Weekly portage-stable package updates 2024-05-13

.github/workflows/portage-stable-packages-list

@@ -97,16 +97,27 @@ app-arch/zstd
 
 app-cdr/cdrtools
 
+app-containers/aardvark-dns
+app-containers/catatonit
+app-containers/conmon
+app-containers/containers-common
+app-containers/containers-image
+app-containers/containers-shortnames
+app-containers/containers-storage
 app-containers/cri-tools
+app-containers/crun
 app-containers/docker
 app-containers/docker-cli
+app-containers/netavark
+app-containers/podman
 app-containers/runc
 
 app-crypt/adcli
 app-crypt/argon2
 app-crypt/ccid
 app-crypt/efitools
 app-crypt/gnupg
+app-crypt/gpgme
 app-crypt/libb2
 app-crypt/libmd
 app-crypt/mhash
@@ -181,6 +192,8 @@ dev-db/sqlite
 dev-debug/gdb
 dev-debug/strace
 
+dev-go/go-md2man
+
 dev-lang/duktape
 dev-lang/go-bootstrap
 dev-lang/lua
@@ -249,11 +262,13 @@ dev-libs/popt
 dev-libs/protobuf
 dev-libs/userspace-rcu
 dev-libs/xmlsec
+dev-libs/yajl
 
 dev-perl/File-Slurp
 dev-perl/Parse-Yapp
 
 dev-python/autocommand
+dev-python/backports-tarfile
 dev-python/crcmod
 dev-python/cython
 dev-python/distro
@@ -274,9 +289,11 @@ dev-python/lazy-object-proxy
 dev-python/lxml
 dev-python/markupsafe
 dev-python/more-itertools
+dev-python/olefile
 dev-python/ordered-set
 dev-python/packaging
 dev-python/pathspec
+dev-python/pillow
 dev-python/platformdirs
 dev-python/pluggy
 dev-python/pydecomp
@@ -285,7 +302,6 @@ dev-python/setuptools
 dev-python/setuptools-scm
 dev-python/six
 dev-python/snakeoil
-dev-python/tomli
 dev-python/trove-classifiers
 dev-python/typing-extensions
 dev-python/wheel
@@ -318,8 +334,8 @@ eclass/cargo.eclass
 eclass/cmake-multilib.eclass
 eclass/cmake.eclass
 eclass/desktop.eclass
-eclass/distutils-r1.eclass
 eclass/dist-kernel-utils.eclass
+eclass/distutils-r1.eclass
 eclass/eapi7-ver.eclass
 eclass/eapi8-dosym.eclass
 eclass/edo.eclass
@@ -368,9 +384,9 @@ eclass/python-r1.eclass
 eclass/python-single-r1.eclass
 eclass/python-utils-r1.eclass
 eclass/readme.gentoo-r1.eclass
+eclass/rpm.eclass
 eclass/ruby-single.eclass
 eclass/ruby-utils.eclass
-eclass/rpm.eclass
 eclass/savedconfig.eclass
 eclass/selinux-policy-2.eclass
 eclass/strip-linguas.eclass
@@ -435,6 +451,7 @@ net-misc/ethertypes
 net-misc/iperf
 net-misc/iputils
 net-misc/ntp
+net-misc/passt
 net-misc/rsync
 net-misc/socat
 net-misc/wget
@@ -515,10 +532,10 @@ sys-block/parted
 sys-block/thin-provisioning-tools
 
 sys-boot/efibootmgr
-sys-boot/mokutil
 # Updating to 3.0.17 breaks building of sys-boot/shim.
 #
 # sys-boot/gnu-efi
+sys-boot/mokutil
 
 sys-devel/bc
 sys-devel/binutils
@@ -539,22 +556,25 @@ sys-firmware/ipxe
 sys-firmware/seabios-bin
 sys-firmware/sgabios
 
+sys-fs/btrfs-progs
 sys-fs/cryptsetup
 sys-fs/dosfstools
 sys-fs/e2fsprogs
 sys-fs/fuse
 sys-fs/fuse-common
+sys-fs/fuse-overlayfs
 sys-fs/lsscsi
+sys-fs/lvm2
+sys-fs/mdadm
 sys-fs/mtools
 sys-fs/multipath-tools
 sys-fs/quota
 sys-fs/squashfs-tools
+sys-fs/udev-init-scripts
 sys-fs/udisks
 sys-fs/xfsprogs
 sys-fs/zfs
 sys-fs/zfs-kmod
-app-containers/podman
-net-misc/passt
 
 sys-kernel/linux-headers
 

changelog/changes/2024-05-22-qemu-guest-agent-arm64.md

@@ -0,0 +1 @@
+- Add qemu-guest-agent to all arm64 images ([scripts#1982](https://github.com/flatcar/scripts/pull/1982))

changelog/security/2024-05-22-weekly-updates.md

@@ -0,0 +1,2 @@
+- glib ([CVE-2024-34397](https://nvd.nist.gov/vuln/detail/CVE-2024-34397))
+- tpm2-{tools,tss} ([CVE-2024-29038](https://nvd.nist.gov/vuln/detail/CVE-2024-29038), [CVE-2024-29039](https://nvd.nist.gov/vuln/detail/CVE-2024-29039), [CVE-2024-29040](https://nvd.nist.gov/vuln/detail/CVE-2024-29040))

changelog/updates/2024-05-22-weekly-updates.md

@@ -0,0 +1,29 @@
+- binutils ([2.42](https://sourceware.org/pipermail/binutils/2024-January/132213.html))
+- bpftool ([6.8.2](https://github.com/libbpf/bpftool/releases/tag/v6.8.0))
+- glib ([2.78.6](https://gitlab.gnome.org/GNOME/glib/-/releases/2.78.6))
+- gnupg ([2.4.5](https://lists.gnupg.org/pipermail/gnupg-announce/2024q1/000482.html))
+- kexec-tools ([2.0.28](https://github.com/horms/kexec-tools/commits/v2.0.28/))
+- kmod ([32](https://git.kernel.org/pub/scm/utils/kernel/kmod/kmod.git/tree/NEWS?h=v32))
+- libarchive ([3.7.3](https://github.com/libarchive/libarchive/releases/tag/v3.7.3))
+- libassuan ([2.5.7](https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libassuan.git;a=blob;f=NEWS;h=047f12b7c3ee0c8c1718a2da8b5a6bb9dd541fd8;hb=cc2f776904e0b5e56e2b81b2672ca98d7787ed1b))
+- libdnet ([1.18.0](https://github.com/ofalk/libdnet/releases/tag/libdnet-1.18.0))
+- libgpg-error ([1.48](https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgpg-error.git;a=blob;f=NEWS;h=9295a3544d9cd47f90581061da27d6f12e278513;hb=77b7c5ff6b756870811acaff53df0ebf1e5c2368))
+- libpcre2 ([10.43](https://github.com/PCRE2Project/pcre2/blob/pcre2-10.43/NEWS))
+- libunwind ([1.8.1](https://github.com/libunwind/libunwind/releases/tag/v1.8.1) (includes [1.8.0](https://github.com/libunwind/libunwind/releases/tag/v1.8.0)))
+- libusb ([1.0.27](https://github.com/libusb/libusb/blob/v1.0.27/ChangeLog))
+- libxml2 ([2.12.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.6))
+- multipath-tools ([0.9.8](https://github.com/opensvc/multipath-tools/blob/0.9.8/NEWS.md))
+- nmap ([7.95](https://nmap.org/changelog.html#7.95))
+- portage ([3.0.63](https://gitweb.gentoo.org/proj/portage.git/tree/NEWS?h=portage-3.0.63))
+- psmisc ([23.7](https://gitlab.com/psmisc/psmisc/-/releases/v23.7))
+- qemu ([8.2.3](https://wiki.qemu.org/ChangeLog/8.2))
+- qemu-guest-agent ([8.2.0](https://wiki.qemu.org/ChangeLog/8.2#Guest_agent))
+- sqlite ([3.45.3](https://www.sqlite.org/releaselog/3_45_3.html))
+- tpm2-tools ([5.6.1](https://github.com/tpm2-software/tpm2-tools/releases/tag/5.6.1))
+- tpm2-tss ([4.0.2](https://github.com/tpm2-software/tpm2-tss/releases/tag/4.0.2))
+- whois ([5.5.21](https://github.com/rfc1036/whois/blob/v5.5.21/debian/changelog))
+- xfsprogs ([6.6.0](https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.6.0))
+- zfs ([2.2.3](https://github.com/openzfs/zfs/releases/tag/zfs-2.2.3))
+- zfs-kmod ([2.2.3](https://github.com/openzfs/zfs/releases/tag/zfs-2.2.3))
+- zlib ([1.3.1](https://github.com/madler/zlib/releases/tag/v1.3.1))
+- zstd ([1.5.6](https://github.com/facebook/zstd/releases/tag/v1.5.6))

sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild

@@ -209,8 +209,8 @@ RDEPEND="${RDEPEND}
 
 # OEM specific bits that need to go in USR
 RDEPEND+="
+	app-emulation/qemu-guest-agent
 	amd64? (
-		app-emulation/qemu-guest-agent
 		sys-auth/google-oslogin
 	)
 "

sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/misc-files-0-r5.ebuild → sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/misc-files-0-r6.ebuild

@@ -12,7 +12,7 @@ HOMEPAGE='https://www.flatcar.org/'
 LICENSE='Apache-2.0'
 SLOT='0'
 KEYWORDS='amd64 arm64'
-IUSE="audit ntp openssh policycoreutils"
+IUSE="audit mdadm ntp openssh policycoreutils"
 
 # No source directory.
 S="${WORKDIR}"
@@ -31,6 +31,7 @@ DEPEND="
 RDEPEND="
         ${DEPEND}
         >=app-shells/bash-5.2_p15-r2
+        mdadm? ( >=sys-fs/mdadm-4.2-r3 )
         ntp? ( >=net-misc/ntp-4.2.8_p17 )
         policycoreutils? ( >=sys-apps/policycoreutils-3.6 )
         audit? ( >=sys-process/audit-3.1.1 )
@@ -173,6 +174,13 @@ src_install() {
         systemd_enable_service multi-user.target audit-rules.service
     fi
 
+    if use mdadm; then
+        # This is a replacement of Gentoo's weekly cron file.
+        systemd_dounit "${FILESDIR}"/mdadm/mdadm.service
+        systemd_dounit "${FILESDIR}"/mdadm/mdadm.timer
+        systemd_enable_service timers.target mdadm.timer
+    fi
+
     if use ntp; then
         insinto /etc
         doins "${FILESDIR}/ntp/ntp.conf"

sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-fs/mdadm

@@ -0,0 +1,2 @@
+# Mask cron stuff, we will be installing our own systemd timer instead.
+INSTALL_MASK+=" /etc/cron.weekly"