cve_nist:`2022-1280`, :cve_nist:`2022-1353`, :cve_nist:`2022-1419`, :cve_nist:`2022-1462`, :cve_nist:`2022-1508`, :cve_nist:`2022-1516`, :cve_nist:`2022-1651`, :cve_nist:`2022-1652`, :cve_nist:`2022-1671`, :cve_nist:`2022-1678`, :cve_nist:`2022-1679`, :cve_nist:`2022-1729`, :cve_nist:`2022-1734`, :cve_nist:`2022-1786`, :cve_nist:`2022-1789`, :cve_nist:`2022-1836`, :cve_nist:`2022-1852`, :cve_nist:`2022-1882`, :cve_nist:`2022-1943`, :cve_nist:`2022-1966`, :cve_nist:`2022-1972`, :cve_nist:`2022-1973`, :cve_nist:`2022-1974`, :cve_nist:`2022-1975`, :cve_nist:`2022-1976`, :cve_nist:`2022-1998`, :cve_nist:`2022-20008`, :cve_nist:`2022-20132`, :cve_nist:`2022-20141`, :cve_nist:`2022-20148`, :cve_nist:`2022-20153`, :cve_nist:`2022-20154`, :cve_nist:`2022-20158`, :cve_nist:`2022-20166`, :cve_nist:`2022-20368`, :cve_nist:`2022-20369`, :cve_nist:`2022-20409`, :cve_nist:`2022-20421`, :cve_nist:`2022-20422`, :cve_nist:`2022-20423`, :cve_nist:`2022-20424`, :cve_mitre:`2022-20565`, :cve_nist:`2022-20566`, :cve_nist:`2022-20567`, :cve_nist:`2022-20568`, :cve_nist:`2022-20572`, :cve_nist:`2022-2078`, :cve_nist:`2022-21123`, :cve_nist:`2022-21125`, :cve_nist:`2022-21166`, :cve_nist:`2022-21385`, :cve_nist:`2022-21499`, :cve_mitre:`2022-21505`, :cve_nist:`2022-2153`, :cve_nist:`2022-2196`, :cve_mitre:`2022-22942`, :cve_nist:`2022-23036`, :cve_nist:`2022-23037`, :cve_nist:`2022-23038`, :cve_nist:`2022-23039`, :cve_nist:`2022-23040`, :cve_nist:`2022-23041`, :cve_nist:`2022-23042`, :cve_nist:`2022-2308`, :cve_nist:`2022-2318`, :cve_nist:`2022-23222`, :cve_nist:`2022-2327`, :cve_nist:`2022-2380`, :cve_nist:`2022-23816`, :cve_nist:`2022-23960`, :cve_nist:`2022-24122`, :cve_nist:`2022-24448`, :cve_nist:`2022-24958`, :cve_nist:`2022-24959`, :cve_nist:`2022-2503`, :cve_nist:`2022-25258`, :cve_nist:`2022-25375`, :cve_nist:`2022-25636`, :cve_mitre:`2022-2585`, :cve_mitre:`2022-2586`, :cve_mitre:`2022-2588`, :cve_nist:`2022-2590`, :cve_mitre:`2022-2602`, :cve_nist:`2022-26365`, :cve_nist:`2022-26373`, :cve_nist:`2022-2639`, :cve_nist:`2022-26490`, :cve_nist:`2022-2663`, :cve_nist:`2022-26966`, :cve_nist:`2022-27223`, :cve_nist:`2022-27666`, :cve_nist:`2022-27672`, :cve_nist:`2022-2785`, :cve_nist:`2022-27950`, :cve_nist:`2022-28356`, :cve_nist:`2022-28388`, :cve_nist:`2022-28389`, :cve_nist:`2022-28390`, :cve_nist:`2022-2873`, :cve_nist:`2022-28796`, :cve_nist:`2022-28893`, :cve_nist:`2022-2905`, :cve_nist:`2022-29156`, :cve_nist:`2022-2938`, :cve_nist:`2022-29581`, :cve_nist:`2022-29582`, :cve_nist:`2022-2959`, :cve_nist:`2022-2964`, :cve_nist:`2022-2977`, :cve_nist:`2022-2978`, :cve_nist:`2022-29900`, :cve_nist:`2022-29901`, :cve_nist:`2022-2991`, :cve_nist:`2022-29968`, :cve_nist:`2022-3028`, :cve_nist:`2022-30594`, :cve_nist:`2022-3061`, :cve_nist:`2022-3077`, :cve_nist:`2022-3078`, :cve_nist:`2022-3103`, :cve_nist:`2022-3104`, :cve_nist:`2022-3105`, :cve_nist:`2022-3106`, :cve_nist:`2022-3107`, :cve_nist:`2022-3108`, :cve_nist:`2022-3110`, :cve_nist:`2022-3111`, :cve_nist:`2022-3112`, :cve_nist:`2022-3113`, :cve_nist:`2022-3114`, :cve_nist:`2022-3115`, :cve_nist:`2022-3169`, :cve_nist:`2022-3170`, :cve_nist:`2022-3176`, :cve_nist:`2022-3202`, :cve_nist:`2022-32250`, :cve_nist:`2022-32296`, :cve_nist:`2022-3239`, :cve_nist:`2022-32981`, :cve_nist:`2022-3303`, :cve_nist:`2022-3344`, :cve_nist:`2022-33740`, :cve_nist:`2022-33741`, :cve_nist:`2022-33742`, :cve_nist:`2022-33743`, :cve_nist:`2022-33744`, :cve_nist:`2022-33981`, :cve_nist:`2022-3424`, :cve_nist:`2022-3435`, :cve_nist:`2022-34494`, :cve_nist:`2022-34495`, :cve_nist:`2022-34918`, :cve_nist:`2022-3521`, :cve_nist:`2022-3522`, :cve_nist:`2022-3524`, :cve_nist:`2022-3526`, :cve_nist:`2022-3531`, :cve_nist:`2022-3532`, :cve_nist:`2022-3534`, :cve_nist:`2022-3535`, :cve_nist:`2022-3541`, :cve_nist:`2022-3542`, :cve_nist:`2022-3543`, :cve_nist:`2022-3545`, :cve_nist:`2022-3564`, :cve_nist:`2022-3565`, :cve_nist:`2022-3577`, :cve_nist:`2022-3586`, :cve_nist:`2022-3594`, :cve_nist:`2022-3595`, :cve_nist:`2022-36123`, :cve_nist:`2022-3619`, :cve_nist:`2022-3621`, :cve_nist:`2022-3623`, :cve_nist:`2022-3624`, :cve_nist:`2022-3625`, :cve_nist:`2022-3628`, :cve_nist:`2022-36280`, :cve_nist:`2022-3629`, :cve_nist:`2022-3630`, :cve_nist:`2022-3633`, :cve_nist:`2022-3635`, :cve_nist:`2022-3636`, :cve_nist:`2022-3640`, :cve_nist:`2022-3643`, :cve_nist:`2022-3646`, :cve_nist:`2022-3649`, :cve_nist:`2022-36879`, :cve_nist:`2022-36946`, :cve_nist:`2022-3707`, :cve_nist:`2022-38457`, :cve_nist:`2022-3903`, :cve_nist:`2022-3910`, :cve_nist:`2022-39188`, :cve_nist:`2022-39189`, :cve_nist:`2022-39190`, :cve_nist:`2022-3977`, :cve_nist:`2022-39842`, :cve_nist:`2022-40133`, :cve_nist:`2022-40307`, :cve_nist:`2022-40476`, :cve_nist:`2022-40768`, :cve_nist:`2022-4095`, :cve_nist:`2022-40982`, :cve_nist:`2022-41218`, :cve_nist:`2022-41222`, :cve_nist:`2022-4127`, :cve_nist:`2022-4128`, :cve_nist:`2022-4129`, :cve_nist:`2022-4139`, :cve_nist:`2022-41674`, :cve_nist:`2022-41849`, :cve_nist:`2022-41850`, :cve_nist:`2022-41858`, :cve_nist:`2022-42328`, :cve_nist:`2022-42329`, :cve_nist:`2022-42432`, :cve_nist:`2022-4269`, :cve_nist:`2022-42703`, :cve_nist:`2022-42719`, :cve_nist:`2022-42720`, :cve_nist:`2022-42721`, :cve_nist:`2022-42722`, :cve_nist:`2022-42895`, :cve_nist:`2022-42896`, :cve_nist:`2022-43750`, :cve_nist:`2022-4378`, :cve_nist:`2022-4379`, :cve_nist:`2022-4382`, :cve_nist:`2022-43945`, :cve_nist:`2022-45869`, :cve_nist:`2022-45886`, :cve_nist:`2022-45887`, :cve_nist:`2022-45919`, :cve_nist:`2022-45934`, :cve_nist:`2022-4662`, :cve_nist:`2022-4696`, :cve_nist:`2022-4744`, :cve_nist:`2022-47518`, :cve_nist:`2022-47519`, :cve_nist:`2022-47520`, :cve_nist:`2022-47521`, :cve_nist:`2022-47929`, :cve_nist:`2022-47938`, :cve_nist:`2022-47939`, :cve_nist:`2022-47940`, :cve_nist:`2022-47941`, :cve_nist:`2022-47942`, :cve_nist:`2022-47943`, :cve_nist:`2022-47946`, :cve_nist:`2022-4842`, :cve_nist:`2022-48423`, :cve_nist:`2022-48424`, :cve_nist:`2022-48425`, :cve_nist:`2022-48502`, :cve_nist:`2023-0030`, :cve_nist:`2023-0045`, :cve_nist:`2023-0047`, :cve_nist:`2023-0122`, :cve_nist:`2023-0160`, :cve_nist:`2023-0179`, :cve_nist:`2023-0210`, :cve_nist:`2023-0240`, :cve_nist:`2023-0266`, :cve_nist:`2023-0386`, :cve_nist:`2023-0394`, :cve_nist:`2023-0458`, :cve_nist:`2023-0459`, :cve_nist:`2023-0461`, :cve_nist:`2023-0468`, :cve_nist:`2023-0469`, :cve_nist:`2023-0590`, :cve_nist:`2023-0615`, :cve_mitre:`2023-1032`, :cve_nist:`2023-1073`, :cve_nist:`2023-1074`, :cve_nist:`2023-1076`, :cve_nist:`2023-1077`, :cve_nist:`2023-1078`, :cve_nist:`2023-1079`, :cve_nist:`2023-1095`, :cve_nist:`2023-1118`, :cve_nist:`2023-1192`, :cve_nist:`2023-1194`, :cve_nist:`2023-1195`, :cve_nist:`2023-1206`, :cve_nist:`2023-1249`, :cve_nist:`2023-1252`, :cve_nist:`2023-1281`, :cve_nist:`2023-1295`, :cve_nist:`2023-1380`, :cve_nist:`2023-1382`, :cve_nist:`2023-1390`, :cve_nist:`2023-1513`, :cve_nist:`2023-1582`, :cve_nist:`2023-1583`, :cve_nist:`2023-1611`, :cve_nist:`2023-1637`, :cve_nist:`2023-1652`, :cve_nist:`2023-1670`, :cve_nist:`2023-1829`, :cve_nist:`2023-1838`, :cve_nist:`2023-1855`, :cve_nist:`2023-1859`, :cve_nist:`2023-1872`, :cve_nist:`2023-1989`, :cve_nist:`2023-1990`, :cve_nist:`2023-1998`, :cve_nist:`2023-2002`, :cve_nist:`2023-2006`, :cve_nist:`2023-2007`, :cve_nist:`2023-2008`, :cve_nist:`2023-2019`, :cve_nist:`2023-20569`, :cve_nist:`2023-20588`, :cve_nist:`2023-20593`, :cve_nist:`2023-20928`, :cve_nist:`2023-20938`, :cve_nist:`2023-21102`, :cve_nist:`2023-21106`, :cve_nist:`2023-2124`, :cve_nist:`2023-21255`, :cve_nist:`2023-2156`, :cve_nist:`2023-2162`, :cve_nist:`2023-2163`, :cve_nist:`2023-2166`, :cve_nist:`2023-2177`, :cve_nist:`2023-2194`, :cve_nist:`2023-2235`, :cve_nist:`2023-2236`, :cve_nist:`2023-2248`, :cve_nist:`2023-2269`, :cve_nist:`2023-22995`, :cve_nist:`2023-22996`, :cve_nist:`2023-22997`, :cve_nist:`2023-22998`, :cve_nist:`2023-22999`, :cve_nist:`2023-23000`, :cve_nist:`2023-23001`, :cve_nist:`2023-23002`, :cve_nist:`2023-23003`, :cve_nist:`2023-23004`, :cve_nist:`2023-23006`, :cve_nist:`2023-23454`, :cve_nist:`2023-23455`, :cve_nist:`2023-23559`, :cve_nist:`2023-23586`, :cve_nist:`2023-2430`, :cve_nist:`2023-2483`, :cve_nist:`2023-25012`, :cve_nist:`2023-2513`, :cve_nist:`2023-25775`, :cve_nist:`2023-2598`, :cve_nist:`2023-26544`, :cve_nist:`2023-26545`, :cve_nist:`2023-26605`, :cve_nist:`2023-26606`, :cve_nist:`2023-26607`, :cve_nist:`2023-28327`, :cve_nist:`2023-28328`, :cve_nist:`2023-28410`, :cve_nist:`2023-28464`, :cve_nist:`2023-28466`, :cve_nist:`2023-2860`, :cve_nist:`2023-28772`, :cve_nist:`2023-28866`, :cve_nist:`2023-2898`, :cve_nist:`2023-2985`, :cve_nist:`2023-3006`, :cve_nist:`2023-30456`, :cve_nist:`2023-30772`, :cve_nist:`2023-3090`, :cve_nist:`2023-3106`, :cve_nist:`2023-3111`, :cve_nist:`2023-3117`, :cve_nist:`2023-31248`, :cve_nist:`2023-3141`, :cve_nist:`2023-31436`, :cve_nist:`2023-3159`, :cve_nist:`2023-3161`, :cve_nist:`2023-3212`, :cve_nist:`2023-3220`, :cve_nist:`2023-32233`, :cve_nist:`2023-32247`, :cve_nist:`2023-32248`, :cve_nist:`2023-32250`, :cve_nist:`2023-32252`, :cve_nist:`2023-32254`, :cve_nist:`2023-32257`, :cve_nist:`2023-32258`, :cve_nist:`2023-32269`, :cve_nist:`2023-3268`, :cve_nist:`2023-3269`, :cve_nist:`2023-3312`, :cve_nist:`2023-3317`, :cve_nist:`2023-33203`, :cve_nist:`2023-33250`, :cve_nist:`2023-33288`, :cve_nist:`2023-3338`, :cve_nist:`2023-3355`, :cve_nist:`2023-3357`, :cve_nist:`2023-3358`, :cve_nist:`2023-3359`, :cve_nist:`2023-3389`, :cve_nist:`2023-3390`, :cve_nist:`2023-33951`, :cve_nist:`2023-33952`, :cve_nist:`2023-34255`, :cve_nist:`2023-34256`, :cve_nist:`2023-34319`, :cve_nist:`2023-3439`, :cve_nist:`2023-35001`, :cve_nist:`2023-3567`, :cve_nist:`2023-35788`, :cve_nist:`2023-35823`, :cve_nist:`2023-35824`, :cve_nist:`2023-35826`, :cve_nist:`2023-35828`, :cve_nist:`2023-35829`, :cve_nist:`2023-3609`, :cve_nist:`2023-3610`, :cve_nist:`2023-3611`, :cve_nist:`2023-37453`, :cve_nist:`2023-3772`, :cve_nist:`2023-3773`, :cve_nist:`2023-3776`, :cve_nist:`2023-3777`, :cve_nist:`2023-3812`, :cve_nist:`2023-38409`, :cve_nist:`2023-38426`, :cve_nist:`2023-38427`, :cve_nist:`2023-38428`, :cve_nist:`2023-38429`, :cve_nist:`2023-38430`, :cve_nist:`2023-38431`, :cve_nist:`2023-38432`, :cve_nist:`2023-3863`, :cve_mitre:`2023-3865`, :cve_mitre:`2023-3866`, :cve_mitre:`2023-3867`, :cve_nist:`2023-4004`, :cve_nist:`2023-4015`, :cve_nist:`2023-40283`, :cve_nist:`2023-4128`, :cve_nist:`2023-4132`, :cve_nist:`2023-4147`, :cve_nist:`2023-4155`, :cve_nist:`2023-4194`, :cve_nist:`2023-4206`, :cve_nist:`2023-4207`, :cve_nist:`2023-4208`, :cve_nist:`2023-4273`, :cve_nist:`2023-42752`, :cve_nist:`2023-42753`, :cve_nist:`2023-4385`, :cve_nist:`2023-4387`, :cve_nist:`2023-4389`, :cve_nist:`2023-4394`, :cve_nist:`2023-4459`, :cve_nist:`2023-4569`, :cve_nist:`2023-4611` and :cve_nist:`2023-4623` +- nghttp2: Fix :cve_nist:`2023-35945` +- openssl: Fix :cve_nist:`2023-2975`, :cve_nist:`2023-3446`, :cve_nist:`2023-3817`, :cve_nist:`2023-4807` and :cve_nist:`2023-5363` +- pixman: Ignore :cve_nist:`2023-37769` +- procps: Fix :cve_nist:`2023-4016` +- python3-git: Fix :cve_nist:`2023-40267`, :cve_nist:`2023-40590` and :cve_nist:`2023-41040` +- python3-pygments: Fix :cve_nist:`2022-40896` +- python3-urllib3: Fix :cve_nist:`2023-43804` and :cve_nist:`2023-45803` +- python3: Fix :cve_nist:`2023-24329` and :cve_nist:`2023-40217` +- qemu: Fix :cve_nist:`2023-3180`, :cve_nist:`2023-3354` and :cve_nist:`2023-42467` +- qemu: Ignore :cve_nist:`2023-2680` +- screen: Fix :cve_nist:`2023-24626` - shadow: Fix :cve_mitre:`2023-4641` -- tiff: Fix :cve:`2023-40745` and :cve:`2023-41175` -- vim: Fix :cve:`2023-3896`, :cve:`2023-4733`, :cve:`2023-4734`, :cve:`2023-4735`, :cve:`2023-4736`, :cve:`2023-4738`, :cve:`2023-4750`, :cve:`2023-4752`, :cve:`2023-4781`, :cve:`2023-5441` and :cve:`2023-5535` -- webkitgtk: Fix :cve:`2023-32435` and :cve:`2023-32439` -- xserver-xorg: Fix :cve:`2023-5367` and :cve:`2023-5380` +- tiff: Fix :cve_nist:`2023-40745` and :cve_nist:`2023-41175` +- vim: Fix :cve_nist:`2023-3896`, :cve_nist:`2023-4733`, :cve_nist:`2023-4734`, :cve_nist:`2023-4735`, :cve_nist:`2023-4736`, :cve_nist:`2023-4738`, :cve_nist:`2023-4750`, :cve_nist:`2023-4752`, :cve_nist:`2023-4781`, :cve_nist:`2023-5441` and :cve_nist:`2023-5535` +- webkitgtk: Fix :cve_nist:`2023-32435` and :cve_nist:`2023-32439` +- xserver-xorg: Fix :cve_nist:`2023-5367` and :cve_nist:`2023-5380` Fixes in Yocto-4.2.4 diff --git a/poky/documentation/migration-guides/release-notes-4.2.rst b/poky/documentation/migration-guides/release-notes-4.2.rst index 30049b89f6..81a052b413 100644 --- a/poky/documentation/migration-guides/release-notes-4.2.rst +++ b/poky/documentation/migration-guides/release-notes-4.2.rst @@ -348,39 +348,39 @@ The following corrections have been made to the :term:`LICENSE` values set by re Security Fixes in 4.2 ~~~~~~~~~~~~~~~~~~~~~ -- binutils: :cve:`2022-4285`, :cve_mitre:`2023-25586` -- curl: :cve:`2022-32221`, :cve:`2022-35260`, :cve:`2022-42915`, :cve:`2022-42916` -- epiphany: :cve:`2023-26081` -- expat: :cve:`2022-43680` -- ffmpeg: :cve:`2022-3964`, :cve:`2022-3965` -- git: :cve:`2022-39260`, :cve:`2022-41903`, :cve:`2022-23521`, :cve:`2022-41953` (ignored) -- glibc: :cve:`2023-25139` (ignored) -- go: :cve:`2023-24532`, :cve:`2023-24537` -- grub2: :cve:`2022-2601`, :cve:`2022-3775`, :cve_mitre:`2022-28736` -- inetutils: :cve:`2019-0053` -- less: :cve:`2022-46663` -- libarchive: :cve:`2022-36227` -- libinput: :cve:`2022-1215` -- libpam: :cve:`2022-28321` -- libpng: :cve:`2019-6129` -- libx11: :cve:`2022-3554` -- openssh: :cve:`2023-28531` -- openssl: :cve:`2022-3358`, :cve:`2022-3786`, :cve:`2022-3602`, :cve:`2022-3996`, :cve:`2023-0286`, :cve:`2022-4304`, :cve:`2022-4203`, :cve:`2023-0215`, :cve:`2022-4450`, :cve:`2023-0216`, :cve:`2023-0217`, :cve:`2023-0401`, :cve:`2023-0464` -- ppp: :cve:`2022-4603` -- python3-cryptography{-vectors}: :cve:`2022-3602`, :cve:`2022-3786`, :cve:`2023-23931` +- binutils: :cve_nist:`2022-4285`, :cve_mitre:`2023-25586` +- curl: :cve_nist:`2022-32221`, :cve_nist:`2022-35260`, :cve_nist:`2022-42915`, :cve_nist:`2022-42916` +- epiphany: :cve_nist:`2023-26081` +- expat: :cve_nist:`2022-43680` +- ffmpeg: :cve_nist:`2022-3964`, :cve_nist:`2022-3965` +- git: :cve_nist:`2022-39260`, :cve_nist:`2022-41903`, :cve_nist:`2022-23521`, :cve_nist:`2022-41953` (ignored) +- glibc: :cve_nist:`2023-25139` (ignored) +- go: :cve_nist:`2023-24532`, :cve_nist:`2023-24537` +- grub2: :cve_nist:`2022-2601`, :cve_nist:`2022-3775`, :cve_mitre:`2022-28736` +- inetutils: :cve_nist:`2019-0053` +- less: :cve_nist:`2022-46663` +- libarchive: :cve_nist:`2022-36227` +- libinput: :cve_nist:`2022-1215` +- libpam: :cve_nist:`2022-28321` +- libpng: :cve_nist:`2019-6129` +- libx11: :cve_nist:`2022-3554` +- openssh: :cve_nist:`2023-28531` +- openssl: :cve_nist:`2022-3358`, :cve_nist:`2022-3786`, :cve_nist:`2022-3602`, :cve_nist:`2022-3996`, :cve_nist:`2023-0286`, :cve_nist:`2022-4304`, :cve_nist:`2022-4203`, :cve_nist:`2023-0215`, :cve_nist:`2022-4450`, :cve_nist:`2023-0216`, :cve_nist:`2023-0217`, :cve_nist:`2023-0401`, :cve_nist:`2023-0464` +- ppp: :cve_nist:`2022-4603` +- python3-cryptography{-vectors}: :cve_nist:`2022-3602`, :cve_nist:`2022-3786`, :cve_nist:`2023-23931` - python3: :cve_mitre:`2022-37460` -- qemu: :cve:`2022-3165` -- rust: :cve:`2022-46176` -- rxvt-unicode: :cve:`2022-4170` -- screen: :cve:`2023-24626` -- shadow: :cve:`2023-29383`, :cve:`2016-15024` (ignored) -- sudo: :cve:`2022-43995` -- systemd: :cve:`2022-4415` (ignored) -- tar: :cve:`2022-48303` -- tiff: :cve:`2022-3599`, :cve:`2022-3597`, :cve:`2022-3626`, :cve:`2022-3627`, :cve:`2022-3570`, :cve:`2022-3598`, :cve:`2022-3970`, :cve:`2022-48281` -- vim: :cve:`2022-3352`, :cve:`2022-4141`, :cve:`2023-0049`, :cve:`2023-0051`, :cve:`2023-0054`, :cve:`2023-0288`, :cve:`2023-1127`, :cve:`2023-1170`, :cve:`2023-1175`, :cve:`2023-1127`, :cve:`2023-1170`, :cve:`2023-1175`, :cve:`2023-1264`, :cve:`2023-1355`, :cve:`2023-0433`, :cve:`2022-47024`, :cve:`2022-3705` -- xdg-utils: :cve:`2022-4055` -- xserver-xorg: :cve:`2022-3550`, :cve:`2022-3551`, :cve:`2023-1393`, :cve:`2023-0494`, :cve:`2022-3553` (ignored) +- qemu: :cve_nist:`2022-3165` +- rust: :cve_nist:`2022-46176` +- rxvt-unicode: :cve_nist:`2022-4170` +- screen: :cve_nist:`2023-24626` +- shadow: :cve_nist:`2023-29383`, :cve_nist:`2016-15024` (ignored) +- sudo: :cve_nist:`2022-43995` +- systemd: :cve_nist:`2022-4415` (ignored) +- tar: :cve_nist:`2022-48303` +- tiff: :cve_nist:`2022-3599`, :cve_nist:`2022-3597`, :cve_nist:`2022-3626`, :cve_nist:`2022-3627`, :cve_nist:`2022-3570`, :cve_nist:`2022-3598`, :cve_nist:`2022-3970`, :cve_nist:`2022-48281` +- vim: :cve_nist:`2022-3352`, :cve_nist:`2022-4141`, :cve_nist:`2023-0049`, :cve_nist:`2023-0051`, :cve_nist:`2023-0054`, :cve_nist:`2023-0288`, :cve_nist:`2023-1127`, :cve_nist:`2023-1170`, :cve_nist:`2023-1175`, :cve_nist:`2023-1127`, :cve_nist:`2023-1170`, :cve_nist:`2023-1175`, :cve_nist:`2023-1264`, :cve_nist:`2023-1355`, :cve_nist:`2023-0433`, :cve_nist:`2022-47024`, :cve_nist:`2022-3705` +- xdg-utils: :cve_nist:`2022-4055` +- xserver-xorg: :cve_nist:`2022-3550`, :cve_nist:`2022-3551`, :cve_nist:`2023-1393`, :cve_nist:`2023-0494`, :cve_nist:`2022-3553` (ignored) Recipe Upgrades in 4.2 ~~~~~~~~~~~~~~~~~~~~~~ diff --git a/poky/documentation/migration-guides/release-notes-4.3.1.rst b/poky/documentation/migration-guides/release-notes-4.3.1.rst index cea9c538a2..afde1e7942 100644 --- a/poky/documentation/migration-guides/release-notes-4.3.1.rst +++ b/poky/documentation/migration-guides/release-notes-4.3.1.rst @@ -6,14 +6,14 @@ Release notes for Yocto-4.3.1 (Nanbield) Security Fixes in Yocto-4.3.1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- libsndfile1: Fix :cve:`2022-33065` -- libxml2: Ignore :cve:`2023-45322` -- linux-yocto/6.1: Ignore :cve:`2020-27418`, :cve:`2023-31085`, :cve_mitre:`2023-34324`, :cve:`2023-39189`, :cve:`2023-39192`, :cve:`2023-39193`, :cve:`2023-39194`, :cve:`2023-4244`, :cve:`2023-42754`, :cve:`2023-42756`, :cve:`2023-44466`, :cve:`2023-4563`, :cve:`2023-45862`, :cve:`2023-45863`, :cve:`2023-45871`, :cve:`2023-45898`, :cve:`2023-4732`, :cve:`2023-5158`, :cve:`2023-5197` and :cve:`2023-5345` -- linux-yocto/6.5: Ignore :cve:`2020-27418`, :cve:`2023-1193`, :cve:`2023-39191`, :cve:`2023-39194`, :cve:`2023-40791`, :cve:`2023-44466`, :cve:`2023-45862`, :cve:`2023-45863`, :cve:`2023-4610` and :cve:`2023-4732` -- openssl: Fix :cve:`2023-5363` -- pixman: Ignore :cve:`2023-37769` -- vim: Fix :cve:`2023-46246` -- zlib: Ignore :cve:`2023-45853` +- libsndfile1: Fix :cve_nist:`2022-33065` +- libxml2: Ignore :cve_nist:`2023-45322` +- linux-yocto/6.1: Ignore :cve_nist:`2020-27418`, :cve_nist:`2023-31085`, :cve_mitre:`2023-34324`, :cve_nist:`2023-39189`, :cve_nist:`2023-39192`, :cve_nist:`2023-39193`, :cve_nist:`2023-39194`, :cve_nist:`2023-4244`, :cve_nist:`2023-42754`, :cve_nist:`2023-42756`, :cve_nist:`2023-44466`, :cve_nist:`2023-4563`, :cve_nist:`2023-45862`, :cve_nist:`2023-45863`, :cve_nist:`2023-45871`, :cve_nist:`2023-45898`, :cve_nist:`2023-4732`, :cve_nist:`2023-5158`, :cve_nist:`2023-5197` and :cve_nist:`2023-5345` +- linux-yocto/6.5: Ignore :cve_nist:`2020-27418`, :cve_nist:`2023-1193`, :cve_nist:`2023-39191`, :cve_nist:`2023-39194`, :cve_nist:`2023-40791`, :cve_nist:`2023-44466`, :cve_nist:`2023-45862`, :cve_nist:`2023-45863`, :cve_nist:`2023-4610` and :cve_nist:`2023-4732` +- openssl: Fix :cve_nist:`2023-5363` +- pixman: Ignore :cve_nist:`2023-37769` +- vim: Fix :cve_nist:`2023-46246` +- zlib: Ignore :cve_nist:`2023-45853` Fixes in Yocto-4.3.1 diff --git a/poky/documentation/migration-guides/release-notes-4.3.2.rst b/poky/documentation/migration-guides/release-notes-4.3.2.rst index 3a40d83bc2..c32cd83b2a 100644 --- a/poky/documentation/migration-guides/release-notes-4.3.2.rst +++ b/poky/documentation/migration-guides/release-notes-4.3.2.rst @@ -6,19 +6,19 @@ Release notes for Yocto-4.3.2 (Nanbield) Security Fixes in Yocto-4.3.2 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- avahi: Fix :cve:`2023-1981`, :cve:`2023-38469`, :cve:`2023-38470`, :cve:`2023-38471`, :cve:`2023-38472` and :cve:`2023-38473` -- curl: Fix :cve:`2023-46218` -- ghostscript: Fix :cve:`2023-46751` -- grub: fix :cve:`2023-4692` and :cve:`2023-4693` +- avahi: Fix :cve_nist:`2023-1981`, :cve_nist:`2023-38469`, :cve_nist:`2023-38470`, :cve_nist:`2023-38471`, :cve_nist:`2023-38472` and :cve_nist:`2023-38473` +- curl: Fix :cve_nist:`2023-46218` +- ghostscript: Fix :cve_nist:`2023-46751` +- grub: fix :cve_nist:`2023-4692` and :cve_nist:`2023-4693` - gstreamer1.0: Fix :cve_mitre:`2023-44446` -- linux-yocto/6.1: Ignore :cve_mitre:`2023-39197`, :cve:`2023-39198`, :cve:`2023-5090`, :cve:`2023-5633`, :cve:`2023-6111`, :cve:`2023-6121` and :cve:`2023-6176` -- linux-yocto/6.5: Ignore :cve:`2022-44034`, :cve_mitre:`2023-39197`, :cve:`2023-39198`, :cve:`2023-5972`, :cve:`2023-6039`, :cve:`2023-6111` and :cve:`2023-6176` -- perl: fix :cve:`2023-47100` -- python3-urllib3: Fix :cve:`2023-45803` -- rust: Fix :cve:`2023-40030` -- vim: Fix :cve:`2023-48231`, :cve:`2023-48232`, :cve:`2023-48233`, :cve:`2023-48234`, :cve:`2023-48235`, :cve:`2023-48236` and :cve:`2023-48237` -- xserver-xorg: Fix :cve:`2023-5367` and :cve:`2023-5380` -- xwayland: Fix :cve:`2023-5367` +- linux-yocto/6.1: Ignore :cve_mitre:`2023-39197`, :cve_nist:`2023-39198`, :cve_nist:`2023-5090`, :cve_nist:`2023-5633`, :cve_nist:`2023-6111`, :cve_nist:`2023-6121` and :cve_nist:`2023-6176` +- linux-yocto/6.5: Ignore :cve_nist:`2022-44034`, :cve_mitre:`2023-39197`, :cve_nist:`2023-39198`, :cve_nist:`2023-5972`, :cve_nist:`2023-6039`, :cve_nist:`2023-6111` and :cve_nist:`2023-6176` +- perl: fix :cve_nist:`2023-47100` +- python3-urllib3: Fix :cve_nist:`2023-45803` +- rust: Fix :cve_nist:`2023-40030` +- vim: Fix :cve_nist:`2023-48231`, :cve_nist:`2023-48232`, :cve_nist:`2023-48233`, :cve_nist:`2023-48234`, :cve_nist:`2023-48235`, :cve_nist:`2023-48236` and :cve_nist:`2023-48237` +- xserver-xorg: Fix :cve_nist:`2023-5367` and :cve_nist:`2023-5380` +- xwayland: Fix :cve_nist:`2023-5367` Fixes in Yocto-4.3.2 diff --git a/poky/documentation/migration-guides/release-notes-4.3.3.rst b/poky/documentation/migration-guides/release-notes-4.3.3.rst index 2a0658a9c9..d30f4f5c2d 100644 --- a/poky/documentation/migration-guides/release-notes-4.3.3.rst +++ b/poky/documentation/migration-guides/release-notes-4.3.3.rst @@ -6,17 +6,17 @@ Release notes for Yocto-4.3.3 (Nanbield) Security Fixes in Yocto-4.3.3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- curl: Fix :cve:`2023-46219` -- glibc: Ignore fixed :cve:`2023-0687` and :cve:`2023-5156` -- linux-yocto/6.1: Ignore :cve:`2022-48619`, :cve:`2023-4610`, :cve:`2023-5178`, :cve:`2023-5972`, :cve:`2023-6040`, :cve:`2023-6531`, :cve:`2023-6546`, :cve:`2023-6622`, :cve:`2023-6679`, :cve:`2023-6817`, :cve:`2023-6931`, :cve:`2023-6932`, :cve:`2023-7192`, :cve:`2024-0193` and :cve:`2024-0443` -- linux-yocto/6.1: Fix :cve:`2023-1193`, :cve_mitre:`2023-51779`, :cve:`2023-51780`, :cve:`2023-51781`, :cve:`2023-51782` and :cve:`2023-6606` -- qemu: Fix :cve:`2023-3019` -- shadow: Fix :cve:`2023-4641` -- sqlite3: Fix :cve:`2024-0232` -- sqlite3: drop obsolete CVE ignore :cve:`2023-36191` -- sudo: Fix :cve:`2023-42456` and :cve:`2023-42465` -- tiff: Fix :cve:`2023-6277` -- xwayland: Fix :cve:`2023-6377` and :cve:`2023-6478` +- curl: Fix :cve_nist:`2023-46219` +- glibc: Ignore fixed :cve_nist:`2023-0687` and :cve_nist:`2023-5156` +- linux-yocto/6.1: Ignore :cve_nist:`2022-48619`, :cve_nist:`2023-4610`, :cve_nist:`2023-5178`, :cve_nist:`2023-5972`, :cve_nist:`2023-6040`, :cve_nist:`2023-6531`, :cve_nist:`2023-6546`, :cve_nist:`2023-6622`, :cve_nist:`2023-6679`, :cve_nist:`2023-6817`, :cve_nist:`2023-6931`, :cve_nist:`2023-6932`, :cve_nist:`2023-7192`, :cve_nist:`2024-0193` and :cve_nist:`2024-0443` +- linux-yocto/6.1: Fix :cve_nist:`2023-1193`, :cve_mitre:`2023-51779`, :cve_nist:`2023-51780`, :cve_nist:`2023-51781`, :cve_nist:`2023-51782` and :cve_nist:`2023-6606` +- qemu: Fix :cve_nist:`2023-3019` +- shadow: Fix :cve_nist:`2023-4641` +- sqlite3: Fix :cve_nist:`2024-0232` +- sqlite3: drop obsolete CVE ignore :cve_nist:`2023-36191` +- sudo: Fix :cve_nist:`2023-42456` and :cve_nist:`2023-42465` +- tiff: Fix :cve_nist:`2023-6277` +- xwayland: Fix :cve_nist:`2023-6377` and :cve_nist:`2023-6478` Fixes in Yocto-4.3.3 diff --git a/poky/documentation/migration-guides/release-notes-4.3.4.rst b/poky/documentation/migration-guides/release-notes-4.3.4.rst index 4c9e67f2cb..b725ace369 100644 --- a/poky/documentation/migration-guides/release-notes-4.3.4.rst +++ b/poky/documentation/migration-guides/release-notes-4.3.4.rst @@ -6,23 +6,23 @@ Release notes for Yocto-4.3.4 (Nanbield) Security Fixes in Yocto-4.3.4 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- bind: Fix :cve:`2023-4408`, :cve:`2023-5517`, :cve:`2023-5679` and :cve:`2023-50387` -- gcc: Update :term:`CVE_STATUS` for :cve:`2023-4039` as fixed -- glibc: Fix :cve:`2023-6246`, :cve:`2023-6779` and :cve:`2023-6780` -- gnutls: Fix :cve:`2024-0553` and :cve:`2024-0567` +- bind: Fix :cve_nist:`2023-4408`, :cve_nist:`2023-5517`, :cve_nist:`2023-5679` and :cve_nist:`2023-50387` +- gcc: Update :term:`CVE_STATUS` for :cve_nist:`2023-4039` as fixed +- glibc: Fix :cve_nist:`2023-6246`, :cve_nist:`2023-6779` and :cve_nist:`2023-6780` +- gnutls: Fix :cve_nist:`2024-0553` and :cve_nist:`2024-0567` - gstreamer: Fix :cve_mitre:`2024-0444` -- libssh2: fix :cve:`2023-48795` -- libxml2: Fix :cve:`2024-25062` -- linux-yocto/6.1: Fix :cve:`2023-6610`, :cve:`2023-6915`, :cve:`2023-46838`, :cve:`2023-50431`, :cve:`2024-1085`, :cve:`2024-1086` and :cve:`2024-23849` -- linux-yocto/6.1: Ignore :cve:`2021-33630`, :cve:`2021-33631`, :cve:`2022-36402`, :cve:`2023-5717`, :cve:`2023-6200`, :cve:`2023-35827`, :cve:`2023-40791`, :cve:`2023-46343`, :cve:`2023-46813`, :cve:`2023-46862`, :cve:`2023-51042`, :cve:`2023-51043`, :cve_mitre:`2023-52340`, :cve:`2024-0562`, :cve:`2024-0565`, :cve:`2024-0582`, :cve:`2024-0584`, :cve:`2024-0607`, :cve:`2024-0639`, :cve:`2024-0641`, :cve:`2024-0646`, :cve:`2024-0775` and :cve:`2024-22705` -- openssl: fix :cve:`2024-0727` -- python3-jinja2: Fix :cve:`2024-22195` -- tiff: Fix :cve:`2023-6228`, :cve:`2023-52355` and :cve:`2023-52356` -- vim: Fix :cve:`2024-22667` -- wpa-supplicant: Fix :cve:`2023-52160` -- xserver-xorg: Fix :cve:`2023-6377`, :cve:`2023-6478`, :cve:`2023-6816`, :cve:`2024-0229`, :cve:`2024-0408`, :cve:`2024-0409`, :cve:`2024-21885` and :cve:`2024-21886` -- xwayland: Fix :cve:`2023-6816`, :cve:`2024-0408` and :cve:`2024-0409` -- zlib: Ignore :cve:`2023-6992` +- libssh2: fix :cve_nist:`2023-48795` +- libxml2: Fix :cve_nist:`2024-25062` +- linux-yocto/6.1: Fix :cve_nist:`2023-6610`, :cve_nist:`2023-6915`, :cve_nist:`2023-46838`, :cve_nist:`2023-50431`, :cve_nist:`2024-1085`, :cve_nist:`2024-1086` and :cve_nist:`2024-23849` +- linux-yocto/6.1: Ignore :cve_nist:`2021-33630`, :cve_nist:`2021-33631`, :cve_nist:`2022-36402`, :cve_nist:`2023-5717`, :cve_nist:`2023-6200`, :cve_nist:`2023-35827`, :cve_nist:`2023-40791`, :cve_nist:`2023-46343`, :cve_nist:`2023-46813`, :cve_nist:`2023-46862`, :cve_nist:`2023-51042`, :cve_nist:`2023-51043`, :cve_mitre:`2023-52340`, :cve_nist:`2024-0562`, :cve_nist:`2024-0565`, :cve_nist:`2024-0582`, :cve_nist:`2024-0584`, :cve_nist:`2024-0607`, :cve_nist:`2024-0639`, :cve_nist:`2024-0641`, :cve_nist:`2024-0646`, :cve_nist:`2024-0775` and :cve_nist:`2024-22705` +- openssl: fix :cve_nist:`2024-0727` +- python3-jinja2: Fix :cve_nist:`2024-22195` +- tiff: Fix :cve_nist:`2023-6228`, :cve_nist:`2023-52355` and :cve_nist:`2023-52356` +- vim: Fix :cve_nist:`2024-22667` +- wpa-supplicant: Fix :cve_nist:`2023-52160` +- xserver-xorg: Fix :cve_nist:`2023-6377`, :cve_nist:`2023-6478`, :cve_nist:`2023-6816`, :cve_nist:`2024-0229`, :cve_nist:`2024-0408`, :cve_nist:`2024-0409`, :cve_nist:`2024-21885` and :cve_nist:`2024-21886` +- xwayland: Fix :cve_nist:`2023-6816`, :cve_nist:`2024-0408` and :cve_nist:`2024-0409` +- zlib: Ignore :cve_nist:`2023-6992` Fixes in Yocto-4.3.4 @@ -59,7 +59,7 @@ Fixes in Yocto-4.3.4 - docs: use "manual page(s)" - docs: Makefile: remove releases.rst in "make clean" - externalsrc: fix task dependency for do_populate_lic -- glibc: Remove duplicate :term:`CVE_STATUS` for :cve:`2023-4527` +- glibc: Remove duplicate :term:`CVE_STATUS` for :cve_nist:`2023-4527` - glibc: stable 2.38 branch updates (2.38+gitd37c2b20a4) - gnutls: Upgrade to 3.8.3 - gstreamer1.0: skip a test that is known to be flaky diff --git a/poky/documentation/migration-guides/release-notes-4.3.rst b/poky/documentation/migration-guides/release-notes-4.3.rst index 0e175067da..0103ac985e 100644 --- a/poky/documentation/migration-guides/release-notes-4.3.rst +++ b/poky/documentation/migration-guides/release-notes-4.3.rst @@ -295,7 +295,7 @@ New Features / Enhancements in 4.3 - Generation of :term:`SPDX` manifests is now enabled by default. - Git based recipes in OE-Core which used the ``git`` protocol have been - changed to use `https`` where possible, as it is typically faster and + changed to use ``https`` where possible, as it is typically faster and more reliable. - The ``os-release`` recipe added a ``CPE_NAME`` to the fields provided, with the @@ -337,47 +337,47 @@ The following corrections have been made to the :term:`LICENSE` values set by re Security Fixes in 4.3 ~~~~~~~~~~~~~~~~~~~~~ -- bind: :cve:`2023-2911`, :cve:`2023-2828`, :cve:`2023-3341`, :cve:`2023-4236` -- binutils: :cve:`2023-1972` -- connman: :cve:`2023-28488` -- cups: :cve:`2023-32324`, :cve:`2023-34241`, :cve:`2023-4504` -- dbus: :cve:`2023-34969` -- dmidecode: :cve:`2023-30630` -- dropbear: :cve:`2023-36328` -- erofs-utils: :cve:`2023-33551`, :cve:`2023-33552` -- gcc: :cve:`2023-4039` -- ghostscript: :cve:`2023-28879`, :cve:`2023-36664`, :cve:`2023-38559;` ignore :cve:`2023-38560` -- git: :cve:`2023-25652`, :cve:`2023-29007` -- glibc: :cve:`2023-4527`, :cve:`2023-4806` -- go: :cve:`2023-24537`, :cve:`2023-39325` -- gstreamer: :cve:`2023-40475`, :cve:`2023-40476` -- inetutils: :cve:`2023-40303` -- libarchive: ignore :cve:`2023-30571` -- librsvg: :cve:`2023-38633` -- libwebp: :cve:`2023-1999`, :cve:`2023-4863` -- libx11: :cve:`2023-3138`, :cve:`2023-43785`, :cve:`2023-43786`, :cve:`2023-43787` -- libxml2: :cve:`2023-28484`, :cve:`2023-29469;` ignore disputed :cve:`2023-45322` -- libxpm: :cve:`2023-43788`, :cve:`2023-43789`, :cve:`2022-44617` +- bind: :cve_nist:`2023-2911`, :cve_nist:`2023-2828`, :cve_nist:`2023-3341`, :cve_nist:`2023-4236` +- binutils: :cve_nist:`2023-1972` +- connman: :cve_nist:`2023-28488` +- cups: :cve_nist:`2023-32324`, :cve_nist:`2023-34241`, :cve_nist:`2023-4504` +- dbus: :cve_nist:`2023-34969` +- dmidecode: :cve_nist:`2023-30630` +- dropbear: :cve_nist:`2023-36328` +- erofs-utils: :cve_nist:`2023-33551`, :cve_nist:`2023-33552` +- gcc: :cve_nist:`2023-4039` +- ghostscript: :cve_nist:`2023-28879`, :cve_nist:`2023-36664`, :cve_nist:`2023-38559;` ignore :cve_nist:`2023-38560` +- git: :cve_nist:`2023-25652`, :cve_nist:`2023-29007` +- glibc: :cve_nist:`2023-4527`, :cve_nist:`2023-4806` +- go: :cve_nist:`2023-24537`, :cve_nist:`2023-39325` +- gstreamer: :cve_nist:`2023-40475`, :cve_nist:`2023-40476` +- inetutils: :cve_nist:`2023-40303` +- libarchive: ignore :cve_nist:`2023-30571` +- librsvg: :cve_nist:`2023-38633` +- libwebp: :cve_nist:`2023-1999`, :cve_nist:`2023-4863` +- libx11: :cve_nist:`2023-3138`, :cve_nist:`2023-43785`, :cve_nist:`2023-43786`, :cve_nist:`2023-43787` +- libxml2: :cve_nist:`2023-28484`, :cve_nist:`2023-29469;` ignore disputed :cve_nist:`2023-45322` +- libxpm: :cve_nist:`2023-43788`, :cve_nist:`2023-43789`, :cve_nist:`2022-44617` - linux: update CVE exclusions -- ncurses: :cve:`2023-29491` -- nghttp2: :cve:`2023-44487` -- ninja: ignore :cve:`2021-4336`, wrong ninja -- openssh: :cve:`2023-38408` -- openssl: :cve:`2023-2650`, :cve:`2023-1255`, :cve:`2023-0466`, :cve:`2023-0465`, :cve:`2023-0464`, :cve:`2023-3817`, :cve:`2023-3446`, :cve:`2023-2975`, :cve:`2023-4807` -- perl: :cve:`2023-31484`, :cve:`2023-31486` -- pixman: ignore :cve:`2023-37769` -- procps: :cve:`2023-4016` -- python3-git: :cve:`2023-41040` -- python3: ignore :cve:`2023-36632` -- python3-urllib3: :cve:`2023-43804` -- qemu: :cve:`2023-40360`, :cve:`2023-42467;` ignore :cve:`2023-0664` (Windows-specific), ignore :cve:`2023-2680` (RHEL specific) -- screen: :cve:`2023-24626` -- shadow: :cve:`2023-29383` -- sqlite3: ignore :cve:`2023-36191` -- sysstat: :cve:`2023-33204` -- tiff: :cve:`2022-4645`, :cve:`2023-2731`, :cve:`2023-26965`, :cve:`2023-40745`, :cve:`2023-41175` -- vim: :cve:`2023-2426`, :cve:`2023-2609`, :cve:`2023-2610`, :cve:`2023-3896`, :cve:`2023-5441`, :cve:`2023-5535` -- zlib: ignore :cve:`2023-45853` +- ncurses: :cve_nist:`2023-29491` +- nghttp2: :cve_nist:`2023-44487` +- ninja: ignore :cve_nist:`2021-4336`, wrong ninja +- openssh: :cve_nist:`2023-38408` +- openssl: :cve_nist:`2023-2650`, :cve_nist:`2023-1255`, :cve_nist:`2023-0466`, :cve_nist:`2023-0465`, :cve_nist:`2023-0464`, :cve_nist:`2023-3817`, :cve_nist:`2023-3446`, :cve_nist:`2023-2975`, :cve_nist:`2023-4807` +- perl: :cve_nist:`2023-31484`, :cve_nist:`2023-31486` +- pixman: ignore :cve_nist:`2023-37769` +- procps: :cve_nist:`2023-4016` +- python3-git: :cve_nist:`2023-41040` +- python3: ignore :cve_nist:`2023-36632` +- python3-urllib3: :cve_nist:`2023-43804` +- qemu: :cve_nist:`2023-40360`, :cve_nist:`2023-42467;` ignore :cve_nist:`2023-0664` (Windows-specific), ignore :cve_nist:`2023-2680` (RHEL specific) +- screen: :cve_nist:`2023-24626` +- shadow: :cve_nist:`2023-29383` +- sqlite3: ignore :cve_nist:`2023-36191` +- sysstat: :cve_nist:`2023-33204` +- tiff: :cve_nist:`2022-4645`, :cve_nist:`2023-2731`, :cve_nist:`2023-26965`, :cve_nist:`2023-40745`, :cve_nist:`2023-41175` +- vim: :cve_nist:`2023-2426`, :cve_nist:`2023-2609`, :cve_nist:`2023-2610`, :cve_nist:`2023-3896`, :cve_nist:`2023-5441`, :cve_nist:`2023-5535` +- zlib: ignore :cve_nist:`2023-45853` Recipe Upgrades in 4.3 diff --git a/poky/documentation/migration-guides/release-notes-5.0.1.rst b/poky/documentation/migration-guides/release-notes-5.0.1.rst new file mode 100644 index 0000000000..a377f92c19 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.1.rst @@ -0,0 +1,134 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.1 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.1 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Fixes in Yocto-5.0.1 +~~~~~~~~~~~~~~~~~~~~ + +- babeltrace2: upgrade 2.0.5 -> 2.0.6 +- bind: upgrade 9.18.24 -> 9.18.25 +- bitbake: cooker: Use hash client to ping upstream server +- build-appliance-image: Update to scarthgap head revision (b9b47b1a392b...) +- docs: add support for scarthgap 5.0 release +- docs: brief-yoctoprojectqs: explicit version dependency on websockets python module +- docs: brief-yoctoprojectqs: Update to the correct hash equivalence server address +- documentation/poky.yaml.in: drop mesa/sdl from essential host packages +- ell: upgrade 0.63 -> 0.64 +- gcr: upgrade 4.2.0 -> 4.2.1 +- icu: update 74-1 -> 74-2 +- libdnf: upgrade 0.73.0 -> 0.73.1 +- libsdl2: upgrade 2.30.0 -> 2.30.1 +- libx11: upgrade 1.8.7 -> 1.8.9 +- libxcursor: upgrade 1.2.1 -> 1.2.2 +- libxml2: upgrade 2.12.5 -> 2.12.6 +- local.conf.sample: Fix hashequivalence server address +- lttng-tools: upgrade 2.13.11 -> 2.13.13 +- manuals: standards.md: add standard for project names +- mesa: upgrade 24.0.2 -> 24.0.3 +- migration-notes: add release notes for 4.0.18 +- mpg123: upgrade 1.32.5 -> 1.32.6 +- pango: upgrade 1.52.0 -> 1.52.1 +- poky.conf: bump version for 5.0.1 +- python3: skip test_concurrent_futures/test_shutdown +- ref-manual: update releases.svg +- ref-manual: variables: add :term:`USERADD_DEPENDS` +- release-notes-5.0: update Repositories / Downloads section +- release-notes-5.0: update recipes changes +- release-notes-5.0: update new features +- rootfs-postcommands.bbclass: Only set DROPBEAR_RSAKEY_DIR once +- rpm: update 4.19.1 -> 4.19.1.1 +- scripts/oe-setup-build: write a build environment initialization one-liner into the build directory +- sstate.bbclass: Add _SSTATE_EXCLUDEDEPS_SYSROOT to vardepsexclude +- systemd: sed :term:`ROOT_HOME` only if sysusers :term:`PACKAGECONFIG` is set + + +Known Issues in Yocto-5.0.1 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-5.0.1 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Alexander Kanavin +- Christian Bräuner Sørensen +- Joshua Watt +- Lee Chee Yang +- Mark Hatle +- Michael Glembotzki +- Michael Halstead +- Michael Opdenacker +- Paul Eggleton +- Quentin Schulz +- Richard Purdie +- Steve Sakoman +- Trevor Gamblin +- Wang Mingyu + + +Repositories / Downloads for Yocto-5.0.1 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.1 </poky/log/?h=yocto-5.0.1>` +- Git Revision: :yocto_git:`4b07a5316ed4b858863dfdb7cab63859d46d1810 </poky/commit/?id=4b07a5316ed4b858863dfdb7cab63859d46d1810>` +- Release Artefact: poky-4b07a5316ed4b858863dfdb7cab63859d46d1810 +- sha: 51d0c84da7dbcc8db04a674da39cfc73ea78aac22ee646ede5b6229937d4666a +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.1/poky-4b07a5316ed4b858863dfdb7cab63859d46d1810.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.1/poky-4b07a5316ed4b858863dfdb7cab63859d46d1810.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.1 </openembedded-core/log/?h=yocto-5.0.1>` +- Git Revision: :oe_git:`294a7dbe44f6b7c8d3a1de8c2cc182af37c4f916 </openembedded-core/commit/?id=294a7dbe44f6b7c8d3a1de8c2cc182af37c4f916>` +- Release Artefact: oecore-294a7dbe44f6b7c8d3a1de8c2cc182af37c4f916 +- sha: e9be51a3b1fe8a1f420483b912caf91bc429dcca303d462381876a643b73045e +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.1/oecore-294a7dbe44f6b7c8d3a1de8c2cc182af37c4f916.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.1/oecore-294a7dbe44f6b7c8d3a1de8c2cc182af37c4f916.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.1 </meta-mingw/log/?h=yocto-5.0.1>` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.1/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.1/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.1 </bitbake/log/?h=yocto-5.0.1>` +- Git Revision: :oe_git:`8f90d10f9efc9a32e13f6bd031992aece79fe7cc </bitbake/commit/?id=8f90d10f9efc9a32e13f6bd031992aece79fe7cc>` +- Release Artefact: bitbake-8f90d10f9efc9a32e13f6bd031992aece79fe7cc +- sha: 519f02d5de7fbfac411532161d521123814dd9cc7d6b55488b5e7a547c1a6977 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.1/bitbake-8f90d10f9efc9a32e13f6bd031992aece79fe7cc.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.1/bitbake-8f90d10f9efc9a32e13f6bd031992aece79fe7cc.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.1 </yocto-docs/log/?h=yocto-5.0.1>` +- Git Revision: :yocto_git:`875dfe69e93bf8fee3b8c07818a6ac059f228a13 </yocto-docs/commit/?id=875dfe69e93bf8fee3b8c07818a6ac059f228a13>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.10.rst b/poky/documentation/migration-guides/release-notes-5.0.10.rst new file mode 100644 index 0000000000..e9845aa315 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.10.rst @@ -0,0 +1,208 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.10 (Scarthgap) +------------------------------------------ + +Security Fixes in Yocto-5.0.10 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- binutils: Fix :cve_nist:`2025-1153`, :cve_nist:`2025-1179`, :cve_nist:`2025-1180` and + :cve_nist:`2025-1182` +- connman: Fix :cve_nist:`2025-32366` and :cve_nist:`2025-32743` +- curl: Fix :cve_nist:`2024-11053` and :cve_nist:`2025-0167` +- elfutils: Fix :cve_nist:`2025-1371` +- ffmpeg: Fix :cve_nist:`2024-7055`, :cve_nist:`2024-32230`, :cve_nist:`2024-35366`, + :cve_nist:`2024-36613`, :cve_nist:`2024-36616`, :cve_nist:`2024-36617` and :cve_nist:`2024-36619` +- git: Fix :cve_nist:`2024-50349` and :cve_nist:`2024-52006` +- glib-2.0: fix :cve_nist:`2025-3360` and :cve_nist:`2025-4373` +- iputils: Fix :cve_nist:`2025-47268` +- libpam: Fix :cve_nist:`2024-10041` +- libsoup-2.4: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531`, :cve_nist:`2024-52532`, + :cve_nist:`2025-32906`, :cve_nist:`2025-32909`, :cve_nist:`2025-32910`, :cve_nist:`2025-32911`, + :cve_nist:`2025-32912`, :cve_nist:`2025-32913`, :cve_nist:`2025-32914` and :cve_nist:`2025-46420` +- libsoup: Fix :cve_nist:`2025-4476`, :cve_nist:`2025-32906`, :cve_nist:`2025-32909`, + :cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`, :cve_nist:`2025-32913`, + :cve_nist:`2025-32914` and :cve_nist:`2025-46420` +- libxml2: Fix :cve_nist:`2025-32414` and :cve_nist:`2025-32415` +- openssh: Fix :cve_nist:`2025-32728` +- perl: Fix :cve_nist:`2024-56406` +- ppp: Fix :cve_nist:`2024-58250` +- python3-jinja2: Fix :cve_nist:`2024-56201`, :cve_nist:`2024-56326` and :cve_nist:`2025-27516` +- ruby: Fix :cve_nist:`2025-27221` +- sqlite3: Fix :cve_nist:`2025-3277`, :cve_nist:`2025-29087` and :cve_nist:`2025-29088` + + +Fixes in Yocto-5.0.10 +~~~~~~~~~~~~~~~~~~~~~ + +- binutils: stable 2.42 branch updates +- bluez5: add missing tools to noinst-tools package +- bluez5: backport a patch to fix btmgmt -i +- bluez5: make media control a :term:`PACKAGECONFIG` option +- build-appliance-image: Update to scarthgap head revision +- buildtools-tarball: Make buildtools respects host CA certificates +- buildtools-tarball: add envvars into :term:`BB_ENV_PASSTHROUGH_ADDITIONS` +- buildtools-tarball: move setting of envvars to respective envfile +- contributor-guide/submit-changes: encourage patch version changelogs +- cve-check.bbclass: Fix symlink handling also for text files +- cve-update-nvd2-native: Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR" +- dev-manual/sbom.rst: fix wrong build outputs +- docs: Fix dead links that use the :term:`DISTRO` macro +- docs: conf.py: tweak SearchEnglish to be hyphen-friendly +- docs:conf.py: define a manpage url +- ffmpeg: upgrade to 6.1.2 +- git: upgrade to 2.44.3 +- glibc-y2038-tests: remove glibc-y2038-tests_2.39.bb recipe +- glibc: Add single-threaded fast path to rand() +- glibc: stable 2.39 branch updates +- initscripts: add function log_success_msg/log_failure_msg/log_warning_msg +- libatomic-ops: Update :term:`GITHUB_BASE_URI` +- manuals: remove repeated word +- migration-guides: add release notes for 4.0.26, 5.0.8, 5.0.9 +- module.bbclass: add KBUILD_EXTRA_SYMBOLS to install +- perl: upgrade to 5.38.4 +- perlcross: upgrade to 1.6.2 +- poky.conf: bump version for 5.0.10 +- poky.yaml: introduce DISTRO_LATEST_TAG +- python3-jinja2: upgrade to 3.1.6 +- ref-manual/release-process: update releases.svg +- ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference +- ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name +- ref-manual/variables.rst: add manpage links for toolchain variables +- ref-manual/variables.rst: add missing documentation for BUILD_* variables +- ref-manual/variables.rst: document HOST_*_ARCH variables +- ref-manual/variables.rst: document :term:`INHIBIT_DEFAULT_RUST_DEPS` +- ref-manual/variables.rst: document :term:`INHIBIT_UPDATERCD_BBCLASS` +- ref-manual/variables.rst: document :term:`SSTATE_SKIP_CREATION` +- ref-manual/variables.rst: document :term:`WIC_CREATE_EXTRA_ARGS` +- ref-manual/variables.rst: document autotools class related variables +- ref-manual/variables.rst: document missing SDK_*_ARCH variables +- ref-manual/variables.rst: document the :term:`IMAGE_ROOTFS_MAXSIZE` variable +- ref-manual/variables.rst: document the :term:`INITRAMFS_MAXSIZE` variable +- ref-manual/variables.rst: improve the :term:`PKGV` documentation +- ref-manual/variables.rst: update :term:`ROOT_HOME` documentation +- ref-manual: kernel-fitimage.bbclass does not use :term:`SPL_SIGN_KEYNAME` +- scripts/install-buildtools: Update to 5.0.9 +- sphinx-lint: missing space after literal +- sphinx-lint: trailing whitespace +- sphinx-lint: unbalanced inline literal markup +- systemd: Password agents shouldn't be optional +- systemd: upgrade to 255.18 +- test-manual/intro: remove Buildbot version used +- tzdata/tzcode-native: upgrade 2025a -> 2025b +- u-boot: ensure keys are generated before assembling U-Boot FIT image +- util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB +- wic: bootimg-efi: Support + symbol in filenames + + +Known Issues in Yocto-5.0.10 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- There is an issue where the target libsoup-2.4 build may fail if apachectl is present on the build + host. The issue only affects test binaries which aren't actually used. The issue can be fixed by + disabling the tests or updating to more recent changes on the scarthgap branch which fix this. + + +Contributors to Yocto-5.0.10 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Adrian Freihofer +- Aleksandar Nikolic +- Alexander Kanavin +- Alon Bar-Lev +- Alper Ak +- Andrew Kreimer +- Antonin Godard +- Archana Polampalli +- Ashish Sharma +- Changqing Li +- Christos Gavros +- Deepesh Varatharajan +- Divya Chellam +- Divyanshu Rathore +- Enrico Jörns +- Etienne Cordonnier +- Guðni Már Gilbert +- Haixiao Yan +- Harish Sadineni +- Igor Opaniuk +- Jeroen Hofstee +- Lee Chee Yang +- Nguyen Dat Tho +- Niko Mauno +- Peter Marko +- Praveen Kumar +- Priyal Doshi +- Rogerio Guerra Borin +- Shubham Kulkarni +- Soumya Sambu +- Steve Sakoman +- Sunil Dora +- Trevor Woerner +- Vijay Anusuri +- Virendra Thakur +- Vyacheslav Yurkov +- Yi Zhao +- Yogita Urade +- rajmohan r + +Repositories / Downloads for Yocto-5.0.10 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.10 </poky/log/?h=yocto-5.0.10>` +- Git Revision: :yocto_git:`ac257900c33754957b2696529682029d997a8f28 </poky/commit/?id=ac257900c33754957b2696529682029d997a8f28>` +- Release Artefact: poky-ac257900c33754957b2696529682029d997a8f28 +- sha: ddca7e54b331e78214bea65b346320d4fbcddf4b51103bfbbd9fc3960f32cdc7 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/poky-ac257900c33754957b2696529682029d997a8f28.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/poky-ac257900c33754957b2696529682029d997a8f28.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.10 </openembedded-core/log/?h=yocto-5.0.10>` +- Git Revision: :oe_git:`d5342ffc570d47a723b18297d75bd2f63c2088db </openembedded-core/commit/?id=d5342ffc570d47a723b18297d75bd2f63c2088db>` +- Release Artefact: oecore-d5342ffc570d47a723b18297d75bd2f63c2088db +- sha: daa62094f2327f4b3fbcc485e8964d1b86a4722f58fb37e0d8e8e9885094a262 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/oecore-d5342ffc570d47a723b18297d75bd2f63c2088db.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/oecore-d5342ffc570d47a723b18297d75bd2f63c2088db.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.10 </meta-mingw/log/?h=yocto-5.0.10>` +- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>` +- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f +- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.10 </bitbake/log/?h=yocto-5.0.10>` +- Git Revision: :oe_git:`696c2c1ef095f8b11c7d2eff36fae50f58c62e5e </bitbake/commit/?id=696c2c1ef095f8b11c7d2eff36fae50f58c62e5e>` +- Release Artefact: bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e +- sha: fc83f879cd6dd14b9b7eba0161fec23ecc191fed0fb00556ba729dceef6c145f +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.10 </yocto-docs/log/?h=yocto-5.0.10>` +- Git Revision: :yocto_git:`3996388e337377bedc113d072a51fe9d68dd40c6 </yocto-docs/commit/?id=3996388e337377bedc113d072a51fe9d68dd40c6>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.11.rst b/poky/documentation/migration-guides/release-notes-5.0.11.rst new file mode 100644 index 0000000000..5c784344e9 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.11.rst @@ -0,0 +1,219 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.11 (Scarthgap) +------------------------------------------ + +Security Fixes in Yocto-5.0.11 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- binutils: Fix :cve_nist:`2025-5244` and :cve_nist:`2025-5245` +- busybox: Fix :cve_nist:`2022-48174` +- coreutils: Fix :cve_nist:`2025-5278` +- curl: Ignore :cve_nist:`2025-5025` if :term:`PACKAGECONFIG` set with openssl +- ffmpeg: Fix :cve_nist:`2025-1373` +- glibc: fix :cve_nist:`2025-4802` and :cve_nist:`2025-5702` +- gnupg: Fix :cve_nist:`2025-30258` +- go: Fix :cve_nist:`2025-4673` +- go: Ignore :cve_nist:`2024-3566` +- icu: Fix :cve_nist:`2025-5222` +- kea: Fix :cve_nist:`2025-32801`, :cve_nist:`2025-32802` and :cve_nist:`2025-32803` +- libarchive: fix :cve_nist:`2025-5914`, :cve_nist:`2025-5915`, :cve_nist:`2025-5916`, + :cve_nist:`2025-5917` and :cve_nist:`2025-5918` +- libsoup-2.4: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4945`, + :cve_nist:`2025-4948`, :cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32052`, + :cve_nist:`2025-32053`, :cve_nist:`2025-32907` and :cve_nist:`2025-46421` +- libsoup-3.4: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4945`, :cve_nist:`2025-4948`, + :cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32051`, :cve_nist:`2025-32052`, + :cve_nist:`2025-32053`, :cve_nist:`2025-32907`, :cve_nist:`2025-32908` and :cve_nist:`2025-46421` +- libxml2: Fix :cve_nist:`2025-6021` +- linux-yocto-6.6: Fix :cve_nist:`2025-21995`, :cve_nist:`2025-21996`, :cve_nist:`2025-21997`, + :cve_nist:`2025-21999`, :cve_nist:`2025-22001`, :cve_nist:`2025-22003`, :cve_nist:`2025-22004`, + :cve_nist:`2025-22005`, :cve_nist:`2025-22007`, :cve_nist:`2025-22009`, :cve_nist:`2025-22010`, + :cve_nist:`2025-22014`, :cve_nist:`2025-22018`, :cve_nist:`2025-22020`, :cve_nist:`2025-22027`, + :cve_nist:`2025-22033`, :cve_nist:`2025-22035`, :cve_nist:`2025-22038`, :cve_nist:`2025-22040`, + :cve_nist:`2025-22041`, :cve_nist:`2025-22054`, :cve_nist:`2025-22056`, :cve_nist:`2025-22063`, + :cve_nist:`2025-22066`, :cve_nist:`2025-22080`, :cve_nist:`2025-22081`, :cve_nist:`2025-22088`, + :cve_nist:`2025-22097`, :cve_nist:`2025-23136`, :cve_nist:`2025-37785`, :cve_nist:`2025-37800`, + :cve_nist:`2025-37801`, :cve_nist:`2025-37803`, :cve_nist:`2025-37805`, :cve_nist:`2025-37838`, + :cve_nist:`2025-37893`, :cve_nist:`2025-38152`, :cve_nist:`2025-39728` and :cve_nist:`2025-39735` +- net-tools: Fix :cve_nist:`2025-46836` +- python3-setuptools: Fix :cve_nist:`2025-47273` +- python3-requests: fix :cve_nist:`2024-47081` +- python3-urllib3: Fix :cve_nist:`2025-50181` +- python3: Fix CVE 2024-12718 CVE 2025-4138 CVE 2025-4330 CVE 2025-4435 :cve_nist:`2025-4516` CVE + 2025-4517 +- screen: fix :cve_nist:`2025-46802`, :cve_nist:`2025-46804` and :cve_nist:`2025-46805` +- sudo: Fix :cve_nist:`2025-32462` +- xwayland: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`, + :cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180` + + +Fixes in Yocto-5.0.11 +~~~~~~~~~~~~~~~~~~~~~ + +- bitbake: ast: Change deferred inherits to happen per recipe +- bitbake: fetch2: Avoid deprecation warning +- bitbake: gcp.py: remove slow calls to gsutil stat +- bitbake: toaster/tests/buildtest: Switch to new CDN +- brief-yoctoprojectqs/ref-manual: Switch to new CDN +- bsp-guide: update kernel version example to 6.12 +- bsp-guide: update all of section 1.8.2 to reflect current beaglebone conf file +- bsp-guide: update lonely "4.12" kernel reference to "6.12" +- build-appliance-image: Update to scarthgap head revision +- cmake: Correctly handle cost data of tests with arbitrary chars in name +- conf.py: improve SearchEnglish to handle terms with dots +- docs: Clean up explanation of minimum required version numbers +- docs: README: specify how to contribute instead of pointing at another file +- docs: conf.py: silence SyntaxWarning on js_splitter_code +- gcc: Upgrade to GCC 13.4 +- ghostscript: upgrade to 10.05.1 +- glibc: stable 2.39 branch updates (06a70769fd...) +- gnupg: update to 2.4.8 +- gtk+: add missing libdrm dependency +- kea: upgrade to 2.4.2 +- libpng: Add ptest +- libsoup-2.4: fix do_compile failure +- linux-yocto/6.6: fix beaglebone ethernet +- linux-yocto/6.6: update to v6.6.96 +- local.conf.sample: Switch to new CDN +- ltp: backport patch to fix compilation error for x86_64 +- migration-guides: add release notes for 4.0.27, 4.0.28, 5.0.10 +- minicom: correct the :term:`SRC_URI` +- nfs-utils: don't use signals to shut down nfs server. +- overview-manual/concepts.rst: fix sayhello hardcoded bindir +- overview-manual: small number of pedantic cleanups +- package: export debugsources in :term:`PKGDESTWORK` as json +- poky.conf: bump version for 5.0.11 +- python3-requests: upgrade to 2.32.4 +- python3: upgrade to 3.12.11 +- ref-manual: clarify :term:`KCONFIG_MODE` default behaviour +- ref-manual: classes: nativesdk: move note to appropriate section +- ref-manual: classes: reword to clarify that native/nativesdk options are exclusive +- ref-manual: document :term:`KERNEL_SPLIT_MODULES` variable +- scripts/install-buildtools: Update to 5.0.10 +- spdx: add option to include only compiled sources +- sstatetests: Switch to new CDN +- systemd: Rename systemd_v255.21 to systemd_255.21 +- systemd: upgrade to 255.21 +- tcf-agent: correct the :term:`SRC_URI` +- testimage: get real os-release file +- tune-cortexr52: Remove aarch64 for ARM Cortex-R52 +- uboot: Allow for customizing installed/deployed file names + + +Known Issues in Yocto-5.0.11 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.0.11 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: +- Aleksandar Nikolic +- Andrew Fernandes +- Antonin Godard +- Archana Polampalli +- Ashish Sharma +- Bruce Ashfield +- Carlos Sánchez de La Lama +- Changqing Li +- Chen Qi +- Colin Pinnell McAllister +- Daniel Turull +- Deepesh Varatharajan +- Divya Chellam +- Dixit Parmar +- Enrico Jörns +- Etienne Cordonnier +- Guocai He +- Guðni Már Gilbert +- Hitendra Prajapati +- Jiaying Song +- Lee Chee Yang +- Moritz Haase +- NeilBrown +- Peter Marko +- Poonam Jadhav +- Praveen Kumar +- Preeti Sachan +- Quentin Schulz +- Richard Purdie +- Robert P. J. Day +- Roland Kovacs +- Ryan Eatmon +- Sandeep Gundlupet Raju +- Savvas Etairidis +- Steve Sakoman +- Victor Giraud +- Vijay Anusuri +- Virendra Thakur +- Wang Mingyu +- Yogita Urade + + +Repositories / Downloads for Yocto-5.0.11 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.11 </poky/log/?h=yocto-5.0.11>` +- Git Revision: :yocto_git:`ae2d52758fc2fcb0ed996aa234430464ebf4b310 </poky/commit/?id=ae2d52758fc2fcb0ed996aa234430464ebf4b310>` +- Release Artefact: poky-ae2d52758fc2fcb0ed996aa234430464ebf4b310 +- sha: 48dec434dd51e5c9c626abdccc334da300fa2b4975137d526f5df6703e5a930e +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/poky-ae2d52758fc2fcb0ed996aa234430464ebf4b310.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/poky-ae2d52758fc2fcb0ed996aa234430464ebf4b310.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.11 </openembedded-core/log/?h=yocto-5.0.11>` +- Git Revision: :oe_git:`7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b </openembedded-core/commit/?id=7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b>` +- Release Artefact: oecore-7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b +- sha: fb50992a28298915fe195e327628d6d5872fd2dbc74189c2d840178cd860bb2e +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/oecore-7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/oecore-7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.11 </meta-mingw/log/?h=yocto-5.0.11>` +- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>` +- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f +- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.11 </bitbake/log/?h=yocto-5.0.11>` +- Git Revision: :oe_git:`139f61fe9eec221745184a14b3618d2dfa650b91 </bitbake/commit/?id=139f61fe9eec221745184a14b3618d2dfa650b91>` +- Release Artefact: bitbake-139f61fe9eec221745184a14b3618d2dfa650b91 +- sha: 86669d4220c50d35c0703f151571954ad9c6285cc91a870afbb878d2e555d2ca +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/bitbake-139f61fe9eec221745184a14b3618d2dfa650b91.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/bitbake-139f61fe9eec221745184a14b3618d2dfa650b91.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`scarthgap </meta-yocto/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.11 </meta-yocto/log/?h=yocto-5.0.11>` +- Git Revision: :yocto_git:`50e5c0d85d3775ac1294bdcd7f11deaa382c9d08 </meta-yocto/commit/?id=50e5c0d85d3775ac1294bdcd7f11deaa382c9d08>` + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.11 </yocto-docs/log/?h=yocto-5.0.11>` +- Git Revision: :yocto_git:`3f88cb85cca8f9128cfaab36882c4563457b03d9 </yocto-docs/commit/?id=3f88cb85cca8f9128cfaab36882c4563457b03d9>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.12.rst b/poky/documentation/migration-guides/release-notes-5.0.12.rst new file mode 100644 index 0000000000..79acff0c79 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.12.rst @@ -0,0 +1,184 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.12 (Scarthgap) +------------------------------------------ + +Security Fixes in Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- avahi: Fix :cve_nist:`2024-52615` +- binutils: Fix :cve_nist:`2025-7545` and :cve_nist:`2025-7546` +- busybox: Fix :cve_nist:`2023-39810` +- dropbear: Fix :cve_nist:`2025-47203` +- gdk-pixbuf: Fix :cve_nist:`2025-7345` +- git: Fix :cve_nist:`2025-27613`, :cve_nist:`2025-27614`, :cve_nist:`2025-46334`, + :cve_nist:`2025-46835`, :cve_nist:`2025-48384`, :cve_nist:`2025-48385` and :cve_nist:`2025-48386` +- glib-2.0: Ignore :cve_nist:`2025-4056` +- glibc: Fix :cve_nist:`2025-8058` +- gnutls: Fix :cve_nist:`2025-6395`, :cve_nist:`2025-32988`, :cve_nist:`2025-32989` and + :cve_nist:`2025-32990` +- go: Ignore :cve_nist:`2025-0913` +- gstreamer1.0-plugins-base: Fix :cve_nist:`2025-47806` and :cve_nist:`2025-47808` +- gstreamer1.0-plugins-good: Fix :cve_nist:`2025-47183` and :cve_nist:`2025-47219` +- iputils: Fix :cve_nist:`2025-48964` +- libpam: Fix :cve_nist:`2025-6020` +- libxml2: Fix :cve_nist:`2025-6170`, :cve_nist:`2025-49794`, :cve_nist:`2025-49795` and + :cve_nist:`2025-49796` +- libxml2: Ignore :cve_nist:`2025-8732` +- ncurses: Fix :cve_nist:`2025-6141` +- openssl: Fix :cve_nist:`2024-41996` and :cve_nist:`2025-27587` +- python3: Fix :cve_nist:`2025-8194` +- sqlite3: Fix :cve_nist:`2025-6965` +- sudo: Fix :cve_nist:`2025-32463` +- xserver-xorg: Fix :cve_nist:`2022-49737`, :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, + :cve_nist:`2025-49177`, :cve_nist:`2025-49178`, :cve_nist:`2025-49179`, :cve_nist:`2025-49180` + and :cve_nist:`2025-49176` +- xz: Ignore :cve_nist:`2024-47611` + + +Fixes in Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~ + +- bash: Stick to C17 std +- bash: use -std=gnu17 also for native :term:`CFLAGS` +- binutils: stable 2.42 branch updates +- bitbake: bitbake: runqueue: Verify mcdepends are valid +- bitbake: test/fetch: Switch u-boot based test to use our own mirror +- bitbake: utils: Optimise signal/sigmask performance +- build-appliance-image: Update to scarthgap head revision +- cairo: fix build with gcc-15 on host +- cmake: Add :term:`PACKAGECONFIG` option for debugger support +- cve-check: Add missing call to exit_if_errors +- dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart +- e2fsprogs: Fix build failure with gcc 15 +- git: Upgrade to 2.44.4 +- glibc: stable 2.39 branch updates +- gnutls: patch read buffer overrun in the "pre_shared_key" extension +- gnutls: patch reject zero-length version in certificate request +- go-helloworld: fix license +- kea: set correct permissions for /var/run/kea +- linux-libc-headers: Fix invalid conversion in cn_proc.h +- migration-guides: add release notes for 5.0.11 +- mtools: upgrade to 4.0.49 +- oe-debuginfod: add option for data storage +- orc: set :term:`CVE_PRODUCT` +- overview-manual/yp-intro.rst: fix broken link to article +- parted: Fix build with GCC 15 +- poky.conf: bump version for 5.0.12 +- python3: update CVE product +- ref-manual/classes.rst: document the testexport class +- ref-manual/system-requirements.rst: update supported distributions +- ref-manual/variables.rst: document :term:`SPL_DTB_BINARY` :term:`FIT_CONF_PREFIX` variable +- scripts/install-buildtools: Update to 5.0.11 +- sudo: upgrade to 1.9.17p1 +- timedated: wait for jobs before SetNTP response +- variables.rst: remove references to obsolete tar packaging +- xserver-xorg: upgrade to 21.1.18 + + +Known Issues in Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: +- Aleksandar Nikolic +- Alexander Kanavin +- Antonin Godard +- Archana Polampalli +- Daniel Turull +- Deepesh Varatharajan +- Erik Lindsten +- Fabio Berton +- Hitendra Prajapati +- Jinfeng Wang +- Joe Slater +- Khem Raj +- Lee Chee Yang +- Marco Cavallini +- Mark Hatle +- Martin Jansa +- Michal Seben +- Nikhil R +- Peter Marko +- Philip Lorenz +- Praveen Kumar +- Quentin Schulz +- Richard Purdie +- Robert P. J. Day +- Roland Kovacs +- Steve Sakoman +- Vijay Anusuri +- Wang Mingyu +- Yash Shinde +- Yi Zhao +- Zhang Peng + +Repositories / Downloads for Yocto-5.0.12 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.12 </poky/log/?h=yocto-5.0.12>` +- Git Revision: :yocto_git:`ec220ae083dba35c279192b2249ad03fe238446e </poky/commit/?id=ec220ae083dba35c279192b2249ad03fe238446e>` +- Release Artefact: poky-ec220ae083dba35c279192b2249ad03fe238446e +- sha: a5f8c2ad491c59d0bdfb85f46a136b0ee66cfdd4359ab1ab9dac2430d0a52c17 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.12 </openembedded-core/log/?h=yocto-5.0.12>` +- Git Revision: :oe_git:`93c7489d843a0e46fe4fc685b356d0ae885300d7 </openembedded-core/commit/?id=93c7489d843a0e46fe4fc685b356d0ae885300d7>` +- Release Artefact: oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7 +- sha: 49695592179cd777eee337d922aae354dad4ab503628f0344b1b53329900c4d9 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.12 </meta-mingw/log/?h=yocto-5.0.12>` +- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>` +- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f +- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.12 </bitbake/log/?h=yocto-5.0.12>` +- Git Revision: :oe_git:`982645110a19ebb94d519926a4e14c8a2a205cfd </bitbake/commit/?id=982645110a19ebb94d519926a4e14c8a2a205cfd>` +- Release Artefact: bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd +- sha: f8d777d322b8f05372d7ce75c67df2db2b7de3f64d5b7769b8051c507161245d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2 + +meta-yocto + +- Repository Location: :yocto_git:`/meta-yocto` +- Branch: :yocto_git:`scarthgap </meta-yocto/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.12 </meta-yocto/log/?h=yocto-5.0.12>` +- Git Revision: :yocto_git:`82602cda1a89644d1acbe230a81c93e3fb5031c8 </meta-yocto/commit/?id=82602cda1a89644d1acbe230a81c93e3fb5031c8>` + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.12 </yocto-docs/log/?h=yocto-5.0.12>` +- Git Revision: :yocto_git:`dd665216fa578a1f2f268790d708c6a5d2912ecf </yocto-docs/commit/?id=dd665216fa578a1f2f268790d708c6a5d2912ecf>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.2.rst b/poky/documentation/migration-guides/release-notes-5.0.2.rst new file mode 100644 index 0000000000..b60fd73190 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.2.rst @@ -0,0 +1,245 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.2 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.2 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- cups: Fix :cve_nist:`2024-35235` +- gcc: Fix :cve_nist:`2024-0151` +- gdk-pixbuf: Fix :cve_nist:`2022-48622` +- ghostscript: fix :cve_mitre:`2024-29510`, :cve_mitre:`2024-33869`, :cve_mitre:`2024-33870` and :cve_mitre:`2024-33871` +- git: Fix :cve_nist:`2024-32002`, :cve_nist:`2024-32004`, :cve_nist:`2024-32020`, :cve_nist:`2024-32021` and :cve_nist:`2024-32465` +- glib-2.0: Fix :cve_nist:`2024-34397` +- glibc: Fix :cve_nist:`2024-2961`, :cve_nist:`2024-33599`, :cve_nist:`2024-33600`, :cve_nist:`2024-33601` and :cve_nist:`2024-33602` +- ncurses: Fix :cve_nist:`2023-45918` and :cve_nist:`2023-50495` +- openssl: Fix :cve_nist:`2024-4603` and :cve_mitre:`2024-4741` +- util-linux: Fix :cve_nist:`2024-28085` +- xserver-xorg: Fix :cve_nist:`2024-31080`, :cve_nist:`2024-31081`, :cve_nist:`2024-31082` and :cve_nist:`2024-31083` + + +Fixes in Yocto-5.0.2 +~~~~~~~~~~~~~~~~~~~~ + +- appstream: Upgrade to 1.0.3 +- apr: submit 0001-Add-option-to-disable-timed-dependant-tests.patch upstream +- base-files: profile: fix error sh: 1: unknown operand +- bash: Fix file-substitution error-handling bug +- bash: mark build-tests.patch as Inappropriate +- binutils: Fix aarch64 disassembly abort +- bitbake: bb: Use namedtuple for Task data +- bitbake: cooker: Handle ImportError for websockets +- bitbake: fetch2/gcp: Add missing runfetchcmd import +- bitbake: fetch2/wget: Canonicalize :term:`DL_DIR` paths for wget2 compatibility +- bitbake: fetch2/wget: Fix failure path for files that are empty or don't exist +- bitbake: hashserv: client: Add batch stream API +- bitbake: parse: Improve/fix cache invalidation via mtime +- bitbake: runqueue: Add timing warnings around slow loops +- bitbake: runqueue: Allow rehash loop to exit in case of interrupts +- bitbake: runqueue: Improve rehash get_unihash parallelism +- bitbake: runqueue: Process unihashes in parallel at init +- bitbake: siggen/runqueue: Report which dependencies affect the taskhash +- bitbake: siggen: Enable batching of unihash queries +- bitbake: tests/fetch: Tweak test to match upstream repo url change +- bitbake: tests/fetch: Tweak to work on Fedora40 +- build-appliance-image: Update to scarthgap head revision +- busybox: update :cve_nist:`2022-28391` patches upstream status +- cdrtools-native: Fix build with GCC 14 +- classes: image_types: apply EXTRA_IMAGECMD:squashfs* in oe_mksquashfs() +- classes: image_types: quote variable assignment needed by dash +- consolekit: Disable incompatible-pointer-types warning as error +- cracklib: Modify patch to compile with GCC 14 +- cronie: Upgrade to 1.7.2 +- cups: Upgrade to 2.4.9 +- db: ignore implicit-int and implicit-function-declaration issues fatal with gcc-14 +- devtool: modify: Catch git submodule error for go code +- devtool: standard: update-recipe/finish: fix update localfile in another layer +- devtool: sync: Fix Execution error +- expect: ignore various issues now fatal with gcc-14 +- expect: mark patches as Inactive-Upstream +- gawk: fix readline detection +- gcc : Upgrade to v13.3 +- gcc-runtime: libgomp fix for gcc 14 warnings with mandb selftest +- gdk-pixbuf: Upgrade to 2.42.12 +- git: set --with-gitconfig=/etc/gitconfig for -native builds +- git: Upgrade to 2.44.1 +- glib-2.0: Upgrade to 2.78.6 +- glibc: Update to latest on stable 2.39 branch (273a835fe7...) +- glibc: correct :term:`LICENSE` to "GPL-2.0-only & LGPL-2.1-or-later" +- go: Drop the linkmode completely +- goarch: Revert "disable dynamic linking globally" +- gstreamer1.0-plugins-good: Include qttools-native during the build with qt5 :term:`PACKAGECONFIG` +- gtk4: Disable int-conversion warning as error +- icu: add upstream submission links for fix-install-manx.patch +- ipk: Fix clean up of extracted IPK payload +- iproute2: Fix build with GCC-14 +- iproute2: drop obsolete patch +- iputils: splitting the ping6 as a package +- kea: Remove -fvisibility-inlines-hidden from C++ flags +- kea: remove unnecessary reproducibility patch +- kernel.bbclass: check, if directory exists before removing empty module directory +- kexec-tools: Fix build with GCC-14 on musl +- lib/oe/package-manager: allow including self in create_packages_dir +- lib/package_manager/ipk: Do not hardcode payload compression algorithm +- libarchive: Upgrade to 3.7.4 +- libcgroup: fix build on non-systemd systems +- libgloss: Do not apply non-existent patch +- libinput: fix building with debug-gui option +- libtraceevent: submit meson.patch upstream +- libunwind: ignore various issues now fatal with gcc-14 +- libusb1: Set :term:`CVE_PRODUCT` +- llvm: Switch to using release tarballs +- llvm: Upgrade to 18.1.5 +- lrzsz connman-gnome libfm: ignore various issues fatal with gcc-14 +- ltp: Fix build with GCC-14 +- ltp: add iputils-ping6 to :term:`RDEPENDS` +- lttng-ust: Upgrade to 2.13.8 +- mesa: Upgrade to 24.0.5 +- oeqa/postactions: Do not use -l option with df +- oeqa/sdk/assimp: Upgrade and fix for gcc 14 +- oeqa/sdkext/devtool: replace use of librdfa +- oeqa/selftest/debuginfod: use localpkgfeed to speed server startup +- oeqa/selftest/devtool: Revert fix test_devtool_add_git_style2" +- oeqa/selftest/devtool: add test for modifying recipes using go.bbclass +- oeqa/selftest/devtool: add test for updating local files into another layer +- oeqa/selftest/devtool: fix _test_devtool_add_git_url +- oeqa: selftest: context: run tests serially if testtools/subunit modules are not found +- openssl: Upgrade to 3.2.2 +- p11-kit: ignore various issues fatal with gcc-14 (for 32bit MACHINEs) +- patchtest: test_metadata: fix invalid escape sequences +- poky.conf: bump version for 5.0.2 +- ppp: Add RSA-MD in :term:`LICENSE` +- procps: fix build with new glibc but old kernel headers +- ptest-runner: Bump to 2.4.4 (95f528c) +- recipetool: Handle several go-import tags in go resolver +- recipetool: Handle unclean response in go resolver +- run-postinsts.service: Removed --no-reload to fix reload warning when users execute systemctl in the first boot. +- selftest/classes: add localpkgfeed class +- serf: mark patch as inappropriate for upstream submission +- taglib: Upgrade to 2.0.1 +- ttyrun: define :term:`CVE_PRODUCT` +- uboot-sign: fix loop in do_uboot_assemble_fitimage +- update-rc.d: add +git to :term:`PV` +- webkitgtk: Upgrade to 2.44.1 +- xinput-calibrator: mark upstream as inactive in a patch +- xserver-xorg: Upgrade to 21.1.12 +- yocto-uninative: Update to 4.5 for gcc 14 +- zip: Fix build with gcc-14 + + +Known Issues in Yocto-5.0.2 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-5.0.2 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Adriaan Schmidt +- Alexander Kanavin +- Alexandre Truong +- Anton Almqvist +- Archana Polampalli +- Changqing Li +- Deepthi Hemraj +- Felix Nilsson +- Heiko Thole +- Jose Quaresma +- Joshua Watt +- Julien Stephan +- Kai Kang +- Khem Raj +- Lei Maohui +- Marc Ferland +- Marek Vasut +- Mark Hatle +- Martin Hundebøll +- Martin Jansa +- Maxin B. John +- Michael Halstead +- Mingli Yu +- Ola x Nilsson +- Peter Marko +- Philip Lorenz +- Poonam Jadhav +- Ralph Siemsen +- Rasmus Villemoes +- Ricardo Simoes +- Richard Purdie +- Robert Joslyn +- Ross Burton +- Rudolf J Streif +- Siddharth Doshi +- Soumya Sambu +- Steve Sakoman +- Sven Schwermer +- Trevor Gamblin +- Vincent Kriek +- Wang Mingyu +- Xiangyu Chen +- Yogita Urade +- Zev Weiss +- Zoltan Boszormenyi + + +Repositories / Downloads for Yocto-5.0.2 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.2 </poky/log/?h=yocto-5.0.2>` +- Git Revision: :yocto_git:`f7def85be9f99dcb4ba488bead201f670304379b </poky/commit/?id=f7def85be9f99dcb4ba488bead201f670304379b>` +- Release Artefact: poky-f7def85be9f99dcb4ba488bead201f670304379b +- sha: 0610a3175846d87f8a853020e8d517c94fe5e8b3fd4e40cd2d0ddbc22e75db4c +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/poky-f7def85be9f99dcb4ba488bead201f670304379b.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/poky-f7def85be9f99dcb4ba488bead201f670304379b.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.2 </openembedded-core/log/?h=yocto-5.0.2>` +- Git Revision: :oe_git:`803cc32e72b4fc2fc28d92090e61f5dd288a10cb </openembedded-core/commit/?id=803cc32e72b4fc2fc28d92090e61f5dd288a10cb>` +- Release Artefact: oecore-803cc32e72b4fc2fc28d92090e61f5dd288a10cb +- sha: b63f1214438e540ec15f1ec7f49615f31584c93e9cff10833273eefc710a7862 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/oecore-803cc32e72b4fc2fc28d92090e61f5dd288a10cb.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/oecore-803cc32e72b4fc2fc28d92090e61f5dd288a10cb.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.2 </meta-mingw/log/?h=yocto-5.0.2>` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.2 </bitbake/log/?h=yocto-5.0.2>` +- Git Revision: :oe_git:`8714a02e13477a9d97858b3642e05f28247454b5 </bitbake/commit/?id=8714a02e13477a9d97858b3642e05f28247454b5>` +- Release Artefact: bitbake-8714a02e13477a9d97858b3642e05f28247454b5 +- sha: f22b56447e321c308353196da1d6dd76af5e9957e7e654c75dfd707f58091fd1 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.2/bitbake-8714a02e13477a9d97858b3642e05f28247454b5.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.2/bitbake-8714a02e13477a9d97858b3642e05f28247454b5.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.2 </yocto-docs/log/?h=yocto-5.0.2>` +- Git Revision: :yocto_git:`875dfe69e93bf8fee3b8c07818a6ac059f228a13 </yocto-docs/commit/?id=875dfe69e93bf8fee3b8c07818a6ac059f228a13>` + + diff --git a/poky/documentation/migration-guides/release-notes-5.0.3.rst b/poky/documentation/migration-guides/release-notes-5.0.3.rst new file mode 100644 index 0000000000..caf33c7c3f --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.3.rst @@ -0,0 +1,314 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.3 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- bind: Fix :cve_nist:`2024-0760`, :cve_nist:`2024-1737`, :cve_nist:`2024-1975` and :cve_nist:`2024-4076` +- busybox: Fix :cve_nist:`2023-42366`, :cve_nist:`2023-42364`, :cve_nist:`2023-42365`, :cve_nist:`2021-42380` and :cve_nist:`2023-42363` +- cpio: Ignore :cve_nist:`2023-7216` +- curl: Fix :cve_nist:`2024-6197` +- ffmpeg: Fix :cve_nist:`2023-49502`, :cve_nist:`2024-31578` and :cve_nist:`2024-31582` +- ghostscript: Fix :cve_nist:`2023-52722` +- go: Fix :cve_nist:`2024-24790` +- gstreamer1.0-plugins-base: Fix :cve_nist:`2024-4453` +- less: Fix :cve_nist:`2024-32487` +- libxml2: Fix :cve_nist:`2024-34459` +- libyaml: Ignore :cve_nist:`2024-35328` +- linux-yocto/6.6: Fix :cve_nist:`2024-23307`, :cve_nist:`2024-24861`, :cve_nist:`2024-26642`, :cve_nist:`2024-26643`, :cve_nist:`2024-26654`, :cve_nist:`2024-26656` and :cve_nist:`2023-47233` +- linux-yocto/6.6: Ignore :cve_nist:`2019-25160`, :cve_nist:`2019-25162`, :cve_nist:`2020-36775`, :cve_nist:`2020-36776`, :cve_nist:`2020-36777`, :cve_nist:`2020-36778`, :cve_nist:`2020-36779`, :cve_nist:`2020-36780`, :cve_nist:`2020-36781`, :cve_nist:`2020-36782`, :cve_nist:`2020-36783`, :cve_nist:`2020-36784`, :cve_nist:`2020-36785`, :cve_nist:`2020-36786`, :cve_nist:`2020-36787`, :cve_nist:`2021-46904`, :cve_nist:`2021-46905`, :cve_nist:`2021-46906`, :cve_nist:`2021-46908`, :cve_nist:`2021-46909`, :cve_nist:`2021-46910`, :cve_nist:`2021-46911`, :cve_nist:`2021-46912`, :cve_nist:`2021-46913`, :cve_nist:`2021-46914`, :cve_nist:`2021-46915`, :cve_nist:`2021-46916`, :cve_nist:`2021-46917`, :cve_nist:`2021-46918`, :cve_nist:`2021-46919`, :cve_nist:`2021-46920`, :cve_nist:`2021-46921`, :cve_nist:`2021-46922`, :cve_nist:`2021-46923`, :cve_nist:`2021-46924`, :cve_nist:`2021-46925`, :cve_nist:`2021-46926`, :cve_nist:`2021-46927`, :cve_nist:`2021-46928`, :cve_nist:`2021-46929`, :cve_nist:`2021-46930`, :cve_nist:`2021-46931`, :cve_nist:`2021-46932`, :cve_nist:`2021-46933`, :cve_nist:`2021-46934`, :cve_nist:`2021-46935`, :cve_nist:`2021-46936`, :cve_nist:`2021-46937`, :cve_nist:`2021-46938`, :cve_nist:`2021-46939`, :cve_nist:`2021-46940`, :cve_nist:`2021-46941`, :cve_nist:`2021-46942`, :cve_nist:`2021-46943`, :cve_nist:`2021-46944`, :cve_nist:`2021-46945`, :cve_nist:`2021-46947`, :cve_nist:`2021-46948`, :cve_nist:`2021-46949`, :cve_nist:`2021-46950`, :cve_nist:`2021-46951`, :cve_nist:`2021-46952`, :cve_nist:`2021-46953`, :cve_nist:`2021-46954`, :cve_nist:`2021-46955`, :cve_nist:`2021-46956`, :cve_nist:`2021-46957`, :cve_nist:`2021-46958`, :cve_nist:`2021-46959`, :cve_nist:`2021-46960`, :cve_nist:`2021-46961`, :cve_nist:`2021-46962`, :cve_nist:`2021-46963`, :cve_nist:`2021-46964`, :cve_nist:`2021-46965`, :cve_nist:`2021-46966`, :cve_nist:`2021-46967`, :cve_nist:`2021-46968`, :cve_nist:`2021-46969`, :cve_nist:`2021-46970`, :cve_nist:`2021-46971`, :cve_nist:`2021-46972`, :cve_nist:`2021-46973`, :cve_nist:`2021-46974`, :cve_nist:`2021-46976`, :cve_nist:`2021-46977`, :cve_nist:`2021-46978`, :cve_nist:`2021-46979`, :cve_nist:`2021-46980`, :cve_nist:`2021-46981`, :cve_nist:`2021-46982`, :cve_nist:`2021-46983`, :cve_nist:`2021-46984`, :cve_nist:`2021-46985`, :cve_nist:`2021-46986`, :cve_nist:`2021-46987`, :cve_nist:`2021-46988`, :cve_nist:`2021-46989`, :cve_nist:`2021-46990`, :cve_nist:`2021-46991`, :cve_nist:`2021-46992`, :cve_nist:`2021-46993`, :cve_nist:`2021-46994`, :cve_nist:`2021-46995`, :cve_nist:`2021-46996`, :cve_nist:`2021-46997`, :cve_nist:`2021-46998`, :cve_nist:`2021-46999`, :cve_nist:`2021-47000`, :cve_nist:`2021-47001`, :cve_nist:`2021-47002`, :cve_nist:`2021-47003`, :cve_nist:`2021-47004`, :cve_nist:`2021-47005`, :cve_nist:`2021-47006`, :cve_nist:`2021-47007`, :cve_nist:`2021-47008`, :cve_nist:`2021-47009`, :cve_nist:`2021-47010`, :cve_nist:`2021-47011`, :cve_nist:`2021-47012`, :cve_nist:`2021-47013`, :cve_nist:`2021-47014`, :cve_nist:`2021-47015`, :cve_nist:`2021-47016`, :cve_nist:`2021-47017`, :cve_nist:`2021-47018`, :cve_nist:`2021-47019`, :cve_nist:`2021-47020`, :cve_nist:`2021-47021`, :cve_nist:`2021-47022`, :cve_nist:`2021-47023`, :cve_nist:`2021-47024`, :cve_nist:`2021-47025`, :cve_nist:`2021-47026`, :cve_nist:`2021-47027`, :cve_nist:`2021-47028`, :cve_nist:`2021-47029`, :cve_nist:`2021-47030`, :cve_nist:`2021-47031`, :cve_nist:`2021-47032`, :cve_nist:`2021-47033`, :cve_nist:`2021-47034`, :cve_nist:`2021-47035`, :cve_nist:`2021-47036`, :cve_nist:`2021-47037`, :cve_nist:`2021-47038`, :cve_nist:`2021-47039`, :cve_nist:`2021-47040`, :cve_nist:`2021-47041`, :cve_nist:`2021-47042`, :cve_nist:`2021-47043`, :cve_nist:`2021-47044`, :cve_nist:`2021-47045`, :cve_nist:`2021-47046`, :cve_nist:`2021-47047`, :cve_nist:`2021-47048`, :cve_nist:`2021-47049`, :cve_nist:`2021-47050`, :cve_nist:`2021-47051`, :cve_nist:`2021-47052`, :cve_nist:`2021-47053`, :cve_nist:`2021-47054`, :cve_nist:`2021-47055`, :cve_nist:`2021-47056`, :cve_nist:`2021-47057`, :cve_nist:`2021-47058`, :cve_nist:`2021-47059`, :cve_nist:`2021-47060`, :cve_nist:`2021-47061`, :cve_nist:`2021-47062`, :cve_nist:`2021-47063`, :cve_nist:`2021-47064`, :cve_nist:`2021-47065`, :cve_nist:`2021-47066`, :cve_nist:`2021-47067`, :cve_nist:`2021-47068`, :cve_nist:`2021-47069`, :cve_nist:`2021-47070`, :cve_nist:`2021-47071`, :cve_nist:`2021-47072`, :cve_nist:`2021-47073`, :cve_nist:`2021-47074`, :cve_nist:`2021-47075`, :cve_nist:`2021-47076`, :cve_nist:`2021-47077`, :cve_nist:`2021-47078`, :cve_nist:`2021-47079`, :cve_nist:`2021-47080`, :cve_nist:`2021-47081`, :cve_nist:`2021-47082`, :cve_nist:`2021-47083`, :cve_nist:`2021-47086`, :cve_nist:`2021-47087`, :cve_nist:`2021-47088`, :cve_nist:`2021-47089`, :cve_nist:`2021-47090`, :cve_nist:`2021-47091`, :cve_nist:`2021-47092`, :cve_nist:`2021-47093`, :cve_nist:`2021-47094`, :cve_nist:`2021-47095`, :cve_nist:`2021-47096`, :cve_nist:`2021-47097`, :cve_nist:`2021-47098`, :cve_nist:`2021-47099`, :cve_nist:`2021-47100`, :cve_nist:`2021-47101`, :cve_nist:`2021-47102`, :cve_nist:`2021-47103`, :cve_nist:`2021-47104`, :cve_nist:`2021-47105`, :cve_nist:`2021-47106`, :cve_nist:`2021-47107`, :cve_nist:`2021-47108`, :cve_nist:`2021-47109`, :cve_nist:`2021-47110`, :cve_nist:`2021-47111`, :cve_nist:`2021-47112`, :cve_nist:`2021-47113`, :cve_nist:`2021-47114`, :cve_nist:`2021-47116`, :cve_nist:`2021-47117`, :cve_nist:`2021-47118`, :cve_nist:`2021-47119`, :cve_nist:`2021-47120`, :cve_nist:`2021-47121`, :cve_nist:`2021-47122`, :cve_nist:`2021-47123`, :cve_nist:`2021-47124`, :cve_nist:`2021-47125`, :cve_nist:`2021-47126`, :cve_nist:`2021-47127`, :cve_nist:`2021-47128`, :cve_nist:`2021-47129`, :cve_nist:`2021-47130`, :cve_nist:`2021-47131`, :cve_nist:`2021-47132`, :cve_nist:`2021-47133`, :cve_nist:`2021-47134`, :cve_nist:`2021-47135`, :cve_nist:`2021-47136`, :cve_nist:`2021-47137`, :cve_nist:`2021-47138`, :cve_nist:`2021-47139`, :cve_nist:`2021-47140`, :cve_nist:`2021-47141`, :cve_nist:`2021-47142`, :cve_nist:`2021-47143`, :cve_nist:`2021-47144`, :cve_nist:`2021-47145`, :cve_nist:`2021-47146`, :cve_nist:`2021-47147`, :cve_nist:`2021-47148`, :cve_nist:`2021-47149`, :cve_nist:`2021-47150`, :cve_nist:`2021-47151`, :cve_nist:`2021-47152`, :cve_nist:`2021-47153`, :cve_nist:`2021-47158`, :cve_nist:`2021-47159`, :cve_nist:`2021-47160`, :cve_nist:`2021-47161`, :cve_nist:`2021-47162`, :cve_nist:`2021-47163`, :cve_nist:`2021-47164`, :cve_nist:`2021-47165`, :cve_nist:`2021-47166`, :cve_nist:`2021-47167`, :cve_nist:`2021-47168`, :cve_nist:`2021-47169`, :cve_nist:`2021-47170`, :cve_nist:`2021-47171`, :cve_nist:`2021-47172`, :cve_nist:`2021-47173`, :cve_nist:`2021-47174`, :cve_nist:`2021-47175`, :cve_nist:`2021-47176`, :cve_nist:`2021-47177`, :cve_nist:`2021-47178`, :cve_nist:`2021-47179`, :cve_nist:`2021-47180`, :cve_nist:`2022-48626`, :cve_nist:`2022-48627`, :cve_nist:`2022-48628`, :cve_nist:`2022-48629` and :cve_nist:`2022-48630` +- linux-yocto/6.6 (cont.): Ignore :cve_nist:`2023-6270`, :cve_nist:`2023-6356`, :cve_nist:`2023-6536`, :cve_nist:`2023-7042`, :cve_nist:`2023-28746`, :cve_nist:`2023-52465`, :cve_nist:`2023-52467`, :cve_nist:`2023-52468`, :cve_nist:`2023-52469`, :cve_nist:`2023-52470`, :cve_nist:`2023-52471`, :cve_nist:`2023-52472`, :cve_nist:`2023-52473`, :cve_nist:`2023-52474`, :cve_nist:`2023-52475`, :cve_nist:`2023-52476`, :cve_nist:`2023-52477`, :cve_nist:`2023-52478`, :cve_nist:`2023-52479`, :cve_nist:`2023-52480`, :cve_nist:`2023-52481`, :cve_nist:`2023-52482`, :cve_nist:`2023-52483`, :cve_nist:`2023-52484`, :cve_nist:`2023-52486`, :cve_nist:`2023-52487`, :cve_nist:`2023-52488`, :cve_nist:`2023-52489`, :cve_nist:`2023-52490`, :cve_nist:`2023-52491`, :cve_nist:`2023-52492`, :cve_nist:`2023-52493`, :cve_nist:`2023-52494`, :cve_nist:`2023-52495`, :cve_nist:`2023-52497`, :cve_nist:`2023-52498`, :cve_nist:`2023-52499`, :cve_nist:`2023-52500`, :cve_nist:`2023-52501`, :cve_nist:`2023-52502`, :cve_nist:`2023-52503`, :cve_nist:`2023-52504`, :cve_nist:`2023-52505`, :cve_nist:`2023-52506`, :cve_nist:`2023-52507`, :cve_nist:`2023-52508`, :cve_nist:`2023-52509`, :cve_nist:`2023-52510`, :cve_nist:`2023-52511`, :cve_nist:`2023-52512`, :cve_nist:`2023-52513`, :cve_nist:`2023-52515`, :cve_nist:`2023-52516`, :cve_nist:`2023-52517`, :cve_nist:`2023-52518`, :cve_nist:`2023-52519`, :cve_nist:`2023-52520`, :cve_nist:`2023-52522`, :cve_nist:`2023-52523`, :cve_nist:`2023-52524`, :cve_nist:`2023-52525`, :cve_nist:`2023-52526`, :cve_nist:`2023-52527`, :cve_nist:`2023-52528`, :cve_nist:`2023-52529`, :cve_nist:`2023-52530`, :cve_nist:`2023-52531`, :cve_nist:`2023-52532`, :cve_nist:`2023-52559`, :cve_nist:`2023-52560`, :cve_nist:`2023-52561`, :cve_nist:`2023-52562`, :cve_nist:`2023-52563`, :cve_nist:`2023-52564`, :cve_nist:`2023-52565`, :cve_nist:`2023-52566`, :cve_nist:`2023-52567`, :cve_nist:`2023-52568`, :cve_nist:`2023-52569`, :cve_nist:`2023-52570`, :cve_nist:`2023-52571`, :cve_nist:`2023-52572`, :cve_nist:`2023-52573`, :cve_nist:`2023-52574`, :cve_nist:`2023-52575`, :cve_nist:`2023-52576`, :cve_nist:`2023-52577`, :cve_nist:`2023-52578`, :cve_nist:`2023-52580`, :cve_nist:`2023-52581`, :cve_nist:`2023-52582`, :cve_nist:`2023-52583`, :cve_nist:`2023-52584`, :cve_nist:`2023-52587`, :cve_nist:`2023-52588`, :cve_nist:`2023-52589`, :cve_nist:`2023-52591`, :cve_nist:`2023-52593`, :cve_nist:`2023-52594`, :cve_nist:`2023-52595`, :cve_nist:`2023-52596`, :cve_nist:`2023-52597`, :cve_nist:`2023-52598`, :cve_nist:`2023-52599`, :cve_nist:`2023-52600`, :cve_nist:`2023-52601`, :cve_nist:`2023-52602`, :cve_nist:`2023-52603`, :cve_nist:`2023-52604`, :cve_nist:`2023-52606`, :cve_nist:`2023-52607`, :cve_nist:`2023-52608`, :cve_nist:`2023-52609`, :cve_nist:`2023-52610`, :cve_nist:`2023-52611`, :cve_nist:`2023-52612`, :cve_nist:`2023-52613`, :cve_nist:`2023-52614`, :cve_nist:`2023-52615`, :cve_nist:`2023-52616`, :cve_nist:`2023-52617`, :cve_nist:`2023-52618`, :cve_nist:`2023-52619`, :cve_nist:`2023-52620`, :cve_nist:`2023-52621`, :cve_nist:`2023-52622`, :cve_nist:`2023-52623`, :cve_nist:`2023-52626`, :cve_nist:`2023-52627`, :cve_nist:`2023-52628`, :cve_nist:`2023-52629`, :cve_nist:`2023-52630`, :cve_nist:`2023-52631`, :cve_nist:`2023-52632`, :cve_nist:`2023-52633`, :cve_nist:`2023-52635`, :cve_nist:`2023-52636`, :cve_nist:`2023-52637`, :cve_nist:`2023-52638`, :cve_nist:`2023-52639`, :cve_nist:`2023-52640`, :cve_nist:`2023-52641`, :cve_nist:`2024-0841`, :cve_nist:`2024-22099`, :cve_nist:`2024-23196`, :cve_nist:`2024-26600`, :cve_nist:`2024-26601`, :cve_nist:`2024-26602`, :cve_nist:`2024-26603`, :cve_nist:`2024-26604`, :cve_nist:`2024-26605`, :cve_nist:`2024-26606`, :cve_nist:`2024-26607`, :cve_nist:`2024-26608`, :cve_nist:`2024-26610`, :cve_nist:`2024-26611`, :cve_nist:`2024-26612`, :cve_nist:`2024-26614`, :cve_nist:`2024-26615`, :cve_nist:`2024-26616`, :cve_nist:`2024-26617`, :cve_nist:`2024-26618`, :cve_nist:`2024-26619`, :cve_nist:`2024-26620`, :cve_nist:`2024-26621`, :cve_nist:`2024-26622`, :cve_nist:`2024-26623`, :cve_nist:`2024-26625`, :cve_nist:`2024-26626`, :cve_nist:`2024-26627`, :cve_nist:`2024-26629`, :cve_nist:`2024-26630`, :cve_nist:`2024-26631`, :cve_nist:`2024-26632`, :cve_nist:`2024-26633`, :cve_nist:`2024-26634`, :cve_nist:`2024-26635`, :cve_nist:`2024-26636`, :cve_nist:`2024-26637`, :cve_nist:`2024-26638`, :cve_nist:`2024-26639`, :cve_nist:`2024-26640`, :cve_nist:`2024-26641`, :cve_nist:`2024-26644`, :cve_nist:`2024-26645`, :cve_nist:`2024-26646`, :cve_nist:`2024-26647`, :cve_nist:`2024-26648`, :cve_nist:`2024-26649`, :cve_nist:`2024-26650`, :cve_nist:`2024-26651`, :cve_nist:`2024-26652`, :cve_nist:`2024-26653`, :cve_nist:`2024-26657`, :cve_nist:`2024-26659`, :cve_nist:`2024-26660`, :cve_nist:`2024-26661`, :cve_nist:`2024-26662`, :cve_nist:`2024-26663`, :cve_nist:`2024-26664`, :cve_nist:`2024-26665`, :cve_nist:`2024-26666`, :cve_nist:`2024-26667`, :cve_nist:`2024-26668`, :cve_nist:`2024-26669`, :cve_nist:`2024-26670`, :cve_nist:`2024-26671`, :cve_nist:`2024-26673`, :cve_nist:`2024-26674`, :cve_nist:`2024-26675`, :cve_nist:`2024-26676`, :cve_nist:`2024-26677`, :cve_nist:`2024-26678`, :cve_nist:`2024-26679`, :cve_nist:`2024-26680`, :cve_nist:`2024-26681`, :cve_nist:`2024-26682`, :cve_nist:`2024-26683`, :cve_nist:`2024-26684`, :cve_nist:`2024-26685`, :cve_nist:`2024-26687`, :cve_nist:`2024-26688`, :cve_nist:`2024-26689`, :cve_nist:`2024-26690`, :cve_nist:`2024-26691`, :cve_nist:`2024-26692`, :cve_nist:`2024-26693`, :cve_nist:`2024-26694`, :cve_nist:`2024-26695`, :cve_nist:`2024-26696`, :cve_nist:`2024-26697`, :cve_nist:`2024-26698`, :cve_nist:`2024-26700`, :cve_nist:`2024-26702`, :cve_nist:`2024-26703`, :cve_nist:`2024-26704`, :cve_nist:`2024-26705`, :cve_nist:`2024-26706`, :cve_nist:`2024-26707`, :cve_nist:`2024-26708`, :cve_nist:`2024-26709`, :cve_nist:`2024-26710`, :cve_nist:`2024-26711`, :cve_nist:`2024-26712`, :cve_nist:`2024-26713`, :cve_nist:`2024-26714`, :cve_nist:`2024-26715`, :cve_nist:`2024-26716`, :cve_nist:`2024-26717`, :cve_nist:`2024-26718`, :cve_nist:`2024-26719`, :cve_nist:`2024-26720`, :cve_nist:`2024-26721`, :cve_nist:`2024-26722`, :cve_nist:`2024-26723`, :cve_nist:`2024-26724`, :cve_nist:`2024-26725`, :cve_nist:`2024-26726`, :cve_nist:`2024-26727`, :cve_nist:`2024-26728`, :cve_nist:`2024-26729`, :cve_nist:`2024-26730`, :cve_nist:`2024-26731`, :cve_nist:`2024-26732`, :cve_nist:`2024-26733`, :cve_nist:`2024-26734`, :cve_nist:`2024-26735`, :cve_nist:`2024-26736`, :cve_nist:`2024-26737`, :cve_nist:`2024-26738`, :cve_nist:`2024-26739`, :cve_nist:`2024-26740`, :cve_nist:`2024-26741`, :cve_nist:`2024-26742`, :cve_nist:`2024-26743`, :cve_nist:`2024-26744`, :cve_nist:`2024-26745`, :cve_nist:`2024-26746`, :cve_nist:`2024-26747`, :cve_nist:`2024-26748`, :cve_nist:`2024-26749`, :cve_nist:`2024-26750`, :cve_nist:`2024-26751`, :cve_nist:`2024-26752`, :cve_nist:`2024-26753`, :cve_nist:`2024-26754`, :cve_nist:`2024-26755`, :cve_nist:`2024-26759`, :cve_nist:`2024-26760`, :cve_nist:`2024-26761`, :cve_nist:`2024-26762`, :cve_nist:`2024-26763`, :cve_nist:`2024-26764`, :cve_nist:`2024-26765`, :cve_nist:`2024-26766`, :cve_nist:`2024-26767`, :cve_nist:`2024-26768`, :cve_nist:`2024-26769`, :cve_nist:`2024-26770`, :cve_nist:`2024-26771`, :cve_nist:`2024-26772`, :cve_nist:`2024-26773`, :cve_nist:`2024-26774`, :cve_nist:`2024-26775`, :cve_nist:`2024-26776`, :cve_nist:`2024-26777`, :cve_nist:`2024-26778`, :cve_nist:`2024-26779`, :cve_nist:`2024-26780`, :cve_nist:`2024-26781`, :cve_nist:`2024-26782`, :cve_nist:`2024-26783`, :cve_nist:`2024-26786`, :cve_nist:`2024-26787`, :cve_nist:`2024-26788`, :cve_nist:`2024-26789`, :cve_nist:`2024-26790`, :cve_nist:`2024-26791`, :cve_nist:`2024-26792`, :cve_nist:`2024-26793`, :cve_nist:`2024-26794`, :cve_nist:`2024-26795`, :cve_nist:`2024-26796`, :cve_nist:`2024-26798`, :cve_nist:`2024-26799`, :cve_nist:`2024-26800`, :cve_nist:`2024-26801`, :cve_nist:`2024-26802`, :cve_nist:`2024-26803`, :cve_nist:`2024-26804`, :cve_nist:`2024-26805`, :cve_nist:`2024-26807`, :cve_nist:`2024-26808` and :cve_nist:`2024-26809` +- llvm: Fix :cve_nist:`2024-0151` +- ofono: Fix :cve_nist:`2023-2794` +- openssh: Fix :cve_nist:`2024-6387` and :cve_nist:`2024-39894` +- openssl: Fix :cve_nist:`2024-5535` +- pam: Fix :cve_nist:`2024-22365` +- python3-idna: Fix :cve_nist:`2024-3651` +- qemu: Fix :cve_nist:`2023-6683`, :cve_nist:`2024-3446`, :cve_mitre:`2024-3447`, :cve_nist:`2024-3567`, :cve_nist:`2024-26327` and :cve_nist:`2024-26328` +- ruby: Fix :cve_nist:`2023-36617` and :cve_nist:`2024-27281` +- vte: Fix :cve_nist:`2024-37535` +- wget: Fix for :cve_nist:`2024-38428` + + +Fixes in Yocto-5.0.3 +~~~~~~~~~~~~~~~~~~~~ + +- apt-native: don't let dpkg overwrite files by default +- archiver.bbclass: Fix work-shared checking for kernel recipes +- automake: mark new_rt_path_for_test-driver.patch as Inappropriate +- bash: fix configure checks that fail with GCC 14.1 +- bind: upgrade to 9.18.28 +- binutils: stable 2.42 branch updates +- bitbake: codeparser/data: Ensure module function contents changing is accounted for +- bitbake: codeparser: Skip non-local functions for module dependencies +- build-appliance-image: Update to scarthgap head revision +- cargo: remove True option to getVar calls +- classes/create-spdx-2.2: Fix :term:`SPDX` Namespace Prefix +- classes/kernel: No symlink in postinst without KERNEL_IMAGETYPE_SYMLINK +- cmake-qemu.bbclass: fix if criterion +- create-spdx-3.0/populate_sdk_base: Add SDK_CLASSES inherit mechanism to fix tarball :term:`SPDX` manifests +- create-spdx-'*': Support multilibs via SPDX_MULTILIB_SSTATE_ARCHS +- curl: correct the :term:`PACKAGECONFIG` for native/nativesdk +- curl: locale-base-en-us isn't glibc-specific +- curl: skip FTP tests in run-ptest +- cve-check: Introduce CVE_CHECK_MANIFEST_JSON_SUFFIX +- cve-exclusion: Drop the version comparision/warning +- devtool: ide-sdk: correct help typo +- dnf: Fix missing leading whitespace with ':append' +- dpkg: mark patches adding custom non-debian architectures as inappropriate for upstream +- ed: upgrade to 1.20.2 +- expect: fix configure with GCC 14 +- ffmpeg: backport patch to fix errors with GCC 14 +- ffmpeg: backport patches to use new Vulkan AV1 codec API +- flac: fix buildpaths warnings +- fribidi: upgrade to 1.0.14 +- gawk: Remove References to /usr/local/bin/gawk +- gawk: update patch status +- gettext: fix a parallel build issue +- ghostscript: upgrade to 10.03.1 +- glib-networking: submit eagain.patch upstream +- glibc: cleanup old cve status +- glibc: stable 2.39 branch updates +- glslang: mark 0001-generate-glslang-pkg-config.patch as Inappropriate +- go: drop the old 1.4 bootstrap C version +- go: upgrade to 1.22.5 +- gpgme: move gpgme-tool to own sub-package +- grub,grub-efi: Remove -mfpmath=sse on x86 +- grub: mark grub-module-explicitly-keeps-symbole-.module_license.patch as a workaround +- gstreamer1.0: skip another known flaky test +- gstreamer: upgrade to 1.22.12 +- insane.bbclass: fix `HOST_` variable names +- insane.bbclass: remove leftover variables and comment +- insane.bbclass: remove skipping of cross-compiled packages +- insane: handle dangling symlinks in the libdir QA check +- iptables: fix memory corruption when parsing nft rules +- iptables: fix save/restore symlinks with libnftnl :term:`PACKAGECONFIG` enabled +- iptables: submit 0001-configure-Add-option-to-enable-disable-libnfnetlink.patch upstream +- kexec-tools: submit 0003-kexec-ARM-Fix-add_buffer_phys_virt-align-issue.patch upstream +- layer.conf: Add os-release to :term:`SIGGEN_EXCLUDERECIPES_ABISAFE` +- libacpi: mark patches as inactive-upstream +- libadwaita: upgrade to 1.5.1 +- libcap-ng-python: upgrade to 0.8.5 +- libcap-ng: upgrade to 0.8.5 +- libmnl: explicitly disable doxygen +- libnl: change :term:`HOMEPAGE` +- libpam: fix runtime error in pam_pwhistory moudle +- libpng: update :term:`SRC_URI` +- libportal: fix rare build race +- libstd-rs: set :term:`CVE_PRODUCT` to rust +- libxcrypt: correct the check for a working libucontext.h +- libxml2: upgrade to 2.12.8 +- linux-yocto-custom: Fix comment override syntax +- linux-yocto/6.6: cfg: drop obselete options +- linux-yocto/6.6: cfg: introduce Intel NPU fragment +- linux-yocto/6.6: fix AMD boot trace +- linux-yocto/6.6: fix kselftest failures +- linux-yocto/6.6: intel configuration changes +- linux-yocto/6.6: nft: enable veth +- linux-yocto/6.6: update to v6.6.35 +- linux-yocto: Enable team net driver +- linuxloader: add -armhf on arm only for :term:`TARGET_FPU` 'hard' +- llvm: upgrade to 18.1.6 +- maintainers.inc: update self e-mail address +- maintainers: Drop go-native as recipe removed +- mesa: Fix missing leading whitespace with ':append' +- mesa: remove obsolete 0001-meson.build-check-for-all-linux-host_os-combinations.patch +- mesa: upgrade to 24.0.7 +- meson: don't use deprecated pkgconfig variable +- migration-guides: add release notes for 4.0.19 +- migration-guides: add release notes for 5.0.2 +- migration-notes: add release notes for 5.0.1 +- mmc-utils: fix URL +- mobile-broadband-provider-info: upgrade to 20240407 +- multilib.bbclass: replace deprecated e.data with d +- multilib.conf: remove appending to :term:`PKG_CONFIG_PATH` +- nasm: upgrade to 2.16.03 +- ncurses: switch to new mirror +- oeqa/runtime/scp: requires openssh-sftp-server +- oeqa/runtime: fix race-condition in minidebuginfo test +- oeqa/runtime: fix regression in minidebuginfo test +- oeqa/runtime: make minidebuginfo test work with coreutils +- oeqa/sdk/case: Ensure :term:`DL_DIR` is populated with artefacts if used +- oeqa/sdk/case: Skip SDK test cases when :term:`TCLIBC` is newlib +- oeqa/selftest/devtool: Fix for usrmerge in :term:`DISTRO_FEATURES` +- oeqa/selftest/recipetool: Fix for usrmerge in :term:`DISTRO_FEATURES` +- openssh: drop rejected patch fixed in 8.6p1 release +- openssh: systemd notification was implemented upstream +- openssh: systemd sd-notify patch was rejected upstream +- orc: upgrade to 0.4.39 +- package.py: Fix static debuginfo split +- package.py: Fix static library processing +- pcmanfm: Disable incompatible-pointer-types warning as error +- perl: submit the rest of determinism.patch upstream +- pixman: fixing inline failure with -Og +- poky.conf: bump version for 5.0.3 +- populate_sdk_ext.bbclass: Fix undefined variable error +- pseudo: Fix to work with glibc 2.40 +- pseudo: Update to include open symlink handling bugfix +- pseudo: Update to pull in python 3.12+ fix +- python3-attrs: drop python3-ctypes from :term:`RDEPENDS` +- python3-bcrypt: drop python3-six from :term:`RDEPENDS` +- python3-idna: upgrade to 3.7 +- python3-jinja2: upgrade to 3.1.4 +- python3-pyopenssl: drop python3-six from :term:`RDEPENDS` +- python3-requests: cleanup :term:`RDEPENDS` +- python3-setuptools: drop python3-2to3 from :term:`RDEPENDS` +- python3: Treat UID/GID overflow as failure +- python3: skip test_concurrent_futures/test_deadlock +- python3: skip test_multiprocessing/test_active_children test +- python3: submit deterministic_imports.patch upstream as a ticket +- python3: upgrade to 3.12.4 +- qemu: upgrade to 8.2.3 +- rng-tools: ignore incompatible-pointer-types errors for now +- rt-tests: rt_bmark.py: fix TypeError +- rust-cross-canadian: set :term:`CVE_PRODUCT` to rust +- rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS +- sanity: Check if tar is gnutar +- sdk: Fix path length limit to match reserved size +- selftest-hardlink: Add additional test cases +- selftest/cases/runtime_test: Exclude centos-9 from virgl tests +- selftest: add Upstream-Status to .patch files +- settings-daemon: submit addsoundkeys.patch upstream and update to a revision that has it +- systemd.bbclass: Clarify error message +- tcp-wrappers: mark all patches as inactive-upstream +- tzdata: Add tzdata.zi to tzdata-core package +- vorbis: mark patch as Inactive-Upstream +- vulkan-samples: fix do_compile error when -Og enabled +- watchdog: Set watchdog_module in default config +- webkitgtk: fix do_compile errors on beaglebone-yocto +- webkitgtk: fix do_configure error on beaglebone-yocto +- weston: upgrade to 13.0.1 +- wic/partition.py: Set hash_seed for empty ext partition +- wic: bootimg-efi: fix error handling +- wic: engine.py: use raw string for escape sequence +- wireless-regdb: upgrade to 2024.05.08 +- xserver-xorg: upgrade to 21.1.13 +- xz: Update :term:`LICENSE` variable for xz packages + + +Known Issues in Yocto-5.0.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-5.0.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Adithya Balakumar +- Aleksandar Nikolic +- Alexander Kanavin +- Antonin Godard +- Archana Polampalli +- Ashish Sharma +- Benjamin Szőke +- Bruce Ashfield +- Changqing Li +- Chen Qi +- Christian Taedcke +- Deepthi Hemraj +- Denys Dmytriyenko +- Dmitry Baryshkov +- Emil Kronborg +- Enrico Jörns +- Etienne Cordonnier +- Guðni Már Gilbert +- Hitendra Prajapati +- Jonas Gorski +- Jookia +- Jose Quaresma +- Joshua Watt +- Jörg Sommer +- Kai Kang +- Khem Raj +- Kirill Yatsenko +- Lee Chee Yang +- Mark Hatle +- Markus Volk +- Martin Jansa +- Michael Opdenacker +- Mingli Yu +- Niko Mauno +- Patrick Wicki +- Peter Marko +- Quentin Schulz +- Ranjitsinh Rathod +- Richard Purdie +- Robert Kovacsics +- Ross Burton +- Siddharth Doshi +- Simone Weiß +- Soumya Sambu +- Steve Sakoman +- Sundeep KOKKONDA +- Trevor Gamblin +- Vijay Anusuri +- Wadim Egorov +- Wang Mingyu +- Xiangyu Chen +- Yi Zhao +- Yogita Urade +- Zahir Hussain + + +Repositories / Downloads for Yocto-5.0.3 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.3 </poky/log/?h=yocto-5.0.3>` +- Git Revision: :yocto_git:`0b37512fb4b231cc106768e2a7328431009b3b70 </poky/commit/?id=0b37512fb4b231cc106768e2a7328431009b3b70>` +- Release Artefact: poky-0b37512fb4b231cc106768e2a7328431009b3b70 +- sha: b37fe0b2f6a685ee94b4af55f896cbf52ba69023e10eb21d3e54798ca21ace79 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.3/poky-0b37512fb4b231cc106768e2a7328431009b3b70.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.3/poky-0b37512fb4b231cc106768e2a7328431009b3b70.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.3 </openembedded-core/log/?h=yocto-5.0.3>` +- Git Revision: :oe_git:`236ac1b43308df722a78d3aa20aef065dfae5b2b </openembedded-core/commit/?id=236ac1b43308df722a78d3aa20aef065dfae5b2b>` +- Release Artefact: oecore-236ac1b43308df722a78d3aa20aef065dfae5b2b +- sha: 44b89feba9563c2281c8c2f45037dd7c312fb20e8b7d9289b25f0ea0fe1fc2c4 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.3/oecore-236ac1b43308df722a78d3aa20aef065dfae5b2b.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.3/oecore-236ac1b43308df722a78d3aa20aef065dfae5b2b.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.3 </meta-mingw/log/?h=yocto-5.0.3>` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.3/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.3/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.3 </bitbake/log/?h=yocto-5.0.3>` +- Git Revision: :oe_git:`11d83170922a2c6b9db1f6e8c23e533526984b2c </bitbake/commit/?id=11d83170922a2c6b9db1f6e8c23e533526984b2c>` +- Release Artefact: bitbake-11d83170922a2c6b9db1f6e8c23e533526984b2c +- sha: 9643433748d7ed80d6334124390271929566b3bc076dad0f6e6be1ec6d753b8d +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.3/bitbake-11d83170922a2c6b9db1f6e8c23e533526984b2c.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.3/bitbake-11d83170922a2c6b9db1f6e8c23e533526984b2c.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.3 </yocto-docs/log/?h=yocto-5.0.3>` +- Git Revision: :yocto_git:`TBD </yocto-docs/commit/?id=TBD>` + + diff --git a/poky/documentation/migration-guides/release-notes-5.0.4.rst b/poky/documentation/migration-guides/release-notes-5.0.4.rst new file mode 100644 index 0000000000..14fbe3f6f8 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.4.rst @@ -0,0 +1,212 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.4 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.4 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- apr: Fix :cve_nist:`2023-49582` +- curl: Ignore :cve_nist:`2024-32928` +- curl: Fix :cve_nist:`2024-7264` +- expat: Fix :cve_nist:`2024-45490`, :cve_nist:`2024-45491` and :cve_nist:`2024-45492` +- ffmpeg: Fix :cve_nist:`2023-50008` and :cve_nist:`2024-32230` +- libpcap: Fix :cve_nist:`2023-7256` and :cve_nist:`2024-8006` +- libyaml: Ignore :cve_nist:`2024-35325` and :cve_nist:`2024-35326` +- openssl: Fix :cve_nist:`2024-5535` and :cve_nist:`2024-6119` +- python3-certifi: Fix :cve_nist:`2024-39689` +- python3-setuptools: Fix :cve_nist:`2024-6345` +- python3: Fix :cve_nist:`2024-6232`, :cve_nist:`2024-7592`, :cve_nist:`2024-8088` and :cve_nist:`2024-27034` +- qemu: Fix :cve_nist:`2024-4467` and :cve_nist:`2024-7409` +- ruby: Fix :cve_nist:`2024-27282` +- tiff: Fix :cve_nist:`2024-7006` +- vim: Fix :cve_nist:`2024-41957`, :cve_nist:`2024-41965`, :cve_nist:`2024-43374`, :cve_nist:`2024-43790` and :cve_nist:`2024-43802` + + +Fixes in Yocto-5.0.4 +~~~~~~~~~~~~~~~~~~~~ + +- apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch +- apr: upgrade to 1.7.5 +- bind: Fix build with the `httpstats` package config enabled +- bitbake: data_smart: Improve performance for VariableHistory +- bluez5: remove redundant patch for MAX_INPUT +- build-appliance-image: Update to scarthgap head revision +- buildhistory: Fix intermittent package file list creation +- buildhistory: Restoring files from preserve list +- buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage +- busybox: Fix cut with "-s" flag +- create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc +- cups: upgrade to 2.4.10 +- dejagnu: Fix :term:`LICENSE` (change to GPL-3.0-only) +- doc: features: describe distribution feature pni-name +- doc: features: remove duplicate word in distribution feature ext2 +- expat: upgrade to 2.6.3 +- expect-native: fix do_compile failure with gcc-14 +- gcc: Fix spurious '/' in GLIBC_DYNAMIC_LINKER on microblaze +- gcr: Fix :term:`LICENSE` (change to LGPL-2.0-only) +- glibc: fix fortran header file conflict for arm +- go: upgrade to 1.22.6 +- gstreamer1.0: disable flaky baseparser tests +- image_types.bbclass: Use --force also with lz4,lzop +- initramfs-framework: fix typos +- iw: Fix :term:`LICENSE` (change to ISC) +- libadwaita: upgrade to 1.5.2 +- libcap-ng: update :term:`SRC_URI` +- libdnf: upgrade to 0.73.2 +- libedit: Make docs generation deterministic +- libgfortran.inc: fix nativesdk-libgfortran dependencies +- librsvg: don't try to run target code at build time +- linux-firmware: add a package for ath12k firmware +- llvm: Enable libllvm for native build +- maintainers.inc: add maintainer for python(-setuptools, -smmap, -subunit, -testtools) +- mc: fix source URL +- migration-guide: add release notes for 4.0.20 and 5.0.3 +- oeqa/postactions: fix exception handling +- oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM) +- oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems +- oeqa/runtime/ssh: check for all errors at the end +- oeqa/runtime/ssh: increase the number of attempts +- oeqa/selftest/reproducibile: Explicitly list virtual targets +- oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies +- openssh: add backported header file include +- openssl: upgrade to 3.2.3 +- os-release: Fix VERSION_CODENAME in case it is empty +- poky.conf: bump version for 5.0.4 +- populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported. +- python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc +- python3-pycryptodome(x): use python_setuptools_build_meta build class +- python3: upgrade to 3.12.6 +- python3: skip readline limited history tests +- qemu: backport patches to fix riscv64 build failure +- qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath +- ref-manual: fix typo and move :term:`SYSROOT_DIRS` example +- ruby: Make docs generation deterministic +- systemd: Mitigate /var/log type mismatch issue +- systemd: Mitigate /var/tmp type mismatch issue +- tiff: Fix :term:`LICENSE` (change to libtiff) +- u-boot.inc: Refactor do_* steps into functions that can be overridden +- udev-extraconf: Add collect flag to mount +- unzip: Fix :term:`LICENSE` (change to Info-ZIP) +- util-linux: Add :term:`PACKAGECONFIG` option (libmount-mountfd-support) to mitigate rootfs remount error +- vim: upgrade to 9.1.0698 +- weston-init: fix weston not starting when xwayland is enabled +- wireless-regdb: upgrade to 2024.07.04 +- wpa-supplicant: upgrade to 2.11 +- xserver-xorg: mark :cve_nist:`2023-5574` as unpatched when xvfb enabled +- yocto-uninative: Update to 4.6 for glibc 2.40 +- zip: Fix :term:`LICENSE` (change to Info-ZIP) + + +Known Issues in Yocto-5.0.4 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-5.0.4 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Alban Bedel +- Alexander Kanavin +- Alexis Lothoré +- Archana Polampalli +- Ashish Sharma +- Bartosz Golaszewski +- Benjamin Szőke +- Changqing Li +- Chen Qi +- Colin McAllister +- Daniel Semkowicz +- Dmitry Baryshkov +- Gauthier HADERER +- Guðni Már Gilbert +- Jon Mason +- Jose Quaresma +- Jörg Sommer +- Kai Kang +- Khem Raj +- Lee Chee Yang +- Mark Hatle +- Martin Jansa +- Matthias Pritschet +- Michael Halstead +- Mingli Yu +- Niko Mauno +- Pedro Ferreira +- Peter Marko +- Quentin Schulz +- Richard Purdie +- Robert Yang +- Ross Burton +- Ryan Eatmon +- Siddharth Doshi +- Simone Weiß +- Soumya Sambu +- Steve Sakoman +- Trevor Gamblin +- Ulrich Ölmann +- Vijay Anusuri +- Wang Mingyu +- Weisser, Pascal.ext +- Yogita Urade + + +Repositories / Downloads for Yocto-5.0.4 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.4 </poky/log/?h=yocto-5.0.4>` +- Git Revision: :yocto_git:`2034fc38eb4e63984d9bd6b260aa1bf95ce562e4 </poky/commit/?id=2034fc38eb4e63984d9bd6b260aa1bf95ce562e4>` +- Release Artefact: poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4 +- sha: 697ed099793d6c86d5ffe590e96f99689bd28dcb2d4451dc4585496fa4a20400 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/poky-2034fc38eb4e63984d9bd6b260aa1bf95ce562e4.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.4 </openembedded-core/log/?h=yocto-5.0.4>` +- Git Revision: :oe_git:`f888dd911529a828820799a7a1b75dfd3a44847c </openembedded-core/commit/?id=f888dd911529a828820799a7a1b75dfd3a44847c>` +- Release Artefact: oecore-f888dd911529a828820799a7a1b75dfd3a44847c +- sha: 93cb4c3c8e0f77edab20814d155847dc3452c6b083e3dd9c7a801e80a7e4d228 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/oecore-f888dd911529a828820799a7a1b75dfd3a44847c.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.4 </meta-mingw/log/?h=yocto-5.0.4>` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.4 </bitbake/log/?h=yocto-5.0.4>` +- Git Revision: :oe_git:`d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3 </bitbake/commit/?id=d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3>` +- Release Artefact: bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3 +- sha: d873f4d3a471d26680dc39200d8f3851a6863f15daa9bed978ba31b930f9a1c1 +- Download Locations: + http://downloads.yoctoproject.org/releases/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2 + http://mirrors.kernel.org/yocto/yocto/yocto-5.0.4/bitbake-d251668d9a7a8dd25bd8767efb30d6d9ff8b1ad3.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.4 </yocto-docs/log/?h=yocto-5.0.4>` +- Git Revision: :yocto_git:`d71081dd14a9d75ace4d1c62472374f37b4a888d </yocto-docs/commit/?id=d71081dd14a9d75ace4d1c62472374f37b4a888d>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.5.rst b/poky/documentation/migration-guides/release-notes-5.0.5.rst new file mode 100644 index 0000000000..c8cf9a85d1 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.5.rst @@ -0,0 +1,227 @@ +Release notes for Yocto-5.0.5 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.5 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- ``cups``: Fix :cve_nist:`2024-47175` +- ``curl``: Fix :cve_nist:`2024-8096` +- ``gnupg``: Ignore :cve_nist:`2022-3219` (wont-fix) +- ``libarchive``: Fix :cve_nist:`2024-48957` and :cve_nist:`2024-48958` +- ``openssh``: Ignore :cve_nist:`2023-51767` (wont-fix) +- ``openssl``: Fix :cve_nist:`2024-9143` +- ``ruby``: Fix :cve_nist:`2024-41123` and :cve_mitre:`2024-41496` +- ``rust-llvm``: Fix :cve_nist:`2024-0151` +- ``rust``, ``libstd-rs``: Ignore :cve_nist:`2024-43402` +- ``wpa-supplicant``: Patch SAE H2E and incomplete downgrade protection for group negotiation +- ``wpa-supplicant``: Fix :cve_nist:`2024-3596` +- ``wpa-supplicant``: Ignore :cve_nist:`2024-5290` + + +Fixes in Yocto-5.0.5 +~~~~~~~~~~~~~~~~~~~~ + +- binutils: stable 2.42 branch updates +- bitbake.conf: Add truncate to :term:`HOSTTOOLS` +- bitbake: asyncrpc: Use client timeout for websocket open timeout +- bitbake: bitbake: doc/user-manual: Update the :term:`BB_HASHSERVE_UPSTREAM` +- bitbake: gitsm: Add call_process_submodules() to remove duplicated code +- bitbake: gitsm: Remove downloads/tmpdir when failed +- bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab +- bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab +- build-appliance-image: Update to scarthgap head revision +- cryptodev: upgrade to 1.14 +- cve-check: add support for cvss v4.0 +- cve_check: Use a local copy of the database during builds +- dev-manual: add bblock documentation +- documentation: conf.py: rename :cve: role to :cve_nist: +- documentation: README: add instruction to run Vale on a subset +- documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint +- e2fsprogs: removed 'sed -u' option +- ffmpeg: Add "libswresample libavcodec" to :term:`CVE_PRODUCT` +- glibc: stable 2.39 branch updates. +- go: upgrade to 1.22.8 +- icu: update patch Upstream-Status +- image.bbclass: Drop support for ImageQAFailed exceptions in image_qa +- image_qa: fix error handling +- install-buildtools: fix "test installation" step +- install-buildtools: remove md5 checksum validation +- install-buildtools: update base-url, release and installer version +- kernel-devsrc: remove 64 bit vdso cmd files +- kernel-fitimage: fix external dtb check +- kernel-fitimage: fix intentation +- lib/oe/package-manager: skip processing installed-pkgs with empty globs +- liba52: fix do_fetch error +- libpcre2: Update base uri PhilipHazel -> PCRE2Project +- libsdl2: Fix non-deterministic configure option for libsamplerate +- license: Fix directory layout issues +- linux-firmware: upgrade to 20240909 +- linux-yocto/6.6: fix genericarm64 config warning +- linux-yocto/6.6: upgrade to v6.6.54 +- lsb-release: fix Distro Codename shell escaping +- makedevs: Fix issue when rootdir of / is given +- makedevs: Fix matching uid/gid +- meta-ide-support: Mark recipe as MACHINE-specific +- meta-world-pkgdata: Inherit nopackages +- migration-guide: add release notes for 4.0.21, 4.0.22 and 5.0.4 +- migration-guide: release-notes-4.0: update :term:`BB_HASHSERVE_UPSTREAM` for new infrastructure +- migration-guide: release-notes-5.0.rst: update NO_OUTPUT -> NO_COLOR +- orc: upgrade to 0.4.40 +- overview-manual: concepts: add details on package splitting +- poky.conf: bump version for 5.0.5 +- populate_sdk_base: inherit nopackages +- ptest-runner: upgrade to 2.4.5 +- pulseaudio: correct freedesktop.org -> www.freedesktop.org :term:`SRC_URI` +- desktop-file-utils: correct freedesktop.org -> www.freedesktop.org :term:`SRC_URI` +- python3-lxml: upgrade to v5.0.2 +- python3-setuptools: Add "python:setuptools" to :term:`CVE_PRODUCT` +- recipes-bsp: usbutils: Fix usb-devices command using busybox +- ref-manual: add missing CVE_CHECK manifest variables +- ref-manual: add missing :term:`EXTERNAL_KERNEL_DEVICETREE` variable +- ref-manual: add missing :term:`OPKGBUILDCMD` variable +- ref-manual: add missing :term:`TESTIMAGE_FAILED_QA_ARTIFACTS` +- ref-manual: devtool-reference: document missing commands +- ref-manual: devtool-reference: refresh example outputs +- ref-manual: faq: add q&a on class appends +- ref-manual: introduce :term:`CVE_CHECK_REPORT_PATCHED` variable +- ref-manual: merge patch-status-* to patch-status +- ref-manual: release-process: add a reference to the doc's release +- ref-manual: release-process: refresh the current LTS releases +- ref-manual: release-process: update releases.svg +- ref-manual: release-process: update releases.svg with month after "Current" +- ref-manual: structure.rst: document missing tmp/ dirs +- ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables +- rootfs-postcommands.bbclass: make opkg status reproducible +- rpm: fix expansion of %_libdir in macros +- ruby: upgrade to 3.3.5 +- runqemu: Fix detection of -serial parameter +- runqemu: keep generating tap devices +- scripts/install-buildtools: Update to 5.0.3 +- sqlite3: upgrade to 3.45.3 +- styles: vocabularies: Yocto: add sstate +- systemtap: fix systemtap-native build error on Fedora 40 +- sysvinit: take release tarballs from github +- testexport: fallback for empty :term:`IMAGE_LINK_NAME` +- testimage: fallback for empty :term:`IMAGE_LINK_NAME` +- uboot-sign: fix counters in do_uboot_assemble_fitimage +- vim: upgrade to 9.1.0764 +- virglrenderer: Add patch to fix -int-conversion build issue +- webkitgtk: upgrade to 2.44.3 +- weston: backport patch to allow neatvnc < v0.9.0 +- wpa-supplicant: Patch security advisory 2024-2 +- xserver-xorg: upgrade to 21.1.14 + + +Known Issues in Yocto-5.0.5 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- ``oeqa/runtime``: the ``beaglebone-yocto`` target fails the parselogs runtime test due to unexpected kernel error messages in the log (see :yocto_bugs:`bug 15624 </show_bug.cgi?id=15624>` on Bugzilla). + + +Contributors to Yocto-5.0.5 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- Aditya Tayade +- Adrian Freihofer +- Aleksandar Nikolic +- Alexander Kanavin +- Antonin Godard +- Anuj Mittal +- Bruce Ashfield +- Claus Stovgaard +- Deepesh Varatharajan +- Deepthi Hemraj +- Hiago De Franco +- Hitendra Prajapati +- Jaeyoon Jung +- Jiaying Song +- Jonas Gorski +- Jose Quaresma +- Joshua Watt +- Julien Stephan +- Jörg Sommer +- Khem Raj +- Konrad Weihmann +- Lee Chee Yang +- Louis Rannou +- Macpaul Lin +- Martin Jansa +- Paul Barker +- Paul Gerber +- Peter Kjellerstedt +- Peter Marko +- Purushottam Choudhary +- Richard Purdie +- Robert Yang +- Rohini Sangam +- Ross Burton +- Sergei Zhmylev +- Shunsuke Tokumoto +- Steve Sakoman +- Teresa Remmet +- Victor Kamensky +- Vijay Anusuri +- Wang Mingyu +- Yi Zhao +- Yogita Urade +- Zahir Hussain + + +Repositories / Downloads for Yocto-5.0.5 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.5 </poky/log/?h=yocto-5.0.5>` +- Git Revision: :yocto_git:`dce4163d42f7036ea216b52b9135968d51bec4c1 </poky/commit/?id=dce4163d42f7036ea216b52b9135968d51bec4c1>` +- Release Artefact: poky-dce4163d42f7036ea216b52b9135968d51bec4c1 +- sha: ad35a965a284490a962f6854ace536b8795f96514e14bf5c79f91f6d76ac25d3 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.5/poky-dce4163d42f7036ea216b52b9135968d51bec4c1.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.5/poky-dce4163d42f7036ea216b52b9135968d51bec4c1.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.5 </openembedded-core/log/?h=yocto-5.0.5>` +- Git Revision: :oe_git:`a051a066da2874b95680d0353dfa18c1d56b2670 </openembedded-core/commit/?id=a051a066da2874b95680d0353dfa18c1d56b2670>` +- Release Artefact: oecore-a051a066da2874b95680d0353dfa18c1d56b2670 +- sha: 16d252aade00161ade2692f41b2da3effeb1f41816a66db843bb1c5495125e93 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.5/oecore-a051a066da2874b95680d0353dfa18c1d56b2670.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.5/oecore-a051a066da2874b95680d0353dfa18c1d56b2670.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.5 </meta-mingw/log/?h=yocto-5.0.5>` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.5/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.5/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :bitbake_git:`/` +- Branch: :bitbake_git:`2.8 </log/?h=2.8>` +- Tag: :bitbake_git:`yocto-5.0.5 </log/?h=yocto-5.0.5>` +- Git Revision: :bitbake_git:`377eba2361850adfb8ce7e761ef9c76be287f88c </commit/?id=377eba2361850adfb8ce7e761ef9c76be287f88c>` +- Release Artefact: bitbake-377eba2361850adfb8ce7e761ef9c76be287f88c +- sha: 4a5a35098eec719bbb879706d50e552a2b709295db4055c8050ae7dda1eb2994 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.5/bitbake-377eba2361850adfb8ce7e761ef9c76be287f88c.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.5/bitbake-377eba2361850adfb8ce7e761ef9c76be287f88c.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.5 </yocto-docs/log/?h=yocto-5.0.5>` +- Git Revision: :yocto_git:`e882cb3e5816d081eb05cb83488f286cca70e0c6 </yocto-docs/commit/?id=e882cb3e5816d081eb05cb83488f286cca70e0c6>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.6.rst b/poky/documentation/migration-guides/release-notes-5.0.6.rst new file mode 100644 index 0000000000..b6f42198a1 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.6.rst @@ -0,0 +1,223 @@ +Release notes for Yocto-5.0.6 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- acpica: Fix :cve_nist:`2024-24856` +- curl: Fix :cve_nist:`2024-9681` +- dropbear: Fix :cve_nist:`2023-48795` +- expat: Fix :cve_nist:`2024-50602` +- ffmpeg: Fix :cve_nist:`2023-49501`, :cve_nist:`2023-49528`, :cve_nist:`2023-50007`, + :cve_nist:`2024-7055` and :cve_mitre:`2024-28661` +- glib-2.0: Fix :cve_nist:`2024-52533` +- ghostscript: Fix :cve_nist:`2024-46951`, :cve_nist:`2024-46952`, :cve_nist:`2024-46953`, + :cve_nist:`2024-46954`, :cve_nist:`2024-46955` and :cve_nist:`2024-46956` +- gstreamer1.0: Ignore :cve_nist:`2024-0444` +- libpam: Fix :cve_nist:`2024-10041` +- libsndfile: Fix :cve_nist:`2024-50612` +- libsoup: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531` and :cve_nist:`2024-52532` +- ovmf: Fix :cve_nist:`2024-1298` and :cve_nist:`2024-38796` +- python3-zipp: Fix :cve_nist:`2024-5569` +- qemu: Fix :cve_nist:`2024-4693`, :cve_nist:`2024-6505` and :cve_nist:`2024-7730` +- qemu: Ignore :cve_nist:`2024-6505` + + +Fixes in Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~ + +- binutils: Add missing perl modules to :term:`RDEPENDS` for nativesdk variant +- binutils: stable 2.42 branch update +- bitbake: Remove custom exception backtrace formatting +- bitbake: fetch2/git: Use quote from shlex, not pipes +- bitbake: fetch2: use persist_data context managers +- bitbake: fetch/wget: Increase timeout to 100s from 30s +- bitbake: persist_data: close connection in SQLTable __exit__ +- bitbake: runqueue: Fix performance of multiconfigs with large overlap +- bitbake: runqueue: Fix scenetask processing performance issue +- bitbake: runqueue: Optimise setscene loop processing +- build-appliance-image: Update to scarthgap head revision +- builder: set :term:`CVE_PRODUCT` +- cmake: Fix sporadic issues when determining compiler internals +- cml1: do_diffconfig: Don't override .config with .config.orig +- contributor-guide: Remove duplicated words +- dev-manual: bblock: use warning block instead of attention +- dev-manual: document how to provide confs from layer.conf +- dnf: drop python3-iniparse from :term:`DEPENDS` and :term:`RDEPENDS` +- do_package/sstate/sstatesig: Change timestamp clamping to hash output only +- doc: Makefile: add support for xelatex +- doc: Makefile: publish pdf and epub versions too +- doc: Makefile: remove inkscape, replace by rsvg-convert +- doc: add a download page for epub and pdf +- doc: conf.py: add a bitbake_git extlink +- doc: standards.md: add a section on admonitions +- doc: sphinx-static: switchers.js.in: do not refer to URL_ROOT anymore +- dropbear: backport fix for concurrent channel open/close +- enchant2: fix do_fetch error +- expat: upgrade to 2.6.4 +- gcc: backport patch to fix an issue with tzdata 2024b +- ghostscript: upgrade to 10.04.0 +- glibc: stable 2.39 branch updates +- groff: fix rare build race in hdtbl +- libgcrypt: Fix building error with '-O2' in sysroot path +- libpam: drop cracklib from :term:`DEPENDS` +- libxml-parser-perl: fix do_fetch error +- llvm: reduce size of -dbg package +- lttng-ust: backport patch to fix cmake-multiple-shared-libraries build error +- migration-guides: add release notes for 4.0.23 and 5.0.5 +- ninja: fix build with python 3.13 +- oeqa/runtime/ssh: Fix incorrect timeout fix +- oeqa/runtime/ssh: Rework ssh timeout +- oeqa/utils/gitarchive: Return tag name and improve exclude handling +- package_rpm: Check if file exists before open() +- package_rpm: restrict rpm to 4 threads +- package_rpm: use zstd's default compression level +- poky.conf: bump version for 5.0.6 +- pseudo: Fix envp bug and add posix_spawn wrapper +- python3-poetry-core: drop python3-six from :term:`RDEPENDS` +- python3-requests: upgrade to 2.32.2 +- python3-urllib3: upgrade to 2.2.2 +- qemu: upgrade to 8.2.7 +- qemurunner: Clean up serial_lock handling +- ref-manual: classes: fix bin_package description +- resulttool: Add --logfile-archive option to store mode +- resulttool: Allow store to filter to specific revisions +- resulttool: Clean up repoducible build logs +- resulttool: Fix passthrough of --all files in store mode +- resulttool: Handle ltp rawlogs as well as ptest +- resulttool: Improve repo layout for oeselftest results +- resulttool: Trim the precision of duration information +- resulttool: Use single space indentation in json output +- rootfs: Ensure run-postinsts is not uninstalled for read-only-rootfs-delayed-postinsts +- rxvt-unicode.inc: disable the terminfo installation by setting TIC to : +- sanity: check for working user namespaces +- scripts/install-buildtools: Update to 5.0.5 +- selftest/reproducible: Clean up pathnames +- selftest/reproducible: Drop rawlogs +- shared-mime-info: drop itstool-native from :term:`DEPENDS` +- strace: download release tarballs from GitHub +- systemd-boot: drop intltool-native from :term:`DEPENDS` +- systemd: drop intltool-native from :term:`DEPENDS` +- systemd: upgrade to 255.13 +- sysvinit: backport patch for fixing one issue of pidof +- tcl: skip io-13.6 test case +- toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails +- tune-cortexa32: set tune feature as armv8a +- tzcode-native: upgrade to 2024b +- tzdata: upgrade to 2024b +- uboot-sign: fix concat_dtb arguments +- udev-extraconf: fix network.sh script did not configure hotplugged interfaces +- webkitgtk: fix erroneous use of unsuported DEBUG_LEVELFLAG variable +- wireless-regdb: upgrade to 2024.10.07 + + +Known Issues in Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + + +Contributors to Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Aleksandar Nikolic +- Alexander Kanavin +- Antonin Godard +- Archana Polampalli +- Bin Lan +- Changqing Li +- Chen Qi +- Chris Laplante +- Clayton Casciato +- Deepthi Hemraj +- Divya Chellam +- Florian Kreutzer +- Gassner, Tobias.ext +- Guðni Már Gilbert +- Harish Sadineni +- Hitendra Prajapati +- Hongxu Jia +- Jagadeesh Krishnanjanappa +- Jiaying Song +- Jinfeng Wang +- Joshua Watt +- Lee Chee Yang +- Markus Volk +- Michael Opdenacker +- Pavel Zhukov +- Peter Marko +- Philip Lorenz +- Randy MacLeod +- Regis Dargent +- Richard Purdie +- Robert Yang +- Ross Burton +- Soumya Sambu +- Steve Sakoman +- Talel BELHAJSALEM +- Trevor Gamblin +- Vijay Anusuri +- Wang Mingyu +- Yogita Urade + + +Repositories / Downloads for Yocto-5.0.6 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.6 </poky/log/?h=yocto-5.0.6>` +- Git Revision: :yocto_git:`2541a8171f91812a4b16e7dc4da0d77d2318a256 </poky/commit/?id=2541a8171f91812a4b16e7dc4da0d77d2318a256>` +- Release Artefact: poky-2541a8171f91812a4b16e7dc4da0d77d2318a256 +- sha: b77157596ae75d163387a08a317397a57ab8fa6cf4725f28e344fae3f69cca4d +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/poky-2541a8171f91812a4b16e7dc4da0d77d2318a256.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.6 </openembedded-core/log/?h=yocto-5.0.6>` +- Git Revision: :oe_git:`336eec6808710f260a5336ca8ca98139a80ccb14 </openembedded-core/commit/?id=336eec6808710f260a5336ca8ca98139a80ccb14>` +- Release Artefact: oecore-336eec6808710f260a5336ca8ca98139a80ccb14 +- sha: 38c4fa7e7e88c28361c012dd5baabe373e2ec3c8aba6194146768b146192cceb +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/oecore-336eec6808710f260a5336ca8ca98139a80ccb14.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.6 </meta-mingw/log/?h=yocto-5.0.6>` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.6 </bitbake/log/?h=yocto-5.0.6>` +- Git Revision: :oe_git:`f40a3a477d5241b697bf2fb030dd804c1ff5839f </bitbake/commit/?id=f40a3a477d5241b697bf2fb030dd804c1ff5839f>` +- Release Artefact: bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f +- sha: dbfc056c7408a5547f624799621ab1261a05685112e0922a88007723b1edbc87 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.6/bitbake-f40a3a477d5241b697bf2fb030dd804c1ff5839f.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.6 </yocto-docs/log/?h=yocto-5.0.6>` +- Git Revision: :yocto_git:`TBD </yocto-docs/commit/?id=TBD>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.7.rst b/poky/documentation/migration-guides/release-notes-5.0.7.rst new file mode 100644 index 0000000000..1c8a4809a9 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.7.rst @@ -0,0 +1,331 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.7 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.7 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- avahi: Fix :cve_nist:`2024-52616` +- binutils: Fix :cve_nist:`2024-53589` +- ffmpeg: Fix :cve_nist:`2024-35366`, :cve_nist:`2024-35367` and :cve_nist:`2024-35368` +- gstreamer1.0-plugins-base: Fix :cve_nist:`2024-47538`, :cve_nist:`2024-47541`, + :cve_nist:`2024-47542`, :cve_nist:`2024-47600`, :cve_nist:`2024-47607`, :cve_nist:`2024-47615` + and :cve_nist:`2024-47835` +- gstreamer1.0-plugins-good: Fix :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, + :cve_nist:`2024-47540`, :cve_nist:`2024-47543`, :cve_nist:`2024-47544`, :cve_nist:`2024-47545`, + :cve_nist:`2024-47546`, :cve_nist:`2024-47596`, :cve_nist:`2024-47597`, :cve_nist:`2024-47598`, + :cve_nist:`2024-47599`, :cve_nist:`2024-47601`, :cve_nist:`2024-47602`, :cve_nist:`2024-47603`, + :cve_nist:`2024-47606`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775`, + :cve_nist:`2024-47776`, :cve_nist:`2024-47777`, :cve_nist:`2024-47778` and :cve_nist:`2024-47834` +- gstreamer1.0: Ignore :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, :cve_nist:`2024-47540`, + :cve_nist:`2024-47543`, :cve_nist:`2024-47544`, :cve_nist:`2024-47545`, :cve_nist:`2024-47538`, + :cve_nist:`2024-47541`, :cve_nist:`2024-47542`, :cve_nist:`2024-47600`, :cve_nist:`2024-47607`, + :cve_nist:`2024-47615`, :cve_nist:`2024-47835`, :cve_nist:`2024-47546`, :cve_nist:`2024-47596`, + :cve_nist:`2024-47597`, :cve_nist:`2024-47598`, :cve_nist:`2024-47599`, :cve_nist:`2024-47601`, + :cve_nist:`2024-47602`, :cve_nist:`2024-47603`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, + :cve_nist:`2024-47775`, :cve_nist:`2024-47776`, :cve_nist:`2024-47777`, :cve_nist:`2024-47778` + and :cve_nist:`2024-47834` +- libarchive: Fix :cve_nist:`2024-20696` +- libxml2: Fix :cve_nist:`2024-40896` +- linux-yocto/6.6: Fix :cve_nist:`2024-27059`, :cve_nist:`2024-43098`, :cve_nist:`2024-45828`, + :cve_nist:`2024-47141`, :cve_nist:`2024-47143`, :cve_nist:`2024-47704`, :cve_nist:`2024-47809`, + :cve_nist:`2024-48873`, :cve_nist:`2024-48875`, :cve_nist:`2024-48881`, :cve_nist:`2024-49863`, + :cve_nist:`2024-49864`, :cve_nist:`2024-49866`, :cve_nist:`2024-49867`, :cve_nist:`2024-49868`, + :cve_nist:`2024-49870`, :cve_nist:`2024-49871`, :cve_nist:`2024-49874`, :cve_nist:`2024-49875`, + :cve_nist:`2024-49877`, :cve_nist:`2024-49878`, :cve_nist:`2024-49879`, :cve_nist:`2024-49881`, + :cve_nist:`2024-49882`, :cve_nist:`2024-49883`, :cve_nist:`2024-49884`, :cve_nist:`2024-49886`, + :cve_nist:`2024-49889`, :cve_nist:`2024-49890`, :cve_nist:`2024-49892`, :cve_nist:`2024-49894`, + :cve_nist:`2024-49895`, :cve_nist:`2024-49896`, :cve_nist:`2024-49900`, :cve_nist:`2024-49901`, + :cve_nist:`2024-49902`, :cve_nist:`2024-49903`, :cve_nist:`2024-49905`, :cve_nist:`2024-49907`, + :cve_nist:`2024-49912`, :cve_nist:`2024-49913`, :cve_nist:`2024-49924`, :cve_nist:`2024-49925`, + :cve_nist:`2024-49927`, :cve_nist:`2024-49929`, :cve_nist:`2024-49930`, :cve_nist:`2024-49931`, + :cve_nist:`2024-49933`, :cve_nist:`2024-49935`, :cve_nist:`2024-49936`, :cve_nist:`2024-49937`, + :cve_nist:`2024-49938`, :cve_nist:`2024-49939`, :cve_nist:`2024-49944`, :cve_nist:`2024-49946`, + :cve_nist:`2024-49947`, :cve_nist:`2024-49948`, :cve_nist:`2024-49949`, :cve_nist:`2024-49950`, + :cve_nist:`2024-49951`, :cve_nist:`2024-49952`, :cve_nist:`2024-49953`, :cve_nist:`2024-49954`, + :cve_nist:`2024-49955`, :cve_nist:`2024-49957`, :cve_nist:`2024-49958`, :cve_nist:`2024-49959`, + :cve_nist:`2024-49960`, :cve_nist:`2024-49961`, :cve_nist:`2024-49962`, :cve_nist:`2024-49963`, + :cve_nist:`2024-49965`, :cve_nist:`2024-49966`, :cve_nist:`2024-49969`, :cve_nist:`2024-49973`, + :cve_nist:`2024-49975`, :cve_nist:`2024-49976`, :cve_nist:`2024-49977`, :cve_nist:`2024-49978`, + :cve_nist:`2024-49980`, :cve_nist:`2024-49981`, :cve_nist:`2024-49982`, :cve_nist:`2024-49983`, + :cve_nist:`2024-49985`, :cve_nist:`2024-49986`, :cve_nist:`2024-49987`, :cve_nist:`2024-49988`, + :cve_nist:`2024-49989`, :cve_nist:`2024-49991`, :cve_nist:`2024-49992`, :cve_nist:`2024-49995`, + :cve_nist:`2024-49996`, :cve_nist:`2024-49997`, :cve_nist:`2024-50000`, :cve_nist:`2024-50001`, + :cve_nist:`2024-50002`, :cve_nist:`2024-50003`, :cve_nist:`2024-50005`, :cve_nist:`2024-50006`, + :cve_nist:`2024-50007`, :cve_nist:`2024-50008`, :cve_nist:`2024-50012`, :cve_nist:`2024-50013`, + :cve_nist:`2024-50015`, :cve_nist:`2024-50016`, :cve_nist:`2024-50019`, :cve_nist:`2024-50022`, + :cve_nist:`2024-50023`, :cve_nist:`2024-50024`, :cve_nist:`2024-50026`, :cve_nist:`2024-50029`, + :cve_nist:`2024-50031`, :cve_nist:`2024-50032`, :cve_nist:`2024-50033`, :cve_nist:`2024-50035`, + :cve_nist:`2024-50036`, :cve_nist:`2024-50038`, :cve_nist:`2024-50039`, :cve_nist:`2024-50040`, + :cve_nist:`2024-50041`, :cve_nist:`2024-50044`, :cve_nist:`2024-50045`, :cve_nist:`2024-50046`, + :cve_nist:`2024-50047`, :cve_nist:`2024-50048`, :cve_nist:`2024-50049`, :cve_nist:`2024-50051`, + :cve_nist:`2024-50055`, :cve_nist:`2024-50057`, :cve_nist:`2024-50058`, :cve_nist:`2024-50059`, + :cve_nist:`2024-50060`, :cve_nist:`2024-50061`, :cve_nist:`2024-50062`, :cve_nist:`2024-50063`, + :cve_nist:`2024-50064`, :cve_nist:`2024-50065`, :cve_nist:`2024-50066`, :cve_nist:`2024-50069`, + :cve_nist:`2024-50070`, :cve_nist:`2024-50072`, :cve_nist:`2024-50073`, :cve_nist:`2024-50074`, + :cve_nist:`2024-50075`, :cve_nist:`2024-50076`, :cve_nist:`2024-50077`, :cve_nist:`2024-50078`, + :cve_nist:`2024-50080`, :cve_nist:`2024-50082`, :cve_nist:`2024-50083`, :cve_nist:`2024-50084`, + :cve_nist:`2024-50085`, :cve_nist:`2024-50086`, :cve_nist:`2024-50087`, :cve_nist:`2024-50088`, + :cve_nist:`2024-50093`, :cve_nist:`2024-50095`, :cve_nist:`2024-50096`, :cve_nist:`2024-50098`, + :cve_nist:`2024-50099`, :cve_nist:`2024-50101`, :cve_nist:`2024-50103`, :cve_nist:`2024-50108`, + :cve_nist:`2024-50110`, :cve_nist:`2024-50111`, :cve_nist:`2024-50112`, :cve_nist:`2024-50115`, + :cve_nist:`2024-50116`, :cve_nist:`2024-50117`, :cve_nist:`2024-50120`, :cve_nist:`2024-50121`, + :cve_nist:`2024-50124`, :cve_nist:`2024-50125`, :cve_nist:`2024-50126`, :cve_nist:`2024-50127`, + :cve_nist:`2024-50128`, :cve_nist:`2024-50130`, :cve_nist:`2024-50131`, :cve_nist:`2024-50133`, + :cve_nist:`2024-50134`, :cve_nist:`2024-50135`, :cve_nist:`2024-50136`, :cve_nist:`2024-50139`, + :cve_nist:`2024-50140`, :cve_nist:`2024-50141`, :cve_nist:`2024-50142`, :cve_nist:`2024-50143`, + :cve_nist:`2024-50145`, :cve_nist:`2024-50147`, :cve_nist:`2024-50148`, :cve_nist:`2024-50150`, + :cve_nist:`2024-50151`, :cve_nist:`2024-50152`, :cve_nist:`2024-50153`, :cve_nist:`2024-50154`, + :cve_nist:`2024-50155`, :cve_nist:`2024-50156`, :cve_nist:`2024-50158`, :cve_nist:`2024-50159`, + :cve_nist:`2024-50160`, :cve_nist:`2024-50162`, :cve_nist:`2024-50163`, :cve_nist:`2024-50164`, + :cve_nist:`2024-50166`, :cve_nist:`2024-50167`, :cve_nist:`2024-50168`, :cve_nist:`2024-50169`, + :cve_nist:`2024-50170`, :cve_nist:`2024-50171`, :cve_nist:`2024-50172`, :cve_nist:`2024-50175`, + :cve_nist:`2024-50176`, :cve_nist:`2024-50179`, :cve_nist:`2024-50180`, :cve_nist:`2024-50181`, + :cve_nist:`2024-50182`, :cve_nist:`2024-50183`, :cve_nist:`2024-50184`, :cve_nist:`2024-50185`, + :cve_nist:`2024-50186`, :cve_nist:`2024-50187`, :cve_nist:`2024-50188`, :cve_nist:`2024-50189`, + :cve_nist:`2024-50191`, :cve_nist:`2024-50192`, :cve_nist:`2024-50193`, :cve_nist:`2024-50194`, + :cve_nist:`2024-50195`, :cve_nist:`2024-50196`, :cve_nist:`2024-50198`, :cve_nist:`2024-50201`, + :cve_nist:`2024-50202`, :cve_nist:`2024-50205`, :cve_nist:`2024-50208`, :cve_nist:`2024-50209`, + :cve_nist:`2024-50211`, :cve_nist:`2024-50215`, :cve_nist:`2024-50222`, :cve_nist:`2024-50223`, + :cve_nist:`2024-50224`, :cve_nist:`2024-50226`, :cve_nist:`2024-50229`, :cve_nist:`2024-50230`, + :cve_nist:`2024-50231`, :cve_nist:`2024-50232`, :cve_nist:`2024-50233`, :cve_nist:`2024-50234`, + :cve_nist:`2024-50235`, :cve_nist:`2024-50236`, :cve_nist:`2024-50237`, :cve_nist:`2024-50239`, + :cve_nist:`2024-50240`, :cve_nist:`2024-50242`, :cve_nist:`2024-50243`, :cve_nist:`2024-50244`, + :cve_nist:`2024-50245`, :cve_nist:`2024-50246`, :cve_nist:`2024-50247`, :cve_nist:`2024-50248`, + :cve_nist:`2024-50249`, :cve_nist:`2024-50250`, :cve_nist:`2024-50251`, :cve_nist:`2024-50252`, + :cve_nist:`2024-50255`, :cve_nist:`2024-50256`, :cve_nist:`2024-50257`, :cve_nist:`2024-50258`, + :cve_nist:`2024-50259`, :cve_nist:`2024-50261`, :cve_nist:`2024-50262`, :cve_nist:`2024-50264`, + :cve_nist:`2024-50265`, :cve_nist:`2024-50267`, :cve_nist:`2024-50268`, :cve_nist:`2024-50269`, + :cve_nist:`2024-50271`, :cve_nist:`2024-50272`, :cve_nist:`2024-50273`, :cve_nist:`2024-50275`, + :cve_nist:`2024-50276`, :cve_nist:`2024-50278`, :cve_nist:`2024-50279`, :cve_nist:`2024-50282`, + :cve_nist:`2024-50283`, :cve_nist:`2024-50284`, :cve_nist:`2024-50285`, :cve_nist:`2024-50286`, + :cve_nist:`2024-50287`, :cve_nist:`2024-50292`, :cve_nist:`2024-50296`, :cve_nist:`2024-50298`, + :cve_nist:`2024-50299`, :cve_nist:`2024-50300`, :cve_nist:`2024-50301`, :cve_nist:`2024-50302`, + :cve_nist:`2024-53042`, :cve_nist:`2024-53043`, :cve_nist:`2024-53046`, :cve_nist:`2024-53047`, + :cve_nist:`2024-53052`, :cve_nist:`2024-53055`, :cve_nist:`2024-53057`, :cve_nist:`2024-53058`, + :cve_nist:`2024-53059`, :cve_nist:`2024-53060`, :cve_nist:`2024-53061`, :cve_nist:`2024-53063`, + :cve_nist:`2024-53066`, :cve_nist:`2024-53068`, :cve_nist:`2024-53072`, :cve_nist:`2024-53076`, + :cve_nist:`2024-53079`, :cve_nist:`2024-53081`, :cve_nist:`2024-53082`, :cve_nist:`2024-53083`, + :cve_nist:`2024-53088`, :cve_nist:`2024-53091`, :cve_nist:`2024-53093`, :cve_nist:`2024-53094`, + :cve_nist:`2024-53096`, :cve_nist:`2024-53099`, :cve_nist:`2024-53100`, :cve_nist:`2024-53101`, + :cve_nist:`2024-53103`, :cve_nist:`2024-53108`, :cve_nist:`2024-53109`, :cve_nist:`2024-53110`, + :cve_nist:`2024-53112`, :cve_nist:`2024-53113`, :cve_nist:`2024-53119`, :cve_nist:`2024-53120`, + :cve_nist:`2024-53121`, :cve_nist:`2024-53122`, :cve_nist:`2024-53123`, :cve_nist:`2024-53126`, + :cve_nist:`2024-53127`, :cve_nist:`2024-53129`, :cve_nist:`2024-53130`, :cve_nist:`2024-53131`, + :cve_nist:`2024-53134`, :cve_nist:`2024-53135`, :cve_nist:`2024-53138`, :cve_nist:`2024-53139`, + :cve_nist:`2024-53140`, :cve_nist:`2024-53141`, :cve_nist:`2024-53142`, :cve_nist:`2024-53145`, + :cve_nist:`2024-53146`, :cve_nist:`2024-53150`, :cve_nist:`2024-53151`, :cve_nist:`2024-53154`, + :cve_nist:`2024-53155`, :cve_nist:`2024-53156`, :cve_nist:`2024-53157`, :cve_nist:`2024-53161`, + :cve_nist:`2024-53165`, :cve_nist:`2024-53166`, :cve_nist:`2024-53168`, :cve_nist:`2024-53171`, + :cve_nist:`2024-53173`, :cve_nist:`2024-53175`, :cve_nist:`2024-53180`, :cve_nist:`2024-53188`, + :cve_nist:`2024-53191`, :cve_nist:`2024-53200`, :cve_nist:`2024-53202`, :cve_nist:`2024-53208`, + :cve_nist:`2024-53210`, :cve_nist:`2024-53213`, :cve_nist:`2024-53215`, :cve_nist:`2024-53217`, + :cve_nist:`2024-53224`, :cve_nist:`2024-53226`, :cve_nist:`2024-53227`, :cve_nist:`2024-53230`, + :cve_nist:`2024-53231`, :cve_nist:`2024-53237`, :cve_nist:`2024-53239`, :cve_nist:`2024-54683`, + :cve_nist:`2024-55916`, :cve_nist:`2024-56369`, :cve_nist:`2024-56538`, :cve_nist:`2024-56551`, + :cve_nist:`2024-56567`, :cve_nist:`2024-56568`, :cve_nist:`2024-56569`, :cve_nist:`2024-56572`, + :cve_nist:`2024-56574`, :cve_nist:`2024-56575`, :cve_nist:`2024-56577`, :cve_nist:`2024-56578`, + :cve_nist:`2024-56579`, :cve_nist:`2024-56581`, :cve_nist:`2024-56587`, :cve_nist:`2024-56593`, + :cve_nist:`2024-56595`, :cve_nist:`2024-56596`, :cve_nist:`2024-56598`, :cve_nist:`2024-56600`, + :cve_nist:`2024-56601`, :cve_nist:`2024-56602`, :cve_nist:`2024-56603`, :cve_nist:`2024-56604`, + :cve_nist:`2024-56605`, :cve_nist:`2024-56606`, :cve_nist:`2024-56611`, :cve_nist:`2024-56613`, + :cve_nist:`2024-56614`, :cve_nist:`2024-56615`, :cve_nist:`2024-56617`, :cve_nist:`2024-56622`, + :cve_nist:`2024-56623`, :cve_nist:`2024-56626`, :cve_nist:`2024-56627`, :cve_nist:`2024-56629`, + :cve_nist:`2024-56631`, :cve_nist:`2024-56634`, :cve_nist:`2024-56635`, :cve_nist:`2024-56640`, + :cve_nist:`2024-56642`, :cve_nist:`2024-56643`, :cve_nist:`2024-56648`, :cve_nist:`2024-56649`, + :cve_nist:`2024-56650`, :cve_nist:`2024-56651`, :cve_nist:`2024-56653`, :cve_nist:`2024-56654`, + :cve_nist:`2024-56657`, :cve_nist:`2024-56658`, :cve_nist:`2024-56659`, :cve_nist:`2024-56660`, + :cve_nist:`2024-56662`, :cve_nist:`2024-56663`, :cve_nist:`2024-56664`, :cve_nist:`2024-56667`, + :cve_nist:`2024-56670`, :cve_nist:`2024-56672`, :cve_nist:`2024-56675`, :cve_nist:`2024-56687`, + :cve_nist:`2024-56688`, :cve_nist:`2024-56689`, :cve_nist:`2024-56692`, :cve_nist:`2024-56694`, + :cve_nist:`2024-56698`, :cve_nist:`2024-56704`, :cve_nist:`2024-56708`, :cve_nist:`2024-56710`, + :cve_nist:`2024-56715`, :cve_nist:`2024-56716`, :cve_nist:`2024-56717`, :cve_nist:`2024-56718`, + :cve_nist:`2024-56720`, :cve_nist:`2024-56722`, :cve_nist:`2024-56723`, :cve_nist:`2024-56724`, + :cve_nist:`2024-56725`, :cve_nist:`2024-56726`, :cve_nist:`2024-56727`, :cve_nist:`2024-56728`, + :cve_nist:`2024-56729`, :cve_nist:`2024-56739`, :cve_nist:`2024-56741`, :cve_nist:`2024-56744`, + :cve_nist:`2024-56745`, :cve_nist:`2024-56746`, :cve_nist:`2024-56747`, :cve_nist:`2024-56748`, + :cve_nist:`2024-56751`, :cve_nist:`2024-56752`, :cve_nist:`2024-56754`, :cve_nist:`2024-56755`, + :cve_nist:`2024-56756`, :cve_nist:`2024-56760`, :cve_nist:`2024-56763`, :cve_nist:`2024-56765`, + :cve_nist:`2024-56767`, :cve_nist:`2024-56769`, :cve_nist:`2024-56770`, :cve_nist:`2024-56774`, + :cve_nist:`2024-56776`, :cve_nist:`2024-56777`, :cve_nist:`2024-56778`, :cve_nist:`2024-56779`, + :cve_nist:`2024-56780`, :cve_nist:`2024-56781`, :cve_nist:`2024-56783`, :cve_nist:`2024-56785`, + :cve_nist:`2024-56786`, :cve_nist:`2024-56787`, :cve_nist:`2024-57798`, :cve_nist:`2024-57807` + and :cve_nist:`2024-57874` +- ofono: Fix :cve_nist:`2023-4232`, :cve_nist:`2023-4235`, :cve_nist:`2024-7539`, + :cve_nist:`2024-7540`, :cve_nist:`2024-7541`, :cve_nist:`2024-7542`, :cve_nist:`2024-7543`, + :cve_nist:`2024-7544`, :cve_nist:`2024-7545`, :cve_nist:`2024-7546` and :cve_nist:`2024-7547` +- rsync: Fix :cve_nist:`2024-12084`, :cve_nist:`2024-12085`, :cve_nist:`2024-12086`, + :cve_nist:`2024-12087`, :cve_nist:`2024-12088` and :cve_nist:`2024-12747` +- socat: Fix :cve_nist:`2024-54661` +- subversion: Fix :cve_nist:`2024-46901` +- wget: Fix :cve_nist:`2024-10524` + + +Fixes in Yocto-5.0.7 +~~~~~~~~~~~~~~~~~~~~ + +- bitbake: cooker: Make cooker 'skiplist' per-multiconfig/mc +- bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48 +- bitbake: ui/knotty: print log paths for failed tasks in summary +- bitbake: ui/knotty: respect NO_COLOR & check for tty; rename print_hyperlink => format_hyperlink +- bluez5: Revert "bluez5: remove configuration files from install task" +- bluez5: backport patch to fix address type when loading keys +- boost: fix do_fetch error +- build-appliance-image: Update to scarthgap head revision +- classes/nativesdk: also override :term:`TUNE_PKGARCH` +- classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture +- contributor-guide/submit-changes.rst: suggest to remove the git signature +- cve-update-nvd2-native: Handle :term:`BB_NO_NETWORK` and missing db +- cve-update-nvd2-native: Tweak to work better with NFS :term:`DL_DIR` +- dev-manual/bmaptool.rst: correct command for bmaptool-native +- dev-manual/bmaptool.rst: simplify and fix instructions +- dev-manual: fix styling of references to bmaptool +- docs: Gather dependencies in poky.yaml.in +- docs: Update autobuilder URLs to valkyrie +- docs: Update the documentation for :term:`SRCPV` +- gcc: Fix c++: tweak for Wrange-loop-construct +- groff: Fix race issues for parallel build +- libgfortran: fix buildpath QA issue +- libxml2: Upgrade to 2.12.9 +- linux-yocto/6.6: bsp/genericarm64: disable ARM64_SME +- linux-yocto/6.6: genericarm64.cfg: enable CONFIG_DMA_CMA +- linux-yocto/6.6: update to v6.6.69 +- lttng-modules: fix sched_stat_runtime changed in Linux 6.6.66 +- migration-guides: add release notes for 5.0.6 +- oeqa/ssh: allow to retrieve raw, unformatted ouput +- ovmf-native: remove .pyc files from install +- poky.conf: add new tested distros +- poky.conf: bump version for 5.0.7 +- poky.yaml.in: add missing locales dependency +- poky.yaml.in: replace inkscape dependency by librsvg2-bin +- populate_sdk_ext: write_local_conf add shutil import +- pulseaudio: fix webrtc audio depdency +- python3-requests: upgrade to 2.32.3 +- python3: Drop empty patch +- python3: add dependency on -compression to -core +- python3: upgrade to 3.12.7 +- ref-manual: move runtime-testing section to the test-manual +- ref-manual: use standardized method accross both ubuntu and debian for locale install +- ref-manual: SSTATE_MIRRORS/SOURCE_MIRROR_URL: add instructions for mirror authentication +- reproducible-builds.rst: show how to build a single package +- rust-target-config: Fix TARGET_C_INT_WIDTH with correct size +- rust: Revert "rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS" +- rust: add reproducibility patch to eliminate host leakage +- rust: build the default set of tools +- rust: correctly link rust-snapshot into build/stage0 +- rust: use rust-snapshot binaries only in rust-native +- sanity.bbclass: skip check_userns for non-local uid +- scripts/install-buildtools: Update to 5.0.6 +- system-requirements.rst: add dependencies for pdf builds +- system-requirements: add fedora 39 to supported distros +- system-requirements: update list of supported distros +- systemd: enable create-log-dirs +- test-manual/reproducible-builds: fix reproducible links + + +Known Issues in Yocto-5.0.7 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.0.7 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Aleksandar Nikolic +- Alexander Kanavin +- Alexis Lothoré +- Antonin Godard +- Archana Polampalli +- Bruce Ashfield +- Catalin Popescu +- Changqing Li +- Chen Qi +- Chris Laplante +- Divya Chellam +- Esben Haabendal +- Guénaël Muller +- Guðni Már Gilbert +- Harish Sadineni +- Hiago De Franco +- Hitendra Prajapati +- Jiaying Song +- Khem Raj +- Lee Chee Yang +- Mark Hatle +- Michael Opdenacker +- Mikko Rapeli +- Peter Marko +- Richard Purdie +- Robert Yang +- Ross Burton +- Soumya Sambu +- Steve Sakoman +- Sunil Dora +- Trevor Gamblin +- Xiangyu Chen +- Yash Shinde +- Zhang Peng +- Zahir Hussain + + +Repositories / Downloads for Yocto-5.0.7 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.7 </poky/log/?h=yocto-5.0.7>` +- Git Revision: :yocto_git:`7dad83c7e5e9637c0ff5d5712409611fd4a14946 </poky/commit/?id=7dad83c7e5e9637c0ff5d5712409611fd4a14946>` +- Release Artefact: poky-7dad83c7e5e9637c0ff5d5712409611fd4a14946 +- sha: ae688031b19b88582bb4a76d0525e3704b981ad1d21eb38a0873cd01dd9a4652 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.7/poky-7dad83c7e5e9637c0ff5d5712409611fd4a14946.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.7/poky-7dad83c7e5e9637c0ff5d5712409611fd4a14946.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.7 </openembedded-core/log/?h=yocto-5.0.7>` +- Git Revision: :oe_git:`62cb12967391db709315820d48853ffa4c6b4740 </openembedded-core/commit/?id=62cb12967391db709315820d48853ffa4c6b4740>` +- Release Artefact: oecore-62cb12967391db709315820d48853ffa4c6b4740 +- sha: bc45429df1805445b678f1b0ed6ce017edfac38c7226dce92ce393b3ef311f95 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.7/oecore-62cb12967391db709315820d48853ffa4c6b4740.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.7/oecore-62cb12967391db709315820d48853ffa4c6b4740.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.7 </meta-mingw/log/?h=yocto-5.0.7>` +- Git Revision: :yocto_git:`acbba477893ef87388effc4679b7f40ee49fc852 </meta-mingw/commit/?id=acbba477893ef87388effc4679b7f40ee49fc852>` +- Release Artefact: meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852 +- sha: 3b7c2f475dad5130bace652b150367f587d44b391218b1364a8bbc430b48c54c +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.7/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.7/meta-mingw-acbba477893ef87388effc4679b7f40ee49fc852.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.7 </bitbake/log/?h=yocto-5.0.7>` +- Git Revision: :oe_git:`aa0e540fc31a1c26839efd2c7785a751ce24ebfb </bitbake/commit/?id=aa0e540fc31a1c26839efd2c7785a751ce24ebfb>` +- Release Artefact: bitbake-aa0e540fc31a1c26839efd2c7785a751ce24ebfb +- sha: 169b68ed7d5e55015b1c35a82d35efaa25c87cba4722c85e66514a15d31e1d28 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.7/bitbake-aa0e540fc31a1c26839efd2c7785a751ce24ebfb.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.7/bitbake-aa0e540fc31a1c26839efd2c7785a751ce24ebfb.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.7 </yocto-docs/log/?h=yocto-5.0.7>` +- Git Revision: :yocto_git:`bb9e018adcc10c642f87d0b95432783b5eb8057b </yocto-docs/commit/?id=bb9e018adcc10c642f87d0b95432783b5eb8057b>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.8.rst b/poky/documentation/migration-guides/release-notes-5.0.8.rst new file mode 100644 index 0000000000..5cb8b30246 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.8.rst @@ -0,0 +1,226 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.8 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.8 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- binutils: Fix :cve_nist:`2025-0840` +- curl: Ignore :cve_nist:`2025-0725` +- elfutils: Fix :cve_nist:`2025-1352`, :cve_nist:`2025-1365` and :cve_nist:`2025-1372` +- ffmpeg: Fix :cve_nist:`2024-35365`, :cve_nist:`2024-35369`, :cve_nist:`2024-36613`, + :cve_nist:`2024-36616`, :cve_nist:`2024-36617`, :cve_nist:`2024-36618`, :cve_nist:`2024-36619`, + :cve_nist:`2025-0518`, :cve_nist:`2025-22919`, :cve_nist:`2025-22921` and :cve_nist:`2025-25473` +- glibc: Fix :cve_nist:`2025-0395` +- gnutls: Fix :cve_nist:`2024-12243` +- go: Fix :cve_nist:`2024-45336`, :cve_nist:`2024-45341` and :cve_nist:`2025-22866` +- gstreamer1.0-rtsp-server: Fix :cve_nist:`2024-44331` +- libcap: Fix :cve_nist:`2025-1390` +- libtasn1: Fix :cve_nist:`2024-12133` +- libxml2: Fix :cve_nist:`2024-56171` and :cve_nist:`2025-24928` +- linux-yocto/6.6: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-53179`, :cve_nist:`2024-56582`, + :cve_nist:`2024-56703`, :cve_nist:`2024-57801`, :cve_nist:`2024-57802`, :cve_nist:`2024-57841`, + :cve_nist:`2024-57882`, :cve_nist:`2024-57887`, :cve_nist:`2024-57890`, :cve_nist:`2024-57892`, + :cve_nist:`2024-57895`, :cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57901`, + :cve_nist:`2024-57902`, :cve_nist:`2024-57906`, :cve_nist:`2024-57907`, :cve_nist:`2024-57908`, + :cve_nist:`2024-57910`, :cve_nist:`2024-57911`, :cve_nist:`2024-57912`, :cve_nist:`2024-57913`, + :cve_nist:`2024-57916`, :cve_nist:`2024-57922`, :cve_nist:`2024-57925`, :cve_nist:`2024-57926`, + :cve_nist:`2024-57933`, :cve_nist:`2024-57938`, :cve_nist:`2024-57939`, :cve_nist:`2024-57940`, + :cve_nist:`2024-57949`, :cve_nist:`2024-57951`, :cve_nist:`2025-21631`, :cve_nist:`2025-21636`, + :cve_nist:`2025-21637`, :cve_nist:`2025-21638`, :cve_nist:`2025-21639`, :cve_nist:`2025-21640`, + :cve_nist:`2025-21642`, :cve_nist:`2025-21652`, :cve_nist:`2025-21658`, :cve_nist:`2025-21665`, + :cve_nist:`2025-21666`, :cve_nist:`2025-21667`, :cve_nist:`2025-21669`, :cve_nist:`2025-21670`, + :cve_nist:`2025-21671`, :cve_nist:`2025-21673`, :cve_nist:`2025-21674`, :cve_nist:`2025-21675`, + :cve_nist:`2025-21676`, :cve_nist:`2025-21680`, :cve_nist:`2025-21681`, :cve_nist:`2025-21683`, + :cve_nist:`2025-21684`, :cve_nist:`2025-21687`, :cve_nist:`2025-21689`, :cve_nist:`2025-21690`, + :cve_nist:`2025-21692`, :cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699` +- openssh: Fix :cve_nist:`2025-26466` +- openssl: Fix :cve_nist:`2024-9143`, :cve_nist:`2024-12797` and :cve_nist:`2024-13176` +- pyhton3: Fix :cve_nist:`2024-12254` and :cve_nist:`2025-0938` +- subversion: Ignore :cve_nist:`2024-45720` +- u-boot: Fix :cve_nist:`2024-57254`, :cve_nist:`2024-57255`, :cve_nist:`2024-57256`, + :cve_nist:`2024-57257`, :cve_nist:`2024-57258` and :cve_nist:`2024-57259` +- vim: Fix :cve_nist:`2025-22134` and :cve_nist:`2025-24014` +- xwayland: Fix :cve_nist:`2024-9632`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, + :cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, + :cve_nist:`2025-26600` and :cve_nist:`2025-26601` + + +Fixes in Yocto-5.0.8 +~~~~~~~~~~~~~~~~~~~~ + +- base-files: Drop /bin/sh dependency +- bind: upgrade to 9.18.33 +- binutils: File name too long causing failure to open temporary head file in dlltool +- binutils: stable 2.42 branch update +- bitbake: bblayers/query: Fix using "removeprefix" string method +- bitbake: bitbake-diffsigs: fix handling when finding only a single sigfile +- bitbake: data_smart.py: clear expand_cache in _setvar_update_overridevars +- bitbake: data_smart.py: remove unnecessary ? from __expand_var_regexp__ +- bitbake: data_smart.py: simple clean up +- build-appliance-image: Update to scarthgap head revision +- ccache.conf: Add include_file_ctime to sloppiness +- cmake: apply parallel build settings to ptest tasks +- contributor-guide/submit-changes: add policy on AI generated code +- dev-manual/building: document the initramfs-framework recipe +- devtool: ide-sdk recommend :term:`DEBUG_BUILD` +- devtool: ide-sdk remove the plugin from eSDK installer +- devtool: ide-sdk sort cmake preset +- devtool: modify support debug-builds +- docs: Add favicon for the documentation html +- docs: Fix typo in standards.md +- docs: Remove all mention of core-image-lsb +- docs: vulnerabilities/classes: remove references to cve-check text format +- files: Amend overlayfs unit descriptions with path information +- files: overlayfs-create-dirs: Improve mount unit dependency +- glibc: stable 2.39 branch updates +- gnupg: upgrade to 2.4.5 +- go: upgrade 1.22.12 +- icu: remove host references in nativesdk to fix reproducibility +- libtasn1: upgrade to 4.20.0 +- libxml2: upgrade to 2.12.10 +- linux-yocto/6.6: upgrade to v6.6.75 +- meta: Enable '-o pipefail' for the SDK installer +- migration-guides: add release notes for 4.0.24, 4.0.25 and 5.0.7 +- oe-selftest: devtool ide-sdk use modify debug-build +- oeqa/sdk/context: fix for gtk3 test failure during do_testsdk +- oeqa/selftest/rust: skip on all MIPS platforms +- openssl: upgrade to 3.2.4 +- pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH +- poky.conf: add ubuntu2404 to :term:`SANITY_TESTED_DISTROS` +- poky.conf: bump version for 5.0.8 +- ppp: Revert lock path to /var/lock +- python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES +- python3: upgrade to 3.12.9 +- qemu: Do not define sched_attr with glibc >= 2.41 +- ref-manual/faq: add q&a on systemd as default +- ref-manual: Add missing variable :term:`IMAGE_ROOTFS_MAXSIZE` +- ref-manual: don't refer to poky-lsb +- ref-manual: remove OE_IMPORTS +- rust-common.bbclass: soft assignment for RUSTLIB path +- rust: fix for rust multilib sdk configuration +- rust: remove redundant cargo config file +- scripts/install-buildtools: Update to 5.0.7 +- sdk-manual: extensible.rst: devtool ide-sdk improve +- sdk-manual: extensible.rst: update devtool ide-sdk +- selftest/rust: correctly form the PATH environment variable +- systemd: add libpcre2 as :term:`RRECOMMENDS` if pcre2 is enabled +- systemd: upgrade to 255.17 +- test-manual/ptest: link to common framework ptest classes +- tzcode-native: Fix compiler setting from 2023d version +- tzdata/tzcode-native: upgrade to 2025a +- u-boot: kernel-fitimage: Fix dependency loop if :term:`UBOOT_SIGN_ENABLE` and UBOOT_ENV enabled +- u-boot: kernel-fitimage: Restore FIT_SIGN_INDIVIDUAL="1" behavior +- uboot-config: fix devtool modify with kernel-fitimage +- vim: upgrade to 9.1.1043 + + +Known Issues in Yocto-5.0.8 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.0.8 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Adrian Freihofer +- Aleksandar Nikolic +- Alessio Cascone +- Alexander Kanavin +- Alexis Cellier +- Antonin Godard +- Archana Polampalli +- Bruce Ashfield +- Chen Qi +- Deepesh Varatharajan +- Divya Chellam +- Enrico Jörns +- Esben Haabendal +- Etienne Cordonnier +- Fabio Berton +- Guðni Már Gilbert +- Harish Sadineni +- Hitendra Prajapati +- Hongxu Jia +- Jiaying Song +- Joerg Schmidt +- Johannes Schneider +- Khem Raj +- Lee Chee Yang +- Marek Vasut +- Marta Rybczynska +- Moritz Haase +- Oleksandr Hnatiuk +- Pedro Ferreira +- Peter Marko +- Poonam Jadhav +- Priyal Doshi +- Ross Burton +- Simon A. Eugster +- Steve Sakoman +- Vijay Anusuri +- Wang Mingyu +- Weisser, Pascal + + +Repositories / Downloads for Yocto-5.0.8 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.8 </poky/log/?h=yocto-5.0.8>` +- Git Revision: :yocto_git:`dc4827b3660bc1a03a2bc3b0672615b50e9137ff </poky/commit/?id=dc4827b3660bc1a03a2bc3b0672615b50e9137ff>` +- Release Artefact: poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff +- sha: ace7264e16e18ed02ef0ad2935fa10b5fad2c4de38b2356f4192b38ef2184504 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.8 </openembedded-core/log/?h=yocto-5.0.8>` +- Git Revision: :oe_git:`cd2b6080a4c0f2ed2c9939ec0b87763aef595048 </openembedded-core/commit/?id=cd2b6080a4c0f2ed2c9939ec0b87763aef595048>` +- Release Artefact: oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048 +- sha: 14c7cd5c62a96ceb9c2141164ea0f087fdbaed99ca3e9a722977a3f12d6381f6 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.8 </meta-mingw/log/?h=yocto-5.0.8>` +- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>` +- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f +- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.8 </bitbake/log/?h=yocto-5.0.8>` +- Git Revision: :oe_git:`7375d32e8c1af20c51abec4eb3b072b4ca58b239 </bitbake/commit/?id=7375d32e8c1af20c51abec4eb3b072b4ca58b239>` +- Release Artefact: bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239 +- sha: 13dffbc162c5b6e2c95fa72936a430b9a542d52d81d502a5d0afc592fbf4a16b +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.8 </yocto-docs/log/?h=yocto-5.0.8>` +- Git Revision: :yocto_git:`7d3cce5b962ca9f73b29affceb7ebc6710627739 </yocto-docs/commit/?id=7d3cce5b962ca9f73b29affceb7ebc6710627739>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.9.rst b/poky/documentation/migration-guides/release-notes-5.0.9.rst new file mode 100644 index 0000000000..81b853cf31 --- /dev/null +++ b/poky/documentation/migration-guides/release-notes-5.0.9.rst @@ -0,0 +1,206 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +Release notes for Yocto-5.0.9 (Scarthgap) +----------------------------------------- + +Security Fixes in Yocto-5.0.9 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- binutils: Fix :cve_nist:`2024-57360`, :cve_nist:`2025-1176`, :cve_nist:`2025-1178` and + :cve_nist:`2025-1181` +- expat: Fix :cve_nist:`2024-8176` +- freetype: Fix :cve_nist:`2025-27363` +- ghostscript: Fix :cve_nist:`2025-27830`, :cve_nist:`2025-27831`, :cve_nist:`2025-27832`, + :cve_nist:`2025-27833`, :cve_nist:`2025-27833`, :cve_nist:`2025-27834`, :cve_nist:`2025-27835` + and :cve_nist:`2025-27836` +- go: fix :cve_nist:`2025-22870` and :cve_nist:`2025-22871` +- grub: Fix :cve_nist:`2024-45781`, :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, + :cve_nist:`2024-45776`, :cve_nist:`2024-45777`, :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, + :cve_nist:`2024-45780`, :cve_nist:`2024-45782`, :cve_nist:`2024-45783`, :cve_nist:`2024-56737`, + :cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`, :cve_nist:`2025-0678`, + :cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, + :cve_nist:`2025-0690`, :cve_nist:`2025-1118` and :cve_nist:`2025-1125` +- libarchive: Fix :cve_nist:`2024-20696`, :cve_nist:`2024-48957`, :cve_nist:`2024-48958`, + :cve_nist:`2025-1632` and :cve_nist:`2025-25724` +- libxslt: Fix :cve_nist:`2024-24855` and :cve_nist:`2024-55549` +- linux-yocto/6.6: Fix :cve_nist:`2024-54458`, :cve_nist:`2024-57834`, :cve_nist:`2024-57973`, + :cve_nist:`2024-57978`, :cve_nist:`2024-57979`, :cve_nist:`2024-57980`, :cve_nist:`2024-57981`, + :cve_nist:`2024-57984`, :cve_nist:`2024-57996`, :cve_nist:`2024-57997`, :cve_nist:`2024-58002`, + :cve_nist:`2024-58005`, :cve_nist:`2024-58007`, :cve_nist:`2024-58010`, :cve_nist:`2024-58011`, + :cve_nist:`2024-58013`, :cve_nist:`2024-58017`, :cve_nist:`2024-58020`, :cve_nist:`2024-58034`, + :cve_nist:`2024-58052`, :cve_nist:`2024-58055`, :cve_nist:`2024-58058`, :cve_nist:`2024-58063`, + :cve_nist:`2024-58068`, :cve_nist:`2024-58069`, :cve_nist:`2024-58070`, :cve_nist:`2024-58071`, + :cve_nist:`2024-58076`, :cve_nist:`2024-58080`, :cve_nist:`2024-58083`, :cve_nist:`2024-58088`, + :cve_nist:`2025-21700`, :cve_nist:`2025-21703`, :cve_nist:`2025-21707`, :cve_nist:`2025-21711`, + :cve_nist:`2025-21715`, :cve_nist:`2025-21716`, :cve_nist:`2025-21718`, :cve_nist:`2025-21726`, + :cve_nist:`2025-21727`, :cve_nist:`2025-21731`, :cve_nist:`2025-21735`, :cve_nist:`2025-21736`, + :cve_nist:`2025-21741`, :cve_nist:`2025-21742`, :cve_nist:`2025-21743`, :cve_nist:`2025-21744`, + :cve_nist:`2025-21745`, :cve_nist:`2025-21748`, :cve_nist:`2025-21749`, :cve_nist:`2025-21753`, + :cve_nist:`2025-21756`, :cve_nist:`2025-21759`, :cve_nist:`2025-21760`, :cve_nist:`2025-21761`, + :cve_nist:`2025-21762`, :cve_nist:`2025-21763`, :cve_nist:`2025-21764`, :cve_nist:`2025-21773`, + :cve_nist:`2025-21775`, :cve_nist:`2025-21776`, :cve_nist:`2025-21779`, :cve_nist:`2025-21780`, + :cve_nist:`2025-21782`, :cve_nist:`2025-21783`, :cve_nist:`2025-21785`, :cve_nist:`2025-21787`, + :cve_nist:`2025-21789`, :cve_nist:`2025-21790`, :cve_nist:`2025-21791`, :cve_nist:`2025-21792`, + :cve_nist:`2025-21793`, :cve_nist:`2025-21796`, :cve_nist:`2025-21811`, :cve_nist:`2025-21812`, + :cve_nist:`2025-21814`, :cve_nist:`2025-21820`, :cve_nist:`2025-21844`, :cve_nist:`2025-21846`, + :cve_nist:`2025-21847`, :cve_nist:`2025-21848`, :cve_nist:`2025-21853`, :cve_nist:`2025-21854`, + :cve_nist:`2025-21855`, :cve_nist:`2025-21856`, :cve_nist:`2025-21857`, :cve_nist:`2025-21858`, + :cve_nist:`2025-21859`, :cve_nist:`2025-21862`, :cve_nist:`2025-21863`, :cve_nist:`2025-21864`, + :cve_nist:`2025-21865`, :cve_nist:`2025-21866`, :cve_nist:`2025-21867`, :cve_nist:`2025-21887`, + :cve_nist:`2025-21891`, :cve_nist:`2025-21898`, :cve_nist:`2025-21904`, :cve_nist:`2025-21905`, + :cve_nist:`2025-21908`, :cve_nist:`2025-21912`, :cve_nist:`2025-21915`, :cve_nist:`2025-21917`, + :cve_nist:`2025-21918`, :cve_nist:`2025-21919`, :cve_nist:`2025-21920`, :cve_nist:`2025-21922`, + :cve_nist:`2025-21928`, :cve_nist:`2025-21934`, :cve_nist:`2025-21936`, :cve_nist:`2025-21937`, + :cve_nist:`2025-21941`, :cve_nist:`2025-21943`, :cve_nist:`2025-21945`, :cve_nist:`2025-21947`, + :cve_nist:`2025-21948`, :cve_nist:`2025-21951`, :cve_nist:`2025-21957`, :cve_nist:`2025-21959`, + :cve_nist:`2025-21962`, :cve_nist:`2025-21963`, :cve_nist:`2025-21964`, :cve_nist:`2025-21966`, + :cve_nist:`2025-21967`, :cve_nist:`2025-21968`, :cve_nist:`2025-21969`, :cve_nist:`2025-21979`, + :cve_nist:`2025-21980`, :cve_nist:`2025-21981`, :cve_nist:`2025-21991` and :cve_nist:`2025-21993` +- mpg123: Fix :cve_nist:`2024-10573` +- ofono: Fix :cve_nist:`2024-7537` +- openssh: Fix :cve_nist:`2025-26465` +- puzzles: Ignore :cve_nist:`2024-13769`, :cve_nist:`2024-13770` and :cve_nist:`2025-0837` +- qemu: Ignore :cve_nist:`2023-1386` +- ruby: Fix :cve_nist:`2025-27219` and :cve_nist:`2025-27220` +- rust-cross-canadian: Ignore :cve_nist:`2024-43402` +- vim: Fix :cve_nist:`2025-1215`, :cve_nist:`2025-26603`, :cve_nist:`2025-27423` and + :cve_nist:`2025-29768` +- xserver-xorg: Fix :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, + :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600` + and :cve_nist:`2025-26601` +- xz: Fix :cve_nist:`2025-31115` + + +Fixes in Yocto-5.0.9 +~~~~~~~~~~~~~~~~~~~~ + +- babeltrace2: extend to nativesdk +- babeltrace: extend to nativesdk +- bitbake: event/utils: Avoid deadlock from lock_timeout() and recursive events +- bitbake: utils: Add signal blocking for lock_timeout +- bitbake: utils: Print information about lock issue before exiting +- bitbake: utils: Tweak lock_timeout logic +- build-appliance-image: Update to scarthgap head revision +- cve-check.bbclass: Mitigate symlink related error +- cve-update-nvd2-native: add workaround for json5 style list +- cve-update-nvd2-native: handle missing vulnStatus +- gcc: remove paths to sysroot from configargs.h and checksum-options for gcc-cross-canadian +- gcc: unify cleanup of include-fixed, apply to cross-canadian +- ghostscript: upgrade to 10.05.0 +- grub: backport strlcpy function +- grub: drop obsolete CVE statuses +- icu: Adjust ICU_DATA_DIR path on big endian targets +- kernel-arch: add macro-prefix-map in KERNEL_CC +- libarchive: upgrade to 3.7.9 +- libxslt: upgrade to 1.1.43 +- linux-yocto/6.6: update to v6.6.84 +- mc: set ac_cv_path_ZIP to avoid buildpaths QA issues +- mpg123: upgrade to 1.32.10 +- nativesdk-libtool: sanitize the script, remove buildpaths +- openssl: rewrite ptest installation +- overview-manual/concepts: remove :term:`PR` from the build dir list +- patch.py: set commituser and commitemail for addNote +- poky.conf: bump version for 5.0.9 +- vim: Upgrade to 9.1.1198 +- xserver-xf86-config: add a configuration fragment to disable screen blanking +- xserver-xf86-config: remove obsolete configuration files +- xserver-xorg: upgrade to 21.1.16 +- xz: upgrade to 5.4.7 +- yocto-uninative: Update to 4.7 for glibc 2.41 + + +Known Issues in Yocto-5.0.9 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- N/A + +Contributors to Yocto-5.0.9 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Thanks to the following people who contributed to this release: + +- Antonin Godard +- Archana Polampalli +- Ashish Sharma +- Bruce Ashfield +- Changqing Li +- Denys Dmytriyenko +- Divya Chellam +- Hitendra Prajapati +- Madhu Marri +- Makarios Christakis +- Martin Jansa +- Michael Halstead +- Niko Mauno +- Oleksandr Hnatiuk +- Peter Marko +- Richard Purdie +- Ross Burton +- Sana Kazi +- Stefan Mueller-Klieser +- Steve Sakoman +- Vijay Anusuri +- Virendra Thakur +- Vishwas Udupa +- Wang Mingyu +- Zhang Peng + + +Repositories / Downloads for Yocto-5.0.9 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +poky + +- Repository Location: :yocto_git:`/poky` +- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.9 </poky/log/?h=yocto-5.0.9>` +- Git Revision: :yocto_git:`bab0f9f62af9af580744948dd3240f648a99879a </poky/commit/?id=bab0f9f62af9af580744948dd3240f648a99879a>` +- Release Artefact: poky-bab0f9f62af9af580744948dd3240f648a99879a +- sha: ee6811d9fb6c4913e19d6e3569f1edc8ccd793779b237520596506446a6b4531 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/poky-bab0f9f62af9af580744948dd3240f648a99879a.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/poky-bab0f9f62af9af580744948dd3240f648a99879a.tar.bz2 + +openembedded-core + +- Repository Location: :oe_git:`/openembedded-core` +- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>` +- Tag: :oe_git:`yocto-5.0.9 </openembedded-core/log/?h=yocto-5.0.9>` +- Git Revision: :oe_git:`04038ecd1edd6592b826665a2b787387bb7074fa </openembedded-core/commit/?id=04038ecd1edd6592b826665a2b787387bb7074fa>` +- Release Artefact: oecore-04038ecd1edd6592b826665a2b787387bb7074fa +- sha: 6e201a4b486dfbdfcb7e96d83b962a205ec4764db6ad0e34bd623db18910eddb +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/oecore-04038ecd1edd6592b826665a2b787387bb7074fa.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/oecore-04038ecd1edd6592b826665a2b787387bb7074fa.tar.bz2 + +meta-mingw + +- Repository Location: :yocto_git:`/meta-mingw` +- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.9 </meta-mingw/log/?h=yocto-5.0.9>` +- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>` +- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f +- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65 +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 + +bitbake + +- Repository Location: :oe_git:`/bitbake` +- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>` +- Tag: :oe_git:`yocto-5.0.9 </bitbake/log/?h=yocto-5.0.9>` +- Git Revision: :oe_git:`696c2c1ef095f8b11c7d2eff36fae50f58c62e5e </bitbake/commit/?id=696c2c1ef095f8b11c7d2eff36fae50f58c62e5e>` +- Release Artefact: bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e +- sha: fc83f879cd6dd14b9b7eba0161fec23ecc191fed0fb00556ba729dceef6c145f +- Download Locations: + https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2 + https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2 + +yocto-docs + +- Repository Location: :yocto_git:`/yocto-docs` +- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>` +- Tag: :yocto_git:`yocto-5.0.9 </yocto-docs/log/?h=yocto-5.0.9>` +- Git Revision: :yocto_git:`56db4fd81f6235428bef9e46a61c11ca0ba89733 </yocto-docs/commit/?id=56db4fd81f6235428bef9e46a61c11ca0ba89733>` + diff --git a/poky/documentation/migration-guides/release-notes-5.0.rst b/poky/documentation/migration-guides/release-notes-5.0.rst index 800ba20a27..de11bd174a 100644 --- a/poky/documentation/migration-guides/release-notes-5.0.rst +++ b/poky/documentation/migration-guides/release-notes-5.0.rst @@ -217,7 +217,7 @@ New Features / Enhancements in 5.0 state directory (i.e., ``/run``). - Allow to disable colored text output through the - `NO_OUTPUT <https://no-color.org/>`__ environment variable. + `NO_COLOR <https://no-color.org/>`__ environment variable. - ``git-make-shallow`` script: add support for Git's ``safe.bareRepository=explicit`` configuration setting. @@ -362,39 +362,39 @@ The following corrections have been made to the :term:`LICENSE` values set by re Security Fixes in 5.0 ~~~~~~~~~~~~~~~~~~~~~ -- avahi: :cve:`2023-1981`, :cve:`2023-38469`, :cve:`2023-38470`, :cve:`2023-38471`, :cve:`2023-38469`, :cve:`2023-38470`, :cve:`2023-38471`, :cve:`2023-38472`, :cve:`2023-38473` -- bind: :cve:`2023-4408`, :cve:`2023-5517`, :cve:`2023-5679`, :cve:`2023-50387` -- bluez5: :cve:`2023-45866` -- coreutils: :cve:`2024-0684` -- cups: :cve:`2023-4504` -- curl: :cve:`2023-46218` -- expat: :cve:`2024-28757` -- gcc: :cve:`2023-4039` -- glibc: :cve:`2023-5156`, :cve:`2023-0687` -- gnutls: :cve:`2024-0553`, :cve:`2024-0567`, :cve:`2024-28834`, :cve:`2024-28835` -- go: :cve:`2023-45288` -- grub: :cve:`2023-4692`, :cve:`2023-4693` -- grub2: :cve:`2023-4001` (ignored), :cve:`2024-1048` (ignored) -- libgit2: :cve:`2024-24575`, :cve:`2024-24577` -- libsndfile1: :cve:`2022-33065` -- libssh2: :cve:`2023-48795` -- libuv: :cve:`2024-24806` -- libxml2: :cve:`2023-45322` (ignored) -- linux-yocto/6.6: :cve:`2020-16119` -- openssh: :cve:`2023-48795`, :cve:`2023-51384`, :cve:`2023-51385` -- openssl: :cve:`2023-5363`, :cve:`2023-5678`, :cve:`2023-6129`, :cve_mitre:`2023-6237`, :cve:`2024-0727`, :cve:`2024-2511` -- perl: :cve:`2023-47100` -- pixman: :cve:`2023-37769` (ignored) -- python3-cryptography{-vectors}: :cve:`2023-49083`, :cve:`2024-26130` -- python3-urllib3: :cve:`2023-45803` -- shadow: :cve:`2023-4641` -- sudo: :cve:`2023-42456` -- tiff: :cve:`2023-6228`, :cve:`2023-6277`, :cve:`2023-52355`, :cve:`2023-52356` -- vim: :cve:`2023-46246`, :cve:`2023-48231`, :cve:`2023-48232`, :cve:`2023-48233`, :cve:`2023-48234`, :cve:`2023-48235`, :cve:`2023-48236`, :cve:`2023-48237`, :cve:`2024-22667` -- wpa-supplicant: :cve:`2023-52160` -- xserver-xorg: :cve:`2023-5574`, :cve:`2023-6816`, :cve:`2024-0229`, :cve:`2024-0408`, :cve:`2024-0409`, :cve:`2024-21885`, :cve:`2024-21886` -- xwayland: :cve:`2023-5367`, :cve:`2024-0408`, :cve:`2024-0409`, :cve:`2023-6816`, :cve:`2024-0229`, :cve:`2024-21885`, :cve:`2024-21886` -- zlib: :cve:`2023-45853` (ignored), :cve:`2023-6992` (ignored) +- avahi: :cve_nist:`2023-1981`, :cve_nist:`2023-38469`, :cve_nist:`2023-38470`, :cve_nist:`2023-38471`, :cve_nist:`2023-38469`, :cve_nist:`2023-38470`, :cve_nist:`2023-38471`, :cve_nist:`2023-38472`, :cve_nist:`2023-38473` +- bind: :cve_nist:`2023-4408`, :cve_nist:`2023-5517`, :cve_nist:`2023-5679`, :cve_nist:`2023-50387` +- bluez5: :cve_nist:`2023-45866` +- coreutils: :cve_nist:`2024-0684` +- cups: :cve_nist:`2023-4504` +- curl: :cve_nist:`2023-46218` +- expat: :cve_nist:`2024-28757` +- gcc: :cve_nist:`2023-4039` +- glibc: :cve_nist:`2023-5156`, :cve_nist:`2023-0687` +- gnutls: :cve_nist:`2024-0553`, :cve_nist:`2024-0567`, :cve_nist:`2024-28834`, :cve_nist:`2024-28835` +- go: :cve_nist:`2023-45288` +- grub: :cve_nist:`2023-4692`, :cve_nist:`2023-4693` +- grub2: :cve_nist:`2023-4001` (ignored), :cve_nist:`2024-1048` (ignored) +- libgit2: :cve_nist:`2024-24575`, :cve_nist:`2024-24577` +- libsndfile1: :cve_nist:`2022-33065` +- libssh2: :cve_nist:`2023-48795` +- libuv: :cve_nist:`2024-24806` +- libxml2: :cve_nist:`2023-45322` (ignored) +- linux-yocto/6.6: :cve_nist:`2020-16119` +- openssh: :cve_nist:`2023-48795`, :cve_nist:`2023-51384`, :cve_nist:`2023-51385` +- openssl: :cve_nist:`2023-5363`, :cve_nist:`2023-5678`, :cve_nist:`2023-6129`, :cve_mitre:`2023-6237`, :cve_nist:`2024-0727`, :cve_nist:`2024-2511` +- perl: :cve_nist:`2023-47100` +- pixman: :cve_nist:`2023-37769` (ignored) +- python3-cryptography{-vectors}: :cve_nist:`2023-49083`, :cve_nist:`2024-26130` +- python3-urllib3: :cve_nist:`2023-45803` +- shadow: :cve_nist:`2023-4641` +- sudo: :cve_nist:`2023-42456` +- tiff: :cve_nist:`2023-6228`, :cve_nist:`2023-6277`, :cve_nist:`2023-52355`, :cve_nist:`2023-52356` +- vim: :cve_nist:`2023-46246`, :cve_nist:`2023-48231`, :cve_nist:`2023-48232`, :cve_nist:`2023-48233`, :cve_nist:`2023-48234`, :cve_nist:`2023-48235`, :cve_nist:`2023-48236`, :cve_nist:`2023-48237`, :cve_nist:`2024-22667` +- wpa-supplicant: :cve_nist:`2023-52160` +- xserver-xorg: :cve_nist:`2023-5574`, :cve_nist:`2023-6816`, :cve_nist:`2024-0229`, :cve_nist:`2024-0408`, :cve_nist:`2024-0409`, :cve_nist:`2024-21885`, :cve_nist:`2024-21886` +- xwayland: :cve_nist:`2023-5367`, :cve_nist:`2024-0408`, :cve_nist:`2024-0409`, :cve_nist:`2023-6816`, :cve_nist:`2024-0229`, :cve_nist:`2024-21885`, :cve_nist:`2024-21886` +- zlib: :cve_nist:`2023-45853` (ignored), :cve_nist:`2023-6992` (ignored) Recipe Upgrades in 5.0 diff --git a/poky/documentation/overview-manual/concepts.rst b/poky/documentation/overview-manual/concepts.rst index 62f2327a7e..93382f91a0 100644 --- a/poky/documentation/overview-manual/concepts.rst +++ b/poky/documentation/overview-manual/concepts.rst @@ -98,7 +98,7 @@ files, and how to package the compiled output. The term "package" is sometimes used to refer to recipes. However, since the word "package" is used for the packaged output from the OpenEmbedded -build system (i.e. ``.ipk`` or ``.deb`` files), this document avoids +build system (i.e. ``.ipk``, ``.deb`` or ``.rpm`` files), this document avoids using the term "package" when referring to recipes. Classes @@ -256,7 +256,7 @@ development environment. .. note:: The - scripts/oe-setup-builddir + ``scripts/oe-setup-builddir`` script uses the ``$TEMPLATECONF`` variable to determine which sample configuration files to locate. @@ -352,7 +352,7 @@ layers the build system uses to further control the build. These layers provide Metadata for the software, machine, and policies. In general, there are three types of layer input. You can see them below -the "User Configuration" box in the `general workflow +the "User Configuration" box in the :ref:`general workflow figure <overview-manual/concepts:openembedded build system concepts>`: - *Metadata (.bb + Patches):* Software layers containing @@ -420,14 +420,14 @@ build. Distro Layer ~~~~~~~~~~~~ -The distribution layer provides policy configurations for your +A distribution layer provides policy configurations for your distribution. Best practices dictate that you isolate these types of configurations into their own layer. Settings you provide in ``conf/distro/distro.conf`` override similar settings that BitBake finds in your ``conf/local.conf`` file in the :term:`Build Directory`. The following list provides some explanation and references for what you -typically find in the distribution layer: +typically find in a distribution layer: - *classes:* Class files (``.bbclass``) hold common functionality that can be shared among recipes in the distribution. When your recipes @@ -454,7 +454,7 @@ typically find in the distribution layer: BSP Layer ~~~~~~~~~ -The BSP Layer provides machine configurations that target specific +A BSP layer provides machine configurations that target specific hardware. Everything in this layer is specific to the machine for which you are building the image or the SDK. A common structure or form is defined for BSP layers. You can learn more about this structure in the @@ -465,7 +465,7 @@ defined for BSP layers. You can learn more about this structure in the In order for a BSP layer to be considered compliant with the Yocto Project, it must meet some structural requirements. -The BSP Layer's configuration directory contains configuration files for +A BSP layer's configuration directory contains configuration files for the machine (``conf/machine/machine.conf``) and, of course, the layer (``conf/layer.conf``). @@ -477,18 +477,18 @@ formfactors, graphics support systems, and so forth. .. note:: While the figure shows several - recipes-\* + ``recipes-*`` directories, not all these directories appear in all BSP layers. Software Layer ~~~~~~~~~~~~~~ -The software layer provides the Metadata for additional software +A software layer provides the Metadata for additional software packages used during the build. This layer does not include Metadata that is specific to the distribution or the machine, which are found in their respective layers. -This layer contains any recipes, append files, and patches, that your +This layer contains any recipes, append files, and patches that your project needs. Sources @@ -560,9 +560,8 @@ source tree used by the group). The canonical method through which to include a local project is to use the :ref:`ref-classes-externalsrc` class to include that local project. You use -either the ``local.conf`` or a recipe's append file to override or set the -recipe to point to the local directory on your disk to pull in the whole -source tree. +either ``local.conf`` or a recipe's append file to override or set the +recipe to point to the local directory from which to fetch the source. Source Control Managers (Optional) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ @@ -736,9 +735,6 @@ following list describe the :term:`Build Directory`'s hierarchy: - :term:`PV`: The version of the recipe used to build the package. - - :term:`PR`: The revision of the - recipe used to build the package. - - :term:`S`: Contains the unpacked source files for a given recipe. @@ -912,11 +908,62 @@ the analysis and package splitting process use several areas: execute on a system and it generates code for yet another machine (e.g. :ref:`ref-classes-cross-canadian` recipes). -The :term:`FILES` variable defines the -files that go into each package in -:term:`PACKAGES`. If you want -details on how this is accomplished, you can look at -:yocto_git:`package.bbclass </poky/tree/meta/classes-global/package.bbclass>`. +Packages for a recipe are listed in the :term:`PACKAGES` variable. The +:oe_git:`bitbake.conf </openembedded-core/tree/meta/conf/bitbake.conf>` +configuration file defines the following default list of packages:: + + PACKAGES = "${PN}-src ${PN}-dbg ${PN}-staticdev ${PN}-dev ${PN}-doc ${PN}-locale ${PACKAGE_BEFORE_PN} ${PN}" + +Each of these packages contains a default list of files defined with the +:term:`FILES` variable. For example, the package ``${PN}-dev`` represents files +useful to the development of applications depending on ``${PN}``. The default +list of files for ``${PN}-dev``, also defined in :oe_git:`bitbake.conf +</openembedded-core/tree/meta/conf/bitbake.conf>`, is defined as follows:: + + FILES:${PN}-dev = "${includedir} ${FILES_SOLIBSDEV} ${libdir}/*.la \ + ${libdir}/*.o ${libdir}/pkgconfig ${datadir}/pkgconfig \ + ${datadir}/aclocal ${base_libdir}/*.o \ + ${libdir}/${BPN}/*.la ${base_libdir}/*.la \ + ${libdir}/cmake ${datadir}/cmake" + +The paths in this list must be *absolute* paths from the point of view of the +root filesystem on the target, and must *not* make a reference to the variable +:term:`D` or any :term:`WORKDIR` related variable. A correct example would be:: + + ${sysconfdir}/foo.conf + +.. note:: + + The list of files for a package is defined using the override syntax by + separating :term:`FILES` and the package name by a semi-colon (``:``). + +A given file can only ever be in one package. By iterating from the leftmost to +rightmost package in :term:`PACKAGES`, each file matching one of the patterns +defined in the corresponding :term:`FILES` definition is included in the +package. + +.. note:: + + To find out which package installs a file, the ``oe-pkgdata-util`` + command-line utility can be used:: + + $ oe-pkgdata-util find-path '/etc/fstab' + base-files: /etc/fstab + + For more information on the ``oe-pkgdata-util`` utility, see the section + :ref:`dev-manual/debugging:Viewing Package Information with + ``oe-pkgdata-util``` of the Yocto Project Development Tasks Manual. + +To add a custom package variant of the ``${PN}`` recipe named +``${PN}-extra`` (name is arbitrary), one can add it to the +:term:`PACKAGE_BEFORE_PN` variable:: + + PACKAGE_BEFORE_PN += "${PN}-extra" + +Alternatively, a custom package can be added by adding it to the +:term:`PACKAGES` variable using the prepend operator (``=+``):: + + PACKAGES =+ "${PN}-extra" Depending on the type of packages being created (RPM, DEB, or IPK), the :ref:`do_package_write_* <ref-tasks-package_write_deb>` @@ -2153,7 +2200,7 @@ require root privileges, the fact that some earlier steps ran in a fake root environment does not cause problems. The capability to run tasks in a fake root environment is known as -"`fakeroot <http://man.he.net/man1/fakeroot>`__", which is derived from +":manpage:`fakeroot <fakeroot(1)>`", which is derived from the BitBake keyword/variable flag that requests a fake root environment for a task. @@ -2347,8 +2394,8 @@ The contents of ``sayhello_0.1.bb`` are:: S = "${WORKDIR}/git" do_install(){ - install -d ${D}/usr/bin - install -m 0700 sayhello ${D}/usr/bin + install -d ${D}${bindir} + install -m 0700 sayhello ${D}${bindir} } After placing the recipes in a custom layer we can run ``bitbake sayhello`` diff --git a/poky/documentation/overview-manual/yp-intro.rst b/poky/documentation/overview-manual/yp-intro.rst index 4a27e12e01..c20ce3788d 100644 --- a/poky/documentation/overview-manual/yp-intro.rst +++ b/poky/documentation/overview-manual/yp-intro.rst @@ -28,7 +28,7 @@ platforms as well as software stacks that can be maintained and scaled. For further introductory information on the Yocto Project, you might be interested in this -`article <https://www.embedded.com/electronics-blogs/say-what-/4458600/Why-the-Yocto-Project-for-my-IoT-Project->`__ +`article <https://www.embedded.com/why-the-yocto-project-for-my-iot-project/>`__ by Drew Moseley and in this short introductory `video <https://www.youtube.com/watch?v=utZpKM7i5Z4>`__. @@ -172,11 +172,12 @@ Here are challenges you might encounter when developing using the Yocto Project: changes on the development system within the BitBake environment and then deploying only the updated packages to the target. - The Yocto Project :term:`OpenEmbedded Build System` - produces packages - in standard formats (i.e. RPM, DEB, IPK, and TAR). You can deploy - these packages into the running system on the target by using - utilities on the target such as ``rpm`` or ``ipk``. + The Yocto Project :term:`OpenEmbedded Build System` produces packages + in standard formats (i.e. RPM, DEB and/or IPK). If you included the + runtime package management feature in your image, you can deploy + these packages into the running system on the target by using the + corresponding utilities on the target such as + ``rpm``/``dnf``, ``dpkg``/``apt`` or ``opkg``. - *Initial Build Times Can be Significant:* Long initial build times are unfortunately unavoidable due to the large number of packages @@ -400,7 +401,7 @@ Yocto Project: Autobuilder :doc:`here </test-manual/understand-autobuilder>`. - *Pseudo:* Pseudo is the Yocto Project implementation of - `fakeroot <http://man.he.net/man1/fakeroot>`__, which is used to run + :manpage:`fakeroot <fakeroot(1)>`, which is used to run commands in an environment that seemingly has root privileges. During a build, it can be necessary to perform operations that diff --git a/poky/documentation/poky.yaml.in b/poky/documentation/poky.yaml.in index 0c04b615ea..9c03e9959b 100644 --- a/poky/documentation/poky.yaml.in +++ b/poky/documentation/poky.yaml.in @@ -1,41 +1,27 @@ +# +# Macros used in the documentation +# + +# The DISTRO variable represents the current docs version. It should be used +# when referring to the current docs version. See also DISTRO_LATEST_TAG. DISTRO : "5.0" +# The DISTRO_LATEST_TAG represents the latest tag on the current branch. It +# should be used in HTTP link referring to the current docs version. In these +# cases, the DISTRO may point to A.B.999 which does not exist (just used to +# represent the latest HEAD revision on the branch). DISTRO_LATEST_TAG should +# always point to an existing tag. +DISTRO_LATEST_TAG : "5.0" DISTRO_NAME_NO_CAP : "scarthgap" DISTRO_NAME : "Scarthgap" DISTRO_NAME_NO_CAP_MINUS_ONE : "nanbield" DISTRO_NAME_NO_CAP_LTS : "scarthgap" YOCTO_DOC_VERSION : "5.0" -DISTRO_REL_TAG : "yocto-5.0" +DISTRO_REL_TAG : "yocto-$DISTRO;" +DISTRO_REL_LATEST_TAG : "yocto-&DISTRO_LATEST_TAG;" DOCCONF_VERSION : "dev" BITBAKE_SERIES : "" YOCTO_DL_URL : "https://downloads.yoctoproject.org" -YOCTO_AB_URL : "https://autobuilder.yoctoproject.org" YOCTO_RELEASE_DL_URL : "&YOCTO_DL_URL;/releases/yocto/yocto-&DISTRO;" -UBUNTU_HOST_PACKAGES_ESSENTIAL : "gawk wget git diffstat unzip texinfo gcc \ - build-essential chrpath socat cpio python3 python3-pip python3-pexpect \ - xz-utils debianutils iputils-ping python3-git python3-jinja2 \ - python3-subunit zstd liblz4-tool file locales libacl1 - \n\ $ sudo locale-gen en_US.UTF-8" -FEDORA_HOST_PACKAGES_ESSENTIAL : "gawk make wget tar bzip2 gzip python3 unzip perl patch \ - diffutils diffstat git cpp gcc gcc-c++ glibc-devel texinfo chrpath \ - ccache perl-Data-Dumper perl-Text-ParseWords perl-Thread-Queue perl-bignum socat \ - python3-pexpect findutils which file cpio python python3-pip xz python3-GitPython \ - python3-jinja2 rpcgen perl-FindBin perl-File-Compare \ - perl-File-Copy perl-locale zstd lz4 hostname glibc-langpack-en libacl" -OPENSUSE_HOST_PACKAGES_ESSENTIAL : "python gcc gcc-c++ git chrpath make wget python-xml \ - diffstat makeinfo python-curses patch socat python3 python3-curses tar python3-pip \ - python3-pexpect xz which python3-Jinja2 rpcgen \ - zstd lz4 bzip2 gzip hostname libacl1 - \n\ $ sudo pip3 install GitPython" -ALMALINUX_HOST_PACKAGES_ESSENTIAL : "-y epel-release - \n\ $ sudo yum install dnf-plugins-core - \n\ $ sudo dnf config-manager --set-enabled crb - \n\ $ sudo dnf makecache - \n\ $ sudo dnf install gawk make wget tar bzip2 gzip python3 unzip perl patch \ - diffutils diffstat git cpp gcc gcc-c++ glibc-devel texinfo chrpath ccache \ - socat perl-Data-Dumper perl-Text-ParseWords perl-Thread-Queue python3-pip \ - python3-GitPython python3-jinja2 python3-pexpect xz which \ - rpcgen zstd lz4 cpio glibc-langpack-en libacl" -PIP3_HOST_PACKAGES_DOC : "$ sudo pip3 install sphinx sphinx_rtd_theme pyyaml" MIN_PYTHON_VERSION : "3.8.0" MIN_TAR_VERSION : "1.28" MIN_GIT_VERSION : "1.8.3.1" @@ -47,3 +33,237 @@ MIN_DISK_SPACE : "90" MIN_DISK_SPACE_RM_WORK : "40" # RAM (Gbytes) needed to generate qemux86-64 core-image-sato on Ubuntu 22.04 (x86-64) on a 4 core system MIN_RAM : "8" + +# +# Dependencies +# + +# Shared between distros +PIP3_HOST_PACKAGES_DOC: sphinx sphinx_rtd_theme pyyaml + +UBUNTU_DEBIAN_HOST_PACKAGES_ESSENTIAL: >- + build-essential + chrpath + cpio + debianutils + diffstat + file + gawk + gcc + git + iputils-ping + libacl1 + liblz4-tool + locales + python3 + python3-git + python3-jinja2 + python3-pexpect + python3-pip + python3-subunit + socat + texinfo + unzip + wget + xz-utils + zstd + +UBUNTU_DEBIAN_HOST_PACKAGES_DOC: >- + git + librsvg2-bin + locales + make + python3-saneyaml + python3-sphinx-rtd-theme + sphinx + +UBUNTU_DEBIAN_HOST_PACKAGES_DOC_PDF: >- + fonts-freefont-otf + latexmk + tex-gyre + texlive-fonts-extra + texlive-fonts-recommended + texlive-lang-all + texlive-latex-extra + texlive-latex-recommended + texlive-xetex + +FEDORA_HOST_PACKAGES_ESSENTIAL: >- + bzip2 + ccache + chrpath + cpio + cpp + diffstat + diffutils + file + findutils + gawk + gcc + gcc-c++ + git + glibc-devel + glibc-langpack-en + gzip + hostname + libacl + lz4 + make + patch + perl + perl-Data-Dumper + perl-File-Compare + perl-File-Copy + perl-FindBin + perl-Text-ParseWords + perl-Thread-Queue + perl-bignum + perl-locale + python + python3 + python3-GitPython + python3-jinja2 + python3-pexpect + python3-pip + rpcgen + socat + tar + texinfo + unzip + wget + which + xz + zstd + +FEDORA_HOST_PACKAGES_DOC: >- + git + glibc-locale-source + librsvg2-tools + make + python3-pip + which + +FEDORA_HOST_PACKAGES_DOC_PDF: >- + 'texlive-collection-lang*' + latexmk + texlive-collection-fontsextra + texlive-collection-fontsrecommended + texlive-collection-latex + texlive-collection-latexextra + texlive-collection-latexrecommended + texlive-collection-xetex + texlive-fncychap + texlive-gnu-freefont + texlive-tex-gyre + texlive-xetex + +OPENSUSE_HOST_PACKAGES_ESSENTIAL: >- + bzip2 + chrpath + diffstat + gcc + gcc-c++ + git + gzip + hostname + libacl1 + lz4 + make + makeinfo + patch + python + python-curses + python-xml + python3 + python3-Jinja2 + python3-curses + python3-pexpect + python3-pip + rpcgen + socat + tar + wget + which + xz + zstd + +OPENSUSE_PIP3_HOST_PACKAGES_ESSENTIAL: GitPython + +OPENSUSE_HOST_PACKAGES_DOC: >- + git + glibc-i18ndata + make + python3-pip + rsvg-convert + which + +OPENSUSE_HOST_PACKAGES_DOC_PDF: >- + 'texlive-collection-lang*' + texlive-collection-fontsextra + texlive-collection-fontsrecommended + texlive-collection-latex + texlive-collection-latexextra + texlive-collection-latexrecommended + texlive-collection-xetex + texlive-fncychap + texlive-gnu-freefont + texlive-latexmk + texlive-tex-gyre + texlive-xetex + +ALMALINUX_HOST_PACKAGES_ESSENTIAL: >- + bzip2 + ccache + chrpath + cpio + cpp + diffstat + diffutils + gawk + gcc + gcc-c++ + git + glibc-devel + glibc-langpack-en + gzip + libacl + lz4 + make + patch + perl + perl-Data-Dumper + perl-Text-ParseWords + perl-Thread-Queue + python3 + python3-GitPython + python3-jinja2 + python3-pexpect + python3-pip + rpcgen + socat + tar + texinfo + unzip + wget + which + xz + zstd + +ALMALINUX_HOST_PACKAGES_DOC: >- + git + glibc-locale-source + librsvg2-tools + make + python3-pip + which + +ALMALINUX_HOST_PACKAGES_DOC_PDF: >- + latexmk + texlive-collection-fontsrecommended + texlive-collection-latex + texlive-collection-latexrecommended + texlive-collection-xetex + texlive-fncychap + texlive-gnu-freefont + texlive-tex-gyre + texlive-xetex diff --git a/poky/documentation/ref-manual/classes.rst b/poky/documentation/ref-manual/classes.rst index 9520d0bf7c..bc7ccb8b71 100644 --- a/poky/documentation/ref-manual/classes.rst +++ b/poky/documentation/ref-manual/classes.rst @@ -159,27 +159,38 @@ software that includes bash-completion data. ``bin_package`` =============== -The :ref:`ref-classes-bin-package` class is a helper class for recipes that extract the -contents of a binary package (e.g. an RPM) and install those contents -rather than building the binary from source. The binary package is -extracted and new packages in the configured output package format are -created. Extraction and installation of proprietary binaries is a good -example use for this class. +The :ref:`ref-classes-bin-package` class is a helper class for recipes, that +disables the :ref:`ref-tasks-configure` and :ref:`ref-tasks-compile` tasks and +copies the content of the :term:`S` directory into the :term:`D` directory. This +is useful for installing binary packages (e.g. RPM packages) by passing the +package in the :term:`SRC_URI` variable and inheriting this class. -.. note:: +For RPMs and other packages that do not contain a subdirectory, you should set +the :term:`SRC_URI` option ``subdir`` to :term:`BP` so that the contents are +extracted to the directory expected by the default value of :term:`S`. For +example:: + + SRC_URI = "https://example.com/downloads/somepackage.rpm;subdir=${BP}" + +This class can also be used for tarballs. For example:: + + SRC_URI = "file://somepackage.tar.xz;subdir=${BP}" + +The :ref:`ref-classes-bin-package` class will copy the extracted content of the +tarball from :term:`S` to :term:`D`. - For RPMs and other packages that do not contain a subdirectory, you - should specify an appropriate fetcher parameter to point to the - subdirectory. For example, if BitBake is using the Git fetcher (``git://``), - the "subpath" parameter limits the checkout to a specific subpath - of the tree. Here is an example where ``${BP}`` is used so that the files - are extracted into the subdirectory expected by the default value of - :term:`S`:: +This class assumes that the content of the package as installed in :term:`S` +mirrors the expected layout once installed on the target, which is generally the +case for binary packages. For example, an RPM package for a library would +usually contain the ``usr/lib`` directory, and should be extracted to +``${S}/usr/lib/<library>.so.<version>`` to be installed in :term:`D` correctly. - SRC_URI = "git://example.com/downloads/somepackage.rpm;branch=main;subpath=${BP}" +.. note:: - See the ":ref:`bitbake-user-manual/bitbake-user-manual-fetching:fetchers`" section in the BitBake User Manual for - more information on supported BitBake Fetchers. + The extraction of the package passed in :term:`SRC_URI` is not handled by the + :ref:`ref-classes-bin-package` class, but rather by the appropriate + :ref:`fetcher <bitbake-user-manual/bitbake-user-manual-fetching:fetchers>` + depending on the file extension. .. _ref-classes-binconfig: @@ -344,8 +355,12 @@ file for details about how to enable this mechanism in your configuration file, how to disable it for specific recipes, and how to share ``ccache`` files between builds. -However, using the class can lead to unexpected side-effects. Thus, using -this class is not recommended. +Recipes can also explicitly disable `Ccache` support even when the +:ref:`ref-classes-ccache` class is enabled, by setting the +:term:`CCACHE_DISABLE` variable to "1". + +Using the :ref:`ref-classes-ccache` class can lead to unexpected side-effects. +Using this class is not recommended. .. _ref-classes-chrpath: @@ -552,7 +567,7 @@ You can also look for vulnerabilities in specific packages by passing ``-c cve_check`` to BitBake. After building the software with Bitbake, CVE check output reports are available in ``tmp/deploy/cve`` -and image specific summaries in ``tmp/deploy/images/*.cve`` or ``tmp/deploy/images/*.json`` files. +and image specific summaries in ``tmp/deploy/images/*.json`` files. When building, the CVE checker will emit build time warnings for any detected issues which are in the state ``Unpatched``, meaning that CVE issue seems to affect the software component @@ -898,6 +913,14 @@ software that uses the GNU ``gettext`` internationalization and localization system. All recipes building software that use ``gettext`` should inherit this class. +This class will configure recipes to build translations *unless*: + +- the :term:`USE_NLS` variable is set to ``no``, or + +- the :term:`INHIBIT_DEFAULT_DEPS` variable is set and the recipe inheriting + the :ref:`ref-classes-gettext` class does not also inherit the + :ref:`ref-classes-cross-canadian` class. + .. _ref-classes-github-releases: ``github-releases`` @@ -1461,12 +1484,8 @@ The tests you can list with the :term:`WARN_QA` and - ``patch-fuzz:`` Checks for fuzz in patch files that may allow them to apply incorrectly if the underlying code changes. -- ``patch-status-core:`` Checks that the Upstream-Status is specified - and valid in the headers of patches for recipes in the OE-Core layer. - -- ``patch-status-noncore:`` Checks that the Upstream-Status is specified - and valid in the headers of patches for recipes in layers other than - OE-Core. +- ``patch-status:`` Checks that the ``Upstream-Status`` is specified and valid + in the headers of patches for recipes. - ``perllocalpod:`` Checks for ``perllocal.pod`` being erroneously installed and packaged by a recipe. @@ -1986,7 +2005,8 @@ a couple different ways: Not using this naming convention can lead to subtle problems caused by existing code that depends on that naming convention. -- Create or modify a target recipe that contains the following:: +- Or, create a :ref:`ref-classes-native` variant of any target recipe (e.g. + ``myrecipe.bb``) by adding the following to the recipe:: BBCLASSEXTEND = "native" @@ -2017,24 +2037,25 @@ couple different ways: inherit statement in the recipe after all other inherit statements so that the :ref:`ref-classes-nativesdk` class is inherited last. -- Create a :ref:`ref-classes-nativesdk` variant of any recipe by adding the following:: + .. note:: - BBCLASSEXTEND = "nativesdk" + When creating a recipe, you must follow this naming convention:: - Inside the - recipe, use ``:class-nativesdk`` and ``:class-target`` overrides to - specify any functionality specific to the respective SDK machine or - target case. + nativesdk-myrecipe.bb -.. note:: - When creating a recipe, you must follow this naming convention:: + Not doing so can lead to subtle problems because there is code that + depends on the naming convention. - nativesdk-myrecipe.bb +- Or, create a :ref:`ref-classes-nativesdk` variant of any target recipe (e.g. + ``myrecipe.bb``) by adding the following to the recipe:: + BBCLASSEXTEND = "nativesdk" - Not doing so can lead to subtle problems because there is code that - depends on the naming convention. + Inside the + recipe, use ``:class-nativesdk`` and ``:class-target`` overrides to + specify any functionality specific to the respective SDK machine or + target case. Although applied differently, the :ref:`ref-classes-nativesdk` class is used with both methods. The advantage of the second method is that you do not need to @@ -2608,7 +2629,7 @@ runtime tests for recipes that build software that provides these tests. This class is intended to be inherited by individual recipes. However, the class' functionality is largely disabled unless "ptest" appears in :term:`DISTRO_FEATURES`. See the -":ref:`dev-manual/packages:testing packages with ptest`" +":ref:`test-manual/ptest:testing packages with ptest`" section in the Yocto Project Development Tasks Manual for more information on ptest. @@ -2632,7 +2653,7 @@ Enables package tests (ptests) specifically for GNOME packages, which have tests intended to be executed with ``gnome-desktop-testing``. For information on setting up and running ptests, see the -":ref:`dev-manual/packages:testing packages with ptest`" +":ref:`test-manual/ptest:testing packages with ptest`" section in the Yocto Project Development Tasks Manual. .. _ref-classes-python3-dir: @@ -2683,6 +2704,25 @@ The :ref:`ref-classes-recipe_sanity` class checks for the presence of any host s recipe prerequisites that might affect the build (e.g. variables that are set or software that is present). +.. _ref-classes-relative_symlinks: + +``relative_symlinks`` +===================== + +The :ref:`ref-classes-relative_symlinks` class walks the symbolic links in the +:term:`D` directory and replaces links pointing to absolute paths to relative +paths. This is occasionally used in some recipes that create wrong symbolic +links when their :ref:`ref-classes-native` version is built, and/or would cause +breakage in the :ref:`overview-manual/concepts:shared state cache`. + +For example, if the following symbolic link is found in :term:`D`:: + + /usr/bin/foo -> /sbin/bar + +It is replaced by:: + + /usr/bin/foo -> ../../sbin/bar + .. _ref-classes-relocatable: ``relocatable`` @@ -3177,6 +3217,22 @@ class assuming :term:`PATCHRESOLVE` is set to "user", the :ref:`ref-classes-cml1` class, and the :ref:`ref-classes-devshell` class all use the :ref:`ref-classes-terminal` class. +.. _ref-classes-testexport: + +``testexport`` +============== + +Based on the :ref:`ref-classes-testimage` class, the +:ref:`ref-classes-testexport` class can be used to export the test environment +outside of the :term:`OpenEmbedded Build System`. This will generate the +directory structure to execute the runtime tests using the +:oe_git:`runexported.py </openembedded-core/tree/meta/lib/oeqa/runexported.py>` +Python script. + +For more details on how to use :ref:`ref-classes-testexport`, see +the :ref:`test-manual/runtime-testing:Exporting Tests` section in the Yocto +Project Test Environment Manual. + .. _ref-classes-testimage: ``testimage`` @@ -3205,8 +3261,8 @@ after it is built, you can set :term:`TESTIMAGE_AUTO`:: TESTIMAGE_AUTO = "1" For information on how to enable, run, and create new tests, see the -":ref:`dev-manual/runtime-testing:performing automated runtime testing`" -section in the Yocto Project Development Tasks Manual. +":ref:`test-manual/runtime-testing:performing automated runtime testing`" +section in the Yocto Project Test Environment Manual. .. _ref-classes-testsdk: @@ -3307,6 +3363,9 @@ The variables used by this class are: - :term:`SPL_SIGN_ENABLE`: enable signing the FIT image. - :term:`SPL_SIGN_KEYDIR`: directory containing the signing keys. - :term:`SPL_SIGN_KEYNAME`: base filename of the signing keys. +- :term:`SPL_DTB_BINARY`: Name of the SPL device tree binary. Can be set to an + empty string to indicate that no SPL should be created and added to the FIT + image. - :term:`UBOOT_FIT_ADDRESS_CELLS`: ``#address-cells`` value for the FIT image. - :term:`UBOOT_FIT_DESC`: description string encoded into the FIT image. - :term:`UBOOT_FIT_GENERATE_KEYS`: generate the keys if they don't exist yet. @@ -3335,22 +3394,51 @@ imitates. ``uninative`` ============= -Attempts to isolate the build system from the host distribution's C -library in order to make re-use of native shared state artifacts across -different host distributions practical. With this class enabled, a -tarball containing a pre-built C library is downloaded at the start of -the build. In the Poky reference distribution this is enabled by default -through ``meta/conf/distro/include/yocto-uninative.inc``. Other -distributions that do not derive from poky can also -"``require conf/distro/include/yocto-uninative.inc``" to use this. -Alternatively if you prefer, you can build the uninative-tarball recipe -yourself, publish the resulting tarball (e.g. via HTTP) and set -``UNINATIVE_URL`` and ``UNINATIVE_CHECKSUM`` appropriately. For an -example, see the ``meta/conf/distro/include/yocto-uninative.inc``. - -The :ref:`ref-classes-uninative` class is also used unconditionally by the extensible -SDK. When building the extensible SDK, ``uninative-tarball`` is built -and the resulting tarball is included within the SDK. +The :ref:`ref-classes-uninative` class allows binaries to run on systems with +older or newer :wikipedia:`Glibc <Glibc>` versions. This means +:ref:`ref-classes-native` recipe :ref:`overview-manual/concepts:shared state +cache` can be shared among different host distributions of different versions, +i.e. the :ref:`overview-manual/concepts:shared state cache` is "universal". + +To allow this to work, the dynamic loader is changed to our own :manpage:`ld.so +<ld.so.8>` when binaries are compiled using the +``--dynamic-linker`` option. This means when the binary is executed, it finds +our own :manpage:`ld.so <ld.so.8>` and that loader has a modified search path +which finds a newer Glibc version. + +The linking of the binaries is not changed at link time since the +headers on the system wouldn't match the newer Glibc and this causes +obtuse failures. Changing the loader is effectively the same as if the +system had a Glibc upgrade after the binary was compiled, so it is a +mechanism supported by upstream. + +One caveat to this approach is that the uninative Glibc binary must be +equal to or newer in version to the versions on all the systems using +the common :ref:`overview-manual/concepts:shared state cache`. This is why +:ref:`ref-classes-uninative` is regularly changed on the development and stable +branches. + +Another potential issue is static linking: static libraries created on +a system with a new Glibc version may have symbols not present in older +versions, which would then fail during linking on older systems. This +is one reason we don't use static linking for our :ref:`ref-classes-native` +binaries. + +With this class enabled, a tarball containing a pre-built C library is +downloaded at the start of the build. In the Poky reference distribution this is +enabled by default through :oe_git:`meta/conf/distro/include/yocto-uninative.inc +</openembedded-core/tree/meta/conf/distro/include/yocto-uninative.inc>`. Other distributions that do +not derive from Poky can also "``require conf/distro/include/yocto-uninative.inc``" +to use this. Alternatively if you prefer, you can build the uninative-tarball +recipe yourself, publish the resulting tarball (e.g. via HTTP) and set +:term:`UNINATIVE_URL` and :term:`UNINATIVE_CHECKSUM` appropriately. For an +example, see :oe_git:`meta/conf/distro/include/yocto-uninative.inc +</openembedded-core/tree/meta/conf/distro/include/yocto-uninative.inc>`. + +The :ref:`ref-classes-uninative` class is also used unconditionally by the +:doc:`extensible SDK </sdk-manual/extensible>`. When building the extensible +SDK, ``uninative-tarball`` is built and the resulting tarball is included within +the SDK. .. _ref-classes-update-alternatives: diff --git a/poky/documentation/ref-manual/devtool-reference.rst b/poky/documentation/ref-manual/devtool-reference.rst index 9319addc3c..2db2adde95 100644 --- a/poky/documentation/ref-manual/devtool-reference.rst +++ b/poky/documentation/ref-manual/devtool-reference.rst @@ -24,7 +24,7 @@ The ``devtool`` command line is organized similarly to Git in that it has a number of sub-commands for each function. You can run ``devtool --help`` to see all the commands:: - $ devtool -h + $ devtool --help NOTE: Starting bitbake server... usage: devtool [--basepath BASEPATH] [--bbpath BBPATH] [-d] [-q] [--color COLOR] [-h] <subcommand> ... @@ -50,6 +50,7 @@ has a number of sub-commands for each function. You can run search Search available recipes Working on a recipe in the workspace: build Build a recipe + ide-sdk Setup the SDK and configure the IDE rename Rename a recipe file in the workspace edit-recipe Edit a recipe file find-recipe Find a recipe file @@ -63,17 +64,11 @@ has a number of sub-commands for each function. You can run build-image Build image including workspace recipe packages Advanced: create-workspace Set up workspace in an alternative location + import Import exported tar archive into workspace + export Export workspace into a tar archive extract Extract the source for an existing recipe sync Synchronize the source tree for an existing recipe menuconfig Alter build-time configuration for a recipe - import Import exported tar archive into workspace - export Export workspace into a tar archive - other: - selftest-reverse Reverse value (for selftest) - pluginfile Print the filename of this plugin - bbdir Print the BBPATH directory of this plugin - count How many times have this plugin been registered. - multiloaded How many times have this plugin been initialized Use devtool <subcommand> --help to get help on a specific command As directed in the general help output, you can @@ -82,8 +77,8 @@ using ``--help``:: $ devtool add --help NOTE: Starting bitbake server... - usage: devtool add [-h] [--same-dir | --no-same-dir] [--fetch URI] [--npm-dev] [--version VERSION] [--no-git] [--srcrev SRCREV | --autorev] [--srcbranch SRCBRANCH] [--binary] [--also-native] [--src-subdir SUBDIR] [--mirrors] - [--provides PROVIDES] + usage: devtool add [-h] [--same-dir | --no-same-dir] [--fetch URI] [--npm-dev] [--no-pypi] [--version VERSION] [--no-git] [--srcrev SRCREV | --autorev] + [--srcbranch SRCBRANCH] [--binary] [--also-native] [--src-subdir SUBDIR] [--mirrors] [--provides PROVIDES] [recipename] [srctree] [fetchuri] Adds a new recipe to the workspace to build a specified source tree. Can optionally fetch a remote URI and unpack it to create the source tree. @@ -99,6 +94,7 @@ using ``--help``:: --no-same-dir Force build in a separate build directory --fetch URI, -f URI Fetch the specified URI and extract it to create the source tree (deprecated - pass as positional argument instead) --npm-dev For npm, also fetch devDependencies + --no-pypi Do not inherit pypi class --version VERSION, -V VERSION Version to use within recipe (PV) --no-git, -g If fetching source, do not set up source tree as a git repository @@ -439,7 +435,7 @@ You can read more on the ``devtool upgrade`` workflow in the ":ref:`sdk-manual/extensible:use \`\`devtool upgrade\`\` to create a version of the recipe that supports a newer version of the software`" section in the Yocto Project Application Development and the Extensible Software Development Kit (eSDK) manual. You can also see an example of -how to use ``devtool upgrade`` in the ":ref:`dev-manual/upgrading-recipes:using \`\`devtool upgrade\`\``" +how to use ``devtool upgrade`` in the ":ref:`dev-manual/upgrading-recipes:using ``devtool upgrade```" section in the Yocto Project Development Tasks Manual. .. _devtool-resetting-a-recipe: @@ -467,6 +463,20 @@ Here is an example that resets the workspace directory that contains the NOTE: Leaving source tree /home/scottrif/poky/build/workspace/sources/mtr as-is; if you no longer need it then please delete it manually $ +.. _devtool-finish-working-on-a-recipe: + +Finish Working on a Recipe +========================== + +Use the ``devtool finish`` command to push any committed changes to the +specified recipe in the specified layer and remove it from your workspace. + +This is roughly equivalent to the ``devtool update-recipe`` command followed by +the ``devtool reset`` command. The changes must have been committed to the git +repository created by ``devtool``. Here is an example:: + + $ devtool finish recipe /path/to/custom/layer + .. _devtool-building-your-recipe: Building Your Recipe @@ -543,6 +553,26 @@ the packages are already on the target. Consequently, when a runtime call is made in the application for a dependent function (e.g. a library call), the function cannot be found. +.. warning:: + + Runtime dependencies can be explicitly listed in the :term:`RDEPENDS` + variable, but may also be the result of a :term:`DEPENDS` assignment in your + application's recipe. This is usually the case when your application depends + on libraries for compilation: these libraries are listed as build-time + dependencies in the :term:`DEPENDS` variable in your application's recipe. + However these may also be runtime dependencies if they install shared objects + on which your application will dynamically link to at runtime (e.g. shared + libraries ending with ``.so``). + + These runtime dependencies are automatically resolved by the + :term:`OpenEmbedded Build System` during the packaging phase. Since + ``devtool`` ignores packaging dependencies, they will not be installed + automatically with ``devtool deploy-target``. + + For more information on how the :term:`OpenEmbedded Build System` handles + packaging, see the :ref:`overview-manual/concepts:Automatically Added Runtime + Dependencies` section of the Yocto Project Overview and Concepts Manual. + To be sure you have all the dependencies local to the target, you need to be sure that the packages are pre-deployed (installed) on the target before attempting to run your application. @@ -618,3 +648,43 @@ a match. When you use the ``devtool search`` command, you must supply a keyword. The command uses the keyword when searching for a match. + +Alternatively, the ``devtool find-recipe`` command can be used to search for +recipe files instead of recipe names. Likewise, you must supply a keyword. + +.. _devtool-get-the-configure-script-help: + +Get Information on Recipe Configuration Scripts +=============================================== + +Use the ``devtool configure-help`` command to get help on the configuration +script options for a given recipe. You must supply the recipe name to the +command. For example, it shows the output of ``./configure --help`` for +:ref:`autotools <ref-classes-autotools>`-based recipes. + +The ``configure-help`` command will also display the configuration options +currently in use, including the ones passed through the :term:`EXTRA_OECONF` +variable. + +.. _devtool-generate-an-ide-configuration-for-a-recipe: + +Generate an IDE Configuration for a Recipe +========================================== + +The ``devtool ide-sdk`` automatically creates an IDE configuration and SDK to +work on a given recipe. Depending on the ``--mode`` parameter, different types +of SDKs are generated: + +- ``modified`` mode: this creates an SDK and generates an IDE configuration in + the workspace directory. + +- ``shared`` mode: this creates a cross-compiling toolchain and the + corresponding shared sysroot directories of the supplied recipe(s). + +The ``--target`` option can be used to specify a ``username@hostname`` string +and create a remote debugging configuration for the recipe. Similarly to +``devtool deploy-target``, it requires an SSH server running on the target. + +For further details on the ``devtool ide-sdk`` command, see the +":doc:`/sdk-manual/extensible`" chapter in the Yocto Project Application +Development and the Extensible Software Development Kit (eSDK) manual. diff --git a/poky/documentation/ref-manual/faq.rst b/poky/documentation/ref-manual/faq.rst index bab284bbfd..7dd37c7a5c 100644 --- a/poky/documentation/ref-manual/faq.rst +++ b/poky/documentation/ref-manual/faq.rst @@ -45,6 +45,28 @@ See :yocto_wiki:`Products that use the Yocto Project Wiki. Don't hesitate to contribute to this page if you know other such products. +Why isn't systemd the default init system for OpenEmbedded-Core/Yocto Project or in Poky? +----------------------------------------------------------------------------------------- + +`systemd <https://systemd.io/>`__ is a desktop Linux init system with a specific +focus that is not entirely aligned with a customisable "embedded" build +system/environment. + +It understandably mandates certain layouts and configurations which may +or may not align with what the objectives and direction :term:`OpenEmbedded-Core +(OE-Core)` or Yocto Project want to take. It doesn't support all of our targets. +For example `musl <https://www.musl-libc.org/>`__ support in systemd is +problematic. + +If it were our default, we would have to align with all their choices +and this doesn't make sense. It is therefore a configuration option and +available to anyone where the design goals align. But we are clear it +is not the only way to handle init. + +Our automated testing includes it through the ``poky-altcfg`` :term:`DISTRO` and +we don't really need it to be the default: it is tested, it works, and people +can choose to use it. + Building environment ==================== @@ -259,6 +281,25 @@ Within the :term:`Build Directory`, is the ``tmp`` directory. To remove all the build output yet preserve any source code or downloaded files from previous builds, simply remove the ``tmp`` directory. +Why isn't there a way to append bbclass files like bbappend for recipes? +------------------------------------------------------------------------ + +The Yocto Project has consciously chosen not to implement such functionality. +Class code is designed to be shared and reused, and exposes some level of +configuration to its users. We want to encourage people to share these changes +so we can build the best classes. + +If the ``append`` functionality was available for classes, our evidence and +experience suggest that people would create their custom changes in their +layer instead of sharing and discussing the issues and/or limitations they +encountered. This would lead to bizarre class interactions when new layers are +included. We therefore consciously choose to have a natural pressure to share +class code improvements or fixes. + +There are also technical considerations like which recipes a class append would +apply to and how that would fit within the layer model. These are complications +we think we can live without! + Customizing generated images ============================ diff --git a/poky/documentation/ref-manual/features.rst b/poky/documentation/ref-manual/features.rst index 2ea946b31d..5574ecafe2 100644 --- a/poky/documentation/ref-manual/features.rst +++ b/poky/documentation/ref-manual/features.rst @@ -12,7 +12,7 @@ Features provide a mechanism for working out which packages should be included in the generated images. Distributions can select which features they want to support through the :term:`DISTRO_FEATURES` variable, which is set or appended to in a distribution's configuration file such -as ``poky.conf``, ``poky-tiny.conf``, ``poky-lsb.conf`` and so forth. +as ``poky.conf``, ``poky-tiny.conf``, ``poky-altcfg.conf`` and so forth. Machine features are set in the :term:`MACHINE_FEATURES` variable, which is set in the machine configuration file and specifies the hardware features for a given machine. @@ -146,7 +146,7 @@ metadata, as extra layers can define their own: - *directfb:* Include DirectFB support. -- *ext2:* Include tools for supporting for devices with internal +- *ext2:* Include tools for supporting devices with internal HDD/Microdrive for storing files (instead of Flash only devices). - *gobject-introspection-data:* Include data to support @@ -197,13 +197,17 @@ metadata, as extra layers can define their own: - *pcmcia:* Include PCMCIA/CompactFlash support. +- *pni-names:* Enable generation of persistent network interface names, i.e. + the system tries hard to have the same but unique names for the network + interfaces even after a reinstall. + - *polkit:* Include :wikipedia:`Polkit <Polkit>` support. - *ppp:* Include PPP dialup support. - *ptest:* Enables building the package tests where supported by individual recipes. For more information on package tests, see the - ":ref:`dev-manual/packages:testing packages with ptest`" section + ":ref:`test-manual/ptest:testing packages with ptest`" section in the Yocto Project Development Tasks Manual. - *pulseaudio:* Include support for diff --git a/poky/documentation/ref-manual/images.rst b/poky/documentation/ref-manual/images.rst index c45f9104a9..c9d8989261 100644 --- a/poky/documentation/ref-manual/images.rst +++ b/poky/documentation/ref-manual/images.rst @@ -51,27 +51,6 @@ Here is a list of supported recipes: - ``core-image-full-cmdline``: A console-only image with more full-featured Linux system functionality installed. -- ``core-image-lsb``: An image that conforms to the Linux Standard Base - (LSB) specification. This image requires a distribution configuration - that enables LSB compliance (e.g. ``poky-lsb``). If you build - ``core-image-lsb`` without that configuration, the image will not be - LSB-compliant. - -- ``core-image-lsb-dev``: A ``core-image-lsb`` image that is suitable - for development work using the host. The image includes headers and - libraries you can use in a host development environment. This image - requires a distribution configuration that enables LSB compliance - (e.g. ``poky-lsb``). If you build ``core-image-lsb-dev`` without that - configuration, the image will not be LSB-compliant. - -- ``core-image-lsb-sdk``: A ``core-image-lsb`` that includes everything - in the cross-toolchain but also includes development headers and - libraries to form a complete standalone SDK. This image requires a - distribution configuration that enables LSB compliance (e.g. - ``poky-lsb``). If you build ``core-image-lsb-sdk`` without that - configuration, the image will not be LSB-compliant. This image is - suitable for development using the target. - - ``core-image-minimal``: A small image just capable of allowing a device to boot. @@ -119,8 +98,8 @@ Here is a list of supported recipes: deployed to a separate partition so that you can boot into it and use it to deploy a second image to be tested. You can find more information about runtime testing in the - ":ref:`dev-manual/runtime-testing:performing automated runtime testing`" - section in the Yocto Project Development Tasks Manual. + ":ref:`test-manual/runtime-testing:performing automated runtime testing`" + section in the Yocto Project Test Environment Manual. - ``core-image-testmaster-initramfs``: A RAM-based Initial Root Filesystem (:term:`Initramfs`) image tailored for use with the diff --git a/poky/documentation/ref-manual/qa-checks.rst b/poky/documentation/ref-manual/qa-checks.rst index 53b1836e74..27d46de3fd 100644 --- a/poky/documentation/ref-manual/qa-checks.rst +++ b/poky/documentation/ref-manual/qa-checks.rst @@ -752,21 +752,17 @@ Errors and Warnings .. _qa-check-patch-status: -- ``Missing Upstream-Status in patch <patchfile> Please add according to <url> [patch-status-core/patch-status-noncore]`` +- ``Missing Upstream-Status in patch <patchfile> Please add according to <url> [patch-status]`` The ``Upstream-Status`` value is missing in the specified patch file's header. This value is intended to track whether or not the patch has been sent upstream, whether or not it has been merged, etc. - There are two options for this same check - ``patch-status-core`` (for - recipes in OE-Core) and ``patch-status-noncore`` (for recipes in any other - layer). - For more information, see the ":ref:`contributor-guide/recipe-style-guide:patch upstream status`" section in the Yocto Project and OpenEmbedded Contributor Guide. -- ``Malformed Upstream-Status in patch <patchfile> Please correct according to <url> [patch-status-core/patch-status-noncore]`` +- ``Malformed Upstream-Status in patch <patchfile> Please correct according to <url> [patch-status]`` The ``Upstream-Status`` value in the specified patch file's header is invalid - it must be a specific format. See the "Missing Upstream-Status" entry above @@ -795,7 +791,7 @@ Errors and Warnings This check will detect if the source of the package contains some upstream-provided tests and, if so, that ptests are implemented for this - recipe. See the ":ref:`dev-manual/packages:testing packages with ptest`" + recipe. See the ":ref:`test-manual/ptest:testing packages with ptest`" section in the Yocto Project Development Tasks Manual. See also the ":ref:`ref-classes-ptest`" section. diff --git a/poky/documentation/ref-manual/release-process.rst b/poky/documentation/ref-manual/release-process.rst index 920794679d..639921b9f6 100644 --- a/poky/documentation/ref-manual/release-process.rst +++ b/poky/documentation/ref-manual/release-process.rst @@ -103,17 +103,22 @@ have reached their End of Life (EOL) won't receive such updates. This started with version 3.1 ("Dunfell"), released in April 2020, which the project initially committed to supporting for two years, but this duration -was later extended to four years. Similarly, the following :term:`LTS` release, -version 4.0 ("Kirkstone"), was released two years later in May 2022 and the -project committed to supporting it for four years too. +was later extended to four years. -Therefore, a new :term:`LTS` release is made every two years and is supported -for four years. This offers more stability to project users and leaves more -time to upgrade to the following :term:`LTS` release. +A new :term:`LTS` release is made every two years and is supported for four +years. This offers more stability to project users and leaves more time to +upgrade to the following :term:`LTS` release. + +The currently supported :term:`LTS` releases are: + +- Version 5.0 ("Scarthgap"), released in April 2024 and supported until April 2028. +- Version 4.0 ("Kirkstone"), released in May 2022 and supported until May 2026. See :yocto_wiki:`/Stable_Release_and_LTS` for details about the management of stable and :term:`LTS` releases. +This documentation was built for the &DISTRO_NAME; release. + .. image:: svg/releases.* :width: 100% @@ -143,8 +148,8 @@ Additionally, because the test strategies are visible to you as a developer, you can validate your projects. This section overviews the available test infrastructure used in the Yocto Project. For information on how to run available tests on your projects, see the -":ref:`dev-manual/runtime-testing:performing automated runtime testing`" -section in the Yocto Project Development Tasks Manual. +":ref:`test-manual/runtime-testing:performing automated runtime testing`" +section in the Yocto Project Test Environment Manual. The QA/testing infrastructure is woven into the project to the point where core developers take some of it for granted. The infrastructure @@ -170,7 +175,7 @@ consists of the following pieces: operation and functions. However, the test can also use the IP address of a machine to test. -- :ref:`ptest <dev-manual/packages:testing packages with ptest>`: +- :ref:`ptest <test-manual/ptest:testing packages with ptest>`: Runs tests against packages produced during the build for a given piece of software. The test allows the packages to be run within a target image. @@ -185,7 +190,7 @@ effort has been made to automate the tests so that more people can use them and the Yocto Project development team can run them faster and more efficiently. -The Yocto Project's main Autobuilder (&YOCTO_AB_URL;) publicly tests each Yocto +The Yocto Project's main :yocto_ab:`Autobuilder <>` publicly tests each Yocto Project release's code in the :oe_git:`openembedded-core </openembedded-core>`, :yocto_git:`poky </poky>` and :oe_git:`bitbake </bitbake>` repositories. The testing occurs for both the current state of the "master" branch and also for diff --git a/poky/documentation/ref-manual/structure.rst b/poky/documentation/ref-manual/structure.rst index e4d8b54bb9..b92d9bb411 100644 --- a/poky/documentation/ref-manual/structure.rst +++ b/poky/documentation/ref-manual/structure.rst @@ -335,6 +335,24 @@ Once the build process gets the sample file, it uses ``sed`` to substitute final version of the ``bblayers.conf.sample`` file in the ``meta-poky/conf/templates/default`` directory. +.. _structure-build-conf-bblock.conf: + +``build/conf/bblock.conf`` +-------------------------- + +This configuration file is generated by :doc:`bblock </dev-manual/bblock>` and +contains the signatures locked by ``bblock``. By default, it does not exist +and will be created upon the first invocation of ``bblock``. + +.. _structure-build-conf-auto.conf: + +``build/conf/auto.conf`` +------------------------ + +This file contains configuration variables that are automatically modified by +tools such as :oe_git:`bitbake-config-build </bitbake/tree/bin/bitbake-config-build>`. +This file should not be modified manually. + .. _structure-build-downloads: ``build/downloads/`` @@ -484,6 +502,30 @@ the ":ref:`sdk-manual/appendix-obtain:building an sdk installer`" section in the Yocto Project Application Development and the Extensible Software Development Kit (eSDK) manual. +.. _structure-build-tmp-hosttools: + +``build/tmp/hosttools/`` +~~~~~~~~~~~~~~~~~~~~~~~~ + +The OpenEmbedded build system uses this directory to create symbolic links to +some of the host components that are allowed to be called within tasks. These +are basic components listed in the :ref:`ref-manual/system-requirements:required +packages for the build host` section. These components are also listed in the +:term:`HOSTTOOLS` variable and are limited to this list to prevent host +contamination. + +.. _structure-build-tmp-pkgdata: + +``build/tmp/pkgdata/`` +~~~~~~~~~~~~~~~~~~~~~~ + +The OpenEmbedded build system uses this directory to store package metadata +generated during the :ref:`ref-tasks-packagedata` task. The files stored in this +directory contain information about each output package produced by the +OpenEmbedded build system, and are used in different ways by the build system +such as ":ref:`dev-manual/debugging:viewing package information with +``oe-pkgdata-util```". + .. _structure-build-tmp-sstate-control: ``build/tmp/sstate-control/`` @@ -657,8 +699,15 @@ Here are key subdirectories within each recipe work directory: For efficiency, the OpenEmbedded build system creates and uses this directory to hold recipes that share a work directory with other -recipes. In practice, this is only used for ``gcc`` and its variants -(e.g. ``gcc-cross``, ``libgcc``, ``gcc-runtime``, and so forth). +recipes. This is for example used for ``gcc`` and its variants (e.g. +``gcc-cross``, ``libgcc``, ``gcc-runtime``, and so forth), or by the +:ref:`ref-classes-kernel` class to make the kernel source code and kernel build +artifacts available to out-of-tree kernel modules or other kernel-dependent +recipes. + +In practice, only a few recipes make use of the ``work-shared`` directory. This +directory is especially useful for recipes that would induce a lot of storage +space if they were to be shared with the standard :term:`Sysroot` mechanism. .. _structure-meta: diff --git a/poky/documentation/ref-manual/svg/releases.svg b/poky/documentation/ref-manual/svg/releases.svg index 036aa467cc..3a379078b8 100644 --- a/poky/documentation/ref-manual/svg/releases.svg +++ b/poky/documentation/ref-manual/svg/releases.svg @@ -2,11 +2,14 @@ <svg version="1.1" id="svg2" - width="2040.0006" - height="669.30511" - viewBox="0 0 2040.0006 669.30509" + width="1992.7236" + height="613.35602" + viewBox="0 0 1992.7236 613.35599" sodipodi:docname="releases.svg" - inkscape:version="1.1.2 (0a00cf5339, 2022-02-04)" + inkscape:version="1.4.1 (93de688d07, 2025-03-30)" + inkscape:export-filename="../../../../../../../../tmp/releases.png" + inkscape:export-xdpi="96" + inkscape:export-ydpi="96" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd" xmlns="http://www.w3.org/2000/svg" @@ -24,29 +27,29 @@ <dc:format>image/svg+xml</dc:format> <dc:type rdf:resource="http://purl.org/dc/dcmitype/StillImage" /> - <cc:license - rdf:resource="http://artlibre.org/licence/lal" /> <dc:title>Yocto Project Release Timeline</dc:title> <dc:creator> <cc:Agent> <dc:title>The Yocto Project</dc:title> </cc:Agent> </dc:creator> + <cc:license + rdf:resource="http://artlibre.org/licence/lal" /> </cc:Work> <cc:License - rdf:about="http://creativecommons.org/licenses/by-sa/4.0/"> + rdf:about="http://artlibre.org/licence/lal"> <cc:permits rdf:resource="http://creativecommons.org/ns#Reproduction" /> <cc:permits rdf:resource="http://creativecommons.org/ns#Distribution" /> - <cc:requires - rdf:resource="http://creativecommons.org/ns#Notice" /> - <cc:requires - rdf:resource="http://creativecommons.org/ns#Attribution" /> <cc:permits rdf:resource="http://creativecommons.org/ns#DerivativeWorks" /> <cc:requires rdf:resource="http://creativecommons.org/ns#ShareAlike" /> + <cc:requires + rdf:resource="http://creativecommons.org/ns#Notice" /> + <cc:requires + rdf:resource="http://creativecommons.org/ns#Attribution" /> </cc:License> </rdf:RDF> </metadata> @@ -66,7 +69,8 @@ miter_limit="4" scale_width="1" end_linecap_type="zerowidth" - not_jump="false" /> + not_jump="false" + message="" /> <marker style="overflow:visible" id="marker5783" @@ -404,15 +408,15 @@ guidetolerance="10" inkscape:pageopacity="0" inkscape:pageshadow="2" - inkscape:window-width="1920" - inkscape:window-height="1043" + inkscape:window-width="3826" + inkscape:window-height="2069" id="namedview4" showgrid="true" - inkscape:zoom="1.4472045" - inkscape:cx="987.76641" - inkscape:cy="357.93145" - inkscape:window-x="1728" - inkscape:window-y="0" + inkscape:zoom="1.5536106" + inkscape:cx="1158.2696" + inkscape:cy="273.55632" + inkscape:window-x="2256" + inkscape:window-y="60" inkscape:window-maximized="1" inkscape:current-layer="g10" inkscape:document-rotation="0" @@ -422,94 +426,109 @@ fit-margin-left="30" fit-margin-right="30" fit-margin-bottom="30" - inkscape:pagecheckerboard="0"> + inkscape:pagecheckerboard="0" + inkscape:showpageshadow="2" + inkscape:deskcolor="#d1d1d1" + showguides="true"> <inkscape:grid type="xygrid" id="grid1257" - originx="-289.99936" - originy="369.99998" /> + originx="-289.06071" + originy="478.43017" + spacingy="1" + spacingx="1" + units="px" + visible="true" /> </sodipodi:namedview> <g inkscape:groupmode="layer" inkscape:label="Image" id="g10" - transform="translate(-289.99936,370.00003)"> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1080,220.00003 v -515.00007 0 0" + transform="translate(-289.06072,478.43022)"> + <rect + style="fill:#333333;fill-opacity:0;stroke:#000000;stroke-width:0.713896;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-opacity:0" + id="rect1" + width="1992.0098" + height="612.64215" + x="289.41766" + y="-478.07327" + ry="24.97636" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 563.40434,64.000628 v -524.414808 0 0" id="path207708" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1200,220.00003 v -515.00007 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 683.40434,64.000628 v -524.414808 0 0" id="path207708-4" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1320,220.00003 v -515.00007 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 803.40434,64.000628 v -524.414808 0 0" id="path207708-4-3" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1440,219.99998 v -515.00002 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 923.40434,64.000577 v -524.414757 0 0" id="path207708-4-3-6" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1560,219.99998 v -515.00001 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1043.4043,64.000577 v -524.414757 0 0" id="path207708-4-3-6-2" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1680,219.99998 v -515.00002 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1163.4043,64.000577 v -524.414757 0 0" id="path207708-4-3-6-2-8" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1800,219.99998 v -515.00002 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1283.4043,64.000577 v -524.414757 0 0" id="path207708-4-3-6-2-8-4" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1920,219.99998 v -515.00002 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1403.4043,64.000577 v -524.414757 0 0" id="path207708-4-3-6-2-8-4-3" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 2040,219.99997 v -460.00002 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.475347;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1523.4043,64.000568 v -415.757648 0 0" id="path207708-4-3-6-2-8-4-3-8" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 2040,219.99998 v -515.00002 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1523.4043,64.000577 v -524.414757 0 0" id="path207708-4-3-6-2-8-4-3-8-0" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 2159.954,219.99997 v -514.99999 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1643.3583,64.000565 v -524.414715 0 0" id="path207708-4-3-6-2-8-4-3-8-4" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 2280,219.99997 v -514.99999 0 0" + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1763.4043,64.000565 v -524.414715 0 0" id="path207708-4-3-6-2-8-4-3-8-4-0" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 960,220.00003 v -515.00007 0 0" - id="path207708-9" /> + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1883.7877,64.878769 v -524.414709 0 0" + id="path207708-4-3-6-2-8-4-3-8-4-0-8" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 840,220.00001 v -375 0 0" - id="path207708-9-6" /> + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 2002.9599,64.984489 v -524.414709 0 0" + id="path207708-4-3-6-2-8-4-3-8-4-0-8-8" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 840,220.00002 v -515.00004 0 0" - id="path207708-9-6-2" /> + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 2123.2232,62.984489 v -524.414709 0 0" + id="path207708-4-3-6-2-8-4-3-8-4-0-8-8-1" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 720,220.00003 v -515.00007 0 0" - id="path207708-9-6-2-5" /> + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 2243.313,63.984489 v -524.414709 0 0" + id="path207708-4-3-6-2-8-4-3-8-4-0-8-8-1-9" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 600,220.00003 v -515.00007 0 0" - id="path207708-9-6-2-5-9" /> + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 443.40434,64.000628 v -524.414808 0 0" + id="path207708-9" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 480,220.00003 v -515.00007 0 0" - id="path207708-9-6-2-5-9-0" /> + d="m 323.40434,64.000608 v -375.000008 0 0" + id="path207708-9-6" /> <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 360,220.00003 v -515.00007 0 0" - id="path207708-9-6-2-5-9-0-5" /> + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 323.40434,64.000616 v -524.414766 0 0" + id="path207708-9-6-2" /> <text xml:space="preserve" style="font-weight:bold;font-size:42.5884px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:none;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" @@ -541,186 +560,152 @@ x="-59.575905" y="580.05695" /></text> <rect - style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0" - width="980" + style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" + id="rect917-0-0-4-4-9-4" + width="160.00002" height="45.000004" - x="360" - y="154.99997" + x="443.40427" + y="-55.999405" ry="2.2558987" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="420.52835" - y="174.12433" - id="text1185-3-55-4"><tspan + x="491.89841" + y="-36.604408" + id="text1185-3-55-4-0-0-0"><tspan sodipodi:role="line" - x="420.52835" - y="174.12433" + x="491.89841" + y="-36.604408" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8">Dunfell (LTS)</tspan><tspan + id="tspan957-2-8-6-3-9">Langdale</tspan><tspan sodipodi:role="line" - x="420.52835" - y="192.121" + x="491.89841" + y="-18.607729" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317">3.1</tspan></text> + id="tspan10317-2-9-1">4.1</tspan></text> <rect - style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0-4" - width="140.00002" + style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5" + width="140.00003" height="45.000004" - x="480" - y="99.999969" + x="583.40436" + y="-110.99944" ry="2.2558987" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="534.10651" - y="118.94971" - id="text1185-3-55-4-0"><tspan + x="639.46136" + y="-91.498215" + id="text1185-3-55-4-0-0-0-1"><tspan sodipodi:role="line" - x="534.10651" - y="118.94971" + x="639.46136" + y="-91.498215" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8-6">Gatesgarth</tspan><tspan + id="tspan957-2-8-6-3-9-7">Mickledore</tspan><tspan sodipodi:role="line" - x="534.10651" - y="136.94638" + x="639.46136" + y="-73.501534" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317-2">3.2</tspan></text> - <rect - style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0-4-4" - width="260" - height="45.000004" - x="599.99994" - y="45.000011" - ry="2.2558987" /> + id="tspan10317-2-9-1-4">4.2</tspan></text> <rect - style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0-4-4-9" - width="160.00002" + style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-3-6" + width="140" height="45.000004" - x="720" - y="-9.9999905" + x="923.65302" + y="-275.19217" ry="2.2558987" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="766.10297" - y="9.57586" - id="text1185-3-55-4-0-0"><tspan + x="970.63739" + y="-256.32867" + id="text1185-3-55-4-0-0-0-1-1-6-4"><tspan sodipodi:role="line" - x="766.10297" - y="9.57586" + x="970.63739" + y="-256.32867" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8-6-3">Honister</tspan><tspan + id="tspan957-2-8-6-3-9-7-4-2-0">Styhead</tspan><tspan sodipodi:role="line" - x="766.10297" - y="27.57254" + x="970.63739" + y="-238.332" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317-2-9">3.4</tspan></text> + id="tspan10317-2-9-1-4-6-5-6">5.1</tspan></text> <rect style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0-4-4-9-4" - width="160.00002" + id="rect917-0-0-4-4-9-4-5-3-9-2-3-6-2" + width="140" height="45.000004" - x="959.99994" - y="-120" + x="1043.4697" + y="-328.48172" ry="2.2558987" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1008.4941" - y="-100.605" - id="text1185-3-55-4-0-0-0"><tspan + x="1090.4542" + y="-309.61823" + id="text1185-3-55-4-0-0-0-1-1-6-4-7"><tspan sodipodi:role="line" - x="1008.4941" - y="-100.605" + x="1090.4542" + y="-309.61823" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8-6-3-9">Langdale</tspan><tspan + id="tspan957-2-8-6-3-9-7-4-2-0-0">Walnascar</tspan><tspan sodipodi:role="line" - x="1008.4941" - y="-82.608322" + x="1090.4542" + y="-291.62155" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317-2-9-1">4.1</tspan></text> + id="tspan10317-2-9-1-4-6-5-6-9">5.2</tspan></text> <rect - style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0-4-4-9-4-5" - width="140.00003" + style="opacity:0.75;fill:#251f32;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-3-67" + width="140" height="45.000004" - x="1100" - y="-175.00003" + x="1163.6425" + y="-382.27469" ry="2.2558987" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1156.057" - y="-155.49881" - id="text1185-3-55-4-0-0-0-1"><tspan + x="1214.9716" + y="-363.89413" + id="text1185-3-55-4-0-0-0-1-1-6-4-3-53"><tspan sodipodi:role="line" - x="1156.057" - y="-155.49881" + x="1214.9716" + y="-363.89413" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8-6-3-9-7">Mickledore</tspan><tspan + id="tspan957-2-8-6-3-9-7-4-2-0-5-5">Whinlatter</tspan><tspan sodipodi:role="line" - x="1156.057" - y="-137.50214" + x="1214.9716" + y="-345.89746" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317-2-9-1-4">4.2</tspan></text> - <g - id="g1258"> - <rect - style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0-4-4-9-4-5-38" - width="120.00002" - height="45.000004" - x="1220" - y="-230.00005" - ry="2.2558987" /> - <text - xml:space="preserve" - style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1269.2329" - y="-210.32925" - id="text1185-3-55-4-0-0-0-1-1"><tspan - sodipodi:role="line" - x="1269.2329" - y="-210.32925" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8-6-3-9-7-4">Nanbield</tspan><tspan - sodipodi:role="line" - x="1269.2329" - y="-192.33258" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317-2-9-1-4-6">4.3</tspan></text> - </g> + id="tspan10317-2-9-1-4-6-5-6-6-6">5.3</tspan></text> <rect - style="opacity:0.75;fill:#241f31;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - id="rect917-0-0-4-4-9-4-5-3-9-2" - width="140" + style="opacity:0.75;fill:#251f32;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:5.29752;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-3-67-6" + width="982.23163" height="45.000004" - x="1440" - y="-340.00003" + x="1283.7023" + y="-436.77539" ry="2.2558987" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1487.233" - y="-320.32928" - id="text1185-3-55-4-0-0-0-1-1-6-4"><tspan + x="1335.1118" + y="-418.39484" + id="text1185-3-55-4-0-0-0-1-1-6-4-3-53-0"><tspan sodipodi:role="line" - x="1487.233" - y="-320.32928" + x="1335.1118" + y="-418.39484" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8-6-3-9-7-4-2-0">Styhead</tspan><tspan + id="tspan957-2-8-6-3-9-7-4-2-0-5-5-6">Wrynose</tspan><tspan sodipodi:role="line" - x="1487.233" - y="-302.33261" + x="1335.1118" + y="-400.39816" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317-2-9-1-4-6-5-6">5.1</tspan></text> + id="tspan10317-2-9-1-4-6-5-6-6-6-2">6.0</tspan></text> <g - id="g1591"> + id="g1591" + transform="translate(-516.59566,64.000598)"> <rect style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" id="rect917-0-0-4-4-9-9" @@ -749,42 +734,26 @@ <path id="rect917-0-0-4-4-9-9-9" style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1" - d="m 1322.3015,-285.00003 c -1.2753,0 -2.302,1.00609 -2.302,2.25586 v 40.48828 c 0,1.24977 1.0267,2.25586 2.302,2.25586 h 975.0412 c 1.2754,0 2.302,-1.00609 2.302,-2.25586 v -40.48828 c 0,-1.24977 -1.0266,-2.25586 -2.302,-2.25586 z" /> + d="m 805.70584,-220.99944 c -1.2753,0 -2.302,1.00609 -2.302,2.25586 v 40.48828 c 0,1.24977 1.0267,2.25586 2.302,2.25586 H 1780.747 c 1.2754,0 2.302,-1.00609 2.302,-2.25586 v -40.48828 c 0,-1.24977 -1.0266,-2.25586 -2.302,-2.25586 z" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1390.4988" - y="-265.64832" + x="873.90314" + y="-201.64772" id="text1185-3-55-4-0-0-9-0"><tspan sodipodi:role="line" - x="1390.4988" - y="-265.64832" + x="873.90314" + y="-201.64772" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" id="tspan957-2-8-6-3-6-8">Scarthgap (LTS)</tspan><tspan sodipodi:role="line" - x="1390.4988" - y="-247.65164" + x="873.90314" + y="-183.65105" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" id="tspan10317-2-9-0-1">5.0</tspan></text> - <text - xml:space="preserve" - style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="653.72168" - y="64.866302" - id="text1185-3-55-4-0-0-7"><tspan - sodipodi:role="line" - x="653.72168" - y="64.866302" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan957-2-8-6-3-2">Hardknott </tspan><tspan - sodipodi:role="line" - x="653.72168" - y="82.862984" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan10317-2-9-8">3.3</tspan></text> <g id="g1125-0" - transform="matrix(0.42240595,0,0,0.41654472,354.53445,-399.96314)" + transform="matrix(0.42240595,0,0,0.41654472,330.77064,-497.11721)" style="stroke:none;stroke-width:2.38399"> <rect style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:4.76797;stroke-opacity:1" @@ -873,234 +842,149 @@ <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1199.6055" - y="250.21216" + x="683.00983" + y="94.212761" id="text1185-9-7-1-1"><tspan sodipodi:role="line" - x="1199.6055" - y="250.21216" + x="683.00983" + y="94.212761" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345">Oct.</tspan><tspan sodipodi:role="line" - x="1199.6055" - y="268.20883" + x="683.00983" + y="112.20944" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906">2023</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1439.3904" - y="249.86044" + x="922.79474" + y="93.861046" id="text1185-9-7-1-1-89"><tspan sodipodi:role="line" - x="1439.3904" - y="249.86044" + x="922.79474" + y="93.861046" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-7">Oct.</tspan><tspan sodipodi:role="line" - x="1439.3904" - y="267.85712" + x="922.79474" + y="111.85773" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-76">2024</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1679.3094" - y="250.58356" + x="1162.7139" + y="94.58416" id="text1185-9-7-1-1-89-6"><tspan sodipodi:role="line" - x="1679.3094" - y="250.58356" + x="1162.7139" + y="94.58416" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-7-8">Oct.</tspan><tspan sodipodi:role="line" - x="1679.3094" - y="268.58023" + x="1162.7139" + y="112.58084" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-76-0">2025</tspan></text> <text xml:space="preserve" - style="font-weight:bold;font-size:6.66667px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="849.49744" - y="61.106953" - id="text1185-9-7-1-1-0"><tspan - sodipodi:role="line" - x="849.49744" - y="61.106953" - style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:6.66667px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:end;text-anchor:end;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan46212">Support for this version was extended to leave</tspan><tspan - sodipodi:role="line" - x="849.49744" - y="70.105324" - style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:6.66667px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:end;text-anchor:end;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan120364">users more time to adapt to override syntax</tspan><tspan - sodipodi:role="line" - x="849.49744" - y="79.103691" - style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:6.66667px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:end;text-anchor:end;fill:#fffefe;fill-opacity:1;stroke:none" - id="tspan123280">changes in the 3.4 release.</tspan></text> - <text - xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="959.52008" - y="250.67822" + x="442.92441" + y="94.678825" id="text1185-9-7-1-1-0-7"><tspan sodipodi:role="line" - x="959.52008" - y="250.67822" + x="442.92441" + y="94.678825" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-42-7">Oct.</tspan><tspan sodipodi:role="line" - x="959.52008" - y="268.6749" + x="442.92441" + y="112.67551" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-9-6">2022</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="719.13617" - y="250.21216" - id="text1185-9-7-1-1-2"><tspan - sodipodi:role="line" - x="719.13617" - y="250.21216" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan31345-1">Oct.</tspan><tspan - sodipodi:role="line" - x="719.13617" - y="268.20883" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan49906-5">2021</tspan></text> - <text - xml:space="preserve" - style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="478.82367" - y="250.21216" - id="text1185-9-7-1-1-80"><tspan - sodipodi:role="line" - x="478.82367" - y="250.21216" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan31345-5">Oct.</tspan><tspan - sodipodi:role="line" - x="478.82367" - y="268.20883" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan49906-6">2020</tspan></text> - <text - xml:space="preserve" - style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="361.81961" - y="250.07544" - id="text1185-9-7-1-1-8"><tspan - sodipodi:role="line" - x="361.81961" - y="250.07544" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan31345-4">Apr.</tspan><tspan - sodipodi:role="line" - x="361.81961" - y="268.07211" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan49906-7">2020</tspan></text> - <text - xml:space="preserve" - style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="840.9248" - y="250.07544" + x="324.32913" + y="94.076042" id="text1185-9-7-1-1-8-1"><tspan sodipodi:role="line" - x="840.9248" - y="250.07544" + x="324.32913" + y="94.076042" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-4-0">Apr</tspan><tspan sodipodi:role="line" - x="840.9248" - y="268.07211" + x="324.32913" + y="112.07272" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-7-3">2022</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1321.8608" - y="250.07544" + x="805.2652" + y="94.076042" id="text1185-9-7-1-1-8-1-0"><tspan sodipodi:role="line" - x="1321.8608" - y="250.07544" + x="805.2652" + y="94.076042" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-4-0-4">Apr.</tspan><tspan sodipodi:role="line" - x="1321.8608" - y="268.07211" + x="805.2652" + y="112.07272" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-7-3-8">2024</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1561.8163" - y="249.66977" + x="1045.2207" + y="93.670372" id="text1185-9-7-1-1-8-1-0-4"><tspan sodipodi:role="line" - x="1561.8163" - y="249.66977" + x="1045.2207" + y="93.670372" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-4-0-4-81">Apr.</tspan><tspan sodipodi:role="line" - x="1561.8163" - y="267.66644" + x="1045.2207" + y="111.66705" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-7-3-8-2">2025</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1802.1477" - y="250.26334" + x="1285.5521" + y="94.263939" id="text1185-9-7-1-1-8-1-0-4-2"><tspan sodipodi:role="line" - x="1802.1477" - y="250.26334" + x="1285.5521" + y="94.263939" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-4-0-4-81-5">Apr.</tspan><tspan sodipodi:role="line" - x="1802.1477" - y="268.26001" + x="1285.5521" + y="112.26062" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-7-3-8-2-8">2026</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1081.4458" - y="250.07544" + x="564.85016" + y="94.076042" id="text1185-9-7-1-1-8-1-0-2"><tspan sodipodi:role="line" - x="1081.4458" - y="250.07544" + x="564.85016" + y="94.076042" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-4-0-4-8">Apr.</tspan><tspan sodipodi:role="line" - x="1081.4458" - y="268.07211" + x="564.85016" + y="112.07272" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-7-3-8-3">2023</tspan></text> <text xml:space="preserve" - style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="602.51526" - y="250.07544" - id="text1185-9-7-1-1-8-1-7"><tspan - sodipodi:role="line" - x="602.51526" - y="250.07544" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan31345-4-0-5">Apr.</tspan><tspan - sodipodi:role="line" - x="602.51526" - y="268.07211" - style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" - id="tspan49906-7-3-6">2021</tspan></text> - <text - xml:space="preserve" style="font-weight:bold;font-size:42.5884px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:none;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" x="-16.290483" y="345.7359" @@ -1111,252 +995,117 @@ y="345.7359" /></text> <path id="path29430" - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="M 319.99936,219.99912 H 2300 Z" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 360,219.99997 v 10.00004 0" - id="path29548" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 480,219.99996 v 10 0" - id="path29548-5" /> + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1.99503;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="M 307.54809,63.999718 H 2277.72 Z" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 600,219.99992 v 10.00005 0" - id="path29548-5-1" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 720,220.00002 v 9.99999 0" - id="path29548-5-1-3" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 840,220.00002 v 9.99995 0" + d="m 323.40434,64.000618 v 9.99995 0" id="path29548-5-1-3-6" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 960,220.00002 v 9.99999 0" + d="m 443.40434,64.000618 v 9.99999 0" id="path29548-5-1-3-6-3" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1080,220.00002 v 9.99999 0" + d="m 563.40434,64.000618 v 9.99999 0" id="path29548-5-1-3-6-3-1" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 380,219.99997 v 5.00004 0" - id="path29548-8" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 400,219.99997 v 5.00004 0" - id="path29548-8-5" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.999997;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 420,219.99997 v 5 0" - id="path29548-8-5-0" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282155" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.999997;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 440,219.99997 v 5 0" - id="path29548-8-5-0-6" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282155" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 460,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 500,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.999997;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 520,219.99997 v 5 0" - id="path29548-8-5-0-6-4-6-2-9" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282155" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 540,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 560,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 580,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 620.266,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 640,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 660,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 679.61073,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 700,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 740,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 760,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 780.36587,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 800,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 820,219.99997 v 5.00004 0" - id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6" - inkscape:transform-center-x="14.782001" - inkscape:transform-center-y="-0.085282837" /> - <path - style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 860,219.99997 v 5.00004 0" + d="m 343.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 880,219.99997 v 5.00004 0" + d="m 363.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 899.72384,219.99997 v 5.00004 0" + d="m 383.12818,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 920,219.99997 v 5.00004 0" + d="m 403.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 940,219.99997 v 5.00004 0" + d="m 423.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 980,219.99997 v 5.00004 0" + d="m 463.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1000,219.99997 v 5.00004 0" + d="m 483.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1020,219.99997 v 5.00004 0" + d="m 503.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1040,219.99997 v 5.00004 0" + d="m 523.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1059.7216,219.99997 v 5.00004 0" + d="m 543.12594,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9" inkscape:transform-center-x="-14.78205" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1100,219.99997 v 5.00004 0" + d="m 583.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1120,219.99997 v 5.00004 0" + d="m 603.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1140,219.99997 v 5.00004 0" + d="m 623.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1160,219.99997 v 5.00004 0" + d="m 643.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1179.7216,219.99997 v 5.00004 0" + d="m 663.12594,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7" inkscape:transform-center-x="-14.78205" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1320,219.99996 v 10 0" + d="m 803.40434,64.000558 v 10 0" id="path29548-5-1-3-6-3-1-0-8" /> <g - id="g1267"> + id="g1267" + transform="translate(-516.59566,-155.99941)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1394,7 +1143,7 @@ </g> <g id="g1267-4" - transform="translate(240,-4e-5)"> + transform="translate(-276.59566,-155.99945)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1432,7 +1181,7 @@ </g> <g id="g1267-4-5" - transform="translate(480,-5e-5)"> + transform="translate(-36.595659,-155.99946)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1470,7 +1219,7 @@ </g> <g id="g1267-4-5-22" - transform="translate(600,-4e-5)"> + transform="translate(83.404341,-155.99945)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1508,7 +1257,7 @@ </g> <g id="g1267-4-5-9" - transform="translate(360,-4e-5)"> + transform="translate(-156.59566,-155.99945)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1546,105 +1295,105 @@ </g> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1800,219.99997 v 9.99999 0" + d="m 1283.4043,64.000568 v 9.99999 0" id="path29548-5-1-3-6-3-1-0-3-4-2-0" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1340,219.99997 v 5.00004 0" + d="m 823.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-3" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1360,219.99997 v 5.00004 0" + d="m 843.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-0" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1380,219.99997 v 5.00004 0" + d="m 863.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-3" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1400,219.99997 v 5.00004 0" + d="m 883.40434,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-0" inkscape:transform-center-x="14.782001" inkscape:transform-center-y="-0.085282837" /> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 1419.7216,219.99997 v 5.00004 0" + d="m 903.12594,64.000568 v 5.00004 0" id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-9" inkscape:transform-center-x="-14.78205" inkscape:transform-center-y="-0.085282837" /> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="1919.3904" - y="249.86044" + x="1402.7948" + y="93.861046" id="text1185-9-7-1-1-89-62"><tspan sodipodi:role="line" - x="1919.3904" - y="249.86044" + x="1402.7948" + y="93.861046" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-7-6">Oct.</tspan><tspan sodipodi:role="line" - x="1919.3904" - y="267.85712" + x="1402.7948" + y="111.85773" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-76-7">2026</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="2159.3093" - y="250.58356" + x="1642.7137" + y="94.58416" id="text1185-9-7-1-1-89-6-5"><tspan sodipodi:role="line" - x="2159.3093" - y="250.58356" + x="1642.7137" + y="94.58416" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-7-8-6">Oct.</tspan><tspan sodipodi:role="line" - x="2159.3093" - y="268.58023" + x="1642.7137" + y="112.58084" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-76-0-9">2027</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="2041.8163" - y="249.66977" + x="1525.2207" + y="93.670372" id="text1185-9-7-1-1-8-1-0-4-8"><tspan sodipodi:role="line" - x="2041.8163" - y="249.66977" + x="1525.2207" + y="93.670372" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-4-0-4-81-7">Apr.</tspan><tspan sodipodi:role="line" - x="2041.8163" - y="267.66644" + x="1525.2207" + y="111.66705" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-7-3-8-2-2">2027</tspan></text> <text xml:space="preserve" style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" - x="2282.1477" - y="250.26334" + x="1765.5521" + y="94.263939" id="text1185-9-7-1-1-8-1-0-4-2-8"><tspan sodipodi:role="line" - x="2282.1477" - y="250.26334" + x="1765.5521" + y="94.263939" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan31345-4-0-4-81-5-2">Apr.</tspan><tspan sodipodi:role="line" - x="2282.1477" - y="268.26001" + x="1765.5521" + y="112.26062" style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" id="tspan49906-7-3-8-2-8-9">2028</tspan></text> <g id="g1267-4-9" - transform="translate(720,-3e-5)"> + transform="translate(203.40434,-155.99944)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1682,7 +1431,7 @@ </g> <g id="g1267-4-5-2" - transform="translate(960,-4e-5)"> + transform="translate(443.40434,-155.99945)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1720,7 +1469,7 @@ </g> <g id="g1267-4-5-9-9" - transform="translate(840,-3e-5)"> + transform="translate(323.40434,-155.99944)"> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" d="m 1200,220.00002 v 9.99999 0" @@ -1758,8 +1507,390 @@ </g> <path style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" - d="m 2280,219.99998 v 9.99999 0" + d="m 1763.4043,64.000578 v 9.99999 0" id="path29548-5-1-3-6-3-1-0-3-4-2-0-0" /> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="1885.6029" + y="94.285194" + id="text1185-9-7-1-1-8-1-0-4-2-8-2"><tspan + sodipodi:role="line" + x="1885.6029" + y="94.285194" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan31345-4-0-4-81-5-2-8">Oct.</tspan><tspan + sodipodi:role="line" + x="1885.6029" + y="112.28188" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan49906-7-3-8-2-8-9-9">2028</tspan></text> + <g + id="g1267-4-5-2-7" + transform="translate(563.45518,-155.9782)"> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1200,220.00002 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-1-3" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1220,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1240,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1260,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1280,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1299.7216,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3" + inkscape:transform-center-x="-14.78205" + inkscape:transform-center-y="-0.085282837" /> + </g> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1883.4551,64.021829 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1" /> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="2005.5908" + y="94.339828" + id="text1185-9-7-1-1-8-1-0-4-2-8-2-4"><tspan + sodipodi:role="line" + x="2005.5908" + y="94.339828" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan31345-4-0-4-81-5-2-8-7">Apr.</tspan><tspan + sodipodi:role="line" + x="2005.5908" + y="112.33651" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan49906-7-3-8-2-8-9-9-8">2029</tspan></text> + <g + id="g1267-4-5-2-7-4" + transform="translate(683.44312,-155.92356)"> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1200,220.00002 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-1-3-5" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1220,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1240,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1260,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1280,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1299.7216,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0" + inkscape:transform-center-x="-14.78205" + inkscape:transform-center-y="-0.085282837" /> + </g> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 2003.443,64.076464 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6" /> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="2125.6079" + y="94.692207" + id="text1185-9-7-1-1-8-1-0-4-2-8-2-4-2"><tspan + sodipodi:role="line" + x="2125.6079" + y="94.692207" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan31345-4-0-4-81-5-2-8-7-0">Oct.</tspan><tspan + sodipodi:role="line" + x="2125.6079" + y="112.68889" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan49906-7-3-8-2-8-9-9-8-6">2029</tspan></text> + <g + id="g1267-4-5-2-7-4-1" + transform="translate(803.46019,-155.57118)"> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1200,220.00002 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1220,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1240,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1260,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1280,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1299.7216,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5" + inkscape:transform-center-x="-14.78205" + inkscape:transform-center-y="-0.085282837" /> + </g> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 2123.4601,64.428843 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-6" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 2123.3825,64.223284 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-3" /> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="2245.5474" + y="94.839027" + id="text1185-9-7-1-1-8-1-0-4-2-8-2-4-2-7"><tspan + sodipodi:role="line" + x="2245.5474" + y="94.839027" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan31345-4-0-4-81-5-2-8-7-0-4">Apr.</tspan><tspan + sodipodi:role="line" + x="2245.5474" + y="112.83571" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none" + id="tspan49906-7-3-8-2-8-9-9-8-6-5">2030</tspan></text> + <g + id="g1267-4-5-2-7-4-1-2" + transform="translate(923.39972,-155.42436)"> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1200,220.00002 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5-5" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1220,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5-4" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1240,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4-7" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1260,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7-4" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1280,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6-4" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1299.7216,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5-3" + inkscape:transform-center-x="-14.78205" + inkscape:transform-center-y="-0.085282837" /> + </g> + <g + id="g1267-4-5-2-7-4-1-2-0" + transform="translate(1043.3579,-155.33829)"> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1200,220.00002 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5-5-6" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1220,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5-4-8" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1240,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4-7-9" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1260,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7-4-2" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1280,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6-4-6" + inkscape:transform-center-x="14.782001" + inkscape:transform-center-y="-0.085282837" /> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 1299.7216,219.99997 v 5.00004 0" + id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5-3-6" + inkscape:transform-center-x="-14.78205" + inkscape:transform-center-y="-0.085282837" /> + </g> + <path + style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1" + d="m 2243.3996,64.575663 v 9.99999 0" + id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-6-0" /> + <rect + style="opacity:0.75;fill:#241f31;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.751473;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-36" + width="38.418175" + height="23.151052" + x="2047.6135" + y="-45.172161" + ry="1.1605872" /> + <rect + style="opacity:1;fill:#ffffff;fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:1.98878;stroke-dasharray:none;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-36-7" + width="186.42949" + height="110.40546" + x="2036.5294" + y="-77.753708" + ry="5.5347452" /> + <rect + style="opacity:0.75;fill:#241f31;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-6" + width="21.197233" + height="19.28739" + x="2053.8164" + y="-45.883858" + ry="0.96689767" /> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="2132.4917" + y="-57.687912" + id="text1185-3-55-4-0-0-0-1-1-6-4-3-5"><tspan + sodipodi:role="line" + x="2132.4917" + y="-57.687912" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none" + id="tspan10317-2-9-1-4-6-5-6-6-5">Legend</tspan></text> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="2098.0986" + y="-31.899874" + id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2"><tspan + sodipodi:role="line" + x="2098.0986" + y="-31.899874" + style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none" + id="tspan10317-2-9-1-4-6-5-6-6-5-9">Future</tspan></text> + <rect + style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-6-1" + width="21.197233" + height="19.28739" + x="2053.8672" + y="-21.756365" + ry="0.96689767" /> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="2128.7158" + y="-7.6722765" + id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2-2"><tspan + sodipodi:role="line" + x="2128.7158" + y="-7.6722765" + style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none" + id="tspan10317-2-9-1-4-6-5-6-6-5-9-7">Current (Apr. 25)</tspan></text> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="2109.363" + y="16.03771" + id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2-2-9"><tspan + sodipodi:role="line" + x="2109.363" + y="16.03771" + style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none" + id="tspan10317-2-9-1-4-6-5-6-6-5-9-7-3">End-of-life</tspan></text> + <rect + style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-3-9-2-6-1-0" + width="21.197233" + height="19.28739" + x="2054.0239" + y="1.9667883" + ry="0.96689767" /> + <rect + style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:1.85786;stroke-opacity:1" + id="rect917-0-0-4-4-9-4-5-6" + width="120.80748" + height="45.000004" + x="703.10553" + y="-165.72791" + ry="2.2558987" /> + <text + xml:space="preserve" + style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1" + x="752.16809" + y="-147.18787" + id="text1185-3-55-4-0-0-0-1-2"><tspan + sodipodi:role="line" + x="752.16809" + y="-147.18787" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" + id="tspan1">Nanbield</tspan><tspan + sodipodi:role="line" + x="752.16809" + y="-129.19119" + style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none" + id="tspan2">4.3</tspan></text> </g> <style type="text/css" diff --git a/poky/documentation/ref-manual/system-requirements.rst b/poky/documentation/ref-manual/system-requirements.rst index 0fc92550a5..ad7c70727a 100644 --- a/poky/documentation/ref-manual/system-requirements.rst +++ b/poky/documentation/ref-manual/system-requirements.rst @@ -58,32 +58,35 @@ Supported Linux Distributions Currently, the &DISTRO; release ("&DISTRO_NAME;") of the Yocto Project is supported on the following distributions: -- Ubuntu 20.04 (LTS) - -- Ubuntu 22.04 (LTS) - -- Fedora 38 - -- CentOS Stream 8 - -- Debian GNU/Linux 11 (Bullseye) - -- Debian GNU/Linux 12 (Bookworm) - -- OpenSUSE Leap 15.4 +.. + Can be generated with yocto-autobuilder-helper's scripts/yocto-supported-distros: + yocto-supported-distros --release scarthgap --config yocto-autobuilder2/config.py --output-format docs --poky-distros - AlmaLinux 8 - - AlmaLinux 9 - -- Rocky 9 +- Debian 11 +- Debian 12 +- Fedora 39 +- Fedora 40 +- Fedora 41 +- Rocky Linux 8 +- Rocky Linux 9 +- Ubuntu 20.04 (LTS) +- Ubuntu 22.04 (LTS) +- Ubuntu 24.04 (LTS) +- Ubuntu 24.10 The following distribution versions are still tested, even though the organizations publishing them no longer make updates publicly available: -- Ubuntu 18.04 (LTS) +.. + This list contains EOL distros that are still tested on the Autobuilder + (meaning there are running workers). + See https://endoflife.date for information of EOL releases. -- Ubuntu 23.04 +- Fedora 39 +- Fedora 40 +- Ubuntu 20.04 (LTS) Note that the Yocto Project doesn't have access to private updates that some of these versions may have. Therefore, our testing has @@ -92,7 +95,15 @@ limited value if you have access to such updates. Finally, here are the distribution versions which were previously tested on former revisions of "&DISTRO_NAME;", but no longer are: -*This list is currently empty* +.. + Can be generated with yocto-autobuilder-helper's scripts/yocto-supported-distros. + yocto-supported-distros --release scarthgap --config yocto-autobuilder2/config.py --output-format docs --old-distros + +- CentOS Stream 8 +- Fedora 38 +- OpenSUSE Leap 15.4 +- Ubuntu 18.04 +- Ubuntu 23.04 .. note:: @@ -150,10 +161,27 @@ Ubuntu and Debian Here are the packages needed to build an image on a headless system with a supported Ubuntu or Debian Linux distribution:: - $ sudo apt install &UBUNTU_HOST_PACKAGES_ESSENTIAL; + $ sudo apt install &UBUNTU_DEBIAN_HOST_PACKAGES_ESSENTIAL; + +You also need to ensure you have the ``en_US.UTF-8`` locale enabled:: + + $ locale --all-locales | grep en_US.utf8 + +If this is not the case, you can reconfigure the ``locales`` package to add it +(requires an interactive shell):: + + $ sudo dpkg-reconfigure locales .. note:: + - If you are not in an interactive shell, ``dpkg-reconfigure`` will + not work as expected. To add the locale you will need to edit + ``/etc/locale.gen`` file to add/uncomment the ``en_US.UTF-8`` locale. + A naive way to do this as root is:: + + $ echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen + $ locale-gen + - If your build system has the ``oss4-dev`` package installed, you might experience QEMU build failures due to the package installing its own custom ``/usr/include/linux/soundcard.h`` on the Debian @@ -164,8 +192,12 @@ with a supported Ubuntu or Debian Linux distribution:: Here are the packages needed to build Project documentation manuals:: - $ sudo apt install git make inkscape texlive-latex-extra - $ sudo apt install sphinx python3-saneyaml python3-sphinx-rtd-theme + $ sudo apt install &UBUNTU_DEBIAN_HOST_PACKAGES_DOC; + +In addition to the previous packages, here are the packages needed to build the +documentation in PDF format:: + + $ sudo apt install &UBUNTU_DEBIAN_HOST_PACKAGES_DOC_PDF; Fedora Packages --------------- @@ -177,8 +209,13 @@ with a supported Fedora Linux distribution:: Here are the packages needed to build Project documentation manuals:: - $ sudo dnf install git make python3-pip which inkscape texlive-fncychap - &PIP3_HOST_PACKAGES_DOC; + $ sudo dnf install &FEDORA_HOST_PACKAGES_DOC; + $ sudo pip3 install &PIP3_HOST_PACKAGES_DOC; + +In addition to the previous packages, here are the packages needed to build the +documentation in PDF format:: + + $ sudo dnf install &FEDORA_HOST_PACKAGES_DOC_PDF; openSUSE Packages ----------------- @@ -187,11 +224,17 @@ Here are the packages needed to build an image on a headless system with a supported openSUSE distribution:: $ sudo zypper install &OPENSUSE_HOST_PACKAGES_ESSENTIAL; + $ sudo pip3 install &OPENSUSE_PIP3_HOST_PACKAGES_ESSENTIAL; Here are the packages needed to build Project documentation manuals:: - $ sudo zypper install git make python3-pip which inkscape texlive-fncychap - &PIP3_HOST_PACKAGES_DOC; + $ sudo zypper install &OPENSUSE_HOST_PACKAGES_DOC; + $ sudo pip3 install &PIP3_HOST_PACKAGES_DOC; + +In addition to the previous packages, here are the packages needed to build the +documentation in PDF format:: + + $ sudo zypper install &OPENSUSE_HOST_PACKAGES_DOC_PDF; AlmaLinux Packages @@ -200,6 +243,10 @@ AlmaLinux Packages Here are the packages needed to build an image on a headless system with a supported AlmaLinux distribution:: + $ sudo dnf install -y epel-release + $ sudo yum install dnf-plugins-core + $ sudo dnf config-manager --set-enabled crb + $ sudo dnf makecache $ sudo dnf install &ALMALINUX_HOST_PACKAGES_ESSENTIAL; .. note:: @@ -217,8 +264,20 @@ with a supported AlmaLinux distribution:: Here are the packages needed to build Project documentation manuals:: - $ sudo dnf install git make python3-pip which inkscape texlive-fncychap - &PIP3_HOST_PACKAGES_DOC; + $ sudo dnf install &ALMALINUX_HOST_PACKAGES_DOC; + $ sudo pip3 install &PIP3_HOST_PACKAGES_DOC; + +In addition to the previous packages, here are the packages needed to build the +documentation in PDF format:: + + $ sudo dnf install &ALMALINUX_HOST_PACKAGES_DOC_PDF; + +.. warning:: + + Unlike Fedora or OpenSUSE, AlmaLinux does not provide the packages + ``texlive-collection-fontsextra``, ``texlive-collection-lang*`` and + ``texlive-collection-latexextra``, so you may run into issues. These may be + installed using `tlmgr <https://tug.org/texlive/tlmgr.html>`_. .. _system-requirements-buildtools: @@ -319,7 +378,7 @@ If you would prefer not to use the ``install-buildtools`` script, you can instea download and run a pre-built :term:`buildtools` installer yourself with the following steps: -#. Go to :yocto_dl:`/releases/yocto/yocto-&DISTRO;/buildtools/`, locate and +#. Go to :yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/buildtools/`, locate and download the ``.sh`` file corresponding to your host architecture and to :term:`buildtools`, :term:`buildtools-extended` or :term:`buildtools-make`. diff --git a/poky/documentation/ref-manual/tasks.rst b/poky/documentation/ref-manual/tasks.rst index 2e4b23408d..cf6b9876ca 100644 --- a/poky/documentation/ref-manual/tasks.rst +++ b/poky/documentation/ref-manual/tasks.rst @@ -616,8 +616,8 @@ information on how the root filesystem is created. Boots an image and performs runtime tests within the image. For information on automatically testing images, see the -":ref:`dev-manual/runtime-testing:performing automated runtime testing`" -section in the Yocto Project Development Tasks Manual. +":ref:`test-manual/runtime-testing:performing automated runtime testing`" +section in the Yocto Project Test Environment Manual. .. _ref-tasks-testimage_auto: @@ -629,8 +629,8 @@ after it has been built. This task is enabled when you set :term:`TESTIMAGE_AUTO` equal to "1". For information on automatically testing images, see the -":ref:`dev-manual/runtime-testing:performing automated runtime testing`" -section in the Yocto Project Development Tasks Manual. +":ref:`test-manual/runtime-testing:performing automated runtime testing`" +section in the Yocto Project Test Environment Manual. Kernel-Related Tasks ==================== @@ -727,7 +727,7 @@ tool, which you then use to modify the kernel configuration. $ bitbake linux-yocto -c menuconfig -See the ":ref:`kernel-dev/common:using \`\`menuconfig\`\``" +See the ":ref:`kernel-dev/common:using ``menuconfig```" section in the Yocto Project Linux Kernel Development Manual for more information on this configuration tool. @@ -751,7 +751,7 @@ which can then be applied by subsequent tasks such as Runs ``make menuconfig`` for the kernel. For information on ``menuconfig``, see the -":ref:`kernel-dev/common:using \`\`menuconfig\`\``" +":ref:`kernel-dev/common:using ``menuconfig```" section in the Yocto Project Linux Kernel Development Manual. .. _ref-tasks-savedefconfig: diff --git a/poky/documentation/ref-manual/terms.rst b/poky/documentation/ref-manual/terms.rst index b18c4183b6..9f61061415 100644 --- a/poky/documentation/ref-manual/terms.rst +++ b/poky/documentation/ref-manual/terms.rst @@ -63,7 +63,7 @@ universal, the list includes them just in case: This term refers to the area used by the OpenEmbedded build system for builds. The area is created when you ``source`` the setup environment script that is found in the Source Directory - (i.e. :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``). The + (i.e. :ref:`ref-manual/structure:``oe-init-build-env```). The :term:`TOPDIR` variable points to the :term:`Build Directory`. You have a lot of flexibility when creating the :term:`Build Directory`. @@ -452,7 +452,7 @@ universal, the list includes them just in case: the Source Directory, if you do, the top-level directory name of the Source Directory is derived from the Yocto Project release tarball. For example, downloading and unpacking poky tarballs from - :yocto_dl:`/releases/yocto/&DISTRO_REL_TAG;/` + :yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/` results in a Source Directory whose root folder is named poky. diff --git a/poky/documentation/ref-manual/variables.rst b/poky/documentation/ref-manual/variables.rst index 3f37f42f21..a9b9142636 100644 --- a/poky/documentation/ref-manual/variables.rst +++ b/poky/documentation/ref-manual/variables.rst @@ -143,7 +143,7 @@ system and gives an overview of their function and contents. information on how this variable is used. :term:`AR` - The minimal command and arguments used to run ``ar``. + The minimal command and arguments used to run :manpage:`ar <ar(1)>`. :term:`ARCHIVER_MODE` When used with the :ref:`ref-classes-archiver` class, @@ -165,7 +165,8 @@ system and gives an overview of their function and contents. ``meta/classes/archiver.bbclass`` file in the :term:`Source Directory`. :term:`AS` - Minimal command and arguments needed to run the assembler. + Minimal command and arguments needed to run the :manpage:`assembler + <as(1)>`. :term:`ASSUME_PROVIDED` Lists recipe names (:term:`PN` values) BitBake does not @@ -209,12 +210,11 @@ system and gives an overview of their function and contents. SRCREV = "${AUTOREV}" If you use the previous statement to retrieve the latest version of - software, you need to be sure :term:`PV` contains - ``${``\ :term:`SRCPV`\ ``}``. For example, suppose you have a kernel - recipe that inherits the :ref:`ref-classes-kernel` class and you - use the previous statement. In this example, ``${SRCPV}`` does not - automatically get into :term:`PV`. Consequently, you need to change - :term:`PV` in your recipe so that it does contain ``${SRCPV}``. + software, you need to make sure :term:`PV` contains the ``+`` sign so + :term:`bitbake` includes source control information to :term:`PKGV` when + packaging the recipe. For example:: + + PV = "6.10.y+git" For more information see the ":ref:`dev-manual/packages:automatically incrementing a package version number`" @@ -225,6 +225,12 @@ system and gives an overview of their function and contents. must set this variable in your recipe. The :ref:`ref-classes-syslinux` class checks this variable. + :term:`AUTOTOOLS_SCRIPT_PATH` + When using the :ref:`ref-classes-autotools` class, the + :term:`AUTOTOOLS_SCRIPT_PATH` variable stores the location of the + different scripts used by the Autotools build system. The default + value for this variable is :term:`S`. + :term:`AVAILTUNES` The list of defined CPU and Application Binary Interface (ABI) tunings (i.e. "tunes") available for use by the OpenEmbedded build @@ -972,55 +978,165 @@ system and gives an overview of their function and contents. variable is a useful pointer in case a bug in the software being built needs to be manually reported. + :term:`BUILD_AR` + Specifies the architecture-specific :manpage:`archiver <ar(1)>` for the + build host, and its default definition is derived in part from + :term:`BUILD_PREFIX`:: + + BUILD_AR = "${BUILD_PREFIX}ar" + + When building a :ref:`ref-classes-native` recipe, :term:`AR` is set to the + value of this variable by default. + + The :term:`BUILD_AR` variable should not be set manually, and is rarely + used in recipes as :term:`AR` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the :manpage:`archiver <ar(1)>` from the build + host at some point during the build. + :term:`BUILD_ARCH` Specifies the architecture of the build host (e.g. ``i686``). The OpenEmbedded build system sets the value of :term:`BUILD_ARCH` from the machine name reported by the ``uname`` command. + :term:`BUILD_AS` + Specifies the architecture-specific :manpage:`assembler <as(1)>` for the + build host, and its default definition is derived in part from + :term:`BUILD_PREFIX`:: + + BUILD_AS = "${BUILD_PREFIX}as ${BUILD_AS_ARCH}" + + When building a :ref:`ref-classes-native` recipe, :term:`AS` is set to the + value of this variable by default. + + The :term:`BUILD_AS` variable should not be set manually, and is rarely + used in recipes as :term:`AS` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the :manpage:`assembler <as(1)>` from the build + host at some point during the build. + :term:`BUILD_AS_ARCH` Specifies the architecture-specific assembler flags for the build host. By default, the value of :term:`BUILD_AS_ARCH` is empty. + :term:`BUILD_CC` + Specifies the architecture-specific C compiler for the build host, + and its default definition is derived in part from :term:`BUILD_PREFIX` + and :term:`BUILD_CC_ARCH`:: + + BUILD_CC = "${CCACHE}${BUILD_PREFIX}gcc ${BUILD_CC_ARCH}" + + When building a :ref:`ref-classes-native` recipe, :term:`CC` is set to the + value of this variable by default. + + The :term:`BUILD_CC` variable should not be set manually, and is rarely + used in recipes as :term:`CC` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the compiler from the build host at some point + during the build. + :term:`BUILD_CC_ARCH` Specifies the architecture-specific C compiler flags for the build host. By default, the value of :term:`BUILD_CC_ARCH` is empty. :term:`BUILD_CCLD` - Specifies the linker command to be used for the build host when the C - compiler is being used as the linker. By default, :term:`BUILD_CCLD` - points to GCC and passes as arguments the value of - :term:`BUILD_CC_ARCH`, assuming - :term:`BUILD_CC_ARCH` is set. + Specifies the :manpage:`linker <ld(1)>` command to be used for the build + host when the C compiler is being used as the linker, and its default + definition is derived in part from :term:`BUILD_PREFIX` and + :term:`BUILD_CC_ARCH`:: + + BUILD_CCLD = "${BUILD_PREFIX}gcc ${BUILD_CC_ARCH}" + + When building a :ref:`ref-classes-native` recipe, :term:`CCLD` is set to + the value of this variable by default. + + The :term:`BUILD_CCLD` variable should not be set manually, and is rarely + used in recipes as :term:`CCLD` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the :manpage:`linker <ld(1)>` from the build host + at some point during the build. :term:`BUILD_CFLAGS` Specifies the flags to pass to the C compiler when building for the - build host. When building in the ``-native`` context, + build host. When building a :ref:`ref-classes-native` recipe, :term:`CFLAGS` is set to the value of this variable by default. + :term:`BUILD_CPP` + Specifies the C preprocessor command (to both the C and the C++ compilers) + when building for the build host, and its default definition is derived in + part from :term:`BUILD_PREFIX` and :term:`BUILD_CC_ARCH`:: + + BUILD_CPP = "${BUILD_PREFIX}gcc ${BUILD_CC_ARCH} -E" + + When building a :ref:`ref-classes-native` recipe, :term:`CPP` is set to + the value of this variable by default. + + The :term:`BUILD_CPP` variable should not be set manually, and is rarely + used in recipes as :term:`CPP` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the preprocessor from the build host at some + point during the build. + :term:`BUILD_CPPFLAGS` Specifies the flags to pass to the C preprocessor (i.e. to both the C and the C++ compilers) when building for the build host. When building in the ``-native`` context, :term:`CPPFLAGS` is set to the value of this variable by default. + :term:`BUILD_CXX` + Specifies the architecture-specific C++ compiler for the build host, + and its default definition is derived in part from :term:`BUILD_PREFIX` + and :term:`BUILD_CC_ARCH`:: + + BUILD_CXX = "${CCACHE}${BUILD_PREFIX}g++ ${BUILD_CC_ARCH}" + + When building a :ref:`ref-classes-native` recipe, :term:`CXX` is set to + the value of this variable by default. + + The :term:`BUILD_CXX` variable should not be set manually, and is rarely + used in recipes as :term:`CXX` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the C++ compiler from the build host at some + point during the build. + :term:`BUILD_CXXFLAGS` Specifies the flags to pass to the C++ compiler when building for the - build host. When building in the ``-native`` context, + build host. When building a :ref:`ref-classes-native` recipe, :term:`CXXFLAGS` is set to the value of this variable by default. :term:`BUILD_FC` - Specifies the Fortran compiler command for the build host. By - default, :term:`BUILD_FC` points to Gfortran and passes as arguments the - value of :term:`BUILD_CC_ARCH`, assuming - :term:`BUILD_CC_ARCH` is set. + Specifies the Fortran compiler command for the build host, and its default + definition is derived in part from :term:`BUILD_PREFIX` and + :term:`BUILD_CC_ARCH`:: + + BUILD_FC = "${BUILD_PREFIX}gfortran ${BUILD_CC_ARCH}" + + When building a :ref:`ref-classes-native` recipe, :term:`FC` is set to the + value of this variable by default. + + The :term:`BUILD_FC` variable should not be set manually, and is rarely + used in recipes as :term:`FC` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the Fortran compiler from the build host at some + point during the build. :term:`BUILD_LD` - Specifies the linker command for the build host. By default, - :term:`BUILD_LD` points to the GNU linker (ld) and passes as arguments - the value of :term:`BUILD_LD_ARCH`, assuming - :term:`BUILD_LD_ARCH` is set. + Specifies the linker command for the build host, and its default + definition is derived in part from :term:`BUILD_PREFIX` and + :term:`BUILD_LD_ARCH`:: + + BUILD_LD = "${BUILD_PREFIX}ld ${BUILD_LD_ARCH}" + + When building a :ref:`ref-classes-native` recipe, :term:`LD` is set to the + value of this variable by default. + + The :term:`BUILD_LD` variable should not be set manually, and is rarely + used in recipes as :term:`LD` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the linker from the build host at some point + during the build. :term:`BUILD_LD_ARCH` Specifies architecture-specific linker flags for the build host. By @@ -1028,10 +1144,58 @@ system and gives an overview of their function and contents. :term:`BUILD_LDFLAGS` Specifies the flags to pass to the linker when building for the build - host. When building in the ``-native`` context, + host. When building a :ref:`ref-classes-native` recipe, :term:`LDFLAGS` is set to the value of this variable by default. + :term:`BUILD_NM` + Specifies the architecture-specific utility to list symbols from object + files for the build host, and its default definition is derived in part + from :term:`BUILD_PREFIX`:: + + BUILD_NM = "${BUILD_PREFIX}nm" + + When building a :ref:`ref-classes-native` recipe, :term:`NM` is set to the + value of this variable by default. + + The :term:`BUILD_NM` variable should not be set manually, and is rarely + used in recipes as :term:`NM` contains the appropriate value depending on + the context (native or target recipes). Exception be made for target + recipes that need to use the utility from the build host at some point + during the build. + + :term:`BUILD_OBJCOPY` + Specifies the architecture-specific utility to copy object files for the + build host, and its default definition is derived in part from + :term:`BUILD_PREFIX`:: + + BUILD_OBJCOPY = "${BUILD_PREFIX}objcopy" + + When building a :ref:`ref-classes-native` recipe, :term:`OBJCOPY` is set + to the value of this variable by default. + + The :term:`BUILD_OBJCOPY` variable should not be set manually, and is + rarely used in recipes as :term:`OBJCOPY` contains the appropriate value + depending on the context (native or target recipes). Exception be made for + target recipes that need to use the utility from the build host at some + point during the build. + + :term:`BUILD_OBJDUMP` + Specifies the architecture-specific utility to display object files + information for the build host, and its default definition is derived in + part from :term:`BUILD_PREFIX`:: + + BUILD_OBJDUMP = "${BUILD_PREFIX}objdump" + + When building a :ref:`ref-classes-native` recipe, :term:`OBJDUMP` is set + to the value of this variable by default. + + The :term:`BUILD_OBJDUMP` variable should not be set manually, and is + rarely used in recipes as :term:`OBJDUMP` contains the appropriate value + depending on the context (native or target recipes). Exception be made for + target recipes that need to use the utility from the build host at some + point during the build. + :term:`BUILD_OPTIMIZATION` Specifies the optimization flags passed to the C compiler when building for the build host or the SDK. The flags are passed through @@ -1052,11 +1216,53 @@ system and gives an overview of their function and contents. build system uses the :term:`BUILD_PREFIX` value to set the :term:`TARGET_PREFIX` when building for :ref:`ref-classes-native` recipes. + :term:`BUILD_RANLIB` + Specifies the architecture-specific utility to generate indexes for + archives for the build host, and its default definition is derived in part + from :term:`BUILD_PREFIX`:: + + BUILD_RANLIB = "${BUILD_PREFIX}ranlib -D" + + When building a :ref:`ref-classes-native` recipe, :term:`RANLIB` is set to + the value of this variable by default. + + The :term:`BUILD_RANLIB` variable should not be set manually, and is + rarely used in recipes as :term:`RANLIB` contains the appropriate value + depending on the context (native or target recipes). Exception be made for + target recipes that need to use the utility from the build host at some + point during the build. + + :term:`BUILD_READELF` + Specifies the architecture-specific utility to display information about + ELF files for the build host, and its default definition is derived in + part from :term:`BUILD_PREFIX`:: + + BUILD_READELF = "${BUILD_PREFIX}readelf" + + When building a :ref:`ref-classes-native` recipe, :term:`READELF` is set + to the value of this variable by default. + + The :term:`BUILD_READELF` variable should not be set manually, and is + rarely used in recipes as :term:`READELF` contains the appropriate value + depending on the context (native or target recipes). Exception be made for + target recipes that need to use the utility from the build host at some + point during the build. + :term:`BUILD_STRIP` - Specifies the command to be used to strip debugging symbols from - binaries produced for the build host. By default, :term:`BUILD_STRIP` - points to - ``${``\ :term:`BUILD_PREFIX`\ ``}strip``. + Specifies the command to be used to strip debugging symbols from binaries + produced for the build host, and its default definition is derived in part + from :term:`BUILD_PREFIX`:: + + BUILD_STRIP = "${BUILD_PREFIX}strip" + + When building a :ref:`ref-classes-native` recipe, :term:`STRIP` is set to + the value of this variable by default. + + The :term:`BUILD_STRIP` variable should not be set manually, and is + rarely used in recipes as :term:`STRIP` contains the appropriate value + depending on the context (native or target recipes). Exception be made for + target recipes that need to use the utility from the build host at some + point during the build. :term:`BUILD_SYS` Specifies the system, including the architecture and the operating @@ -1252,6 +1458,15 @@ system and gives an overview of their function and contents. :term:`CC` The minimal command and arguments used to run the C compiler. + :term:`CCACHE_DISABLE` + When inheriting the :ref:`ref-classes-ccache` class, the + :term:`CCACHE_DISABLE` variable can be set to "1" in a recipe to disable + `Ccache` support. This is useful when the recipe is known to not support it. + + :term:`CCLD` + The minimal command and arguments used to run the linker when the C + compiler is being used as the linker. + :term:`CFLAGS` Specifies the flags to pass to the C compiler. This variable is exported to an environment variable and thus made visible to the @@ -1495,6 +1710,17 @@ system and gives an overview of their function and contents. :term:`CONFIGURE_FLAGS` The minimal arguments for GNU configure. + :term:`CONFIGURE_SCRIPT` + When using the :ref:`ref-classes-autotools` class, the + :term:`CONFIGURE_SCRIPT` variable stores the location of the ``configure`` + script for the Autotools build system. The default definition for this + variable is:: + + CONFIGURE_SCRIPT ?= "${AUTOTOOLS_SCRIPT_PATH}/configure" + + Where :term:`AUTOTOOLS_SCRIPT_PATH` is the location of the of the + Autotools build system scripts, which defaults to :term:`S`. + :term:`CONFLICT_DISTRO_FEATURES` When inheriting the :ref:`ref-classes-features_check` class, this variable identifies distribution features that would be @@ -1678,9 +1904,27 @@ system and gives an overview of their function and contents. variable only in certain contexts (e.g. when building for kernel and kernel module recipes). + :term:`CVE_CHECK_CREATE_MANIFEST` + Specifies whether to create a CVE manifest to place in the deploy + directory. The default is "1". + :term:`CVE_CHECK_IGNORE` This variable is deprecated and should be replaced by :term:`CVE_STATUS`. + :term:`CVE_CHECK_MANIFEST_JSON` + Specifies the path to the CVE manifest in JSON format. See + :term:`CVE_CHECK_CREATE_MANIFEST`. + + :term:`CVE_CHECK_MANIFEST_JSON_SUFFIX` + Allows to modify the JSON manifest suffix. See + :term:`CVE_CHECK_MANIFEST_JSON`. + + :term:`CVE_CHECK_REPORT_PATCHED` + Specifies whether or not the :ref:`ref-classes-cve-check` + class should report patched or ignored CVEs. The default is "1", but you + may wish to set it to "0" if you do not need patched or ignored CVEs in + the logs. + :term:`CVE_CHECK_SHOW_WARNINGS` Specifies whether or not the :ref:`ref-classes-cve-check` class should generate warning messages on the console when unpatched @@ -1960,7 +2204,7 @@ system and gives an overview of their function and contents. resides within the :term:`Build Directory` as ``${TMPDIR}/deploy``. For more information on the structure of the Build Directory, see - ":ref:`ref-manual/structure:the build directory --- \`\`build/\`\``" section. + ":ref:`ref-manual/structure:the build directory --- ``build/```" section. For more detail on the contents of the ``deploy`` directory, see the ":ref:`overview-manual/concepts:images`", ":ref:`overview-manual/concepts:package feeds`", and @@ -2002,7 +2246,7 @@ system and gives an overview of their function and contents. contents of :term:`IMGDEPLOYDIR` by the :ref:`ref-classes-image` class. For more information on the structure of the :term:`Build Directory`, see - ":ref:`ref-manual/structure:the build directory --- \`\`build/\`\``" section. + ":ref:`ref-manual/structure:the build directory --- ``build/```" section. For more detail on the contents of the ``deploy`` directory, see the ":ref:`overview-manual/concepts:images`" and ":ref:`overview-manual/concepts:application development sdk`" sections both in @@ -2501,6 +2745,13 @@ system and gives an overview of their function and contents. external tools. See the :ref:`ref-classes-kernel-yocto` class in ``meta/classes-recipe`` to see how the variable is used. + :term:`EXTERNAL_KERNEL_DEVICETREE` + When inheriting :ref:`ref-classes-kernel-fitimage` and a + :term:`PREFERRED_PROVIDER` for ``virtual/dtb`` set to ``devicetree``, the + variable :term:`EXTERNAL_KERNEL_DEVICETREE` can be used to specify a + directory containing one or more compiled device tree or device tree + overlays to use. + :term:`KERNEL_LOCALVERSION` This variable allows to append a string to the version of the kernel image. This corresponds to the ``CONFIG_LOCALVERSION`` @@ -2744,6 +2995,9 @@ system and gives an overview of their function and contents. :term:`FAKEROOTNOENV` See :term:`bitbake:FAKEROOTNOENV` in the BitBake manual. + :term:`FC` + The minimal command and arguments used to run the Fortran compiler. + :term:`FEATURE_PACKAGES` Defines one or more packages to include in an image when a specific item is included in :term:`IMAGE_FEATURES`. @@ -3021,6 +3275,10 @@ system and gives an overview of their function and contents. This variable is used in the :ref:`ref-classes-kernel-fitimage` class. + :term:`FIT_CONF_PREFIX` + When using the :ref:`ref-classes-kernel-fitimage`, this is the prefix + used for creating FIT configuration nodes. Its default value is "conf-". + :term:`FIT_DESC` Specifies the description string encoded into a FIT image. The default value is set by the :ref:`ref-classes-kernel-fitimage` class as @@ -3323,6 +3581,20 @@ system and gives an overview of their function and contents. - mips - mipsel + :term:`HOST_AS_ARCH` + Specifies architecture-specific assembler flags. + + Default initialization for :term:`HOST_AS_ARCH` varies depending on what + is being built: + + - :term:`TARGET_AS_ARCH` when building for the + target + + - :term:`BUILD_AS_ARCH` when building for the build host (i.e. + ``-native``) + + - :term:`SDK_AS_ARCH` when building for an SDK (i.e. ``nativesdk-``) + :term:`HOST_CC_ARCH` Specifies architecture-specific compiler flags that are passed to the C compiler. @@ -3336,8 +3608,20 @@ system and gives an overview of their function and contents. - :term:`BUILD_CC_ARCH` when building for the build host (i.e. ``-native``) - - ``BUILDSDK_CC_ARCH`` when building for an SDK (i.e. - ``nativesdk-``) + - :term:`SDK_CC_ARCH` when building for an SDK (i.e. ``nativesdk-``) + + :term:`HOST_LD_ARCH` + Specifies architecture-specific linker flags. + + Default initialization for :term:`HOST_LD_ARCH` varies depending on what + is being built: + + - :term:`TARGET_LD_ARCH` when building for the target + + - :term:`BUILD_LD_ARCH` when building for the build host (i.e. + ``-native``) + + - :term:`SDK_LD_ARCH` when building for an SDK (i.e. ``nativesdk-``) :term:`HOST_OS` Specifies the name of the target operating system, which is normally @@ -3800,14 +4084,20 @@ system and gives an overview of their function and contents. added to the image by using the :term:`IMAGE_ROOTFS_EXTRA_SPACE` variable. + When using Wic tool, beware that a second overhead factor is also applied. + This overhead value is defined by the ``--overhead-factor`` option, which + defaults to "1.3" when omitted. See the + :ref:`ref-manual/kickstart:command: part or partition` chapter in + :doc:`/ref-manual/kickstart` for details. + :term:`IMAGE_PKGTYPE` - Defines the package type (i.e. DEB, RPM, IPK, or TAR) used by the + Defines the package type (i.e. DEB, RPM or IPK) used by the OpenEmbedded build system. The variable is defined appropriately by - the :ref:`ref-classes-package_deb`, :ref:`ref-classes-package_rpm`, - or :ref:`ref-classes-package_ipk` class. + one of the :ref:`ref-classes-package_deb`, :ref:`ref-classes-package_rpm`, + or :ref:`ref-classes-package_ipk` classes. The :ref:`ref-classes-populate-sdk-*` and :ref:`ref-classes-image` - classes use the :term:`IMAGE_PKGTYPE` for packaging up images and SDKs. + classes use the :term:`IMAGE_PKGTYPE` for packaging images and SDKs. You should not set the :term:`IMAGE_PKGTYPE` manually. Rather, the variable is set indirectly through the appropriate @@ -3816,12 +4106,6 @@ system and gives an overview of their function and contents. OpenEmbedded build system uses the first package type (e.g. DEB, RPM, or IPK) that appears with the variable - .. note:: - - Files using the ``.tar`` format are never used as a substitute - packaging format for DEB, RPM, and IPK formatted files for your image - or SDK. - :term:`IMAGE_POSTPROCESS_COMMAND` Specifies a list of functions to call once the OpenEmbedded build system creates the final image output files. You can specify @@ -3878,6 +4162,36 @@ system and gives an overview of their function and contents. IMAGE_ROOTFS_EXTRA_SPACE = "41943040" + :term:`IMAGE_ROOTFS_MAXSIZE` + Defines the maximum allowed size of the generated image in kilobytes. + The build will fail if the generated image size exceeds this value. + + The generated image size undergoes several calculation steps before being + compared to :term:`IMAGE_ROOTFS_MAXSIZE`. + In the first step, the size of the directory pointed to by :term:`IMAGE_ROOTFS` + is calculated. + In the second step, the result from the first step is multiplied + by :term:`IMAGE_OVERHEAD_FACTOR`. + In the third step, the result from the second step is compared with + :term:`IMAGE_ROOTFS_SIZE`. The larger value of these is added to + :term:`IMAGE_ROOTFS_EXTRA_SPACE`. + In the fourth step, the result from the third step is checked for + a decimal part. If it has one, it is rounded up to the next integer. + If it does not, it is simply converted into an integer. + In the fifth step, the :term:`IMAGE_ROOTFS_ALIGNMENT` is added to the result + from the fourth step and "1" is subtracted. + In the sixth step, the remainder of the division between the result + from the fifth step and :term:`IMAGE_ROOTFS_ALIGNMENT` is subtracted from the + result of the fifth step. In this way, the result from the fourth step is + rounded up to the nearest multiple of :term:`IMAGE_ROOTFS_ALIGNMENT`. + + Thus, if the :term:`IMAGE_ROOTFS_MAXSIZE` is set, is compared with the result + of the above calculations and is independent of the final image type. + No default value is set for :term:`IMAGE_ROOTFS_MAXSIZE`. + + It's a good idea to set this variable for images that need to fit on a limited + space (e.g. SD card, a fixed-size partition, ...). + :term:`IMAGE_ROOTFS_SIZE` Defines the size in Kbytes for the generated image. The OpenEmbedded build system determines the final size for the generated image using @@ -4059,6 +4373,23 @@ system and gives an overview of their function and contents. Set the variable to "1" to prevent the default dependencies from being added. + :term:`INHIBIT_DEFAULT_RUST_DEPS` + Prevents the :ref:`ref-classes-rust` class from automatically adding + its default build-time dependencies. + + When a recipe inherits the :ref:`ref-classes-rust` class, several + tools such as ``rust-native`` and ``${RUSTLIB_DEP}`` (only added when cross-compiling) are added + to :term:`DEPENDS` to support the ``rust`` build process. + + To prevent the build system from adding these dependencies automatically, + set the :term:`INHIBIT_DEFAULT_RUST_DEPS` variable as follows:: + + INHIBIT_DEFAULT_RUST_DEPS = "1" + + By default, the value of :term:`INHIBIT_DEFAULT_RUST_DEPS` is empty. Setting + it to "0" does not disable inhibition. Only the empty string will disable + inhibition. + :term:`INHIBIT_PACKAGE_DEBUG_SPLIT` Prevents the OpenEmbedded build system from splitting out debug information during packaging. By default, the build system splits out @@ -4105,6 +4436,25 @@ system and gives an overview of their function and contents. even if the toolchain's binaries are strippable, there are other files needed for the build that are not strippable. + :term:`INHIBIT_UPDATERCD_BBCLASS` + Prevents the :ref:`ref-classes-update-rc.d` class from automatically + installing and registering SysV init scripts for packages. + + When a recipe inherits the :ref:`ref-classes-update-rc.d` class, init + scripts are typically installed and registered for the packages listed in + :term:`INITSCRIPT_PACKAGES`. This ensures that the relevant + services are started and stopped at the appropriate runlevels using the + traditional SysV init system. + + To prevent the build system from adding these scripts and configurations + automatically, set the :term:`INHIBIT_UPDATERCD_BBCLASS` variable as follows:: + + INHIBIT_UPDATERCD_BBCLASS = "1" + + By default, the value of :term:`INHIBIT_UPDATERCD_BBCLASS` is empty. Setting + it to "0" does not disable inhibition. Only the empty string will disable + inhibition. + :term:`INIT_MANAGER` Specifies the system init manager to use. Available options are: @@ -4271,6 +4621,20 @@ system and gives an overview of their function and contents. See the :term:`MACHINE` variable for additional information. + :term:`INITRAMFS_MAXSIZE` + Defines the maximum allowed size of the :term:`Initramfs` image in Kbytes. + The build will fail if the :term:`Initramfs` image size exceeds this value. + + The :term:`Initramfs` image size undergoes several calculation steps before + being compared to :term:`INITRAMFS_MAXSIZE`. + These steps are the same as those used for :term:`IMAGE_ROOTFS_MAXSIZE` + and are described in detail in that entry. + + Thus, :term:`INITRAMFS_MAXSIZE` is compared with the result of the calculations + and is independent of the final image type (e.g. compressed). + A default value for :term:`INITRAMFS_MAXSIZE` is set in + :oe_git:`meta/conf/bitbake.conf </openembedded-core/tree/meta/conf/bitbake.conf>`. + :term:`INITRAMFS_MULTICONFIG` Defines the multiconfig to create a multiconfig dependency to be used by the :ref:`ref-classes-kernel` class. @@ -4336,8 +4700,7 @@ system and gives an overview of their function and contents. The value in :term:`INITSCRIPT_PARAMS` is passed through to the ``update-rc.d`` command. For more information on valid parameters, - please see the ``update-rc.d`` manual page at - https://manpages.debian.org/buster/init-system-helpers/update-rc.d.8.en.html + please see the manual page: :manpage:`update-rc.d <update-rc.d(8)>`. :term:`INSANE_SKIP` Specifies the QA checks to skip for a specific package within a @@ -4418,8 +4781,7 @@ system and gives an overview of their function and contents. would place patch files and configuration fragment files (i.e. "out-of-tree"). However, if you want to use a ``defconfig`` file that is part of the kernel tree (i.e. "in-tree"), you can use the - :term:`KBUILD_DEFCONFIG` variable and append the - :term:`KMACHINE` variable to point to the + :term:`KBUILD_DEFCONFIG` variable to point to the ``defconfig`` file. To use the variable, set it in the append file for your kernel recipe @@ -4454,15 +4816,8 @@ system and gives an overview of their function and contents. options not explicitly specified will be disabled in the kernel config. - In case :term:`KCONFIG_MODE` is not set the behaviour will depend on where - the ``defconfig`` file is coming from. An "in-tree" ``defconfig`` file - will be handled in ``alldefconfig`` mode, a ``defconfig`` file placed - in ``${WORKDIR}`` through a meta-layer will be handled in - ``allnoconfig`` mode. - - An "in-tree" ``defconfig`` file can be selected via the - :term:`KBUILD_DEFCONFIG` variable. :term:`KCONFIG_MODE` does not need to - be explicitly set. + In case :term:`KCONFIG_MODE` is not set the ``defconfig`` file + will be handled in ``allnoconfig`` mode. A ``defconfig`` file compatible with ``allnoconfig`` mode can be generated by copying the ``.config`` file from a working Linux kernel @@ -4764,6 +5119,27 @@ system and gives an overview of their function and contents. the :term:`KERNEL_PATH` variable. Both variables are common variables used by external Makefiles to point to the kernel source directory. + :term:`KERNEL_SPLIT_MODULES` + When inheriting the :ref:`ref-classes-kernel-module-split` class, this + variable controls whether kernel modules are split into separate packages + or bundled into a single package. + + For some use cases, a monolithic kernel module package + :term:`KERNEL_PACKAGE_NAME` that contains all modules built from the + kernel sources may be preferred to speed up the installation. + + By default, this variable is set to ``1``, resulting in one package per + module. Setting it to any other value will generate a single monolithic + package containing all kernel modules. + + .. note:: + + If :term:`KERNEL_SPLIT_MODULES` is set to 0, it is still possible to + install all kernel modules at once by adding ``kernel-modules`` (assuming + :term:`KERNEL_PACKAGE_NAME` is ``kernel-modules``) to :term:`IMAGE_INSTALL`. + The way it works is that a placeholder "kernel-modules" package will be + created and will depend on every other individual kernel module packages. + :term:`KERNEL_SRC` The location of the kernel sources. This variable is set to the value of the :term:`STAGING_KERNEL_DIR` within the :ref:`ref-classes-module` @@ -4853,7 +5229,7 @@ system and gives an overview of their function and contents. information on how this variable is used. :term:`LAYERDEPENDS` - Lists the layers, separated by spaces, on which this recipe depends. + Lists the layers, separated by spaces, on which this layer depends. Optionally, you can specify a specific layer version for a dependency by adding it to the end of the layer name. Here is an example:: @@ -4906,7 +5282,8 @@ system and gives an overview of their function and contents. ``LAYERVERSION_mylayer``). :term:`LD` - The minimal command and arguments used to run the linker. + The minimal command and arguments used to run the :manpage:`linker + <ld(1)>`. :term:`LDFLAGS` Specifies the flags to pass to the linker. This variable is exported @@ -5084,7 +5461,7 @@ system and gives an overview of their function and contents. The :term:`LINUX_VERSION` variable is used to define :term:`PV` for the recipe:: - PV = "${LINUX_VERSION}+git${SRCPV}" + PV = "${LINUX_VERSION}+git" :term:`LINUX_VERSION_EXTENSION` A string extension compiled into the version string of the Linux @@ -5512,7 +5889,7 @@ system and gives an overview of their function and contents. variable is set. :term:`NM` - The minimal command and arguments to run ``nm``. + The minimal command and arguments to run :manpage:`nm <nm(1)>`. :term:`NO_GENERIC_LICENSE` Avoids QA errors when you use a non-common, non-CLOSED license in a @@ -5586,10 +5963,10 @@ system and gives an overview of their function and contents. NON_MULTILIB_RECIPES = "grub grub-efi make-mod-scripts ovmf u-boot" :term:`OBJCOPY` - The minimal command and arguments to run ``objcopy``. + The minimal command and arguments to run :manpage:`objcopy <objcopy(1)>`. :term:`OBJDUMP` - The minimal command and arguments to run ``objdump``. + The minimal command and arguments to run :manpage:`objdump <objdump(1)>`. :term:`OE_BINCONFIG_EXTRA_MANGLE` When inheriting the :ref:`ref-classes-binconfig` class, @@ -5614,14 +5991,6 @@ system and gives an overview of their function and contents. OECMAKE_GENERATOR = "Unix Makefiles" - :term:`OE_IMPORTS` - An internal variable used to tell the OpenEmbedded build system what - Python modules to import for every Python function run by the system. - - .. note:: - - Do not set this variable. It is for internal use only. - :term:`OE_INIT_ENV_SCRIPT` The name of the build environment setup script for the purposes of setting up the environment within the extensible SDK. The default @@ -5684,6 +6053,13 @@ system and gives an overview of their function and contents. :term:`OPKG_MAKE_INDEX_EXTRA_PARAMS` Specifies extra parameters for the ``opkg-make-index`` command. + :term:`OPKGBUILDCMD` + The variable :term:`OPKGBUILDCMD` specifies the command used to build opkg + packages when using the :ref:`ref-classes-package_ipk` class. It is + defined in :ref:`ref-classes-package_ipk` as:: + + OPKGBUILDCMD ??= 'opkg-build -Z zstd -a "${ZSTD_DEFAULTS}"' + :term:`OVERLAYFS_ETC_DEVICE` When the :ref:`ref-classes-overlayfs-etc` class is inherited, specifies the device to be mounted for the read/write @@ -6450,7 +6826,7 @@ system and gives an overview of their function and contents. For examples of how this data is used, see the ":ref:`overview-manual/concepts:automatically added runtime dependencies`" section in the Yocto Project Overview and Concepts Manual and the - ":ref:`dev-manual/debugging:viewing package information with \`\`oe-pkgdata-util\`\``" + ":ref:`dev-manual/debugging:viewing package information with ``oe-pkgdata-util```" section in the Yocto Project Development Tasks Manual. For more information on the shared, global-state directory, see :term:`STAGING_DIR_HOST`. @@ -6491,6 +6867,23 @@ system and gives an overview of their function and contents. The version of the package(s) built by the recipe. By default, :term:`PKGV` is set to :term:`PV`. + If :term:`PV` contains the ``+`` sign, source control information will be + included in :term:`PKGV` later in the packaging phase. For more + information, see the :doc:`/dev-manual/external-scm` section of the Yocto + Project Development Tasks Manual. + + .. warning:: + + Since source control information is included in a late stage by the + :ref:`ref-classes-package` class, it cannot be seen from the BitBake + environment with ``bitbake -e`` or ``bitbake-getvar``. Instead, after + the package is built, the version information can be retrieved with + ``oe-pkgdata-util package-info <package name>``. See the + :ref:`dev-manual/debugging:Viewing Package Information with + ``oe-pkgdata-util``` section of the Yocto Project Development Tasks + Manual for more information on ``oe-pkgdata-util``. + + :term:`PN` This variable can have two separate functions depending on the context: a recipe name or a resulting package name. @@ -6625,22 +7018,14 @@ system and gives an overview of their function and contents. string. You cannot use the wildcard character in any other location of the string. - The specified version is matched against :term:`PV`, which - does not necessarily match the version part of the recipe's filename. - For example, consider two recipes ``foo_1.2.bb`` and ``foo_git.bb`` - where ``foo_git.bb`` contains the following assignment:: + The specified version is matched against :term:`PV`, which does not + necessarily match the version part of the recipe's filename. - PV = "1.1+git${SRCPV}" - - In this case, the correct way to select - ``foo_git.bb`` is by using an assignment such as the following:: - - PREFERRED_VERSION_foo = "1.1+git%" - - Compare that previous example - against the following incorrect example, which does not work:: - - PREFERRED_VERSION_foo = "git" + If you want to select a recipe named ``foo_git.bb`` which has :term:`PV` + set to ``1.2.3+git``, you can do so by setting ```PREFERRED_VERSION_foo`` + to ``1.2.3%`` (i.e. simply setting ``PREFERRED_VERSION_foo`` to ``git`` + will not work as the name of the recipe isn't used, but rather its + :term:`PV` definition). Sometimes the :term:`PREFERRED_VERSION` variable can be set by configuration files in a way that is hard to change. You can use @@ -6805,7 +7190,7 @@ system and gives an overview of their function and contents. :term:`PTEST_ENABLED` Specifies whether or not :ref:`Package - Test <dev-manual/packages:testing packages with ptest>` (ptest) + Test <test-manual/ptest:testing packages with ptest>` (ptest) functionality is enabled when building a recipe. You should not set this variable directly. Enabling and disabling building Package Tests at build time should be done by adding "ptest" to (or removing it @@ -6862,7 +7247,7 @@ system and gives an overview of their function and contents. QA_EMPTY_DIRS_RECOMMENDATION:/dev = "but all devices must be created at runtime" :term:`RANLIB` - The minimal command and arguments to run ``ranlib``. + The minimal command and arguments to run :manpage:`ranlib <ranlib(1)>`. :term:`RCONFLICTS` The list of packages that conflict with packages. Note that packages @@ -6999,6 +7384,9 @@ system and gives an overview of their function and contents. ":ref:`bitbake-user-manual/bitbake-user-manual-execution:dependencies`" sections in the BitBake User Manual for additional information on tasks and dependencies. + :term:`READELF` + The minimal command and arguments to run :manpage:`readelf <readelf(1)>`. + :term:`RECIPE_MAINTAINER` This variable defines the name and e-mail address of the maintainer of a recipe. Such information can be used by human users submitted changes, @@ -7055,6 +7443,16 @@ system and gives an overview of their function and contents. :term:`REPODIR` See :term:`bitbake:REPODIR` in the BitBake manual. + :term:`REQUIRED_COMBINED_FEATURES` + When inheriting the :ref:`ref-classes-features_check` class, this variable + identifies combined features (the intersection of :term:`MACHINE_FEATURES` + and :term:`DISTRO_FEATURES`) that must exist in the current configuration + in order for the :term:`OpenEmbedded Build System` to build the recipe. In + other words, if the :term:`REQUIRED_COMBINED_FEATURES` variable lists a + feature that does not appear in :term:`COMBINED_FEATURES` within the + current configuration, then the recipe will be skipped, and if the build + system attempts to build the recipe then an error will be triggered. + :term:`REQUIRED_DISTRO_FEATURES` When inheriting the :ref:`ref-classes-features_check` class, this variable identifies distribution features that must exist @@ -7065,6 +7463,32 @@ system and gives an overview of their function and contents. the recipe will be skipped, and if the build system attempts to build the recipe then an error will be triggered. + :term:`REQUIRED_IMAGE_FEATURES` + When inheriting the :ref:`ref-classes-features_check` class, this variable + identifies image features that must exist in the current + configuration in order for the :term:`OpenEmbedded Build System` to build + the recipe. In other words, if the :term:`REQUIRED_IMAGE_FEATURES` variable + lists a feature that does not appear in :term:`IMAGE_FEATURES` within the + current configuration, then the recipe will be skipped, and if the build + system attempts to build the recipe then an error will be triggered. + + Compared to other ``REQUIRED_*_FEATURES`` variables, the + :term:`REQUIRED_IMAGE_FEATURES` varible only targets image recipes, as the + :term:`IMAGE_FEATURES` variable is handled by the :ref:`ref-classes-core-image` + class). However, the :term:`REQUIRED_IMAGE_FEATURES` varible can also be + set from a :term:`Configuration File`, such as a distro + configuration file, if the list of required image features should apply to + all images using this :term:`DISTRO`. + + :term:`REQUIRED_MACHINE_FEATURES` + When inheriting the :ref:`ref-classes-features_check` class, this variable + identifies :term:`MACHINE_FEATURES` that must exist in the current + configuration in order for the :term:`OpenEmbedded Build System` to build + the recipe. In other words, if the :term:`REQUIRED_MACHINE_FEATURES` variable + lists a feature that does not appear in :term:`MACHINE_FEATURES` within the + current configuration, then the recipe will be skipped, and if the build + system attempts to build the recipe then an error will be triggered. + :term:`REQUIRED_VERSION` If there are multiple versions of a recipe available, this variable determines which version should be given preference. @@ -7093,17 +7517,12 @@ system and gives an overview of their function and contents. prefer to have a read-only root filesystem and prefer to keep writeable data in one place. - You can override the default by setting the variable in any layer or - in the ``local.conf`` file. Because the default is set using a "weak" - assignment (i.e. "??="), you can use either of the following forms to - define your override:: + When setting ``INIT_MANAGER = systemd``, the default will be set to:: - ROOT_HOME = "/root" ROOT_HOME ?= "/root" - These - override examples use ``/root``, which is probably the most commonly - used override. + You can also override the default by setting the variable in your distro + configuration or in the ``local.conf`` file. :term:`ROOTFS` Indicates a filesystem image to include as the root filesystem. @@ -7348,11 +7767,21 @@ system and gives an overview of their function and contents. Only one archive type can be specified. + :term:`SDK_AS_ARCH` + Specifies architecture-specific assembler flags when building + :ref:`ref-classes-nativesdk` recipes. By default, the value of + :term:`SDK_AS_ARCH` equals the one of :term:`BUILD_AS_ARCH`. + :term:`SDK_BUILDINFO_FILE` When using the :ref:`ref-classes-image-buildinfo` class, specifies the file in the SDK to write the build information into. The default value is "``/buildinfo``". + :term:`SDK_CC_ARCH` + Specifies the architecture-specific C compiler flags when building + :ref:`ref-classes-nativesdk` recipes. By default, the value of + :term:`SDK_CC_ARCH` equals the one of :term:`BUILD_CC_ARCH`. + :term:`SDK_CUSTOM_TEMPLATECONF` When building the extensible SDK, if :term:`SDK_CUSTOM_TEMPLATECONF` is set to "1" and a ``conf/templateconf.cfg`` file exists in the :term:`Build Directory` @@ -7434,6 +7863,11 @@ system and gives an overview of their function and contents. :term:`SDK_EXT_TYPE` is set to "minimal", and defaults to "1" if :term:`SDK_EXT_TYPE` is set to "full". + :term:`SDK_LD_ARCH` + Specifies architecture-specific linker flags when building + :ref:`ref-classes-nativesdk` recipes. By default, the value of + :term:`SDK_LD_ARCH` equals the one of :term:`BUILD_LD_ARCH`. + :term:`SDK_NAME` The base name for SDK output files. The default value (as set in ``meta-poky/conf/distro/poky.conf``) is derived from the @@ -7725,6 +8159,53 @@ system and gives an overview of their function and contents. might break at runtime if the interface of the recipe was changed after the other had been built. + :term:`SIGGEN_LOCKEDSIGS` + The list of locked tasks, with the form:: + + SIGGEN_LOCKEDSIGS += "<package>:<task>:<signature>" + + If ``<signature>`` exists for the specified ``<task>`` and ``<package>`` + in the sstate cache, BitBake will use the cached output instead of + rebuilding the ``<task>``. If it does not exist, BitBake will build the + ``<task>`` and the sstate cache will be used next time. + + Example:: + + SIGGEN_LOCKEDSIGS += "bc:do_compile:09772aa4532512baf96d433484f27234d4b7c11dd9cda0d6f56fa1b7ce6f25f0" + + You can obtain the signature of all the tasks for the recipe ``bc`` using:: + + bitbake -S none bc + + Then you can look at files in ``build/tmp/stamps/<arch>/bc`` and look for + files like: ``<PV>.do_compile.sigdata.09772aa4532512baf96d433484f27234d4b7c11dd9cda0d6f56fa1b7ce6f25f0``. + + Alternatively, you can also use :doc:`bblock </dev-manual/bblock>` to + generate this line for you. + + :term:`SIGGEN_LOCKEDSIGS_TASKSIG_CHECK` + Specifies the debug level of task signature check. 3 levels are supported: + + * ``info``: displays a "Note" message to remind the user that a task is locked + and the current signature matches the locked one. + * ``warn``: displays a "Warning" message if a task is locked and the current + signature does not match the locked one. + * ``error``: same as warn but displays an "Error" message and aborts. + + :term:`SIGGEN_LOCKEDSIGS_TYPES` + Allowed overrides for :term:`SIGGEN_LOCKEDSIGS`. This is mainly used + for architecture specific locks. A common value for + :term:`SIGGEN_LOCKEDSIGS_TYPES` is ``${PACKAGE_ARCHS}``:: + + SIGGEN_LOCKEDSIGS_TYPES += "${PACKAGE_ARCHS}" + + SIGGEN_LOCKEDSIGS_core2-64 += "bc:do_compile:09772aa4532512baf96d433484f27234d4b7c11dd9cda0d6f56fa1b7ce6f25f0" + SIGGEN_LOCKEDSIGS_cortexa57 += "bc:do_compile:12178eb6d55ef602a8fe638e49862fd247e07b228f0f08967697b655bfe4bb61" + + Here, the ``do_compile`` task from ``bc`` will be locked only for + ``core2-64`` and ``cortexa57`` but not for other architectures such as + ``mips32r2``. + :term:`SITEINFO_BITS` Specifies the number of bits for the target system CPU. The value should be either "32" or "64". @@ -7835,6 +8316,31 @@ system and gives an overview of their function and contents. You can specify only a single URL in :term:`SOURCE_MIRROR_URL`. + .. note:: + + If the mirror is protected behind a username and password, the + :term:`build host` needs to be configured so the :term:`build system + <OpenEmbedded Build System>` is able to fetch from the mirror. + + The recommended way to do that is by setting the following parameters + in ``$HOME/.netrc`` (``$HOME`` being the :term:`build host` home + directory):: + + machine example.com + login <user> + password <password> + + This file requires permissions set to ``400`` or ``600`` to prevent + other users from reading the file:: + + chmod 600 "$HOME/.netrc" + + Another method to configure the username and password is from the URL + in :term:`SOURCE_MIRROR_URL` directly, with the ``user`` and ``pswd`` + parameters:: + + SOURCE_MIRROR_URL = "http://example.com/my_source_mirror;user=<user>;pswd=<password>" + :term:`SPDX_ARCHIVE_PACKAGED` This option allows to add to :term:`SPDX` output compressed archives of the files in the generated target packages. @@ -7989,6 +8495,11 @@ system and gives an overview of their function and contents. section in the Yocto Project Board Support Package Developer's Guide for additional information. + :term:`SPL_DTB_BINARY` + When inheriting the :ref:`ref-classes-uboot-sign` class, the + :term:`SPL_DTB_BINARY` variable contains the name of the SPL binary to be + compiled. + :term:`SPL_MKIMAGE_DTCOPTS` Options for the device tree compiler passed to ``mkimage -D`` feature while creating a FIT image with the :ref:`ref-classes-uboot-sign` @@ -8009,7 +8520,7 @@ system and gives an overview of their function and contents. class. :term:`SPL_SIGN_KEYNAME` - The name of keys used by the :ref:`ref-classes-kernel-fitimage` class + The name of keys used by the :ref:`ref-classes-uboot-sign` class for signing U-Boot FIT image stored in the :term:`SPL_SIGN_KEYDIR` directory. If we have for example a ``dev.key`` key and a ``dev.crt`` certificate stored in the :term:`SPL_SIGN_KEYDIR` directory, you will @@ -8115,21 +8626,23 @@ system and gives an overview of their function and contents. (SCM). :term:`SRCPV` - Returns the version string of the current package. This string is - used to help define the value of :term:`PV`. + The variable :term:`SRCPV` is deprecated. It was previously used to + include source control information in :term:`PV` for :term:`bitbake` to + work correctly but this is no longer a requirement. Source control + information will be automatically included by :term:`bitbake` in the + variable :term:`PKGV` during packaging if the ``+`` sign is present in + :term:`PV`. - The :term:`SRCPV` variable is defined in the ``meta/conf/bitbake.conf`` - configuration file in the :term:`Source Directory` as - follows:: + .. note:: - SRCPV = "${@bb.fetch2.get_srcrev(d)}" + The :term:`SRCPV` variable used to be defined in the + ``meta/conf/bitbake.conf`` configuration file in the :term:`Source + Directory` as follows:: - Recipes that need to define :term:`PV` do so with the help of the - :term:`SRCPV`. For example, the ``ofono`` recipe (``ofono_git.bb``) - located in ``meta/recipes-connectivity`` in the Source Directory - defines :term:`PV` as follows:: + SRCPV = "${@bb.fetch2.get_srcrev(d)}" - PV = "0.12-git${SRCPV}" + The ``get_srcrev`` function can still be used to include source control + information in variables manually. :term:`SRCREV` The revision of the source code used to build the package. This @@ -8240,10 +8753,38 @@ system and gives an overview of their function and contents. file://.* https://someserver.tld/share/sstate/PATH;downloadfilename=PATH \ file://.* file:///some-local-dir/sstate/PATH" + .. note:: + + If the mirror is protected behind a username and password, the + :term:`build host` needs to be configured so the :term:`build system + <OpenEmbedded Build System>` is able to download the sstate cache using + authentication. + + The recommended way to do that is by setting the following parameters + in ``$HOME/.netrc`` (``$HOME`` being the :term:`build host` home + directory):: + + machine someserver.tld + login <user> + password <password> + + This file requires permissions set to ``400`` or ``600`` to prevent + other users from reading the file:: + + chmod 600 "$HOME/.netrc" + + Another method to configure the username and password is from the + URL in :term:`SSTATE_MIRRORS` directly, with the ``user`` and ``pswd`` + parameters:: + + SSTATE_MIRRORS ?= "\ + file://.* https://someserver.tld/share/sstate/PATH;user=<user>;pswd=<password>;downloadfilename=PATH \ + " + The Yocto Project actually shares the cache data objects built by its autobuilder:: - SSTATE_MIRRORS ?= "file://.* http://cdn.jsdelivr.net/yocto/sstate/all/PATH;downloadfilename=PATH" + SSTATE_MIRRORS ?= "file://.* http://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH" As such binary artifacts are built for the generic QEMU machines supported by the various Poky releases, they are less likely to be @@ -8267,6 +8808,26 @@ system and gives an overview of their function and contents. For details on the process, see the :ref:`ref-classes-staging` class. + :term:`SSTATE_SKIP_CREATION` + The :term:`SSTATE_SKIP_CREATION` variable can be used to skip the + creation of :ref:`shared state <overview-manual/concepts:shared state cache>` + tarball files. It makes sense e.g. for image creation tasks as tarring images + and keeping them in sstate would consume a lot of disk space. + + In general it is not recommended to use this variable as missing sstate + artefacts adversely impact the build, particularly for entries in the + middle of dependency chains. The case it can make sense is where the + size and time costs of the artefact are similar to just running the + tasks. This generally only applies to end artefact output like images. + + The syntax to disable it for one task is:: + + SSTATE_SKIP_CREATION:task-image-complete = "1" + + The syntax to disable it for the whole recipe is:: + + SSTATE_SKIP_CREATION = "1" + :term:`STAGING_BASE_LIBDIR_NATIVE` Specifies the path to the ``/lib`` subdirectory of the sysroot directory for the build host. @@ -8308,7 +8869,7 @@ system and gives an overview of their function and contents. directory for the build host. :term:`STAGING_DIR` - Helps construct the ``recipe-sysroots`` directory, which is used + Helps construct the ``recipe-sysroot*`` directories, which are used during packaging. For information on how staging for recipe-specific sysroots occurs, @@ -8457,8 +9018,8 @@ system and gives an overview of their function and contents. places stamps. The default directory is ``${TMPDIR}/stamps``. :term:`STRIP` - The minimal command and arguments to run ``strip``, which is used to - strip symbols. + The minimal command and arguments to run :manpage:`strip <strip(1)>`, + which is used to strip symbols. :term:`SUMMARY` The short (72 characters or less) summary of the binary package for @@ -8536,29 +9097,6 @@ system and gives an overview of their function and contents. /sysroot-only \ " - :term:`SYSROOT_DIRS_IGNORE` - Directories that are not staged into the sysroot by the - :ref:`ref-tasks-populate_sysroot` task. You - can use this variable to exclude certain subdirectories of - directories listed in :term:`SYSROOT_DIRS` from - staging. By default, the following directories are not staged:: - - SYSROOT_DIRS_IGNORE = " \ - ${mandir} \ - ${docdir} \ - ${infodir} \ - ${datadir}/X11/locale \ - ${datadir}/applications \ - ${datadir}/bash-completion \ - ${datadir}/fonts \ - ${datadir}/gtk-doc/html \ - ${datadir}/installed-tests \ - ${datadir}/locale \ - ${datadir}/pixmaps \ - ${datadir}/terminfo \ - ${libdir}/${BPN}/ptest \ - " - Consider the following example in which you need to manipulate this variable. Assume you have a recipe ``A`` that provides a shared library ``.so.*`` that is installed into a custom folder other than "``${libdir}``" @@ -8570,7 +9108,7 @@ system and gives an overview of their function and contents. is just to show the usefulness of setting :term:`SYSROOT_DIRS`. When a recipe ``B`` :term:`DEPENDS` on ``A``, it means what is in - :term:`SYSROOT_DIRS` will be copied from :term:`D` of the recipe ``B`` + :term:`SYSROOT_DIRS` will be copied from :term:`D` of the recipe ``A`` into ``B``'s :term:`SYSROOT_DESTDIR` that is "``${WORKDIR}/sysroot-destdir``". Now, since ``/opt/lib`` is not in :term:`SYSROOT_DIRS`, it will never be copied to @@ -8588,6 +9126,29 @@ system and gives an overview of their function and contents. TARGET_LDFLAGS:append = " -L${RECIPE_SYSROOT}/opt/lib" + :term:`SYSROOT_DIRS_IGNORE` + Directories that are not staged into the sysroot by the + :ref:`ref-tasks-populate_sysroot` task. You + can use this variable to exclude certain subdirectories of + directories listed in :term:`SYSROOT_DIRS` from + staging. By default, the following directories are not staged:: + + SYSROOT_DIRS_IGNORE = " \ + ${mandir} \ + ${docdir} \ + ${infodir} \ + ${datadir}/X11/locale \ + ${datadir}/applications \ + ${datadir}/bash-completion \ + ${datadir}/fonts \ + ${datadir}/gtk-doc/html \ + ${datadir}/installed-tests \ + ${datadir}/locale \ + ${datadir}/pixmaps \ + ${datadir}/terminfo \ + ${libdir}/${BPN}/ptest \ + " + :term:`SYSROOT_DIRS_NATIVE` Extra directories staged into the sysroot by the :ref:`ref-tasks-populate_sysroot` task for @@ -9018,8 +9579,8 @@ system and gives an overview of their function and contents. file. For more information on testing images, see the - ":ref:`dev-manual/runtime-testing:performing automated runtime testing`" - section in the Yocto Project Development Tasks Manual. + ":ref:`test-manual/runtime-testing:performing automated runtime testing`" + section in the Yocto Project Test Environment Manual. :term:`TEST_SERIALCONTROL_CMD` For automated hardware testing, specifies the command to use to @@ -9090,8 +9651,8 @@ system and gives an overview of their function and contents. TEST_SUITES = "test_A test_B" For more information on testing images, see the - ":ref:`dev-manual/runtime-testing:performing automated runtime testing`" - section in the Yocto Project Development Tasks Manual. + ":ref:`test-manual/runtime-testing:performing automated runtime testing`" + section in the Yocto Project Test Environment Manual. :term:`TEST_TARGET` Specifies the target controller to use when running tests against a @@ -9109,8 +9670,8 @@ system and gives an overview of their function and contents. You can provide the following arguments with :term:`TEST_TARGET`: - *"qemu":* Boots a QEMU image and runs the tests. See the - ":ref:`dev-manual/runtime-testing:enabling runtime tests on qemu`" section - in the Yocto Project Development Tasks Manual for more + ":ref:`test-manual/runtime-testing:enabling runtime tests on qemu`" section + in the Yocto Project Test Environment Manual for more information. - *"simpleremote":* Runs the tests on target hardware that is @@ -9125,8 +9686,8 @@ system and gives an overview of their function and contents. ``meta/lib/oeqa/controllers/simpleremote.py``. For information on running tests on hardware, see the - ":ref:`dev-manual/runtime-testing:enabling runtime tests on hardware`" - section in the Yocto Project Development Tasks Manual. + ":ref:`test-manual/runtime-testing:enabling runtime tests on hardware`" + section in the Yocto Project Test Environment Manual. :term:`TEST_TARGET_IP` The IP address of your hardware under test. The :term:`TEST_TARGET_IP` @@ -9162,10 +9723,15 @@ system and gives an overview of their function and contents. For more information on enabling, running, and writing these tests, see the - ":ref:`dev-manual/runtime-testing:performing automated runtime testing`" - section in the Yocto Project Development Tasks Manual and the + ":ref:`test-manual/runtime-testing:performing automated runtime testing`" + section in the Yocto Project Test Environment Manual and the ":ref:`ref-classes-testimage`" section. + :term:`TESTIMAGE_FAILED_QA_ARTIFACTS` + When using the :ref:`ref-classes-testimage` class, the variable + :term:`TESTIMAGE_FAILED_QA_ARTIFACTS` lists space-separated paths on the + target to retrieve onto the host. + :term:`THISDIR` The directory in which the file BitBake is currently parsing is located. Do not manually set this variable. @@ -9653,6 +10219,22 @@ system and gives an overview of their function and contents. passes and uses "all" for the target during the U-Boot building process. + :term:`UNINATIVE_CHECKSUM` + When inheriting the :ref:`ref-classes-uninative` class, the + :term:`UNINATIVE_CHECKSUM` variable flags contain the checksums of the + uninative tarball as specified by the :term:`UNINATIVE_URL` variable. + There should be one checksum per tarballs published at + :term:`UNINATIVE_URL`, which match architectures. For example:: + + UNINATIVE_CHECKSUM[aarch64] ?= "812045d826b7fda88944055e8526b95a5a9440bfef608d5b53fd52faab49bf85" + UNINATIVE_CHECKSUM[i686] ?= "5cc28efd0c15a75de4bcb147c6cce65f1c1c9d442173a220f08427f40a3ffa09" + UNINATIVE_CHECKSUM[x86_64] ?= "4c03d1ed2b7b4e823aca4a1a23d8f2e322f1770fc10e859adcede5777aff4f3a" + + :term:`UNINATIVE_URL` + When inheriting the :ref:`ref-classes-uninative` class, the + :term:`UNINATIVE_URL` variable contains the URL where the uninative + tarballs are published. + :term:`UNKNOWN_CONFIGURE_OPT_IGNORE` Specifies a list of options that, if reported by the configure script as being invalid, should not generate a warning during the @@ -9743,6 +10325,18 @@ system and gives an overview of their function and contents. the Yocto Project Development Tasks Manual for information on how to use this variable. + :term:`USE_NLS` + Determine if language translations should be built for recipes that can + build them. This variable can be equal to: + + - ``yes``: translations are enabled. + - ``no``: translation are disabled. + + Recipes can use the value of this variable to enable language + translations in their build. Classes such as :ref:`ref-classes-gettext` + use the value of this variable to enable :wikipedia:`Gettext <Gettext>` + support. + :term:`USE_VT` When using :ref:`SysVinit <dev-manual/new-recipe:enabling system services>`, @@ -9957,8 +10551,22 @@ system and gives an overview of their function and contents. ":ref:`ref-classes-insane`" section. :term:`WATCHDOG_TIMEOUT` - Specifies the timeout in seconds used by the ``watchdog`` recipe and - also by ``systemd`` during reboot. The default is 60 seconds. + Specifies the timeout in seconds used by the ``watchdog-config`` recipe + and also by ``systemd`` during reboot. The default is 60 seconds. + + :term:`WIC_CREATE_EXTRA_ARGS` + If the :term:`IMAGE_FSTYPES` variable contains "wic", the build + will generate a + :ref:`Wic image <dev-manual/wic:creating partitioned images using wic>` + automatically when BitBake builds an image recipe. As part of + this process BitBake will invoke the "`wic create`" command. The + :term:`WIC_CREATE_EXTRA_ARGS` variable is placed at the end of this + command which allows the user to supply additional arguments. + + One such useful purpose for this mechanism is to add the ``-D`` (or + ``--debug``) argument to the "`wic create`" command. This increases the + amount of debugging information written out to the Wic log during the + Wic creation process. :term:`WIRELESS_DAEMON` For ``connman`` and ``packagegroup-base``, specifies the wireless diff --git a/poky/documentation/sdk-manual/appendix-obtain.rst b/poky/documentation/sdk-manual/appendix-obtain.rst index d06d6ec6b5..a42cbc31bb 100644 --- a/poky/documentation/sdk-manual/appendix-obtain.rst +++ b/poky/documentation/sdk-manual/appendix-obtain.rst @@ -29,7 +29,7 @@ and then run the script to hand-install the toolchain. Follow these steps to locate and hand-install the toolchain: #. *Go to the Installers Directory:* Go to - :yocto_dl:`/releases/yocto/yocto-&DISTRO;/toolchain/` + :yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/` #. *Open the Folder for Your Build Host:* Open the folder that matches your :term:`Build Host` (i.e. @@ -201,7 +201,7 @@ Follow these steps to extract the root filesystem: Image File:* You need to find and download the root filesystem image file that is appropriate for your target system. These files are kept in machine-specific folders in the - :yocto_dl:`Index of Releases </releases/yocto/yocto-&DISTRO;/machines/>` + :yocto_dl:`Index of Releases </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>` in the "machines" directory. The machine-specific folders of the "machines" directory contain @@ -245,7 +245,7 @@ Follow these steps to extract the root filesystem: Here is an example command that extracts the root filesystem from a previously built root filesystem image that was downloaded - from the :yocto_dl:`Index of Releases </releases/yocto/yocto-&DISTRO;/machines/>`. + from the :yocto_dl:`Index of Releases </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>`. This command extracts the root filesystem into the ``core2-64-sato`` directory:: diff --git a/poky/documentation/sdk-manual/extensible.rst b/poky/documentation/sdk-manual/extensible.rst index 3f6a754d88..ab4956f466 100644 --- a/poky/documentation/sdk-manual/extensible.rst +++ b/poky/documentation/sdk-manual/extensible.rst @@ -87,7 +87,7 @@ Host` by running the ``*.sh`` installation script. You can download a tarball installer, which includes the pre-built toolchain, the ``runqemu`` script, the internal build system, ``devtool``, and support files from the appropriate -:yocto_dl:`toolchain </releases/yocto/yocto-&DISTRO;/toolchain/>` directory within the Index of +:yocto_dl:`toolchain </releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/>` directory within the Index of Releases. Toolchains are available for several 32-bit and 64-bit architectures with the ``x86_64`` directories, respectively. The toolchains the Yocto Project provides are based off the @@ -178,7 +178,7 @@ Running the Extensible SDK Environment Setup Script Once you have the SDK installed, you must run the SDK environment setup script before you can actually use the SDK. -When using a SDK directly in a Yocto build, you will find the script in +When using an SDK directly in a Yocto build, you will find the script in ``tmp/deploy/images/qemux86-64/`` in your :term:`Build Directory`. When using a standalone SDK installer, this setup script resides in @@ -622,28 +622,91 @@ command: decide you do not want to proceed with your work. If you do use this command, realize that the source tree is preserved. -``devtool ide-sdk`` configures IDEs for the extensible SDK ----------------------------------------------------------- +``devtool ide-sdk`` configures IDEs and bootstraps SDKs +------------------------------------------------------- -``devtool ide-sdk`` automatically configures IDEs to use the extensible SDK. -To make sure that all parts of the extensible SDK required by the generated -IDE configuration are available, ``devtool ide-sdk`` uses BitBake in the -background to bootstrap the extensible SDK. +The ``devtool ide-sdk`` command can provide an IDE configuration for IDEs when +working on the source code of one or more recipes. +Depending on the programming language, and the build system used by the recipe, +the tools required for cross-development and remote debugging are different. +For example: -The extensible SDK supports two different development modes. -``devtool ide-sdk`` supports both of them: +- A C/C++ project usually uses CMake or Meson. -#. *Modified mode*: +- A Python project uses setuptools or one of its successors. + +- A Rust project uses Cargo. + +Also, the IDE plugins needed for the integration of a build system with the +IDE and the corresponding settings are usually specific to these build-systems. +To hide all these details from the user, ``devtool ide-sdk`` does two things: + +- It generates any kind of SDK needed for cross-development and remote + debugging of the specified recipes. + +- It generates the configuration for the IDE (and the IDE plugins) for using + the cross-toolchain and remote debugging tools provided by the SDK directly + from the IDE. + +For supported build systems the configurations generated by ``devtool ide-sdk`` +combine the advantages of the ``devtool modify`` based workflow +(see :ref:`using_devtool`) with the advantages of the simple Environment Setup +script based workflow (see :ref:`running_the_ext_sdk_env`) provided by Yocto's +SDK or eSDK: + +- The source code of the recipe is in the workspace created by + ``devtool modify`` or ``devtool add``. + Using ``devtool build``, ``devtool build-image``, + ``devtool deploy-target`` or ``bitbake`` is possible. + Also ``devtool ide-sdk`` can be used to update the SDK and the IDE + configuration at any time. - By default ``devtool ide-sdk`` generates IDE configurations for recipes in - workspaces created by ``devtool modify`` or ``devtool add`` as described in - :ref:`using_devtool`. This mode creates IDE configurations with support for - advanced features, such as deploying the binaries to the remote target - device and performing remote debugging sessions. The generated IDE - configurations use the per recipe sysroots as Bitbake does internally. +- ``devtool ide-sdk`` aims to support multiple programming languages and + multiple IDEs natively. "Natively" means that the IDE is configured to call + the build tool (e.g. ``cmake`` or ``meson``) directly. This has several + advantages. + First of all, it is usually much faster to call for example ``cmake`` than + ``devtool build``. + It also allows to benefit from the very good integration that IDEs like + VSCode offer for tools like CMake or GDB. + + However, supporting many programming languages and multiple + IDEs is quite an elaborate and constantly evolving thing. Support for IDEs + is therefore implemented as plugins. Plugins can also be provided by + optional layers. - In order to use the tool, a few settings are needed. As a starting example, - the following lines of code can be added to the ``local.conf`` file:: +So much about the introduction to the default mode of ``devtool sdk-ide`` which +is called the "modified" mode because it uses the workspace created by +``devtool modify`` and the per recipe :term:`Sysroots <Sysroot>` of BitBake. + +For some recipes and use cases, this default behavior of ``devtool ide-sdk`` +with full ``devtool`` and ``bitbake`` integration might not be suitable. +To offer full feature parity with the SDK and the eSDK, ``devtool ide-sdk`` has +a second mode called "shared" mode. +If ``devtool ide-sdk`` is called with the ``--mode=shared`` option, it +bootstraps an SDK directly from the BitBake environment, which offers the same +Environment Setup script as described in :ref:`running_the_ext_sdk_env`. +In addition to the (e)SDK installer-based setup, the IDE gets configured +to use the shared :term:`Sysroots <Sysroot>` and the tools from the SDK. +``devtool ide-sdk --mode=shared`` is basically a wrapper for the setup of the +extensible SDK as described in :ref:`setting_up_ext_sdk_in_build`. + +The use of ``devtool ide-sdk`` is an alternative to using one of the SDK +installers. +``devtool ide-sdk`` allows the creation of SDKs that offer all the +functionality of the SDK and the eSDK installers. Compared to the installers, +however, the SDK created with ``devtool ide-sdk`` is much more flexible. +For example, it is very easy to change the :term:`MACHINE` in the +``local.conf`` file, update the layer meta data and then regenerate the SDK. + +Let's take a look at an example of how to use ``devtool ide-sdk`` in each of +the two modes: + +#. *Modified mode*: + + In order to use the ``devtool ide-sdk``, a few settings are needed. As a + starting example, the following lines of code can be added to the + ``local.conf`` file:: # Build the companion debug file system IMAGE_GEN_DEBUGFS = "1" @@ -666,15 +729,20 @@ The extensible SDK supports two different development modes. IMAGE_INSTALL:append = " my-recipe" Assuming the BitBake environment is set up correctly and a workspace has - been created for the recipe using ``devtool modify my-recipe``, the + been created for the recipe using ``devtool modify my-recipe`` or probably + even better by using ``devtool modify my-recipe --debug-build``, the following command can create the SDK and the configuration for VSCode in the recipe workspace:: $ devtool ide-sdk my-recipe core-image-minimal --target root@192.168.7.2 - The command requires an image recipe (``core-image-minimal`` for this example) - that is used to create the SDK. This firmware image should also be installed - on the target device. It is possible to pass multiple package recipes. + The command requires an image recipe (``core-image-minimal`` for this + example) that is used to create the SDK. + This firmware image should also be installed on the target device. + It is possible to pass multiple package recipes:: + + $ devtool ide-sdk my-recipe-1 my-recipe-2 core-image-minimal --target root@192.168.7.2 + ``devtool ide-sdk`` tries to create an IDE configuration for all package recipes. @@ -684,9 +752,9 @@ The extensible SDK supports two different development modes. For example, a CMake preset is created for a recipe that inherits :ref:`ref-classes-cmake`. In the case of VSCode, CMake presets are supported - by the CMake Tools plugin. This is an example of how the build - configuration used by ``bitbake`` is exported to an IDE configuration that - gives exactly the same build results. + by the CMake Tools plugin. This is an example of how the build configuration + used by ``bitbake`` is exported to an IDE configuration that gives exactly + the same build results. Support for remote debugging with seamless integration into the IDE is important for a cross-SDK. ``devtool ide-sdk`` automatically generates the @@ -699,23 +767,54 @@ The extensible SDK supports two different development modes. running on the target device, it is essential that the image built by ``devtool ide-sdk`` is running on the target device. - ``devtool ide-sdk`` aims to support multiple programming languages and - multiple IDEs natively. "Natively" means that the IDE is configured to call - the build tool (e.g. CMake or Meson) directly. This has several advantages. - First of all, it is much faster than ``devtool build``, but it also allows - to use the very good integration of tools like CMake or GDB in VSCode and - other IDEs. However, supporting many programming languages and multiple - IDEs is quite an elaborate and constantly evolving thing. Support for IDEs - is therefore implemented as plugins. Plugins can also be provided by - optional layers. - The default IDE is VSCode. Some hints about using VSCode: - - To work on the source code of a recipe an instance of VSCode is started in - the recipe's workspace. Example:: + - VSCode can be used to work on the BitBake recipes or the application + source code. + Usually there is one instance of VSCode running in the folder where the + BitBake recipes are. This instance has the + `Yocto Project BitBake plugin <https://marketplace.visualstudio.com/items?itemName=yocto-project.yocto-bitbake>`_ + running. + + .. warning:: + + Some VSCode plugins (Python, BitBake and others) need a reasonable + configuration to work as expected. Otherwise, some plugins try to + index the build directory of BitBake, which keeps your system quite + busy until an out of memory exception stops this nonsense. + Other plugins, such as the BitBake plugin, do not behave as expected. + + To work around such issues, the ``oe-init-build-env`` script creates + an initial ``.vscode/settings.json`` file if ``code`` can be found + and the ``.vscode`` folder does not yet exist. + It is best to run ``oe-init-build-env`` once before starting VSCode. + An alternative approach is to use a build folder outside the layers, + e.g. ``oe-init-build-env ../build``. + + The BitBake plugin also offers to create devtool workspaces and run + ``devtool ide-sdk`` with a few mouse clicks. + Of course, issuing commands in the terminal works as well. + + - To work on the source code of a recipe another instance of VSCode is + started in the recipe's workspace. Example:: code build/workspace/sources/my-recipe + This instance of VSCode uses plugins that are useful for the development + of the application. ``devtool ide-sdk`` generates the necessary + ``extensions.json``, ``settings.json``, ``tasks.json`` and ``launch.json`` + configuration files for all the involved plugins. + + When the source code folder present in the workspace folder is opened in + VSCode for the first time, a pop-up message recommends installing the + required plugins. + After accepting the installation of the plugins, working with the source + code or some debugging tasks should work as usual with VSCode. + + Starting the VSCode instances in the recipe workspace folders can also be + done by a mouse click on the recipe workspaces in the first VSCode + instance. + - To work with CMake press ``Ctrl + Shift + p``, type ``cmake``. This will show some possible commands like selecting a CMake preset, compiling or running CTest. @@ -728,10 +827,9 @@ The extensible SDK supports two different development modes. show some possible commands like compiling or executing the unit tests. A note on running cross-compiled unit tests on the host: Meson enables - support for QEMU user-mode by default. It is expected that the execution - of the unit tests from the IDE will work easily without any additional - steps, provided that the code is suitable for execution on the host - machine. + support for QEMU user mode by default. It is expected that the execution + of the unit tests from the IDE will work without any additional steps, + given that the code is suitable for the execution on the host machine. - For the deployment to the target device, just press ``Ctrl + Shift + p``, type ``task``. Select ``install && deploy-target``. @@ -742,23 +840,23 @@ The extensible SDK supports two different development modes. selected. After selecting one of the generated configurations, press the "play" button. - Starting a remote debugging session automatically initiates the deployment - to the target device. If this is not desired, the + Starting a remote debugging session automatically initiates the + deployment to the target device. If this is not desired, the ``"dependsOn": ["install && deploy-target...]`` parameter of the tasks with ``"label": "gdbserver start...`` can be removed from the ``tasks.json`` file. - VSCode supports GDB with many different setups and configurations for many - different use cases. However, most of these setups have some limitations - when it comes to cross-development, support only a few target + VSCode supports GDB with many different setups and configurations for + many different use cases. However, most of these setups have some + limitations when it comes to cross-development, support only a few target architectures or require a high performance target device. Therefore ``devtool ide-sdk`` supports the classic, generic setup with GDB on the development host and gdbserver on the target device. Roughly summarized, this means: - - The binaries are copied via SSH to the remote target device by a script - referred by ``tasks.json``. + - The binaries are copied via SSH to the remote target device by a + script referred by ``tasks.json``. - gdbserver is started on the remote target device via SSH by a script referred by ``tasks.json``. @@ -783,8 +881,8 @@ The extensible SDK supports two different development modes. .. code-block:: sh # Create the SDK - devtool modify cmake-example - devtool ide-sdk cmake-example core-image-minimal -c --debug-build-config --ide=none + devtool modify cmake-example --debug-build + devtool ide-sdk cmake-example core-image-minimal -c --ide=none # Install the firmware on a target device or start QEMU runqemu @@ -860,16 +958,9 @@ The extensible SDK supports two different development modes. #. *Shared sysroots mode* - For some recipes and use cases a per-recipe sysroot based SDK is not - suitable. Optionally ``devtool ide-sdk`` configures the IDE to use the - toolchain provided by the extensible SDK as described in - :ref:`running_the_ext_sdk_env`. ``devtool ide-sdk --mode=shared`` is - basically a wrapper for the setup of the extensible SDK as described in - :ref:`setting_up_ext_sdk_in_build`. The IDE gets a configuration to use the - shared sysroots. - - Creating a SDK with shared sysroots that contains all the dependencies needed - to work with ``my-recipe`` is possible with the following example command:: + Creating an SDK with shared :term:`Sysroots <Sysroot>` that contains all the + dependencies needed to work with ``my-recipe`` is possible with the following + example command:: $ devtool ide-sdk --mode=shared my-recipe @@ -883,12 +974,14 @@ The extensible SDK supports two different development modes. echo "project(foo VERSION 1.0)" > kit-test/CMakeLists.txt code kit-test - If there is a CMake project in the workspace, cross-compilation is supported: + If there is a CMake project in the workspace, cross-compilation is + supported: - Press ``Ctrl + Shift + P``, type ``CMake: Scan for Kits`` - Press ``Ctrl + Shift + P``, type ``CMake: Select a Kit`` - Finally most of the features provided by CMake and the IDE should be available. + Finally most of the features provided by CMake and the IDE should be + available. Other IDEs than VSCode are supported as well. However, ``devtool ide-sdk --mode=shared --ide=none my-recipe`` is currently diff --git a/poky/documentation/sdk-manual/intro.rst b/poky/documentation/sdk-manual/intro.rst index e8fd191dbc..fbfc8c2ac7 100644 --- a/poky/documentation/sdk-manual/intro.rst +++ b/poky/documentation/sdk-manual/intro.rst @@ -173,7 +173,7 @@ You just need to follow these general steps: root filesystem images. If you are going to develop your application on hardware, go to the - :yocto_dl:`machines </releases/yocto/yocto-&DISTRO;/machines/>` download area and choose a + :yocto_dl:`machines </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>` download area and choose a target machine area from which to download the kernel image and root filesystem. This download area could have several files in it that support development using actual hardware. For example, the area @@ -183,7 +183,7 @@ You just need to follow these general steps: If you are going to develop your application and then run and test it using the QEMU emulator, go to the - :yocto_dl:`machines/qemu </releases/yocto/yocto-&DISTRO;/machines/qemu>` download area. From this + :yocto_dl:`machines/qemu </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/qemu>` download area. From this area, go down into the directory for your target architecture (e.g. ``qemux86_64`` for an Intel-based 64-bit architecture). Download the kernel, root filesystem, and any other files you need for your diff --git a/poky/documentation/sdk-manual/using.rst b/poky/documentation/sdk-manual/using.rst index f1ff0c76ca..bfb306abf5 100644 --- a/poky/documentation/sdk-manual/using.rst +++ b/poky/documentation/sdk-manual/using.rst @@ -43,7 +43,7 @@ Host` by running the ``*.sh`` installation script. You can download a tarball installer, which includes the pre-built toolchain, the ``runqemu`` script, and support files from the -appropriate :yocto_dl:`toolchain </releases/yocto/yocto-&DISTRO;/toolchain/>` directory within +appropriate :yocto_dl:`toolchain </releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/>` directory within the Index of Releases. Toolchains are available for several 32-bit and 64-bit architectures with the ``x86_64`` directories, respectively. The toolchains the Yocto Project provides are based off the diff --git a/poky/documentation/sdk-manual/working-projects.rst b/poky/documentation/sdk-manual/working-projects.rst index 4236bcec24..7df73b1b17 100644 --- a/poky/documentation/sdk-manual/working-projects.rst +++ b/poky/documentation/sdk-manual/working-projects.rst @@ -56,9 +56,10 @@ project: #include <stdio.h> - main() + int main() { printf("Hello World!\n"); + return 0; } - ``configure.ac``:: diff --git a/poky/documentation/set_versions.py b/poky/documentation/set_versions.py index dec0780834..820bd64036 100755 --- a/poky/documentation/set_versions.py +++ b/poky/documentation/set_versions.py @@ -168,17 +168,29 @@ series = [k for k in release_series] previousseries = series[series.index(ourseries)+1:] or [""] lastlts = [k for k in previousseries if k in ltsseries] or "dunfell" +latestreltag = subprocess.run(["git", "describe", "--abbrev=0", "--tags", "--match", "yocto-*"], capture_output=True, text=True).stdout +latestreltag = latestreltag.strip() +if latestreltag: + if latestreltag.startswith("yocto-"): + latesttag = latestreltag[6:] +else: + # fallback on the calculated version + print("Did not find a tag with 'git describe', falling back to %s" % ourversion) + latestreltag = "yocto-" + ourversion + latesttag = ourversion + print("Version calculated to be %s" % ourversion) +print("Latest release tag found is %s" % latestreltag) print("Release series calculated to be %s" % ourseries) replacements = { "DISTRO" : ourversion, + "DISTRO_LATEST_TAG": latesttag, "DISTRO_NAME_NO_CAP" : ourseries, "DISTRO_NAME" : ourseries.capitalize(), "DISTRO_NAME_NO_CAP_MINUS_ONE" : previousseries[0], "DISTRO_NAME_NO_CAP_LTS" : lastlts[0], "YOCTO_DOC_VERSION" : ourversion, - "DISTRO_REL_TAG" : "yocto-" + ourversion, "DOCCONF_VERSION" : docconfver, "BITBAKE_SERIES" : bitbakeversion, } @@ -316,3 +328,5 @@ with open('releases.rst', 'w') as f: if tag == release_series[series] or tag.startswith('%s.' % release_series[series]): f.write('- :yocto_docs:`%s Documentation </%s>`\n' % (tag, tag)) f.write('\n') + + diff --git a/poky/documentation/sphinx-static/favicon.ico b/poky/documentation/sphinx-static/favicon.ico Binary files differnew file mode 100644 index 0000000000..85a921e3ef --- /dev/null +++ b/poky/documentation/sphinx-static/favicon.ico diff --git a/poky/documentation/sphinx-static/switchers.js.in b/poky/documentation/sphinx-static/switchers.js.in index 8c016859bc..b1c0812b53 100644 --- a/poky/documentation/sphinx-static/switchers.js.in +++ b/poky/documentation/sphinx-static/switchers.js.in @@ -133,7 +133,13 @@ by https://git.yoctoproject.org/yocto-autobuilder-helper/tree/scripts/run-docs-b function get_docroot_url() { var url = window.location.href; + // Try to get the variable from documentation_options.js var root = DOCUMENTATION_OPTIONS.URL_ROOT; + if (root == null) { + // In recent versions of Sphinx, URL_ROOT was removed from + // documentation_options.js, so get it like searchtools.js does. + root = document.documentElement.dataset.content_root; + } var urlarray = url.split('/'); // Trim off anything after '/' diff --git a/poky/documentation/standards.md b/poky/documentation/standards.md index bc403e393e..8300d813dc 100644 --- a/poky/documentation/standards.md +++ b/poky/documentation/standards.md @@ -1,6 +1,6 @@ # Standards for contributing to Yocto Project documentation -This document attemps to standardize the way the Yocto Project +This document attempts to standardize the way the Yocto Project documentation is created. It is currently a work in progress. @@ -109,6 +109,21 @@ or in the BitBake User Manual If it is not described yet, the variable should be added to the glossary before or in the same patch it is used, so that `:term:` can be used. +### Admonitions + +Sphinx has predefined admonitions that can be used to highlight a bit of text or +add a side-note to the documentation. For example: + +```rst +.. note:: + + This is a note admonition. +``` + +We try to limit our usage of these admonitions to `note` and `warning`, as the +Sphinx documentation [warns](https://www.sphinx-doc.org/en/master/usage/restructuredtext/basics.html#directives) +that most themes only style these two admonitions. + ## ReStructured Text Syntax standards This section has not been filled yet diff --git a/poky/documentation/styles/config/vocabularies/Yocto/accept.txt b/poky/documentation/styles/config/vocabularies/Yocto/accept.txt index ca622ba412..7fedda8ae2 100644 --- a/poky/documentation/styles/config/vocabularies/Yocto/accept.txt +++ b/poky/documentation/styles/config/vocabularies/Yocto/accept.txt @@ -2,4 +2,5 @@ BitBake BSP crosstap OpenEmbedded +sstate Yocto diff --git a/poky/documentation/test-manual/index.rst b/poky/documentation/test-manual/index.rst index 86a2f436ea..d365d337ea 100644 --- a/poky/documentation/test-manual/index.rst +++ b/poky/documentation/test-manual/index.rst @@ -12,6 +12,8 @@ Yocto Project Test Environment Manual intro test-process + ptest + runtime-testing understand-autobuilder reproducible-builds yocto-project-compatible diff --git a/poky/documentation/test-manual/intro.rst b/poky/documentation/test-manual/intro.rst index c31fd11c7a..caa0a8a792 100644 --- a/poky/documentation/test-manual/intro.rst +++ b/poky/documentation/test-manual/intro.rst @@ -51,13 +51,11 @@ fashion. Basically, during the development of a Yocto Project release, the Autobuilder tests if things work. The Autobuilder builds all test targets and runs all the tests. -The Yocto Project uses now uses standard upstream -Buildbot (`version 3.8 <https://docs.buildbot.net/3.8.0/>`__) to -drive its integration and testing. Buildbot has a plug-in interface -that the Yocto Project customizes using code from the -``yocto-autobuilder2`` repository, adding its own console UI plugin. The -resulting UI plug-in allows you to visualize builds in a way suited to -the project's needs. +The Yocto Project uses standard upstream Buildbot to drive its integration and +testing. Buildbot has a plug-in interface that the Yocto Project customizes +using code from the :yocto_git:`yocto-autobuilder2 </yocto-autobuilder2>` +repository, adding its own console UI plugin. The resulting UI plug-in allows +you to visualize builds in a way suited to the project's needs. A ``helper`` layer provides configuration and job management through scripts found in the ``yocto-autobuilder-helper`` repository. The @@ -130,7 +128,9 @@ the following types of tests: $ bitbake image -c testimage The tests use the :ref:`ref-classes-testimage` - class and the :ref:`ref-tasks-testimage` task. + class and the :ref:`ref-tasks-testimage` task. See the + :ref:`test-manual/runtime-testing:Performing Automated Runtime Testing` + section of the Yocto Project Test Environment Manual for more information. - *Layer Testing:* The Autobuilder has the possibility to test whether specific layers work with the test of the system. The layers tested @@ -140,7 +140,7 @@ the following types of tests: - *Package Testing:* A Package Test (ptest) runs tests against packages built by the OpenEmbedded build system on the target machine. See the :ref:`Testing Packages With - ptest <dev-manual/packages:Testing Packages With ptest>` section + ptest <test-manual/ptest:Testing Packages With ptest>` section in the Yocto Project Development Tasks Manual and the ":yocto_wiki:`Ptest </Ptest>`" Wiki page for more information on Ptest. diff --git a/poky/documentation/test-manual/ptest.rst b/poky/documentation/test-manual/ptest.rst new file mode 100644 index 0000000000..2c021af515 --- /dev/null +++ b/poky/documentation/test-manual/ptest.rst @@ -0,0 +1,128 @@ +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK + +*************************** +Testing Packages With ptest +*************************** + +A Package Test (ptest) runs tests against packages built by the +OpenEmbedded build system on the target machine. A ptest contains at +least two items: the actual test, and a shell script (``run-ptest``) +that starts the test. The shell script that starts the test must not +contain the actual test --- the script only starts the test. On the other +hand, the test can be anything from a simple shell script that runs a +binary and checks the output to an elaborate system of test binaries and +data files. + +The test generates output in the format used by Automake:: + + result: testname + +where the result can be ``PASS``, ``FAIL``, or ``SKIP``, and +the testname can be any identifying string. + +For a list of Yocto Project recipes that are already enabled with ptest, +see the :yocto_wiki:`Ptest </Ptest>` wiki page. + +.. note:: + + A recipe is "ptest-enabled" if it inherits the :ref:`ref-classes-ptest` + class. + +Adding ptest to Your Build +========================== + +To add package testing to your build, add the :term:`DISTRO_FEATURES` and +:term:`EXTRA_IMAGE_FEATURES` variables to your ``local.conf`` file, which +is found in the :term:`Build Directory`:: + + DISTRO_FEATURES:append = " ptest" + EXTRA_IMAGE_FEATURES += "ptest-pkgs" + +Once your build is complete, the ptest files are installed into the +``/usr/lib/package/ptest`` directory within the image, where ``package`` +is the name of the package. + +Running ptest +============= + +The ``ptest-runner`` package installs a shell script that loops through +all installed ptest test suites and runs them in sequence. Consequently, +you might want to add this package to your image. + +Getting Your Package Ready +========================== + +In order to enable a recipe to run installed ptests on target hardware, +you need to prepare the recipes that build the packages you want to +test. Here is what you have to do for each recipe: + +- *Be sure the recipe inherits the* :ref:`ref-classes-ptest` *class:* + Include the following line in each recipe:: + + inherit ptest + + .. note:: + + Classes for common frameworks already exist in :term:`OpenEmbedded-Core + (OE-Core)`, such as: + + - :oe_git:`go-ptest </openembedded-core/tree/meta/classes-recipe/go-ptest.bbclass>` + - :ref:`ref-classes-ptest-cargo` + - :ref:`ref-classes-ptest-gnome` + - :oe_git:`ptest-perl </openembedded-core/tree/meta/classes-recipe/ptest-perl.bbclass>` + - :oe_git:`ptest-python-pytest </openembedded-core/tree/meta/classes-recipe/ptest-python-pytest.bbclass>` + + Inheriting these classes with the ``inherit`` keyword in your recipe will + make the next steps automatic. + +- *Create run-ptest:* This script starts your test. Locate the + script where you will refer to it using + :term:`SRC_URI`. Here is an + example that starts a test for ``dbus``:: + + #!/bin/sh + cd test + make -k runtest-TESTS + +- *Ensure dependencies are met:* If the test adds build or runtime + dependencies that normally do not exist for the package (such as + requiring "make" to run the test suite), use the + :term:`DEPENDS` and + :term:`RDEPENDS` variables in + your recipe in order for the package to meet the dependencies. Here + is an example where the package has a runtime dependency on "make":: + + RDEPENDS:${PN}-ptest += "make" + +- *Add a function to build the test suite:* Not many packages support + cross-compilation of their test suites. Consequently, you usually + need to add a cross-compilation function to the package. + + Many packages based on Automake compile and run the test suite by + using a single command such as ``make check``. However, the host + ``make check`` builds and runs on the same computer, while + cross-compiling requires that the package is built on the host but + executed for the target architecture (though often, as in the case + for ptest, the execution occurs on the host). The built version of + Automake that ships with the Yocto Project includes a patch that + separates building and execution. Consequently, packages that use the + unaltered, patched version of ``make check`` automatically + cross-compiles. + + Regardless, you still must add a ``do_compile_ptest`` function to + build the test suite. Add a function similar to the following to your + recipe:: + + do_compile_ptest() { + oe_runmake buildtest-TESTS + } + +- *Ensure special configurations are set:* If the package requires + special configurations prior to compiling the test code, you must + insert a ``do_configure_ptest`` function into the recipe. + +- *Install the test suite:* The :ref:`ref-classes-ptest` class + automatically copies the file ``run-ptest`` to the target and then runs make + ``install-ptest`` to run the tests. If this is not enough, you need + to create a ``do_install_ptest`` function and make sure it gets + called after the "make install-ptest" completes. diff --git a/poky/documentation/test-manual/reproducible-builds.rst b/poky/documentation/test-manual/reproducible-builds.rst index 91f94a5c74..a6493690cf 100644 --- a/poky/documentation/test-manual/reproducible-builds.rst +++ b/poky/documentation/test-manual/reproducible-builds.rst @@ -91,13 +91,21 @@ run:: oe-selftest -r reproducible.ReproducibleTests.test_reproducible_builds -This defaults to including a ``world`` build so, if other layers are added, it would -also run the tests for recipes in the additional layers. Different build targets -can be defined using the :term:`OEQA_REPRODUCIBLE_TEST_TARGET` variable in ``local.conf``. -The first build will be run using :ref:`Shared State <overview-manual/concepts:Shared State>` if -available, the second build explicitly disables -:ref:`Shared State <overview-manual/concepts:Shared State>` except for recipes defined in -the :term:`OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS` variable, and builds on the +This defaults to including a ``world`` build so, if other layers are added, it +would also run the tests for recipes in the additional layers. Different build +targets can be defined using the :term:`OEQA_REPRODUCIBLE_TEST_TARGET` variable +in ``local.conf``. For example, running reproducibility tests for only the +``python3-numpy`` recipe can be done by setting:: + + OEQA_REPRODUCIBLE_TEST_TARGET = "python3-numpy" + +in local.conf before running the ``oe-selftest`` command shown above. + +Reproducibility builds the target list twice. The first build will be run using +:ref:`Shared State <overview-manual/concepts:Shared State>` if available, the +second build explicitly disables :ref:`Shared State +<overview-manual/concepts:Shared State>` except for recipes defined in the +:term:`OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS` variable, and builds on the specific host the build is running on. This means we can test reproducibility builds between different host distributions over time on the Autobuilder. @@ -105,18 +113,14 @@ If ``OEQA_DEBUGGING_SAVED_OUTPUT`` is set, any differing packages will be saved here. The test is also able to run the ``diffoscope`` command on the output to generate HTML files showing the differences between the packages, to aid debugging. On the Autobuilder, these appear under -https://autobuilder.yocto.io/pub/repro-fail/ in the form ``oe-reproducible + +https://valkyrie.yocto.io/pub/repro-fail/ in the form ``oe-reproducible + <date> + <random ID>``, e.g. ``oe-reproducible-20200202-1lm8o1th``. The project's current reproducibility status can be seen at :yocto_home:`/reproducible-build-results/` -You can also check the reproducibility status on supported host distributions: - -- CentOS: :yocto_ab:`/typhoon/#/builders/reproducible-centos` -- Debian: :yocto_ab:`/typhoon/#/builders/reproducible-debian` -- Fedora: :yocto_ab:`/typhoon/#/builders/reproducible-fedora` -- Ubuntu: :yocto_ab:`/typhoon/#/builders/reproducible-ubuntu` +You can also check the reproducibility status on the Autobuilder: +:yocto_ab:`/valkyrie/#/builders/reproducible`. =============================== Can I test my layer or recipes? diff --git a/poky/documentation/dev-manual/runtime-testing.rst b/poky/documentation/test-manual/runtime-testing.rst index 7a2b42f25a..909448ab2e 100644 --- a/poky/documentation/dev-manual/runtime-testing.rst +++ b/poky/documentation/test-manual/runtime-testing.rst @@ -1,5 +1,6 @@ .. SPDX-License-Identifier: CC-BY-SA-2.0-UK +************************************ Performing Automated Runtime Testing ************************************ @@ -153,7 +154,7 @@ options are available: If you choose "SystemdbootTarget", there are additional requirements and considerations. See the - ":ref:`dev-manual/runtime-testing:selecting systemdboottarget`" section, which + ":ref:`test-manual/runtime-testing:selecting systemdboottarget`" section, which follows, for more information. - *"BeagleBoneTarget":* Choose "BeagleBoneTarget" if you are deploying @@ -179,7 +180,7 @@ Selecting SystemdbootTarget If you did not set :term:`TEST_TARGET` to "SystemdbootTarget", then you do not need any information in this section. You can skip down to the -":ref:`dev-manual/runtime-testing:running tests`" section. +":ref:`test-manual/runtime-testing:running tests`" section. If you did set :term:`TEST_TARGET` to "SystemdbootTarget", you also need to perform a one-time setup of your controller image by doing the following: @@ -402,7 +403,7 @@ defined in :term:`TEST_SUITES`. If your image is already built, make sure the following are set in your ``local.conf`` file:: - INHERIT += "testexport" + IMAGE_CLASSES += "testexport" TEST_TARGET_IP = "IP-address-for-the-test-target" TEST_SERVER_IP = "IP-address-for-the-test-server" @@ -412,18 +413,23 @@ following BitBake command form:: $ bitbake image -c testexport Exporting the tests places them in the :term:`Build Directory` in -``tmp/testexport/``\ image, which is controlled by the :term:`TEST_EXPORT_DIR` +``tmp/testimage/``\ image, which is controlled by the :term:`TEST_EXPORT_DIR` variable. You can now run the tests outside of the build environment:: - $ cd tmp/testexport/image - $ ./runexported.py testdata.json + $ cd tmp/testimage/image + $ ./oe-test runtime + +.. note:: + + You might need to run the image under QEMU or deploy it to your + hardware before you can run the tests. Here is a complete example that shows IP addresses and uses the ``core-image-sato`` image:: - INHERIT += "testexport" + IMAGE_CLASSES += "testexport" TEST_TARGET_IP = "192.168.7.2" TEST_SERVER_IP = "192.168.7.1" @@ -434,8 +440,8 @@ Use BitBake to export the tests:: Run the tests outside of the build environment using the following:: - $ cd tmp/testexport/core-image-sato - $ ./runexported.py testdata.json + $ cd tmp/testimage/core-image-sato + $ ./oe-test runtime Writing New Tests ================= diff --git a/poky/documentation/test-manual/test-process.rst b/poky/documentation/test-manual/test-process.rst index 7bec5ba828..00215385bb 100644 --- a/poky/documentation/test-manual/test-process.rst +++ b/poky/documentation/test-manual/test-process.rst @@ -20,7 +20,7 @@ helps review and test patches and this is his testing tree). We have two broad categories of test builds, including "full" and "quick". On the Autobuilder, these can be seen as "a-quick" and "a-full", simply for ease of sorting in the UI. Use our Autobuilder -:yocto_ab:`console view </typhoon/#/console>` to see where we manage most +:yocto_ab:`console view </valkyrie/#/console>` to see where we manage most test-related items. Builds are triggered manually when the test branches are ready. The @@ -69,7 +69,7 @@ box to "generate an email to QA" is also checked. When the build completes, an email is sent out using the ``send-qa-email`` script in the :yocto_git:`yocto-autobuilder-helper </yocto-autobuilder-helper>` repository to the list of people configured for that release. Release builds -are placed into a directory in https://autobuilder.yocto.io/pub/releases on the +are placed into a directory in https://valkyrie.yocto.io/pub/releases on the Autobuilder which is included in the email. The process from here is more manual and control is effectively passed to release engineering. The next steps include: diff --git a/poky/documentation/test-manual/understand-autobuilder.rst b/poky/documentation/test-manual/understand-autobuilder.rst index 6b4fab4f0b..7f4d1be3cd 100644 --- a/poky/documentation/test-manual/understand-autobuilder.rst +++ b/poky/documentation/test-manual/understand-autobuilder.rst @@ -10,7 +10,7 @@ Execution Flow within the Autobuilder The "a-full" and "a-quick" targets are the usual entry points into the Autobuilder and it makes sense to follow the process through the system starting there. This is best visualized from the :yocto_ab:`Autobuilder -Console view </typhoon/#/console>`. +Console view </valkyrie/#/console>`. Each item along the top of that view represents some "target build" and these targets are all run in parallel. The 'full' build will trigger the diff --git a/poky/documentation/test-manual/yocto-project-compatible.rst b/poky/documentation/test-manual/yocto-project-compatible.rst index 65d924fad9..7a2e00a99e 100644 --- a/poky/documentation/test-manual/yocto-project-compatible.rst +++ b/poky/documentation/test-manual/yocto-project-compatible.rst @@ -38,7 +38,7 @@ Benefits and flexible: it gives users the ultimate power to change pretty much any aspect of the system but as with most things, power comes with responsibility. The Yocto Project would like to see people able to mix and match BSPs with -distro configs or software stacks and be able to merge succesfully. +distro configs or software stacks and be able to merge successfully. Over time, the project identified characteristics in layers that allow them to operate well together. "anti-patterns" were also found, preventing layers from working well together. diff --git a/poky/documentation/toaster-manual/reference.rst b/poky/documentation/toaster-manual/reference.rst index 755b895cee..3050b5d0f5 100644 --- a/poky/documentation/toaster-manual/reference.rst +++ b/poky/documentation/toaster-manual/reference.rst @@ -546,7 +546,7 @@ database. You need to run the ``buildslist`` command first to identify existing builds in the database before using the -:ref:`toaster-manual/reference:\`\`builddelete\`\`` command. Here is an +:ref:`toaster-manual/reference:``builddelete``` command. Here is an example that assumes default repository and :term:`Build Directory` names: .. code-block:: shell @@ -555,7 +555,7 @@ example that assumes default repository and :term:`Build Directory` names: $ python ../bitbake/lib/toaster/manage.py buildslist If your Toaster database had only one build, the above -:ref:`toaster-manual/reference:\`\`buildslist\`\`` +:ref:`toaster-manual/reference:``buildslist``` command would return something like the following:: 1: qemux86 poky core-image-minimal @@ -576,7 +576,7 @@ the database. Prior to running the ``builddelete`` command, you need to get the ID associated with builds by using the -:ref:`toaster-manual/reference:\`\`buildslist\`\`` command. +:ref:`toaster-manual/reference:``buildslist``` command. ``perf`` -------- |
