Re: [docs] [PATCH] migration-guides: add release-notes for 4.0.8

Takayasu Ito
2023-03-11T10:53:05Z

Hi Lee

I would like to suggest some modifications.

Security Fixes in Yocto-4.0.8

libgit: CVE-2023-22742

# https://github.com/libgit2/libgit2/blob/v1.4.5/docs/changelog.md

Fixes in Yocto-4.0.8
> +- Fix missing leading whitespace with ':append'

# I would suggest clarifying which files were targeted for modification.

core-image.bbclass: Fix missing leading whitespace with ':append'
populate_sdk_ext.bbclass: Fix missing leading whitespace with ':append'
ptest-packagelists.inc: Fix missing leading whitespace with ':append'

--
Takayasu Ito
Yocto Project Ambassador
Solution Department Lineo Solutions, Inc.
https://www.lineo.co.jp/english/
Email: ito@lineo.co.jp

On 2023/03/11 14:32, Lee Chee Yang wrote:
> From: Lee Chee Yang <chee.yang.lee@intel.com>
>
> Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
> ---
> .../migration-guides/release-4.0.rst | 1 +
> .../migration-guides/release-notes-4.0.8.rst | 214 ++++++++++++++++++
> 2 files changed, 215 insertions(+)
> create mode 100644 documentation/migration-guides/release-notes-4.0.8.rst
>
> diff --git a/documentation/migration-guides/release-4.0.rst b/documentation/migration-guides/release-4.0.rst
> index 87ba768a2..2294265a4 100644
> --- a/documentation/migration-guides/release-4.0.rst
> +++ b/documentation/migration-guides/release-4.0.rst
> @@ -14,3 +14,4 @@ Release 4.0 (kirkstone)
> release-notes-4.0.5
> release-notes-4.0.6
> release-notes-4.0.7
> + release-notes-4.0.8
> diff --git a/documentation/migration-guides/release-notes-4.0.8.rst b/documentation/migration-guides/release-notes-4.0.8.rst
> new file mode 100644
> index 000000000..9603c6f6e
> --- /dev/null
> +++ b/documentation/migration-guides/release-notes-4.0.8.rst
> @@ -0,0 +1,214 @@
> +.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
> +
> +Release notes for Yocto-4.0.8 (Kirkstone)
> +-----------------------------------------
> +
> +Security Fixes in Yocto-4.0.8
> +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> +
> +- apr-util: Fix :cve:`2022-25147`
> +- apr: Fix :cve:`2022-24963`, :cve:`2022-28331` and :cve:`2021-35940`
> +- bind: Fix :cve:`2022-3094`, :cve:`2022-3736` and :cve:`2022-3924`
> +- git: Ignore :cve:`2022-41953`
> +- git: Fix :cve:`2022-23521` and :cve:`2022-41903`
> +- ppp: Fix :cve:`2022-4603`
> +- python3-certifi: Fix :cve:`2022-23491`
> +- sudo: Fix :cve:`2023-2280`
> +- tar: Fix :cve:`2022-48303`
> +
> +
> +Fixes in Yocto-4.0.8
> +~~~~~~~~~~~~~~~~~~~~
> +
> +- Fix missing leading whitespace with ':append'
> +- apr-util: upgrade to 1.6.3
> +- apr: upgrade to 1.7.2
> +- apt: fix do_package_qa failure
> +- bind: upgrade to 9.18.11
> +- bitbake: bb/utils: include SSL certificate paths in export_proxies
> +- bitbake: bitbake-diffsigs: Make PEP8 compliant
> +- bitbake: bitbake-diffsigs: break on first dependent task difference
> +- bitbake: fetch2/git: Clarify the meaning of namespace
> +- bitbake: fetch2/git: Prevent git fetcher from fetching gitlab repository metadata
> +- bitbake: fetch2/git: show SRCREV and git repo in error message about fixed SRCREV
> +- bitbake: siggen: Fix inefficient string concatenation
> +- bitbake: utils/ply: Update md5 to better report errors with hashlib
> +- bootchart2: Fix usrmerge support
> +- bsp-guide: fix broken git URLs and missing word
> +- build-appliance-image: Update to kirkstone head revision
> +- buildtools-tarball: set pkg-config search path
> +- classes/fs-uuid: Fix command output decoding issue
> +- dev-manual: common-tasks.rst: add link to FOSDEM 2023 video
> +- dev-manual: fix old override syntax
> +- devshell: Do not add scripts/git-intercept to PATH
> +- devtool: fix devtool finish when gitmodules file is empty
> +- diffutils: upgrade to 3.9
> +- gdk-pixbuf: do not use tools from gdk-pixbuf-native when building tests
> +- git: upgrade to 2.35.7
> +- glslang: branch rename master -> main
> +- httpserver: add error handler that write to the logger
> +- image.bbclass: print all QA functions exceptions
> +- kernel/linux-kernel-base: Fix kernel build artefact determinism issues
> +- libc-locale: Fix on target locale generation
> +- libgit2: upgrade to 1.4.5
> +- libjpeg-turbo: upgrade to 2.1.5
> +- libtirpc: Check if file exists before operating on it
> +- libusb1: Link with latomic only if compiler has no atomic builtins
> +- libusb1: Strip trailing whitespaces
> +- linux-firmware: upgrade to 20230117
> +- linux-yocto/5.15: update to v5.15.91
> +- lsof: fix old override syntax
> +- lttng-modules: Fix for 5.10.163 kernel version
> +- lttng-tools: upgrade to 2.13.9
> +- make-mod-scripts: Ensure kernel build output is deterministic
> +- manuals: update patchwork instance URL
> +- meta: remove True option to getVar and getVarFlag calls (again)
> +- migration-guides: add release-notes for 4.0.7
> +- native: Drop special variable handling
> +- numactl: skip test case when target platform doesn't have 2 CPU node
> +- oeqa context.py: fix --target-ip comment to include ssh port number
> +- oeqa dump.py: add error counter and stop after 5 failures
> +- oeqa qemurunner.py: add timeout to QMP calls
> +- oeqa qemurunner.py: try to avoid reading one character at a time
> +- oeqa qemurunner: read more data at a time from serial
> +- oeqa ssh.py: add connection keep alive options to ssh client
> +- oeqa ssh.py: move output prints to new line
> +- oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal
> +- oeqa/selftest/bbtests: Update message lookup for test_git_unpack_nonetwork_fail
> +- oeqa/selftest/locales: Add selftest for locale generation/presence
> +- poky.conf: Update SANITY_TESTED_DISTROS to match autobuilder
> +- poky.conf: bump version for 4.0.8
> +- profile-manual: update WireShark hyperlinks
> +- python3-pytest: depend on python3-tomli instead of python3-toml
> +- qemu: fix compile error
> +- quilt: fix intermittent failure in faildiff.test
> +- quilt: use upstreamed faildiff.test fix
> +- recipe_sanity: fix old override syntax
> +- ref-manual: document SSTATE_EXCLUDEDEPS_SYSROOT
> +- scons.bbclass: Make MAXLINELENGTH overridable
> +- scons: Pass MAXLINELENGTH to scons invocation
> +- sdkext/cases/devtool: pass a logger to HTTPService
> +- spirv-headers: set correct branch name
> +- sudo: upgrade to 1.9.12p2
> +- system-requirements.rst: add Fedora 36 and AlmaLinux 8.7 to list of supported distros
> +- testimage: Fix error message to reflect new syntax
> +- update-alternatives: fix typos
> +- vulkan-samples: branch rename master -> main
> +
> +
> +Known Issues in Yocto-4.0.8
> +~~~~~~~~~~~~~~~~~~~~~~~~~~~
> +
> +- N/A
> +
> +
> +Contributors to Yocto-4.0.8
> +~~~~~~~~~~~~~~~~~~~~~~~~~~~
> +
> +- Alejandro Hernandez Samaniego
> +- Alexander Kanavin
> +- Alexandre Belloni
> +- Armin Kuster
> +- Arnout Vandecappelle
> +- Bruce Ashfield
> +- Changqing Li
> +- Chee Yang Lee
> +- Etienne Cordonnier
> +- Harald Seiler
> +- Kai Kang
> +- Khem Raj
> +- Lee Chee Yang
> +- Louis Rannou
> +- Marek Vasut
> +- Marius Kriegerowski
> +- Mark Hatle
> +- Martin Jansa
> +- Mauro Queiros
> +- Michael Opdenacker
> +- Mikko Rapeli
> +- Mingli Yu
> +- Narpat Mali
> +- Niko Mauno
> +- Pawel Zalewski
> +- Peter Kjellerstedt
> +- Richard Purdie
> +- Rodolfo Quesada Zumbado
> +- Ross Burton
> +- Sakib Sajal
> +- Schmidt, Adriaan
> +- Steve Sakoman
> +- Thomas Roos
> +- Ulrich Ölmann
> +- Xiangyu Chen
> +
> +
> +Repositories / Downloads for Yocto-4.0.8
> +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> +
> +poky
> +
> +- Repository Location: :yocto_git:`/poky`
> +- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
> +- Tag: :yocto_git:`yocto-4.0.8 </poky/log/?h=yocto-4.0.8>`
> +- Git Revision: :yocto_git:`a361fb3df9c87cf12963a9d785a9f99faa839222 </poky/commit/?id=a361fb3df9c87cf12963a9d785a9f99faa839222>`
> +- Release Artefact: poky-a361fb3df9c87cf12963a9d785a9f99faa839222
> +- sha: af4e8d64be27d3a408357c49b7952ce04c6d8bb0b9d7b50c48848d9355de7fc2
> +- Download Locations:
> + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2
> + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/poky-a361fb3df9c87cf12963a9d785a9f99faa839222.tar.bz2
> +
> +openembedded-core
> +
> +- Repository Location: :oe_git:`/openembedded-core`
> +- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
> +- Tag: :oe_git:`yocto-4.0.8 </openembedded-core/log/?h=yocto-4.0.8>`
> +- Git Revision: :oe_git:`b20e2134daec33fbb8ce358d984751d887752bd5 </openembedded-core/commit/?id=b20e2134daec33fbb8ce358d984751d887752bd5>`
> +- Release Artefact: oecore-b20e2134daec33fbb8ce358d984751d887752bd5
> +- sha: 63cce6f1caf8428eefc1471351ab024affc8a41d8d7777f525e3aa9ea454d2cd
> +- Download Locations:
> + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2
> + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/oecore-b20e2134daec33fbb8ce358d984751d887752bd5.tar.bz2
> +
> +meta-mingw
> +
> +- Repository Location: :yocto_git:`/meta-mingw`
> +- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
> +- Tag: :yocto_git:`yocto-4.0.8 </meta-mingw/log/?h=yocto-4.0.8>`
> +- Git Revision: :yocto_git:`a90614a6498c3345704e9611f2842eb933dc51c1 </meta-mingw/commit/?id=a90614a6498c3345704e9611f2842eb933dc51c1>`
> +- Release Artefact: meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1
> +- sha: 49f9900bfbbc1c68136f8115b314e95d0b7f6be75edf36a75d9bcd1cca7c6302
> +- Download Locations:
> + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
> + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-mingw-a90614a6498c3345704e9611f2842eb933dc51c1.tar.bz2
> +
> +meta-gplv2
> +
> +- Repository Location: :yocto_git:`/meta-gplv2`
> +- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
> +- Tag: :yocto_git:`yocto-4.0.8 </meta-gplv2/log/?h=yocto-4.0.8>`
> +- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
> +- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
> +- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
> +- Download Locations:
> + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
> + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
> +
> +bitbake
> +
> +- Repository Location: :oe_git:`/bitbake`
> +- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
> +- Tag: :oe_git:`yocto-4.0.8 </bitbake/log/?h=yocto-4.0.8>`
> +- Git Revision: :oe_git:`9bbdedc0ba7ca819b898e2a29a151d6a2014ca11 </bitbake/commit/?id=9bbdedc0ba7ca819b898e2a29a151d6a2014ca11>`
> +- Release Artefact: bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11
> +- sha: 8e724411f4df00737e81b33eb568f1f97d2a00d5364342c0a212c46abb7b005b
> +- Download Locations:
> + http://downloads.yoctoproject.org/releases/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2
> + http://mirrors.kernel.org/yocto/yocto/yocto-4.0.8/bitbake-9bbdedc0ba7ca819b898e2a29a151d6a2014ca11.tar.bz2
> +
> +yocto-docs
> +
> +- Repository Location: :yocto_git:`/yocto-docs`
> +- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
> +- Tag: :yocto_git:`yocto-4.0.8 </yocto-docs/log/?h=yocto-4.0.8>`
> +- Git Revision: :yocto_git:`16ecbe028f2b9cc021267817a5413054e070b563 </yocto-docs/commit/?id=16ecbe028f2b9cc021267817a5413054e070b563>`
> +
>
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#3784): https://lists.yoctoproject.org/g/docs/message/3784
> Mute This Topic: https://lists.yoctoproject.org/mt/97536590/3617373
> Group Owner: docs+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/docs/unsub [ito@lineo.co.jp]
> -=-=-=-=-=-=-=-=-=-=-=-
>