Hello,

We are pleased to announce the Yocto Project 3.1.3 (dunfell-23.0.3) Release is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/poky-dunfell-23.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.3/poky-dunfell-23.0.3.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/testreport.txt

Thank you for everyone's contributions to this release.

Sincerely

Vineela Tummalapalli,
Yocto Project Build and Release
vineela.tummalapalli@...


- --------------------------
yocto-3.1.3 Release Notes
- --------------------------


- --------------------------
Repositories/Downloads
- --------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: dunfell
Tag: yocto-3.1.3
Git Revision: 012ad10a89a889c21e67c27dc37d22520212548f
Release Artefact: poky-dunfell-23.0.3
sha: 5ce1869a7d4074981287d3c105211c7f546810eb485af7b8ae6ed0e15bb41046
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/poky-dunfell-23.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.3/poky-dunfell-23.0.3.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: dunfell
Tag: 2020-04.3-dunfell
Git Revision: b39bda4cc62db12c0edfbe489d5a7f5988ede6a9
Release Artefact: oecore-dunfell-23.0.3
sha: 9f4cdb2e45149af41b557abbb8a36a6fe1125af8d6afe19f24c708a84167c10c
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/oecore-dunfell-23.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.3/oecore-dunfell-23.0.3.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: dunfell
Tag: yocto-3.1.3
Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7
Release Artefact: meta-mingw-dunfell-23.0.3
sha: 7a0a544b1b9963c023795aa73807a6b179e494caa401ee30547bb1a0eda2eb16
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/meta-mingw-dunfell-23.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.3/meta-mingw-dunfell-23.0.3.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: dunfell
Tag: yocto-3.1.3
Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac
Release Artefact: meta-gplv2-dunfell-23.0.3
sha: d810593328b6ca38d1b2da41607cb257b015934bf8bf6cb2e0bb0a54ebb391d6
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/meta-gplv2-dunfell-23.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.3/meta-gplv2-dunfell-23.0.3.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: dunfell
Tag: 2020-04.3-dunfell
Git Revision: 18e1957337fd9f06bc673d28dd4f8277321d07bc
Release Artefact: bitbake-dunfell-23.0.3
sha: de3bc9541a4bbbaa494b69777cac7bc7767a230a8849f11a25073866e8fd680b
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.3/bitbake-dunfell-23.0.3.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.3/bitbake-dunfell-23.0.3.tar.bz2

- -------------
Contributors
- -------------
Adrian Bunk
Adrian Freihofer
akuster
Alexander Kanavin
Andrei Gherzan
Anibal Limon
Armin Kuster
Bruce Ashfield
Changqing Li
Chen Qi
Chris Laplante
Christophe GUIBOUT
Daniel Ammann
Daniel Gomez
Geoff Parker
Guillaume Champagne
hongxu
Jain Sangeeta
Jean-Francois Dagenais
Joshua Watt
Kevin Hao
Khem Raj
Konrad Weihmann
Kurt Kiefer
Lee Chee Yang
Mark Hatle
Martin Jansa
Matthew
Matt Madison
Michael Gloff
Michael Halstead
Michael Tretter
Mikko Rapeli
Ming Liu
Nicolas Dechesne
Oleksandr Kravchuk
Ovidiu Panait
Peter A. Bigot
Pierre-Jean Texier
Rahul Kumar
Rasmus Villemoes
Richard Purdie
Robert Yang
Ross Burton
Sakib Sajal
Stephen Jolley
Steve Sakoman
Sumit Garg
TeohJayShen
Tyler Hicks
Vasyl Vavrychuk
Vijai Kumar K
Viktor Rosendahl
Vineela Tummalapalli
Wang Mingyu
Yann Dirson
Yi Zhao
zhengruoqin
Zhixiong Chi

- ---------------
Known Issues
- ---------------
perl ptest failure: There was a perl ptest issue identified during
testing. The issue has been traced to a test error, functionality is
correct and the test issue will be addressed in the next release.

- ---------------
Security Fixes
- ---------------
libxml2: Fix CVE-2020-24977
cmake: whitelist CVE-2016-10642
curl: add vendors to CVE_PRODUCT to exclude false positives
gnutls: CVE-2020-24659
libx11 : fix CVE-2020-14344
qemu: fix CVE-2020-14364 CVE-2020-14415
xserver-xorg: fix CVE-2020-14347
json-c: Fix CVE-2020-12762
perl: fix CVE-2020-12723
fribidi: extend CVE_PRODUCT to include fribidi
gcc-9.3.inc: Mark CVE-2019-15847 as fixed
glibc: Bring in CVE fixes and other bugfixes from 2.31 release branch
grub: set CVE_PRODUCT to grub2
webkitgtk: fix CVE-2020-13753
libjpeg-turbo: fix CVE-2020-13790
qemu: fix CVE-2020-15863
ghostscript: fix CVE-2020-15900
glibc: Secruity fix for CVE-2020-6096


- ---------------
Fixes
- ---------------
build-appliance-image: Update to dunfell head revision
scripts/oe-build-perf-report: Use python3 from the environment
build-appliance-image: Update to dunfell head revision
Revert "kernel.bbclass: run do_symlink_kernsrc before do_patch"
populate_sdk_ext: Do not assume local.conf will always exist
sysvinit: Remove ${B} assignment
libubootenv: upgrade 0.3 -> 0.3.1
initramfs-framework: support kernel cmdline with double quotes
systemd-serialgetty: Replace sed quoting using ' with " to allow var expansion
systemd-serialgetty: Fix sed expression quoting
bitbake: tests/fetch: Move away from problematic freedesktop.org urls
poky.conf: Bump version for 3.1.3 release
yocto-bsp: update to v5.4.58
yocto-bsp: update to v5.4.56
yocto-bsps: update reference BSPs to 5.4.54
cve-check: avoid FileNotFoundError if no do_cve_check task has run
cve-update-db-native: use context manager for cve_f
cve-check/cve-update-db-native: use lockfile to fix usage under multiconfig
cve-update-db-native: add progress handler
cve-check.bbclass: always save cve report
ell: update to 0.33
oeqa/concurrencytest: Improve builddir path manipulations
selftest/signing: Ensure build path relocation is safe
oe-publish-sdk: fix layers init via ssh
image.bbclass: fix REPRODUCIBLE_TIMESTAMP_ROOTFS reference
runqemu: Add a hook to allow it to renice
autoconf: consolidate DEPENDS
insane: only load real files as ELF
gdk-pixbuf: add tests PACKAGECONFIG
rpcbind: Use update-alternatives for rpcinfo
uninative: Upgrade to 2.9
bitbake: fetch2: Drop cups.org from wget status checks
bitbake: siggen: clean_basepath: remove recipe full path when virtual:xyz present
Documenation: Prepared for the 3.1.3 release
package: get_package_mapping: avoid dependency mapping if renamed package provides original name
linux-libc-headers: kernel headers are installed in STAGING_KERNEL_BUILDDIR
json-glib: Backport a build fix with clang
selftest/prservice: Improve test failure message
devtool: deploy-target: Fix size calculation for hard links
insane: improve gnu-hash-style warning
insane: fix gnu-hash-style check
oeqa: sdk: Capture stderr output
util-linux: Allow update alternatives for additional apps
recipes-kernel: linux-firmware add qcom-venus-{5.2,5.4} packages
wic: misc: Add /bin to the list of searchpaths
sysstat: fix installed-vs-shipped QA Issue in systemd
sanity.conf: update BB_MIN_VERSION to 1.46.0
cml1: Move find_cfgs() helper to cml1.bbclass
kernel-yocto: checksum all modifications to available kernel fragments directories
devtool: expand SRC_URI when guessing recipe update mode
package.bbclass: explode the RPROVIDES so we don't think the versions are provides
linux-firmware: update 20200721 -> 20200817
linux-firmware: upgrade 20200619 -> 20200721
kernel.bbclass: run do_symlink_kernsrc before do_patch
linux-yocto/5.4: update to v5.4.61
linux-yocto/5.4: update to v5.4.60
linux-yocto/5.4: update to v5.4.59
libubootenv: inherit uboot-config
libubootenv: uprev to v0.3
multilib.conf: add u-boot to NON_MULTILIB_RECIPES
conf/machine: set UBOOT_MACHINE for qemumips and qemumips64
bluez5: fix builds that require ell support
bind: update to 9.11.22 ESV
perf: backport a fix for confusing non-fatal error
gpgme: fix multilib header conflict
weston: add missing packageconfigs
image_types_wic: Add ASSUME_PROVIDED to WICVARS
package.bbclass: Sort shlib2 output for hash equivalency
package_tar.bbclass: Sync to the other package_* classes
oeqa/manual/bsp-hw.json : remove X_server_can_start_up_with_runlevel_5_boot test
oeqa/manual/bsp-hw.json : remove shutdown_system test
runqemu: Show an error for conflicting graphics options
oeqa: runtime_tests: Extra GPG debugging
runqemu: Check gtk or sdl option is passed together with gl or gl-es options.
alsa-ucm-conf: use ${datadir} in do_install()
alsa-topology-conf: use ${datadir} in do_install()
libffi: fix multilib header conflict
xserver-xorg: upgrade 1.20.7 -> 1.20.8
ghostscript: update to 9.52
linux-yocto/5.4: perf cs-etm: Move definition of 'traceid_list' global variable from header file
linux-yocto/5.4: update to v5.4.58
selftest/tinfoil: Increase wait event timeout
librsvg: Upgrade 2.40.20 -> 2.40.21
linux-yocto/5.4: update to v5.4.57
linux-yocto/5.4: update to v5.4.56
linux-yocto-rt/5.4: update to rt32
go: Upgrade to 1.14.7
go: update 1.14.4 -> 1.14.6
uninative: Handle PREMIRRORS generically
oeqa: write @OETestTag content into json test reports for each case
testimage: add an overall timeout setting
allarch: Add missing allarch ttf-bitstream-vera
ltp: make copyFrom scp command non-fatal
kernel-devicetree: Fix intermittent build failures caused by DTB builds
linux-yocto/5.4: update to v5.4.54
linux-yocto/5.4: fix perf build with binutils 2.35
linux-yocto/5.4: update to v5.4.53
libexif: update to 0.6.22
ruby: upgrade 2.7.0 -> 2.7.1
glib-2.0: update 2.62.5 to 2.62.6
glib-2.0: update 2.62.4 to 2.62.5
qemumips: Use 34Kf CPU emulation
Revert "gtk-icon-cache.bbclass: add runtime dependency"
glib-networking: upgrade 2.62.3 to 2.62.4
gnutls: Fix krb5 code license to GPLv2.1+ to match the LICENSE file.
gnutls: upgrade 3.6.13 -> 3.6.14
bind: upgrade 9.11.19 -> 9.11.21
boost: backport fix to make async_pipes work with asio
cogl-1.0: correct X11 dependencies
cve-update: handle baseMetricV2 as optional
checklayer: check layer in BBLAYERS before test
initscripts: Fix populate-volatile.sh bug when file/dir exists
initscripts: Fix various shellcheck warnings in populate-volatile.sh
buildhistory: use pid for temporary txt file name
gtk-immodules-cache.bbclass: fix post install scriptlet error
busybox: make hwclock compatible with glibc 2.31
startup-notification: add time_t type mismatch patch from upstream
image.bbclass: improve wording when image size exceeds the specified limit
classes/package: Use HOST_OS for runtime dependencies
classes/cmake: Fix host detection
oeqa/qemurunner: Add priority/nice information for running processes
linux-yocto-rt/5.4: fix mmdrop stress test issues
linux-yocto/5.4: update to v5.4.51
openssl: openssl-bin requires openssl-conf to run
linux-firmware: add ibt-20 package
rpm: fix nativesdk's default var location
wic/filemap: Fall back to standard copy when no way to get the block map
wic/filemap: Drop the unused get_unmapped_ranges()
wic/filemap: Drop the unused block_is_unmapped()
bitbake: server/process: Account for xmlrpc connections
bitbake: server/process: Fix UI first connection tracking