subtree updates

poky: ddb298ce89..fc25449687:
  Alex Kiernan (1):
        rust: Upgrade 1.68.1 -> 1.68.2

  Alexander Kanavin (5):
        selftest/distrodata: clean up exception lists in recipe maintainers test
        dhcpcd: use git instead of tarballs
        perl: patch out build paths from native binaries
        libgcrypt: update 1.10.1 -> 1.10.2
        rpm: update 4.18.0 -> 4.18.1

  Andrew Jeffery (1):
        Revert "ipk: Decode byte data to string in manifest handling"

  Archana Polampalli (1):
        git: ignore CVE-2023-25815

  Arslan Ahmad (1):
        kernel-fitimage: Fix the default dtb config check

  Bruce Ashfield (9):
        kernel: improve initramfs bundle processing time
        yocto-bsps: update to v5.15.106
        linux-yocto/5.15: update to v5.15.109
        linux-yocto/5.15: update to v5.15.110
        linux-yocto/5.15: update to v5.15.111
        linux-yocto/5.15: update to v5.15.112
        linux-yocto/5.15: update to v5.15.113
        kernel: don't force PAHOLE=false
        linux-yocto: move build / debug dependencies to .inc

  Chen Qi (1):
        staging.bbclass: do not add extend_recipe_sysroot to prefuncs of prepare_recipe_sysroot

  Chi Xu (1):
        expect: Add ptest support

  Daniel Ammann (1):
        overview-manual: concepts.rst: Fix a typo

  Deepthi Hemraj (1):
        binutils: stable 2.40 branch updates

  Denys Dmytriyenko (1):
        xz: upgrade 5.4.2 -> 5.4.3

  Dmitry Baryshkov (1):
        linux-firmware: upgrade 20230210 -> 20230404

  Eero Aaltonen (1):
        avahi: fix D-Bus introspection

  Enrico Jörns (1):
        package_manager/ipk: fix config path generation in _create_custom_config()

  Jan Vermaete (1):
        cve-update-nvd2-native: added the missing http import

  Joe Slater (1):
        ghostscript: fix CVE-2023-28879

  Johannes Schrimpf (1):
        python3targetconfig.bbclass: Extend PYTHONPATH instead of overwriting

  Kai Kang (1):
        libnotify: remove dependency dbus

  Khem Raj (10):
        cargo: Fix build on musl/riscv
        gawk: Disable known ptest fails on musl
        gawk: Remove redundant patch
        gawk: Add skipped.txt to emit test to ignore
        libxml2: Disable icu tests on musl
        quilt: Fix merge.test race condition
        piglit: Fix c++11-narrowing warnings in tests
        cpio: Run ptests under ptest user
        go: Upgrade 1.20.1 -> 1.20.4
        go: Use -no-pie to build target cgo

  Lee Chee Yang (3):
        release-notes-4.2: update known issues and Repositories/Downloads
        migration-guides: add release-notes for 4.1.4
        migration-guides: add release notes for 4.2.1

  Lorenzo Arena (1):
        conf: add nice level to the hash config ignred variables

  Luca Ceresoli (2):
        ref-manual: classes: kernel: remove incorrect sentence opening
        ref-manual: classes: kernel: document automatic defconfig usage

  Markus Volk (1):
        gtk4: update 4.10.0 -> 4.10.3

  Martin Jansa (7):
        populate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO override
        populate_sdk_ext.bbclass: redirect stderr to stdout so that both end in LOGFILE
        populate_sdk_base.bbclass: respect MLPREFIX for ptest-pkgs's ptest-runner
        binutils: package static libs from gprofng
        go.bbclass: don't use test to check output from ls
        image-live.bbclass: respect IMAGE_MACHINE_SUFFIX
        rpm: drop unused 0001-Rip-out-partial-support-for-unused-MD2-and-RIPEMD160.patch

  Martin Siegumfeldt (1):
        systemd-systemctl: fix instance template WantedBy symlink construction

  Michael Halstead (2):
        uninative: Upgrade to 3.10 to support gcc 13
        uninative: Upgrade to 4.0 to include latest gcc 13.1.1

  Michael Opdenacker (2):
        migration-guides: release-notes-4.2: add doc improvement highlights
        releases.svg: fix and explain duration of Hardknott 3.3

  Mikko Rapeli (1):
        qemurunner: avoid leaking server_socket

  Ming Liu (1):
        weston: add xwayland to DEPENDS for PACKAGECONFIG xwayland

  Otavio Salvador (1):
        mesa: 23.0.2 -> 23.0.3

  Pablo Saavedra (1):
        gstreamer1.0: upgrade 1.22.0 -> 1.22.2

  Paul Gortmaker (1):
        scripts: fix buildstats diff/summary hard bound to host python3

  Pavel Zhukov (1):
        lib/terminal.py: Add urxvt terminal

  Pawan Badganchi (1):
        tiff: Add fix for CVE-2022-4645

  Peter Bergin (1):
        update-alternatives.bbclass: fix old override syntax

  Peter Kjellerstedt (3):
        license.bbclass: Include LICENSE in the output when it fails to parse
        musl: Correct SRC_URI
        xf86-video-intel: Use the HTTPS protocol to fetch the Git repositories

  Piotr Łobacz (1):
        libarchive: Enable acls, xattr for native as well as target

  Qiu Tingting (2):
        e2fsprogs: fix ptest bug for second running
        e2fsprogs: Fix error SRCDIR when using usrmerge DISTRO_FEATURES

  Randy MacLeod (1):
        vim: upgrade 9.0.1429 -> 9.0.1527

  Ranjitsinh Rathod (2):
        libbsd: Add correct license for all packages
        kmscube: Correct DEPENDS to avoid overwrite

  Richard Purdie (8):
        qemu: Add fix for powerpc instruction fallback issue
        qemu: Update ppc instruction fix to match revised upstream version
        glib-networking: Add test retry to avoid failures
        glib-networking: Correct glib error handling in test patch
        maintainers.inc: Fix email address typo
        maintainers.inc: Move repo to unassigned
        recipes: Default to https git protocol where possible
        selftest/reproducible: Allow native/cross reuse in test

  Ross Burton (5):
        connman: backport fix for CVE-2023-28488
        cpio: fix appending to archives larger than 2GB
        machine/qemuarm*: don't explicitly set vmalloc
        gdb: fix crashes when debugging threads with Arm Pointer Authentication enabled
        meta: depend on autoconf-archive-native, not autoconf-archive

  Steve Sakoman (3):
        Revert "xserver-xorg: backport fix for CVE-2023-1393"
        poky.conf: bump version for 4.2.1 release
        build-appliance-image: Update to mickledore head revision

  Sudip Mukherjee (4):
        libxfixes: Upgrade to v6.0.1
        xwininfo: upgrade to v1.1.6
        xinput: upgrade to v1.6.4
        libxi: upgrade to v1.8.1

  Thomas Roos (3):
        oeqa/utils/metadata.py: Fix running oe-selftest running with no distro set
        oeqa/selftest/cases/devtool.py: skip all tests require folder a git repo
        oeqa: adding selftest-hello and use it to speed up tests

  Tim Orling (1):
        libmodule-build-perl: upgrade 0.4232 -> 0.4234

  Tom Hochstein (1):
        piglit: Add missing glslang dependencies

  Ulrich Ölmann (1):
        ref-manual: classes.rst: fix typo

  Upgrade Helper (1):
        waffle: upgrade 1.7.0 -> 1.7.2

  Virendra Thakur (1):
        qemu: Whitelist CVE-2023-0664

  Wang Mingyu (18):
        apr: upgrade 1.7.2 -> 1.7.3
        bind: upgrade 9.18.12 -> 9.18.13
        cracklib: upgrade 2.9.10 -> 2.9.11
        libhandy: upgrade 1.8.1 -> 1.8.2
        libpcap: upgrade 1.10.3 -> 1.10.4
        libsdl2: upgrade 2.26.3 -> 2.26.5
        mpg123: upgrade 1.31.2 -> 1.31.3
        man-pages: upgrade 6.03 -> 6.04
        mtools: upgrade 4.0.42 -> 4.0.43
        pango: upgrade 1.50.13 -> 1.50.14
        ruby: upgrade 3.2.1 -> 3.2.2
        texinfo: upgrade 7.0.2 -> 7.0.3
        wpebackend-fdo: upgrade 1.14.0 -> 1.14.2
        xserver-xorg: upgrade 21.1.7 -> 21.1.8
        xwayland: upgrade 22.1.8 -> 23.1.1
        vala: upgrade 0.56.4 -> 0.56.6
        mesa: upgrade 23.0.0 -> 23.0.2
        iso-codes: upgrade 4.13.0 -> 4.15.0

  Xiangyu Chen (1):
        sysstat: Fix CVE-2023-33204

  Yoann Congal (1):
        cve-extra-exclusions: linux-yocto: ignore fixed CVE-2023-1652 & CVE-2023-1829

  Zhixiong Chi (1):
        libpam: Fix the xtests/tst-pam_motd[1|3] failures

  bkylerussell@gmail.com (1):
        kernel-devsrc: depend on python3-core instead of python3

  hen Qi (1):
        unfs3: fix symlink time setting issue

  nikhil (1):
        tiff: Remove unused patch from tiff

meta-raspberrypi: bf948e0aa8..aa0aed9a08:
  Florin Sarbu (1):
        udev-rules-rpi: Use 99-com.rules directly from upstream

  Martin Jansa (3):
        rpi-libcamera-apps: fix flags used in aarch64 builds
        rpi-libcamera-apps: fix version generation on hosts with older python
        rpi-libcamera-apps: bump to latest SRCREV and set PV

meta-openembedded: 2d89a469e5..9286582126:
  Alexander Amelkin (1):
        ipmitool: Update links

  Arsalan H. Awan (1):
        meta-networking/licenses/netperf: remove unused license

  Bartosz Golaszewski (2):
        python3-gpiod: add missing run-time dependencies
        libgpiod: install the libgpiosim header

  Bergin, Peter (1):
        freediameter: fix typo and old overide syntax

  Bhargav Das (2):
        tslib: Add native & nativestdk package support
        pointercal: Add native & nativestdk package support

  Changqing Li (1):
        redis: upgrade 6.2.11 -> 6.2.12

  Chen Qi (1):
        frr: add CVE_PRODUCT

  Jasper Orschulko (1):
        python3-gcovr: Add missing runtime dependency

  Joe Slater (1):
        bats: use baselib

  Khem Raj (48):
        fwupd: Do not emit build time paths into generated headers
        libcereal: Fix TMPDIR leaking into debug_str section
        libtimezonemap: Point to a working SRC_URI
        unixODBC: Update SRC_URI to use updated location of tarball
        unicode-ucd: Update license URI to reflect renamed license
        libx86: Point to working SRC_URI
        ctapi-common: Point to working SRC_URI locations
        netkit-ftp: Update to debian patch 34
        nicstat: Use SOURCEFORGE_MIRROR in SRC_URI
        rp-pppoe: Point SRC_URI to valid location
        ttf-mplus: Point to valid download location for SRC_URI
        ttf-lklug: Point SRC_URI to a working location
        radiusclient-ng: Point SRC_URI to archive.ubuntu.com
        httpfs2: Do not use S during compile/install tasks
        p910nd: Switch to using github for SRC_URI
        mosh: Point SRC_URI to https://mosh.org/
        debootstrap: Update SRC_URI to point to valid URL
        debootstrap: Use DEBIAN_MIRROR for SRC_URI
        ttf-gentium: Switch to debian archive mirror for SRC_URI
        nfacct: Update SRC_URI to point to valid URL
        libencode-perl: Remove buildpaths from generated .exh files
        enca: Remove buildpaths from target scripts
        libirecovery: Add missing build dependency on readline
        fftw: Remove hardcoded sysroot into binaries
        lmdb: Pass CFLAGS to Makefile
        php: Remove buildpaths from scripts and generated headers
        uw-imap: Pass CFLAGS from environment
        libmad: Add a patch to pass cflags to build
        libpeas: Fix reference to TMPDIR in tests
        lirc: Define SH_PATH=/bin/sh
        mce-inject: Pass CFLAGS to make
        nbdkit: Remove buildpaths from binaries
        mpv: Remove references to builddir from mpv binary
        libnice: Remove buildpaths from binaries
        curlpp: Remove references to buildpaths e.g. TMPDIR
        unbound: Remove references to buildpaths
        uml-utilities: Fix references to TMPDIR
        openct: Fix buildpaths being emitted into generated types.h
        minifi-cpp: Remove references to buildpaths in generated files
        freerdp: Fix reference to TMPDIR in libfreerdp2.so
        nautilus: Fix buildpath QA errors
        cgdb: Fix buildpaths emitted into cgdb binary
        ibus: Point python interpreter to target location
        gimp: Fix buildpaths in binaries and scripts
        libgphoto2: Edit out sysroot from CC variable in configure
        vlan: Pass CFLAGS via CCFLAGS
        sgpio: Pass CFLAGS to make
        x265: Pass --debug-prefix-map to nasm

  Markus Volk (1):
        polkit: update SRC_URI

  Martin Jansa (16):
        lirc: fix do_install with multilib
        dleyna-{server,renderer}: fix dev-so QA issue with multilib
        libreport: add dependency on libarchive
        libxmlb: add missing dependency on glib-2.0 and xz
        geoclue: fix build without gobject-introspection-data
        appstream: fix build without gobject-introspection-data
        ostree: fix build without gobject-introspection-data
        rdfind: fix build with -Werror=return-type
        spice-gtk: respect gobject-introspection-data
        cpulimit: fix do_install with multilib
        libnfs: fix installed-vs-shipped issues with multilib
        btrfsmaintenance: install to ${datadir}/${BPN}
        libtomcrypt: pass LIBPATH to fix installed-vs-shipped with multilib
        nanopb: fix installed-vs-shipped with multilib
        nv-codec-headers: fix installed-vs-shipped with multilib
        zfs: fix installation paths for multilib

  Ming Liu (2):
        libusbgx: drop hard-coded /usr/bin,/etc
        libusbgx: check scripts in /etc/usbgx.d

  Mingli Yu (2):
        php: Link with libatomic on rv64
        minicoredumper: correct the sysvinit service file attribute

  Peter Marko (1):
        ntp: whitelist CVE-2019-11331

  Petr Gotthard (1):
        gensio: fix QA issue: non -staticdev package with .a libraries

  Valeria Petrov (1):
        apache2: upgrade 2.4.56 -> 2.4.57

  Virendra Thakur (2):
        p7zip: fix for CVE-2018-5996
        p7zip: Fix for CVE-2016-9296

  Wang Mingyu (6):
        redis: upgrade 7.0.10 -> 7.0.11
        hdf5: Fix install conflict when enable multilib.
        php: upgrade 8.2.4 -> 8.2.5
        postgresql: upgrade 15.2 -> 15.3
        php: upgrade 8.2.5 -> 8.2.6
        nautilus: upgrade 44.0 -> 44.1

  Yogita Urade (1):
        dlt-daemon: fix CVE-2023-26257

  schitrod=cisco.com@lists.openembedded.org (1):
        gnulib: Update recipe name to 2018-12-18

meta-security: 53c5cc794f..d7db0a3bd1:
  Peter Hoyes (1):
        meta-parsec/layer.conf: Insert addpylib declaration

meta-arm: 0b5724266a..8db460fa5d:
  Abdellatif El Khlifi (2):
        kas: corstone1000: set branches to mickledore
        arm-bsp/u-boot: corstone1000: upgrade NVMXIP support

  Emekcan Aras (3):
        arm-bsp/trusted-firmware-m: Align Capsule Update with GPT changes
        arm-bsp/wic: corstone1000: Fix and limit the partition size for corstone1000
        arm-bsp/u-boot: corstone1000: enable PSCI reset

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Id8a293d03f6c2320ff407a7aaed4416038ba04ed

1 files changed, 108 insertions, 0 deletions

diff --git a/poky/meta/recipes-extended/pam/libpam/0001-pam_motd-do-not-rely-on-all-filesystems-providing-a-.patch b/poky/meta/recipes-extended/pam/libpam/0001-pam_motd-do-not-rely-on-all-filesystems-providing-a-.patch
new file mode 100644
index 0000000000..94dcb04f0a
--- /dev/null
+++ b/poky/meta/recipes-extended/pam/libpam/0001-pam_motd-do-not-rely-on-all-filesystems-providing-a-.patch
@@ -0,0 +1,108 @@
+From 42404548721c653317c911c83d885e2fc7fbca70 Mon Sep 17 00:00:00 2001
+From: Per Jessen <per@jessen.ch>
+Date: Fri, 22 Apr 2022 18:15:36 +0200
+Subject: [PATCH] pam_motd: do not rely on all filesystems providing a filetype
+
+When using scandir() to look for MOTD files to display, we wrongly
+relied on all filesystems providing a filetype.  This is a fix to divert
+to lstat() when we have no filetype.  To maintain MT safety, it isn't
+possible to use lstat() in the scandir() filter function, so all of the
+filtering has been moved to an additional loop after scanning all the
+motd dirs.
+Also, remove superfluous alphasort from scandir(), we are doing
+a qsort() later.
+
+Resolves: https://github.com/linux-pam/linux-pam/issues/455
+
+Upstream-Status: Backport [https://github.com/linux-pam/linux-pam/commit/42404548721c653317c911c83d885e2fc7fbca70]
+
+Signed-off-by: Per Jessen <per@jessen.ch>
+Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
+---
+ modules/pam_motd/pam_motd.c | 49 ++++++++++++++++++++++++++++++-------
+ 1 file changed, 40 insertions(+), 9 deletions(-)
+
+diff --git a/modules/pam_motd/pam_motd.c b/modules/pam_motd/pam_motd.c
+index 6ac8cba2..5ca486e4 100644
+--- a/modules/pam_motd/pam_motd.c
++++ b/modules/pam_motd/pam_motd.c
+@@ -166,11 +166,6 @@ static int compare_strings(const void *a, const void *b)
+     }
+ }
+ 
+-static int filter_dirents(const struct dirent *d)
+-{
+-    return (d->d_type == DT_REG || d->d_type == DT_LNK);
+-}
+-
+ static void try_to_display_directories_with_overrides(pam_handle_t *pamh,
+ 	char **motd_dir_path_split, unsigned int num_motd_dirs, int report_missing)
+ {
+@@ -199,8 +194,7 @@ static void try_to_display_directories_with_overrides(pam_handle_t *pamh,
+ 
+     for (i = 0; i < num_motd_dirs; i++) {
+ 	int rv;
+-	rv = scandir(motd_dir_path_split[i], &(dirscans[i]),
+-		filter_dirents, alphasort);
++	rv = scandir(motd_dir_path_split[i], &(dirscans[i]), NULL, NULL);
+ 	if (rv < 0) {
+ 	    if (errno != ENOENT || report_missing) {
+ 		pam_syslog(pamh, LOG_ERR, "error scanning directory %s: %m",
+@@ -215,6 +209,41 @@ static void try_to_display_directories_with_overrides(pam_handle_t *pamh,
+     if (dirscans_size_total == 0)
+         goto out;
+ 
++    /* filter out unwanted names, directories, and complement data with lstat() */
++    for (i = 0; i < num_motd_dirs; i++) {
++	struct dirent **d = dirscans[i];
++	for (unsigned int j = 0; j < dirscans_sizes[i]; j++) {
++	    int rc;
++	    char *fullpath;
++	    struct stat s;
++
++	    switch(d[j]->d_type) {    /* the filetype determines how to proceed */
++	    case DT_REG:              /* regular files and     */
++	    case DT_LNK:              /* symlinks              */
++		continue;             /* are good.             */
++	    case DT_UNKNOWN:   /* for file systems that do not provide */
++			       /* a filetype, we use lstat()           */
++		if (join_dir_strings(&fullpath, motd_dir_path_split[i],
++				     d[j]->d_name) <= 0)
++		    break;
++		rc = lstat(fullpath, &s);
++		_pam_drop(fullpath);  /* free the memory alloc'ed by join_dir_strings */
++		if (rc != 0)          /* if the lstat() somehow failed */
++		    break;
++
++		if (S_ISREG(s.st_mode) ||          /* regular files and  */
++		    S_ISLNK(s.st_mode)) continue;  /* symlinks are good  */
++		break;
++	    case DT_DIR:          /* We don't want directories     */
++	    default:              /* nor anything else             */
++		break;
++	    }
++	    _pam_drop(d[j]);  /* free memory                   */
++	    d[j] = NULL;      /* indicate this one was dropped */
++	    dirscans_size_total--;
++	}
++    }
++
+     /* Allocate space for all file names found in the directories, including duplicates. */
+     if ((dirnames_all = calloc(dirscans_size_total, sizeof(*dirnames_all))) == NULL) {
+ 	pam_syslog(pamh, LOG_CRIT, "failed to allocate dirname array");
+@@ -225,8 +254,10 @@ static void try_to_display_directories_with_overrides(pam_handle_t *pamh,
+ 	unsigned int j;
+ 
+ 	for (j = 0; j < dirscans_sizes[i]; j++) {
+-	    dirnames_all[i_dirnames] = dirscans[i][j]->d_name;
+-	    i_dirnames++;
++	    if (NULL != dirscans[i][j]) {
++	        dirnames_all[i_dirnames] = dirscans[i][j]->d_name;
++	        i_dirnames++;
++	    }
+ 	}
+     }
+ 
+-- 
+2.39.0
+