-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------
yocto-2.7.2 Release Notes
- -------------------------

- ----------------------
Repositories/Downloads
- ----------------------

Repository Name: Poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: warrior
Tag: yocto-2.7.2
Git revision: d0f73121551dc98f6924cd77952bf9ebf5ef3dd7
Release Artefact: poky-warrior-21.0.2
md5: 43c992f1f013d721adf7d37b63c9010a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.2/poky-warrior-21.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7.2/poky-warrior-21.0.2.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: warrior
Tag: 2019-04.2-warrior
Git revision: 726c3b92298981f5aa2f2449ceeec7b4bf84ed29
Release Artefact: oecore-warrior-21.0.2
md5: a03a04400fc71a643b2e2a812f86cfd9
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.2/oecore-warrior-21.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7.2/oecore-warrior-21.0.2.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: warrior
Tag: yocto-2.7.2
Git revision: 10695afe8cd406844e0d0dd868c11677e07557d4
Release Artefact: meta-mingw-warrior-21.0.2
md5: 69bde703f98272ea99925a4b85423ca5
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.2/meta-mingw-warrior-21.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7.2/meta-mingw-warrior-21.0.2.tar.bz2

Repository Name: meta-intel
Repository Location: https://git.yoctoproject.org/git/meta-intel
Branch: warrior
Tag: yocto-2.7.2
Git revision: ca26bed652722167b2dbe0042cfc2406029e9c6c
Release Artefact: meta-intel-warrior-21.0.2
md5: 2b3f01de94e39a463db8ffd07585d3cf
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.2/meta-intel-warrior-21.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7.2/meta-intel-warrior-21.0.2.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: warrior
Tag: yocto-2.7.2
Git revision: d5d9fc9a4bbd365d6cd6fe4d6a8558f7115c17da
Release Artefact: meta-gplv2-warrior-21.0.2
md5: 455a34eca173bdeb9ff8d6f94d77cb67
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-2.7.2/meta-gplv2-warrior-21.0.2.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-2.7.2/meta-gplv2-warrior-21.0.2.tar.bz2


- ---------------
 Known Issues
- ---------------
N/A


- ---------------
Security Fixes
- ---------------
file: fix CVE-2019-18218
patch: the CVE-2019-13638 fix also handles CVE-2018-20969
python3: CVE-2019-16056
libxslt: fix CVE-2019-18197
libtiff: fix CVE-2019-17546
tiff: fix CVE-2019-14973
go: fix CVE-2019-16276
sudo: fix CVE-2019-14287
libgcrypt: fix CVE-2019-12904
python: Fix CVE-2019-10160
python: CVE-2019-16056
python: include CVE patches for python-native as well
libcroco: Fix two CVEs
unzip: Fix CVE-2019-13232
qemu: Fix CVE-2019-8934
gcc: Security fix for CVE-2019-15847
Curl: Security fix for CVE-2019-5482
gcc-8.3: Security fix for CVE-2019-14250
gcc: CVE-2018-12886
glib-2.0: fix CVE-2019-13012
pango: fix CVE-2019-1010238
binutils: fix CVE-2019-14250 CVE-2019-14444
patch: fix CVE-2019-13638
rsync: fix CVEs for included zlib
qemu: fix CVE-2018-20815
ghostscript: fix CVE-2019-3839
python3: fix CVE-2019-9740
patch: fix CVE-2019-13636
libsdl: CVE fixes
tiff: fix CVE-2019-7663
tiff: fix CVE-2019-6128
libid3tag: CVE-2017-11551 is the same as CVE-2004-2779
libid3tag: handle unknown encodings (CVE-2017-11550)
glibc: CVE-2018-20796 is same as CVE-2019-9169
libxslt: fix CVE-2019-13117 CVE-2019-13118
python: fix CVE-2019-9740
binutils: CVE-2019-9070 is same as CVE-2019-9071
binutils: fix CVE-2019-12972 CVE-2019-9071
curl: fix CVE-2019-5435 CVE-2019-5436
python3: fix CVE-2018-20852 CVE-2019-9636
bzip2: fix CVE-2019-12900
wget: fix CVE-2019-5953
gstreamer1.0-plugins-base: fix CVE-2019-9928
vim: fix CVE-2019-12735
expat: fix CVE-2018-20843


- ---------------
Fixes
- ---------------
pseudo: Add statx support to fix fedora30 issues
pseudo: Drop static linking to sqlite3
pseudo: Fix openat() with a symlink pointing to a directory
python3: Upgrade 3.7.4 -> 3.7.5
python3: fix the test_locale output format
python3: Fix .pyc file reproduciblility
python3: Reformat sysconfig
python3: python3: Fix build error x86->x86
python3: fix build on softfloat mips
python3: fix do_install fail for parallel buiild
lib/oe/lsb: Make sure the distro ID is always lowercased
devtool: finish: Add suppport for the --no-clean option
devtool: finish: Keep patches ordered when updating bbappend
tzdata: Correct the packaging of /etc/localtime and /etc/timezone
package_rpm.bbclass: Remove a misleading bb.note()
devtool: Avoid failure for recipes with S == WORKDIR and no local files
nativesdk-meson: Remove some unused variables
meson.bbclass: Remove the MESON_*_ARGS variables
meson: Backport patch to handle strings in cross file args
go-1.12: update to 1.12.9 minor release
go: Upgrade 1.12.5 -> 1.12.6
go: update 1.12.1->1.12.5
bitbake: fetch2: Ensure cached url data is matched to a datastore
bitbake: bitbake-worker child process create group before registering SIGTERM handler
build-appliance-image: Update to warrior head revision
poky.conf: Bump version for 2.7.2 warrior release
qemu: update to 3.1.1.1
openssl: make OPENSSL_ENGINES match install path
python: add tk-lib as runtime dependency for python-tkinter
linux-yocto: add drm-bochs support
linux-yocto/4.19: make drm-bochs feature available
kernel-yocto: import security fragments from meta-security
linux-yocto: arch/x86/boot: use prefix map to avoid embedded paths
linux-yocto: bsp/beaglebone: support qemu -machine virt
linux-yocto/5.0: make scsi-debug include scsi core configs
linux-yocto/5.0: bsp: add basic xilinx zynqmp support
gnutls:upgrade 3.6.7 -> 3.6.8
kernel.bbclass: fix installation of modules signing certificates
Documenation: Prepared for the 2.7.2 release
ref-manual, dev-manual: Added CMake toolchain files.
ref-manual: Updated the BUSYBOX_SPLIT_SUID variable.
ref-manual: Removed deprecated link to ref-classes-bluetooth
dev-manual: Added info to "Selecting an Initialization Manager"
kernel-dev: don't use _append +=
conf/poky: add Fedora 30 and Opensuse Leap 15.1 to supported distributions
conf/poky: add debian-10 to the supported distribution list
meta-yocto-bsp: Bump to the latest stable kernel for all the BSP
bitbake: cookerdata: Add mc conffiles hashes to cache hash
uninative: Update to 2.7 release
meson: Fix native patch to python3
qemu: fix build issue on new hosts with glibc 2.30
systemd: update SRCREV for systemd v241-stable
classes/image-live.bbclass: Don't hardcode cpio.gz
json-c: Don't --enable-rdrand
python3: upgrade 3.7.3 -> 3.7.4
python: update to 3.7.3
runqemu: Add support for kvm on aarch64
qemuarm64: Add QB_CPU_KVM to allow kvm acceleration
cve-check: backport rewrite from master
kernel-uboot: compress arm64 kernels
uboot: fixes to uboot-extlinux-config attribute values
useradd: Ensure do_populate_sysroot has dependency on useradd variables
useradd: Fix build architecture corruption of sstate artefacts
multilib.bbclass: Reduce ALTERNATIVE_PRIORITY for extended recipes
libgpg-error: Fix build with gawk 5.x
libxcrypt: Fix the build with -Os
kernel-devsrc: tweak for v5.3+
kernel-fitimage: uboot-sign: fix missing signature
glibc / glibc-locale: Fix stash_locale determinism problems
glibc/glibc-locale: Fix do_stash_locale to work with usrmerge and multilibs
glibc-locale: Fix build error with PACKAGE_NO_GCONV = "1"
glibc: Fix multilibs + usrmerge builds
binutils: Fix mips patch which changes default emulation
gcc: reduce the variables in symtab
powertop: import a fix from buildroot
meson: backport fix for builds with -Werror=return-type
icecc.bbclass: catch subprocess.CalledProcessError
dpkg: Use less as pager
patch: backport fixes
boost: Fix build and enable context and coroutines on aarch64
linux-yocto/4.19: update to v4.19.61
linux-yocto/4.19: update to 4.19.57 and -rt22
mesa: Update 19.0.1 -> 19.0.8
qemu: add a patch fixing the native build on newer kernels
package.bbclass: fix directories setuid and setgid bits
psmisc: Fix dependency for USE_NLS=no
rng-tools: fix very long shutdown delay with systemd
package: Improve determinism
gstreamer1.0-vaapi: backport jpeg encode/decode fixes
bitbake: tests/fetch: Resolve fetch error in bitbake-selftest
ref-manual: Updates to "Building Your Recipe"
ref-manual: Updated the "AS" variable
bitbake: fetch2: show warning when renaming the archive with bad checksum failed
bitbake: utils: Fix movefile() exception handling with python3
poky.ent: Updated release date to July 2019
ref-manual: Fixed typo for BBMULTICONFIG variable.
Documentation: Prepared for 2.7.1 release
overview-manual: Updated manual history table.
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETAATlWjYlkbLPLeFXGgH0cJ5dnMFAl4vWlYACgkQXGgH0cJ5
dnN0IwgApvm3kkRW4AcspTnXYPLS4Gx74I6EMAXsTSGIuHqTmpRH83iI3W3ZtfuO
tu54KTnAM48D8Mqymvl1lyXIbOeUD3KypJwJbSgBV0vBq02x1JYr3l/OU4jAKrBP
awp47yKd43y9fX5MUYoZCcQfiZSESLbZxZmuUbeDPIgs7iO7iuAX6xWBX6fipmEg
8+nRXUSnEGk8oCnOu2Cf8D5jbp2FwYv+Kk+ZO6woTw3gbpimCOeZtcWLW5Qd4LVy
iekeNOWqMOdLxc8fOZv/NcX2TYiIYs06uRLpubY2FkpMlTEqakj9Gm0ljttxdapx
YjfJWQZnOiqjCRZsRzVbsWwEcLLiuw==
=0U4J
-----END PGP SIGNATURE-----