-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


- --------------------------
yocto-3.1.25 Release Notes
- --------------------------


- --------------------------
 Repositories/Downloads
- --------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: dunfell
Tag: yocto-3.1.25
Git Revision: a631bfc3a38f7d00b2c666661a89a758a0af9831
Release Artefact: poky-dunfell-23.0.25
sha: 90e97414c81f751e7aca7e0c933406c6c347a8cf88643d98d1702da9bb9885e5
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.25/poky-dunfell-23.0.25.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.25/poky-dunfell-23.0.25.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: dunfell
Tag: yocto-3.1.25
Git Revision: fd4cc8d7b5156c43d162a1a5a809fae507457ef4
Release Artefact: oecore-dunfell-23.0.25
sha: 7523d99f8805245d71eaa36cc374edd0b3dd9595bd6c5776b3b2fd5fd9103ab0
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.25/oecore-dunfell-23.0.25.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.25/oecore-dunfell-23.0.25.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: dunfell
Tag: yocto-3.1.25
Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7
Release Artefact: meta-mingw-dunfell-23.0.25
sha: 36791a0474aa1d363522096067bb7184586558d5da4007f4db50a9b89f9e0f7e
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.25/meta-mingw-dunfell-23.0.25.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.25/meta-mingw-dunfell-23.0.25.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: dunfell
Tag: yocto-3.1.25
Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac
Release Artefact: meta-gplv2-dunfell-23.0.25
sha: f70463e9060f8a94ac61303d2625243c7406498df089c5cb44ca412c8ac4605a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.25/meta-gplv2-dunfell-23.0.25.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.25/meta-gplv2-dunfell-23.0.25.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: dunfell
Tag: yocto-3.1.25
Git Revision: e16a9ca7e9286790ac37a067fdc8fde3a35a1c44
Release Artefact: bitbake-dunfell-23.0.25
sha: 8653cd302f9a8aa99dac97400ef58d57b6027683b212876dbb474c593f406571
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.25/bitbake-dunfell-23.0.25.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.25/bitbake-dunfell-23.0.25.tar.bz2

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/git/yocto-docs
Branch: dunfell
Tag: yocto-3.1.25
Git Revision: 19b7932e6af89943b899687c1f5cb91181cd3580


- ---------------
 Known Issues
- ---------------
N/A


- ---------------
Security Fixes
- ---------------
curl: Fix CVE-2023-23916 CVE-2023-27534 CVE-2023-27538 CVE-2023-27533 CVE-2023-27535 CVE-2023-27536
ffmpeg: Fix CVE-2022-3341
ghostscript: Fix CVE-2021-45944
git: Fix CVE-2023-22490 CVE-2023-23946
git: Ignore CVE-2023-22743
go: Fix CVE-2020-29510 CVE-2022-41722 CVE-2022-41723 CVE-2023-24534 CVE-2023-24537
go: Ignore CVE-2022-1705 CVE-2022-41716
libarchive: Fix CVE-2022-26280
libksba: Fix CVE-2022-3515
openssl: Fix CVE-2023-0464 CVE-2023-0465 CVE-2023-0466
qemu: Fix CVE-2020-15469 CVE-2020-15859 CVE-2020-17380 CVE-2020-35504 CVE-2020-35505 CVE-2021-3409 CVE-2022-26354 CVE-2022-4144
qemu: Ignore CVE-2023-0664
ruby: Fix CVE-2023-28756
screen: Fix CVE-2023-24626
sudo: Fix CVE-2023-28486 CVE-2023-28487
systemd: Fix CVE-2023-26604
vim: Fix CVE-2023-1127 CVE-2023-1170 CVE-2023-1175 CVE-2023-1264 CVE-2023-1355


- ---------------
Fixes
- ---------------
base-files: Drop localhost.localdomain from hosts file
bitbake: tests/fetch.py: fix link to project documentation
bmap-tools: switch to main branch
build-appliance-image: Update to dunfell head revision
buildtools-tarball: Handle spaces within user $PATH
classes/create-spdx: Backport
classes/package: Add extended packaged data
classes/package: Use gzip for extended package data
create-spdx: Use gzip for compression
cve-check: Fix false negative version issue
documentation: update for 3.1.25
ghostscript: add CVE tag "CVE-2021-45944" for check-stack-limits-after-function-evalution.patch
glibc: Add missing binutils dependency
lib/resulttool: fix typo breaking resulttool log --ptest
licenses: Add GPL+ licenses to map
linux-yocto/5.4: update to v5.4.237
oeqa rtc.py: skip if read-only-rootfs
poky.conf: bump version for 3.1.25
populate_sdk_base: add zip options
populate_sdk_ext: Handle spaces within user $PATH
pybootchartui: Fix python syntax issue
qemu: fix build error introduced by CVE-2021-3929 fix
qemu: fix compile error which imported by CVE-2022-4144
staging/multilib: Fix manifest corruption
staging: Separate out different multiconfig manifests
systemd: Fix systemd when used with busybox less
systemd: fix wrong nobody-group assignment
toolchain-scripts: Handle spaces within user $PATH
vim: set modified-by to the recipe MAINTAINER
vim: upgrade to 9.0.1429

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEETAATlWjYlkbLPLeFXGgH0cJ5dnMFAmRdTO0ACgkQXGgH0cJ5
dnOA4Qf/RNcdMvQZxig1IlNBiXG1F5edOZCjlT8dLl2X35iQdXY3UG+IVEYbrAe2
cic+Qk/rtBaWN9wRl7q+0AzsdeptJKJlCS51sHp2N7KZSiIjSsb2W0tPcdkI51uh
5TyRNCWgLSfnJHwoMOQYjwJU9Cvr6ks4LGnD6hVHDSd8E1YOAmGLkye01IkQxenc
DPV0rynKnzVetBo2s362r+PdQse5DforYu1fuuNSCn8SA2t5oRO/rUOm+XII1vdh
igm6+2PrUb77Hd5YBZu5LQ7TjHIekFHFfOqpAYuIccivN4Qhy/EHU4Al8lM085Q5
EyKRMU5dweHsTMwKl0I5BERsIEkKxg==
=krTC
-----END PGP SIGNATURE-----