Hi

We are pleased to announce the Yocto Project 3.1.29 (dunfell-23.0.29) Release 
is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/poky-dunfell-23.0.29.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.29/poky-dunfell-23.0.29.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/testreport.txt

Thank you for everyone's contributions to this release.

Chee Yang Lee chee.yang....@intel.com<mailto:chee.yang....@intel.com>
Yocto Project Build and Release


- --------------------------
yocto-3.1.29 Release Notes
- --------------------------


- --------------------------
Repositories/Downloads
- --------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: dunfell
Tag: yocto-3.1.29
Git Revision: aeac1034661725b5c83e79f76238429fb236b090
Release Artefact: poky-dunfell-23.0.29
sha: 0f0e6436687919be67d11077ba2cbda5c20224bd873747853e6232ab590e4b0c
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/poky-dunfell-23.0.29.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.29/poky-dunfell-23.0.29.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: dunfell
Tag: yocto-3.1.29
Git Revision: 0dbf3a15321b8033ff8ed86c6aa261fdb9c3d5bb
Release Artefact: oecore-dunfell-23.0.29
sha: 59d9e8f4331b5cb668e715cedd419243e89d879b10feab43af8741b463a52ffa
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/oecore-dunfell-23.0.29.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.29/oecore-dunfell-23.0.29.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: dunfell
Tag: yocto-3.1.29
Git Revision: 7bdc58e6c5d1054b1b6ad5c4e480a95e995ccbae
Release Artefact: meta-mingw-dunfell-23.0.29
sha: 96bcd1cb6100d1ccaa97382317e4e729d610fe236de6277285d1d17aeaeae627
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/meta-mingw-dunfell-23.0.29.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.29/meta-mingw-dunfell-23.0.29.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: dunfell
Tag: yocto-3.1.29
Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac
Release Artefact: meta-gplv2-dunfell-23.0.29
sha: bb156fbc77fdd5604162c4780eac8566ba7deb24d69741cf5350d1de65950f54
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/meta-gplv2-dunfell-23.0.29.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.29/meta-gplv2-dunfell-23.0.29.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: dunfell
Tag: yocto-3.1.29
Git Revision: dd826595414c5dc1a649f45a9dd2430bf6d4699b
Release Artefact: bitbake-dunfell-23.0.29
sha: b8abe584bbd3ce2c578fe720a3b36ffbc59baa284c1e5f66bd90796bfdf20592
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.29/bitbake-dunfell-23.0.29.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.29/bitbake-dunfell-23.0.29.tar.bz2

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/git/yocto-docs
Branch: dunfell
Tag: yocto-3.1.29
Git Revision: 4cb67f0f3c3e792b5925d9d3a7002a776e5c85e8


- ---------------
Known Issues
- ---------------
N/A


- ---------------
Security Fixes
- ---------------
binutils: Fix CVE-2023-25588
busybox: Fix CVE-2022-48174
cups: Fix CVE-2023-32360 CVE-2023-38545 CVE-2023-38546 CVE-2023-4504
dbus: Fix CVE-2023-34969
flac: Fix CVE-2020-22219
gawk: Fix CVE-2023-4156
gcc: Fix CVE-2023-4039
gdb: Fix CVE-2023-39128
ghostscript: Fix CVE-2023-36664 CVE-2023-43115
glib-2.0: Fix CVE-2023-29499 CVE-2023-32611 CVE-2023-32636 CVE-2023-32643 
CVE-2023-32665
glibc: Fix CVE-2023-4911
go: Fix CVE-2022-41725 CVE-2023-24536 CVE-2023-24538 CVE-2023-39318 
CVE-2023-39319
libpcre2 : Update fix for CVE-2022-1586
libtiff: Fix tiffcrop CVE-2023-1916
libwebp: Fix CVE-2023-4863 CVE-2023-5129
libxml2: Fix CVE-2023-39615
libxpm: Fix CVE-2022-4883 CVE-2022-44617 CVE-2022-46285 CVE-2022-44617 
CVE-2023-43788 CVE-2023-43789
linux-firmware: Fix CVE-2022-40982 CVE-2023-20569 CVE-2023-20593
linux-yocto/5.4: Ignore CVE-2020-27418 CVE-2020-36766 CVE-2022-40982 
CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2023-0160 CVE-2023-1194 
CVE-2023-1206 CVE-2023-1611 CVE-2023-3006 CVE-2023-3611 CVE-2023-3772 
CVE-2023-3773 CVE-2023-3777 CVE-2023-3865 CVE-2023-3866 CVE-2023-3867 
CVE-2023-4015 CVE-2023-4128 CVE-2023-4155 CVE-2023-4194 CVE-2023-4206 
CVE-2023-4207 CVE-2023-4208 CVE-2023-4244 CVE-2023-4273 CVE-2023-4385 
CVE-2023-4387 CVE-2023-4389 CVE-2023-4394 CVE-2023-4459 CVE-2023-4563 
CVE-2023-4569 CVE-2023-4611 CVE-2023-4623 CVE-2023-4921 CVE-2023-5197 
CVE-2023-5345 CVE-2023-20569 CVE-2023-21264 CVE-2023-25775 CVE-2023-33250 
CVE-2023-34319 CVE-2023-37453 CVE-2023-39189 CVE-2023-39192 CVE-2023-39193 
CVE-2023-39194 CVE-2023-40283 CVE-2023-42752 CVE-2023-42753 CVE-2023-42755 
CVE-2023-42756 CVE-2023-44466 CVE-2023-45862 CVE-2023-45871
mdadm: Fix CVE-2023-28736
nasm: Fix CVE-2020-21686 CVE-2022-29654 CVE-2022-44370
openssl: Fix CVE-2023-4807
python3: Fix CVE-2023-40217
qemu: Fix CVE-2020-24165
systemd: Fix CVE-2018-21029
vim: CVE-2023-3896 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735 CVE-2023-4736 
CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781 CVE-2023-5344 
CVE-2023-5441 CVE-2023-5535
xdg-utils: Fix CVE-2022-4055


- ---------------
Fixes
- ---------------
SECURITY.md: Add file
bitbake: SECURITY.md: add file
build-appliance-image: Update to dunfell head revision
cpio: Replace fix wrong CRC with ASCII CRC for large files with upstream 
backport
cve-exclusion_5.4.inc: update for 5.4.257
dbus: Add missing CVE_PRODUCT
documentation: update for 3.1.29
gcc: Fix -fstack-protector issue on aarch64
glib-2.0: Fix multiple vulnerabilities
kernel.bbclass: Add force flag to rm calls
libxpm: upgrade to 3.5.17
linux-firmware: upgrade to 20230804
linux-yocto/5.4: update to v5.4.257
nasm: update to 2.15.05
openssl: Upgrade to 1.1.1w
patch.py: Use shlex instead of deprecated pipe
poky.conf: bump version for 3.1.29
python3: update to 3.8.18
resulttool/report: Avoid divide by zero
vim: Upgrade to 9.0.2048
xorg-lib-common: Add variable to set tarball type




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#61700): https://lists.yoctoproject.org/g/yocto/message/61700
Mute This Topic: https://lists.yoctoproject.org/mt/102604279/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to