2.7 Release Notes WIP

From Yocto Project
Revision as of 12:55, 30 April 2019 by PaulEggleton (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Security Fixes


  • avahi: CVE-2017-6519
  • bind: CVE-2018-5738, CVE-2018-5740, CVE-2018-5744, CVE-2018-5745, CVE-2019-6465
  • bluez5: CVE-2018-10910
  • cairo: CVE-2018-19876, CVE-2019-6461, CVE-2019-6462
  • curl: CVE-2018-16890, CVE-2019-3822, CVE-2019-3823
  • gettext: CVE-2018-18751
  • ghostscript: CVE-2019-6116, CVE-2019-3835, CVE-2019-3838
  • glibc: CVE-2019-7309, CVE-2019-9169
  • icu: CVE-2018-18928
  • libarchive: CVE-2019-1000019, CVE-2019-1000020, CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000879, CVE-2018-1000880
  • libcroco: CVE-2017-7961
  • libexif: CVE-2016-6328, CVE-2018-20030
  • libid3tag: CVE-2004-2779
  • libpng: fix CVE-2019-7317
  • libsndfile1: CVE-2017-14245, CVE-2017-14246, CVE-2017-12562, CVE-2018-19758, CVE-2017-17456, CVE-2017-17457, CVE-2018-19661, CVE-2018-19662, CVE-2018-19432, CVE-2019-3832
  • linux-yocto/4.19: CVE-2019-7221, CVE-2019-6974, CVE-2019-7222
  • nettle: CVE-2018-16868, CVE-2018-16869
  • nss: CVE-2018-12404
  • openssl: CVE-2019-1543
  • python-native: CVE-2018-14647
  • qemu: CVE-2018-16872, CVE-2018-20124, CVE-2018-20125, CVE-2018-20126, CVE-2018-20191, CVE-2018-20216, CVE-2019-3812
  • sqlite3: CVE-2019-9936, CVE-2019-9937
  • systemd: CVE-2019-6454, CVE-2018-16864, CVE-2018-16865, CVE-2018-16866


New Features / Enhancements


  • Linux kernel 5.0/4.19, gcc 8.3, glibc 2.29 and ~230 other recipe upgrades
  • Added support for virgl GL acceleration within QEMU / runqemu
  • Added support SLiRP user-space networking in runqemu for easier networking within containers
  • New "packagegroup-core-base-utils" packagegroup to easily bring in full-featured versions of standard system utilities
  • New "ccmake" class to enable the CMake curses UI
  • New "mcextend" class to enable easily creating multiconfig recipe variants
  • New "xmlcatalog" class to update the XML catalogue
  • New recipes: eglinfo-wayland, inetutils, libdazzle, libjitterentropy, libmodulemd, libpsl, vim, virglrenderer
  • Architecture-specific changes:
- linux-yocto: add baseline ARC support
- qemuarm64: Add graphics support
- qemuarm: Swap for an arm7ve (A15) configuration
- qemumips64: change tune to mips64r2
- qemumips: Enable the poweroff driver
- arch-armv7*.inc: Add Cortex vfpv4-d16 support
- arch-armv8a.inc: add tune include for armv8
- arm-tunes: Remove -march option if mcpu is already added
- ThunderX: update the armv8a rules
- tune-cortexa32: add tunes for ARM Cortex-A32
- tune-cortexa35: add tunes for ARM Cortex-A35
- tune-cortexa53: add tunes for ARM Cortex-A53
- tune-cortexa5.inc: Add tune options for vfpv4
- tune-cortexa72: add tunes for ARM Cortex-A72
- linux-yocto/4.19: introduce qemuriscv64 and qemuarma15 BSP definitions
- gcc: Enable secureplt for powerpc64 target too
- goarch: Add riscv64
- gstreamer: Add RISC-V support
- kernel-fitimage: support RISC-V
- lib/oe/elf.py: Add powerpc64 architecture definition for musl
- webkitgtk: Enable building for ARC architecture
- linux-yocto: pinctrl config change for cannonlake
- mdadm: add mdmon service to support Intel VROC
- mesa: Allow building the r600 driver
- locale: Allow usage of cross-localedef for ARC
- Added armeb support to meson class
  • Kernel-related changes:
- kernel: defaults for KBUILD_BUILD_USER and KBUILD_BUILD_HOST are now soft
- kernel-fitimage: Introduce a way to provide external dtb
- kernel-yocto: allow kernel-meta repositories to be patched
  • Introduce sstate hash equivalence server to accelerate subsequent builds by matching compatible sstate
  • New "resulttool" for managing and storing test results and executing manual tests
  • Significant cleanup of ptests, 100% pass rate for python3, and new ptests for json-glib, opkg, ruby
  • devtool improvements:
- Handle exporting generated kernel config fragments
- Support kmeta directory usage with devtool modify/finish
- Add "check-upgrade-status" command to print an overall list of recipes that can be updated
- Allow allow use of alternate ssh command with devtool deploy-target
  • Changed default debug split to make separate source packages
  • Add "src-pkgs" IMAGE_FEATURES item to install all debug sources (default enabled for the SDK)
  • Extended recipes to native: libaio, libepoxy, gtk+3, mesa, adwaita-icon-theme, hicolor-icon-theme, liberation-fonts, libxi, libxtst, at-spi2-atk, at-spi2-core, vte
  • Extended recipes to nativesdk: gtk+3, libepoxy, fontconfig, libice, libsm, libxft, libxml-namespacesupport-perl, libxml-sax-base-perl, libxml-sax-perl, libxt, mesa, gdk-pixbuf, adwaita-icon-theme, hicolor-icon-theme, cairo, harfbuzz, libjpeg-turbo, pango, liberation-fonts, libxcomposite, libxdamage, libxi, libxtst, at-spi2-atk, at-spi2-core, atk, vte
  • Added meson to standard host SDK packages
  • Moved a number of recipes from autotools to meson
  • Bitbake's gitsm fetcher reworked to support MIRRORS and BB_NO_NETWORK
  • Removed site_config and glibc-initial
  • Dropped gcc-cross-initial and use gcc-cross instead
  • libpcre: enable JIT compilation by default for improved performance
  • asciidoc: use Python 3 port
  • bind-utils: Install nslookup
  • busybox: Enable domain search list support
  • busybox: Enable mountpoint and setsid applets
  • Enable ccache to work properly for several recipes and allow it to be shared between different builds
  • classes/buildhistory: display modified git branches
  • classes/icecc: Add ICECC_REMOTE_CPP variable
  • classes/testsdk: Split implementation into classes
  • cmake: Support Eclipse and other cmake generators
  • classes/devicetree: Add support to compile overlays separately
  • classes/devicetree: Add virtual provider for dtb
  • initramfs-framework: add lvm module
  • sqlite3: add PACKAGECONFIG options to allow disabling functions to enable shrinking for very small targets
  • Added PACKAGECONFIG options to alsa-plugins, consolekit, curl, gconf, gst-plugins-bad, gtk+3, json-glib, libpcre, libsdl2, mesa, mtd-utils, openssl, pulseaudio, squashfs-tools, systemd, sqlite3, util-linux, wget
  • initscripts: Add support for /etc/default/timestamp
  • libusb1: Add udev support
  • libunwind: Enable building static archive on musl
  • linux-firmware: recommend split up packages
  • linux-firmware: split out liquidio firmware
  • mdadm: add init and service scripts
  • meson: support multiple cross configuration files
  • native: Enable RDEPENDS handling
  • opkg: add --ignore-recommends flag and use it for BAD_RECOMMENDATIONS
  • patch/insane: Rework patch fuzz handling
  • ptest.bbclass: Add feature to populate a binary directory
  • python: add tk support
  • testimage: Add possibility to pass parameters to qemu/runqemu
  • runqemu: Make QB_MEM easier to set
  • qemu: split the native version into usermode and system parts
  • scripts: Add oe-pylint
  • runqemu: Add serialstdio mode
  • image_types: add base64 conversion
  • u-boot: Add mkenvimage tool
  • u-boot: Support menuconfig for u-boot
  • u-boot: install dumpimage and fit_check_sign in u-boot-tools
  • util-linux: package each binary separately
  • wic: allow bitbake variables in kickstart files
  • wic: bootimg-efi: add a title source parameter
  • gsettings: allow the schemas to be in any package
  • insane.bbclass: Add configure-unsafe and configure-gettext
  • insane.bbclass: support unrecognized configure checking for Meson
  • insane: Clarify GNU_HASH warning
  • base.bbclass: Display name of licenses which caused SkipRecipe
  • distro_features_check.bbclass: show all error info at one time
  • bitbake: Allow arguments in FAKEROOTCMD
  • bitbake: bitbake-diffsigs: Support recursive deps with signature files
  • bitbake: fetch2: Print SCMs list when SRCREV_FORMAT is not set
  • rpm: produce sane amount of logging when creating a rootfs
  • licence: Add license file CC-BY-SA-4.0
  • Set default CONNECTIVITY_CHECK_URIS for OE-Core
  • Enabled config cache for gettext, ncurses & gcc-runtime for a slight speedup in do_configure
  • cmake-native: Set --parallel for configure for significant speedup
  • lib/oe/recipeutils.py: parallelize upstream version checks
  • sstate: add support for caching shared workdir tasks
  • sstate: two improvements to performance for large sstate caches
  • Removed lrzsz from packagegroup-self-hosted and packagegroup-core-tools-testapps
  • glibc-locale: enable progress meter for the do_package task


Recipe Upgrades


  • acpid: upgrade 2.0.30 -> 2.0.31
  • adwaita-icon-theme: upgrade 3.28.0 -> 3.30.1
  • alsa-lib: 1.1.6 -> 1.1.8
  • alsa-plugins: 1.1.6 -> 1.1.8
  • alsa-tools: 1.1.6 -> 1.1.7
  • alsa-utils: 1.1.6 -> 1.1.8
  • apr: upgrade 1.6.3 -> 1.6.5
  • atk: upgrade 2.28.1 -> 2.30.0
  • at-spi2-atk: upgrade 2.26.2 -> 2.30.0
  • at-spi2-core: upgrade 2.28.0 -> 2.30.0
  • at: upgrade to 3.1.23
  • bind: update to 9.11.5-P4
  • binutils: upgrade to 2.32
  • blktool: update to 4-7.1
  • bmap-tools: update from 3.4 to 3.5
  • boost: update to 1.69.0
  • btrfs-tools: update to 4.20.1
  • busybox: update to 1.30.1
  • ca-certificates: upgrade 20180409 -> 20190110
  • cairo: upgrade 1.14.12 -> 1.16.0
  • ccache: 3.4.2 -> 3.6
  • clutter-gst-3.0: upgrade 3.0.26 -> 3.0.27
  • cmake: update to 3.14.1
  • connman: update to 1.36
  • createrepo-c: update to 0.12.1
  • cryptodev: 1.9 -> 1.10
  • cups: upgrade to 2.2.10
  • curl: upgrade to 7.64.0
  • dbus-test: upgrade to 1.12.12
  • dbus: upgrade to 1.12.12
  • debianutils: update to 4.8.6.1
  • diffutils: upgrade to 3.7
  • dmidecode: update to 3.2
  • dnf: update to 4.1.0
  • dpkg: Upgrade to 1.19.4
  • dropbear: update to 2019.77
  • e2fsprogs: 1.44.3 -> 1.44.5
  • ed: upgrade 1.14.2 -> 1.15
  • eglinfo: upgrade SRCREV to 223817ee3798
  • elfutils: 0.174 -> 0.176
  • epiphany: update to 3.30.3
  • ethtool: 4.17 -> 4.19
  • eudev: upgrade 3.2.5 -> 3.2.7
  • ffmpeg: update to 4.1.1
  • file: upgrade 5.34 -> 5.36
  • fts: Bump FTS to version 1.2.7
  • gcc: Update to 8.3 latest on 8.x release
  • gcr: upgrade 3.28.0 -> 3.28.1
  • gdbm: update to 1.18.1
  • gdb: Upgrade 8.2 -> 8.2.1
  • gdk-pixbuf: update to 2.38.0
  • ghostscript: 9.25 -> 9.26
  • git: 2.18.1 -> 2.20.1
  • glib-2.0: upgrade 2.58.0 -> 2.58.3
  • glibc: Update to 2.29 release
  • glib-networking: upgrade 2.54.1 -> 2.60.1
  • gnome-desktop-testing: upgrade to 2018.1
  • gnu-config: upgrade to 20181128 revision
  • gnu-efi: upgrade 3.0.8 -> 3.0.9
  • gnupg: upgrade 2.2.9 -> 2.2.13
  • gnutls: update to 3.6.5
  • go: add recipes for 1.12.1 and make it default
  • go: Upgrade 1.11.1 -> 1.11.4 minor release
  • gobject-introspection: update to 1.58.3
  • gpgme: 1.11.1 -> 1.12.0
  • grep: upgrade 3.1 -> 3.3
  • gsettings-desktop-schemas: upgrade 3.28.0 -> 3.28.1
  • gst-examples: upgrade to latest revision
  • gstreamer1.0: upgrade to version 1.14.4
  • gstreamer1.0-libav: upgrade to version 1.14.4
  • gstreamer1.0-omx: upgrade to version 1.14.4
  • gstreamer1.0-plugins-bad: upgrade to version 1.14.4
  • gstreamer1.0-plugins-base: upgrade to version 1.14.4
  • gstreamer1.0-plugins-good: upgrade to version 1.14.4
  • gstreamer1.0-plugins-ugly: upgrade to version 1.14.4
  • gstreamer1.0-python: upgrade to version 1.14.4
  • gstreamer1.0-rtsp-server: upgrade to version 1.14.4
  • gstreamer1.0-vaapi: upgrade to version 1.14.4
  • gst-validate: upgrade 1.14.2 -> 1.14.4
  • gtk+3: update to 3.24.5
  • gzip: upgrade 1.9 -> 1.10
  • harfbuzz: upgrade 1.8.8 -> 2.3.1
  • hdparm: upgrade 9.56 -> 9.58
  • i2c-tools: upgrade 4.0 -> 4.1
  • icu: update to 63.1
  • iproute2: 4.18.0 -> 4.19.0
  • iso-codes: upgrade 4.1 -> 4.2
  • json-glib: upgrade 1.4.2 -> 1.4.4
  • kexec-tools: update 2.0.19
  • kmod: upgrade to 26
  • kmscube: update to latest commit
  • less: upgrade 530 -> 550
  • libassuan: update to 2.5.3
  • libatomic-ops: upgrade 7.6.6 -> 7.6.8
  • libcap: upgrade 2.25 -> 2.26
  • libcomps: upgrade 0.1.8 -> 0.1.10
  • libdnf: update to 0.26.0
  • libdrm: Upgrade 2.4.94 -> 2.4.97
  • libepoxy: upgrade 1.5.2 -> 1.5.3
  • liberror-perl: upgrade 0.17026 -> 0.17027
  • libevdev: upgrade 1.5.9 -> 1.6.0
  • libfm-extra: upgrade 1.3.0.2 -> 1.3.1
  • libfm: upgrade 1.3.0.2 -> 1.3.1
  • libfontenc: update to 1.1.4
  • libgcrypt: upgrade 1.8.3 -> 1.8.4
  • libgpg-error: Bump to version 1.35
  • libinput: upgrade 1.11.3 -> 1.12.6
  • libjpeg-turbo: upgrade 2.0.0 -> 2.0.2
  • libmodulemd: update to 2.1.0
  • libpcap: upgrade 1.8.1 -> 1.9.0
  • libpcre2: update to 10.32
  • libpcre: upgrade to 8.43
  • libpipeline: update to 1.5.1
  • libpng: upgrade 1.6.35 -> 1.6.36
  • librepo: update to 1.9.4
  • libsdl2: upgrade 2.0.8 -> 2.0.9
  • libsecret: upgrade 0.18.6 -> 0.18.7
  • libsm: update to 1.2.3
  • libsolv: update to 0.7.3
  • libsoup: upgrade to 2.64.2
  • libunwind: Upgrade to 1.3.1 release
  • liburcu: upgrade 0.10.1 -> 0.10.2
  • libva: update 2.2.0 -> 2.4.0
  • libva-utils: 2.2.0 -> 2.4.0
  • libwebp: update to 1.0.2
  • libx11-diet: update to 1.6.7
  • libx11: update to 1.6.7
  • libxau: upgrade 1.0.8 -> 1.0.9
  • libxcb: update to 1.13.1
  • libxcomposite: update to 0.4.5
  • libxcrypt: Upgrade to 4.4.2
  • libxcursor: update 1.2.0
  • libxdamage: update to 1.1.5
  • libxkbcommon: update to 0.8.4
  • libxslt: update to 1.1.33
  • lighttpd: update to 1.4.53
  • linux-firmware: Bump revision to 7bc2464
  • linux-libc-headers: update to 5.x headers
  • linux-yocto: introduce 4.19 recipes (4.19.30)
  • linux-yocto: introduce 5.0.3 recipes
  • linux-yocto-rt/4.19: update to -rt16
  • llvm: upgrade to 8.0.0
  • logrotate: upgrade 3.14.0 -> 3.15.0
  • ltp: Bump to 20190115
  • lttng-modules: upgrade 2.10.7 -> 2.10.8
  • lttng-tools: Upgrade 2.9.5 -> 2.10.6
  • lttng-ust: upgrade 2.10.1 -> 2.10.3
  • lz4: upgrade 1.8.2 -> 1.8.3
  • lzip: upgrade 1.20 -> 1.21
  • lzop: upgrade 1.03 -> 1.04
  • man-db: 2.8.3 -> 2.8.4
  • mc: upgrade 4.8.21 -> 4.8.22
  • mdadm: Upgrade to 4.1
  • menu-cache: upgrade 1.0.2 -> 1.1.0
  • mesa: Update 18.1.9 -> 19.0.1
  • meson: update to 0.49.2
  • mklibs-native: 0.1.43 -> 0.1.44
  • mobile-broadband-provider-info: upgrade 20170310 -> 20190116
  • mpfr: Upgrade to 4.0.2 release
  • mtools: upgrade 4.0.18 -> 4.0.19
  • musl: Upgrade to master beyond 1.1.21
  • nasm: Upgrade 2.13.03 -> 2.14.02
  • ncurses: upgrade 6.1 -> 6.1+20181013
  • netbase: update to 5.6
  • nettle: update to 3.4.1
  • nfs-utils: Upgrade to 2.3.3
  • ninja: update to 1.9.0
  • nspr: update 4.21
  • nss: update to 3.42.1
  • ofono: upgrade 1.24 -> 1.25
  • openssh: Update to 7.9
  • openssl10: update to 1.0.2r
  • openssl: update to 1.1.1b
  • opkg: upgrade to version 0.4.0
  • opkg-utils: upgrade to version 0.4.0
  • p11-kit: upgrade 0.23.14 -> 0.23.15
  • pcmanfm: upgrade 1.3.0 -> 1.3.1
  • perl: add a version that builds the recipe using perl-cross, and update to 5.28.1
  • piglit: upgrade to current HEAD
  • pixman: upgrade 0.34.0 -> 0.38.0
  • pkgconf: upgrade 1.5.3 -> 1.6.0
  • powertop: update to 2.10
  • pseudo: update to latest master
  • psmisc: update to 23.2
  • ptest-runner: Upgrade to 2.3.1
  • python3-gitdb: upgrade 2.0.4 -> 2.0.5
  • python3-pbr: upgrade to 5.1.2
  • python3-pip: upgrade 18.0 -> 19.0.2
  • python3-setuptools: upgrade 40.0.0 -> 40.8.0
  • python3-six: upgrade 1.11.0 -> 1.12.0
  • python3-smmap: upgrade to 2.0.5
  • python3: upgrade to 3.7.2
  • qemu: Bump to version 3.1
  • readline: upgrade 7.0 -> 8.0
  • rng-tools: 5 -> 6.6
  • rpcbind: 0.2.4 -> 1.2.5
  • rpm: update to 4.14.2.1
  • ruby: upgrade 2.5.1 -> 2.5.3
  • sbc: upgrade 1.3 -> 1.4
  • sqlite3: Update to 3.27.2
  • strace: upgrade to version 4.26
  • subversion: upgrade 1.10.0 -> 1.11.1
  • sudo: upgrade to 1.8.27
  • syslinux: upgrade to 6.04-pre2
  • sysprof: update to 3.30.2
  • sysstat: upgrade to 12.1.3
  • systemd-boot: upgrade to 241
  • systemd: Update to systemd-stable v241-stable release
  • systemtap: update to enable 5.0 kernel capabilities
  • tar: upgrade to 1.31
  • tcl: Upgrade to 8.6.9
  • tiff: update to 4.0.10
  • tzdata/tzcode-native: update to 2019a
  • u-boot: Upgrade to 2019.01 release
  • vala: update to 0.42.5
  • wayland-protocols: upgrade 1.16 -> 1.17
  • wayland: upgrade 1.16.0 -> 1.17.0
  • webkitgtk: update to 2.22.7
  • wget: upgrade 1.19.5 -> 1.20.1
  • wpa-supplicant: update to 2.7
  • x264: update to latest on stable branch
  • xev: update to 1.2.3
  • xf86-input-libinput: update to 0.28.2
  • xf86-video-intel: update to latest
  • xhost: update to 1.0.8
  • xinit: update to 1.4.1
  • xkeyboard-config: update to 2.26
  • xmodmap: update to 1.0.10
  • xprop: update to 1.2.4
  • xserver-xorg: update to 1.20.4
  • xvinfo: update to 1.1.4
  • yocto-uninative: Update to 2.4


license


The following corrections have been made to the LICENSE values set by recipes:

  • socat: corrected LICENSE to be GPLv2 rather than GPLv2+
  • libgfortran: Set license to GPL-3.0-with-GCC-exception
  • elfutils: removed Elfutils-Exception and set GPLv2 for shared libraries


Known Issues


None