-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


- --------------------------
yocto-3.1.14 Release Notes
- --------------------------


- --------------------------
 Repositories/Downloads
- --------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: dunfell
Tag: yocto-3.1.14
Git Revision: bba323389749ec3e306509f8fb12649f031be152
Release Artefact: poky-dunfell-23.0.14
sha: 3401d1b660f2284e6e974c4dd1a8a3d5b1d311f87d261c324a84f812a9ad9d9c
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.14/poky-dunfell-23.0.14.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.14/poky-dunfell-23.0.14.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: dunfell
Tag: yocto-3.1.14
Git Revision: f3be01483b01c88f8c4ba24ca73ccf1bcc33665c
Release Artefact: oecore-dunfell-23.0.14
sha: 9584897dfdab65bd1d70254f25cc91fb6d04e92e4b77b088ed81603da6a57909
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.14/oecore-dunfell-23.0.14.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.14/oecore-dunfell-23.0.14.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: dunfell
Tag: yocto-3.1.14
Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7
Release Artefact: meta-mingw-dunfell-23.0.14
sha: dcd6e4a799b8f2727279eb640f077ca945a33ad61a2a9f076a72061874847e6d
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.14/meta-mingw-dunfell-23.0.14.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.14/meta-mingw-dunfell-23.0.14.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: dunfell
Tag: yocto-3.1.14
Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac
Release Artefact: meta-gplv2-dunfell-23.0.14
sha: a102bad796e7bbd36881068e18aabf49ce66b41a252ae06101ff3d64d4ce6ec8
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.14/meta-gplv2-dunfell-23.0.14.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.14/meta-gplv2-dunfell-23.0.14.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: dunfell
Tag: yocto-3.1.14
Git Revision: be6ecc160ac4a8d9715257b9b955363cecc081ea
Release Artefact: bitbake-dunfell-23.0.14
sha: 3f6a3bb828be8196e19b6a46461373cdced08792ac01488f25cdb31a0740e7f3
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.14/bitbake-dunfell-23.0.14.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.14/bitbake-dunfell-23.0.14.tar.bz2

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/git/yocto-docs
Branch: dunfell
Tag: yocto-3.1.14
Git Revision: 9c5533b45bfd6a3d383e973a2c40e0f418afcbe9 


- ---------------
 Known Issues
- ---------------
N/A


- ---------------
Security Fixes
- ---------------
speex: fix CVE-2020-23903
expat: fix CVE-2021-46143
expat: fix CVE-2021-45960
expat fix CVE-2022-22822 through CVE-2022-22827
xserver-xorg: whitelist two CVEs
xserver-xorg: update CVE_PRODUCT
grub: fix CVE-2020-14372 and CVE-2020-27779
dropbear: Fix CVE-2020-36254
inetutils: fix CVE-2021-40491
vim: fix CVE-2021-4069
openssh: Whitelist CVE-2016-20012
openssh: Fix CVE-2021-41617
bluez: fix CVE-2021-0129


- ---------------
Fixes
- ---------------
build-appliance-image: Update to dunfell head revision
poky.conf: Bump version for 3.1.14 release
bitbake: hashserv: specify loop for asyncio in python < 3.6
Revert "weston: Use systemd notify,"
lttng-tools: Add missing DEPENDS on bison-native
kernel: introduce python3-dtschema-wrapper
linux-yocto/5.4: update to v5.4.172
glibc: Add fix for data races in pthread_create and TLS access
parselogs: add a couple systemd false positives
expat: Update HOMEPAGE to current url
wic: use shutil.which
wic: misc: Do not find for executables in ASSUME_PROVIDED
cve-check: add lockfile to task
cve-update-db-native: use fetch task
oeqa/selftest/cases/tinfoil.py: increase timeout 60->120s test_wait_event
valgrind: skip flakey ptest (gdbserver_tests/hginfo)
bitbake: tests/fetch: Drop gnu urls from wget connectivity test
bitbake: utils: Update to use exec_module() instead of load_module()
linux-yocto/5.4: update genericx86* machines to v5.4.158
asciidoc: properly detect and compare Python versions >= 3.10
lib/oe/reproducible: correctly set .git location when recursively looking for git repos
scripts: Update to use exec_module() instead of load_module()
selftest: skip virgl test on fedora 35
scripts/buildhistory-diff: drop use of distutils
weston: Backport patches to always activate the top-level surface
oeqa/selftest/tinfoil: Update to use test command
oeqa/selftest/bbtests: Use YP sources mirror instead of GNU
openssl: Add reproducibility fix
libpcre2: update SRC_URI
linux-firmware: upgrade 20211027 -> 20211216
bitbake: cooker/command: Add a dummy event for tinfoil testing
ref-manual: fix patch documentation
documentation: further updates for 3.1.13
releases: update to include 3.1.13
selftest: skip virgl test on fedora 34 entirely
gstreamer1.0: fix failing ptest
bootchart2: remove wait_boot logic

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETAATlWjYlkbLPLeFXGgH0cJ5dnMFAmIN9mwACgkQXGgH0cJ5
dnMakwgAtWrC+Mrp8kJGSFIeC8D5RicQhzj1Vhq9KMifrq+uLlTM+SVPyRI+RvTx
TKh63EdbGOQXa0iJ5Syo0JekTC11dHogHtMEfNmCCYNgaY7t64ojufEUXb81ZvcL
k4K1dC/fD8+7Ao6Tts6dX0NyL/Q60tkRSdW6pzRic25As1vqmcoEl5aPQzmlQnlf
fMN7mvQDR6/yK4Ts28PaHZrY+EPM0WhZa2r/e4E2M689V/MC7w/YJFINZelges0R
Is0YxoY+s138UcQfIUcc7IE1W8qT6jPESmLaStSfc+lJknpZ6fa4Wsk6EJfb62vY
riNBo0cXv3Sd9vmJMamTWuXInVLK8Q==
=/7+x
-----END PGP SIGNATURE-----