U-Boot v2017.09 is released

Hey all,

I've released v2017.09 and it's now live on git and FTP and ACD (along with PGP sig file).

There's a few things I need to headline in this release. First and foremost is https://www.kb.cert.org/vuls/id/166743 (aka CVE-2017-3225 and CVE-2017-3226). If you're using CONFIG_ENV_AES in your project, you have security implications to worry about and decide the correct path forward in. With respect to the community, I marked it as deprecated for this release, and I plan to remove it for the next release unless someone with relevant background steps up and wants to rewrite the code in question (and make sure the rest of the environment code isn't going to lead to other issues similar to CVE-2017-3226). Both of the issues in question here could be fixed but the worry is about it being the "tip of the iceberg" in the area.

Second, if you make use of the 'env' build target (rather than tools-all) you will need to update your logic as, due to moving the environment code to an 'env' directory, the 'env' build target has been renamed to 'envtools'.

Among the various features and bugfixes in this release we now have support for NVMe devices. We now also have "livetree" support in DM and our EFI support continues to get more robust.

Please note that for v2017.11 the calendar again works out such that we have up to -rc4 this time with planned releases on October 2nd, 16th, 30th, November 6th with release on November 13th. Note that while for this release I said I would be less strict about -rc2 contents, I think that was a mistake and we should emphasize testing and regression fixes/etc with our 'extra' release tag this time. Finally, if anyone has feedback about the release cycle time-lines, please feel free to reach out to me, in public or in private, with good or bad news.

Thanks again everyone!

Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20170911/e8f9201d/attachment.sig>

Dear Tom,

Thanks a lot.

And here is the related statistics (see also [1] for the web version):

Changes since v2017.07:

* Processed 1308 csets from 130 developers
* 25 employers found
* A total of 64047 lines added, 36307 removed (delta 27740)

Developers with the most changesets

Simon Glass                246 (18.8%)
Bin Meng                   126 (9.6%)
Philipp Tomsich            102 (7.8%)
Heinrich Schuchardt         56 (4.3%)
Kever Yang                  54 (4.1%)
Tom Rini                    49 (3.7%)
Masahiro Yamada             42 (3.2%)
Patrice Chotard             41 (3.1%)
Marek Vasut                 38 (2.9%)
Franklin S Cooper Jr        31 (2.4%)

...

Developers with the most changed lines

Simon Glass               15119 (18.7%)
Marek Vasut               6778 (8.4%)
Bin Meng                  5289 (6.5%)
Tom Rini                  4891 (6.0%)
Philipp Tomsich           4645 (5.7%)
Masahiro Yamada           4108 (5.1%)
Kever Yang                4042 (5.0%)
Patrice Chotard           3266 (4.0%)
Zhikang Zhang             2142 (2.6%)

Marek Behún 1999 (2.5%)
...

Developers with the most lines removed

Bin Meng                  3221 (8.9%)
Masahiro Yamada           2888 (8.0%)
Thomas Petazzoni          1407 (3.9%)
Christophe Leroy           371 (1.0%)
Tom Rini                   207 (0.6%)
Breno Lima                 181 (0.5%)
Igal Liberman               89 (0.2%)
Derald D. Woods             67 (0.2%)
Vanessa Maegima             51 (0.1%)
Fiach Antaw                 38 (0.1%)

...

Developers with the most signoffs (total 224)

Alexander Graf              52 (23.2%)
Nobuhiro Iwamatsu           29 (12.9%)
Stefan Roese                26 (11.6%)
Tom Rini                    16 (7.1%)
Michal Simek                16 (7.1%)
Philipp Tomsich             13 (5.8%)
Bin Meng                     8 (3.6%)
Tom Warren                   4 (1.8%)
Wenbin Song                  4 (1.8%)
Priyanka Jain                4 (1.8%)

...

Developers with the most reviews (total 865)

Simon Glass                283 (32.7%)
Philipp Tomsich            133 (15.4%)
Tom Rini                   124 (14.3%)
Bin Meng                   121 (14.0%)
Stefan Roese                32 (3.7%)
York Sun                    27 (3.1%)
Jagan Teki                  16 (1.8%)
Lukasz Majewski             12 (1.4%)
Stefano Babic               12 (1.4%)
Igal Liberman               10 (1.2%)

...

Developers with the most test credits (total 133)

Marcel Ziswiler             36 (27.1%)
Stephen Warren              26 (19.5%)
Stefan Roese                19 (14.3%)
iSoC Platform CI            10 (7.5%)
Bin Meng                     8 (6.0%)
Jagan Teki                   4 (3.0%)
Chen-Yu Tsai                 3 (2.3%)
VINITHA PILLAI               3 (2.3%)
Simon Glass                  2 (1.5%)
Daniel Schwierzeck           2 (1.5%)

...

Developers who gave the most tested-by credits (total 133)

Simon Glass                 70 (52.6%)
Bin Meng                    22 (16.5%)
Stefan Chulski              10 (7.5%)
Jagan Teki                   3 (2.3%)
Tom Rini                     3 (2.3%)
Sumit Garg                   3 (2.3%)
Maxime Ripard                2 (1.5%)
Icenowy Zheng                2 (1.5%)
Paul Burton                  2 (1.5%)
Stefan Roese                 1 (0.8%)

...

Developers with the most report credits (total 25)

Tom Rini                     2 (8.0%)
Patrick Delaunay             2 (8.0%)
Ran Wang                     2 (8.0%)
Sumit Garg                   1 (4.0%)
Maxime Ripard                1 (4.0%)
Stefan Roese                 1 (4.0%)
Andy Shevchenko              1 (4.0%)
Heiko Schocher               1 (4.0%)
Marek Vasut                  1 (4.0%)
Heinrich Schuchardt          1 (4.0%)

...

Developers who gave the most report credits (total 25)

Patrice Chotard              5 (20.0%)
Tom Rini                     4 (16.0%)
Simon Glass                  4 (16.0%)
Bin Meng                     3 (12.0%)
Philipp Tomsich              3 (12.0%)
Fabio Estevam                3 (12.0%)
Heinrich Schuchardt          1 (4.0%)
Alexander Graf               1 (4.0%)
Stefan Agner                 1 (4.0%)

...

Top lines changed by employer

(Unknown)                 34483 (42.6%)
Google, Inc.              15119 (18.7%)
Konsulko Group            4891 (6.0%)
NXP                       4587 (5.7%)
Socionext Inc.            4111 (5.1%)
ST Microelectronics       3404 (4.2%)
DENX Software Engineering 2332 (2.9%)
Linaro                    2024 (2.5%)
Intel                     1922 (2.4%)
Texas Instruments         1750 (2.2%)

...

Employers with the most signoffs (total 224)

Novell                      52 (23.2%)
(Unknown)                   31 (13.8%)
Nobuhiro Iwamatsu           29 (12.9%)
DENX Software Engineering   28 (12.5%)
Konsulko Group              17 (7.6%)
Xilinx                      16 (7.1%)
NXP                         15 (6.7%)
Texas Instruments            7 (3.1%)
Intel                        6 (2.7%)
NVidia                       4 (1.8%)

...

Employers with the most hackers (total 131)

(Unknown)                   56 (42.7%)
NXP                         20 (15.3%)
Texas Instruments           10 (7.6%)
DENX Software Engineering    6 (4.6%)
ST Microelectronics          4 (3.1%)
Linaro                       4 (3.1%)
Intel                        3 (2.3%)
Collabora Ltd.               3 (2.3%)
National Instruments         3 (2.3%)
Xilinx                       2 (1.5%)

...

[1] http://www.denx.de/wiki/U-Boot/UbootStat_2017_09

Best regards,

Wolfgang Denk

DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-10 Fax: (+49)-8142-66989-80 Email: wd at denx.de
Keep your eyes wide open before marriage, half shut afterwards.
                                                 -- Benjamin Franklin