Merge pull request #2475 from flatcar/buildbot/weekly-portage-stable-…

…package-updates-2024-11-25

Weekly portage-stable package updates 2024-11-25

.github/workflows/portage-stable-packages-list

@@ -216,6 +216,7 @@ dev-lang/python
 dev-lang/python-exec
 dev-lang/python-exec-conf
 dev-lang/rust
+dev-lang/rust-bin
 dev-lang/rust-common
 dev-lang/swig
 dev-lang/tcl
@@ -286,7 +287,6 @@ dev-libs/yajl
 dev-perl/File-Slurp
 dev-perl/Parse-Yapp
 
-dev-python/PySocks
 dev-python/autocommand
 dev-python/backports-tarfile
 dev-python/cachecontrol
@@ -342,6 +342,7 @@ dev-python/pycparser
 dev-python/pydecomp
 dev-python/pygments
 dev-python/pyproject-hooks
+dev-python/pysocks
 dev-python/requests
 dev-python/resolvelib
 dev-python/rich

changelog/security/2024-11-27-weekly-updates.md

@@ -0,0 +1,2 @@
+- expat ([CVE-2024-50602](https://nvd.nist.gov/vuln/detail/CVE-2024-50602))
+- wget ([CVE-2024-10524](https://nvd.nist.gov/vuln/detail/CVE-2024-10524))

changelog/updates/2024-11-27-weekly-updates.md

@@ -0,0 +1,25 @@
+- SDK: libpng ([1.6.44](https://github.com/pnggroup/libpng/blob/v1.6.44/CHANGES#L6199))
+- SDK: perf ([6.11.7](https://kernelnewbies.org/Linux_6.11#Tracing.2C_perf_and_BPF))
+- SDK: pkgcheck ([0.10.32](https://github.com/pkgcore/pkgcheck/releases/tag/v0.10.32))
+- azure: chrony ([4.6.1](https://gitlab.com/chrony/chrony/-/blob/4.6.1/NEWS))
+- base, dev: btrfs-progs ([6.11](https://raw.githubusercontent.com/kdave/btrfs-progs/refs/tags/v6.11/CHANGES))
+- base, dev: expat ([2.6.4](https://github.com/libexpat/libexpat/blob/R_2_6_4/expat/Changes))
+- base, dev: gcc ([14.2.1_p20241116](https://gcc.gnu.org/gcc-14/changes.html))
+- base, dev: iproute2 ([6.11.0](https://lore.kernel.org/netdev/[email protected]/) (includes [6.10.0](https://lore.kernel.org/netdev/[email protected]/)))
+- base, dev: iputils ([20240905](https://github.com/iputils/iputils/releases/tag/20240905))
+- base, dev: json-c ([0.18](https://github.com/json-c/json-c/blob/json-c-0.18-20240915/ChangeLog))
+- base, dev: kexec-tools ([2.0.29](https://github.com/horms/kexec-tools/commits/v2.0.29/))
+- base, dev: less ([668](https://www.greenwoodsoftware.com/less/news.668.html))
+- base, dev: libnetfilter_conntrack ([1.1.0](https://lists.netfilter.org/pipermail/netfilter-announce/2024/000260.html))
+- base, dev: libnftnl ([1.2.8](https://lists.netfilter.org/pipermail/netfilter-announce/2024/000261.html))
+- base, dev: libuv ([1.49.2](https://github.com/libuv/libuv/releases/tag/v1.49.2) (includes [1.49.1](https://github.com/libuv/libuv/releases/tag/v1.49.1), [1.49.0](https://github.com/libuv/libuv/releases/tag/v1.49.0)))
+- base, dev: openldap ([2.6.6](https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_6_6/CHANGES) (includes [2.6.5](https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_6_5/CHANGES)))
+- base, dev: pax-utils ([1.3.8](https://gitweb.gentoo.org/proj/pax-utils.git/log/?h=v1.3.8))
+- base, dev: util-linux ([2.40.2](https://raw.githubusercontent.com/util-linux/util-linux/refs/tags/v2.40.2/Documentation/releases/v2.40.2-ReleaseNotes) (includes [2.40.1](https://raw.githubusercontent.com/util-linux/util-linux/refs/tags/v2.40.1/Documentation/releases/v2.40.1-ReleaseNotes), [2.40.0](https://raw.githubusercontent.com/util-linux/util-linux/refs/tags/v2.40/Documentation/releases/v2.40-ReleaseNotes)))
+- base, dev: wget ([1.25.0](https://lists.gnu.org/archive/html/info-gnu/2024-11/msg00000.html))
+- base, dev: xfsprogs ([6.10.1](https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.10.1) (includes [6.10.0](https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.10.0), [6.9.0](https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.9.0)))
+- base, dev: xz-utils ([5.6.3](https://github.com/tukaani-project/xz/releases/tag/v5.6.3))
+- sysext-python: cachecontrol ([0.14.1](https://github.com/psf/cachecontrol/releases/tag/v0.14.1))
+- sysext-python: packaging ([24.2](https://github.com/pypa/packaging/releases/tag/24.2))
+- sysext-python: resolvelib ([1.1.0](https://github.com/sarugaku/resolvelib/blob/1.1.0/CHANGELOG.rst))
+- vmware: xmlsec ([1.3.5](https://github.com/lsh123/xmlsec/releases/tag/1.3.5))

sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/util-linux

@@ -0,0 +1,3 @@
+# New mount API does not work very well for mounting overlayfs when we
+# are building sysexts.
+export EXTRA_ECONF="--disable-libmount-mountfd-support"

sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-arch/sharutils/0000-gettext.patch

@@ -0,0 +1,11 @@
+diff -u3 -r sharutils-4.15.2/src/local.h sharutils-4.15.2-patched/src/local.h
+--- sharutils-4.15.2/src/local.h	2015-05-30 17:35:32.000000000 +0200
++++ sharutils-4.15.2-patched/src/local.h	2024-11-28 20:18:51.360160618 +0100
+@@ -37,6 +37,7 @@
+ #include "base64.h"
+ #include "dirname.h"
+ #include "error.h"
++#include "gettext.h"
+ #include "idcache.h"
+ #include "inttostr.h"
+ #include "locale.h"

sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-arch/sharutils/README.md

@@ -0,0 +1,13 @@
+`0000-gettext.patch` is for fixing a build with USE=-nls:
+
+```
+uuencode.c: In function 'process_opts':
+uuencode.c:204:3: error: implicit declaration of function 'bindtextdomain' [-Wimplicit-function-declaration]
+  204 |   bindtextdomain (PACKAGE, LOCALEDIR);
+      |   ^~~~~~~~~~~~~~
+uuencode.c:205:3: error: implicit declaration of function 'textdomain' [-Wimplicit-function-declaration]
+  205 |   textdomain (PACKAGE);
+      |   ^~~~~~~~~~
+```
+
+Should probably be upstreamed to sharutils and to Gentoo if it works.

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords

@@ -71,7 +71,6 @@
 
 # Keep versions on both arches in sync.
 =dev-cpp/glog-0.6.0 ~arm64
-=dev-db/sqlite-3.46.1 ~arm64
 =dev-lang/yasm-1.3.0-r1 ~arm64
 =dev-libs/ding-libs-0.6.2-r1 ~arm64
 
@@ -87,22 +86,23 @@
 # Catalyst 4 is not stable yet, but earlier versions are masked now.
 =dev-util/catalyst-4.0.0 ~amd64 ~arm64
 
-# Needed for the MIT License
-=net-analyzer/netperf-2.7.0_p20210121 ~amd64 ~arm64
-
 # Keep versions on both arches in sync.
-=net-firewall/conntrack-tools-1.4.8 ~arm64
+=net-firewall/conntrack-tools-1.4.8-r1 ~arm64
 =net-libs/libnetfilter_cthelper-1.0.1-r1 ~arm64
 =net-libs/libnetfilter_cttimeout-1.0.1 ~arm64
 
 # Needed by updated app-containers/containers-common
 =net-misc/passt-2024.09.06 ~amd64 ~arm64
 
+# Keep versions on both arches in sync.
+=net-nds/openldap-2.6.6-r2 ~amd64
+
 # Package has not been stabilised yet.
 =sys-apps/azure-vm-utils-0.4.0 ~amd64 ~arm64
 
 # Keep versions on both arches in sync.
-=sys-apps/kexec-tools-2.0.28 ~arm64
+=sys-apps/kexec-tools-2.0.29-r1 ~arm64
+=sys-apps/util-linux-2.40.2 ~arm64
 =sys-apps/zram-generator-1.1.2-r1 ~arm64
 =sys-auth/sssd-2.9.5 ~arm64
 =sys-boot/mokutil-0.7.2 **

sdk_container/src/third_party/portage-stable/app-admin/eselect/Manifest

@@ -1,2 +1,2 @@
-DIST eselect-1.4.26.tar.xz 184332 BLAKE2B ee1e8890802fc50646c8d1d5219f1ab0ec5cfc0138c758f73ad6baccf673992bbf3e763d8e84491f33e724ba4e1cf3bed6971ba7fa4373e0f06464ff4a5fa1e6 SHA512 397ae2f15d90d722eb84225b08f1afaaf6f89758bfae5d93b0a1c3eddc997c21e74ab62e09ee5e71941d3a8587b3372b64336d12054c3bbf0e56e1ba398a26f9
 DIST eselect-1.4.27.tar.xz 184464 BLAKE2B 718874f4d0651194f361ca3202e5140982812bf486c8efe82354944d55206b0113fa135992203e8baa00019c3fd773a90ddaf67157c16f4ac2d69965d9822fbd SHA512 f534785fc1f79869840f420b4ab2b2bf35593c504cce878a6d3d07f75012cf32288009ea9ac2a5607dba216a794110a64c5f2c54d5d8a3c641328489cecc024b
+DIST eselect-1.4.28.tar.xz 184692 BLAKE2B 86d1bbc0cb618f6edf49753c9f2be0f67670590ae55b8d2a8824940a5efa8462e395e1ee7f42379bd4ea64ea74f775a78e0a3a23ed565c67c3485f7e4e2d7a83 SHA512 26ac77465e2d6ab5193083c350cfd027d73ecd6d2702fc5f3db90373e92bf3722aead99c9b00b540c7972761620a485941c897854fe110454a4c6897f3f92868

sdk_container/src/third_party/portage-stable/app-admin/eselect/eselect-1.4.26-r1.ebuild → sdk_container/src/third_party/portage-stable/app-admin/eselect/eselect-1.4.28.ebuild

@@ -1,4 +1,4 @@
-# Copyright 1999-2023 Gentoo Authors
+# Copyright 1999-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=7
@@ -16,7 +16,7 @@ SRC_URI="https://dev.gentoo.org/~ulm/eselect/${P}.tar.xz"
 
 LICENSE="GPL-2+ || ( GPL-2+ CC-BY-SA-4.0 )"
 SLOT="0"
-KEYWORDS="~alpha amd64 arm arm64 hppa ~loong ~m68k ~mips ~ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris"
 IUSE="doc emacs vim-syntax"
 
 # coreutils for realpath

sdk_container/src/third_party/portage-stable/app-arch/cpio/cpio-2.15.ebuild

@@ -3,7 +3,7 @@
 
 EAPI=8
 
-inherit multiprocessing
+inherit flag-o-matic multiprocessing
 
 DESCRIPTION="File archival tool which can also read and write tar files"
 HOMEPAGE="https://www.gnu.org/software/cpio/cpio.html"
@@ -30,6 +30,9 @@ QA_CONFIG_IMPL_DECL_SKIP=(
 )
 
 src_configure() {
+	# https://savannah.gnu.org/bugs/?66297
+	append-cflags -std=gnu17
+
 	local myeconfargs=(
 		$(use_enable nls)
 		--bindir="${EPREFIX}"/bin