subtree updates

meta-openembedded: 0e3f5e5201..491b7592f4:
  Alexander Kanavin (1):
        libadwaita: move recipe to oe-core

  Andrej Valek (1):
        cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

  Archana Polampalli (1):
        yasm: fix CVE-2023-31975

  Chase Qi (1):
        meta-python: add python3-telnetlib3 package

  Chen Qi (3):
        iperf3: remove incorrect CVE_PRODUCT setting
        open-vm-tools: add CVE_PRODUCT
        grpc: fix CVE-2023-32732

  Chi Xu (1):
        lapack: Add ptest support

  Chris Dimich (1):
        image_types_sparse: Fix syntax error

  Christian Hohnstaedt (1):
        android-tools: fix QA warning about buildpaths

  Christophe Vu-Brugier (2):
        libnvme: add recipe
        nvme-cli: upgrade 1.13 -> 2.5

  Etienne Cordonnier (1):
        uutils-coreutils: upgrade 0.0.19 -> 0.0.20

  Gianfranco Costamagna (3):
        vbxguestdrivers: upgrade 7.0.8 -> 7.0.10
        dlt-daemon: Add patch to fix build with googletest 1.13
        gpsd: make sure gps-utils-python runtime-depends on python3-pyserial

  JD Schroeder (2):
        radvd: Fix groupname gid change warning
        cyrus-sasl: Fix groupname gid change warning

  Jan Vermaete (1):
        openh264: version bump 2.1.1 -> 2.3.1

  Jasper Orschulko (1):
        yaml-cpp: Fix cmake export

  Khem Raj (9):
        openwsman: Link with -lm to get floor() definition
        portaudio-v19: Update to latest tip of trunk
        python3-pyaudio: Fix cross builds
        poco: Fix ptests
        pcmciautils: Pass LD=CC via Make cmdline
        ply: Pass LD via environment to configure
        sip: upgrade 6.7.10 -> 6.7.11
        nodejs: Upgrade to 18.17.0
        python3-m2crypto: Remove __pycache__ files

  Marek Vasut (1):
        libiio: update to version 0.25

  Markus Volk (9):
        pipewire: update 0.3.73 -> 0.3.75
        libcamera: update 0.0.5 -> 0.1.0
        webkitgtk3: add recipe
        geary: update 43.0 -> 44.0
        webkitgtk3: upgrade 2.40.2 -> 2.40.5
        fuse3: update 3.14.1 -> 3.15.1
        pipewire: update 0.3.75 -> 0.3.77
        pipewire: add support for liblc3
        gnome-software: update 44.3 -> 44.4

  Martin Jansa (4):
        libtommath: add recipe for LibTomMath used by dropbear
        libtomcrypt: backport a fix for CVE-2019-17362
        libtomcrypt: add PACKAGECONFIG for ltm enabled by default
        dlm: Do not use -fcf-protection=full on aarch64 platforms

  Michael Opdenacker (7):
        remove unused AUTHOR variable
        remove unused AUTHOR variable
        remove unused AUTHOR variable
        remove unused AUTHOR variable
        remove unused AUTHOR variable
        remove unused AUTHOR variable
        meta-python: Remove unused AUTHOR variable

  Mingli Yu (2):
        dracut: Remove busybox from RRECOMMENDS
        mariadb: Upgrade to 10.11.4

  Nicolas Marguet (2):
        rsyslog: update from 8.2302.0 to 8.2306.0
        rsyslog: Fix function inline errors in debug optimization

  Peter Marko (1):
        cve_check: fix conversion errors

  Ramon Fried (1):
        bitwise: Upgrade 0.43 -> 0.50

  Ross Burton (1):
        cherokee: add CVE_PRODUCT

  Tim Orling (1):
        libmodule-build-tiny-perl: upgrade 0.045 -> 0.046

  Trevor Gamblin (31):
        python3-django: upgrade 4.2.2 -> 4.2.3
        python3-ipython: upgrade 8.12.0 -> 8.14.0
        python3-awesomeversion: upgrade 22.9.0 -> 23.5.0
        python3-binwalk: upgrade 2.3.3 -> 2.3.4
        python3-bitstring: upgrade 3.1.9 -> 4.0.2
        python3-bitstring: add python3-io to RDEPENDS, alphabetize
        python3-blinker: upgrade 1.5 -> 1.6.2
        python3-blinker: add python3-asyncio to RDEPENDS
        python3-execnet: upgrade 1.9.0 -> 2.0.2
        python3-flask: upgrade 2.2.3 -> 2.3.2
        python3-flask: add python3-blinker to RDEPENDS, alphabetize
        python3-greenstalk: upgrade 2.0.0 -> 2.0.2
        python3-humanize: upgrade 4.4.0 -> 4.7.0
        python3-versioneer: add recipe
        python3-parse: upgrade 1.19.0 -> 1.19.1
        python3-pandas: upgrade 1.5.3 -> 2.0.3
        python3-pyperf: upgrade 2.5.0 -> 2.6.1
        python3-rdflib: upgrade 6.2.0 -> 6.3.2
        python3-semver: upgrade 2.13.0 -> 3.0.1
        python3-send2trash: upgrade 1.8.0 -> 1.8.2
        python3-sh: upgrade 1.14.3 -> 2.0.4
        python3-snagboot: upgrade 1.0 -> 1.1
        python3-werkzeug: upgrade 2.2.3 -> 2.3.6
        python3-beautifulsoup4: upgrade 4.11.1 -> 4.12.2
        python3-fastjsonschema: upgrade 2.16.3 -> 2.18.0
        python3-jsonpatch: upgrade 1.32 -> 1.33
        python3-m2crypto: upgrade 0.38.0 -> 0.39.0
        python3-matplotlib: upgrade 3.6.3 -> 3.7.2
        python3-pyaudio: upgrade 0.2.11 -> 0.2.13
        python3-pybind11: upgrade 2.10.3 -> 2.11.1
        python3-sqlparse: upgrade 0.4.3 -> 0.4.4

  Vivien Didelot (1):
        libcamera: bump to latest master

  Wang Mingyu (83):
        c-periphery: upgrade 2.4.1 -> 2.4.2
        ctags: upgrade 6.0.20230611.0 -> 6.0.20230716.0
        gensio: upgrade 2.6.6 -> 2.6.7
        gnome-commander: upgrade 1.16.0 -> 1.16.1
        hiredis: upgrade 1.1.0 -> 1.2.0
        iperf3: upgrade 3.13 -> 3.14
        iwd: upgrade 2.6 -> 2.7
        libbytesize: upgrade 2.8 -> 2.9
        libinih: upgrade 56 -> 57
        libnftnl: upgrade 1.2.5 -> 1.2.6
        lvgl: upgrade 8.3.7 -> 8.3.8
        bats: upgrade 1.9.0 -> 1.10.0
        function2: upgrade 4.2.2 -> 4.2.3
        lmdb: upgrade 0.9.29 -> 0.9.31
        redis: upgrade 6.2.12 -> 6.2.13
        ser2net: upgrade 4.3.12 -> 4.3.13
        python3-obd: upgrade 0.7.1 -> 0.7.2
        python3-path: upgrade 16.6.0 -> 16.7.1
        nginx: upgrade 1.24.0 -> 1.25.1
        php: upgrade 8.2.7 -> 8.2.8
        python3-charset-normalizer: upgrade 3.1.0 -> 3.2.0
        python3-click: upgrade 8.1.3 -> 8.1.5
        python3-dnspython: upgrade 2.3.0 -> 2.4.0
        python3-engineio: upgrade 4.4.1 -> 4.5.1
        python3-eth-utils: upgrade 2.1.1 -> 2.2.0
        python3-frozenlist: upgrade 1.3.3 -> 1.4.0
        python3-gevent: upgrade 22.10.2 -> 23.7.0
        python3-google-api-python-client: upgrade 2.92.0 -> 2.93.0
        python3-google-auth: upgrade 2.21.0 -> 2.22.0
        python3-mock: upgrade 5.0.2 -> 5.1.0
        python3-platformdirs: upgrade 3.8.0 -> 3.9.1
        python3-protobuf: upgrade 4.23.3 -> 4.23.4
        python3-pymisp: upgrade 2.4.172 -> 2.4.173
        python3-pymongo: upgrade 4.4.0 -> 4.4.1
        python3-tox: upgrade 4.6.3 -> 4.6.4
        python3-virtualenv: upgrade 20.23.1 -> 20.24.0
        python3-zeroconf: upgrade 0.70.0 -> 0.71.0
        redis-plus-plus: upgrade 1.3.9 -> 1.3.10
        redis: upgrade 7.0.11 -> 7.0.12
        smemstat: upgrade 0.02.11 -> 0.02.12
        tesseract: upgrade 5.3.1 -> 5.3.2
        weechat: upgrade 4.0.1 -> 4.0.2
        wireshark: upgrade 4.0.6 -> 4.0.7
        xterm: upgrade 383 -> 384
        lastlog2: add new recipe
        wtmpdb: add new recipe
        babeld: upgrade 1.12.2 -> 1.13.1
        ctags: upgrade 6.0.20230716.0 -> 6.0.20230730.0
        gspell: upgrade 1.12.1 -> 1.12.2
        libcompress-raw-bzip2-perl: upgrade 2.204 -> 2.206
        libcompress-raw-lzma-perl: upgrade 2.204 -> 2.206
        libcompress-raw-zlib-perl: upgrade 2.204 -> 2.206
        libio-compress-lzma-perl: upgrade 2.204 -> 2.206
        libio-compress-perl: upgrade 2.204 -> 2.206
        libqb: upgrade 2.0.7 -> 2.0.8
        logcheck: upgrade 1.4.2 -> 1.4.3
        mdio-tools,mdio-netlink: Upgrade recipes to 1.3.0
        python3-dill: upgrade 0.3.6 -> 0.3.7
        python3-gunicorn: upgrade 20.1.0 -> 21.2.0
        python3-web3: upgrade 6.3.0 -> 6.7.0
        python3-aiohttp: upgrade 3.8.4 -> 3.8.5
        python3-bitarray: upgrade 2.7.6 -> 2.8.0
        python3-click: upgrade 8.1.5 -> 8.1.6
        python3-cmake: upgrade 3.26.4 -> 3.27.0
        python3-configargparse: upgrade 1.5.5 -> 1.7
        python3-cytoolz: upgrade 0.12.1 -> 0.12.2
        python3-dnspython: upgrade 2.4.0 -> 2.4.1
        python3-elementpath: upgrade 4.1.4 -> 4.1.5
        python3-flask-socketio: upgrade 5.3.4 -> 5.3.5
        python3-gnupg: upgrade 0.5.0 -> 0.5.1
        python3-google-api-python-client: upgrade 2.93.0 -> 2.95.0
        python3-grpcio: upgrade 1.56.0 -> 1.56.2
        python3-jedi: upgrade 0.18.2 -> 0.19.0
        python3-marshmallow: upgrade 3.19.0 -> 3.20.1
        python3-portion: upgrade 2.4.0 -> 2.4.1
        python3-pymodbus: upgrade 3.3.2 -> 3.4.1
        python3-robotframework: upgrade 6.1 -> 6.1.1
        python3-tomlkit: upgrade 0.11.8 -> 0.12.1
        python3-typeguard: upgrade 4.0.0 -> 4.1.0
        python3-virtualenv: upgrade 20.24.0 -> 20.24.2
        python3-zeroconf: upgrade 0.71.0 -> 0.71.4
        rdma-core: upgrade 46.0 -> 47.0
        sip: upgrade 6.7.9 -> 6.7.10

  Willy Tu (1):
        mstpd: Add initial recipe for mstpd

  Yi Zhao (4):
        samba: upgrade 4.18.4 -> 4.18.5
        libnfnetlink: enable native build
        libnetfilter-queue: enable native build
        daq: enable nfq module build

meta-raspberrypi: e3f733cadd..5e2f79a6fa:
  Jan Vermaete (2):
        kas-poky-rpi.yml: renamed ABORT to HALT
        rpi-base.inc: add the disable-wifi overlay

  Khem Raj (1):
        rpi-base: Remove customizing SPLASH var

  Martin Jansa (1):
        libcamera: update PACKAGECONFIG for libcamera-0.1.0

  Vincent Davis Jr (1):
        rpidistro-vlc: fix error uint64_t does not name

  Vivien Didelot (10):
        rpi-libcamera-apps: fix Illegal Instruction
        rpi-libcamera-apps: add opencv build dependency
        rpi-libcamera-apps: add drm support
        rpi-libcamera-apps: replace tensorflow config
        rpi-libcamera-apps: don't force COMPATIBLE_MACHINE
        rpi-libcamera-apps: rename to libcamera-apps
        libcamera-apps: move recipe to dynamic-layers
        libcamera-apps: bump to 3d9ac10
        libcamera-apps: switch from CMake to meson
        libcamera-apps: bump to latest main

meta-arm: b4d50a273d..992c07f7c0:
  Abdellatif El Khlifi (2):
        arm-bsp/trusted-firmware-a: corstone1000: psci: SMCCC_ARCH_FEATURES discovery through PSCI_FEATURES
        arm-bsp/u-boot: corstone1000: upgrade to v2023.07

  Adam Johnston (1):
        arm-bsp/trusted-firmware-a: Reserve OP-TEE memory from NWd on N1SDP

  Emekcan Aras (1):
        arm-bsp/u-boot: corstone1000: increase the kernel size

  Jon Mason (9):
        CI: add defaults for get-binary-toolchains
        CI: workaround 32bit timer warning in binary toolchain
        arm-bsp/corstone1000: update u-boot preferred version
        arm-toolchain/gcc-aarch64-none-elf: upgrade to 12.3.rel1
        arm/edk2: move 202211 recipe to meta-arm-bsp
        arm-bsp: clean-up patch noise
        arm/optee-test: update musl workaround patch
        arm-bsp/tc1: remove trusted-firmware-m target
        arm/trusted-firmware-m: upgrade to v1.8.0

  Robbie Cao (1):
        arm/recipes-kernel: Add preempt-rt support for generic-arm64

  Ross Burton (5):
        arm-toolchain/androidclang: remove
        arm-toolchain/arm-binary-toolchain: install to a versioned directory
        arm-toolchain/gcc-arm-none-eabi-11.2: add new recipe
        arm/trusted-firmware-m: explicitly use Arm GCC 11.2
        arm-toolchain/gcc-arm-none-eabi: upgrade to 12.3.rel1

  Ziad Elhanafy (1):
        arm/recipes-devtools,doc: Update FVP version

poky: b398c7653e..71282bbc53:
  Alex Kiernan (3):
        base-passwd: Add the sgx group
        udev: eudev: Revert add group to sgx
        poky/poky-tiny: Explicitly exclude `shadow`

  Alexander Kanavin (25):
        meta: add missing summaries for image recipes
        insane.bbclass: add do_recipe_qa task
        devtool: do not run recipe_qa task when extracting source
        insane.bbclass: add a SUMMARY/HOMEPAGE check (oe-core recipes only)
        insane.bbclass: add a RECIPE_MAINTAINER check (oe-core recipes only)
        librsvg: fix upstream version check
        acpica: tarball and homepage relocated to intel.com
        gnu-efi: upgrade 3.0.15 -> 3.0.17
        gettext-minimal-native: obtain the needed files directly from gettext source tarball
        kbd: upgrade 2.6.0 -> 2.6.1
        systemd: upgrade 253.3 -> 253.7
        jquery: upgrade 3.6.3 -> 3.7.0
        strace: upgrade 6.3 -> 6.4
        sudo: update 1.9.13p3 -> 1.9.14p2
        libadwaita: add recipe from meta-gnome
        epiphany: upgrade 43.1 -> 44.5
        glibc-locale: use stricter matching for metapackages' runtime dependencies
        uninative-tarball: install the full set of gconv modules
        buildtools-extended-tarball: install the full set of gconv modules
        procps: address failure with gettext 0.22
        util-linux: upgrade 2.38.1 -> 2.39.1
        ref-manual: document image-specific variant of INCOMPATIBLE_LICENSE
        devtool/upgrade: raise an error if extracting source produces more than one directory
        scripts/lib/scriptutils.py: add recipe_qa artifacts to exclusion list in filter_src_subdirs()
        curl: ensure all ptest failures are caught

  Alexandre Belloni (2):
        base-files: bump PR because conf files are now sorted
        wic: bootimg-efi: Stop hardcoding VMA offsets

  Alexis Lothoré (3):
        scripts/resulttool: add mention about new detected tests
        scripts/resulttool: allow to replace test raw status with custom string
        scripts/resulttool: define custom string for "not found" test results

  Andrej Valek (2):
        maintainers.inc: Modify email address
        ref-manual: document CVE_STATUS and CVE_CHECK_STATUSMAP

  Anuj Mittal (4):
        glibc/check-test-wrapper: don't emit warnings from ssh
        selftest/cases/glibc.py: increase the memory for testing
        oeqa/utils/nfs: allow requesting non-udp ports
        selftest/cases/glibc.py: switch to using NFS over TCP

  BELOUARGA Mohamed (3):
        linux-firmware : Add firmware of RTL8822 serie
        bitbake: bitbake: fetch2/npmsw: Check if there are dependencies before trying to fetch them
        bitbake: fetch2: Check if path is 'None' before calculating checksums

  Bruce Ashfield (11):
        kernel: make LOCALVERSION consistent between recipes
        linux-yocto/6.4: fix CONFIG_LEDS_TRIGGER_GPIO kernel audit warning
        linux-yocto/6.4: update to v6.4.6
        linux-yocto/6.1: update to v6.1.41
        linux-yocto/6.4: update to v6.4.7
        linux-yocto-dev: bump to v6.5+
        linux-yocto/6.4: update to v6.4.8
        linux-yocto/6.1: update to v6.1.43
        linux-yocto/6.4: update to v6.4.9
        linux-yocto/6.4: fix qemuarm boot failure
        linux-yocto-tiny/6.4: fix HID configuration warning

  Chen Qi (4):
        ncurses: fix CVE-2023-29491
        multilib.conf: explicitly make MULTILIB_VARIANTS vardeps on MULTILIBS
        gcc-crosssdk: ignore MULTILIB_VARIANTS in signature computation
        openssh: sync with upstream's default

  Christopher Larson (6):
        bitbake: tests.data: add test for inline python calling a def'd function
        bitbake: tests.codeparser: add test for exec of builtin from inline python
        bitbake: data_smart: check for python builtins directly for context lookup
        bitbake: tests.data: add test for builtin preferred over metadata value
        bitbake: data_smart: directly check for methodpool functions in context lookup
        bitbake: bb.tests.data: don't require the func flag for context functions

  Denis OSTERLAND-HEIM (1):
        kernel-fitImage: add machine compatible to config section

  Dit Kozmaj (1):
        bitbake: fetch2: Set maxsplit to match expected variables

  Dmitry Baryshkov (5):
        kmscube: bump SRCREV to get offscreen rendering to work
        linux-firmware: package firmare for Dragonboard 410c
        mesa: simplify overriding GALLIUMDRIVERS_LLVM
        mesa: enable swrast Vulkan driver if LLVM drivers are enabled
        linux-firmware: split platform-specific Adreno shaders to separate packages

  Frederic Martinsons (4):
        ptest-cargo.bbclass: Support of cargo workspaces
        cargo.bbclass: Use --frozen flag for cargo operations
        cargo_common.bbclass: Handle Cargo.lock modifications for git dependencies
        rust-hello-world: Drop recipe

  Jean-Marie Lemetayer (1):
        package: always sort the conffiles

  Joel Stanley (1):
        kernel: don't fail if Modules.symvers doesn't exist

  Jose Quaresma (1):
        systemd: fix efi stubs

  Joshua Watt (1):
        bitbake: contrib: vim: Fix up a few errors when reloading

  Julien Stephan (1):
        libexif: add ptest support

  Khem Raj (16):
        nfs-utils: Fix host path contamination building locktest
        ltp: Use bfd linker when lld is distro linker default
        ffmpeg: Use bfd linker on i386 when lld is distro linker default
        ltp: Use bfd linker for KVM_LD as well when ld-is-lld
        autoconf: Backport upstreamed patches
        Revert "site: merged common-glibc from OE"
        x32-linux: Do not cache ac_cv_sys_file_offset_bits
        gcc: Upgrade to 13.2 release
        gnu-efi: Fix build break on riscv64
        ffmpeg: Fix wrong code found with gas/2.41
        systemd: Point to target binary paths for loadkeys and setfont
        systemd: Make 254 work on musl
        musl: Upgrade to tip of trunk
        binutils: Upgrade to 2.41 release
        systemd-boot: Ensure EFI_LD is also passed to compiler driver
        pm-utils: Do not require GNU grep at runtime

  Lee Chee Yang (2):
        migration-guides: add release notes for 4.0.11
        migration-guides: add release notes for 4.2.2

  Luca Boccassi (2):
        systemd: update to v254
        systemd: add usrmerge to REQUIRED_DISTRO_FEATURES

  Marek Vasut (1):
        linux-firmware: Fix mediatek mt7601u firmware path

  Mark Hatle (1):
        tcf-agent: Update to 1.8.0 release

  Markus Volk (4):
        gcr3: remove recipe
        systemd: add a packageconfig to support colored logs
        webkitgtk: upgrade 2.40.2 -> 2.40.5
        epiphany: upgrade 44.5 -> 44.6

  Martin Jansa (3):
        patchelf: add 3 fixes to optimize and fix uninative
        alsa-utils: backport a fix to build with glibc-2.38
        efivar: drop -fuse-ld=bfd

  Michael Halstead (1):
        yocto-uninative: Update hashes for uninative 4.1

  Michael Opdenacker (4):
        ref-manual: releases.svg: updates
        ref-manual: LTS releases now supported for 4 years
        poky.conf: update SANITY_TESTED_DISTROS to match autobuilder
        recipes: remove unused AUTHOR variable

  Oleksandr Hnatiuk (2):
        file: return wrapper to fix builds when file is in buildtools-tarball
        file: fix the way path is written to environment-setup.d

  Ovidiu Panait (2):
        mdadm: add util-linux-blockdev ptest dependency
        mdadm: save ptest logs

  Peter Marko (4):
        cve-extra-exclusions: fix syntax error
        libarchive: ignore CVE-2023-30571
        cve-exclusion_6.1: correct typo in exclusion list name
        bluez5: correct CVE status of ignored CVEs

  Peter Suti (1):
        externalsrc: fix dependency chain issues

  Quentin Schulz (1):
        docs: sdk-manual: appendix-obtain: fix literal block content

  Richard Purdie (21):
        createrepo-c: Fix 32 bit architecture segfaults with 64 bit time
        build-appliance-image: Update to master head revision
        oeqa/target/ssh: Ensure EAGAIN doesn't truncate output
        createrepo-c: Update patch status
        oeqa/runtime/ltp: Increase ltp test output timeout
        oeqa/ltp: Show warning for non-zero exit codes
        ltp: Add kernel loopback module dependency
        target/ssh: Ensure exit code set for commands
        autoconf: Upgrade to 2.72c
        oeqa/ssh: Further improve process exit handling
        oeqa/selftest/rust: Round test execution time to integer
        qemuboot/runqemu: Fix 6.2 and later kernel network device naming
        bitbake: siggen: Improve runtaskdeps data to fix sstate debugging
        sstatesig: Update to match bitbake changes to runtaskdeps
        Revert "kea: upgrade to v2.5.0"
        selftest/reproducible: Update config to match ongoing changes
        gnupg: Fix reproducibility failure
        selftest: Ensure usrmerge is enabled with systemd
        conf/init-mamager-systemd: Add usrmerge to DISTRO_FEATURES
        bitbake.conf: Drop PE and PR from WORKDIR and STAMP
        qemuboot: Update hardcoded path to match new layout

  Robert Joslyn (2):
        curl: Update from 8.1.2 to 8.2.0
        curl: Refine ptest perl RDEPENDS

  Ross Burton (8):
        systemd: set correct paths for kdb binaries
        systemd: depend on util-linux's swapon/off
        linux-yocto: add script to generate kernel CVE_STATUS entries
        ghostscript: backport fix for CVE-2023-38559
        ghostscript: ignore CVE-2023-38560
        openssh: upgrade to 9.3p2
        librsvg: upgrade to 2.56.3
        linux-yocto: extract generic kernel CVE_STATUS

  Sakib Sajal (1):
        go: upgrade 1.20.6 -> 1.20.7

  Sudip Mukherjee (3):
        libgit2: upgrade to v1.7.0
        bind: upgrade to v9.18.17
        kea: upgrade to v2.5.0

  Tim Orling (10):
        python3-urllib3: upgrade 2.0.3 -> 2.0.4
        python3-hypothesis: upgrade 6.81.2 -> 6.82.0
        python3-pyyaml: upgrade 6.0 -> 6.0.1
        python_setuptools3_rust: inherit ...build_meta
        python3-sphinx: upgrade 7.0.1 -> 7.1.1
        python3-certifi: upgrade 2023.5.7 -> 2023.7.22
        python3-more-itertools: upgrade 9.1.0 -> 10.0.0
        python3-wheel: upgrade 0.40.0 -> 0.41.0
        python3-chardet: upgrade 5.1.0 -> 5.2.0
        python3-cryptography{-vectors}: upgrade -> 41.0.3

  Trevor Gamblin (7):
        python3-dtschema: upgrade 2023.4 -> 2023.6.1
        python3-dtc: add from meta-virtualization
        python3-dtschema: add python3-dtc to RDEPENDS
        nfs-utils: upgrade 2.6.2 -> 2.6.3
        iproute2: upgrade 6.3.0 -> 6.4.0
        git: upgrade 2.39.3 -> 2.41.0
        python3: add additional timing-related test skips

  Ulrich Ölmann (3):
        ref-manual: classes: kernel-fitimage: fix source of imagetype
        ref-manual: classes: kernel-fitimage: fix typos
        ref-manual: classes: kernel-fitimage: refine role of INITRAMFS_IMAGE_BUNDLE

  Yang Xu (2):
        oeqa/selftest/ssate: Add test for find_siginfo
        bitbake: server/process: fix sig handle

  Yash Shinde (5):
        rust: Fix BOOTSTRAP_CARGO failure during Rust Oe-selftest
        oeqa/selftest/rust: Add failed test cases to exclude list for Rust Oe-selftest
        oeqa/selftest/binutils: Add elapsed time for binutils test report.
        oeqa/selftest/gcc: Add elapsed time for gcc test report.
        oeqa/selftest/glibc: Add elapsed time for glibc test report.

  Yoann Congal (1):
        bitbake: fetch2/gitsm: Document that we won't support propagating user parameter

meta-security: 405cca4028..b9bc938785:
  Armin Kuster (21):
        bastille: bastille/config should not be world writeable.
        ossec-hids: Fix usermod
        python3-flask-script: add package
        python3-segno: add new package
        python3-privacyidea: fixup REDPENDS
        qemu: move qemu setting to image and out of layer.conf
        packagegroup-core-security: only include firejail x86-64 and arch64
        firejail: only allow x86-64 and arm64 to build
        python3-tpm2-pytss: add python tss2 support
        packagegroup: add python3-tpm2-pytss
        clamav: update SRC_URI
        scap-security-guide: refactor patches
        packagegroup-security-tpm2: add more pkgs
        scap-security-guide: enable ptest
        python3-yamlpath: Add new pkg
        python3-json2html: add new pkg
        python3-json2html: add new pkg
        meta-integrity: drop ima.cfg in favor of new k-cache
        sshguard: Update to 2.4.3
        meta-tpm linux-yocto-rt: Add the bbappend for rt kernel
        layer: add QA_WARNINGS to all layers

  Kai Kang (2):
        openscap: fix buildpaths issue
        sssd: 2.7.4 -> 2.9.1

  Kevin Hao (1):
        linux-yocto-rt: Add the bbappend for rt kernel

  Luke Granger-Brown (1):
        glome: update to tip

  Wurm, Stephan (1):
        dm-verity-image-initramfs: Allow compressed image types

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Icf1ba0c270d53f4c3c3838d4305116e5d6f794de
diff --git a/poky/meta/recipes-extended/acpica/acpica_20230628.bb b/poky/meta/recipes-extended/acpica/acpica_20230628.bb
index 06db99c..3b939ad 100644
--- a/poky/meta/recipes-extended/acpica/acpica_20230628.bb
+++ b/poky/meta/recipes-extended/acpica/acpica_20230628.bb
@@ -6,7 +6,7 @@
 subsystem, and a small set of tools to assist in developing and debugging \
 ACPI tables."
 
-HOMEPAGE = "http://www.acpica.org/"
+HOMEPAGE = "https://www.intel.com/content/www/us/en/developer/topic-technology/open/acpica/overview.html"
 SECTION = "console/tools"
 
 LICENSE = "Intel | BSD-3-Clause | GPL-2.0-only"
@@ -16,10 +16,11 @@
 
 DEPENDS = "m4-native flex-native bison-native"
 
-SRC_URI = "https://acpica.org/sites/acpica/files/acpica-unix-${PV}.tar.gz"
+SRC_URI = "https://downloadmirror.intel.com/783534/acpica-unix-${PV}.tar.gz"
 SRC_URI[sha256sum] = "86876a745e3d224dcfd222ed3de465b47559e85811df2db9820ef09a9dff5cce"
 
-UPSTREAM_CHECK_URI = "https://acpica.org/downloads"
+UPSTREAM_CHECK_URI = "https://www.intel.com/content/www/us/en/download/776303/acpi-component-architecture-downloads-unix-format-source-code-and-build-environment-with-an-intel-license.html"
+UPSTREAM_VERSION_UNKNOWN = "1"
 
 S = "${WORKDIR}/acpica-unix-${PV}"
 
diff --git a/poky/meta/recipes-extended/findutils/findutils.inc b/poky/meta/recipes-extended/findutils/findutils.inc
index ddcc057..03cf2a8 100644
--- a/poky/meta/recipes-extended/findutils/findutils.inc
+++ b/poky/meta/recipes-extended/findutils/findutils.inc
@@ -7,6 +7,7 @@
 SECTION = "console/utils"
 
 SRC_URI = "${GNU_MIRROR}/${BPN}/${BP}.tar.xz \
+          file://autoconf-2.73.patch \
           file://run-ptest \
           "
 
diff --git a/poky/meta/recipes-extended/findutils/findutils/autoconf-2.73.patch b/poky/meta/recipes-extended/findutils/findutils/autoconf-2.73.patch
new file mode 100644
index 0000000..63728b5
--- /dev/null
+++ b/poky/meta/recipes-extended/findutils/findutils/autoconf-2.73.patch
@@ -0,0 +1,24 @@
+The gnulib largefile macro needs updating to work with autoconf 2.73. Rather
+than the full code:
+
+https://git.savannah.gnu.org/cgit/gnulib.git/commit/m4/largefile.m4?id=f91f633858cf132e50924224c50d6264a92caabb
+
+Just tweak the exiting code to work with 2.73. The next findutils upgrade should
+update to new gnulib
+
+Upstream-Status: Inappropriate
+Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
+
+Index: findutils-4.9.0/gl/m4/largefile.m4
+===================================================================
+--- findutils-4.9.0.orig/gl/m4/largefile.m4
++++ findutils-4.9.0/gl/m4/largefile.m4
+@@ -26,7 +26,7 @@ AC_DEFUN([gl_SET_LARGEFILE_SOURCE],
+ # with _TIME_BITS.  Also, work around a problem in autoconf <= 2.69:
+ # AC_SYS_LARGEFILE does not configure for large inodes on Mac OS X 10.5,
+ # or configures them incorrectly in some cases.
+-m4_version_prereq([2.70], [], [
++m4_version_prereq([2.73], [], [
+ 
+ # _AC_SYS_LARGEFILE_TEST_INCLUDES
+ # -------------------------------
diff --git a/poky/meta/recipes-extended/ghostscript/ghostscript/0001-Bug-706897-Copy-pcx-buffer-overrun-fix-from-devices-.patch b/poky/meta/recipes-extended/ghostscript/ghostscript/0001-Bug-706897-Copy-pcx-buffer-overrun-fix-from-devices-.patch
new file mode 100644
index 0000000..b29212f
--- /dev/null
+++ b/poky/meta/recipes-extended/ghostscript/ghostscript/0001-Bug-706897-Copy-pcx-buffer-overrun-fix-from-devices-.patch
@@ -0,0 +1,31 @@
+From d81b82c70bc1fb9991bb95f1201abb5dea55f57f Mon Sep 17 00:00:00 2001
+From: Chris Liddell <chris.liddell@artifex.com>
+Date: Mon, 17 Jul 2023 14:06:37 +0100
+Subject: [PATCH] Bug 706897: Copy pcx buffer overrun fix from
+ devices/gdevpcx.c
+
+Bounds check the buffer, before dereferencing the pointer.
+
+CVE: CVE-2023-38559
+Upstream-Status: Backport
+Signed-off-by: Ross Burton <ross.burton@arm.com>
+---
+ base/gdevdevn.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/base/gdevdevn.c b/base/gdevdevn.c
+index 7b14d9c71..6351fb77a 100644
+--- a/base/gdevdevn.c
++++ b/base/gdevdevn.c
+@@ -1983,7 +1983,7 @@ devn_pcx_write_rle(const byte * from, const byte * end, int step, gp_file * file
+         byte data = *from;
+ 
+         from += step;
+-        if (data != *from || from == end) {
++        if (from >= end || data != *from) {
+             if (data >= 0xc0)
+                 gp_fputc(0xc1, file);
+         } else {
+-- 
+2.34.1
+
diff --git a/poky/meta/recipes-extended/ghostscript/ghostscript_10.01.2.bb b/poky/meta/recipes-extended/ghostscript/ghostscript_10.01.2.bb
index fdbdfb6..0ddf708 100644
--- a/poky/meta/recipes-extended/ghostscript/ghostscript_10.01.2.bb
+++ b/poky/meta/recipes-extended/ghostscript/ghostscript_10.01.2.bb
@@ -25,6 +25,7 @@
 SRC_URI = "https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs${@gs_verdir("${PV}")}/${BPN}-${PV}.tar.gz \
            file://ghostscript-9.16-Werror-return-type.patch \
            file://avoid-host-contamination.patch \
+           file://0001-Bug-706897-Copy-pcx-buffer-overrun-fix-from-devices-.patch \
 "
 
 SRC_URI[sha256sum] = "a4cd61a07fec161bee35da0211a5e5cde8ff8a0aaf942fc0176715e499d21661"
@@ -66,3 +67,5 @@
 
 # some entries in NVD uses gpl_ghostscript
 CVE_PRODUCT = "ghostscript gpl_ghostscript"
+
+CVE_STATUS[CVE-2023-38560] = "not-applicable-config: PCL isn't part of the Ghostscript release"
diff --git a/poky/meta/recipes-extended/gzip/gzip-1.12/autoconf-2.73.patch b/poky/meta/recipes-extended/gzip/gzip-1.12/autoconf-2.73.patch
new file mode 100644
index 0000000..18f992b
--- /dev/null
+++ b/poky/meta/recipes-extended/gzip/gzip-1.12/autoconf-2.73.patch
@@ -0,0 +1,24 @@
+The gnulib largefile macro needs updating to work with autoconf 2.73. Rather
+than the full code:
+
+https://git.savannah.gnu.org/cgit/gnulib.git/commit/m4/largefile.m4?id=f91f633858cf132e50924224c50d6264a92caabb
+
+Just tweak the exiting code to work with 2.73. The next gzip upgrade should
+update to new gnulib
+
+Upstream-Status: Inappropriate
+Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
+
+Index: findutils-4.9.0/gl/m4/largefile.m4
+===================================================================
+--- findutils-4.9.0.orig/m4/largefile.m4
++++ findutils-4.9.0/m4/largefile.m4
+@@ -26,7 +26,7 @@ AC_DEFUN([gl_SET_LARGEFILE_SOURCE],
+ # with _TIME_BITS.  Also, work around a problem in autoconf <= 2.69:
+ # AC_SYS_LARGEFILE does not configure for large inodes on Mac OS X 10.5,
+ # or configures them incorrectly in some cases.
+-m4_version_prereq([2.70], [], [
++m4_version_prereq([2.73], [], [
+ 
+ # _AC_SYS_LARGEFILE_TEST_INCLUDES
+ # -------------------------------
diff --git a/poky/meta/recipes-extended/gzip/gzip_1.12.bb b/poky/meta/recipes-extended/gzip/gzip_1.12.bb
index 14de50b..35eb7c4 100644
--- a/poky/meta/recipes-extended/gzip/gzip_1.12.bb
+++ b/poky/meta/recipes-extended/gzip/gzip_1.12.bb
@@ -5,6 +5,7 @@
 LICENSE = "GPL-3.0-or-later"
 
 SRC_URI = "${GNU_MIRROR}/gzip/${BP}.tar.gz \
+           file://autoconf-2.73.patch \
            file://run-ptest \
           "
 SRC_URI:append:class-target = " file://wrong-path-fix.patch"
diff --git a/poky/meta/recipes-extended/images/core-image-full-cmdline.bb b/poky/meta/recipes-extended/images/core-image-full-cmdline.bb
index 4d69073..4e1cf58 100644
--- a/poky/meta/recipes-extended/images/core-image-full-cmdline.bb
+++ b/poky/meta/recipes-extended/images/core-image-full-cmdline.bb
@@ -1,4 +1,4 @@
-DESCRIPTION = "A console-only image with more full-featured Linux system \
+SUMMARY = "A console-only image with more full-featured Linux system \
 functionality installed."
 
 IMAGE_FEATURES += "splash ssh-server-openssh"
diff --git a/poky/meta/recipes-extended/images/core-image-testcontroller-initramfs.bb b/poky/meta/recipes-extended/images/core-image-testcontroller-initramfs.bb
index 2bc035a..a5b3d10 100644
--- a/poky/meta/recipes-extended/images/core-image-testcontroller-initramfs.bb
+++ b/poky/meta/recipes-extended/images/core-image-testcontroller-initramfs.bb
@@ -1,4 +1,4 @@
-DESCRIPTION = "Small image capable of booting a device with custom install scripts, \
+SUMMARY = "Small image capable of booting a device with custom install scripts, \
 adding a second rootfs, used for testing."
 
 # use -testfs live-install scripts
diff --git a/poky/meta/recipes-extended/images/core-image-testcontroller.bb b/poky/meta/recipes-extended/images/core-image-testcontroller.bb
index 20edbd5..ff79bde 100644
--- a/poky/meta/recipes-extended/images/core-image-testcontroller.bb
+++ b/poky/meta/recipes-extended/images/core-image-testcontroller.bb
@@ -1,4 +1,4 @@
-DESCRIPTION = "A test controller image to be deployed on a target useful for testing other images using the OEQA runtime tests"
+SUMMARY = "A test controller image to be deployed on a target useful for testing other images using the OEQA runtime tests"
 
 IMAGE_FEATURES += "ssh-server-openssh package-management"
 
diff --git a/poky/meta/recipes-extended/libarchive/libarchive/configurehack.patch b/poky/meta/recipes-extended/libarchive/libarchive/configurehack.patch
new file mode 100644
index 0000000..f3989d9
--- /dev/null
+++ b/poky/meta/recipes-extended/libarchive/libarchive/configurehack.patch
@@ -0,0 +1,49 @@
+To work with autoconf 2.73, tweak the macro ordering in configure.in.
+
+Upstream-Status: Pending
+Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
+
+Index: libarchive-3.6.2/configure.ac
+===================================================================
+--- libarchive-3.6.2.orig/configure.ac
++++ libarchive-3.6.2/configure.ac
+@@ -357,6 +357,19 @@ if test "x$with_bz2lib" != "xno"; then
+   esac
+ fi
+ 
++# Checks for typedefs, structures, and compiler characteristics.
++AC_C_CONST
++# la_TYPE_UID_T defaults to "int", which is incorrect for MinGW
++# and MSVC. Use a customized version.
++la_TYPE_UID_T
++AC_TYPE_MODE_T
++# AC_TYPE_OFF_T defaults to "long", which limits us to 4GB files on
++# most systems... default to "long long" instead.
++AC_CHECK_TYPE(off_t, [long long])
++AC_TYPE_SIZE_T
++AC_CHECK_TYPE(id_t, [unsigned long])
++AC_CHECK_TYPE(uintptr_t, [unsigned int])
++
+ AC_ARG_WITH([libb2],
+   AS_HELP_STRING([--without-libb2], [Don't build support for BLAKE2 through libb2]))
+ 
+@@ -558,19 +571,6 @@ LDFLAGS=$save_LDFLAGS
+ 
+ AC_SUBST(GC_SECTIONS)
+ 
+-# Checks for typedefs, structures, and compiler characteristics.
+-AC_C_CONST
+-# la_TYPE_UID_T defaults to "int", which is incorrect for MinGW
+-# and MSVC. Use a customized version.
+-la_TYPE_UID_T
+-AC_TYPE_MODE_T
+-# AC_TYPE_OFF_T defaults to "long", which limits us to 4GB files on
+-# most systems... default to "long long" instead.
+-AC_CHECK_TYPE(off_t, [long long])
+-AC_TYPE_SIZE_T
+-AC_CHECK_TYPE(id_t, [unsigned long])
+-AC_CHECK_TYPE(uintptr_t, [unsigned int])
+-
+ # Check for tm_gmtoff in struct tm
+ AC_CHECK_MEMBERS([struct tm.tm_gmtoff, struct tm.__tm_gmtoff],,,
+ [
diff --git a/poky/meta/recipes-extended/libarchive/libarchive_3.6.2.bb b/poky/meta/recipes-extended/libarchive/libarchive_3.6.2.bb
index aafede3..4169a01 100644
--- a/poky/meta/recipes-extended/libarchive/libarchive_3.6.2.bb
+++ b/poky/meta/recipes-extended/libarchive/libarchive_3.6.2.bb
@@ -29,10 +29,13 @@
 EXTRA_OECONF += "--enable-largefile --without-iconv"
 
 SRC_URI = "http://libarchive.org/downloads/libarchive-${PV}.tar.gz"
+SRC_URI += "file://configurehack.patch"
 UPSTREAM_CHECK_URI = "http://libarchive.org/"
 
 SRC_URI[sha256sum] = "ba6d02f15ba04aba9c23fd5f236bb234eab9d5209e95d1c4df85c44d5f19b9b3"
 
+CVE_STATUS[CVE-2023-30571] = "upstream-wontfix: upstream has documented that reported function is not thread-safe"
+
 inherit autotools update-alternatives pkgconfig
 
 CPPFLAGS += "-I${WORKDIR}/extra-includes"
diff --git a/poky/meta/recipes-extended/libpipeline/libpipeline/autoconf-2.73.patch b/poky/meta/recipes-extended/libpipeline/libpipeline/autoconf-2.73.patch
new file mode 100644
index 0000000..e61e5aa
--- /dev/null
+++ b/poky/meta/recipes-extended/libpipeline/libpipeline/autoconf-2.73.patch
@@ -0,0 +1,24 @@
+The gnulib largefile macro needs updating to work with autoconf 2.73. Rather
+than the full code:
+
+https://git.savannah.gnu.org/cgit/gnulib.git/commit/m4/largefile.m4?id=f91f633858cf132e50924224c50d6264a92caabb
+
+Just tweak the exiting code to work with 2.73. The next libpipeline upgrade should
+update to new gnulib
+
+Upstream-Status: Inappropriate
+Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
+
+Index: findutils-4.9.0/gl/m4/largefile.m4
+===================================================================
+--- findutils-4.9.0.orig/gl/m4/largefile.m4
++++ findutils-4.9.0/gl/m4/largefile.m4
+@@ -26,7 +26,7 @@ AC_DEFUN([gl_SET_LARGEFILE_SOURCE],
+ # with _TIME_BITS.  Also, work around a problem in autoconf <= 2.69:
+ # AC_SYS_LARGEFILE does not configure for large inodes on Mac OS X 10.5,
+ # or configures them incorrectly in some cases.
+-m4_version_prereq([2.70], [], [
++m4_version_prereq([2.73], [], [
+ 
+ # _AC_SYS_LARGEFILE_TEST_INCLUDES
+ # -------------------------------
diff --git a/poky/meta/recipes-extended/libpipeline/libpipeline_1.5.7.bb b/poky/meta/recipes-extended/libpipeline/libpipeline_1.5.7.bb
index 73c7aaa..7e3f13e 100644
--- a/poky/meta/recipes-extended/libpipeline/libpipeline_1.5.7.bb
+++ b/poky/meta/recipes-extended/libpipeline/libpipeline_1.5.7.bb
@@ -7,6 +7,7 @@
 LIC_FILES_CHKSUM = "file://COPYING;md5=1ebbd3e34237af26da5dc08a4e440464"
 
 SRC_URI = "${SAVANNAH_GNU_MIRROR}/libpipeline/libpipeline-${PV}.tar.gz"
+SRC_URI += "file://autoconf-2.73.patch"
 SRC_URI[sha256sum] = "b8b45194989022a79ec1317f64a2a75b1551b2a55bea06f67704cb2a2e4690b0"
 
 inherit pkgconfig autotools
diff --git a/poky/meta/recipes-extended/ltp/ltp_20230516.bb b/poky/meta/recipes-extended/ltp/ltp_20230516.bb
index e9407d3..4d132b7 100644
--- a/poky/meta/recipes-extended/ltp/ltp_20230516.bb
+++ b/poky/meta/recipes-extended/ltp/ltp_20230516.bb
@@ -41,13 +41,14 @@
 # https://sourceware.org/bugzilla/show_bug.cgi?id=18097
 # https://github.com/linux-test-project/ltp/commit/3fce2064b54843218d085aae326c8f7ecf3a8c41#diff-39268f0855c634ca48c8993fcd2c95b12a65b79e8d9fa5ccd6b0f5a8785c0dd6R36
 LDFLAGS:append = "${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-gold', ' -fuse-ld=bfd', '', d)}"
+LDFLAGS:append = "${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-lld', ' -fuse-ld=bfd', '', d)}"
 
 # After 0002-kvm-use-LD-instead-of-hardcoding-ld.patch
 # https://github.com/linux-test-project/ltp/commit/f94e0ef3b7280f886384703ef9019aaf2f2dfebb
 # it fails with gold also a bit later when trying to use *-payload.bin
 # http://errors.yoctoproject.org/Errors/Details/663094/
 # work around this by forcing .bfd linked in LD when ld-is-gold is in DISTRO_FEATURES
-KVM_LD = "${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-gold', '${HOST_PREFIX}ld.bfd${TOOLCHAIN_OPTIONS} ${HOST_LD_ARCH}', '${LD}', d)}"
+KVM_LD = "${@bb.utils.contains_any('DISTRO_FEATURES', 'ld-is-gold ld-is-lld', '${HOST_PREFIX}ld.bfd${TOOLCHAIN_OPTIONS} ${HOST_LD_ARCH}', '${LD}', d)}"
 
 TARGET_CC_ARCH += "${LDFLAGS}"
 
@@ -112,6 +113,8 @@
     tar \
 "
 
+RRECOMMENDS:${PN} += "kernel-module-loop"
+
 FILES:${PN} += "${prefix}/* ${prefix}/runtest/* ${prefix}/scenario_groups/* ${prefix}/testcases/bin/* ${prefix}/testcases/bin/*/bin/* ${prefix}/testscripts/* ${prefix}/testcases/open_posix_testsuite/* ${prefix}/testcases/open_posix_testsuite/conformance/* ${prefix}/testcases/open_posix_testsuite/Documentation/* ${prefix}/testcases/open_posix_testsuite/functional/* ${prefix}/testcases/open_posix_testsuite/include/* ${prefix}/testcases/open_posix_testsuite/scripts/* ${prefix}/testcases/open_posix_testsuite/stress/* ${prefix}/testcases/open_posix_testsuite/tools/* ${prefix}/testcases/data/nm01/lib.a ${prefix}/lib/libmem.a"
 
 # Avoid stripping some generated binaries otherwise some of the ltp tests such as ldd01 & nm01 fail
diff --git a/poky/meta/recipes-extended/man-db/files/autoconf-2.73.patch b/poky/meta/recipes-extended/man-db/files/autoconf-2.73.patch
new file mode 100644
index 0000000..6c997a6
--- /dev/null
+++ b/poky/meta/recipes-extended/man-db/files/autoconf-2.73.patch
@@ -0,0 +1,24 @@
+The gnulib largefile macro needs updating to work with autoconf 2.73. Rather
+than the full code:
+
+https://git.savannah.gnu.org/cgit/gnulib.git/commit/m4/largefile.m4?id=f91f633858cf132e50924224c50d6264a92caabb
+
+Just tweak the exiting code to work with 2.73. The next man-db upgrade should
+update to new gnulib
+
+Upstream-Status: Inappropriate
+Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
+
+Index: findutils-4.9.0/gl/m4/largefile.m4
+===================================================================
+--- findutils-4.9.0.orig/gl/m4/largefile.m4
++++ findutils-4.9.0/gl/m4/largefile.m4
+@@ -26,7 +26,7 @@ AC_DEFUN([gl_SET_LARGEFILE_SOURCE],
+ # with _TIME_BITS.  Also, work around a problem in autoconf <= 2.69:
+ # AC_SYS_LARGEFILE does not configure for large inodes on Mac OS X 10.5,
+ # or configures them incorrectly in some cases.
+-m4_version_prereq([2.70], [], [
++m4_version_prereq([2.73], [], [
+ 
+ # _AC_SYS_LARGEFILE_TEST_INCLUDES
+ # -------------------------------
diff --git a/poky/meta/recipes-extended/man-db/man-db_2.11.2.bb b/poky/meta/recipes-extended/man-db/man-db_2.11.2.bb
index ca0cb1a..3884a53 100644
--- a/poky/meta/recipes-extended/man-db/man-db_2.11.2.bb
+++ b/poky/meta/recipes-extended/man-db/man-db_2.11.2.bb
@@ -10,6 +10,7 @@
 SRC_URI = "${SAVANNAH_NONGNU_MIRROR}/man-db/man-db-${PV}.tar.xz \
            file://99_mandb \
            file://0001-man-Move-local-variable-declaration-to-function-scop.patch \
+           file://autoconf-2.73.patch \
            file://man_db.conf-avoid-multilib-install-file-conflict.patch"
 SRC_URI[sha256sum] = "cffa1ee4e974be78646c46508e6dd2f37e7c589aaab2938cc1064f058fef9f8d"
 
diff --git a/poky/meta/recipes-extended/mdadm/files/run-ptest b/poky/meta/recipes-extended/mdadm/files/run-ptest
index 2380c32..c3f2014 100644
--- a/poky/meta/recipes-extended/mdadm/files/run-ptest
+++ b/poky/meta/recipes-extended/mdadm/files/run-ptest
@@ -1,7 +1,10 @@
 #!/bin/sh
 
-mkdir -p /mdadm-testing-dir
-# make the test continue to execute even one fail
-dir=. ./test --keep-going --disable-integrity --skip-broken
+logdir=$PWD/logs
+targetdir=/mdadm-testing-dir
 
-rm -rf /mdadm-testing-dir/*
+rm -rf $targetdir $logdir
+mkdir -p $targetdir $logdir
+
+# make the test continue to execute even one fail
+./test --keep-going --disable-integrity --skip-broken --save-logs --logdir=$logdir
diff --git a/poky/meta/recipes-extended/mdadm/mdadm_4.2.bb b/poky/meta/recipes-extended/mdadm/mdadm_4.2.bb
index 50d9548..fa50325 100644
--- a/poky/meta/recipes-extended/mdadm/mdadm_4.2.bb
+++ b/poky/meta/recipes-extended/mdadm/mdadm_4.2.bb
@@ -107,7 +107,14 @@
 }
 
 RDEPENDS:${PN} += "bash"
-RDEPENDS:${PN}-ptest += "bash e2fsprogs-mke2fs util-linux-lsblk util-linux-losetup strace"
+RDEPENDS:${PN}-ptest += " \
+    bash \
+    e2fsprogs-mke2fs \
+    util-linux-lsblk \
+    util-linux-losetup \
+    util-linux-blockdev \
+    strace \
+"
 RRECOMMENDS:${PN}-ptest += " \
     coreutils \
     kernel-module-loop \
diff --git a/poky/meta/recipes-extended/pam/libpam_1.5.3.bb b/poky/meta/recipes-extended/pam/libpam_1.5.3.bb
index eafb5aa..1aa307a 100644
--- a/poky/meta/recipes-extended/pam/libpam_1.5.3.bb
+++ b/poky/meta/recipes-extended/pam/libpam_1.5.3.bb
@@ -169,7 +169,7 @@
 }
 
 inherit features_check
-REQUIRED_DISTRO_FEATURES = "pam"
+ANY_OF_DISTRO_FEATURES = "pam systemd"
 
 BBCLASSEXTEND = "nativesdk native"
 
diff --git a/poky/meta/recipes-extended/parted/files/autoconf-2.73.patch b/poky/meta/recipes-extended/parted/files/autoconf-2.73.patch
new file mode 100644
index 0000000..63dea88
--- /dev/null
+++ b/poky/meta/recipes-extended/parted/files/autoconf-2.73.patch
@@ -0,0 +1,22 @@
+The gnulib largefile macro needs updating to work with autoconf 2.73. Rather
+than the full code:
+
+https://git.savannah.gnu.org/cgit/gnulib.git/commit/m4/largefile.m4?id=f91f633858cf132e50924224c50d6264a92caabb
+
+Just tweak the exiting code to work with 2.73. The next parted upgrade should
+update to new gnulib
+
+Upstream-Status: Inappropriate
+Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
+
+--- a/m4/largefile.m4
++++ b/m4/largefile.m4
+@@ -27,7 +27,7 @@ AC_DEFUN([gl_SET_LARGEFILE_SOURCE],
+ # Work around a problem in autoconf <= 2.69:
+ # AC_SYS_LARGEFILE does not configure for large inodes on Mac OS X 10.5,
+ # or configures them incorrectly in some cases.
+-m4_version_prereq([2.70], [], [
++m4_version_prereq([2.73], [], [
+ 
+ # _AC_SYS_LARGEFILE_TEST_INCLUDES
+ # -------------------------------
diff --git a/poky/meta/recipes-extended/parted/parted_3.6.bb b/poky/meta/recipes-extended/parted/parted_3.6.bb
index a755e1c..a537ef7 100644
--- a/poky/meta/recipes-extended/parted/parted_3.6.bb
+++ b/poky/meta/recipes-extended/parted/parted_3.6.bb
@@ -9,6 +9,7 @@
 SRC_URI = "${GNU_MIRROR}/parted/parted-${PV}.tar.xz \
            file://fix-doc-mandir.patch \
            file://0001-fs-Add-libuuid-to-linker-flags-for-libparted-fs-resi.patch \
+           file://autoconf-2.73.patch \
            file://run-ptest \
            "
 
diff --git a/poky/meta/recipes-extended/procps/procps/0001-po-fr.po-address-failures-with-gettext-0.22.patch b/poky/meta/recipes-extended/procps/procps/0001-po-fr.po-address-failures-with-gettext-0.22.patch
new file mode 100644
index 0000000..8055179
--- /dev/null
+++ b/poky/meta/recipes-extended/procps/procps/0001-po-fr.po-address-failures-with-gettext-0.22.patch
@@ -0,0 +1,37 @@
+From 1d685477c254e5b10a81e32c87786e0f001b70f1 Mon Sep 17 00:00:00 2001
+From: Alexander Kanavin <alex@linutronix.de>
+Date: Mon, 24 Jul 2023 18:06:51 +0200
+Subject: [PATCH] po/fr.po: address failures with gettext 0.22
+
+Specifically:
+| fr.1po:3027: 'msgstr' is not a valid C format string, unlike 'msgid'. Reason: In the directive number 4, the argument size specifier is invalid.
+| fr.1po:3820: 'msgstr' is not a valid C format string, unlike 'msgid'. Reason: In the directive number 1, the argument size specifier is invalid.
+
+Upstream-Status: Submitted [https://gitlab.com/procps-ng/procps/-/merge_requests/199]
+Signed-off-by: Alexander Kanavin <alex@linutronix.de>
+---
+ po/fr.po | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/po/fr.po b/po/fr.po
+index 715c2b69..700834e1 100644
+--- a/po/fr.po
++++ b/po/fr.po
+@@ -3800,7 +3800,7 @@ msgid ""
+ "Type 'q' or <Esc> to continue "
+ msgstr ""
+ "Aide pour les commandes interactives~2 - %s\n"
+-"Fenêtre ~1%s~6: ~1Mode cumulatif ~3%s~2.  ~1Système~6: ~1Délai ~3%.1lf "
++"Fenêtre ~1%s~6: ~1Mode cumulatif ~3%s~2.  ~1Système~6: ~1Délai ~3%.1f "
+ "secs~2; ~1Mode sûr ~3%s~2.\n"
+ "\n"
+ "  Z~5,~1B~5,E,e   Global: «~1Z~2» couleurs; «~1B~2» gras; «~1E~2»/«~1e~2» "
+@@ -4723,7 +4723,7 @@ msgstr " -v, --version  affiche les informations de version et sort\n"
+ #: src/watch.c:486
+ #, c-format
+ msgid "Every %.1fs: "
+-msgstr "Toutes les %.1lfs: "
++msgstr "Toutes les %.1fs: "
+ 
+ #: src/watch.c:487
+ #, c-format
diff --git a/poky/meta/recipes-extended/procps/procps_4.0.3.bb b/poky/meta/recipes-extended/procps/procps_4.0.3.bb
index dc0e957..71efb80 100644
--- a/poky/meta/recipes-extended/procps/procps_4.0.3.bb
+++ b/poky/meta/recipes-extended/procps/procps_4.0.3.bb
@@ -15,6 +15,7 @@
 SRC_URI = "git://gitlab.com/procps-ng/procps.git;protocol=https;branch=master \
            file://sysctl.conf \
            file://0001-src-w.c-use-utmp.h-only.patch \
+           file://0001-po-fr.po-address-failures-with-gettext-0.22.patch \
            "
 SRCREV = "806eb270f217ff7e1e745c7bda2b002b5be74be4"
 
diff --git a/poky/meta/recipes-extended/rust-example/rust-hello-world/0001-enable-LTO.patch b/poky/meta/recipes-extended/rust-example/rust-hello-world/0001-enable-LTO.patch
deleted file mode 100644
index f319545..0000000
--- a/poky/meta/recipes-extended/rust-example/rust-hello-world/0001-enable-LTO.patch
+++ /dev/null
@@ -1,24 +0,0 @@
-From fa40b874f6470ec11a8fd7b0c9909d0cdd2d6feb Mon Sep 17 00:00:00 2001
-From: Dan Callaghan <dan.callaghan@opengear.com>
-Date: Fri, 5 Feb 2021 08:56:34 +1000
-Subject: [PATCH] enable LTO
-
-Upstream-Status: Pending
----
- Cargo.toml | 3 +++
- 1 file changed, 3 insertions(+)
-
-diff --git a/Cargo.toml b/Cargo.toml
-index 7a2f6c8..cdb6b5d 100644
---- a/Cargo.toml
-+++ b/Cargo.toml
-@@ -3,3 +3,6 @@
- name = "rust-hello-world"
- version = "0.0.1"
- authors = ["Cody P Schafer <dev@codyps.com>"]
-+
-+[profile.release]
-+lto = true
--- 
-2.28.0
-
diff --git a/poky/meta/recipes-extended/rust-example/rust-hello-world_git.bb b/poky/meta/recipes-extended/rust-example/rust-hello-world_git.bb
deleted file mode 100644
index 1d91109..0000000
--- a/poky/meta/recipes-extended/rust-example/rust-hello-world_git.bb
+++ /dev/null
@@ -1,19 +0,0 @@
-inherit cargo
-
-SRC_URI = "git://github.com/meta-rust/rust-hello-world.git;protocol=https;branch=master"
-SRCREV="e0fa23f1a3cb1eb1407165bd2fc36d2f6e6ad728"
-LIC_FILES_CHKSUM="file://COPYRIGHT;md5=e6b2207ac3740d2d01141c49208c2147"
-
-SRC_URI += "\
-    file://0001-enable-LTO.patch \
-    "
-
-UPSTREAM_CHECK_COMMITS = "1"
-
-SUMMARY = "Hello World by Cargo for Rust"
-HOMEPAGE = "https://github.com/meta-rust/rust-hello-world"
-LICENSE = "MIT | Apache-2.0"
-
-S = "${WORKDIR}/git"
-
-BBCLASSEXTEND = "native"
diff --git a/poky/meta/recipes-extended/sudo/files/0001-lib-util-mksigname.c-correctly-include-header-for-ou.patch b/poky/meta/recipes-extended/sudo/files/0001-lib-util-mksigname.c-correctly-include-header-for-ou.patch
deleted file mode 100644
index f63ed55..0000000
--- a/poky/meta/recipes-extended/sudo/files/0001-lib-util-mksigname.c-correctly-include-header-for-ou.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-From f993c5c88faacc43971899aae2168ffb3e34dc80 Mon Sep 17 00:00:00 2001
-From: Alexander Kanavin <alex@linutronix.de>
-Date: Fri, 24 Sep 2021 13:36:24 +0200
-Subject: [PATCH] lib/util/mksigname.c: correctly include header for out of
- tree builds
-
-Upstream-Status: Submitted [https://github.com/sudo-project/sudo/pull/123]
-Signed-off-by: Alexander Kanavin <alex@linutronix.de>
----
- lib/util/mksigname.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/lib/util/mksigname.c b/lib/util/mksigname.c
-index de8b1ad..0a69e7e 100644
---- a/lib/util/mksigname.c
-+++ b/lib/util/mksigname.c
-@@ -36,7 +36,7 @@ main(int argc, char *argv[])
- {
-     unsigned int i;
- 
--#include "mksigname.h"
-+#include "lib/util/mksigname.h"
- 
-     printf("const char *const sudo_sys_signame[] = {\n");
-     for (i = 0; i < nitems(sudo_sys_signame); i++) {
diff --git a/poky/meta/recipes-extended/sudo/sudo.inc b/poky/meta/recipes-extended/sudo/sudo.inc
index bedf713..feb1cf3 100644
--- a/poky/meta/recipes-extended/sudo/sudo.inc
+++ b/poky/meta/recipes-extended/sudo/sudo.inc
@@ -8,7 +8,6 @@
                     file://plugins/sudoers/redblack.c;beginline=1;endline=46;md5=03e35317699ba00b496251e0dfe9f109 \
                     file://lib/util/reallocarray.c;beginline=3;endline=15;md5=397dd45c7683e90b9f8bf24638cf03bf \
                     file://lib/util/fnmatch.c;beginline=3;endline=27;md5=004d7d2866ba1f5b41174906849d2e0f \
-                    file://lib/util/getcwd.c;beginline=2;endline=27;md5=50f8d9667750e18dea4e84a935c12009 \
                     file://lib/util/glob.c;beginline=2;endline=31;md5=2852f68687544e3eb8a0a61665506f0e \
                     file://lib/util/snprintf.c;beginline=3;endline=33;md5=b70df6179969e38fcf68da91b53b8029 \
                     file://include/sudo_queue.h;beginline=2;endline=27;md5=ad578e9664d17a010b63e4bc0576ee8d \
@@ -31,12 +30,12 @@
 EXTRA_OECONF:append:libc-musl = " --disable-hardening "
 
 do_compile:prepend () {
-       # Remove build host references from sudo_usage.h
+       # Remove build host references from config.h
        sed -i  \
            -e 's,--with-libtool-sysroot=${STAGING_DIR_TARGET},,g' \
            -e 's,--build=${BUILD_SYS},,g' \
            -e 's,--host=${HOST_SYS},,g' \
-           ${B}/src/sudo_usage.h
+           ${B}/config.h
 }
 
 # Explicitly create ${localstatedir}/lib before do_install to ensure
diff --git a/poky/meta/recipes-extended/sudo/sudo_1.9.13p3.bb b/poky/meta/recipes-extended/sudo/sudo_1.9.14p2.bb
similarity index 92%
rename from poky/meta/recipes-extended/sudo/sudo_1.9.13p3.bb
rename to poky/meta/recipes-extended/sudo/sudo_1.9.14p2.bb
index 2e11739..fa79391 100644
--- a/poky/meta/recipes-extended/sudo/sudo_1.9.13p3.bb
+++ b/poky/meta/recipes-extended/sudo/sudo_1.9.14p2.bb
@@ -3,12 +3,11 @@
 SRC_URI = "https://www.sudo.ws/dist/sudo-${PV}.tar.gz \
            ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)} \
            file://0001-sudo.conf.in-fix-conflict-with-multilib.patch \
-           file://0001-lib-util-mksigname.c-correctly-include-header-for-ou.patch \
            "
 
 PAM_SRC_URI = "file://sudo.pam"
 
-SRC_URI[sha256sum] = "92334a12bb93e0c056b09f53e255ccb7d6f67c6350e2813cd9593ceeca78560b"
+SRC_URI[sha256sum] = "15f6308db0ed4265ec929f2c61e2e13492e551750c203ee001d1fcd8104c9514"
 
 DEPENDS += " virtual/crypt ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
 RDEPENDS:${PN} += " ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam-plugin-limits pam-plugin-keyinit', '', d)}"