-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


- --------------------------
yocto-3.1.11 Release Notes
- --------------------------


- --------------------------
 Repositories/Downloads
- --------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: dunfell
Tag: yocto-3.1.11
Git Revision: 74b22db6879b388d700f61e08cb3f239cf940d18
Release Artefact: poky-dunfell-23.0.11
sha: 79d68832b990090b8d61ebf79be1ecbb757b404417adcbbea48aca52f4863b2c
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.11/poky-dunfell-23.0.11.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.11/poky-dunfell-23.0.11.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: dunfell
Tag: 2020-04.11-dunfell
Git Revision: c7d2281eb6cda9c1637c20b3540b142073bca235
Release Artefact: oecore-dunfell-23.0.11
sha: 641835d35d37b977a47ee9b7433aaa5cf8644bee7f44cc8c8e915d55bbb89c72
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.11/oecore-dunfell-23.0.11.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.11/oecore-dunfell-23.0.11.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: dunfell
Tag: yocto-3.1.11
Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7
Release Artefact: meta-mingw-dunfell-23.0.11
sha: 34a183fa03d8c9a37732f3b35ebe9b5b5cc832a826308458536925ef6818b21a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.11/meta-mingw-dunfell-23.0.11.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.11/meta-mingw-dunfell-23.0.11.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: dunfell
Tag: yocto-3.1.11
Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac
Release Artefact: meta-gplv2-dunfell-23.0.11
sha: 9ea1d569486ef65e5a3eeb90fb55322bf2de1a7c489bf90994e0c153478fb3e0
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.11/meta-gplv2-dunfell-23.0.11.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.11/meta-gplv2-dunfell-23.0.11.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 1.46
Tag: 2020-04.11-dunfell
Git Revision: c2a3bda3a29e12472ef7862e424ea1552fab2959
Release Artefact: bitbake-dunfell-23.0.11
sha: cee9aa302124f18d28478b51fc507bac0810bd2ddbc70c31bf22219891ef2482
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.11/bitbake-dunfell-23.0.11.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.11/bitbake-dunfell-23.0.11.tar.bz2

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/git/yocto-docs
Branch: dunfell
Tag: yocto-3.1.11
Git Revision:cc226593701bd5a93c0bcefc0c41da1a32849912

- -------------
Contributors
- -------------
akuster
Alexander Kanavin
Alexandre Belloni
Andrej Valek
Armin Kuster
Bruce Ashfield
Changqing Li
Denys Dmytriyenko
Dmitry Baryshkov
Dragos-Marian Panait
hongxu
jbouchard
Jose Quaresma
Khem Raj
Lee Chee Yang
leimaohui
Marek Vasut
Marta Rybczynska
Matthias Klein
Matt Madison
Michael Opdenacker
Mike Crowe
Mikko Rapeli
Minjae Kim
Nathan Rossi
Neetika Singh
Nicolas Dechesne
Oleksandr Kravchuk
Oleksandr Popovych
Ovidiu Panait
Paul Barker
Purushottam Choudhary
Ralph Siemsen
Ranjitsinh Rathod
Richard Purdie
Ross Burton
Sakib Sajal
Saul Wold
Steve Sakoman
Teoh Jay Shen
TeohJayShen
Tomasz Dziendzielski
Ulrich Ölmann
Wang Mingyu
Wes Lindauer
Yi Zhao

- ---------------
 Known Issues
- ---------------
oe_syslog.SyslogTestConfig.test_syslog_startup_config failure:
This seems like an intermittent issue.

- ---------------
Security Fixes
- ---------------
xserver-xorg: Security fix for CVE-2020-14360/-25712
go: Exclude CVE-2021-29923 from report list
flex: Add CVE-2019-6293 to exclusions for checks
xdg-utils: Add fix for CVE-2020-27748
gdk-pixbuf: fix CVE-2021-20240
lz4: Security Fix for CVE-2021-3520
cpio: backport fix for CVE-2021-38185
lzo: add CVE_PRODUCT
binutils: Security fix for CVE-2020-16593
binutils: Security fix for CVE-2021-3549
rpm: Add fix for CVE-2021-20266
qemu: fix CVE-2021-3608
qemu: fix CVE-2021-3607
qemu: fix CVE-2021-3582
qemu: fix CVE-2021-3527
qemu: Security fixes CVE-2021-3545/6
qemu: Security fix CVE-2021-3544
qemu: fix CVE-2021-20257
qemu: fix CVE-2021-3416
qemu: fix CVE-2021-20181
qemu: Security fix CVE-2021-20221
qemu: Security fix for CVE-2020-29443
Qemu: Security fix for CVE-2020-25625/2021-3409/2020-17380
qemu: Security fix CVE-2020-25624
qemu: Security fix CVE-2020-25085
glibc: Security fix for CVE-2021-38604
glibc: Security fix CVE-2021-33574
tar: ignore node-tar CVEs
util-linux: fix CVE-2021-37600
cve-check: remove deprecated CVE_CHECK_CVE_WHITELIST
cve-check: improve comment about CVE patch file names
cve-check: update link to NVD website for CVE details
libsolv: fix CVE-2021-3200
glibc: Document and whitelist CVE-2021-35942
systemd: Add fix for CVE-2020-13529 and CVE-2021-33910
aspell: fix CVE-2019-25051
curl: Fix CVE-2021-22924 and CVE-2021-22925
curl: Fix for CVE-2021-22898
avahi: fix CVE-2021-3468
libxml2: fix CVE-2021-3541
gstreamer: ignore CVE-2021-3497, CVE-2021-3498, and CVE-2021-3522
Revert "gstreamer-plugins-base: ignore CVE-2021-3522 since it is fixed"
Revert "gstreamer-plugins-good: ignore CVE-2021-3497/8 since they are fixed"


- ---------------
Fixes
- ---------------
NOTE: While using a custom distro which sets default SDK installation path by defining SDKPATH,
will need to change SDKPATH to SDKPATHINSTALL.
The poky distro provides an example of this change:
https://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?h=dunfell&id=67dbe8a1c2b485d0cec174d28107b0ac8ea77d5f

build-appliance-image: Update to dunfell head revision
poky: Use SDKPATHINSTALL instead of SDKPATH
build-appliance-image: Update to dunfell head revision
go: Several Security fixes
dbus: upgrade 1.12.18 -> 1.12.20
dbus,dbus-test: Move common parts to dbus.inc
dbus-test: Remove EXTRA_OECONF_X configs
dbus-test: upgrade 1.12.16 -> 1.12.18
dbus: upgrade 1.12.16 -> 1.12.18
rt-tests: set branch name in SRC_URI
oeqa/runtime/parselogs: Make DVD ata error apply to all qemux86 machines
lighttpd: Add patch for reuse large memory chunks
layer.conf: fix syntax error in PATH setting
vim: add option to disable NLS support
sdk: Decouple default install path from built in path
poky.conf: Bump version for 3.1.11 release
documentation: prepare for 3.1.11 release
selftest: disable virgl headless test
parselogs.py: ignore intermittent CD/DVDROM identification failure
qemurunner.py: handle getOutput() having nothing to read
qemurunner.py: print output from runqemu/qemu-system in stop()
linux-yocto/5.4: update to v5.4.142
image_types: Restore pre-btrfs-tools 4.14.1 mkfs.btrfs shrink behavior
mklibs-native: drop deprecated cpp17 exceptions
tcf-agent: fetching over git:// no longer works
utils: Reduce the number of calls to the "dirname" command
Use the label provided when formating a dos partition
openssl: update from 1.1.1k to 1.1.1l
gnupg: upgrade 2.2.26 -> 2.2.27
gnupg: update 2.2.23 -> 2.2.26
gnupg: uprev 2.2.22 -> 2.2.23
gnupg: update 2.2.21 -> 2.2.22
gnupg: upgrade 2.2.20 -> 2.2.21
sdk: Enable do_populate_sdk with multilibs
linux-firmware: add more Qualcomm firmware packages
python3: Remove unused python3 recipe
linux-yocto/5.4: update to v5.4.141
linux-yocto/5.4: update to v5.4.139
linux-yocto/5.4: update to v5.4.137
ovmf: build natively everywhere
oeqa/selftest/glibc: Handle incorrect encoding issuesin glibc test results
oeqa/runtime/cases: make date.DateTest.test_date more reliable
sdk: fix relocate symlink failed
sstate.bbclass: fix error handling when sstate mirrors is ro
wic: don't forcibly pass -T default
e2fsprogs: ensure small images have 256-byte inodes
cve-check: fix comments
cve-check: add include/exclude layers
runqemu: Fix typo in error message
kernel-yocto: Simplify no git repo case in do_kernel_checkout
license: Exclude COPYING.MIT from pseudo
ruby: 2.7.3 -> 2.7.4
sstate: Fix rebuilds when changing layer config
linux-yocto/5.4: update to v5.4.135
archiver.bbclass: fix do_ar_configured failure for kernel
yocto-check-layer: ensure that all layer dependencies are tested too
checklayer: rename _find_layer_depends
checklayer: new function get_layer_dependencies()
yocto-check-layer: improve missed dependencies
oeqa/usb_hid.py : add test to check the usb/human interface device status after suspend state
oeqa/terminal : improve the test case
oeqa/runtime: add test for matchbox-terminal
oeqa/suspend : add test for suspend state
oeqa/runtime/cases: Only disable/enable for current boot
oeqa/runtime : add test for RTC(Real Time Clock)
oeqa/ethernet_ip_connman : add test for network connections
ifupdown: added -1 option to dhclient for dhcpv6
qemu: Enable seccomp if FEATURE is set
qemu.inc: Add seccomp PACKAGECONFIG option
oe-setup-builddir: update YP docs and OE URLs
glew: fix Makefile race
yocto-check-layer: Remove duplicated code
initramfs-framework/setup-live: fix shebang
bitbake.conf: change GNOME_MIRROR to new one
archiver.bbclass: Fix patch error for recipes that inherit dos2unix.
ovmf: Fix VLA warnings with GCC 11
oeqa/manual/toaster: fix small typo
linux-yocto/5.4: update to v5.4.134
bitbake: providers: replace newly added logger.warn() with logger.warning()
bitbake: data_smart: Allow colon in variable expansion regex
bitbake: data_smart/parse: Allow ':' characters in variable/function names
bitbake: BBHandler: Don't classify shell functions that names start with "python*" as python function

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETAATlWjYlkbLPLeFXGgH0cJ5dnMFAmFSLT4ACgkQXGgH0cJ5
dnOziggAvOWww+rTOEXQc87rpvdRoYrx8SZ82Lrqrm0anlMpKChlCqe1AWFiaDEZ
nzbBbvy4RfOmABC44WLEDEc6vhUBgy/QSOJL4NCo1RPdZX1gUCgz2erLQ5Ws1fzD
IFisIPrtgxuGlTZeUNkpu1zlSczi51FrIAn2duqlbtLP1bwsSNcAbaEo+skYP9B7
+gb9sOxoox/l3P78SWpf6rF8nfwvRc4OiVktmuItRtkxppjdYUJjxo1z0r6S850v
DIgCKdqFvX7hCIegbBULggb2GDXwtZwmG6NNL8EhPfgqe15887kuxUjXkXltT/lz
7+3VDFw0oJZLNcppGmO/1uxXmXAV0Q==
=qNNB
-----END PGP SIGNATURE-----