Weekly portage-stable package updates 2024-04-22

[github-actions]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/1438/cldsv/

Fixes flatcar/Flatcar#1348
Fixes flatcar/Flatcar#1401
Fixes flatcar/Flatcar#1402
Fixes flatcar/Flatcar#1403
Fixes flatcar/Flatcar#1432

--

• app-arch/libarchive:

  • still at 3.7.2-r3
  • enabled support for zstd

• app-misc/jq:

  • still at 1.7.1
  • became stable, so dropped accept keywords from overlay profiles

• app-misc/pax-utils:

  • still at 1.3.7
  • bumped python compat to 3.10..12

• app-portage/elt-patches:

  • from 20240213 to 20240315
  • bumped patchset (some backport to for ancient forks of libtool in gcc/gdb/binutils)
  • release notes: https://gitweb.gentoo.org/proj/elt-patches.git/log/?h=20240315

• app-vim/gentoo-syntax:

  • from 13 to 14
  • release notes: https://gitweb.gentoo.org/proj/gentoo-syntax.git/log/?h=v14

• dev-lang/python: [DEV]

  • from 3.11.8_p1 to 3.11.9
  • unstable for amd64, so added accept keywords to overlay profiles
  • fixes CVE-2023-6597, CVE-2024-0450, gh-81194, gh-113659, gh-102388, gh-114572
    • update: python Flatcar#1402
  • release notes: https://www.get-python.org/downloads/release/python-3119/

• dev-lang/python-exec:

  • still at 2.4.10
  • EAPI 8
  • bumped python compat to 3.10..12

• dev-libs/expat: [PROD] [DEV]

  • from 2.5.0 to 2.6.2
  • unstable, so added accept keywords to overlay profiles
  • fixes CVE-2023-52425 and CVE-2024-28757
    • update: expat Flatcar#1348
  • release notes: https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes https://github.com/libexpat/libexpat/blob/R_2_6_1/expat/Changes https://github.com/libexpat/libexpat/blob/R_2_6_0/expat/Changes

• dev-libs/jansson:

  • still at 2.14-r1
  • started using bzip2 tarballs instead of gzip

• dev-libs/libp11:

  • from 0.4.12-r6 to 0.4.12-r7
  • excluded some other versions of openssl

• dev-libs/libunistring: [PROD] [DEV]

  • from 1.1-r1 to 1.2
  • release notes: https://savannah.gnu.org/news/?id=10599

• dev-python/cython:

  • from 3.0.9 to 3.0.10
  • unstable for arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/cython/cython/releases/tag/3.0.10

• dev-python/hatchling:

  • from 1.21.1-r1 to 1.22.5-r1
  • release notes: https://github.com/pypa/hatch/blob/hatchling-v1.22.5/docs/history/hatchling.md#1225---2024-04-04---hatchling-v1225-

• dev-python/jaraco-context:

  • from 4.3.0 to 5.1.0
  • EAPI 8
  • release notes: https://github.com/jaraco/jaraco.context/blob/v5.1.0/NEWS.rst

• dev-python/lxml:

  • from 5.1.0 to 5.2.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • bumped dev-python/cython dep to >=3.0.10
  • release notes: https://github.com/lxml/lxml/blob/lxml-5.2.1/CHANGES.txt

• dev-python/pydecomp:

  • still at 0.3-r3
  • bumped python compat to 3.10.12

• dev-python/snakeoil:

  • from 0.10.7 to 0.10.8
  • TODO: review occurences
  • release notes: https://github.com/pkgcore/snakeoil/blob/v0.10.8/NEWS.rst

• dev-python/typing-extensions:

  • from 4.10.0 to 4.11.0
  • release notes: https://github.com/python/typing_extensions/blob/4.11.0/CHANGELOG.md

• eclass/distutils-r1.eclass:

  • added support for passing arguments to scikit-build-core

• eclass/eutils.eclass:

  • marked as dead

• eclass/meson.eclass:

  • preserved exit status in phase functions

• eclass/rpm.eclass:

  • dropped support for EAPI 6

• eclass/toolchain.eclass:

  • fixed LTO with libgccjit by propagating zstd USE
  • temporarily added dependency on virtual/rust with USE=rust is enabled (not for us)
  • some tests rework

• net-fs/cifs-utils:

  • still at 7.0
  • bumped python compat to 3.9..12

• net-libs/gnutls: [PROD] [DEV]

  • from 3.8.3 to 3.8.5
  • still unstable, so updated accept keywords in overlay profiles
  • fixes CVE-2024-28834, CVE-2024-28835
    • update: gnutls Flatcar#1403
  • release notes: https://lists.gnupg.org/pipermail/gnutls-help/2024-April/004846.html (3.8.5), https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html (3.8.4)

• net-misc/curl: [PROD] [DEV]

  • from 8.7.1-r1 to 8.7.1-r3
  • unstable for arm64, so added accept keywords to overlay profiles
  • backported two more patches

• profiles:

  • nothing interesting

• sys-apps/less: [PROD] [DEV]

  • from 643-r1 to 643-r2
  • fixes CVE-2024-32487
    • update: less Flatcar#1432

• sys-apps/util-linux:

  • still at 2.39.3-r7
  • became stable, so dropped accept keywords from overlay profiles

• sys-firmware/intel-microcode: [PROD] [DEV]

  • from 20231114_p20231114 to 20240312_p20240312
  • unstable, so added accept keywords to overlay profiles
  • fixes CVE-2023-22655, CVE-2023-28746, CVE-2023-38575, CVE-2023-39368, CVE-2023-43490
    • update: intel-microcode Flatcar#1401
  • release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240312

• sys-fs/fuse:

  • still at 3.16.2
  • bumped python compat to 3.10..12
  • reworked tests

• sys-libs/libseccomp: [PROD] [DEV]

  • from 2.5.5 to 2.5.5-r1
  • EAPI 8
  • bumped python compat to 3.10..12
  • backported a patch
  • reworked python handling

• sys-libs/talloc:

  • still at 2.4.0
  • bumped python compat to 3.10..12

• sys-libs/tdb:

  • still at 1.4.8
  • bumped python compat to 3.9..12

--

• changelog
• image diff

[krnowak]

CI passed.

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/8832407048

[dongsupark]

Looks good. See below: