Weekly portage-stable package updates 2023-09-04

[github-actions]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/1036/cldsv

Closes flatcar/Flatcar#1173

--

• app-arch/libarchive: [DEV]

  • still at 3.7.1
  • updated keywords for other arches

• app-arch/pigz: [DEV]

  • still at 2.7-r1
  • bump dependency on sys-libs/zlib to >=1.2.3 (we have 1.2.13-r1)

• app-arch/tar: [PROD] [DEV]

  • from 1.34-r3 to 1.35
  • EAPI 8
  • release notes: https://lists.gnu.org/archive/html/info-gnu/2023-07/msg00005.html

• app-crypt/libmd: [DEV]

  • still at 1.1.0
  • updated keywords for other arches

• app-crypt/mit-krb5: [DEV]

  • still at 1.20.1
  • updated metadata

• app-emulation/qemu:

  • from 8.0.3 to 8.0.4
  • release notes: https://wiki.qemu.org/ChangeLog/8.0

• app-portage/portage-utils:

  • from 0.96-r1 to 0.96.1
  • some QA fix
  • release notes: https://gitweb.gentoo.org/proj/portage-utils.git/log/?h=v0.96.1

• dev-lang/python: [DEV]

  • from 3.11.4 to 3.11.5
  • fixed builds with LTO
  • release notes: https://www.python.org/downloads/release/python-3115/

• dev-libs/elfutils: [DEV]

  • still at 0.189-r1
  • became stable for amd64, so dropped keywords from overlay

• dev-libs/glib: [PROD] [DEV]

  • from 2.76.3 to 2.76.4
  • bumped python compat to 3.10..3.11 (dropped python 3.12)
  • release notes: https://gitlab.gnome.org/GNOME/glib/-/releases/2.76.4

• dev-libs/inih: [PROD] [DEV]

  • from 56-r1 to 57
  • release notes: https://github.com/benhoyt/inih/releases/tag/r57

• dev-libs/libxslt: [DEV]

  • still at 1.1.38
  • updated keywords for other arches

• dev-libs/nettle: [DEV]

  • still at 3.9.1
  • updated keywords for other arches

• dev-python/cython:

  • from 0.29.35 to 3.0.0-r1
  • dropped USE flag emacs (we had it disabled anyway)
  • release notes: https://github.com/cython/cython/blob/3.0.0/CHANGES.rst

• dev-python/docutils:

  • from 0.20.1 to 0.20.1-r1
  • updated licenses: added BSD and PSF-2.4, renamed GPL-3 to GPL-3+

• dev-python/jaraco-text:

  • from 3.11.1 to 3.11.1-r1
  • EAPI 8
  • bumped python compat to python 3.10..3.12
  • removed cli USE flag - the CLI tools are now unconditionally removed
    • doesn't affect us - we had the USE flag disabled anyway

• dev-python/lxml:

  • from 4.9.2 to 4.9.3-r1
  • unstable on arm64, so updated keywords in overlay
  • bumped deps:
    • dev-libs/libxml2 to >=2.10.3
    • dev-libs/libxslt to >=1.1.38
    • dev-python/cython to >=0.29.35
  • release notes: https://github.com/lxml/lxml/blob/lxml-4.9.3/CHANGES.txt

• dev-python/more-itertools:

  • from 9.1.0 to 10.1.0
  • release notes: https://github.com/more-itertools/more-itertools/releases/tag/v10.1.0

• dev-python/pyparsing:

  • from 3.1.0 to 3.1.1
  • release notes: https://github.com/pyparsing/pyparsing/releases/tag/3.1.1

• dev-python/setuptools:

  • from 67.8.0-r1 to 68.0.0-r1
  • release notes: https://github.com/pypa/setuptools/blob/v68.0.0/CHANGES.rst

• dev-python/wheel:

  • from 0.40.0 to 0.41.1
  • release notes: https://github.com/pypa/wheel/blob/0.41.1/docs/news.rst

• dev-util/b2:

  • from 4.9.6 to 4.10.1
  • release notes: https://www.bfgroup.xyz/b2/manual/release/index.html#_version_4_10_1

• dev-util/checkbashisms:

  • from 2.22.2 to 2.23.5
  • release notes: https://salsa.debian.org/debian/devscripts/-/raw/v2.23.5/debian/changelog

• dev-util/cmake:

  • from 3.26.4-r2 to 3.26.5-r2
  • release notes: https://cmake.org/cmake/help/v3.26/release/3.26.html

• dev-util/gdbus-codegen:

  • from 2.76.3 to 2.76.4
  • release notes: https://gitlab.gnome.org/GNOME/glib/-/releases/2.76.4

• dev-util/glib-utils:

  • from 2.76.3 to 2.76.4
  • no changes in ebuild
  • release notes: https://gitlab.gnome.org/GNOME/glib/-/releases/2.76.4

• dev-util/patchelf: [DEV]

  • still at 0.18.0
  • updated keywords for other arches

• dev-util/strace: [DEV]

  • still at 6.3
  • updated license from BSD to LGPL2.1+ (with GPL-2+ if testing is enabled)
  • added test USE flag

• dev-vcs/git: [DEV]

  • still at 2.41.0
  • updatd keywords for other arches

• eclass/cmake.eclass:

  • added CMAKE_SKIP_TESTS
  • dropped duplicate ninja invocation

• eclass/crossdev.eclass:

  • added from Gentoo

• eclass/distutils-r1.eclass:

  • updated some docs

• eclass/elisp-common.eclass:

  • added elisp-org-export-to function
  • reformatted some docs
  • added a comment to some sed magic

• eclass/eutils.eclass:

  • dropped support for EAPI 7

• eclass/flag-o-matic.eclass:

  • updated filtering of hardening flags

• eclass/kernel-2.eclass:

  • started using crossdev eclass for figuring out the CTARGET

• eclass/out-of-source.eclass:

  • added from Gentoo

• eclass/python-any-r1.eclass:

  • updated some docs

• eclass/python-r1.eclass:

  • updated some docs

• eclass/python-utils-r1.eclass:

  • fixed PYTHON_SITEDIR and PYTHON_INCLUDEDIR for cross-prefix

• eclass/secureboot.eclass:

  • added from Gentoo

• eclass/toolchain-funcs.eclass:

  • handle newer Clang's libcxx for fortifying sources

• eclass/toolchain.eclass:

  • downgrade znver4 to znver3 for <12.3

• licenses:

  • dropped 9base, CMake
  • added LPL-1.02
  • updated unicode

• media-libs/libpng:

  • from 1.6.40 to 1.6.40-r1
  • updated apng patch for 1.6.40

• net-firewall/ipset: [DEV]

  • still at 7.17-r1
  • became stable for arm64, so dropped accept keywords from overlay

• net-libs/libmicrohttpd: [PROD] [DEV]

  • from 0.9.76 to 0.9.77
  • added eventfd USE flag (enabled by default)
  • release notes: https://gitlab.com/libmicrohttpd/libmicrohttpd/-/releases/v0.9.77

• net-libs/libnftnl: [PROD] [DEV]

  • from 1.2.5 to 1.2.6
  • release notes: https://git.netfilter.org/libnftnl/log/?h=libnftnl-1.2.6

• net-libs/libnsl: [DEV]

  • still at 2.0.0-r1
  • added BSD to licenses

• net-misc/curl: [DEV]

  • still at 8.2.1
  • updated some versions of http2 tcp2 deps

• net-misc/whois: [PROD] [DEV]

  • from 5.5.17 to 5.5.17-r1
  • set up bash completion installation

• net-nds/openldap: [PROD] [DEV]

  • from 2.6.3-r7 to 2.6.4-r1
  • unstable on amd64, so added keywords to overlay
  • bumped dev-db/lmdb dep to 0.9.30
  • some test fixes
  • release notes: https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_6_4/CHANGES

• profiles:

  • added sec-keys/openpgp-keys-gentoo-release to base packages (we already have it)
  • move unicode license to from GPL-COMPATIBLE to MISC-FREE, add Unicode-DFS-2016 to GPL-COMPATIBLE
  • masked sys-libs/zlib-1.3-r1
  • masked bintuils <2.40

• sec-keys/openpgp-keys-gentoo-release: [DEV]

  • still at 20230329
  • updated keywords for other arches

• sys-apps/debianutils:

  • from 5.7 to 5.8
  • release notes: https://salsa.debian.org/debian/debianutils/-/blob/debian/5.8-1/debian/changelog

• sys-apps/ethtool: [PROD] [DEV]

  • from 6.3 to 6.4
  • release notes: https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS?h=v6.4

• sys-apps/findutils: [DEV]

  • still at 4.9.0-r2
  • updated metadata

• sys-apps/hwdata: [PROD] [DEV]

  • from 0.371 to 0.372
  • release notes: https://github.com/vcrhonek/hwdata/commits/v0.372

• sys-apps/iproute2: [PROD] [DEV]

  • from 6.3.0 to 6.4.0
  • release notes: https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/?h=v6.4.0

• sys-apps/nvme-cli: [PROD] [DEV]

  • from 2.4-r2 to 2.5
  • bumped dep on sys-libs/libnvme to 1.5
  • added udev reloading on pre and post inst
  • release notes: https://github.com/linux-nvme/nvme-cli/releases/tag/v2.5

• sys-apps/portage: [DEV]

  • still at 3.0.49-r2
  • updated keywords for other arches

• sys-apps/pv:

  • from 1.6.20 to 1.7.24
  • release notes: https://codeberg.org/a-j-wood/pv/releases/tag/v1.7.24

• sys-devel/automake: [DEV]

  • still at 1.16.5-r1
  • added a dep on dev-util/dejagnu for testing (not relevant to us)

• sys-firmware/edk2-ovmf-bin: [DEV]

  • still at 202202
  • used secureboot.eclass to sign efi exec

• sys-fs/xfsprogs: [PROD] [DEV]

  • from 6.3.0 to 6.4.0
  • release notes: https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.4.0

• sys-libs/libnvme: [PROD] [DEV]

  • from 1.4 to 1.5
  • bumped python compat to 3.10..3.11
  • release notes: https://github.com/linux-nvme/libnvme/releases/tag/v1.5

• sys-libs/readline: [DEV]

  • still at 8.2_p1
  • updated license to GPL-3+

• sys-process/lsof: [PROD] [DEV]

  • from 4.98.0 to 4.98.0-r1
  • added a patch for strftime

• virtual/perl-Carp:

  • from 1.520.0-r2 to 1.540.0
  • pull in perl 5.38
  • release notes: who cares

• virtual/perl-Data-Dumper:

  • from 2.184.0 to 2.188.0
  • pull in perl 5.38
  • release notes: who cares

• virtual/perl-Encode:

  • from 3.170.0 to 3.190.0
  • pull in perl 5.38
  • release notes: who cares

• virtual/perl-ExtUtils-MakeMaker:

  • from 7.640.0 to 7.700.0
  • pull in perl 5.38
  • release notes: who cares

• virtual/perl-File-Spec:

  • from 3.840.0 to 3.880.0
  • pull in perl 5.38
  • release notes: who cares

• virtual/perl-Getopt-Long:

  • from 2.520.0-r1 to 2.540.0
  • pull in perl 5.38
  • release notes: who cares

• virtual/perl-IO:

  • from 1.500.0 to 1.520.0
  • pull in perl 5.38
  • release notes: who cares

• x11-base/xorg-proto: [DEV]

  • still at 2023.2
  • updated keywords for other arches

--

• changelog
• image diff

[krnowak]

CI passed.

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/6122920075

[dongsupark]

Can you please add - Python ([CVE-2023-40217](https://nvd.nist.gov/vuln/detail/CVE-2023-40217), [CVE-2023-41105](https://nvd.nist.gov/vuln/detail/CVE-2023-41105)) in changelog/security/2023-09-07-weekly-updates.md?

See also flatcar/Flatcar#1173.

[krnowak]

Thanks, I missed this one.

[krnowak]

Can you please add - Python ([CVE-2023-40217](https://nvd.nist.gov/vuln/detail/CVE-2023-40217), [CVE-2023-41105](https://nvd.nist.gov/vuln/detail/CVE-2023-41105)) in changelog/security/2023-09-07-weekly-updates.md?

See also flatcar/Flatcar#1173.

Done.