Weekly portage-stable package updates 2023-07-17

[github-actions]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/936/cldsv/

CI Passed: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/970/cldsv/

• acct-group/adm

  • no changes
  • include 2023 in copyright year

• acct-group/audio

  • no changes
  • include 2023 in copyright year

• acct-group/cdrom

  • no changes
  • include 2023 in copyright year

• acct-group/dialout

  • no changes
  • include 2023 in copyright year

• acct-group/disk

  • no changes
  • include 2023 in copyright year

• acct-group/dnsmasq

  • no changes
  • include 2023 in copyright year

• acct-group/docker

  • no changes
  • include 2023 in copyright year

• acct-group/floppy

  • Add the new package

• acct-group/input

  • no changes
  • include 2023 in copyright year

• acct-group/kmem

  • no changes
  • include 2023 in copyright year

• acct-group/kvm

  • no changes
  • include 2023 in copyright year

• acct-group/lp

  • no changes
  • include 2023 in copyright year

• acct-group/man

  • no changes
  • include 2023 in copyright year

• acct-group/messagebus

  • no changes
  • include 2023 in copyright year

• acct-group/netperf

  • no changes
  • include 2023 in copyright year

• acct-group/nobody

  • no changes
  • include 2023 in copyright year

• acct-group/ntp

  • no changes
  • include 2023 in copyright year

• acct-group/pcap

  • no changes
  • include 2023 in copyright year

• acct-group/polkitd

  • no changes
  • include 2023 in copyright year

• acct-group/portage

  • no changes
  • include 2023 in copyright year

• acct-group/render

  • no changes
  • include 2023 in copyright year

• acct-group/root

  • no changes
  • include 2023 in copyright year

• acct-group/sgx

  • no changes
  • include 2023 in copyright year

• acct-group/sshd

  • no changes
  • include 2023 in copyright year

• acct-group/systemd-coredump

  • no changes
  • include 2023 in copyright year

• acct-group/systemd-journal

  • no changes
  • include 2023 in copyright year

• acct-group/systemd-journal-remote

  • no changes
  • include 2023 in copyright year

• acct-group/systemd-network

  • no changes
  • include 2023 in copyright year

• acct-group/systemd-oom

  • no changes
  • include 2023 in copyright year

• acct-group/systemd-resolve

  • no changes
  • include 2023 in copyright year

• acct-group/systemd-timesync

  • no changes
  • include 2023 in copyright year

• acct-group/tape

  • no changes
  • include 2023 in copyright year

• acct-group/tss

  • no changes
  • include 2023 in copyright year

• acct-group/tty

  • no changes
  • include 2023 in copyright year

• acct-group/users

  • no changes
  • include 2023 in copyright year

• acct-group/utmp

  • no changes
  • include 2023 in copyright year

• acct-group/uucp

  • add the new package

• acct-group/video

  • no changes
  • include 2023 in copyright year

• acct-group/wheel

  • no changes
  • include 2023 in copyright year

• acct-user/dnsmasq

  • no changes
  • include 2023 in copyright year

• acct-user/man

  • no changes
  • include 2023 in copyright year

• acct-user/messagebus

  • no changes
  • include 2023 in copyright year

• acct-user/netperf

  • no changes
  • include 2023 in copyright year

• acct-user/nobody

  • no changes
  • include 2023 in copyright year

• acct-user/ntp

  • no changes
  • include 2023 in copyright year

• acct-user/pcap

  • no changes
  • include 2023 in copyright year

• acct-user/polkitd

  • no changes
  • include 2023 in copyright year

• acct-user/portage

  • no changes
  • include 2023 in copyright year

• acct-user/root

  • no changes
  • include 2023 in copyright year

• acct-user/sshd

  • no changes
  • include 2023 in copyright year

• acct-user/systemd-coredump

  • no changes
  • include 2023 in copyright year

• acct-user/systemd-journal-remote

  • no changes
  • include 2023 in copyright year

• acct-user/systemd-network

  • no changes
  • include 2023 in copyright year

• acct-user/systemd-oom

  • no changes
  • include 2023 in copyright year

• acct-user/systemd-resolve

  • no changes
  • include 2023 in copyright year

• acct-user/systemd-timesync

  • no changes
  • include 2023 in copyright year

• acct-user/tss

  • no changes
  • include 2023 in copyright year

• app-arch/lbzip2 [PROD] [DEV]

  • still at 2.5_p20181227-r2
  • fix compilation issue; Fix call to undeclared function info

• app-arch/pigz [PROD] [DEV]

  • from 2.7 to 2.7.1-r1
  • backport a memcpy UB fix from upstream

• app-editors/nano

  • still at 7.2-r1
  • Fix the link to the homepage

• app-editors/vim [PROD] [DEV]

  • still at 9.0.1503
  • no changes

• app-editors/vim-core [PROD] [DEV]

  • still at 9.0.1503
  • no changes

• app-emulation/qemu

  • still at 7.2.3
  • no changes

• dev-lang/lua [PROD] [DEV]

  • still at 5.4.4-r103
  • no changes

• dev-lang/perl

  • from 5.36.1-r2 to 5.36.1-r3
  • Update perl ebuild to install a perl-cleaner

• dev-lang/python [DEV]

  • still at 3.11.4
  • no changes

• dev-libs/cJSON [DEV]

  • still at 1.7.15
  • no changes

• dev-libs/glib [PROD] [DEV]

  • still at 2.76.3
  • no changes

• dev-libs/gobject-introspection-common

  • still at 1.76.1
  • add tag to metadata

• dev-libs/inih [PROD] [DEV]

  • still at 56-r1
  • no changes

• dev-libs/libuv [PROD] [DEV]

  • still at 1.44.2-r1
  • no changes

• dev-libs/libxml2 [PROD] [DEV]

  • from 2.10.4 to 2.11.4
  • bump PYTHON_COMPAT to {10..12}
  • add virtual/libiconv as dependency
  • fixes security issues update: libxml2 Flatcar#1118

• dev-libs/libxslt

  • from 1.1.37-r1 to 1.1.38
  • bump PYTHON_COMPAT to {10..12}
  • Fix running Python tests

• dev-libs/nettle [PROD] [DEV]

  • still at 3.9.1
  • became stable on arm64, so dropped keywords from overlay

• dev-python/cython

  • still at 0.29.35
  • no changes

• dev-python/distro

  • still at 1.8.0
  • no changes

• dev-python/inflect

  • still at 6.0.4
  • no changes

• dev-python/jaraco-functools

  • from 3.6.0 to 3.8.0
  • no changes

• dev-python/jaraco-text

  • still at 3.11.1
  • make CLI dependencies optional

• dev-python/lxml

  • from 4.9.2 to 4.9.2-r1
  • backport patch for unicode parsing
  • add keyword to coreos-overlay for keeping arch in sync

• dev-python/markupsafe

  • from 2.1.2 to 2.1.3
  • move PYTHON_COMPAT to {10..12}

• dev-python/platformdirs

  • from 3.5.1 to 3.8.0

• dev-python/pydantic

  • still at 1.10.9
  • no update

• dev-python/setuptools

  • from 67.8.0 to 67.8.0-r1
  • move wheel from BDEP to RDEP

• dev-python/six

  • still at 1.16.0-r1
  • no changes

• dev-util/b2

  • still at 4.9.6
  • no changes

• dev-util/bpftool [PROD] [DEV]

  • still at 6.3
  • no changes

• dev-util/catalyst

  • from 3.0.22-r1 to 3.0.22-r3
  • move to EAPI8
  • migrate to PEP517 build

• dev-util/cmake

  • still at 3.26.4-r1
  • no changes

• dev-util/cmocka [PROD] [DEV]

  • from 1.1.5 to 1.1.5-r1
  • adjust to use append-lfs-flags

• dev-util/gdbus-codegen

  • still at 2.76.3
  • no changes

• dev-util/glib-utils

  • still at 2.76.3
  • no changes

• dev-util/gtk-doc-am

  • still at 1.33.2
  • updated metadata

• dev-util/meson

  • still at 1.1.1
  • updated metadata - became a system package

• dev-util/pahole [DEV]

  • from 1.24_p20221024 to 1.25
  • no changes

• dev-util/patchutils

  • still at 0.4.2
  • no changes

• dev-util/perf

  • still at 6.3
  • filter LTO flags

• dev-vcs/git [PROD] [DEV]

  • from 2.39.3 to 2.41.0
  • update PYTHON_COMPAT to {10..12}

• eclass/elisp-common

  • no changes

• eclass/kernel-2

  • copy instead of move to preserve the source

• eclass/user-info

  • include a fix to lookup by ID

• licenses

  • drop unused MBROLA, paraview

• media-libs/libpng

  • still at 1.6.39
  • no changes

• net-analyzer/nmap [PROD] [DEV]

  • still at 7.94
  • no changes

• net-libs/libnftnl [PROD] [DEV]

  • still at 1.2.5
  • no changes

• net-misc/iperf [DEV]

  • from 3.13 to 3.14

• profiles

  • masked catalyst-3, so needed to unmask it again in overlay profiles
  • masked hugepages for sys-apps/nvme-cli, because of some issues with glibc (we weren't enabling it anyway)
  • force xattr USE for sys-devel/gettext-0.22-r1, gets ignored by gettext's configure script (we are still on 0.21.1, so not yet relevant)
  • disables cli USE flag for dev-python/jaraco-text - this makes dev-python/autocommand and dev-python/inflect unused

• sys-apps/coreutils [PROD] [DEV]

  • still at 9.3-r2
  • adjust the rename FETISH_GROUPS -> COREUTILS_GROUPS

• sys-apps/diffutils [PROD] [DEV]

  • still at 3.11
  • no changes

• sys-apps/file [DEV]

  • still at 5.44-r3
  • change PYTHON_COMPAT to {10..11}
  • fix the sed command

• sys-apps/grep [PROD] [DEV]

  • still at 3.11
  • no changes

• sys-apps/groff [DEV]

  • still at 1.22.4
  • no changes

• sys-apps/hwdata [PROD] [DEV]

  • still at 0.371
  • no changes

• sys-apps/kmod [PROD] [DEV]

  • still at 30-r1
  • no changes

• sys-apps/makedev

  • from 3.23.1-r2 to 3.23.1-r3
  • Add acct-group/floppy and acct-group/uucp to dependencies
  • Include the groups depend for MAKEDEV

• sys-apps/nvme-cli [PROD] [DEV]

  • still at 2.4-r2
  • no changes

• sys-apps/portage [DEV]

  • from 3.0.46 to 3.0.49-r1
  • Add a patch to fix a depgraph message

• sys-apps/sandbox [DEV]

  • still at 2.32
  • upstream stabilized arm64; dropped keyword from coreos-overlay

• sys-apps/usbutils [PROD] [DEV]

  • still at 015
  • no changes

• sys-devel/autoconf

  • still at 2.71-r6
  • no changes

• sys-devel/automake

  • still at 1.16.5
  • change PYTHON_COMPAT to {10..11}
  • change package name from app-arch/gzip to app-alternatives/gzip

• sys-devel/binutils [PROD] [DEV]

  • still at 2.40-r5
  • upstream stabilized amd64; dropped keyword from coreos-overlay

• sys-devel/gcc [PROD] [DEV]

  • still at 12.3.1_p20230526
  • no changes

• sys-devel/gdb [DEV]

  • still at 13.2
  • no changes

• sys-libs/binutils-libs [PROD] [DEV]

  • still at 2.40-r5
  • upstream stabilized amd64; dropped keyword from coreos-overlay

• x11-base/xorg-proto

  • still at 2023.2
  • became stable for amd64 so dropped keywords

• changelog

• image diff

[dongsupark]

Can you please changelog/security/2023-07-17-weekly-updates.md to include a security issue of libxml2?

- libxml2 ([libxml2-20230428](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.4))

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/5750230537

[sayanchowdhury]

Can you please changelog/security/2023-07-17-weekly-updates.md to include a security issue of libxml2?

- libxml2 ([libxml2-20230428](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.4))

Sure, will do. I was wondering how to include this without a CVE.

[krnowak]

Some changelog mishaps, otherwise looks good. Thanks for working on this!