4月にリリースされたYocto3.1LTS(Dunfell)の4回目のポイントリリース、3.1.4 公開のアナウンスが
2020年12月2日付けでありました。
当初は11月2日版で構築、11月13日リリース予定でしたが、11月25日付のコミットを元にQAテストを実施
したものがリリースとなっています。
現時点で以下の2つの問題が確認されています。
・bitbake devshell のテストでdevtoolsの使用時に問題が発生する
　→ CONFIGUREOPTを指定して起動することで回避可能
・ubuntu20.04 上でdependency explorerの起動に失敗する
　→ 2020/12/01 付の更新で修正済

次のポイントリリース3.1.5は 、2021/1/25 を予定しています。

本リリースの詳細は以下のURLでご確認ください。
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.4/RELEASENOTES

---------------
Security Fixes
---------------
qemu: fix CVE-2020-24352
python3: fix CVE-2020-27619
python3: whitelist CVE-2020-15523
bison: update to 3.5.4 for CVE-2020-14150
libproxy: fix CVE-2020-26154
freetype: fix CVE-2020-15999, backport from 2.10.4
openssh: whitelist CVE-2014-9278
grub: clean up CVE patches
grub: fix several CVEs in grub 2.04
ruby: fix CVE-2020-25613
sqlite3: fix CVE-2020-13632
sqlite3: fix CVE-2020-13631
sqlite3: fix CVE-2020-13630
sqlite3: fix CVE-2020-13435
sqlite3: fix CVE-2020-13434
bluez5: update to 5.55 to fix CVE-2020-27153
jquery: Upgrade 3.4.1 -> 3.5.0 to fix CVE-2020-11022 and CVE-2020-11023
nasm: update 2.14.02 -> 2.15.03 for CVE fixes
qemu: fix CVE-2019-20175
ffmpeg: fix CVE-2020-12284
grub2: fix CVE-2020-10713
python3: fix CVE-2020-26116
libproxy: fix CVE-2020-25219
bash: fix CVE-2019-18276
libx11: fix CVE-2020-14363
xserver-xorg: fix CVE-2020-14346/14361/14362
qemu : fix CVE-2020-16092

---------------
Fixes
---------------
build-appliance-image: Update to dunfell head revision
python3: add ldconfig rdepends for python3-ctypes
glib-2.0: correct build with latest meson
ptest-runner: Backport patch to fix inappropriate ioctl error
ptest-runner: fix upstream version check
ptest-runner: Bump to 2.4.0
lib/oe/reproducible.py: Fix git HEAD check
lib/oe/reproducible: Fix error when no git HEAD
classes/reproducible: Move to library code
libbsd: Remove BSD-4-Clause from main package
poky.conf: Bump version for 3.1.4 release
binutils: reproducibility: reuse debug-prefix-map for stabs
testimage: print results for interrupted runs
oeqa/core/context: initialize _run_end_time
oeqa/core/context: expose results as variable
systemd: udev SECLABEL{selinux} crash fix
gstreamer1.0: warn the user when something is wrong with GstBufferPool
clutter-gst-3.0: do not call out to host gstreamer plugin scanner
diffstat: add nativesdk to BBCLASSEXTEND
syslinux: add link to upstream discussion in patch
kernel-module-split.bbclass: identify kernel modconf files as configuration files
alsa-utils: Fix license to GPLv2 only
libdnf: Fix license as it contains 'or later' clause
ptest-runner: Fix license as it contains 'or later' clause
dosfstools: add mkfs.vfat to ALTERNATIVE
Documenation: Prepared for the 3.1.4 release
netbase: bump PE to purge bogus hash equivalence from autobuilder
netbase: update SRC_URI to reflect new file name
linux-firmware: upgrade 20200817 -> 20201022
linux-firmware: package nvidia firmware
linux-firmware: package marvel sdio 8997 firmware
linux-firmware: add Amlogic VDEC firmware package
update_udev_hwdb: clean hwdb.bin
qemuboot.bbclass: Fix a typo
meta: fix some unresponsive homepages and bugtracker links
libsdl2: Fix directfb SDL_RenderFillRect
libsdl2: Fix directfb syntax error
Map license names PSF and PSFv2 to PSF-2.0
Add license text for PSF-2.0
insane: add GitLab /archive/ tests
recipes-core/busybox: fixup licensing information
common-licenses: add bzip2-1.0.4
timezone: upgrade to 2020d
sstatesig: Log timestamps for hashequiv in reprodubile builds for do_package
Revert "lib/oe/patch: fix handling of patches with no header"
lib/oe/patch: GitApplyTree: save 1 echo in commit-msg hook
lib/oe/patch: prevent applying patches without any subject
xcb-proto: backport fix for python gcd function
glib-2.0: fix parsing of slim encoded tzdata
gst-validate: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-python: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-omx: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-rtsp-server: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-vaapi: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-libav: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-plugins-ugly: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-plugins-bad: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-plugins-good: Update 1.16.2 -> Update 1.16.3
gstreamer1.0-plugins-base: Update 1.16.2 -> Update 1.16.3
gstreamer1.0: Update 1.16.2 -> Update 1.16.3
gstreamer1.0: Fix reproducibility issue around libcap
gcc: mitigate the Straight-line Speculation attack
oeqa: Add sync call to command execution
qemu: change TLBs number to 64 in 34Kf mips cpu model
packagegroup-core-tools-debug: Disable for rv32/glibc as well
selftest/virgl: drop the custom 30 sec timeout
siteinfo: Recognize bigendian sh3be and sh4be
siteinfo: Recognize 32bit PPC LE
toolchain-shar-extract.sh: don't print useless info
tune-riscv.inc: use nf suffix also for TUNE_PKGARCH
tune-ep9312.inc: add t suffix for thumb to PACKAGE_EXTRA_ARCHS_tune-ep9312
tune-mips64r6.inc: fix typo in mipsisa64r6-nf
arch-mips.inc: remove duplicated mips64el-o32 from PACKAGE_EXTRA_ARCHS_tune-mips64el-o32
arch-armv7a.inc: fix typo
bitbake: tests/fetch: Update upstream master->main branchname transition
uninative: Fix typo in error message
bitbake-bblayers/create: Make the example recipe print its message
oe-build-perf-report: Ensure correct data is shown for multiple branch options
scripts/oe-build-perf-report: Allow operation with no buildstats
timezone: update to 2020b
linux-yocto/5.4: update to v5.4.69
linux-yocto/5.4: update to v5.4.68
linux-yocto/5.4: update to v5.4.67
linux-yocto/5.4: fix kprobes build warning
classes/sanity: Bump minimum python version to 3.5
libtools-cross/shadow-sysroot: Use nopackages inherit
glibc: do_stash_locale must not delete files from ${D}
stress-ng: Upgrade 0.11.01 -> 0.11.17
lttng-ust: update to 2.11.1
lttng-tools: update to 2.11.5
lttng-modules: update to 2.11.6
Revert "lttng-modules: backport writeback.h changes from 2.12.x to fix kernel 5.4.62+"
bitbake: bitbake: tests/fetch: add unit tests for SRC_URI with spaces in url
bitbake: bitbake: fetch/git: add support for SRC_URI containing spaces in url
bitbake: bitbake-user-manual: Add BBFILES_DYNAMIC
perl: fix ptest test count
oeqa/selftest/cases/devtool.py: avoid .pyc race
wic: Add 512 Byte alignment to --offset
wic: Fix error message when reporting invalid offset
wic: Fix --extra-space argument handling
wic: Add --offset argument for partitions
lttng-modules: backport writeback.h changes from 2.12.x to fix kernel 5.4.62+
linux-yocto/5.4: update to v5.4.65
linux-yocto/5.4: update to v5.4.64
linux-yocto/config: netfilter: Enable nat for ipv4 and ipv6
kernel-yocto: add KBUILD_DEFCONFIG search location to failure message
sstate.bbclass: Check file ownership before doing 'touch -a'
openssh: Allow enable/disable of rng-tools recommendation on sshd
sysvinit rc: Use PSPLASH_FIFO_DIR for progress fifo
packagegroup: rrecommend perf also for musl on ARM
ssh-pregen-hostkeys: Add a recipe with pregenerated ssh host keys
oeqa/selftest/containerimage: Update to match assumptions in configuration
oeqa/selftest/incompatible_lib: Fix append usage
oeqa/qemurunner: Increase serial timeout
buildtools-tarball: Fix conflicts with oe-selftest and other tooling
buildtools: Handle generic environment setup injection
meta: add/fix invalid Upstream-Status tags
curl: Change SRC_URI from http to https
packagegroups: remove strace and lttng-tools for rv32/musl
testexport: rename create_tarball method
dropbear/openssh: Lower priority of key generation
xinput-calibrator: change SRC_URI to branch with libinput support
insane: check for missing update-alternatives inherit
insane: Check for feature check variables not being used
sato-screenshot: improve .la removal
alsa-plugins: improve .la removal
cve-update-db-native: remove unused variable
cve-update-db-native: move -journal checking into do_fetch
cve-update-db-native: be less magical about checking whether the cve-check class is enabled
bash : inlcude patch 17 & 18
site: Make sys_siglist default to no
buildtools-tarball: Add python3-jinja2
python3-jinja2: Import from meta-oe/meta-python
python3-markupsafe: Import from meta-oe/meta-python