Release notes for Yocto-4.0.18 (Kirkstone)

Security Fixes in Yocto-4.0.18

curl: Fix CVE-2024-2398
expat: fix CVE-2023-52426 and CVE-2024-28757
libssh2: fix CVE-2023-48795
ncurses: Fix CVE-2023-50495
nghttp2: Fix CVE-2024-28182 and CVE-2023-44487
openssh: Ignore CVE-2023-51767
openssl: Fix CVE-2024-2511
perl: Ignore CVE-2023-47100
python3-cryptography: Fix CVE-2024-26130
python3-urllib3: Fix CVE-2023-45803
qemu: Fix CVE-2023-6683
ruby: fix CVE-2024-27281
rust: Ignore CVE-2024-24576
tiff: Fix CVE-2023-52356 and CVE-2023-6277
xserver-xorg: Fix CVE-2024-31080 and CVE-2024-31081
xwayland: Fix CVE-2023-6816, CVE-2024-0408 and CVE-2024-0409

Fixes in Yocto-4.0.18

build-appliance-image: Update to kirkstone head revision
common-licenses: Backport missing license
contributor-guide: add notes for tests
contributor-guide: be more specific about meta-* trees
cups: fix typo in CVE-2023-32360 backport patch
cve-update-nvd2-native: Add an age threshold for incremental update
cve-update-nvd2-native: Fix CVE configuration update
cve-update-nvd2-native: Fix typo in comment
cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
cve-update-nvd2-native: Remove rejected CVE from database
cve-update-nvd2-native: nvd_request_next: Improve comment
dev-manual: improve descriptions of ‘bitbake -S printdiff’
dev-manual: packages: fix capitalization
docs: conf.py: properly escape backslashes for latex_elements
gcc: Backport sanitizer fix for 32-bit ALSR
glibc: Fix subscript typos for get_nscd_addresses
kernel-dev: join mkdir commands with -p
linux-firmware: Upgrade to 20240220
manuals: add initial sphinx-lint support
manuals: add initial stylechecks with Vale
manuals: document VIRTUAL-RUNTIME variables
manuals: fix duplicate “stylecheck” target
manuals: fix incorrect double backticks
manuals: fix trailing spaces
manuals: refer to new yocto-patches mailing list wherever appropriate
manuals: remove tab characters
manuals: replace hyphens with em dashes
manuals: use “manual page(s)”
migration-guides: add release notes for 4.0.17
poky.conf: bump version for 4.0.18
profile-manual: usage.rst: fix reference to bug report
profile-manual: usage.rst: formatting fixes
profile-manual: usage.rst: further style improvements
python3-urllib3: Upgrade to v1.26.18
ref-manual: add documentation of the variable SPDX_NAMESPACE_PREFIX
ref-manual: tasks: do_cleanall: recommend using ‘-f’ instead
ref-manual: tasks: do_cleansstate: recommend using ‘-f’ instead for a shared sstate
ref-manual: variables: adding multiple groups in GROUPADD_PARAM
ref-manual: variables: correct sdk installation default path
stress-ng: avoid calling sync during do_compile
systemd: Fix vlan qos mapping
tcl: Add a way to skip ptests
tcl: skip async and event tests in run-ptest
tcl: skip timing-dependent tests in run-ptest
valgrind: skip intermittently failing ptest
wireless-regdb: Upgrade to 2024.01.23
yocto-uninative: Update to 4.4 for glibc 2.39