Weekly portage-stable package updates 2025-08-04

[github-actions]

CI: TODO

Closes flatcar/Flatcar#1838
Closes flatcar/Flatcar#1839

--

• app-doc/eclass-manpages:

  • from 20250711 to 20250730
  • release notes: none

• app-emulation/qemu:

  • still at 9.2.3-r3
  • dependencies:
    • changes for dev-libs/libbpf with USE conditionals 'bpf?':
      • added version constraint >=1.1.0
  • runtime dependencies:
    • changes for dev-libs/libbpf with USE conditionals 'bpf?':
      • added version constraint >=1.1.0

• app-shells/gentoo-bashcomp: [DEV]

  • from 20240625 to 20250620
  • release notes: https://gitweb.gentoo.org/proj/gentoo-bashcomp.git/commit/?id=668791a07b74f425103cf8fce1fa5cce15bdcb22

• dev-lang/python: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 3.11.13-r1 to 3.11.13_p1
  • fixes CVE-2025-6069, CVE-2025-8194
    • update: python Flatcar#1838
  • pulls in a few more patches

• dev-libs/tree-sitter:

  • from 0.25.3 to 0.25.6
  • release notes: https://github.com/tree-sitter/tree-sitter/releases/tag/v0.25.6 https://github.com/tree-sitter/tree-sitter/releases/tag/v0.25.5 https://github.com/tree-sitter/tree-sitter/releases/tag/v0.25.4

• dev-python/distlib: [SYSEXT-PYTHON]

  • from 0.3.9 to 0.4.0
  • release notes: https://github.com/pypa/distlib/blob/0.4.0/CHANGES.rst#040

• dev-python/ensurepip-pip: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 25.1.1 to 25.1.1-r1
  • mostly test-related changes and PEP517 mode stuff for building
  • build dependencies:
    • added a dependency '>=dev-python/gpep517-16[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
    • added a dependency '>=dev-python/setuptools-78.1.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
    • added a dependency 'dev-lang/python:3.11[ssl(+),threads(+)]' for USE 'python_targets_python3_11?'
  • runtime dependencies:
    • added a dependency 'dev-lang/python:3.11[ssl(+),threads(+)]' for USE 'python_targets_python3_11?'
  • licenses:
    • dropped license 'LGPL-2.1+'
    • added license 'Apache-2.0' for USE '||'
    • added license 'MIT' for USE '||'

• dev-python/ensurepip-setuptools: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 80.9.0 to 80.9.0-r1
  • mostly test-related changes and PEP517 mode stuff for building
  • build dependencies:
    • added a dependency '>=dev-python/gpep517-16[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
    • added a dependency 'dev-lang/python:3.11[xml(+)]' for USE 'python_targets_python3_11?'
  • runtime dependencies:
    • added a dependency 'dev-lang/python:3.11[xml(+)]' for USE 'python_targets_python3_11?'
  • licenses:
    • added license 'Apache-2.0'
    • added license 'LGPL-3'
    • added license 'MIT'
    • added license 'PSF-2'
    • added license 'Apache-2.0' for USE '||'

• dev-python/setuptools: [SYSEXT-PYTHON]

  • from 80.9.0 to 80.9.0-r1
  • nothing interesting

• dev-util/pkgcheck:

  • from 0.10.36 to 0.10.36-r1
  • added a patch to make it work with older tree-sitter version

• eclass/dist-kernel-utils.eclass:

  • added some fixes for EFI zboot support

• eclass/distutils-r1.eclass:

  • added EPYTEST_RERUNS to be used with flaky tests

• eclass/python-utils-r1.eclass:

  • added EPYTEST_RERUNS to be used with flaky tests

• eclass/rust.eclass:

  • added 1.89.0

• eclass/sgml-catalog-r1.eclass:

  • added support for EAPI 8

• eclass/toolchain.eclass:

  • added support for some sanitizers during bootstrap

• licenses:

  • dropped all unused licenses
  • dropped 2dboy-EULA, 9wm, AFL-3.0, AGPL-3, AGPL-3+, AIFFWriter.m, AMD-GPU-PRO-EULA, AMPAS, APL-1.0, APSL-2, AVASYS, Activision, Aladdin, Alasir, Allegro, AnyDesk-TOS, Apache-1.0, Apache-1.1, Arkkra, Arphic, Artistic-2, Aseprite-EULA, Atmel, Autodesk, AvP, Avago, BAEKMUK, BSD-with-disclosure, BUILDLIC, BUSL-1.1, Base64, BigelowHolmes, BitstreamCyberbit, BitstreamVera, BlueOak-1.0.0, Broadcom, Broadcom-tod, Brother, C3, CAOSL, CAPYBARA-EULA, CARA, CC-BY-1.0, CC-BY-2.0, CC-BY-2.5, CC-BY-4.0, CC-BY-NC-4.0, CC-BY-NC-ND-2.0, CC-BY-NC-ND-2.5, CC-BY-NC-ND-3.0, CC-BY-NC-ND-4.0, CC-BY-NC-SA-1.0, CC-BY-NC-SA-2.5, CC-BY-NC-SA-3.0, CC-BY-NC-SA-4.0, CC-BY-ND-3.0, CC-BY-ND-4.0, CC-BY-SA-1.0, CC-BY-SA-2.0, CC-BY-SA-2.5, CC-PD, CC-SA-1.0, CC-Sampling-Plus-1.0, CDDL-1.1, CDF, CDLA-Permissive-2.0, CNRI, CPAL-1.0, CPL-0.5, CPOL, CROSSOVER-3, CSL-2.0, Canon-IJ, Canon-UFR-II, CeCILL-2, CeCILL-B, CeCILL-C, Cenon, ChexQuest3, Clarified-Artistic, Clear-BSD, Cockos, Cockroach, Crypt-IDEA, DCC, DES, DOOM-COLLECTORS-EDITION, DUKE3D, DUMB-0.9.3, DXX-Rebirth, Dell-EULA, Digium, Dreamweb, EAPL, ECL-2.0, EPL-1.0, EPL-2.0, EPSON, ETQW, EUPL-1.1, EUPL-1.2, Elastic, Elastic-2.0, Elm, Emacs, ErlPL-1.1, Exolab, FAH-EULA-2014, FAH-special-permission, FDL-1.1, FDL-1.1+, FDL-1.3, FESTIVAL, FFT2D, FIPL-1.0, FLTK, FNMT-RCM, FTDI, FTL, FVWM, FastCGI, FatFs, File-MMagic, Flashpix, Flightradar24, FoilTeX, FraunhoferFDK, Free-Art-1.2, Free-Art-1.3, GIMPS, GOG-EULA, GPL-1, GPL-2+-with-Pyinstaller-Bootloader-exception, GPL-2+-with-font-exception, GPL-2+-with-openssl-exception, GPL-2-with-MySQL-FLOSS-exception, GPL-2-with-classpath-exception, GPL-2-with-font-exception, GPL-2-with-linking-exception, GPL-3+-with-autoconf-exception, GPL-3+-with-font-exception, GPL-3+-with-openssl-exception, GPL-3-with-font-exception, GPL-3-with-openssl-exception, Gameplay-Group-EULA, Geogebra, Glulxe, GregoryRubin, HIDAPI, HPL, HRP, HTML-Tidy, HappyBunny, Hauppauge-Firmware, HoMM2-Demo, Hugo, HyperSpec, IBM, IDEA, IDEA_Academic, IDEA_Classroom, IDEA_OpenSource, IDEA_Personal, IDPL, IJG, IPAfont, ISSL, ITS4, IUPAC-InChi, Inform, Intel-SDP, Introversion, Ispell, JDOM, JOVE, JPRS, JSON, JasPer2.0, JetBrains-business, JetBrains-classroom, JetBrains-educational, JetBrains-individual, JoyPixels, Khronos-CLHPP, Kryoflux-MAME, LA_OPT_BASE_LICENSE, LBNLBSD, LDP-1, LDP-1a, LGPL-2-with-linking-exception, LGPL-2.1-with-linking-exception, LGrind-Jacobson, LIBGLOSS, LICENSE-BITSTREAM, LLGPL-2.1, LOKI-EULA, LOTW, LPL-1.02, LPPL-1.0, LPPL-1.2, LPPL-1.3, LPPL-1.3a, LPPL-1.3c, LSI, LSI-tw_cli, LaTeX-Calendar, LambdaMOO, Legends, Lexmark-EU2-0111, LogMeIn, MBROLA-VOICES, MILO, MIT-0, MIT-with-advertising, MPEG-4, MPL-1.0, MSMS, MSttfEULA, MTA-0.5, MagentaMgOpen, MakeMKV-EULA, Markwardt, MaxMind2, Mellanox-AS-IS, MicroChip-PK2, MicroChip-SDCC, Microsemi, Microsoft-vscode, Midisport, MikroTik, Mini-XML, MirOS, Mojang, Moria, Ms-PL, Ms-RL, NCSA-AMD, NCSA-HDF, NEWLIB, NOSA, NPL-1.1, NPSL-0.95, NVIDIA-CUDA, NVIDIA-SDK, NVIDIA-SDK-v2017.06.13, NVIDIA-SDK-v2020.10.12, NVIDIA-cuDNN, NVIDIA-cuSPARSELt-v2020.10.12, NVIDIA-r1, NVIDIA-r2, Nokia-Qt-LGPL-Exception-1.1, OAL-1.0.1, OASIS-Open, OFFIS, OFL-1.0, OFL-1.1, OGL-1.0a, OPERA-2018, OPL, OSGi-Specification-2.0, OSL-1.1, OSL-2.0, OSL-2.1, OTN, Old-MIT, Ookla, Open-CASCADE-LGPL-2.1-Exception-1.0, Openwall, PAK128.German, PAPERS-PLEASE, PEL, PHP-2.02, PHP-3, PHP-3.01, PICO-8, PLAN9, POSTGRESQL, PSTT, PUEL-11, PUEL-12, PYTHON, PassMark-EULA, PerlDL, Primate-Plunge, Princeton, PyCharm, PyCharm_Academic, PyCharm_Classroom, PyCharm_OpenSource, PyCharm_Preview, Q2EULA, Q3AEULA-20000111, QPL-1.0, QUAKE4, RAR, RSAL-2, Resounding, RtMidi, Ruby, Ruby-BSD, SDRplay, SFI-SCLA, SGI-B-2.0, SGMLUG, SIR-TECH, SOFA, SPS, SSLeay, SSPL-1, STRIDE, SURF, Sendmail, Sendmail-Open-Source, Skype-TOS, Sleepycat, Snd, Snes9x, Soltys, SpeedTouch-USB-Firmware, Spotify, Stanford, Steam, Stuffit, Sublime, Sun-BSD-no-nuclear-2005, SunSoft, Sustainable-Use-1.0, Sympow-BSD, Synology, TADS2, TADS3, THINKTANKS, TIK, TeX, TeX-other-free, TeamViewer, Tenable-Master-Agreement, Texinfo-manual, TextMate-bundle, Time-Format, Time-modules, Tinker, Toyoda, Transmission-OpenSSL-exception, UCAR-BSD, UCAR-Unidata, UPL-1.0, UPX-exception, URI, URT, UbuntuFontLicense-1.0, Unicode-DFS-2015, Unsplash, UoI-NCSA, VGBA, VOSTROM, VTK, Vivaldi, Volatility-1.0, W3C, WPS-EULA, WTFPL-2, Watcom-1.0, WidePix, WolframCDFPlayer, X11-Lucent, XC, XEphem, XMAME, Xdebug, YDSLA, Yacht-Club-Games-EULA, ZPL, ZSH, Zend-2.0, aczoom, adom, all-rights-reserved, alternate, amiwm, android, aquafont, bakoma, bass, battalion, baudline, bertini, bestcrypt, bh-luxi, blackshades, blat, boehm-gc, bonnie, broadcom_bcm20702, buddy, bufexplorer.vim, bungie-marathon, charm, circlemud, clustalw, codehaus-classworlds, coldspringharbor, colt, comi, crafty, descent-data, dgen-sdl, docbook, dom4j, drascula, dropbox, eschalon-book-1-demo, eternal_lands, exljbris-free, f.lux, fairuse, fasta, feh, finchtv, flexmock, fmdrv, fping, free-noncomm, freetts, frozenbyte-eula, gSOAP, gSOAP-1.3b, galaxyhack, gd, geant4, geekbench, genymotion, gmap, gnuplot, google-chrome, grass-ipafonts, gsm, guild, hp-proliant-essentials, hpe, hplip-plugin, hylafaxplus, iASL, icaclient, imagemagick, inmon-sflow, ipadic, ipw2100-fw, ipw2200-fw, jardinains, jfontain, julius, knights-demo, kyocera-mita-ppds, lcc, levee, lha, libmng, libpng, libtiff, lure, mac, man-pages-posix-2013, mapm, marginalhacks, master-pdf-editor, matplotlib, mekanix, metapackage, microsoft-azurevpnclient, microsoft-edge, minpack, mm, mmix, modeller, molmol, mpg123-el, mpich2, mplus-fonts, myspell-en_CA-KevinAtkinson, myspell-ru_RU-AlexanderLebedev, netcat, nethack, netlogo, netperf, ngrep, no-source-code, nomachine, openknights, otter, par, penguzzle, perforce, photopc, phrack, pkcrack, pngcrush, pngnq, prog-express, psutils, qlogic-fibre-channel-firmware, quake1-demodata, quake1-killer, quake1-teamfortress, quake1-textures, quake2-demodata, queen, qwt, raspberrypi-videocore-bin, rdisc, regexp-UofT, repoze, richardson, rpi-eeprom, rwpng, sash, scanlogd, sdlsasteroids, sfpg, shmux, shorten, spideroak, stardock-images, sun-bcla-j2me, sun-bcla-jai, sun-bcla-jsapi, supermicro, sus4-copyright, swiss-prot, symlinks, szip, tablelist, tanuki-community, tarsnap, tcp_wrappers_license, teamspeak3, teamspeak5, the-Click-license, timescale, tkMOO, tm-align, torque-2.5, trf, trio, truecrypt-3.0, tsm, ttf2pt1, ubiquiti, unRAR, unafold, urbanterror-4.2-maps, ut2003, ut2003-demo, vim.org, vlgothic, vmd, w3m, wm2, worklog-assistant, worldofpadman, wxWinFDL-3, wxWinLL-3, wxWinLL-3.1, xbatt, xbattle, xboing, xearth, xgraph, xmlformat, xref.lisp, xrick, xtrs, xv, zi-labone

• net-dns/bind: [PROD] [DEV]

  • still at 9.18.37-r1
  • package became stable on 'arm64'
    • dropped accept keywords from overlay profiles

• net-misc/curl: [PROD] [DEV]

  • from 8.13.0-r1 to 8.14.1
  • unstable on arm64, so added accept keywords in overlay profiles
  • dropped a bunch of already-upstreamed patches
  • release notes: https://curl.se/ch/8.14.1.html https://curl.se/ch/8.14.0.html

• profiles:

  • nothing interesting

• sys-apps/gawk: [PROD] [DEV]

  • still at 5.3.2
  • IUSE flag 'mpfr' became enabled by default

• sys-apps/util-linux: [PROD] [DEV]

  • from 2.41.1 to 2.41.1-r1
  • added a workaround for gcc 15

• sys-devel/binutils: [DEV]

  • from 2.44-r3 to 2.44-r4
  • dropped backported patches for LTO stripping
    • had issues, will be fixed in 2.45

• sys-firmware/edk2-bin:

  • still at 202411
  • licenses:
    • dropped license 'BSD-2'
    • added license 'BSD-2-with-patent'

• sys-libs/gdbm: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • still at 1.25
  • licenses:
    • dropped license 'GPL-3'
    • added license 'FDL-1.3+'
    • added license 'GPL-2+'
    • added license 'GPL-3+'

• sys-libs/glibc: [PROD] [DEV]

  • still at 2.41-r4
  • added support for sys-apps/locale-gen >=3

• sys-process/lsof: [PROD] [DEV]

  • still at 4.99.4
  • regenerate build system to make sure that elibtoolize is applied
  • build dependencies:
    • added a dependency '>=app-portage/elt-patches-20250306'

• virtual/resolvconf: [PROD] [DEV]

  • from 1 to 2
  • EAPI changed from '7' to '8'
  • added IUSE flag 'systemd'
    • prefer systemd for providing resolvconf
  • runtime dependencies:
    • added a dependency '>=sys-apps/systemd-239-r1[resolvconf]' for USE 'systemd?'
    • changes for net-dns/openresolv with USE conditionals '||':
      • USE conditionals changed to '!systemd?'
    • dropped a dependency '>=sys-apps/systemd-239-r1[resolvconf]' for USE '||'

• x11-drivers/nvidia-drivers: [SYSEXT-NVIDIA-DRIVERS-535] [SYSEXT-NVIDIA-DRIVERS-535-OPEN]

  • from 535.247.01-r1 to 535.261.03
  • fixes CVE-2025-23277, CVE-2025-23278, CVE-2025-23279, CVE-2025-23286
    • update: nvidia-drivers Flatcar#1839
  • bumped max supported version of kernel from 6.15 to 6.16
  • release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-261-03/index.html

• x11-drivers/nvidia-drivers: [SYSEXT-NVIDIA-DRIVERS-570] [SYSEXT-NVIDIA-DRIVERS-570-OPEN]

  • from 570.169 to 570.172.08
  • fixes CVE-2025-23277, CVE-2025-23278, CVE-2025-23279, CVE-2025-23286
    • update: nvidia-drivers Flatcar#1839
  • bumped max supported version of kernel from 6.15 to 6.16
  • release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-172-08/index.html

• (AMD64) x11-drivers/nvidia-drivers-service: [PROD] [DEV]

  • from 535.247.01 to 535.261.03
  • fixes CVE-2025-23277, CVE-2025-23278, CVE-2025-23279, CVE-2025-23286
    • update: nvidia-drivers Flatcar#1839
  • release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-261-03/index.html

• (ARM64) x11-drivers/nvidia-drivers-service: [PROD] [DEV]

  • from 570.153.02 to 570.172.08
  • fixes CVE-2025-23277, CVE-2025-23278, CVE-2025-23279, CVE-2025-23286
    • update: nvidia-drivers Flatcar#1839
  • release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-172-08/index.html

--

• changelog
• image diff