[dunfell,00/20] Patch review

Please review this set of patches for dunfell.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3182

The following changes since commit f3be01483b01c88f8c4ba24ca73ccf1bcc33665c:

  build-appliance-image: Update to dunfell head revision (2022-01-27 16:16:08 +0000)

are available in the Git repository at:

  git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Alexander Kanavin (1):
  libusb1: correct SRC_URI

Joshua Watt (5):
  tzdata: Remove BSD License specifier
  e2fsprogs: Use specific BSD license variant
  glib-2.0: Use specific BSD license variant
  shadow: Use specific BSD license variant
  libcap: Use specific BSD license variant

Marek Vasut (1):
  binutils: Backport Include members in the variable table used when
    resolving DW_AT_specification tags.

Marta Rybczynska (2):
  grub: add a fix for CVE-2020-25632
  grub: add a fix for CVE-2020-25647

Minjae Kim (1):
  ghostscript: fix CVE-2021-45949

Peter Kjellerstedt (1):
  sstate: A third fix for for touching files inside pseudo

Purushottam Choudhary (1):
  systemd: Fix CVE-2021-3997

Ranjitsinh Rathod (1):
  util-linux: Fix for CVE-2021-3995 and CVE-2021-3996

Ross Burton (2):
  lsof: correct LICENSE
  shadow-sysroot: sync license with shadow

Rudolf J Streif (1):
  linux-firmware: Add CLM blob to linux-firmware-bcm4373 package

Steve Sakoman (4):
  glibc: update to lastest 2.31 release HEAD
  expat: fix CVE-2022-23852
  expat: add missing Upstream-status, CVE tag and sign-off to
    CVE-2021-46143.patch
  common-licenses: add Spencer-94

 meta/classes/sstate.bbclass                   |  14 +-
 meta/files/common-licenses/Spencer-94         |  12 +
 .../grub/files/CVE-2020-25632.patch           |  90 +++++
 .../grub/files/CVE-2020-25647.patch           | 119 +++++++
 meta/recipes-bsp/grub/grub2.inc               |   2 +
 .../expat/expat/CVE-2021-46143.patch          |   6 +
 .../expat/expat/CVE-2022-23852.patch          |  33 ++
 meta/recipes-core/expat/expat_2.2.9.bb        |   1 +
 meta/recipes-core/glib-2.0/glib.inc           |   2 +-
 meta/recipes-core/glibc/glibc-version.inc     |   2 +-
 meta/recipes-core/glibc/glibc_2.31.bb         |   1 +
 .../systemd/systemd/CVE-2021-3997-1.patch     |  65 ++++
 .../systemd/systemd/CVE-2021-3997-2.patch     | 101 ++++++
 .../systemd/systemd/CVE-2021-3997-3.patch     | 266 +++++++++++++++
 ...-fsync-after-removing-directory-tree.patch |  35 ++
 ...children-split-out-body-of-directory.patch | 318 ++++++++++++++++++
 meta/recipes-core/systemd/systemd_244.5.bb    |   5 +
 .../util-linux/util-linux/CVE-2021-3995.patch | 139 ++++++++
 .../util-linux/util-linux/CVE-2021-3996.patch | 226 +++++++++++++
 ...ude-strutils-cleanup-strto-functions.patch | 270 +++++++++++++++
 .../util-linux/util-linux_2.35.1.bb           |   3 +
 .../binutils/binutils-2.34.inc                |   1 +
 ...in-the-variable-table-used-when-reso.patch |  32 ++
 meta/recipes-devtools/e2fsprogs/e2fsprogs.inc |   2 +-
 .../ghostscript/CVE-2021-45949.patch          |  65 ++++
 ...tack-limits-after-function-evalution.patch |  51 +++
 .../ghostscript/ghostscript_9.52.bb           |   2 +
 meta/recipes-extended/lsof/lsof_4.91.bb       |   2 +-
 .../shadow/shadow-sysroot_4.6.bb              |   2 +-
 meta/recipes-extended/shadow/shadow.inc       |   2 +-
 meta/recipes-extended/timezone/timezone.inc   |   2 +-
 .../linux-firmware/linux-firmware_20211216.bb |   1 +
 meta/recipes-support/libcap/libcap_2.32.bb    |   2 +-
 meta/recipes-support/libusb/libusb1_1.0.22.bb |   4 +-
 34 files changed, 1863 insertions(+), 15 deletions(-)
 create mode 100644 meta/files/common-licenses/Spencer-94
 create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25632.patch
 create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25647.patch
 create mode 100644 meta/recipes-core/expat/expat/CVE-2022-23852.patch
 create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-1.patch
 create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-2.patch
 create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-3.patch
 create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-optionally-fsync-after-removing-directory-tree.patch
 create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch
 create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3995.patch
 create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3996.patch
 create mode 100644 meta/recipes-core/util-linux/util-linux/include-strutils-cleanup-strto-functions.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0018-Include-members-in-the-variable-table-used-when-reso.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2021-45949.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/check-stack-limits-after-function-evalution.patch