Weekly portage-stable package updates 2024-01-29

[github-actions]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/1302/cldsv/

Fixes flatcar/Flatcar#1214
Fixes flatcar/Flatcar#1322
Fixes flatcar/Flatcar#1180

--

• acct-user/pcscd: [DEV]

  • still at 0-r2
  • dropped a bogus line clobberring groups pcscd user would belong to
    • likely a mishap from times when adding it for the first time
    • pulls in acct-group/usb into the build
      • causes issues with adding the user to the read-only usb group,
        so added a workaround in overlay profiles that drops usb from
        the pcscd user's supplementary groups

• app-arch/tar: [DEV]

  • still at 1.35
  • made the tests to run in parallel

• app-arch/xz-utils: [DEV]

  • still at 5.4.5
  • adapted to libtool package rename

• app-crypt/ccid: [DEV]

  • still at 1.5.1
  • updated metadata

• app-editors/vim: [PROD] [DEV]

  • from 9.0.2092 to 9.0.2167
  • bumped python compat to 3.10..12
  • adapted to autoconf package rename
  • fixed CVE-2023-48231, CVE-2023-48232, CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237, CVE-2023-48706
    • update: vim Flatcar#1214
  • release notes: https://github.com/vim/vim/commits/v9.0.2167/

• app-editors/vim-core: [PROD] [DEV]

  • from 9.0.2092 to 9.0.2167
  • adapted to autoconf package rename
  • release notes: https://github.com/vim/vim/commits/v9.0.2167/

• app-emulation/qemu: [DEV]

  • still at 8.0.4
  • adapted to systemtap package rename

• app-misc/mime-types: [DEV]

  • from 2.1.53 to 2.1.54
  • release notes: https://pagure.io/mailcap/blob/9699055a1b4dfb90f7594ee2e8dda705fa56d3b8/f/NEWS

• app-vim/gentoo-syntax:

  • from 12 to 13
  • release notes: https://github.com/gentoo/gentoo-syntax/releases/tag/v13

• dev-build/autoconf: [DEV]

  • still at 2.71-r6
  • renamed from sys-devel/autoconf
  • made the tests to run in parallel
  • adapted to autoconf-wrapper package rename

• dev-build/autoconf-archive: [DEV]

  • still at 2023.02.20
  • renamed from sys-devel/autoconf-archive

• dev-build/autoconf-wrapper: [DEV]

  • still at 20221207-r1
  • renamed from sys-devel/autoconf-wrapper

• dev-build/automake: [DEV]

  • still at 1.16.5-r1
  • renamed from sys-devel/automake
  • adapted to automake-wrapper, autoconf packages rename
  • fixed building tests with C99
  • forced to use bison for YACC and flex for LEX in tests
  • compress info files

• dev-build/automake-wrapper: [DEV]

  • still at 20221207
  • renamed from sys-devel/automake-wrapper

• dev-build/gtk-doc-am: [DEV]

  • still at 1.33.2
  • renamed from dev-util/gtk-doc-am

• dev-build/libtool: [DEV]

  • still at 2.4.7-r1
  • renamed from sys-devel/libtool
  • adapted to autoconf, automake packages rename

• dev-debug/strace: [DEV]

  • still at 6.6
  • renamed from dev-util/strace

• dev-lang/perl: [DEV]

  • still at 5.38.2-r1
  • fixed some configure check with new clang

• dev-lang/python: [DEV]

  • still at 3.11.7
  • adapted to autoconf-archive package rename

• dev-libs/glib: [DEV]

  • still at 2.78.3
  • adapted to systemtap package rename
  • updated metadata

• dev-libs/libbsd: [DEV]

  • still at 0.11.7-r2
  • fixed linking tests with llvm linker

• dev-libs/libltdl: [DEV]

  • still at 2.4.7-r1
  • adapted to libtool package rename
  • disabled tests

• dev-libs/libp11: [DEV]

  • still at 0.4.12-r1
  • adapted to doxygen package rename
  • masked 0.4.12-r5 version - conflicts with our openssl

• dev-libs/libuv: [DEV]

  • still at 1.47.0-r1
  • adapted to libtool package rename

• dev-libs/libverto: [PROD] [DEV]

  • from 0.3.1-r1 to 0.3.2
  • EAPI 8
  • removed tevent and static-libs USE flags
    • tevent was one of the alternatives (there's now glib, libev and libevent)
    • static libraries are hardcoded to be disabled
  • updated metadata
  • release notes: https://github.com/latchset/libverto/releases/tag/0.3.2

• dev-libs/libxml2: [PROD] [DEV]

  • from 2.11.5-r1 to 2.12.4
  • adapted to gtk-doc-am package rename
  • release notes: https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.12.4/NEWS

• dev-libs/opensc:

  • from 0.23.0-r2 to 0.23.0-r3
  • still unstable for arm64, but was missing accept keywords in overlay profiles, added
  • added a patch with stack corruption fix

• dev-libs/xmlsec:

  • from 1.3.2 to 1.3.3-r1
  • release notes: https://github.com/lsh123/xmlsec/releases/tag/1.3.3

• dev-python/more-itertools:

  • from 10.1.0 to 10.2.0
  • release notes: https://github.com/more-itertools/more-itertools/releases/tag/v10.2.0

• dev-python/snakeoil:

  • from 0.10.6 to 0.10.7
  • release notes: https://github.com/pkgcore/snakeoil/releases/tag/v0.10.7

• dev-python/trove-classifiers:

  • from 2023.11.29 to 2024.1.8
  • release notes: https://github.com/pypa/trove-classifiers/releases/tag/2024.1.8

• dev-util/perf: [DEV]

  • still at 6.3
  • bumped python compat to 3.10..11
  • adapted to systemtap package rename

• eclass/autotools.eclass:

  • adapted to autoconf, automake, libtool packages rename

• eclass/bash-completion-r1.eclass:

  • drop out customization that modifies the behaviour of pkg-config
    • should not be necessary, with the update of sys-devel/crossdev making such behaviour the default

• eclass/flag-o-matic.eclass:

  • revert allowing some MIPS flags

• eclass/java-utils-2.eclass:

  • prepare src_prepare for future EAPIs

• eclass/llvm.eclass:

  • allow LLVM 19

• eclass/lua-single.eclass:

  • updated and added to automation to fix potential issues with vim
  • docs and trivial changes

• eclass/lua-utils.eclass:

  • updated and added to automation to fix potential issues with vim
  • updated docs
  • made some trivial variable renames

• eclass/ruby-single.eclass:

  • updated and added to automation to fix issues with vim
  • dropped support for EAPIs < 7
  • updated docs
  • updated depends to pull virtual/rubygems with specific USE flags

• eclass/ruby-utils.eclass:

  • updated and added to automation to fix issues with vim
  • updated supported ruby versions

• eclass/toolchain-autoconf.eclass:

  • adapted to autoconf package rename
  • compress info files

• eclass/toolchain.eclass:

  • adapted to systemtap package rename
  • bumped sys-devel/gcc-config dep to >=2.11
  • compress info and man files

• eclass/xorg-3.eclass:

  • adapted to libtool package rename

• licenses:

  • dropped BSD-2-with-views
  • updated BSD-2, BSD-2-with-patent, NVIDIA-NVLM

• net-dns/c-ares: [PROD] [DEV]

  • from 1.21.0 to 1.25.0-r1
  • release notes: https://c-ares.org/changelog.html#1_25_0

• net-dns/libidn2: [PROD] [DEV]

  • from 2.3.2 to 2.3.4-r2
  • added under automation as an indirect dependency of net-misc/curl
  • EAPI 8
  • license changed from "GPL-2+ LGPL-3+" to "|| ( GPL-2+ LGPL-3+ ) GPL-3+ unicode"
  • new USE flag nls for i18n (disabled)
  • dropped dependency on sys-apps/help2man
  • enable docs by default
  • release notes: https://gitlab.com/libidn/libidn2/-/releases/v2.3.4

• net-libs/gnutls: [DEV]

  • from 3.8.2 to 3.8.3
  • still unstable, so updated accept keywords in overlay profiles
  • adapted to gtk-doc-am package rename
  • fixes CVE-2024-0567 and CVE-2024-0553
    • update: net-libs/gnutls Flatcar#1322

• net-misc/curl: [PROD] [DEV]

  • from 8.5.0-r2 to 8.5.0-r3
  • added USE flag psl (enabled by default)
    • adds support for Public Suffix List
    • pulls in a dependency on net-libs/libpsl
  • still unstable so updated accept keywords in overlay profiles

• net-misc/ntp: [PROD] [DEV]

  • from 4.2.8_p17 to 4.2.8_p17-r1
  • fixed support for large files

• profiles:

  • adapted to package renames

• sys-apps/coreutils: [DEV]

  • still at 9.4
  • became stable for amd64, so dropped accept keywords from overlay profiles
  • adapted to strace package rename

• sys-apps/ethtool: [PROD] [DEV]

  • from 6.5 to 6.6
  • release notes: https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS?h=v6.6

• sys-apps/kmod: [DEV]

  • still at 31
  • adapted to gtk-doc-am package rename

• sys-apps/less: [PROD] [DEV]

  • from 633 to 643-r1
  • added test IUSE
  • fixed support for large files
  • release notes: https://www.greenwoodsoftware.com/less/news.643.html

• sys-apps/lshw: [PROD] [DEV]

  • from 02.19.2b_p20220831 to 02.19.2b_p20220831-r1
  • added updating of desktop database and icon cache on installation and uninstallation when GUI is enabled

• sys-apps/pcsc-lite: [DEV]

  • still at 2.0.0
  • changed dependency on sys-devel/flex to app-alternatives/lex

• sys-apps/texinfo: [DEV]

  • still at 7.1-r1
  • adapted to autoconf, automake, libtool package renames

• sys-apps/usbutils: [PROD] [DEV]

  • from 016 to 017
  • release notes: https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usbutils.git/tree/NEWS?h=v017

• sys-devel/binutils: [DEV]

  • still at 2.41-r3
  • became stable, so dropped accept keywords from overlay profiles

• sys-devel/bison: [DEV]

  • still at 3.8.2-r2
  • made the tests to run in parallel

• sys-devel/crossdev:

  • from 20230923 to 20240117
  • dropped the user patch, it's a part of the update
  • this should also allow us to drop customization on bash-completion eclass
  • release notes: https://gitweb.gentoo.org/proj/crossdev.git/log/?h=20240117

• sys-devel/gcc: [PROD] [DEV]

  • from 13.2.1_p20230826 to 13.2.1_p20240113-r1
  • fixes https://nvd.nist.gov/vuln/detail/CVE-2023-4039
    • update: gcc Flatcar#1180
  • bumped Gentoo patches tarball revision from 7 to 12
    • the changes: https://gitweb.gentoo.org/proj/gcc-patches.git/tree/13.2.0/gentoo/README.history?id=953476b6862099862501b7c2cfed7b91ccb8573c

• sys-fs/multipath-tools: [PROD] [DEV]

  • from 0.9.5 to 0.9.7
  • release notes: https://github.com/opensvc/multipath-tools/commits/0.9.7

• sys-fs/xfsprogs: [DEV]

  • still at 6.4.0
  • updated checking for enabled LTO

• sys-kernel/linux-headers: [DEV]

  • still at 6.6
  • became stable, so dropped accept keywords from overlay profiles

• sys-libs/binutils-libs: [DEV]

  • still at 2.41-r3
  • became stable, so dropped accept keywords from overlay profiles

• sys-libs/libseccomp: [PROD] [DEV]

  • from 2.5.4 to 2.5.5
  • bumped python compat to 3.10..11
  • release notes: https://github.com/seccomp/libseccomp/releases/tag/v2.5.5

• sys-process/psmisc: [DEV]

  • still at 23.6
  • adapted to libtool package rename

• virtual/libcrypt: [PROD] [DEV]

  • from 1-r1 to 1-r2
  • treat absent crypt USE flag in sys-libs/glibc as missing

--

• changelog
• image diff

[krnowak]

CI passed.

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/7830283328