[ANNOUNCEMENT] Yocto Project 3.1.8 (dunfell-23.0.8) is Released




We are pleased to announce the Yocto Project 3.1.8 (dunfell-23.0.8) Release is now available for download.





A gpg signed version of these release notes is available at:




Full Test Report:




Thank you for everyone's contributions to this release.



Vineela Tummalapalli

Yocto Project Build and Release



- --------------------------

yocto-3.1.8 Release Notes

- --------------------------


- --------------------------


- --------------------------


Repository Name: poky

Repository Location: https://git.yoctoproject.org/git/poky

Branch: dunfell

Tag: yocto-3.1.8

Git Revision: 6ebb33bdaccaeadff0c85aab27acf35723df00d8

Release Artefact: poky-dunfell-23.0.8

sha: 3ca4775bec270eae7d30bf290db42d918378891ba1be6026f30f6bc245be60e4

Download Locations:




Repository Name: openembedded-core

Repository Location: https://git.openembedded.org/openembedded-core

Branch: dunfell

Tag: 2020-04.8-dunfell

Git Revision: ecd636154e7cfc1349a7cfd8026a85eafa219535

Release Artefact: oecore-dunfell-23.0.8

sha: bf986f379fe1e038ccff49aee6f85e7006758738cddd916eb8dd3032a981c929

Download Locations:




Repository Name: meta-mingw

Repository Location: https://git.yoctoproject.org/git/meta-mingw

Branch: dunfell

Tag: yocto-3.1.8

Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7

Release Artefact: meta-mingw-dunfell-23.0.8

sha: 1c9f7ba3e9dba8ceb8155890c7365af6fc6486e54fba4aa3fb8032f6ea494bdb

Download Locations:




Repository Name: meta-gplv2

Repository Location: https://git.yoctoproject.org/git/meta-gplv2

Branch: dunfell

Tag: yocto-3.1.8

Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac

Release Artefact: meta-gplv2-dunfell-23.0.8

sha: 8106a9651a4d1a111f7922557d56898a00a6c1c88c80477997bf5a38a16fd208

Download Locations:




Repository Name: bitbake

Repository Location: https://git.openembedded.org/bitbake

Branch: 1.46

Tag: 2020-04.8-dunfell

Git Revision: 078f3164dcb1de7a141bec3a8fd52631d0362631

Release Artefact: bitbake-dunfell-23.0.8

sha: 888ada8f64b94d03c430fcf309e994ed0bd96ff09d4909aacc0706e0cf8c8659

Download Locations:




Repository Name: yocto-docs

Repository Location: https://git.yoctoproject.org/git/yocto-docs

Branch: dunfell

Tag: yocto-3.1.8

Git Revision:09b64a4d246bdcca62dddee152deef7b0dea69d7


- ------------


- ------------

Alexander Kanavin

Anatol Belski

Anuj Mittal

Bruce Ashfield

Chen Qi

Christophe Chapuis

Diego Sueiro

Douglas Royds

Gavin Li

Guillaume Champagne

Jose Quaresma

Joshua Watt

Kai Uwe Broulik

Khem Raj

Konrad Weihmann

Lee Chee Yang

Marek Vasut

Mark Hatle

Michael Opdenacker

Mike Crowe

Mikko Rapeli

Mingli Yu

Niels Avonds

Peter Budny

Peter Morrow

Reto Schneider

Richard Purdie

Robert P. J. Day

Romain Naour

Ross Burton

Stefan Ghinea

Steve Sakoman

Vinay Kumar

Yanfei Xu

Yann Dirson

Yi Fan Yu

Zhang Qiang



- ---------------

Known Issues

- ---------------

Intermittent Failure in ptest : strace.printstrn-umoven.gen.test



- ---------------

Security Fixes

- ---------------

db: update CVE_PRODUCT

avahi: Exclude CVE-2021-26720 from cve-check

librsvg: Exclude CVE-2018-1000041 from cve-check

coreutils: Exclude CVE-2016-2781 from cve-check

tiff: Exclude CVE-2015-7313 from cve-check

bluez: Exclude CVE-2020-12352 CVE-2020-24490 from cve-check

ghostscript: Exclude CVE-2013-6629 from cve-check

cpio: Exclude CVE-2010-4226 from cve-check

unzip: Exclude CVE-2008-0888 from cve-check

openssh: Exclude CVE-2008-3844 from cve-check

openssh: Exclude CVE-2007-2768 from cve-check

logrotate: Exclude CVE-2011-1548,1549,1550 from cve-check

jquery: Exclude CVE-2007-2379 from cve-check

qemu: Exclude CVE-2018-18438 from cve-check

qemu: Exclude CVE-2007-0998 from cve-check

qemu: Exclude CVE-2017-5957 from cve-check

builder: whitelist CVE-2008-4178 (a different builder)

libnotify: whitelist CVE-2013-7381 (specific to the NodeJS bindings)

cairo: backport patch for CVE-2020-35492

glibc: Document and whitelist CVE-2019-1010022-25

tiff: fix CVE-2020-35523 CVE-2020-35524

qemu: fix CVE-2021-3392

subversion: fix CVE-2020-17525

binutils: fix CVE-2021-3487

tar: Fix CVE-2021-20193

Binutils: Fix CVE-2021-20197

wpa-supplicant: fix CVE-2021-30004

curl: Patch CVE-2021-22876 & CVE-2021-22890



- ---------------


- ---------------

build-appliance-image: Update to dunfell head revision

poky.conf: Bump version for 3.1.8 release

poky.conf: Add fedora33 as a supported distro

documentation: prepare for 3.1.8 release

ref-system-requirements.rst: Add Fedora 33 to list of supported distros

sstate: Handle manifest 'corruption' issue

boost: fix do_fetch failure

Revert "cml1.bbclass: Return sorted list of cfg files"

bitbake: providers: selected version not available should be a warning

meta/lib/oe/rootfs.py: Fix typo "Restoreing" -> "Restoring"

image.bbclass: fix comment "pacackages" -> "packages"

dejagnu: needs expect at runtime

linux-yocto/5.4: qemuppc32: reduce serial shutdown issues

linux-firmware: include all relevant files in -bcm4356

linux-firmware: upgrade 20210208 -> 20210315

lsb-release: fix reproducibility failure

oeqa/qemurunner: Improve handling of run_serial for shutdown commands

oeqa/qemurunner: Fix binary vs str issue

oeqa/qemurunner: Improve logging thread exit handling for qemu shutdown test

python3-jinja2: 2.11.2 -> 2.11.3

poky-tiny.conf: set PREFERRED_VERSION_linux-yocto-tiny to 5.4%

reproducible.py: add quilt-ptest and valgrind-ptest

ovmf: update edk2-stable202005 -> edk2-stable202008

ovmf: update to 202005

ovmf: update to 202002

lib/package_manager: Use shutil.copy instead of bb.utils.copyfile for intercepts

libevent: Increase ptest timing tolerance 50 ms -> 100 ms

sanity.bbclass: mention CONNECTIVITY_CHECK_URIS in network failure message

classes/image: Use xargs to set file timestamps

Revert "oeqa: Set LD_LIBRARY_PATH when executing native commands"

diffoscope: add native libraries to LD_LIBRARY_PATH

make-mod-scripts: add HOSTCXX definitions and gmp-native dependency

perf: fix python-audit RDEPENDS

cml1.bbclass: Return sorted list of cfg files

rootfs.py: find .ko.gz and .ko.xz kernel modules as well

pybootchart/draw: Avoid divide by zero error

gstreamer1.0-plugins-good: on wayland qt5 needs qtwayland

kernel.bbclass: Remove do_install[prefunc] no longer needed

ptest-runner: libgcc must be installed for pthread_cancel to work

linux-yocto/5.4: update to v5.4.116

linux-yocto/5.4: update to v5.4.114

wireless-regdb: upgrade 2020.11.20 -> 2021.04.21

yocto-uninative: Update to 3.1 which includes a patchelf fix

bitbake: fetch/gitsm: Fix crash when using git LFS and submodules

bitbake: runqueue: Fix deferred task issues

bitbake: bitbake: tests/fetch: remove write protected files too

bitbake: bitbake: tests/fetch: fix test execution without .gitconfig

license_image.bbclass: Fix symlink to generic license files

license_image.bbclass: Detect broken symlinks

linux-firmware: Package RSI 911x WiFi firmware

yocto-check-layer: Avoid bug when iterating and autoadding dependencies

kernel.bbclass: Configuration for environment with HOSTCXX

meta/lib/oeqa/core/tests/cases/timeout.py: add a testcase for the previous fix

oeqa: tear down oeqa decorators if one of them raises an exception in setup

oeqa/selftest/bblayers: Add test case for bitbake-layers layerindex-show-depends

cve-update-db-native: skip on empty cpe23Uri

linux-yocto/5.4: fix arm defconfig warnings

linux-yocto/5.4: update to v5.4.112

linux-yocto/5.4: update to v5.4.111

linux-yocto/5.4: update to v5.4.109

ca-certificates: Fix openssl runtime cert dependencies

parselogs: ignore floppy error on qemu-system-x86 at boot stage

groff: not ship /usr/bin/grap2graph

libtool: make sure autoheader run before automake

kmod: do not symlink config.guess/config.sub during autoreconf

pseudo: Upgrade to add trailing slashes ignore path fix

lib/oe/terminal: Fix tmux new-session on older tmux versions (<1.9)

sanity: Further improve directory sanity tests

sanity: Add error check for '%' in build path

insane: clean up some more warning messages

oeqa/selftest: Ensure packages classes are set correctly for maintainers test

oeqa/selftest: Hardcode test assumptions about heartbeat event timings

externalsrc: Detect code changes in submodules

Revert "externalsrc: Detect code changes in submodules"

go_1.14: don't set -buildmode=pie when building for windows targets

goarch: map target os to windows for mingw* TARGET_OS

image-live.bbclass: optional depends when ROOTFS empty

diffoscope: Upgrade 168 -> 172

diffoscope: Upgrade 136 -> 168

selftest/reproducible: Sort the unused exclusion list

selftest/reproducible: track unusued entries in the exclusion list

selftest/reproducible: adjust exclusion list for dunfell

selftest/reproducible: add an exclusion list for items that are not yet reproducible

selftest/reproducible: enable world reproducibility test

Join {yocto-announce@lists.yoctoproject.org to automatically receive all group messages.