Weekly portage-stable package updates 2024-10-21

[github-actions]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/1792/cldsv/

Closes flatcar/Flatcar#1563
Closes flatcar/Flatcar#1545
Closes flatcar/Flatcar#1564

--

• app-arch/lz4: [PROD] [DEV]

  • still at 1.10.0-r1
  • disabled building ossfuzz stuff (used for testing only)

• app-containers/aardvark-dns: [SYSEXT-PODMAN]

  • from 1.11.0 to 1.12.2
  • unstable so added accept keywords to overlay profiles
  • release notes: https://github.com/containers/aardvark-dns/releases/tag/v1.12.2 https://github.com/containers/aardvark-dns/releases/tag/v1.12.1 https://github.com/containers/aardvark-dns/releases/tag/v1.12.0

• app-containers/containers-common: [SYSEXT-PODMAN]

  • from 0.59.1 to 0.60.4
  • unstable so added accept keywords to overlay profiles
  • fixes CVE-2024-9341
    • update: containers-common Flatcar#1563
  • bumped a bunch of dependencies (app-containers/{aardvark-dns,crun,containers-image,containers-storage,netavark}, net-misc/passt and sys-fs/fuse-overlayfs)
  • release notes: https://github.com/containers/common/releases/tag/v0.60.4 https://github.com/containers/common/releases/tag/v0.60.3 https://github.com/containers/common/releases/tag/v0.60.2 https://github.com/containers/common/releases/tag/v0.60.1 https://github.com/containers/common/releases/tag/v0.60.0 https://github.com/containers/common/releases/tag/v0.59.2

• app-containers/containers-image: [SYSEXT-PODMAN]

  • from 5.30.0 to 5.32.2
  • unstable so added accept keywords to overlay profiles
  • fixes CVE-2024-3727
    • update: containers-image Flatcar#1545
  • release notes: https://github.com/containers/image/releases/tag/v5.32.2 https://github.com/containers/image/releases/tag/v5.32.1 https://github.com/containers/image/releases/tag/v5.32.0 https://github.com/containers/image/releases/tag/v5.31.0 https://github.com/containers/image/releases/tag/v5.30.2 https://github.com/containers/image/releases/tag/v5.30.1

• app-containers/containers-storage: [SYSEXT-PODMAN]

  • from 1.53.0 to 1.55.0
  • unstable so added accept keywords to overlay profiles
  • release notes: https://github.com/containers/storage/releases/tag/v1.55.0 https://github.com/containers/storage/releases/tag/v1.54.0

• app-containers/crun: [SYSEXT-PODMAN]

  • from 1.14.3 to 1.17
  • unstable so added accept keywords to overlay profiles
  • bumped python compat to 3.10..13
  • release notes: https://github.com/containers/crun/releases/tag/1.17 https://github.com/containers/crun/releases/tag/1.16.1 https://github.com/containers/crun/releases/tag/1.16 https://github.com/containers/crun/releases/tag/1.15 https://github.com/containers/crun/releases/tag/1.14.4

• app-containers/netavark: [SYSEXT-PODMAN]

  • from 1.10.3 to 1.12.2
  • unstable so added accept keywords to overlay profiles
  • release notes: https://github.com/containers/netavark/releases/tag/v1.12.2 https://github.com/containers/netavark/releases/tag/v1.12.1 https://github.com/containers/netavark/releases/tag/v1.12.0 https://github.com/containers/netavark/releases/tag/v1.11.0

• app-containers/podman: [SYSEXT-PODMAN]

  • from 5.0.3 to 5.2.4
  • fixes CVE-2024-9407
    • update: podman Flatcar#1564
  • bumped python compat to 3.11..13
  • release notes: https://github.com/containers/podman/releases/tag/v5.2.4 https://github.com/containers/podman/releases/tag/v5.2.3 https://github.com/containers/podman/releases/tag/v5.2.2 https://github.com/containers/podman/releases/tag/v5.2.1 https://github.com/containers/podman/releases/tag/v5.2.0 https://github.com/containers/podman/releases/tag/v5.1.2 https://github.com/containers/podman/releases/tag/v5.1.1 https://github.com/containers/podman/releases/tag/v5.1.0

• app-crypt/gnupg: [PROD] [DEV]

  • still at 2.4.5-r2
  • became stable, so dropped accept keywords from overlay profiles

• app-crypt/gpgme: [SYSEXT-PODMAN]

  • from 1.23.2-r1 to 1.23.2-r2
  • moved all python build deps into USE=python

• app-crypt/pinentry: [PROD] [DEV]

  • still at 1.3.1
  • became stable, so dropped accept keywords from overlay profiles

• app-doc/eclass-manpages:

  • from 20240901 to 20241015
  • release notes: none

• app-emulation/qemu:

  • still at 8.2.3
  • require ensurepip from dev-lang/python
  • switch from sys-firmware/edk2-ovmf-bin to sys-firmware/edk2-bin
  • disable USE=pin-upstream-blobs to pull in a newer version of edk2 firmware (for future secureboot stuff on arm64)

• app-portage/elt-patches:

  • still at 20240912
  • became stable, so dropped accept keywords from overlay profiles

• app-shells/bash: [PROD] [DEV]

  • still at 5.2_p37
  • became stable, so dropped accept keywords from overlay profiles

• app-text/asciidoc:

  • from 10.2.0 to 10.2.1
  • bumped python compat to 3.10..13
  • release notes: https://github.com/asciidoc-py/asciidoc-py/releases/tag/10.2.1

• app-text/docbook-xsl-stylesheets:

  • still at 1.79.1-r4
  • some ruby version bumps

• dev-build/meson:

  • from 1.5.1 to 1.5.2
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/mesonbuild/meson/commits/1.5.2/

• dev-build/ninja:

  • still at 1.12.1
  • became stable, so dropped accept keywords from overlay profiles

• dev-debug/gdb: [DEV]

  • from 14.2-r1 to 15.2
  • bumped python compat to 3.10..13
  • release notes: https://lists.gnu.org/archive/html/info-gnu/2024-09/msg00011.html

• dev-lang/rust:

  • from 1.80.1 to 1.81.0
  • release notes: https://blog.rust-lang.org/2024/09/05/Rust-1.81.0.html

• dev-lang/tcl:

  • still at 8.6.14
  • became stable, so dropped accept keywords from overlay profiles

• dev-libs/gobject-introspection:

  • from 1.78.1-r1 to 1.78.1-r2
  • removed version constraint on dev-python/setuptools dependency

• dev-libs/jsoncpp:

  • from 1.9.6 to 1.9.6-r2
  • unstable on arm64, so added accept keywords to overlay profiles
  • dropped cmake stuff from meson installation

• dev-libs/libassuan: [PROD] [DEV]

  • still at 3.0.0
  • became stable, so dropped accept keywords from overlay profiles

• dev-libs/libgcrypt: [PROD] [DEV]

  • from 1.10.3-r1 to 1.11.0
  • bumped dev-libs/libgpg-error dependency to >=1.49
  • release notes: https://dev.gnupg.org/T7165

• dev-libs/libgpg-error: [PROD] [DEV]

  • still at 1.50
  • became stable, so dropped accept keywords from overlay profiles

• dev-libs/libnl: [PROD] [DEV]

  • still at 3.10.0
  • became stable, so dropped accept keywords from overlay profiles

• dev-libs/userspace-rcu: [PROD] [DEV]

  • still at 0.14.1
  • became stable, so dropped accept keywords from overlay profiles

• dev-libs/yajl: [SYSEXT-PODMAN]

  • still at 2.1.0-r5
  • became stable, so dropped accept keywords from overlay profiles

• dev-python/editables:

  • still at 0.5
  • added python3_13t to python compat (freethreading python)

• dev-python/ensurepip-setuptools: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 73.0.1 to 74.1.3
  • release notes: https://github.com/pypa/setuptools/blob/v74.1.3/NEWS.rst

• dev-python/flit-core:

  • still at 3.9.0
  • added python3_13t to python compat (freethreading python)

• dev-python/gpep517:

  • still at 16
  • added python3_13t to python compat (freethreading python)

• dev-python/hatchling:

  • still at 1.25.0
  • added python3_13t to python compat (freethreading python)

• dev-python/installer:

  • still at 0.7.0
  • added python3_13t to python compat (freethreading python)

• dev-python/jaraco-context: [SYSEXT-PYTHON]

  • still at 6.0.1
  • added python3_13t to python compat (freethreading python)

• dev-python/jaraco-text: [SYSEXT-PYTHON]

  • still at 4.0.0
  • added python3_13t to python compat (freethreading python)

• dev-python/more-itertools: [SYSEXT-PYTHON]

  • still at 10.5.0
  • added python3_13t to python compat (freethreading python)

• dev-python/packaging: [SYSEXT-PYTHON]

  • still at 24.1
  • added python3_13t to python compat (freethreading python)

• dev-python/pathspec:

  • still at 0.12.1
  • added python3_13t to python compat (freethreading python)

• dev-python/platformdirs: [SYSEXT-PYTHON]

  • still at 4.3.6
  • added python3_13t to python compat (freethreading python)

• dev-python/pluggy:

  • still at 1.5.0
  • added python3_13t to python compat (freethreading python)

• dev-python/rich: [SYSEXT-PYTHON]

  • from 13.8.1 to 13.9.2
  • added dependency on dev/python/typing-extensions for python 3.10
  • release notes: https://github.com/Textualize/rich/releases/tag/v13.9.2 https://github.com/Textualize/rich/releases/tag/v13.9.1 https://github.com/Textualize/rich/releases/tag/v13.9.0

• dev-python/setuptools: [SYSEXT-PYTHON]

  • from 73.0.1 to 74.1.3
  • added python3_13t to python compat (freethreading python)
  • added a bunch of blockers on specific versions of dev-libs/gobject-introspection
  • release notes: https://github.com/pypa/setuptools/blob/v74.1.3/NEWS.rst

• dev-python/setuptools-scm: [SYSEXT-PYTHON]

  • still at 8.1.0
  • added python3_13t to python compat (freethreading python)

• dev-python/six: [GCE]

  • still at 1.16.0-r1
  • added python3_13t to python compat (freethreading python)

• dev-python/tomli:

  • from 2.0.1-r1 to 2.0.2
  • EAPI 8
  • release notes: https://github.com/hukkin/tomli/blob/2.0.2/CHANGELOG.md

• dev-python/tree-sitter:

  • from 0.23.0 to 0.23.0-r1
  • added a blocker on a too new version of dev-libs/tree-sitter

• dev-python/typing-extensions: [SYSEXT-PYTHON]

  • still at 4.12.2
  • added python3_13t to python compat (freethreading python)

• dev-python/wheel: [SYSEXT-PYTHON]

  • still at 0.44.0
  • added python3_13t to python compat (freethreading python)

• dev-util/catalyst:

  • from 4.0_rc2 to 4.0.0
  • updated accept keywords to constrain them to the specific version
  • release notes: https://gitweb.gentoo.org/proj/catalyst.git/log/?h=4.0.0

• dev-util/pkgconf: [PROD] [DEV]

  • still at 2.3.0
  • became stable, so dropped accept keywords from overlay profiles

• eclass/autotools.eclass:

  • dropped support for EAPI 6

• eclass/bash-completion-r1.eclass:

  • dropped support for EAPI 5 and 6

• eclass/check-reqs.eclass:

  • dropped support for EAPI 6

• eclass/desktop.eclass:

  • dropped support for EAPI 6

• eclass/distutils-r1.eclass:

  • cleanups after dropping support for obsolete EAPIs

• eclass/flag-o-matic.eclass:

  • dropped support for EAPI 6

• eclass/gnuconfig.eclass:

  • dropped support for EAPI 6

• eclass/java-utils-2.eclass:

  • dropped support for EAPI 6

• eclass/libtool.eclass:

  • dropped support for EAPI 5 and 6

• eclass/mono-env.eclass:

  • dropped support for EAPI 6

• eclass/multibuild.eclass:

  • dropped support for EAPI 6

• eclass/multilib-build.eclass:

  • dropped support for EAPI 6

• eclass/multilib-minimal.eclass:

  • dropped support for EAPI 6

• eclass/multilib.eclass:

  • dropped support for EAPI 6

• eclass/multiprocessing.eclass:

  • dropped support for EAPI 5 and 6

• eclass/out-of-source-utils.eclass:

  • dropped support for EAPI 6

• eclass/pax-utils.eclass:

  • dropped support for EAPI 5 and 6

• eclass/perl-functions.eclass:

  • dropped support for EAPI 6

• eclass/portability.eclass:

  • dropped support for EAPI 6

• eclass/prefix.eclass:

  • dropped support for EAPI 5 and 6

• eclass/preserve-libs.eclass:

  • dropped support for EAPI 5 and 6

• eclass/python-utils-r1.eclass:

  • added support for freethreading python

• eclass/readme.gentoo-r1.eclass:

  • dropped support for EAPI 6

• eclass/ruby-utils.eclass:

  • dropped support for EAPI 5 and 6

• eclass/strip-linguas.eclass:

  • dropped support for EAPI 5 and 6

• eclass/systemd.eclass:

  • dropped support for EAPI 5 and 6

• eclass/tmpfiles.eclass:

  • dropped support for EAPI 5 and 6

• eclass/toolchain-funcs.eclass:

  • dropped support for EAPI 6

• eclass/udev.eclass:

  • dropped support for EAPI 5 and 6

• eclass/vcs-clean.eclass:

  • dropped support for EAPI 5 and 6

• eclass/verify-sig.eclass:

  • added verification of signatures using dev-python/sigstore

• eclass/vim-doc.eclass:

  • dropped support for EAPI 6

• eclass/vim-plugin.eclass:

  • dropped support for EAPI 6

• eclass/virtualx.eclass:

  • dropped support for EAPI 6

• eclass/wrapper.eclass:

  • dropped support for EAPI 5 and 6

• eclass/xdg-utils.eclass:

  • dropped support for EAPI 5 and 6

• eclass/xdg.eclass:

  • dropped support for EAPI 6

• licenses:

  • dropped HSL

• net-analyzer/tcpdump: [PROD] [DEV]

  • still at 4.99.5
  • became stable, so dropped accept keywords from overlay profiles

• net-dns/c-ares: [PROD] [DEV]

  • still at 1.33.1
  • became stable, so dropped accept keywords from overlay profiles

• net-firewall/ipset: [PROD] [DEV]

  • still at 7.22-r2
  • became stable, so dropped accept keywords from overlay profiles

• net-fs/cifs-utils: [PROD] [DEV]

  • from 7.0 to 7.0-r1
  • stopped requiring USE=ads if USE=acl is enabled

• net-fs/samba: [PROD] [DEV]

  • from 4.18.9 to 4.19.7
  • bumped python compat from 3.10..11 to 3.10..12
  • dropped USE=cpu_flags_x86_aes
  • bumped versions of talloc, tevent and ldb dependencies
  • release notes: https://gitlab.com/samba-team/samba/-/blob/bce5c475d12fb75619bc85d176bfd40420b4fce8/WHATSNEW.txt

• net-libs/gnutls: [PROD] [DEV]

  • still at 3.8.7.1-r1
  • became stable, so dropped accept keywords from overlay profiles

• net-libs/libpcap: [PROD] [DEV]

  • still at 1.10.5
  • became stable, so dropped accept keywords from overlay profiles

• net-libs/libpsl: [PROD] [DEV]

  • still at 0.21.5
  • added USE=static-libs, disabled

• net-misc/chrony: [AZURE]

  • still at 4.6
  • became stable, so dropped accept keywords from overlay profiles

• net-misc/iperf: [DEV]

  • still at 3.17.1
  • became stable, so dropped accept keywords from overlay profiles

• net-misc/openssh: [PROD] [DEV]

  • still at 9.8_p1-r2
  • became stable, so dropped accept keywords from overlay profiles

• net-misc/passt: [SYSEXT-PODMAN]

  • from 2024.05.10 to 2024.09.06
  • unstable, so added accept keywords to overlay profiles
  • release notes: https://archives.passt.top/passt-user/20240906171530.763b3179@elisabeth/T/#u https://archives.passt.top/passt-user/20240821185547.450365f2@elisabeth/T/#u https://archives.passt.top/passt-user/20240814143016.1ced1eeb@elisabeth/T/#u https://archives.passt.top/passt-user/20240806162144.18a23a3b@elisabeth/T/#u https://archives.passt.top/passt-user/20240726170832.51891d98@elisabeth/T/#u https://archives.passt.top/passt-user/20240624210651.61ce77af@elisabeth/T/#u https://archives.passt.top/passt-user/20240607230131.22ccd979@elisabeth/T/#u https://archives.passt.top/passt-user/20240523201944.17b11cd3@elisabeth/T/#u

• net-misc/socat: [PROD] [DEV]

  • from 1.7.4.4-r1 to 1.8.0.0
  • release notes: https://repo.or.cz/socat.git/blob/2da070164d454971d5c970b5278e645051f0d0f7:/CHANGES

• net-misc/wget: [PROD] [DEV]

  • still at 1.24.5
  • bumped python compat to 3.10..13

• profiles:

  • added python 3.13t (freethreading version, no GIL)
  • dev-util/bpftool 7.5.0-r2 masked
  • dev-python/setuptools >=75.1.0 masked
  • sys-firmware/edk2-ovmf-bin renamed to sys-firmware/edk2-bin

• sec-policy/selinux-base: [PROD] [DEV]

  • from 2.20240226-r2 to 2.20240916-r1
  • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20240916

• sec-policy/selinux-base-policy: [PROD] [DEV]

  • from 2.20240226-r2 to 2.20240916-r1
  • updated our user-patch to fix more AVCs
  • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20240916

• sec-policy/selinux-container: [PROD] [DEV]

  • from 2.20240226-r2 to 2.20240916-r1
  • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20240916

• sec-policy/selinux-dbus: [PROD] [DEV]

  • from 2.20240226-r2 to 2.20240916-r1
  • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20240916

• sec-policy/selinux-policykit: [PROD] [DEV]

  • from 2.20240226-r2 to 2.20240916-r1
  • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20240916

• sec-policy/selinux-sssd: [PROD] [DEV]

  • from 2.20240226-r2 to 2.20240916-r1
  • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20240916

• sec-policy/selinux-unconfined: [PROD] [DEV]

  • from 2.20240226-r2 to 2.20240916-r1
  • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20240916

• sys-apps/bubblewrap:

  • still at 0.10.0
  • became stable, so dropped accept keywords from overlay profiles

• sys-apps/coreutils: [PROD] [DEV]

  • still at 9.5
  • bumped python compat to 3.10..13

• sys-apps/dtc:

  • still at 1.7.1
  • became stable, so dropped accept keywords from overlay profiles

• sys-apps/file: [DEV]

  • still at 5.45-r4
  • bumped python compat to 3.10..13

• sys-apps/kmod: [PROD] [DEV]

  • still at 33
  • became stable, so dropped accept keywords from overlay profiles

• sys-apps/man-db: [DEV]

  • still at 2.13.0
  • became stable, so dropped accept keywords from overlay profiles

• sys-apps/nvme-cli: [PROD] [DEV]

  • still at 2.10.2
  • became stable, so dropped accept keywords from overlay profiles

• sys-apps/texinfo:

  • from 7.1-r1 to 7.1.1
  • release notes: https://lists.gnu.org/archive/html/bug-texinfo/2024-09/msg00041.html

• sys-block/open-iscsi: [PROD] [DEV]

  • still at 2.1.10-r1
  • became stable, so dropped accept keywords from overlay profiles

• sys-devel/crossdev:

  • from 20240702 to 20240921
  • release notes: https://gitweb.gentoo.org/proj/crossdev.git/log/?h=20240921

• sys-devel/gettext: [PROD] [DEV]

  • still at 0.22.5
  • became stable, so dropped accept keywords from overlay profiles

• sys-firmware/edk2-bin:

  • from 202202 to 202408
  • renamed from sys-firmware/edk2-ovmf-bin
  • unstable so added accept keywords to overlay profiles
  • now shipping firmware for arm64 VMs
  • release notes: https://github.com/tianocore/edk2/releases/tag/edk2-stable202408 https://github.com/tianocore/edk2/releases/tag/edk2-stable202405 https://github.com/tianocore/edk2/releases/tag/edk2-stable202402 https://github.com/tianocore/edk2/releases/tag/edk2-stable202311 https://github.com/tianocore/edk2/releases/tag/edk2-stable202308 https://github.com/tianocore/edk2/releases/tag/edk2-stable202305 https://github.com/tianocore/edk2/releases/tag/edk2-stable202302 https://github.com/tianocore/edk2/releases/tag/edk2-stable202211 https://github.com/tianocore/edk2/releases/tag/edk2-stable202208 https://github.com/tianocore/edk2/releases/tag/edk2-stable202205

• sys-firmware/ipxe:

  • from 1.21.1 to 1.21.1_p20230601
  • EAPI 8
  • replaced USE=uefi with USE=uefi32 and USE=uefi64, we have those disabled

• sys-fs/btrfs-progs: [PROD] [DEV]

  • still at 6.10.1
  • became stable, so dropped accept keywords from overlay profiles

• sys-fs/fuse-overlayfs: [SYSEXT-PODMAN]

  • from 1.13 to 1.14
  • unstable so added accept keywords to overlay profiles
  • release notes: https://github.com/containers/fuse-overlayfs/releases/tag/v1.14

• sys-fs/quota: [PROD] [DEV]

  • still at 4.09-r1
  • became stable, so dropped accept keywords from overlay profiles

• sys-libs/cracklib: [PROD] [DEV]

  • still at 2.10.2
  • became stable, so dropped accept keywords from overlay profiles

• sys-libs/efivar: [PROD] [DEV]

  • still at 39-r1
  • became stable, so dropped accept keywords from overlay profiles

• sys-libs/ldb: [PROD] [DEV]

  • from 2.7.2 to 2.8.1
  • bumped deps on talloc, tdb and tevent
  • release notes: https://gitlab.com/samba-team/samba/-/commit/6ca4df6374136d1d205de689618dc8fce5177d14 https://gitlab.com/samba-team/samba/-/commit/94f11c3c21bc3b8a34d376ab99becd2c6260af62

• sys-libs/readline: [PROD] [DEV]

  • still at 8.2_p13
  • became stable, so dropped accept keywords from overlay profiles

• sys-libs/talloc: [PROD] [DEV]

  • from 2.4.1 to 2.4.2
  • bumped python compat to 3.10..13
  • release notes: https://gitlab.com/samba-team/samba/-/commit/f28966c1638806a5af1fa4e451b668af638491ce

• sys-libs/tdb: [PROD] [DEV]

  • from 1.4.9 to 1.4.10
  • bumped python compat to 3.10..13
  • release notes: https://gitlab.com/samba-team/samba/-/commit/5032ab712c6e9d6562cd10b1d840d2ee052d1d16

• sys-libs/tevent: [PROD] [DEV]

  • from 0.15.0 to 0.16.1
  • bumped python compat to 3.10..13
  • bumped talloc dep to 2.4.2
  • release notes: https://gitlab.com/samba-team/samba/-/commit/0ba05d5bbb1788b0b8cee26748bcda0c90c48baa https://gitlab.com/samba-team/samba/-/commit/acd9248b13cba06d5b748f17aa9bc5d62079d9cc

• sys-process/audit: [PROD] [DEV]

  • still at 4.0.1-r1
  • became stable, so dropped accept keywords from overlay profiles

• virtual/rust:

  • from 1.80.1 to 1.81.0-r1
  • release notes: none

--

• changelog
• image diff

[krnowak]

CI passed.

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/11557145582