subtree updates

meta-raspberrypi: 8cffbf5e85..b601818301:
  Changqing Li (1):
        99-com.rules: fix error invalid substitution type

  Khem Raj (2):
        linux-firmware-rpidistro: Update to 20190114-1+rpt11
        bluez-firmware-rpidistro: Update to 1.2-4+rpt8

  Pierre-Jean Texier (1):
        rpi-base: make SPLASH overridable from outside

  SCVready (1):
        rpi-config: comment updated

  matt-hammond-bbc (1):
        libva: Fix for when using `userland`

poky: 1203d1f24d..05a8aad57c:
  Alejandro Enedino Hernandez Samaniego (2):
        python3: Upgrade 3.9.2 -> 3.9.4
        python3: Improve logging, syntax and update deprecated modules to create_manifest

  Alexander Kanavin (6):
        scripts/oe-debuginfod: correct several issues
        oeqa: tear down oeqa decorators if one of them raises an exception in setup
        meta/lib/oeqa/core/tests/cases/timeout.py: add a testcase for the previous fix
        Revert "oeqa: Set LD_LIBRARY_PATH when executing native commands"
        diffoscope: add native libraries to LD_LIBRARY_PATH
        linux-firmware: upgrade 20210208 -> 20210315

  Anders Wallin (2):
        lttng-tools: Fix missing legacy test files
        lttng-tools: Fix path for test_python_looging

  Anthony Bagwell (1):
        systemd: upgrade 247.4 -> 247.6

  Anuj Mittal (2):
        qemu: fix CVE-2021-3392
        lsb-release: fix reproducibility failure

  Bruce Ashfield (19):
        linux-yocto/5.4: update to v5.4.109
        linux-yocto/5.10: update to v5.10.27
        linux-yocto/5.10: BSP configuration fixes
        linux-yocto/5.10: update to v5.10.29
        linux-yocto/5.4: update to v5.4.111
        linux-yocto/5.10: update to v5.10.30
        linux-yocto-rt/5.10: update to -rt34
        linux-yocto/5.4: update to v5.4.112
        linux-yocto/5.4: fix arm defconfig warnings
        linux-yocto/5.10: fix arm defconfig warnings
        linux-yocto/5.10: aufs fixes
        linux-yocto/5.10: qemuriscv32.cfg: RV32 only supports 1G physical memory
        linux-yocto/5.10: update to v5.10.32
        perf: fix python-audit RDEPENDS
        linux-yocto/5.4: update to v5.4.114
        linux-yocto/5.10: update to v5.10.34
        linux-yocto/5.4: update to v5.4.116
        linux-yocto/5.10: qemuppc32: reduce serial shutdown issues
        linux-yocto/5.4: qemuppc32: reduce serial shutdown issues

  Changqing Li (2):
        cairo: fix CVE-2020-35492
        gdk-pixbuf: fix CVE-2021-20240

  Chen Qi (5):
        busybox: fix CVE-2021-28831
        glib-2.0: fix CVE-2021-28153
        weston: fix build failure due to race condition
        rsync: fix CVE-2020-14387
        db: update CVE_PRODUCT

  Christophe Chapuis (1):
        rootfs.py: find .ko.gz and .ko.xz kernel modules as well

  Daniel Ammann (1):
        archiver: Fix typos

  Douglas Royds (2):
        Revert "externalsrc: Detect code changes in submodules"
        externalsrc: Detect code changes in submodules

  Gavin Li (1):
        kmod: do not symlink config.guess/config.sub during autoreconf

  He Zhe (1):
        linux-yocto-dev: add features/scsi/scsi-debug.scc features/gpio/mockup.scc to KERNEL_FEATURES

  Jon Mason (1):
        oeqa/runtime: space needed

  Jonas Höppner (1):
        ltp: fix empty ltp-dev package

  Jose Quaresma (1):
        ptest-runner: libgcc must be installed for pthread_cancel to work

  Joshua Watt (1):
        classes/image: Use xargs to set file timestamps

  Kai Kang (3):
        kernel-yocto.bbclass: chdir to ${WORKDIR} for do_kernel_checkout
        cmake.bbclass: remove ${B} before cmake_do_configure
        grub2.inc: remove '-O2' from CFLAGS

  Kevin Hao (3):
        modutils-initscripts: Bail out when no module is installed
        sysvinit-inittab/start_getty: Check /sys for the tty device existence
        Revert "inittab: Add getty launch on hvc0 for qemuppc64"

  Khairul Rohaizzat Jamaluddin (1):
        qemu: Fix CVE-2020-35517

  Khem Raj (6):
        ca-certificates: Fix openssl runtime cert dependencies
        systemd: Fix build on mips/musl
        go: Use dl.google.com for SRC_URI
        libjpeg-turbo: Use --reproducible option for nasm
        busybox: Fix reproducibility
        webkitgtk: Fix reproducibility in minibrowser

  Konrad Weihmann (1):
        cve-update-db-native: skip on empty cpe23Uri

  Michael Opdenacker (1):
        sanity.bbclass: mention CONNECTIVITY_CHECK_URIS in network failure message

  Mikko Rapeli (2):
        bitbake: bitbake: tests/fetch: fix test execution without .gitconfig
        bitbake: bitbake: tests/fetch: remove write protected files too

  Mingli Yu (6):
        groff: not ship /usr/bin/grap2graph
        libtool: make sure autoheader run before automake
        packagegroup-core-tools-profile: Remove valgrind for riscv32
        packagegroup-core-tools-testapps.bb: Remove kexec for riscv32
        libxshmfence: Build fixes for riscv32
        rpm: Upgrade to 4.16.1.3

  Niels Avonds (1):
        bitbake: fetch/gitsm: Fix crash when using git LFS and submodules

  Peter Budny (1):
        lib/oe/terminal: Fix tmux new-session on older tmux versions (<1.9)

  Peter Kjellerstedt (1):
        libcap: Configure Make variables correctly without a horrible hack

  Randy MacLeod (1):
        oe-time-dd-test.sh: increase timeout to 15 sec

  Reto Schneider (2):
        license_image.bbclass: Detect broken symlinks
        license_image.bbclass: Fix symlink to generic license files

  Richard Purdie (22):
        oeqa/selftest: Hardcode test assumptions about heartbeat event timings
        bitbake: runqueue: Fix deferred task issues
        pseudo: Upgrade to add trailing slashes ignore path fix
        oeqa/selftest: Ensure packages classes are set correctly for maintainers test
        sanity: Add error check for '%' in build path
        runqemu: Ensure we cleanup snapshot files after image run
        yocto-check-layer: Avoid bug when iterating and autoadding dependencies
        patchelf: Backport fix from upstream for note section overlap error
        bitbake: runqueue: Fix multiconfig deferred task sstate validity caching issue
        bitbake: runqueue: Handle deferred task rehashing in multiconfig builds
        patchelf: Fix note section alignment issues
        patchelf: Fix alignment patch
        pybootchart/draw: Avoid divide by zero error
        yocto-uninative: Update to 3.1 which includes a patchelf fix
        lib/package_manager: Use shutil.copy instead of bb.utils.copyfile for intercepts
        oeqa/qemurunner: Improve logging thread exit handling for qemu shutdown test
        oeqa/qemurunner: Fix binary vs str issue
        oeqa/qemurunner: Improve handling of run_serial for shutdown commands
        puzzles: Upstream changed to main branch for development
        poky.conf: Bump version for 3.3.1 hardknott release
        build-appliance-image: Update to hardknott head revision
        documentation: prepare for 3.3.1 release

  Romain Naour (1):
        dejagnu: needs expect at runtime

  Ross Burton (4):
        bitbake: bitbake-server: ensure server timeout is a float
        insane: clean up some more warning messages
        glslang: strip whitespace in pkgconfig file
        oe-buildenv-internal: add BitBake's library to PYTHONPATH

  Sakib Sajal (10):
        oe-time-dd-test.sh: make executable
        oe-time-dd-test.sh: provide more information from "top"
        qemu: fix CVE-2021-20181
        qemu: fix CVE-2020-29443
        qemu: fix CVE-2021-20221
        qemu: fix CVE-2021-3409
        qemu: fix CVE-2021-3416
        qemu: fix CVE-2021-20257
        qemu: fix CVE-2020-27821
        qemu: fix CVE-2021-20263

  Saul Wold (1):
        pango: re-enable ptest

  Stefan Ghinea (3):
        wpa-supplicant: fix CVE-2021-30004
        libssh2: fix build failure with option no-ecdsa
        xserver-xorg: fix CVE-2021-3472

  Trevor Gamblin (1):
        nettle: upgrade 3.7.1 -> 3.7.2

  Ulrich Ölmann (1):
        arch-armv6m.inc: fix access rights

  Vinícius Ossanes Aquino (1):
        lttng-modules: backport patches to fix build against 5.12+ kernel

  Wes Lindauer (1):
        oeqa/runtime/cases: Only disable/enable for current boot

  Yanfei Xu (1):
        parselogs: ignore floppy error on qemu-system-x86 at boot stage

  Yann Dirson (1):
        linux-firmware: include all relevant files in -bcm4356

  Yi Fan Yu (1):
        libevent: Increase ptest timing tolerance 50 ms -> 100 ms

  hongxu (1):
        deb: apply postinstall on sdk

  wangmy (4):
        mesa: upgrade 21.0.1 -> 21.0.2
        go: update SRC_URI to use https protocol
        go: upgrade 1.16.2 -> 1.16.3
        mesa: upgrade 21.0.2 -> 21.0.3

  zhengruoqin (2):
        wireless-regdb: upgrade 2020.11.20 -> 2021.04.21
        ruby: upgrade 3.0.0 -> 3.0.1

meta-openembedded: 98175fd0cc..bbe3855ec7:
  Aditya.Tayade (1):
        neon: Add ptest

  Andreas Müller (17):
        udisks2: upgrade 2.9.1 -> 2.9.2 / replace '_git' by version in recipe-name
        poppler: upgrade 21.02.0 -> 21.03.0
        xfce4-panel: upgrade 4.16.1 -> 4.16.2
        xfce4-cpugraph-plugin: upgrade 1.2.1 -> 1.2.3
        xfce4-time-out-plugin: upgrade 1.1.1 -> 1.1.2
        mousepad: upgrade 0.5.2 -> 0.5.3
        xfce4-panel-profiles: 1.0.12 -> 1.0.13
        thunar: upgrade 4.16.2 -> 4.16.4
        xfce4-taskmanager: upgrade 1.4.0 -> 1.4.2
        networkmanager-openvpn: Fix packageing
        mousepad: upgrade 0.5.3 -> 0.5.4
        xfce4-battery-plugin: upgrade 1.1.3 -> 1.1.4
        gigolo: upgrade 0.5.1 -> 0.5.2
        thunar: upgrade 4.16.4 -> 4.16.6
        poppler: upgrade 21.03.0 -> 21.04.0
        catfish: add python3-dbus to RDEPENDS
        fluidsynth: upgrade 2.1.7 -> 2.2.0

  Andrei Gherzan (6):
        python3-pep8: Fix HOMEPAGE
        python3-mccabe: Fix HOMEPAGE
        python3-ifaddr: Integrate a dependency of pysonos
        python3-pysonos: Integrate the SONOS control HomeAssistant module
        python3-aiohue: Integrate the hue control python module
        packagegroup-meta-python: Add new modules (aiohue, ifaddr, pysonos)

  Andrej Valek (1):
        jsoncpp: Upgrade to 1.9.4

  Andrew Geissler (1):
        nodejs: ppc64le machine support

  Armin Kuster (3):
        wireguard: update to v1.0.20210219 +1
        nostromo: Blacklist and exclude from world builds
        packagegroup-meta-webserver: remove nostromo from pkg grp

  Awais Belal (1):
        libnet-ssleay-perl: add rdep on perl-module-autoloader

  Bartosz Golaszewski (11):
        pystemd: satisfy runtime dependencies
        python3-pythonping: new package
        python3-wpa-supplicant: new package
        python3-txdbus: new package
        python3-wpa-supplicant: add runtime dependencies
        python3-wpa-supplicant: fix importing the cli submodule
        python3-wpa-supplicant: replace DESCRIPTION with SUMMARY
        libgpiod: update v1.6.2 -> v1.6.3
        python3-txdbus: add missing runtime dependencies
        python3-jmespath: new package
        python3-docutils: new package

  Ben Gampe (1):
        python3-h11: new package

  Carlos Rafael Giani (1):
        pipewire: Upgrade to 0.3.24

  Changqing Li (2):
        php: allow php as empty
        openldap: upgrade 2.4.57 -> 2.4.58

  Chen Qi (2):
        tigervnc: upgrade to 1.11.0
        python3-django: upgrade to 2.2.20

  Clément Péron (2):
        grpc: move grpc plugins to a new grpc-compiler package
        nodejs: 12.20.2 -> 12.21.0

  Colin McAllister (1):
        python3-gpsd-py3: Added recipe

  Daniel Wagenknecht (1):
        gnome-keyring: set file capabilities in pkg_postinst

  Denys Dmytriyenko (1):
        glmark2: also depend on wayland-protocols when wayland distro feature is on

  Devon Pringle (1):
        python3-pastedeploy: Add recipe

  Fabio Berton (1):
        python3-requests: Support idna version 3.1

  Hermes Zhang (1):
        gpsd: backport d-bus message time patch from upstream

  Hongxu Jia (1):
        debootstrap: 1.0.67 -> 1.0.123

  INC@Cisco) (2):
        bpftool: remove recipe from blacklist
        bpftool: improve reproducibility

  Jan Kaisrlik (1):
        abseil-cpp: reorder content of packages

  Joe Hershberger (1):
        strongswan: Make PACKAGECONFIG a default value

  Joshua Watt (1):
        classes: Add Android sparse image class

  Kai Kang (9):
        python3-pillow: 8.1.0 -> 8.1.2
        xfce4-cpufreq-plugin: 1.2.2 -> 1.2.5
        exo: 4.16.0 -> 4.16.1
        xfce4-netload-plugin: 1.3.2 -> 1.4.0
        xfce4-genmon-plugin: 4.1.0 -> 4.1.1
        xfce4-weather-plugin: 0.10.2 -> 0.11.0
        xfce4-systemload-plugin: 1.2.4 -> 1.3.0
        xfce4-taskmanager: 1.4.2 -> 1.5.2
        freeradius: check existence of openssl's commands in bootstrap

  Kamil Dziezyk (1):
        bats: upgrade 1.1.0 -> 1.3.0

  Kartikey Rameshbhai Parmar (1):
        fluidsynth: update SRC_URI to remove non-existing 2.1.x branch

  Khem Raj (77):
        nss: Disable Werror
        open-vm-tools: Do not use volatile qualifier
        dconf-editor: Fix build with vala 0.50.4
        libbacktrace: Add recipe
        libleak: Add recipe
        packagegroup-meta-oe: Add libleak to packagegroup-meta-oe-extended
        mongodb: Upgrade to 4.4.4
        packagegroup-meta-python: Add python3-semantic-version
        python3-grpcio: Upgrade to 1.36.1
        python3-grpcio: Fix build on mips and musl
        mpv: Link libatomic on riscv64
        glog: Link with libexecinfo on musl
        musl-nscd: Make lex syntax posix'y
        libbpf: Depend on virtual/kernel:do_shared_workdir
        waf-cross-answers: Add powerpc64le version
        python3-grpcio,python3-grpcio-tools: Disable for ppc64le
        openh264: Disable building for ppc64le
        ufs-utils: Upgrade to 1.9
        libhugetlbfs: Fix ARCH setting for ppc64 LE
        nodejs: Set correct nodejs arch for ppc64le
        libnma: Disbale vapi
        xrdp: Upgrade to 0.9.15
        ply: upgrade to latest
        ply: Disable on ppc64
        ltrace: Fix build on ppc64le/musl
        oprofile: Fix build on musl
        gperftools: Update SRCREV to point to 2.9.1 release
        mongodb: Fix cross build on ppc64le
        abseil-cpp: Fix build on musl and ppc64
        mariadb: Fix build on musl/ppc
        mongodb: Fix build on ppc64le
        breakpad: Upgrade to latest
        ssiapi: Disable for ppc64
        kexec-tools-klibc: Use SITEINFO_BITS to construct includepath
        breakpad: Exclude for ppc64
        python3-grpcio,python3-grpcio-tools: Enable build on ppc64/glibc
        breakpad: Do not fallback to android implementation for getcontext/setcontext on musl
        oprofile: Upgrade to 1.4.0 release
        vboxguestdrivers: Add __divmoddi4 builtin support
        links-x11,links: Upgrade to 2.22
        layers: Drop gatesgarth from LAYERSERIES_COMPAT
        xxhash: Remove recipe
        gsound: Use () instead of {} for makefile variable in gsound_play_VALAFLAGS
        pipewire: Package systemd unit file for pipewire-media-session
        packagegroup-meta-python: Add new package python3-pythonping
        python3-spidev: Remove recipe for 3.2
        python3-werkzeug: Clarify BSD license type
        python3-werkzeug: Delete recipe for 1.0.0
        python3-hexdump: Move cleanup_hexfile into install_append
        cryptsetup: DEPEND on renamed util-linux-libuuid
        tracker-miners: Check for commercial license to enable ffmpeg
        gnome-settings-daemon: Do not generate meson.native
        libb64: Add recipe
        sysdig: Upgrade to 0.27.1
        sysdig: Depend on system libb64
        gimp: Disable vector iconn on rv32/musl
        libcamera: Update the patch to upstreamed one
        flashrom: Add remaining RISCV support
        mpd: Check for commercial in LICENSE_FLAGS_WHITELIST
        mpv: Exclude from world if commercial is not in inclusion list
        sox: Exclude from world if commercial is not in inclusion list
        vlc: Exclude from world if commercial is not in inclusion list
        sox: Remove LICENSE_FLAGS = "commercial"
        mariadb: Fix build on newer 32bit architectures
        libmanette: Add recipe
        pidgin-sipe: Fix build with glib-2.0 >= 2.68
        gjs: Fix build with gcc11
        poppler: Backport patches to fix build with glib-2.0 2.68+ and GCC11
        opencv: Upgrade to 5.4.2
        tbb: Fix build with musl
        core-image-minimal-xfce: Use graphical.target as default
        vnstat: Disable install parallism to fix a potential install race
        open-vm-tools: Fix build with gcc 11
        nss: Re-enable -Werror
        gimp: Disable vector icon generation on mips/glibc too
        tbb: Re-introduce PE
        gimp: Disable vector icons on musl/x86

  Leon Anavi (134):
        python3-elementpath: Upgrade 2.1.4 -> 2.2.0
        python3-twisted: Upgrade 20.3.0 -> 21.2.0
        python3-ipython: Upgrade 7.20.0 -> 7.21.0
        python3-yamlloader: Upgrade 0.5.5 -> 1.0.0
        python3-astroid: Upgrade 2.5 -> 2.5.1
        python3-portion: Upgrade 2.1.4 -> 2.1.5
        python3-pandas: Upgrade 1.2.2 -> 1.2.3
        python3-ruamel-yaml: Upgrade 0.16.12 -> 0.16.13
        python3-prettytable: Upgrade 2.0.0 -> 2.1.0
        python3-huey: Upgrade 2.3.0 -> 2.3.1
        python3-pychromecast: Upgrade 8.1.0 -> 9.1.1
        python3-incremental: Upgrade 17.5.0 -> 21.3.0
        python3-waitress: Upgrade 1.4.4 -> 2.0.0
        python3-pako: Upgrade 0.3.0 -> 0.3.1
        python3-pyscaffold: Upgrade 3.3.1 -> 4.0
        python3-croniter: Upgrade 1.0.6 -> 1.0.8
        python3-prompt-toolkit: Upgrade 3.0.16 -> 3.0.17
        python3-pymisp: Upgrade 2.4.138 -> 2.4.140
        python3-jsonpatch: Upgrade 1.31 -> 1.32
        python3-jsonpointer: Upgrade 2.0 -> 2.1
        python3-configargparse: Upgrade 1.3 -> 1.4
        python3-luma-core: Upgrade 2.2.0 -> 2.3.1
        python3-pycodestyle: Upgrade 2.6.0 -> 2.7.0
        python3-bitarray: Upgrade 1.7.0 -> 1.7.1
        python3-alembic: Upgrade 1.5.5 -> 1.5.7
        python3-pyflakes: Upgrade 2.2.0 -> 2.3.0
        python3-autobahn: Upgrade 21.2.2 -> 21.3.1
        python3-pulsectl: Upgrade 21.2.0 -> 21.3.4
        python3-configparser: Upgrade 5.0.1 -> 5.0.2
        python3-defusedxml: Upgrade 0.6.0 -> 0.7.1
        python3-twine: Upgrade 3.3.0 -> 3.4.0
        python3-socketio: Upgrade 5.0.4 -> 5.1.0
        python3-soupsieve: Upgrade 2.2 -> 2.2.1
        python3-cassandra-driver: Upgrade 3.24.0 -> 3.25.0
        python3-urllib3: Upgrade 1.26.3 -> 1.26.4
        python3-bitarray: Upgrade 1.7.1 -> 1.8.0
        python3-pyscaffold: Upgrade 4.0 -> 4.0.1
        python3-flask-migrate: Upgrade 2.6.0 -> 2.7.0
        python3-grpcio-tools: Upgrade 1.35.0 -> 1.36.1
        python3-humanize: Upgrade 3.2.0 -> 3.3.0
        python3-regex: Upgrade 2020.11.13 -> 2021.3.17
        python3-twine: Upgrade 3.4.0 -> 3.4.1
        python3-isort: Upgrade 5.7.0 -> 5.8.0
        python3-sqlalchemy: Upgrade 1.3.23 -> 1.4.2
        python3-scrypt: Upgrade 0.8.6 -> 0.8.17
        python3-colorlog: Upgrade 4.7.2 -> 4.8.0
        python3-croniter: Upgrade 1.0.8 -> 1.0.9
        python3-pyperf: Upgrade 2.1.0 -> 2.2.0
        python3-lazy-object-proxy: Upgrade 1.5.2 -> 1.6.0
        python3-prompt-toolkit: Upgrade 3.0.17 -> 3.0.18
        python3-configshell-fb: Upgrade 1.1.28 -> 1.1.29
        python3-backports-functools-lru-cache: Upgrade 1.6.1 -> 1.6.3
        python3-pytest-helpers-namespace: Upgrade 2019.1.8 -> 2021.3.24
        python3-elementpath: Upgrade 2.2.0 -> 2.2.1
        python3-alembic: Upgrade 1.5.7 -> 1.5.8
        python3-rfc3339-validator: Upgrade 0.1.2 -> 0.1.3
        python3-pyflakes: Upgrade 2.3.0 -> 2.3.1
        python3-pint: Upgrade 0.16.1 -> 0.17
        python3-flask-sqlalchemy: Upgrade 2.4.4 -> 2.5.1
        python3-django: Upgrade 3.1.1 -> 3.1.7
        python3-djangorestframework: Upgrade 3.12.2 -> 3.12.3
        python3-ruamel-yaml: Upgrade 0.16.13 -> 0.17.0
        python3-bitarray: Upgrade 1.8.0 -> 1.8.1
        python3-sqlalchemy: Upgrade 1.4.2 -> 1.4.3
        python3-xmlschema: Upgrade 1.5.1 -> 1.5.3
        python3-croniter: Upgrade 1.0.9 -> 1.0.10
        python3-astroid: Upgrade 2.5.1 -> 2.5.2
        python3-pyroute2: Upgrade 0.5.14 -> 0.5.15
        python3-coverage: Upgrade 5.4 -> 5.5
        python3-gunicorn: Upgrade 20.0.4 -> 20.1.0
        python3-djangorestframework: Upgrade 3.12.3 -> 3.12.4
        python3-ipython: Upgrade 7.21.0 -> 7.22.0
        python3-openpyxl: Upgrade 3.0.6 -> 3.0.7
        python3-ruamel-yaml: Upgrade 0.17.0 -> 0.17.2
        python3-sqlalchemy: Upgrade 1.4.3 -> 1.4.4
        python3-bitarray: Upgrade 1.8.1 -> 1.8.2
        python3-httplib2: Upgrade 0.19.0 -> 0.19.1
        python3-parso: Upgrade 0.8.1 -> 0.8.2
        python3-matplotlib: Upgrade 3.3.4 -> 3.4.1
        python3-pyroute2: Upgrade 0.5.15 -> 0.5.16
        python3-h5py: Upgrade 3.1.0 -> 3.2.1
        python3-cheetah: Upgrade 3.2.6 -> 3.2.6.post1
        python3-google-api-python-client: Upgrade 2.0.2 -> 2.1.0
        python3-xlsxwriter: Upgrade 1.3.7 -> 1.3.8
        python3-pymisp: Upgrade 2.4.140 -> 2.4.141
        python3-tqdm: Upgrade 4.58.0 -> 4.59.0
        python3-contextlib2: Upgrade 0.6.0 -> 0.6.0.post1
        python3-typeguard: Upgrade 2.11.1 -> 2.12.0
        python3-decorator: Upgrade 4.4.2 -> 5.0.1
        python3-pillow: Upgrade 8.1.2 -> 8.2.0
        python3-aiohttp: Upgrade 3.7.4 -> 3.7.4.post0
        python3-networkx: Upgrade 2.5 -> 2.5.1
        python3-pysonos: Upgrade 0.0.40 -> 0.0.41
        python3-docutils: Upgrade 0.16 -> 0.17
        python3-bitarray: Upgrade 1.8.2 -> 1.9.0
        python3-regex: Upgrade 2021.3.17 -> 2021.4.4
        python3-sqlalchemy: Upgrade 1.4.4 -> 1.4.5
        python3-pychromecast: Upgrade 9.1.1 -> 9.1.2
        python3-decorator: Upgrade 5.0.1 -> 5.0.5
        python3-pymisp: Upgrade 2.4.141 -> 2.4.141.1
        python3-pyroute2: Upgrade 0.5.16 -> 0.5.17
        python3-transitions: Upgrade 0.8.7 -> 0.8.8
        python3-sqlalchemy: Upgrade 1.4.5 -> 1.4.6
        python3-bitarray: Upgrade 1.9.0 -> 1.9.1
        python3-pysonos: Upgrade 0.0.41 -> 0.0.42
        python3-django: Upgrade 3.1.7 -> 3.2
        python3-tqdm: Upgrade 4.59.0 -> 4.60.0
        python3-xmlschema: Upgrade 1.5.3 -> 1.6.0
        python3-ruamel-yaml: Upgrade 0.17.2 -> 0.17.4
        python3-croniter: Upgrade 1.0.10 -> 1.0.11
        python3-decorator: Upgrade 5.0.5 -> 5.0.6
        python3-grpcio-tools: Upgrade 1.36.1 -> 1.37.0
        python3-speedtest-cli: Upgrade 2.1.2 -> 2.1.3
        python3-python-vlc: Upgrade 3.0.11115 -> 3.0.12117
        python3-robotframework: Upgrade 4.0 -> 4.0.1
        python3-grpcio: Upgrade 1.36.1 -> 1.37.0
        python3-cerberus: Upgrade 1.3.2 -> 1.3.3
        python3-humanize: Upgrade 3.3.0 -> 3.4.0
        python3-monotonic: Upgrade 1.5 -> 1.6
        python3-sqlalchemy: Upgrade 1.4.6 -> 1.4.7
        python3-typed-ast: Upgrade 1.4.2 -> 1.4.3
        python3-backports-functools-lru-cache: Upgrade 1.6.3 -> 1.6.4
        python3-xmlschema: Upgrade 1.6.0 -> 1.6.1
        python3-pyroute2: Upgrade 0.5.17 -> 0.5.18
        python3-sympy: Upgrade 1.7.1 -> 1.8
        python3-pandas: Upgrade 1.2.3 -> 1.2.4
        python3-humanize: Upgrade 3.4.0 -> 3.4.1
        python3-decorator: Upgrade 5.0.6 -> 5.0.7
        python3-colorlog: Upgrade 4.8.0 -> 5.0.1
        python3-google-api-python-client: Upgrade 2.1.0 -> 2.2.0
        python3-croniter: Upgrade 1.0.11 -> 1.0.12
        python3-pysonos: Upgrade 0.0.42 -> 0.0.43
        python3-asttokens: Upgrade 2.0.4 -> 2.0.5
        python3-hyperframe: Upgrade 6.0.0 -> 6.0.1

  Luca Boccassi (3):
        cryptsetup: depend on new util-linux-uuid to break cycle
        dbus-broker: upgrade 26 -> 27
        dbus-broker: upgrade 27 -> 28

  Marius Kriegerowski (1):
        tmate: add recipe version 2.4.0

  Martin Jansa (25):
        glog: fix searching for Libunwind
        ceres-solver: prevent fetching git hook during do_configure
        packagegroup-meta-oe: include abseil-cpp for all architectures
        packagegroup-meta-oe: include nodejs without meta-python2 conditional
        packagegroup-meta-oe: move the packages depending on meta-python2 to separate packages
        mysql-python, lio-utils, openlmi-tools: add conditional PNBLACKLIST like meta-python2 does
        conf/layer.conf: include .bbappend files in BBFILES_DYNAMIC
        open-vm-tools: move to meta-networking
        packagegroup-meta-{oe,multimedia}: move pipewire to the right packagegroup
        packagegroup-meta-multimedia: include projucer only with x11 in DISTRO_FEATURES
        packagegroup-meta-multimedia: include vlc only with x11 in DISTRO_FEATURES
        packagegroup-meta-oe: include glfw, icewm, geis only with x11 in DISTRO_FEATURES
        phonet-utils: remove
        packagegroup-meta-oe: use 4 spaces for identation
        telepathy-glib: respect GI_DATA_ENABLED when enabling vala-bindings
        uml-utilities: fix installed-vs-shipped with usrmerge
        libsmi: use /bin/sh instead of ${base_bindir}/sh to silence QA error with usrmerge
        libyui: switch to libyui-old repo which still has this SRCREV
        libyui(-ncurses): upgrade to 4.1.1, libyui repo was rewritten completely
        android-tools: use PN instead of BPN in RDEPENDS
        pidgin-sipe: fix g_memdup2 changes to be backwards compatible with glib-1.67
        pidgin: upgrade to 2.14.2
        opencv: fetch wechat_qrcode files used by dnn PACKAGECONFIG
        opencv: link sfm module with Glog
        ostree: switch from default master branch to main to fix do_fetch failure

  Matteo Croce (1):
        libbpf: use pkg-config

  Michael Vetter (1):
        jasper: upgrade 2.0.25 -> 2.0.26

  Ming Liu (1):
        atftp: move atftpd.init from files to atftp subdirectory

  Mingli Yu (10):
        geoip: Switch to use the main branch
        geoip-perl: Switch to use the main branch
        bridge-utils: Switch to use the main branch
        netkit-telnet: Update SRC_URI
        quagga: Update SRC_URI
        hostapd: fix CVE-2019-5061
        freeradius: Upgrade to 3.0.21
        hostapd: fix CVE-2021-0326 and CVE-2021-27803
        php: Upgrade to 7.4.16
        python3-cryptography: Upgrade to 3.3.2

  Naveen Saini (2):
        tbb: upgrade 2020.3 -> 2021.2.0
        ocl-icd: upgrade 2.2.14 -> 2.3.0

  Nisha Parrakat (1):
        neon: use pkg-config instead of xml2-config to configure

  Oleksandr Kravchuk (10):
        ipset: update to 7.11
        libnice: update to 0.1.18
        nbdkit: update to 1.25.3
        python3-bitarray: update to 1.7.0
        python3-google-api-python-client: update to 2.0.2
        python3-jsonpatch: update to 1.31
        python3-websocket-client: update to 0.58.0
        python3-robotframework: update to 4.0
        python3-sentry-sdk: update to 1.0.0
        aom: update to 3.0.0

  Peace Lee (2):
        guider: Upgrade 3.9.7 -> 3.9.8
        guider: Upgrade 3.9.7 -> 3.9.8

  Persian Prince (1):
        tinymembench: Correct PV

  Philip Balister (1):
        fftw: Add support for ptest.

  Randy MacLeod (8):
        gperftools: upgrade 2.8.1 -> 2.9.1
        zabbix: upgrade 4.4.6 -> 5.2.5
        nss: upgrade 3.60.1 -> 3.62
        xterm: upgrade 362 -> 366
        zstd: remove the recipe since it moved to oe-core
        tclap: upgrade 1.2.2 -> 1.4.0
        doxygen: Upgrade 1.8.20 -> 1.9.1
        open-vm-tools: upgrade 11.0.1 -> 11.2.5

  Ross Burton (4):
        libxmlb: upgrade to 0.3.0
        flashrom: recipe cleanup
        openjpeg: add native/nativesdk class extension
        fwts: upgrade to 21.03.00

  Sakib Sajal (1):
        grpc: upgrade 1.36.1 -> 1.36.2

  Sam Van Den Berge (1):
        libiio: fix build when python bindings are enabled

  Sana Kazi (1):
        mdns: Whitelisted CVE-2007-0613 for mdns

  Sinan Kaya (1):
        zram: add support for mem_limit

  Stefan Ghinea (2):
        hostapd: fix CVE-2021-30004
        python3-django: fix CVE-2021-28658

  Stefan Schmidt (2):
        musl-rpmatch_git.bb: add new recipe to provide rpmatch() for musl libc builds
        plymouth_0.9.5.bb: allow building with musl libc

  Ulrich Ölmann (1):
        v4l-utils: fix reproducibility

  Valentin Longchamp (1):
        libssh: add gcrypt to PACKAGECONFIG

  Vinicius Aquino (1):
        networkmanager: upgrade 1.28.0 -> 1.30.2

  Vinícius Ossanes Aquino (2):
        modemmanager: upgrade 1.14.10 -> 1.16.2
        libqmi: upgrade 1.26.6 -> 1.28.2

  Wang Mingyu (3):
        czmq: Conflict resolution for sha1.h
        python3-lxml: upgrade 4.6.2 -> 4.6.3
        python3-zopeinterface: upgrade 5.2.0 -> 5.3.0

  Yann Dirson (1):
        mpv: remove explicit LICENSE_FLAGS

  Yi Fan Yu (7):
        librelp: update 1.6.0 -> 1.10.0
        rsyslog: Fix rsyslog systemd service not starting
        rsyslog: fix some of the ptests
        redis: upgrade 6.0.9 -> 6.2.1
        syslog-ng: upgrade 3.24.1 -> 3.31.2
        syslog-ng: remove CONFIG_TLS override for arm DEBUG_BUILD
        syslog-ng: Drop an obsolete patch to add --enable-libnet

  Yi Zhao (3):
        quagga: do not set PIDFile in service files
        tclap: add pkg-config file
        gvfs: rdepend on gsettings-desktop-schemas

  Zang Ruochen (1):
        gtkwave: upgrade 3.3.104 -> 3.3.108

  akuster (1):
        README: updated Maintainers list for Hardknott

  hasan.men (2):
        librdkafka: Add initial recipe v1.6.1
        libcppkafka: Add initial recipe for cppkafka wrapper

  persianpros (5):
        PEP8 double aggressive E701, E70 and E502
        PEP8 double aggressive E20 and E211
        PEP8 double aggressive E22, E224, E241, E242 and E27
        PEP8 double aggressive E301 ~ E306
        PEP8 double aggressive W291 ~ W293 and W391

  wangmy (2):
        mariadb: upgrade 10.5.8 -> 10.5.9
        uftrace: Fix error on aarch64 when binutils update to 2.35.1

  zangrc (38):
        dovecot: upgrade 2.3.13 -> 2.3.14
        fetchmail: upgrade 6.4.16 -> 6.4.17
        dialog: upgrade 1.3-20210117 -> 1.3-20210306
        fio: upgrade 3.25 -> 3.26
        xorriso: upgrade 1.5.3 -> 1.5.5
        iscsi-initiator-utils: upgrade 2.1.3 -> 2.1.4
        mosquitto: upgrade 2.0.8 -> 2.0.9
        nbdkit: upgrade 1.25.3 -> 1.25.4
        wireguard-tools: upgrade 1.0.20210223 -> 1.0.20210315
        wireshark: upgrade 3.4.3 -> 3.4.4
        live555: upgrade 20210129 -> 20210322
        mg: upgrade 20200723 -> 20210314
        nanopb: upgrade 0.4.4 -> 0.4.5
        nss: upgrade 3.62 -> 3.63
        uriparser: upgrade 0.9.4 -> 0.9.5
        gnome-autoar: upgrade 0.2.4 -> 0.3.1
        emacs: upgrade 27.1 -> 27.2
        fbgrab: upgrade 1.4 -> 1.5
        ostree: upgrade 2020.8 -> 2021.1
        zabbix: upgrade 5.2.5 -> 5.2.6
        libxaw: upgrade 1.0.13 -> 1.0.14
        mosquitto: upgrade 2.0.9 -> 2.0.10
        nbdkit: upgrade 1.25.4 -> 1.25.5
        stunnel: upgrade 5.58 -> 5.59
        usbredir: upgrade 0.8.0 -> 0.9.0
        hwdata: upgrade 0.345 -> 0.346
        live555: upgrade 20210322 -> 20210406
        rabbitmq-c: upgrade 0.10.0 -> 0.11.0
        xterm: upgrade 366 -> 367
        fuse3: upgrade 3.10.2 -> 3.10.3
        cifs-utils: upgrade 6.12 -> 6.13
        dnsmasq: upgrade 2.84 -> 2.85
        nbdkit: upgrade 1.25.5 -> 1.25.6
        wolfssl: upgrade 4.7.0 -> 4.7.1
        networkmanager: upgrade 1.30.2 -> 1.30.4
        libdvdread: upgrade 6.1.1 -> 6.1.2
        redis: upgrade 6.2.1 -> 6.2.2
        nss: upgrade 3.63 -> 3.64

  zhengruoqin (21):
        phpmyadmin: upgrade 5.0.4 -> 5.1.0
        uthash: upgrade 2.2.0 -> 2.3.0
        gd: upgrade 2.3.1 -> 2.3.2
        openocd: upgrade 0.10 -> 0.11
        satyr: upgrade 0.36 -> 0.37
        libcrypt-openssl-guess-perl: upgrade 0.11 -> 0.12
        cryptsetup: upgrade 2.3.4 -> 2.3.5
        glmark2: upgrade 20201114 -> 2021.02
        grpc: upgrade 1.36.2 -> 1.36.3
        dialog: upgrade 1.3-20210306 -> 1.3-20210319
        grpc: upgrade 1.36.3 -> 1.36.4
        libgee: upgrade 0.20.3 -> 0.20.4
        fetchmail: upgrade 6.4.17 -> 6.4.18
        lldpd: upgrade 1.0.4 -> 1.0.8
        networkmanager-openvpn: upgrade 1.8.12 -> 1.8.14
        snort: upgrade 2.9.17 -> 2.9.17.1
        python3-absl: upgrade 0.10.0 -> 0.12.0
        python3-astroid: upgrade 2.5.2 -> 2.5.3
        python3-bitarray: upgrade 1.9.1 -> 1.9.2
        irssi: upgrade 1.2.2 -> 1.2.3
        librsync: upgrade 2.3.1 -> 2.3.2

meta-security: 775870980b..c6b1eec0e5:
  Anton Antonov (5):
        Use libest "main" branch instead of "master".
        Add meta-parsec layer into meta-security.
        Define secure images with parsec-service and parsec-tool included and add the images into gitlab CI
        Clearly define clang toolchain in Parsec recipes
        gitlab-ci: Move all parsec builds into a separate job

  Armin Kuster (25):
        packagegroup-core-security: drop clamav-cvd
        clamav: upgrade 104.0
        python3-privacyidea: upgrade 3.5.1 -> 3.5.2
        clamav: fix systemd service install
        swtpm: now need python-cryptography, pull in layer
        swtpm: file pip3 issue
        swtpm: fix check for tscd deamon on host
        python3-suricata-update: update to 1.2.1
        .gitlab-ci.yml: reorder to speed up builds
        kas-security-base.yml: tweek build vars
        gitlab-ci: fine tune order
        clamav: remove rest of mirror.dat ref
        lkrg-module: Add Linux Kernel Runtime Guard
        kas-security-base: change branch to hardknott
        kas-security-base: add hardknott local dirs
        kas-security-base: Move some DISTRO_FEATURES around
        *-tpm.yml: drop tpms jobs
        gitlab-ci: move tpm build
        .gitlab-ci: work on pipelime
        gitlab-ci: cleanup after_script
        gitlab-ci: add new before script
        kas: cleanup some kas files
        packagegroup-core-security: exclude apparmor in mips64
        .gitlab-ci: use kas shell in some cases.
        kas-security-base: fix feature namespace for tpm*

  Ming Liu (2):
        meta: drop IMA_POLICY from policy recipes
        initramfs-framework-ima: introduce IMA_FORCE

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I635e69c9d74af0c553cad5eadd972f26830c7add
diff --git a/poky/meta/recipes-devtools/qemu/qemu/CVE-2021-3409_6.patch b/poky/meta/recipes-devtools/qemu/qemu/CVE-2021-3409_6.patch
new file mode 100644
index 0000000..624c1f6
--- /dev/null
+++ b/poky/meta/recipes-devtools/qemu/qemu/CVE-2021-3409_6.patch
@@ -0,0 +1,99 @@
+From db916870a839346767b6d5ca7d0eed3128ba5fea Mon Sep 17 00:00:00 2001
+From: Bin Meng <bmeng.cn@gmail.com>
+Date: Wed, 3 Mar 2021 20:26:39 +0800
+Subject: [PATCH 6/6] hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[]
+ when a different block size is programmed
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+If the block size is programmed to a different value from the
+previous one, reset the data pointer of s->fifo_buffer[] so that
+s->fifo_buffer[] can be filled in using the new block size in
+the next transfer.
+
+With this fix, the following reproducer:
+
+outl 0xcf8 0x80001010
+outl 0xcfc 0xe0000000
+outl 0xcf8 0x80001001
+outl 0xcfc 0x06000000
+write 0xe000002c 0x1 0x05
+write 0xe0000005 0x1 0x02
+write 0xe0000007 0x1 0x01
+write 0xe0000028 0x1 0x10
+write 0x0 0x1 0x23
+write 0x2 0x1 0x08
+write 0xe000000c 0x1 0x01
+write 0xe000000e 0x1 0x20
+write 0xe000000f 0x1 0x00
+write 0xe000000c 0x1 0x32
+write 0xe0000004 0x2 0x0200
+write 0xe0000028 0x1 0x00
+write 0xe0000003 0x1 0x40
+
+cannot be reproduced with the following QEMU command line:
+
+$ qemu-system-x86_64 -nographic -machine accel=qtest -m 512M \
+      -nodefaults -device sdhci-pci,sd-spec-version=3 \
+      -drive if=sd,index=0,file=null-co://,format=raw,id=mydrive \
+      -device sd-card,drive=mydrive -qtest stdio
+
+Cc: qemu-stable@nongnu.org
+Fixes: CVE-2020-17380
+Fixes: CVE-2020-25085
+Fixes: CVE-2021-3409
+Fixes: d7dfca0807a0 ("hw/sdhci: introduce standard SD host controller")
+Reported-by: Alexander Bulekov <alxndr@bu.edu>
+Reported-by: Cornelius Aschermann (Ruhr-Universität Bochum)
+Reported-by: Sergej Schumilo (Ruhr-Universität Bochum)
+Reported-by: Simon Wörner (Ruhr-Universität Bochum)
+Buglink: https://bugs.launchpad.net/qemu/+bug/1892960
+Buglink: https://bugs.launchpad.net/qemu/+bug/1909418
+Buglink: https://bugzilla.redhat.com/show_bug.cgi?id=1928146
+Tested-by: Alexander Bulekov <alxndr@bu.edu>
+Signed-off-by: Bin Meng <bmeng.cn@gmail.com>
+Message-Id: <20210303122639.20004-6-bmeng.cn@gmail.com>
+Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
+
+Upstream-Status: Backport [cffb446e8fd19a14e1634c7a3a8b07be3f01d5c9]
+CVE: CVE-2021-3409
+
+Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
+---
+ hw/sd/sdhci.c | 12 ++++++++++++
+ 1 file changed, 12 insertions(+)
+
+diff --git a/hw/sd/sdhci.c b/hw/sd/sdhci.c
+index 6c780126e..216842420 100644
+--- a/hw/sd/sdhci.c
++++ b/hw/sd/sdhci.c
+@@ -1140,6 +1140,8 @@ sdhci_write(void *opaque, hwaddr offset, uint64_t val, unsigned size)
+         break;
+     case SDHC_BLKSIZE:
+         if (!TRANSFERRING_DATA(s->prnsts)) {
++            uint16_t blksize = s->blksize;
++
+             MASKED_WRITE(s->blksize, mask, extract32(value, 0, 12));
+             MASKED_WRITE(s->blkcnt, mask >> 16, value >> 16);
+ 
+@@ -1151,6 +1153,16 @@ sdhci_write(void *opaque, hwaddr offset, uint64_t val, unsigned size)
+ 
+                 s->blksize = deposit32(s->blksize, 0, 12, s->buf_maxsz);
+             }
++
++            /*
++             * If the block size is programmed to a different value from
++             * the previous one, reset the data pointer of s->fifo_buffer[]
++             * so that s->fifo_buffer[] can be filled in using the new block
++             * size in the next transfer.
++             */
++            if (blksize != s->blksize) {
++                s->data_count = 0;
++            }
+         }
+ 
+         break;
+-- 
+2.29.2
+