flatcar · krnowak · Sep 8, 2023 · Sep 4, 2023 · Sep 4, 2023 · Sep 4, 2023
diff --git a/.github/workflows/portage-stable-packages-list b/.github/workflows/portage-stable-packages-list
@@ -476,6 +476,8 @@ virtual/openssh
 virtual/os-headers
 virtual/package-manager
 virtual/perl-Carp
+virtual/perl-Data-Dumper
+virtual/perl-Encode
 virtual/perl-Exporter
 virtual/perl-ExtUtils-MakeMaker
 virtual/perl-File-Spec

diff --git a/changelog/security/2023-09-07-weekly-updates.md b/changelog/security/2023-09-07-weekly-updates.md
@@ -0,0 +1 @@
+- Python ([CVE-2023-40217](https://nvd.nist.gov/vuln/detail/CVE-2023-40217), [CVE-2023-41105](https://nvd.nist.gov/vuln/detail/CVE-2023-41105))
diff --git a/changelog/updates/2023-09-07-weekly-updates.md b/changelog/updates/2023-09-07-weekly-updates.md
@@ -0,0 +1,14 @@
+- ethtool ([6.4](https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS?h=v6.4))
+- glib ([2.76.4](https://gitlab.gnome.org/GNOME/glib/-/releases/2.76.4))
+- hwdata ([0.372](https://github.com/vcrhonek/hwdata/commits/v0.372))
+- inih ([57](https://github.com/benhoyt/inih/releases/tag/r57))
+- iproute2 ([6.4.0](https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/?h=v6.4.0))
+- libmicrohttpd ([0.9.77](https://gitlab.com/libmicrohttpd/libmicrohttpd/-/releases/v0.9.77))
+- libnftnl ([1.2.6](https://git.netfilter.org/libnftnl/log/?h=libnftnl-1.2.6))
+- libnvme ([1.5](https://github.com/linux-nvme/libnvme/releases/tag/v1.5))
+- nvme-cli ([2.5](https://github.com/linux-nvme/nvme-cli/releases/tag/v2.5))
+- openldap ([2.6.4](https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_6_4/CHANGES))
+- python ([3.11.5](https://www.python.org/downloads/release/python-3115/))
+- qemu ([8.0.4](https://wiki.qemu.org/ChangeLog/8.0))
+- tar ([1.35](https://lists.gnu.org/archive/html/info-gnu/2023-07/msg00005.html))
+- xfsprogs ([6.4.0](https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.4.0))
diff --git a/...y/app-crypt/go-tspi/go-tspi-0.1-r4.ebuild → ...y/app-crypt/go-tspi/go-tspi-0.1-r5.ebuild b/...y/app-crypt/go-tspi/go-tspi-0.1-r4.ebuild → ...y/app-crypt/go-tspi/go-tspi-0.1-r5.ebuild
diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-9999.ebuild
@@ -1,6 +1,6 @@
 EAPI=7
 
-inherit coreos-go eutils git-r3 systemd
+inherit coreos-go git-r3 systemd
 COREOS_GO_PACKAGE="github.com/coreos/go-tspi"
 COREOS_GO_GO111MODULE="off"
 EGIT_REPO_URI="https://github.com/coreos/go-tspi.git"

diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-libs/libmicrohttpd b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-libs/libmicrohttpd
@@ -0,0 +1,8 @@
+# The usability of the eventfd is tested by linking and running a test
+# program, which can't be done when doing a cross-compiliation. So for
+# the case of cross-compilation, the configuration scripts assumes
+# that eventfd is not usable, which results in confiuration error,
+# since usage of eventfd is requested. We know that eventfd is usable
+# for us, for tell this to the configure script.
+
+export mhd_cv_eventfd_usable=yes
diff --git a/...ser-patches/sys-fs/xfsprogs/0001-libfrog-Fix-cross-compilation-issue-with-randbytes.patch b/...ser-patches/sys-fs/xfsprogs/0001-libfrog-Fix-cross-compilation-issue-with-randbytes.patch
@@ -1,4 +1,4 @@
-From 8969baced4cecd973f3077feba72c82c7fca34a0 Mon Sep 17 00:00:00 2001
+From 0b3f711bd7a9f47412f28b77a4a268f3ab1ba5ad Mon Sep 17 00:00:00 2001
 From: Krzesimir Nowak <knowak@microsoft.com>
 Date: Fri, 4 Aug 2023 11:49:18 +0200
 Subject: [PATCH] libfrog: Fix cross-compilation issue with randbytes

diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -38,12 +38,10 @@
 
 # Keep versions on both arches in sync.
 =dev-libs/ding-libs-0.6.1-r1 ~arm64
-=dev-libs/elfutils-0.189-r1 ~amd64
 =dev-libs/libgcrypt-1.10.1-r3 ~arm64
-=dev-python/lxml-4.9.2-r1 ~arm64
+=dev-python/lxml-4.9.3-r1 ~arm64
 =dev-util/bpftool-6.3 ~arm64
 =net-firewall/conntrack-tools-1.4.6-r1 ~arm64
-=net-firewall/ipset-7.17-r1 ~arm64
 
 # Required for addressing CVE-2023-0361.
 =net-libs/gnutls-3.8.0 ~arm64
@@ -56,6 +54,7 @@
 =net-misc/curl-8.2.1 ~amd64 ~arm64
 
 # Keep versions on both arches in sync.
+=net-nds/openldap-2.6.4-r1 ~amd64
 =sec-policy/selinux-base-2.20200818-r3 ~arm64
 =sec-policy/selinux-base-policy-2.20200818-r3 ~arm64
 =sec-policy/selinux-unconfined-2.20200818-r2 ~arm64

diff --git a/sdk_container/src/third_party/portage-stable/app-arch/gzip/Manifest b/sdk_container/src/third_party/portage-stable/app-arch/gzip/Manifest
@@ -1,4 +1,4 @@
 DIST gzip-1.12.tar.xz 825548 BLAKE2B 7e2d482c08555f5fb0ff5408c0afe48c61034e9779eed6e3dd8046c847234c0a8a6bc34d49a934a54db0d73033e12c71a228d373551384a4cd663315071637e0 SHA512 116326fe991828227de150336a0c016f4fe932dfbb728a16b4a84965256d9929574a4f5cfaf3cf6bb4154972ef0d110f26ab472c93e62ec9a5fd7a5d65abea24
 DIST gzip-1.12.tar.xz.sig 833 BLAKE2B ab7b4a759ef163d67f20773607ba0408ea9f1f7c7c224f43635fc3752acc521b74dbea4ec9ebb58a2f4fa13ecae19e00779b4b56c2cb95976301445beff817aa SHA512 1f4702797f7c5f1873c2f9c2f6210ba23824455d17ee82f50f0bf24240ed5bdf0090cf85338ccf76ba82422f8b4ad3a329d8bbf1350cb094d7bd61aa45550397
-DIST gzip-1.12_p20221228.tar.xz 806448 BLAKE2B 278eb44caca7ee16ca5d0210673726a1daebef6da7eaf0a87fc24590cb4c53d4ebe2decb6b8975440e1eb2c2cfebb69f091c658f9a7430a1717f0477fec279da SHA512 87d1fccb9603ec336c89689337e3cf3cfef70054ab4416bd8380fee011e9f517555d80a2a009bd312a58c34fdaf48778e5f0e9bea350ae280b440a325a837866
-DIST gzip-1.12_p20221228.tar.xz.sig 833 BLAKE2B b59d4677d15e2461d5fa95b4d53e94914e14cad613a9766aa3e51bfcece84ec0c4dd752c0d124cb76cc2240f9460f809c5bbbab958522c795e94026c8d4206ef SHA512 09a3a6687c80d7ec7e97ebd4c679e4d162729232d77966352c2f7ddd45594d79039ff33a93592889137605412b18b7868ea19ba4f4d162a5912a3978b3d67dd2
+DIST gzip-1.13.tar.xz 838248 BLAKE2B f0e3b4c28bafcd3b59b65ac2d71218dc58d81b52c6921c1be038757c99e99184178c5d0e9674caa5099713b8b64e8c85cf061f4abfa20b73b478288f121fb05d SHA512 e3d4d4aa4b2e53fdad980620307257c91dfbbc40bcec9baa8d4e85e8327f55e2ece552c9baf209df7b66a07103ab92d4954ac53c86c57fbde5e1dd461143f94c
+DIST gzip-1.13.tar.xz.sig 833 BLAKE2B 42e38fa7b3a6b6d21a18308cf662844ed84e1a142a945f3f3142db0a14212c0e642de514abb1307ec12ee7bb9644472cc3aed40582d9c266ab24808acbca0215 SHA512 f95e016f61f4a67cb4cec6cede2510af6bb5567d72bbd3d70210a6d5cf3ee5fea8f0cbf8f7b612fa52f2ecfd9dba050d9cd4494075ce5ac4abac7b74eaa7ccbc
diff --git a/...p-arch/gzip/gzip-1.12_p20221228-r1.ebuild → ...age-stable/app-arch/gzip/gzip-1.13.ebuild b/...p-arch/gzip/gzip-1.12_p20221228-r1.ebuild → ...age-stable/app-arch/gzip/gzip-1.13.ebuild
diff --git a/sdk_container/src/third_party/portage-stable/app-arch/libarchive/Manifest b/sdk_container/src/third_party/portage-stable/app-arch/libarchive/Manifest
@@ -1,6 +1,2 @@
-DIST libarchive-3.6.2.tar.xz 5213196 BLAKE2B 355b5d402e352dee802513485ce7e047af58d6de5b9bf6a49f3fd8d7b94117007598820ac979585c0da79747e8b63b70ab151131182368a11f97a047cf9029d4 SHA512 a12bb6839e13a0be1099f42c650fc90fbfe62d32ce38bcbb4794206d29b2c782ae1115124d0e5f6b9716514213af32b05e4a42eb196447674a5f9a2a32bee043
-DIST libarchive-3.6.2.tar.xz.asc 659 BLAKE2B a4b0035ab2bda4129cdf0c99266cd1e5f4772d90de6e348c75958bc803f369d6abea85d9730c6c9a216466b35697faad8d265fb2c285545887eafde27d828887 SHA512 403e5f7dec14d8b1cc01fad5a249e7b7618a7b45bcb3361ea80d67d76b591b12ce97f2c88b23d5486505dd3b34c1f1643e02235a3e5fc5150ee5735946092efe
-DIST libarchive-3.7.0.tar.xz 5243356 BLAKE2B 8fb72a0504038c71584c0416c1d747b7f5c82266518704353e7fdf794bd9f9e2dc22b8fa2538fa8d12a3b9776581077040371d25647fe72c02a4ec5f3bb8d950 SHA512 f69ff7fbec7e909b6a03dd5b01c47316f95a277907409c8fba3930bb90d02cd9a329921eada59ca1afc9a19e34de7eb34e9d535bbc8cd98fb586f723bd0fdba8
-DIST libarchive-3.7.0.tar.xz.asc 659 BLAKE2B 5bbd535ce100fbfb7ed46f8d7a6957ebb590c07124de4192ae0b777ad3b3950e6406f1ccda97dde5b6e792be00a039621de21665df9989073ebd0a905299eda1 SHA512 eda3a4347fb8d7f78c8e0a73f621a4a731d46cafc2f46ac59cebe39f3ebd29b1c3db21772c2027b30c5c507f5f732c3876e94f319e62156d2a3146e412cad84d
 DIST libarchive-3.7.1.tar.xz 5254260 BLAKE2B 1a6fa4f5027effea3df1cfcd2d99b8b126fe03d727412b0a4529d6b2157c2c29490bcce206d0f771256c5ed6dec9612608c2c54c4861647f4e2892e0f5548adb SHA512 24380b9aa24434dfe39929ec85ede33580291023b20b7cdf03990ce62578eaeb389f5ca5680245a84c7aad51574c85a1fa3fad5254ec5395eadac1cb2130a936
 DIST libarchive-3.7.1.tar.xz.asc 659 BLAKE2B 5e72732d2e5a4f5f04f3510b3d81a148f23dffa10a3ebe709e816388c5a6e68c08ee2bbe36d81141d5ffa94ed64df3e4ca05994cda651c09589fda69a6a95e90 SHA512 6f6f6e5780c609bd9c6c359c210656f26afb585bda46988687e19d1e55f4f3260ea80bf11bfba1213fb3a3e1514c5c096692b4b9e96ffbadf06f85eb1227250a
diff --git a/...third_party/portage-stable/app-arch/libarchive/files/libarchive-3.7.0-f_namemax-fix.patch b/...third_party/portage-stable/app-arch/libarchive/files/libarchive-3.7.0-f_namemax-fix.patch
diff --git a/sdk_container/src/third_party/portage-stable/app-arch/libarchive/libarchive-3.6.2-r1.ebuild b/sdk_container/src/third_party/portage-stable/app-arch/libarchive/libarchive-3.6.2-r1.ebuild
diff --git a/sdk_container/src/third_party/portage-stable/app-arch/libarchive/libarchive-3.7.0.ebuild b/sdk_container/src/third_party/portage-stable/app-arch/libarchive/libarchive-3.7.0.ebuild
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		- Python ([CVE-2023-40217](https://nvd.nist.gov/vuln/detail/CVE-2023-40217), [CVE-2023-41105](https://nvd.nist.gov/vuln/detail/CVE-2023-41105))