Weekly portage-stable package updates 2024-01-29

.github/workflows/portage-stable-packages-list

@@ -105,8 +105,8 @@ app-containers/runc
 
 app-crypt/adcli
 app-crypt/argon2
-app-crypt/efitools
 app-crypt/ccid
+app-crypt/efitools
 app-crypt/libb2
 app-crypt/libmd
 app-crypt/mhash
@@ -159,7 +159,14 @@ app-text/xmlto
 
 app-vim/gentoo-syntax
 
+dev-build/autoconf
+dev-build/autoconf-archive
+dev-build/autoconf-wrapper
+dev-build/automake
+dev-build/automake-wrapper
 dev-build/cmake
+dev-build/gtk-doc-am
+dev-build/libtool
 dev-build/make
 dev-build/meson
 dev-build/meson-format-array
@@ -170,6 +177,7 @@ dev-cpp/gtest
 dev-db/sqlite
 
 dev-debug/gdb
+dev-debug/strace
 
 dev-lang/duktape
 dev-lang/go-bootstrap
@@ -207,10 +215,10 @@ dev-libs/liblinear
 dev-libs/libltdl
 dev-libs/libmspack
 dev-libs/libnl
+dev-libs/libp11
 dev-libs/libpcre
 dev-libs/libpcre2
 dev-libs/libpipeline
-dev-libs/libp11
 dev-libs/libsodium
 dev-libs/libtasn1
 dev-libs/libunistring
@@ -284,14 +292,12 @@ dev-util/desktop-file-utils
 dev-util/gdbus-codegen
 dev-util/glib-utils
 dev-util/gperf
-dev-util/gtk-doc-am
 dev-util/pahole
 dev-util/patchelf
 dev-util/patchutils
 dev-util/perf
 dev-util/pkgconf
 dev-util/re2c
-dev-util/strace
 
 dev-vcs/git
 dev-vcs/repo
@@ -301,9 +307,7 @@ eclass/acct-user.eclass
 eclass/alternatives.eclass
 eclass/app-alternatives.eclass
 eclass/autotools.eclass
-# Still has some Flatcar modifications, will need to upstream it first.
-#
-# eclass/bash-completion-r1.eclass
+eclass/bash-completion-r1.eclass
 eclass/cargo.eclass
 eclass/cmake-multilib.eclass
 eclass/cmake.eclass
@@ -331,6 +335,8 @@ eclass/linux-info.eclass
 eclass/linux-mod.eclass
 eclass/llvm.eclass
 eclass/ltprune.eclass
+eclass/lua-single.eclass
+eclass/lua-utils.eclass
 eclass/meson-multilib.eclass
 eclass/meson.eclass
 eclass/mount-boot.eclass
@@ -355,6 +361,8 @@ eclass/python-r1.eclass
 eclass/python-single-r1.eclass
 eclass/python-utils-r1.eclass
 eclass/readme.gentoo-r1.eclass
+eclass/ruby-single.eclass
+eclass/ruby-utils.eclass
 eclass/savedconfig.eclass
 eclass/selinux-policy-2.eclass
 eclass/strip-linguas.eclass
@@ -389,6 +397,7 @@ net-analyzer/traceroute
 net-dns/bind-tools
 net-dns/c-ares
 net-dns/dnsmasq
+net-dns/libidn2
 
 net-firewall/ipset
 
@@ -406,6 +415,7 @@ net-libs/libnfnetlink
 net-libs/libnftnl
 net-libs/libnsl
 net-libs/libpcap
+net-libs/libpsl
 net-libs/libslirp
 net-libs/libssh2
 net-libs/nghttp2
@@ -500,11 +510,6 @@ sys-boot/efibootmgr
 #
 # sys-boot/gnu-efi
 
-sys-devel/autoconf
-sys-devel/autoconf-archive
-sys-devel/autoconf-wrapper
-sys-devel/automake
-sys-devel/automake-wrapper
 sys-devel/bc
 sys-devel/binutils
 sys-devel/binutils-config
@@ -515,7 +520,6 @@ sys-devel/gcc
 sys-devel/gcc-config
 sys-devel/gettext
 sys-devel/gnuconfig
-sys-devel/libtool
 sys-devel/m4
 sys-devel/patch
 

changelog/security/2024-01-31-weekly-updates.md

@@ -0,0 +1,3 @@
+- vim ([CVE-2023-48231](https://nvd.nist.gov/vuln/detail/CVE-2023-48231), [CVE-2023-48232](https://nvd.nist.gov/vuln/detail/CVE-2023-48232), [CVE-2023-48233](https://nvd.nist.gov/vuln/detail/CVE-2023-48233), [CVE-2023-48234](https://nvd.nist.gov/vuln/detail/CVE-2023-48234), [CVE-2023-48235](https://nvd.nist.gov/vuln/detail/CVE-2023-48235), [CVE-2023-48236](https://nvd.nist.gov/vuln/detail/CVE-2023-48236), [CVE-2023-48237](https://nvd.nist.gov/vuln/detail/CVE-2023-48237), [CVE-2023-48706](https://nvd.nist.gov/vuln/detail/CVE-2023-48706))
+- gnutls ([CVE-2024-0567](https://nvd.nist.gov/vuln/detail/CVE-2024-0567), [CVE-2024-0553](https://nvd.nist.gov/vuln/detail/CVE-2024-0553))
+- gcc ([CVE-2023-4039](https://nvd.nist.gov/vuln/detail/CVE-2023-4039))

changelog/updates/2024-01-31-weekly-updates.md

@@ -0,0 +1,12 @@
+- c-ares ([1.25.0](https://c-ares.org/changelog.html#1_25_0))
+- ethtool ([6.6](https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS?h=v6.6))
+- less ([643](https://www.greenwoodsoftware.com/less/news.643.html))
+- libidn2 ([2.3.4](https://gitlab.com/libidn/libidn2/-/releases/v2.3.4))
+- libseccomp ([2.5.5](https://github.com/seccomp/libseccomp/releases/tag/v2.5.5))
+- libverto ([0.3.2](https://github.com/latchset/libverto/releases/tag/0.3.2))
+- libxml2 ([2.12.4](https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.12.4/NEWS))
+- mime-types ([2.1.54](https://pagure.io/mailcap/blob/9699055a1b4dfb90f7594ee2e8dda705fa56d3b8/f/NEWS))
+- multipath-tools ([0.9.7](https://github.com/opensvc/multipath-tools/commits/0.9.7))
+- usbutils ([017](https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usbutils.git/tree/NEWS?h=v017))
+- vim ([9.0.2167](https://github.com/vim/vim/commits/v9.0.2167/))
+- xmlsec ([1.3.3](https://github.com/lsh123/xmlsec/releases/tag/1.3.3))

sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/coreos-dev-0.1.0.ebuild

@@ -20,9 +20,9 @@ RDEPEND="
 	coreos-base/coreos
 	coreos-base/emerge-gitclone
 	dev-debug/gdb
+	dev-debug/strace
 	dev-lang/python
 	dev-util/pahole
-	dev-util/strace
 	dev-vcs/repo
 	net-analyzer/netperf
 	net-analyzer/traceroute

sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild

@@ -117,11 +117,11 @@ RDEPEND="${RDEPEND}
 	coreos-base/update_engine
 	coreos-base/ue-rs
 	dev-db/etcdctl
+	dev-debug/strace
 	dev-libs/libsodium
 	dev-libs/openssl
 	dev-util/bpftool
 	dev-util/bsdiff
-	dev-util/strace
 	dev-vcs/git
 	net-analyzer/nmap
 	net-analyzer/tcpdump

sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/hard-host-depends-0.0.1.ebuild

@@ -34,6 +34,7 @@ RDEPEND="${RDEPEND}
 	app-emulation/qemu
 	app-text/asciidoc
 	app-text/xmlto
+	dev-build/gtk-doc-am
 	dev-lang/go-bootstrap
 	dev-lang/go:1.19
 	dev-lang/go:1.20
@@ -55,7 +56,6 @@ RDEPEND="${RDEPEND}
 	dev-python/wheel
 	dev-util/gdbus-codegen
 	dev-util/gperf
-	>=dev-util/gtk-doc-am-1.13
 	dev-util/patchutils
 	>=dev-vcs/git-1.7.2
 	net-libs/libtirpc

sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-fs/xfsprogs/README.md

@@ -1 +1 @@
-Drop `0001-libfrog-Fix-cross-compilation-issue-with-randbytes.patch` when upstream or Gentoo includes it.
+Drop `0001-libfrog-Fix-cross-compilation-issue-with-randbytes.patch` when updating to 6.5 or greater.

sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/dbus-glib-0.112.ebuild → sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/dbus-glib-0.112-r1.ebuild

@@ -22,11 +22,11 @@ DEPEND="
 "
 RDEPEND="${DEPEND}"
 BDEPEND="
+	dev-build/gtk-doc-am
 	>=dev-libs/expat-2.1.0-r3
 	>=dev-libs/glib-2.40:2
 	>=sys-apps/dbus-1.8
 	>=dev-util/glib-utils-2.40
-	>=dev-util/gtk-doc-am-1.14
 	virtual/pkgconfig
 " # CBUILD dependencies are needed to make a native tool while cross-compiling.
 

sdk_container/src/third_party/coreos-overlay/net-misc/openssh/openssh-9.6_p1-r1.ebuild → sdk_container/src/third_party/coreos-overlay/net-misc/openssh/openssh-9.6_p1-r2.ebuild

@@ -72,7 +72,7 @@ RDEPEND="
 "
 # Weird dep construct for newer gcc-config for bug #872416
 BDEPEND="
-	sys-devel/autoconf
+	dev-build/autoconf
 	virtual/pkgconfig
 	|| (
 		>=sys-devel/gcc-config-2.6

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords

@@ -53,40 +53,34 @@
 =dev-libs/libdnet-1.16.4 ~amd64 ~arm64
 
 # Keep versions on both arches in sync.
+=dev-libs/opensc-0.23.0-r3 ~arm64
 =dev-util/bpftool-6.5.7 ~arm64
 =net-firewall/conntrack-tools-1.4.6-r1 ~arm64
 
-# Required for addressing CVE-2023-0361 and CVE-2023-5981.
-=net-libs/gnutls-3.8.2 ~amd64 ~arm64
+# Required for addressing CVE-2023-0361, CVE-2023-5981, CVE-2024-0567
+# and CVE-2024-0553.
+=net-libs/gnutls-3.8.3 ~amd64 ~arm64
 
 # Keep versions on both arches in sync.
 =net-libs/libnetfilter_cthelper-1.0.1-r1 ~arm64
 =net-libs/libnetfilter_cttimeout-1.0.1 ~arm64
 
 # Needed for addressing CVE-2023-46218 and CVE-2023-46219
-=net-misc/curl-8.5.0-r2 ~amd64 ~arm64
+=net-misc/curl-8.5.0-r3 ~amd64 ~arm64
 
 # Required to allow us to override the sftp subsystem in sshd config.
 =net-misc/openssh-9.4_p1 ~amd64 ~arm64
 
 # Keep versions on both arches in sync.
-=sys-apps/coreutils-9.4 ~amd64
 =sys-apps/kexec-tools-2.0.24 ~arm64
 =sys-apps/util-linux-2.39.2-r1 ~amd64
 
 # Enable ipvsadm for arm64.
 =sys-cluster/ipvsadm-1.31-r1 ~arm64
 
 # Keep versions on both arches in sync.
-=sys-devel/binutils-2.41-r3 ~arm64
 =sys-firmware/edk2-aarch64-18.02 **
 
-# Keep linux headers in sync with used kernel
-=sys-kernel/linux-headers-6.6 ~amd64 ~arm64
-
-# Keep versions on both arches in sync.
-=sys-libs/binutils-libs-2.41-r3 ~arm64
-
 # Needed to fix CVE-2023-29491.
 =sys-libs/ncurses-6.4_p20230527 ~amd64 ~arm64
 

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask

@@ -20,3 +20,6 @@
 # Python 3.12 is in portage-stable (currently testing), so avoid picking it
 # up. Update this to mask later versions when we switch to 3.11.
 >=dev-lang/python-3.12
+
+# Requires openssl version we don't have yet.
+=dev-libs/libp11-0.4.12-r5

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.unmask

@@ -7,7 +7,7 @@
 # libxcrypt, because we need to figure out how to solve the dep loop
 # that results from the migration (python -> virtual/libcrypt ->
 # libxcrypt -> glibc -> python).
-=virtual/libcrypt-1-r1
+<virtual/libcrypt-2
 
 # Overwrite portage-stable mask. We haven't seen LLVM related problems
 # with rust so far, so keep using 1.70.0.

sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/make.defaults

@@ -16,3 +16,12 @@ QEMU_USER_TARGETS="aarch64"
 # add cros_host to bootstrapping USE flags so SDK / toolchains bootstrapping
 # will use vim's vimrc instead of baselayouts',
 BOOTSTRAP_USE="$BOOTSTRAP_USE cros_host"
+
+# The acct-user/pcscd package wants to add pcscd user to pcscd, openct
+# and usb groups. The first two are writable so it succeeds, the last
+# one, usb, is immutable - it's defined as a part of
+# baselayout. Temporarily drop the usb group from the list.
+#
+# TODO: Drop this hack when user and group databases are dropped from
+# baselayout.
+ACCT_USER_PCSCD_GROUPS="pcscd openct"

sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/dbus-1.14.4-r1.ebuild → sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/dbus-1.14.4-r2.ebuild

@@ -28,7 +28,7 @@ BDEPEND="
 	acct-user/messagebus
 	app-text/xmlto
 	app-text/docbook-xml-dtd:4.4
-	sys-devel/autoconf-archive
+	dev-build/autoconf-archive
 	virtual/pkgconfig
 	doc? ( app-doc/doxygen )
 "

sdk_container/src/third_party/coreos-overlay/sys-auth/sssd/sssd-2.3.1-r5.ebuild → sdk_container/src/third_party/coreos-overlay/sys-auth/sssd/sssd-2.3.1-r6.ebuild

@@ -80,7 +80,7 @@ RDEPEND="${DEPEND}
 	"
 # Flatcar: require only autoconf:2.69
 BDEPEND="
-	sys-devel/autoconf:2.69
+	dev-build/autoconf:2.69
 	doc? ( app-doc/doxygen )
 	test? (
 		dev-libs/check

sdk_container/src/third_party/coreos-overlay/sys-fs/lvm2/lvm2-2.02.188-r2.ebuild → sdk_container/src/third_party/coreos-overlay/sys-fs/lvm2/lvm2-2.02.188-r3.ebuild

@@ -46,7 +46,7 @@ DEPEND="${DEPEND_COMMON}
 		>=sys-apps/util-linux-2.16[static-libs]
 	)"
 BDEPEND="
-	sys-devel/autoconf-archive
+	dev-build/autoconf-archive
 	virtual/pkgconfig
 "
 

sdk_container/src/third_party/portage-stable/acct-user/pcscd/pcscd-0-r2.ebuild

@@ -8,6 +8,5 @@ inherit acct-user
 DESCRIPTION="A user for pcsc-lite"
 ACCT_USER_ID=47
 ACCT_USER_GROUPS=( pcscd openct usb )
-ACCT_USER_GROUPS=( pcscd openct )
 
 acct-user_add_deps

sdk_container/src/third_party/portage-stable/app-arch/cpio/cpio-2.15.ebuild

@@ -3,6 +3,8 @@
 
 EAPI=8
 
+inherit multiprocessing
+
 DESCRIPTION="File archival tool which can also read and write tar files"
 HOMEPAGE="https://www.gnu.org/software/cpio/cpio.html"
 SRC_URI="mirror://gnu/cpio/${P}.tar.bz2"
@@ -39,6 +41,10 @@ src_configure() {
 	econf "${myeconfargs[@]}"
 }
 
+src_test() {
+	emake check TESTSUITEFLAGS="--jobs=$(get_makeopts_jobs)"
+}
+
 pkg_postinst() {
 	# Ensure to preserve the symlink before app-alternatives/cpio
 	# is installed

sdk_container/src/third_party/portage-stable/app-arch/gzip/gzip-1.13.ebuild

@@ -31,7 +31,7 @@ fi
 LICENSE="GPL-3+"
 SLOT="0"
 if [[ ${PV} != *_p* ]] ; then
-	KEYWORDS="~alpha amd64 ~arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc ~x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris"
+	KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris"
 fi
 IUSE="pic static"