Weekly portage-stable package updates 2026-08-24 by github-actions[bot] · Pull Request #4238 · flatcar/scripts

github-actions · 2026-08-24T07:36:12Z

CI: https://jenkins.flatcar.org/job/container/job/sdk/181/cldsv/

Closes flatcar/Flatcar#2223
Closes flatcar/Flatcar#2249
Closes flatcar/Flatcar#2325
Closes flatcar/Flatcar#2326
Closes flatcar/Flatcar#2328
Closes flatcar/Flatcar#2329
Closes flatcar/Flatcar#2330
Closes flatcar/Flatcar#2331
Closes flatcar/Flatcar#2348
Closes flatcar/Flatcar#2349
Closes flatcar/Flatcar#2350
Closes flatcar/Flatcar#2351

--

app-admin/etcd-wrapper: [PROD] [DEV]
- from 3.5.16 to 3.5.26
app-arch/tar: [PROD] [DEV]
- still at 1.35-r1
- package became stable on 'amd64'
- package became stable on 'arm64'
app-arch/unzip: [PROD] [DEV]
- from 6.0_p29-r2 to 6.0_p31
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- fixes CAN-2026-2034440, CAN-2026-2034442, CAN-2026-2034443
  - update: app-arch/unzip Flatcar#2351
- release notes: https://metadata.ftp-master.debian.org/changelogs//main/u/unzip/unzip_6.0-31_changelog
app-arch/zip: [PROD] [DEV]
- from 3.0-r7 to 3.0_p16
- fixes zip-20260814
  - update: app-arch/zip Flatcar#2350
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- release notes: https://metadata.ftp-master.debian.org/changelogs//main/z/zip/zip_3.0-16_changelog
app-containers/containerd: [SYSEXT-CONTAINERD]
- from 2.3.3 to 2.3.4
- release notes: https://github.com/containerd/containerd/releases/tag/v2.3.4
app-containers/crun: [SYSEXT-PODMAN]
- still at 1.28
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/docker: [SYSEXT-DOCKER]
- still at 29.5.2
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/docker-buildx: [SYSEXT-DOCKER]
- still at 0.35.0
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/docker-cli: [SYSEXT-DOCKER]
- still at 29.5.2
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/incus: [SYSEXT-INCUS]
- from 7.2 to 7.3-r1
- fixes CVE-2026-62867, CVE-2026-62940, CVE-2026-62941, CVE-2026-63125, CVE-2026-63343, GHSA-26gp-p5fw-3r2h, GHSA-67qw-68v3-36h6, GHSA-7fj9-65v4-rp7h, GHSA-p2v3-6wvc-cv3p, GHSA-4qxq-p5hm-3q3p, GHSA-m3j6-p3v3-qmjv, CVE-2026-62313, GHSA-6v6x-387m-rj4w
  - update: app-containers/incus Flatcar#2325
- build dependencies:
  - changes for dev-lang/go:
    - changed version constraint from >=1.25.10 to >=1.25.12
- release notes: https://discuss.linuxcontainers.org/t/incus-7-3-has-been-released/27033
app-containers/runc: [SYSEXT-CONTAINERD]
- still at 1.4.3
- package became stable on 'amd64'
- package became stable on 'arm64'
app-crypt/gnupg: [PROD] [DEV]
- from 2.5.20-r1 to 2.5.21
- release notes: https://dev.gnupg.org/T8262.html
app-crypt/gpgme: [SYSEXT-PODMAN]
- from 2.0.1-r1 to 2.1.2
- release notes: https://raw.githubusercontent.com/gpg/gpgme/refs/tags/gpgme-2.1.2/NEWS
app-emulation/qemu:
- still at 10.2.3
- package became stable on 'amd64'
- package became stable on 'arm64'
app-portage/gentoolkit: [DEV]
- from 0.7.6 to 0.8.0
- release notes: https://gitweb.gentoo.org/proj/gentoolkit.git/log/?h=gentoolkit-0.8.0
app-shells/bash: [PROD] [DEV]
- from 5.3_p9-r2 to 5.3_p15
- release notes: https://cgit.git.savannah.gnu.org/cgit/bash.git/log/?id=b460816602167718f78a6233164e8875f49b75b2
app-shells/bash-completion: [DEV]
- from 2.17.0 to 2.18.0
- release notes: https://github.com/scop/bash-completion/releases/tag/2.18.0
app-text/scdoc:
- from 1.11.4 to 1.11.5
- release notes: https://git.sr.ht/~sircmpwn/scdoc/refs/1.11.5
dev-build/meson:
- from 1.11.1 to 1.11.2
- release notes: https://github.com/mesonbuild/meson/commits/1.11.2/
dev-db/etcd: [PROD] [DEV]
- from 3.5.18 to 3.5.26
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- release notes: https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md#v3526-2025-12-17
dev-db/sqlite: [PROD] [DEV]
- from 3.53.1 to 3.53.3
- release notes: https://sqlite.org/releaselog/3_53_3.html
dev-lang/go:
- from 1.26.5 to 1.26.7
- fixes CVE-2026-33818, CVE-2026-39821, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-56864, CVE-2026-56865
  - update: dev-lang/go Flatcar#2348
- release notes: https://go.dev/doc/devel/release#go1.26.7 https://go.dev/doc/devel/release#go1.26.6
dev-lang/rust:
- from 1.95.0 to 1.96.1
- IUSE flag 'doc' became disabled by default
- build dependencies:
  - added a dependency 'dev-lang/rust:1.96.1' for USE '||'
  - added a dependency 'dev-lang/rust-bin:1.96.1' for USE '||'
- release notes: https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/ https://blog.rust-lang.org/2026/05/28/Rust-1.96.0/
dev-libs/expat: [PROD] [DEV]
- from 2.8.2 to 2.8.3
- fixes CVE-2026-72522
  - update: dev-libs/expat Flatcar#2328
- release notes: https://blog.hartwork.org/posts/expat-2-8-3-released/
dev-libs/glib: [PROD] [DEV]
- from 2.88.2 to 2.88.3
- fixes CVE-2026-15588
  - update: dev-libs/glib Flatcar#2326
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- dependencies:
  - changes for dev-util/gdbus-codegen weak blocker:
    - changed version constraint from <2.88.2 to <2.88.3
- runtime dependencies:
  - changes for dev-util/gdbus-codegen weak blocker:
    - changed version constraint from <2.88.2 to <2.88.3
- release notes: https://gitlab.gnome.org/GNOME/glib/-/releases/2.88.3
dev-libs/leancrypto: [PROD] [DEV]
- from 1.7.2-r3 to 1.8.0
- release notes: https://leancrypto.org/leancrypto/releases/leancrypto-1.8.0/index.html
dev-libs/libevent: [PROD] [DEV]
- from 2.1.12-r1 to 2.1.13
- build dependencies:
  - changes for sec-keys/openpgp-keys-libevent with USE conditionals 'verify-sig?':
    - added version constraint >=1
- runtime dependencies:
  - dropped a weak blocker '!<=dev-libs/9libs-1.0'
- release notes: https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable
dev-libs/openssl: [PROD] [DEV]
- from 3.5.7 to 3.6.4
- fixes CVE-2026-14456, CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803
  - update: dev-libs/openssl Flatcar#2349
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- build dependencies:
  - changes for sec-keys/openpgp-keys-openssl with USE conditionals 'verify-sig?':
    - changed version constraint from >=20260415 to >=20260617-r1
- release notes: https://github.com/openssl/openssl/blob/openssl-3.6.4/CHANGES.md
dev-libs/tree-sitter:
- from 0.26.8 to 0.26.11
- release notes: https://github.com/tree-sitter/tree-sitter/releases/tag/v0.26.11
dev-python/charset-normalizer: [SYSEXT-PYTHON]
- from 3.4.7 to 3.4.9
- IUSE flag 'native-extensions' became disabled by default
- release notes: https://github.com/jawah/charset_normalizer/releases/tag/3.4.9
dev-python/cython:
- from 3.2.8 to 3.2.9
- release notes: https://github.com/cython/cython/releases/tag/3.2.9
dev-python/gpep517:
- from 19 to 20
- release notes: https://github.com/gentoo/gpep517/commits/v20/
dev-python/hatchling:
- from 1.30.1 to 1.31.0
- release notes: https://github.com/pypa/hatch/releases/tag/hatchling-v1.31.0
dev-python/jaraco-functools: [SYSEXT-PYTHON]
- from 4.5.0 to 4.6.0
- release notes: https://raw.githubusercontent.com/jaraco/jaraco.functools/refs/tags/v4.6.0/NEWS.rst
dev-python/jaraco-text: [SYSEXT-PYTHON]
- from 4.2.0 to 4.3.0
- release notes: https://raw.githubusercontent.com/jaraco/jaraco.text/refs/tags/v4.3.0/NEWS.rst
dev-python/platformdirs: [SYSEXT-PYTHON]
- from 4.10.0 to 4.10.1
- release notes: https://github.com/tox-dev/platformdirs/releases/tag/4.10.1
dev-python/setuptools: [SYSEXT-PYTHON]
- from 82.0.1 to 83.0.0
- release notes: https://raw.githubusercontent.com/pypa/setuptools/refs/tags/v83.0.0/NEWS.rst
dev-python/snakeoil:
- from 0.11.1 to 0.11.4
- release notes: https://github.com/pkgcore/snakeoil/releases/tag/v0.11.4
dev-python/tree-sitter:
- from 0.25.2-r1 to 0.26.0
- dependencies:
  - changes for dev-libs/tree-sitter:
    - changed version constraint from >=0.25 to =0.26*
    - added slot constraint =
  - dropped a dependency '<dev-libs/tree-sitter-0.27:='
- runtime dependencies:
  - changes for dev-libs/tree-sitter:
    - changed version constraint from >=0.25 to =0.26*
    - added slot constraint =
  - dropped a dependency '<dev-libs/tree-sitter-0.27:='
  - added a dependency 'dev-python/setuptools[python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?,python_targets_python3_15(-)?]'
  - dropped a dependency 'dev-python/setuptools[python_targets_python3_12(-)?,python_targets_python3_13(-)?]' for USE 'python_targets_python3_12?'
- release notes: https://github.com/tree-sitter/py-tree-sitter/releases/tag/v0.26.0
dev-util/pahole: [DEV]
- from 1.30 to 1.31
- release notes: https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tag/?h=v1.31
dev-util/perf:
- still at 6.19.12
- dependencies:
  - changes for dev-libs/capstone with USE conditionals 'capstone?':
    - added version constraint <6
- runtime dependencies:
  - changes for dev-libs/capstone with USE conditionals 'capstone?':
    - added version constraint <6
dev-util/pkgcheck:
- from 0.10.40-r1 to 0.10.42
- build dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.3
  - changes for sys-apps/pkgcore:
    - changed version constraint from >=0.12.34 to >=0.12.37
- runtime dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.3
  - changes for sys-apps/pkgcore:
    - changed version constraint from >=0.12.34 to >=0.12.37
- release notes: https://github.com/pkgcore/pkgcheck/releases/tag/v0.10.42 https://github.com/pkgcore/pkgcheck/releases/tag/v0.10.41
licenses:
- added Boost-1.0, Unicode-DFS-2016, Unlicense
net-dns/bind: [PROD] [DEV]
- from 9.20.23 to 9.20.26
- package became stable on 'arm64'
- build dependencies:
  - dropped a dependency '>=app-portage/elt-patches-20250306'
  - dropped a dependency '>=dev-build/libtool-2.4.7-r3'
  - dropped a dependency 'sys-devel/gnuconfig'
  - dropped a dependency '>=dev-build/automake-1.18.1:1.18' for USE '||'
  - dropped a dependency '>=dev-build/autoconf-2.73:2.73' for USE '||'
  - dropped a dependency '>=dev-build/autoconf-2.72-r1:2.72' for USE '||'
- release notes: https://bind9.readthedocs.io/en/v9.20.26/notes.html#notes-for-bind-9-20-26 https://bind9.readthedocs.io/en/v9.20.25/notes.html#notes-for-bind-9-20-25 https://bind9.readthedocs.io/en/v9.20.24/notes.html#notes-for-bind-9-20-24
net-misc/openssh: [PROD] [DEV]
- from 10.4_p1-r1 to 10.5_p1
- fixes CVE-2026-73281, CVE-2026-73282, CVE-2026-73283
  - update: net-misc/openssh Flatcar#2329
- release notes: https://www.openssh.org/txt/release-10.5
net-misc/rsync: [PROD] [DEV]
- from 3.4.4 to 3.5.0\
- fixes CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53786, CVE-2026-53788, CVE-2026-53789, CVE-2026-53790, CVE-2026-53791, CVE-2026-53792, CVE-2026-53793, CVE-2026-53794, CVE-2026-53795, CVE-2026-53796, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53802, CVE-2026-53803, CVE-2026-70452, CVE-2026-70453, CVE-2026-70454, CVE-2026-70455, CVE-2026-70456, CVE-2026-70457, CVE-2026-70458, CVE-2026-70459, CVE-2026-70460, CVE-2026-70461, CVE-2026-70462, CVE-2026-70463, CVE-2026-70464
  - update: net-misc/rsync Flatcar#2330
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- dependencies:
  - changes for virtual/acl with USE conditionals 'acl?':
    - added version constraint >=2.4.0
- runtime dependencies:
  - changes for virtual/acl with USE conditionals 'acl?':
    - added version constraint >=2.4.0
- release notes: https://download.samba.org/pub/rsync/NEWS#3.5.0
net-nds/rpcbind: [PROD] [DEV]
- still at 1.2.8
- fixes CVE-2026-16277, CVE-2026-16461 through backported patches
  - update: net-nds/rpcbind Flatcar#2223
sys-apps/acl: [PROD] [DEV]
- still at 2.4.0-r2
- package became stable on 'amd64'
- package became stable on 'arm64'
sys-apps/attr: [PROD] [DEV]
- still at 2.6.0
- package became stable on 'amd64'
- package became stable on 'arm64'
sys-apps/findutils: [PROD] [DEV]
- from 4.10.0 to 4.11.0
- release notes: https://cgit.git.savannah.gnu.org/cgit/findutils.git/tree/NEWS?h=v4.11.0
sys-apps/pkgcore:
- from 0.12.35 to 0.12.39
- build dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.4
- runtime dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.4
- release notes: https://github.com/pkgcore/pkgcore/releases/tag/v0.12.39
sys-apps/portage: [DEV]
- from 3.0.81.2 to 3.0.81.3
- release notes: https://raw.githubusercontent.com/gentoo/portage/refs/tags/portage-3.0.81.3/NEWS
sys-block/open-iscsi: [PROD] [DEV]
- still at 2.1.11
- fixes CVE-2026-44943, CVE-2026-44944 through backported patches
  - update: sys-block/open-iscsi Flatcar#2249
sys-devel/binutils: [DEV]
- from 2.46.0 to 2.46.1
- package became unstable on 'arm64'
- added IUSE flag 'verify-sig'
- build dependencies:
  - added a dependency '>=app-portage/gemato-20' for USE 'verify-sig?'
  - added a dependency 'sec-keys/openpgp-keys-binutils' for USE 'verify-sig?'
  - added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
  - added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
- release notes: https://lists.gnu.org/archive/html/info-gnu/2026-06/msg00003.html
sys-firmware/intel-microcode: [PROD] [DEV]
- from 20260512_p20260513 to 20260812_p20260813
- fixes CVE-2025-31936, CVE-2025-31938, CVE-2025-35973, CVE-2026-20707, CVE-2026-20713, CVE-2026-20716, CVE-2026-20760, CVE-2026-20917
  - update: sys-firmware/intel-microcode Flatcar#2331
- package became unstable on 'amd64'
- release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260812 https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260811
sys-libs/binutils-libs: [PROD] [DEV]
- from 2.46.0 to 2.46.1
- package became unstable on 'arm64'
- added IUSE flag 'verify-sig'
- build dependencies:
  - added a dependency '>=app-portage/gemato-20' for USE 'verify-sig?'
  - added a dependency 'sec-keys/openpgp-keys-binutils' for USE 'verify-sig?'
  - added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
  - added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
- release notes: https://lists.gnu.org/archive/html/info-gnu/2026-06/msg00003.html
virtual/acl: [SYSEXT-INCUS]
- from 0-r2 to 2.4.0
- EAPI changed from '7' to '8'
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- runtime dependencies:
  - changes for sys-apps/acl with USE conditionals 'kernel_linux?':
    - changed version constraint from >=2.2.52-r1 to >=2.4.0

--

changelog
image diff

It's from Gentoo commit 6df401bb7db4d5a5e4cf416388ed08b3f2232631. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 7014292056a82964f739b15859d1ae2b3d3c18a0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 883541097b9e079a62e0db4db120ce654635f52f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b1210c8231ec8a452fcf57b6407942584618a755. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 9ed3e2df239e09d1e328be3da70de03c40f2fe58. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 65c4452fc27b92dbc1d87b7542bf27430803882d. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 2d41ffdea5794de159bf18ce5ad6bd23f24cbcee. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 02ce01ec05ef283c92c7f17428c696bd7cd0c5d5. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit cac388d61497751ed9234256ccbb8710a53c0589. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 2b5af5e8471f7a065c724e84e729ad554deb3fd3. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit be86282032430a9bafa65e55e37ed3c2f188a531. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 95aff9e8f03228512791c6b64a94bbab3e0a7dfc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 63a0f4f9f96567d63213236ea9320ca2883d63bd. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit d1f6fe6ccb9a3b2741cf2250816c816be5edf4e1. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 6f33a772199fe94fad2f18e603d041fe68fbaee8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 51b7f3e43299a02e8aebae02bd0f46c95fbc8bdc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b08688a9358e889c04006f7cdb4207bb88477777. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 1512409365077cc5553061c9078f08caf9983ef0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit e4b2c316bdc2ac6dcfd81bb57d5833dcc2c0e424. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit a12f5111b74ee41e1efa1be5b66e26b27da1496c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 01c32c5a9e98dedb27587c783f7e060eae86d451. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b04052800f79d39d631e26433b62a5c4ca2beed2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit cde4bf7c76900144b9c4c99125af93b6be6ee9b6. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 8ff6f2cdfd494e83a4faaafee327a4afab89d7b4. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b6729ab03bb45b2e78209fb13df19a77eb8e2f06. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit ea1c89cf40505fc7c4f98de59e403b11248031e2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit a24a9c0ed5bdd65b04b42dd47dd6a08eaf1dea83. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 66e815007260c1edfa8baaf8426a9073e9a4c24f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit dadc13df0d3133820eac74e02ddcc0ccb1ba19b9. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 4d6fb939d6244a742b30a51422908dd90de42206. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 81421c1908a073aafef75f5391ed8ce9113de480. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 9b8f30a5a50c17097190e43f9df65975328e62ef. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 5f1fb8f02ef8ff30bf54fa23dc67ddb159bc4bd8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 8728729eec7d141312970cfb2daeed8372e60256. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit bd728f7e1058d74752dc44300cb8fb389a704693. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit afbd283d6e367cfc6f65ed7b1124ccaf825b3443. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 166b3e27f5e749ab73156e465386a653556cd0f5. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit c6b9933f46ebab4c2ddb405127720394f0cc976d. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

But this time yell quite loud about it, so it will be visible in the occurences file. And I will remember to reinstate it next time instead of spending more time to investigate it. But at least the investigation resulted in dropping the patch - it is enough to just regenerate the build system. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

It's from Gentoo commit 7bf120b3471b724503d8df025a37aaee8a1bd6bc. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

We just updated it to 3.6.4 to address even more security issues. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

github-actions Bot added the main label Aug 24, 2026

Flatcar Buildbot added 29 commits August 28, 2026 14:56

app-arch/gzip: Sync with Gentoo

2840487

It's from Gentoo commit 6df401bb7db4d5a5e4cf416388ed08b3f2232631. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/tar: Sync with Gentoo

1bad6d1

It's from Gentoo commit 7014292056a82964f739b15859d1ae2b3d3c18a0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/unzip: Sync with Gentoo

3b42d85

It's from Gentoo commit 883541097b9e079a62e0db4db120ce654635f52f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/zip: Sync with Gentoo

1230f98

It's from Gentoo commit b1210c8231ec8a452fcf57b6407942584618a755. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/aardvark-dns: Sync with Gentoo

53194de

It's from Gentoo commit 9ed3e2df239e09d1e328be3da70de03c40f2fe58. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/containerd: Sync with Gentoo

8caaebe

It's from Gentoo commit 65c4452fc27b92dbc1d87b7542bf27430803882d. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/crun: Sync with Gentoo

e75b154

It's from Gentoo commit 2d41ffdea5794de159bf18ce5ad6bd23f24cbcee. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker: Sync with Gentoo

d05c007

It's from Gentoo commit 02ce01ec05ef283c92c7f17428c696bd7cd0c5d5. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker-buildx: Sync with Gentoo

a5d3718

It's from Gentoo commit cac388d61497751ed9234256ccbb8710a53c0589. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker-cli: Sync with Gentoo

498da53

It's from Gentoo commit 2b5af5e8471f7a065c724e84e729ad554deb3fd3. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/incus: Sync with Gentoo

7f41833

It's from Gentoo commit be86282032430a9bafa65e55e37ed3c2f188a531. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/netavark: Sync with Gentoo

29a2d04

It's from Gentoo commit 95aff9e8f03228512791c6b64a94bbab3e0a7dfc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/podman: Sync with Gentoo

3f9a606

It's from Gentoo commit 63a0f4f9f96567d63213236ea9320ca2883d63bd. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/runc: Sync with Gentoo

25b2021

It's from Gentoo commit d1f6fe6ccb9a3b2741cf2250816c816be5edf4e1. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/gnupg: Sync with Gentoo

ec8cdcb

It's from Gentoo commit 6f33a772199fe94fad2f18e603d041fe68fbaee8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/gpgme: Sync with Gentoo

5e75420

It's from Gentoo commit 51b7f3e43299a02e8aebae02bd0f46c95fbc8bdc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-emulation/qemu: Sync with Gentoo

d53de36

It's from Gentoo commit b08688a9358e889c04006f7cdb4207bb88477777. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-emulation/qemu-guest-agent: Sync with Gentoo

f10bb74

It's from Gentoo commit 1512409365077cc5553061c9078f08caf9983ef0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-misc/jq: Sync with Gentoo

bb759bd

It's from Gentoo commit e4b2c316bdc2ac6dcfd81bb57d5833dcc2c0e424. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-portage/gentoolkit: Sync with Gentoo

0d83585

It's from Gentoo commit a12f5111b74ee41e1efa1be5b66e26b27da1496c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-shells/bash: Sync with Gentoo

1e1047d

It's from Gentoo commit 01c32c5a9e98dedb27587c783f7e060eae86d451. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-shells/bash-completion: Sync with Gentoo

414e7ea

It's from Gentoo commit b04052800f79d39d631e26433b62a5c4ca2beed2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-text/scdoc: Sync with Gentoo

c97dad5

It's from Gentoo commit cde4bf7c76900144b9c4c99125af93b6be6ee9b6. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-build/meson: Sync with Gentoo

9aed381

It's from Gentoo commit 8ff6f2cdfd494e83a4faaafee327a4afab89d7b4. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-db/etcd: Sync with Gentoo

e0025b4

It's from Gentoo commit b6729ab03bb45b2e78209fb13df19a77eb8e2f06. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-db/sqlite: Sync with Gentoo

f4eb21e

It's from Gentoo commit ea1c89cf40505fc7c4f98de59e403b11248031e2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-lang/go: Sync with Gentoo

6f05bc2

It's from Gentoo commit a24a9c0ed5bdd65b04b42dd47dd6a08eaf1dea83. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-lang/python: Sync with Gentoo

22b813a

It's from Gentoo commit 66e815007260c1edfa8baaf8426a9073e9a4c24f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-lang/rust: Sync with Gentoo

af0e726

It's from Gentoo commit dadc13df0d3133820eac74e02ddcc0ccb1ba19b9. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

Flatcar Buildbot and others added 26 commits August 28, 2026 14:56

sys-kernel/dracut: Sync with Gentoo

287c12c

It's from Gentoo commit 4d6fb939d6244a742b30a51422908dd90de42206. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

sys-libs/binutils-libs: Sync with Gentoo

a34d329

It's from Gentoo commit 81421c1908a073aafef75f5391ed8ce9113de480. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

sys-libs/glibc: Sync with Gentoo

4629ab6

It's from Gentoo commit 9b8f30a5a50c17097190e43f9df65975328e62ef. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

sys-libs/libcap-ng: Sync with Gentoo

ffd4941

It's from Gentoo commit 5f1fb8f02ef8ff30bf54fa23dc67ddb159bc4bd8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

sys-process/audit: Sync with Gentoo

4537138

It's from Gentoo commit 8728729eec7d141312970cfb2daeed8372e60256. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

virtual/acl: Sync with Gentoo

f3ec936

It's from Gentoo commit bd728f7e1058d74752dc44300cb8fb389a704693. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

x11-drivers/nvidia-drivers: Sync with Gentoo

c188605

It's from Gentoo commit afbd283d6e367cfc6f65ed7b1124ccaf825b3443. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

x11-misc/makedepend: Sync with Gentoo

3678de6

It's from Gentoo commit 166b3e27f5e749ab73156e465386a653556cd0f5. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

eclass/xorg-meson: Add from Gentoo

f1a9f31

It's from Gentoo commit c6b9933f46ebab4c2ddb405127720394f0cc976d. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Add accept keywords for binutils

c8aac1d

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

.github: Add eclass/xorg-meson.eclass to automation

3bd5aeb

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Backport a patch for dev-libs/openssl

ec3df50

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Add a patch for sys-block/open-iscsi

fdad352

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Add a patch for net-nds/rpcbind

5d4d229

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Add accept keywords to address some security issues

9169224

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Add accept keywords for virtual/acl

75121ce

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Drop obsolete accept keywords

c68f671

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Temporarily mask dev-db/etcd >=3.6

1cc00ba

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

dev-libs/openssl: Sync with Gentoo

40282db

It's from Gentoo commit 7bf120b3471b724503d8df025a37aaee8a1bd6bc. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Add accept keywords for dev-libs/openssl

a8f99ad

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Drop patch for dev-libs/openssl

6a3c604

We just updated it to 3.6.4 to address even more security issues. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Pick up latest 3.5 version of dev-db/etcd

f6f7dff

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay app-admin/etcd-wrapper: Sync version to match dev-db/etcd

9a8027a

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Keep accept keyword entries sorted

ff95a16

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

changelog: Add entries

6384317

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-08-24 branch from 5a339a8 to 6384317 Compare August 28, 2026 14:51

krnowak requested a deployment to development August 28, 2026 14:51 — with GitHub Actions Waiting

krnowak added this to Flatcar tactical, release planning, and roadmap Aug 28, 2026

krnowak moved this to ⚒️ In Progress in Flatcar tactical, release planning, and roadmap Aug 28, 2026

Navigation Menu

Uh oh!

Weekly portage-stable package updates 2026-08-24 - #4238

Weekly portage-stable package updates 2026-08-24#4238
github-actions[bot] wants to merge 134 commits into
mainfrom
buildbot/weekly-portage-stable-package-updates-2026-08-24

github-actions Bot commented Aug 24, 2026 •

edited by krnowak

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

github-actions Bot commented Aug 24, 2026 • edited by krnowak Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Aug 24, 2026 •

edited by krnowak

Loading