Weekly portage-stable package updates 2025-10-13 #3366

github-actions · 2025-10-13T07:13:14Z

CI: http://localhost:8080/job/container/job/sdk/2306/cldsv/

Fixes flatcar/Flatcar#1745
Fixes flatcar/Flatcar#1889
Fixes flatcar/Flatcar#1903
Fixes flatcar/Flatcar#1910
Fixes flatcar/Flatcar#1914

--

app-containers/crun: [SYSEXT-PODMAN]
- from 1.20 to 1.21
- release notes: https://github.com/containers/crun/releases/tag/1.21
app-containers/netavark: [SYSEXT-PODMAN]
- from 1.14.1 to 1.15.2
- release notes: https://github.com/containers/netavark/releases/tag/v1.15.2 https://github.com/containers/netavark/releases/tag/v1.15.1 https://github.com/containers/netavark/releases/tag/v1.15.0
app-crypt/azure-keyvault-pkcs11:
- still at 0_p20250526
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
app-emulation/qemu:
- from 9.2.3-r3 to 10.0.5
- package became unstable on 'arm64'
  - added accept keywords to overlay profiles
- bumped a bunch of firmware dependencies - does not mean much since we do not pin the versions
- dependencies:
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_i386?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~202202 to ~202408
  - changes for sys-firmware/ipxe with USE conditionals 'qemu_softmmu_targets_i386?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~1.21.1 to ~1.21.1_p20230601
  - changes for sys-firmware/edk2 with USE conditionals 'qemu_softmmu_targets_i386?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_i386?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_x86_64?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~202202 to ~202408
  - changes for sys-firmware/ipxe with USE conditionals 'qemu_softmmu_targets_x86_64?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~1.21.1 to ~1.21.1_p20230601
  - changes for sys-firmware/edk2 with USE conditionals 'qemu_softmmu_targets_x86_64?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_x86_64?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
- runtime dependencies:
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_i386?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~202202 to ~202408
  - changes for sys-firmware/ipxe with USE conditionals 'qemu_softmmu_targets_i386?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~1.21.1 to ~1.21.1_p20230601
  - changes for sys-firmware/edk2 with USE conditionals 'qemu_softmmu_targets_i386?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_i386?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_x86_64?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~202202 to ~202408
  - changes for sys-firmware/ipxe with USE conditionals 'qemu_softmmu_targets_x86_64?' -> 'pin-upstream-blobs?':
    - changed version constraint from ~1.21.1 to ~1.21.1_p20230601
  - changes for sys-firmware/edk2 with USE conditionals 'qemu_softmmu_targets_x86_64?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
  - changes for sys-firmware/edk2-bin with USE conditionals 'qemu_softmmu_targets_x86_64?' -> '!pin-upstream-blobs?' -> '||':
    - changed version constraint from >=202202 to >=202408
- release notes: https://wiki.qemu.org/ChangeLog/10.0
dev-build/autoconf:
- from 2.72-r3 to 2.72-r4
- keep empty info directory under /usr/share
dev-build/automake:
- still at 1.18.1
- keep empty info directory under /usr/share
dev-build/cmake:
- from 3.31.7-r1 to 3.31.9-r1
- dependencies:
  - changes for dev-libs/libuv:
    - changed version constraint from >=1.10.0 to >=1.51.0-r1
- runtime dependencies:
  - changes for dev-libs/libuv:
    - changed version constraint from >=1.10.0 to >=1.51.0-r1
- release notes: https://cmake.org/cmake/help/v3.31/release/3.31.html#id1
dev-build/make: [DEV]
- from 4.4.1-r100 to 4.4.1-r101
- fixed C23 compat (w/ musl)
dev-cpp/azure-core:
- still at 1.16.1
- package became stable on 'amd64'
  - nothing to do with keywords - we use unversioned accept keywords entry to always pull the latest one
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-cpp/azure-identity:
- from 1.13.1 to 1.13.2
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
- release notes: https://github.com/Azure/azure-sdk-for-cpp/releases/tag/azure-identity_1.13.2
dev-cpp/azure-security-keyvault-certificates:
- still at 4.2.1
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-cpp/azure-security-keyvault-keys:
- still at 4.4.1
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-cpp/gflags: [PROD] [DEV]
- still at 2.2.2-r1
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-cpp/glog: [PROD] [DEV]
- still at 0.6.0-r1
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-cpp/gtest:
- still at 1.14.0-r2
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-lang/go:
- from 1.24.7 to 1.25.1
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
- release notes: https://go.dev/doc/devel/release#go1.25.minor https://go.dev/doc/go1.25
dev-lang/perl:
- still at 5.40.2
- nothing relevant for Flatcar, but amusing to see that it added a patch that contains a patch patching a patch
dev-libs/cJSON: [DEV]
- still at 1.7.18
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-libs/expat: [PROD] [DEV]
- from 2.7.2 to 2.7.3
- finishes a fix for CVE-2025-59375
  - update: expat Flatcar#1889
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
- release notes: https://raw.githubusercontent.com/libexpat/libexpat/refs/tags/R_2_7_3/expat/Changes
dev-libs/glib: [PROD] [DEV]
- still at 2.84.4
- dependencies:
  - dropped a weak blocker '!<dev-libs/gobject-introspection-1.80.1'
- runtime dependencies:
  - dropped a weak blocker '!<dev-libs/gobject-introspection-1.80.1'
dev-libs/json-c: [PROD] [DEV]
- still at 0.18
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-libs/libaio: [PROD] [DEV]
- from 0.3.113-r1 to 0.3.113-r2
- added a patch with fixes for x32 ABI
dev-libs/libgcrypt: [PROD] [DEV]
- still at 1.11.2
- set GPGRT_CONFIG for cross compilation
dev-libs/libksba: [PROD] [DEV]
- still at 1.6.7
- set GPGRT_CONFIG for cross compilation
dev-libs/libpcre2: [PROD] [DEV]
- still at 10.46
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
dev-libs/libuv: [PROD] [DEV]
- from 1.51.0 to 1.51.0-r1
- added a patch with some workaround for ppc32
dev-libs/libxml2: [PROD] [DEV]
- from 2.13.9 to 2.14.6
- switched from autotools to meson
- removed IUSE flag 'lzma'
  - support for LZMA compression is deprecated and will be removed in later release
- removed IUSE flag 'examples'
  - no installation of examples
- build dependencies:
  - added a dependency 'app-alternatives/ninja'
  - dropped a dependency '>=app-portage/elt-patches-20250306'
  - dropped a dependency '>=dev-build/libtool-2.4.7-r3'
  - dropped a dependency 'sys-devel/gnuconfig'
  - added a dependency '>=dev-build/meson-1.2.3'
  - added a dependency 'dev-build/meson-format-array'
  - dropped a dependency '>=dev-build/automake-1.18:1.18' for USE '||'
  - dropped a dependency '>=dev-build/automake-1.17-r1:1.17' for USE '||'
  - dropped a dependency '>=dev-build/autoconf-2.72-r1:2.72' for USE '||'
- dependencies:
  - dropped a dependency '>=app-arch/xz-utils-5.0.5-r1:=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'lzma?'
- runtime dependencies:
  - dropped a dependency '>=app-arch/xz-utils-5.0.5-r1:=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'lzma?'
- release notes: https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.6 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.4 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.3 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.2 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.1 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.0
dev-libs/openssl: [PROD] [DEV]
- from 3.4.2 to 3.4.3
- fixed CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
  - update: dev-libs/openssl Flatcar#1903
- release notes: https://github.com/openssl/openssl/releases/tag/openssl-3.4.3
dev-libs/protobuf: [PROD] [DEV]
- still at 21.12
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-libs/tree-sitter-bash:
- from 0.23.3 to 0.25.0
- release notes: https://github.com/tree-sitter/tree-sitter-bash/commits/v0.25.0/
dev-libs/yajl: [SYSEXT-PODMAN]
- from 2.1.0-r5 to 2.1.0-r6
- added a patch fixing compat w/ CMake 4
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-perl/File-Slurper:
- new, at 0.14.0
- dependency of sys-apps/locale-gen
dev-perl/PerlIO-utf8_strict:
- new, at 0.10.0
- dependency of dev-perl/File-Slurper
dev-python/docutils:
- from 0.22 to 0.22.2
- release notes: https://docutils.sourceforge.io/HISTORY.html#release-0-22-2-2025-09-20
dev-python/lazy-object-proxy:
- from 1.11.0 to 1.12.0
- release notes: https://raw.githubusercontent.com/ionelmc/python-lazy-object-proxy/refs/tags/v1.12.0/CHANGELOG.rst
dev-python/lxml:
- from 6.0.0 to 6.0.1
- release notes: https://raw.githubusercontent.com/lxml/lxml/refs/tags/lxml-6.0.1/CHANGES.txt
dev-python/platformdirs: [SYSEXT-PYTHON]
- from 4.3.8 to 4.4.0
- release notes: https://github.com/tox-dev/platformdirs/releases/tag/4.4.0
dev-python/typing-extensions: [SYSEXT-PYTHON]
- from 4.14.1 to 4.15.0
- release notes: https://raw.githubusercontent.com/python/typing_extensions/refs/tags/4.15.0/CHANGELOG.md
dev-util/bpftool: [PROD] [DEV]
- from 7.5.0-r1 to 7.6.0
- release notes: https://github.com/libbpf/bpftool/releases/tag/v7.6.0
dev-util/maturin:
- from 1.9.3 to 1.9.4
- release notes: https://raw.githubusercontent.com/PyO3/maturin/refs/tags/v1.9.4/Changelog.md
dev-util/pahole: [DEV]
- still at 1.30
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
dev-vcs/git: [PROD] [DEV]
- from 2.49.1 to 2.51.0
- removed IUSE flag 'mediawiki'
  - support for mediawiki stuff was dropped
- runtime dependencies:
  - dropped a dependency 'dev-perl/DateTime-Format-ISO8601' for USE 'perl?' -> 'mediawiki?'
  - dropped a dependency 'dev-perl/HTML-Tree' for USE 'perl?' -> 'mediawiki?'
  - dropped a dependency 'dev-perl/MediaWiki-API' for USE 'perl?' -> 'mediawiki?'
- release notes: https://github.com/git/git/blob/v2.51.0/Documentation/RelNotes/2.51.0.adoc https://github.com/git/git/blob/v2.50.0/Documentation/RelNotes/2.50.0.adoc
eclass/cmake.eclass:
- bumped dev-build/cmake version to 3.28.5
- added cmake_prepare for EAPI >=8
eclass/java-utils-2.eclass:
- re-enabled PORTAGE_QUIET
eclass/python-utils-r1.eclass:
- use 6 'X's for mktemp
eclass/rust.eclass:
- added more rust versions
eclass/toolchain-funcs.eclass:
- fix tc-check-min_ver example
eclass/toolchain.eclass:
- fix paths for pax-mark
- stop building JIT separately
net-dns/bind: [PROD] [DEV]
- from 9.18.37-r1 to 9.18.38
- release notes: https://bind9.readthedocs.io/en/v9.18.38/notes.html#notes-for-bind-9-18-38
net-firewall/nftables: [PROD] [DEV]
- from 1.1.4 to 1.1.5
- release notes: https://www.netfilter.org/projects/nftables/files/changes-nftables-1.1.5.txt
net-misc/chrony: [AZURE] [STACKIT]
- from 4.7 to 4.8
- release notes: https://gitlab.com/chrony/chrony/-/raw/4.8/NEWS
net-misc/curl: [PROD] [DEV]
- still at 8.16.0-r1
- package became stable on 'amd64'
  - updated accept keywords in overlay profiles
net-misc/openssh: [PROD] [DEV]
- from 10.0_p1 to 10.2_p1
- fixes CVE-2025-61984, CVE-2025-61985
  - update: openssh Flatcar#1910
- package became unstable on 'amd64' and 'arm64'
  - added accept keywords to overlay profiles
- removed IUSE flag 'pie'
  - enabled by default in the toolchain
- removed IUSE flag 'xmss'
  - support for XMSS was experimental and it's gone
- release notes: https://www.openssh.com/txt/release-10.2 https://www.openssh.com/txt/release-10.1
net-misc/passt: [SYSEXT-PODMAN]
- from 2025.04.15 to 2025.06.11
- release notes: https://archives.passt.top/passt-user/20250611175947.7d540ddc@elisabeth/T/#u
profiles:
- masked glib, codegen and utils >=2.86.0 and gobject introspection >=1.86.0
- masked linux-firmware-20251011
- masked gettext >=0.24
- dropped a mask on app-crypt/gnupg >=2.5
sys-apps/azure-vm-utils: [PROD] [DEV]
- still at 0.7.0
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
sys-apps/gawk: [PROD] [DEV]
- still at 5.3.2
- licenses:
  - added license 'AGPL-3+' for USE 'pma?'
sys-apps/locale-gen:
- from 2.23-r1 to 3.8
- replaces bash-based utility with perl-based one
- build dependencies:
  - added a dependency '>=dev-lang/perl-5.36'
  - added a dependency 'dev-perl/File-Slurper'
- runtime dependencies:
  - dropped a dependency 'app-alternatives/awk'
  - dropped a dependency 'app-alternatives/gzip'
  - dropped a dependency 'sys-apps/gentoo-functions'
  - dropped a dependency 'sys-apps/grep'
  - added a dependency '>=dev-lang/perl-5.36'
- licenses:
  - dropped license 'GPL-2+'
  - added license 'GPL-2'
- release notes: https://gitweb.gentoo.org/proj/locale-gen.git/log/?h=locale-gen-3.8 https://gitweb.gentoo.org/proj/locale-gen.git/commit/?id=1baa3626b0bfa269b8c195caddb4629195c89371
sys-apps/shadow: [PROD] [DEV]
- still at 4.14.8
- install suid binaries as 4755
sys-auth/polkit: [PROD] [DEV]
- still at 126-r2
- added a patch fixing some CI failures
sys-auth/sssd: [PROD] [DEV]
- still at 2.9.7
- added a patch to support kerberos 1.22
sys-devel/gcc: [PROD] [DEV]
- still at 14.3.1_p20250801
- bumped musl patch
sys-devel/gettext: [PROD] [DEV]
- from 0.22.5-r2 to 0.23.2
- runtime dependencies:
  - added a dependency 'app-i18n/gnulib-l10n' for USE 'nls?'
- release notes: https://gitweb.git.savannah.gnu.org/gitweb/?p=gettext.git;a=blob_plain;f=NEWS;h=a5cc8a63eb4f06e4a1171afda862812feb67d693;hb=e8e6cb71aec0de1f5758ac21327bb8cd69e33731 https://gitweb.git.savannah.gnu.org/gitweb/?p=gettext.git;a=blob_plain;f=NEWS;h=4aafedf9b10a66891838e1f35c7af020c6124ee0;hb=d9b0432a825bfe3fc72f9a081d295a9528cd8aac https://gitweb.git.savannah.gnu.org/gitweb/?p=gettext.git;a=blob_plain;f=NEWS;h=9d87d45408f510d15856a1dda8a9376573f0a9c5;hb=c12b25dc82104691ca80c4da1cbc538fcab42bf5
sys-firmware/intel-microcode: [PROD] [DEV]
- from 20250211_p20250211 to 20250812_p20250813
- fixes CVE-2024-28956, CVE-2024-43420, CVE-2024-45332, CVE-2025-20012, CVE-2025-20054, CVE-2025-20103, CVE-2025-20623, CVE-2025-24495, CVE-2025-20053, CVE-2025-20109, CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
  - fixes update: intel-microcode Flatcar#1745
- release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250812 https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250512
sys-fs/btrfs-progs: [PROD] [DEV]
- from 6.16 to 6.16.1
- release notes: https://github.com/kdave/btrfs-progs/releases/tag/v6.16.1
sys-fs/inotify-tools: [AZURE] [DEV]
- from 4.23.9.0 to 4.25.9.0
- release notes: https://github.com/inotify-tools/inotify-tools/releases/tag/4.25.9.0
sys-fs/lxcfs: [SYSEXT-INCUS]
- still at 6.0.4
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
sys-fs/overlaybd: [SYSEXT-OVERLAYBD]
- still at 1.0.15
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
sys-fs/xfsprogs: [PROD] [DEV]
- from 6.14.0 to 6.16.0
- release notes: https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.16.0 https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.15.0
sys-kernel/linux-headers: [PROD] [DEV]
- still at 6.12
- build dependencies:
  - added a dependency 'net-misc/rsync'
sys-libs/libunwind: [PROD] [DEV]
- from 1.8.2 to 1.8.2-r1
- added a patch with fixes for x32 ABI
sys-libs/ncurses: [PROD] [DEV]
- still at 6.5_p20250802
- fixed cross-compilation without tic
sys-process/tini: [SYSEXT-DOCKER]
- still at 0.19.0-r2
- build dependencies:
  - changes for dev-build/cmake:
    - changed version constraint from >=3.20.5 to >=3.28.5
virtual/openssh: [DEV]
- from 0 to 0-r1
- runtime dependencies:
  - added a dependency '>=net-misc/pkixssh-14.1.1' for USE '||'
virtual/perl-Carp:
- new, at 1.540.0-r2
- dependency of dev-perl/File-Slurper and dev-perl/PerlIO-utf8_strict
virtual/perl-Encode:
- new, at 3.210.0-r2
- dependency of dev-perl/File-Slurper
virtual/perl-Exporter:
- new, at 5.780.0
- dependency of dev-perl/File-Slurper and dev-perl/PerlIO-utf8_strict
virtual/perl-XSLoader:
- new, at 0.320.0-r2
- dependency of dev-perl/PerlIO-utf8_strict
x11-drivers/nvidia-drivers: [SYSEXT-NVIDIA-DRIVERS-535] [SYSEXT-NVIDIA-DRIVERS-535-OPEN]
- from 535.261.03 to 535.274.02
- fixes CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, CVE-2025-23330, CVE-2025-23332, CVE-2025-23345
  - update: nvidia-drivers Flatcar#1914
- release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-274-02/index.html
x11-drivers/nvidia-drivers: [SYSEXT-NVIDIA-DRIVERS-570] [SYSEXT-NVIDIA-DRIVERS-570-OPEN]
- from 570.190 to 570.195.03
- fixes CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, CVE-2025-23330, CVE-2025-23332, CVE-2025-23345
  - update: nvidia-drivers Flatcar#1914
- runtime dependencies:
  - dropped a dependency '>=gui-libs/egl-wayland-1.1.13.1[abi_x86_32(-)?]' for USE 'wayland?'
  - added a dependency '>=gui-libs/egl-wayland-1.1.13.1[abi_x86_32(-)?]' for USE 'wayland?' -> '||'
  - added a dependency 'gui-libs/egl-wayland2[abi_x86_32(-)?]' for USE 'wayland?' -> '||'
- release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-195-03/index.html
(AMD64) x11-drivers/nvidia-drivers-service: [PROD] [DEV]
- from 535.261.03 to 535.274.02
- fixes CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, CVE-2025-23330, CVE-2025-23332, CVE-2025-23345
  - update: nvidia-drivers Flatcar#1914
- release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-274-02/index.html
(ARM64) x11-drivers/nvidia-drivers-service: [PROD] [DEV]
- from 570.181 to 570.195.03
- fixes CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, CVE-2025-23330, CVE-2025-23332, CVE-2025-23345
  - update: nvidia-drivers Flatcar#1914
- release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-195-03/index.html

--

changelog
image diff

It's from Gentoo commit 107cc22593c97542852ee68c564554c2fbfcdf20. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 8c4d9b040ae6ee8d72568713a09d0911b0b5b5f9. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 6ea403c6c831ce751d0b25dfd96342d9ab1ce0c5. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 378caec85be6b4259cbdde377f958c322660e813. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 74827602eba102df803b6148df515c37f4156199. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit d3fa4eec814229c508c111cfa3c60c3d6d36b639. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit efb086fea8ee07a76391dd564c59d5b25251880f. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 7a344fb5bd0548f3d7a7b4efeae517af30ff6472. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit b0bf6bfb38512eaeccce1aed24ee3c80a2e911b0. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit fbb9753dc38170531381e866c30f0c689aefa708. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit dd158e52ae7c50937423ae31392e3f7cd776d6da. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 7add6e2519c5f9c8922ea9e1a010ac334b0ce179. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 275e10ed70b01ca2cad80f3e413a3eecb9aced3f. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit c96aa5d205ed4a8d88b5e3c7c6dc75543652decb. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit c12141357a04a4e7773a4ebd525f6466c0f5af8b. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit efd5f3c2c377f2915299200498fe427dc7ceda64. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 3dab132e84ed2d3b685c6dd1b906b899855017e0. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 6c336968af04fdba549c03f3ddbb1edb95cf8c5e. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 5d17bc19e54033d965e85a69fc182fc50e1a9dc1. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 1a145059c50b78861e77f36c913ce61d9f3dbeea. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit f2733b715ba3d6ca9a44c288f318327fc470b0ab. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 22c5b54021a5a28224d79c899fbd4e529b383de8. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit f62944e5c07133a2d7aec1fc8027936e7a1b5e18. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 6a671b0ea54d6c6ebda1b678f7b91e5669c6cf79. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit dbd81cfc9aefba0facf1ce851e7d71f9997455d5. Signed-off-by: Flatcar Buildbot <[email protected]>

It's from Gentoo commit 0ad96e879b651cc7e8214159d5841d6b633bef8a. Signed-off-by: Krzesimir Nowak <[email protected]>

There should be now enough space in initrd. Signed-off-by: Krzesimir Nowak <[email protected]>

Signed-off-by: Krzesimir Nowak <[email protected]>

krnowak · 2025-10-24T08:42:51Z

CI partially passed:

arm64 tests - cl.basic/Microcode failed, already fixed in mantle, not related to weekly updates
cl.update.oem failed - Processing passed XML for payload download is broken ue-rs#92, unrelated to weekly updates

github-actions · 2025-10-24T08:43:06Z

Build action triggered: https://github.com/flatcar/scripts/actions/runs/18847028484

Signed-off-by: Krzesimir Nowak <[email protected]>

krnowak · 2025-10-27T15:45:25Z

Did a forced push to add sign-off to the last commit.

github-actions bot added the main label Oct 13, 2025

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-10-13 branch from 16e17f4 to e793284 Compare October 14, 2025 12:07

krnowak had a problem deploying to development October 14, 2025 12:07 — with GitHub Actions Error

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-10-13 branch from e793284 to 2016d8b Compare October 15, 2025 11:20

krnowak had a problem deploying to development October 15, 2025 11:20 — with GitHub Actions Error

Flatcar Buildbot added 25 commits October 20, 2025 16:25

app-containers/containerd: Sync with Gentoo

3034728

It's from Gentoo commit 107cc22593c97542852ee68c564554c2fbfcdf20. Signed-off-by: Flatcar Buildbot <[email protected]>

app-containers/crun: Sync with Gentoo

a63598a

It's from Gentoo commit 8c4d9b040ae6ee8d72568713a09d0911b0b5b5f9. Signed-off-by: Flatcar Buildbot <[email protected]>

app-containers/docker: Sync with Gentoo

d74be73

It's from Gentoo commit 6ea403c6c831ce751d0b25dfd96342d9ab1ce0c5. Signed-off-by: Flatcar Buildbot <[email protected]>

app-containers/docker-cli: Sync with Gentoo

089a27a

It's from Gentoo commit 378caec85be6b4259cbdde377f958c322660e813. Signed-off-by: Flatcar Buildbot <[email protected]>

app-containers/incus: Sync with Gentoo

f4af4cd

It's from Gentoo commit 74827602eba102df803b6148df515c37f4156199. Signed-off-by: Flatcar Buildbot <[email protected]>

app-containers/netavark: Sync with Gentoo

3a782d1

It's from Gentoo commit d3fa4eec814229c508c111cfa3c60c3d6d36b639. Signed-off-by: Flatcar Buildbot <[email protected]>

app-containers/runc: Sync with Gentoo

3b66e1a

It's from Gentoo commit efb086fea8ee07a76391dd564c59d5b25251880f. Signed-off-by: Flatcar Buildbot <[email protected]>

app-crypt/gnupg: Sync with Gentoo

ace8bae

It's from Gentoo commit 7a344fb5bd0548f3d7a7b4efeae517af30ff6472. Signed-off-by: Flatcar Buildbot <[email protected]>

app-crypt/gpgme: Sync with Gentoo

9308d85

It's from Gentoo commit b0bf6bfb38512eaeccce1aed24ee3c80a2e911b0. Signed-off-by: Flatcar Buildbot <[email protected]>

app-crypt/p11-kit: Sync with Gentoo

5024dbf

It's from Gentoo commit fbb9753dc38170531381e866c30f0c689aefa708. Signed-off-by: Flatcar Buildbot <[email protected]>

app-editors/nano: Sync with Gentoo

dd34c0e

It's from Gentoo commit dd158e52ae7c50937423ae31392e3f7cd776d6da. Signed-off-by: Flatcar Buildbot <[email protected]>

app-emulation/qemu: Sync with Gentoo

fab1db4

It's from Gentoo commit 7add6e2519c5f9c8922ea9e1a010ac334b0ce179. Signed-off-by: Flatcar Buildbot <[email protected]>

app-portage/gentoolkit: Sync with Gentoo

f262f42

It's from Gentoo commit 275e10ed70b01ca2cad80f3e413a3eecb9aced3f. Signed-off-by: Flatcar Buildbot <[email protected]>

app-portage/getuto: Sync with Gentoo

a0f248c

It's from Gentoo commit c96aa5d205ed4a8d88b5e3c7c6dc75543652decb. Signed-off-by: Flatcar Buildbot <[email protected]>

app-shells/bash: Sync with Gentoo

6fa2ee9

It's from Gentoo commit c12141357a04a4e7773a4ebd525f6466c0f5af8b. Signed-off-by: Flatcar Buildbot <[email protected]>

app-shells/bash-completion: Sync with Gentoo

8fb334c

It's from Gentoo commit efd5f3c2c377f2915299200498fe427dc7ceda64. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-build/autoconf: Sync with Gentoo

d0d1254

It's from Gentoo commit 3dab132e84ed2d3b685c6dd1b906b899855017e0. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-build/automake: Sync with Gentoo

b629ba2

It's from Gentoo commit 6c336968af04fdba549c03f3ddbb1edb95cf8c5e. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-build/cmake: Sync with Gentoo

0bfd2a7

It's from Gentoo commit 5d17bc19e54033d965e85a69fc182fc50e1a9dc1. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-build/make: Sync with Gentoo

96088b0

It's from Gentoo commit 1a145059c50b78861e77f36c913ce61d9f3dbeea. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-build/meson: Sync with Gentoo

414a788

It's from Gentoo commit f2733b715ba3d6ca9a44c288f318327fc470b0ab. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-cpp/azure-core: Sync with Gentoo

15fd4aa

It's from Gentoo commit 22c5b54021a5a28224d79c899fbd4e529b383de8. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-cpp/azure-identity: Sync with Gentoo

f67bd4c

It's from Gentoo commit f62944e5c07133a2d7aec1fc8027936e7a1b5e18. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-db/sqlite: Sync with Gentoo

3d2d879

It's from Gentoo commit 6a671b0ea54d6c6ebda1b678f7b91e5669c6cf79. Signed-off-by: Flatcar Buildbot <[email protected]>

dev-debug/gdb: Sync with Gentoo

d60949c

It's from Gentoo commit dbd81cfc9aefba0facf1ce851e7d71f9997455d5. Signed-off-by: Flatcar Buildbot <[email protected]>

krnowak added 13 commits October 20, 2025 16:25

dev-perl/PerlIO-utf8_strict: Add from Gentoo

014157b

It's from Gentoo commit 0ad96e879b651cc7e8214159d5841d6b633bef8a. Signed-off-by: Krzesimir Nowak <[email protected]>

virtual/perl-Carp: Add from Gentoo

37c5023

It's from Gentoo commit 0ad96e879b651cc7e8214159d5841d6b633bef8a. Signed-off-by: Krzesimir Nowak <[email protected]>

virtual/perl-Exporter: Add from Gentoo

095c402

It's from Gentoo commit 0ad96e879b651cc7e8214159d5841d6b633bef8a. Signed-off-by: Krzesimir Nowak <[email protected]>

virtual/perl-XSLoader: Add from Gentoo

ea56751

It's from Gentoo commit 0ad96e879b651cc7e8214159d5841d6b633bef8a. Signed-off-by: Krzesimir Nowak <[email protected]>

overlay profiles: Drop sys-firmware/intel-microcode mask

685d720

There should be now enough space in initrd. Signed-off-by: Krzesimir Nowak <[email protected]>

overlay profiles: Add accept keywords for net-misc/openssh

08c66b4

Signed-off-by: Krzesimir Nowak <[email protected]>

overlay profiles: Add accept keywords for app-emulation/qemu

a7ad334

Signed-off-by: Krzesimir Nowak <[email protected]>

overlay profiles: Drop accept keywords for dev-lang/go

3a9291c

Signed-off-by: Krzesimir Nowak <[email protected]>

overlay profiles: Drop accept keywords for dev-libs/expat

9e73550

Signed-off-by: Krzesimir Nowak <[email protected]>

overlay profiles: Drop accept keywords for dev-libs/libpcre2

91decd8

Signed-off-by: Krzesimir Nowak <[email protected]>

overlay profiles: Update accept keywords for net-misc/curl

859f5ce

Signed-off-by: Krzesimir Nowak <[email protected]>

overlay x11-drivers/nvidia-drivers-service: Bump the versions

82a4a3c

Signed-off-by: Krzesimir Nowak <[email protected]>

changelog: Add entries

d140629

Signed-off-by: Krzesimir Nowak <[email protected]>

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-10-13 branch from 2016d8b to 47ed3d3 Compare October 20, 2025 14:26

krnowak had a problem deploying to development October 20, 2025 14:26 — with GitHub Actions Error

github-actions bot mentioned this pull request Oct 22, 2025

Monthly contributions report 2025-09-22 - 2025-10-21 flatcar/Flatcar#1927

Open

krnowak marked this pull request as ready for review October 24, 2025 08:40

krnowak requested a review from a team as a code owner October 24, 2025 08:40

krnowak added this to Flatcar tactical, release planning, and roadmap Oct 24, 2025

krnowak moved this to ✅ Testing / in Review in Flatcar tactical, release planning, and roadmap Oct 24, 2025

chewi approved these changes Oct 27, 2025

View reviewed changes

overlay coreos/user-patches: Add patches for dev-util/catalyst

c04d694

Signed-off-by: Krzesimir Nowak <[email protected]>

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-10-13 branch from 47ed3d3 to c04d694 Compare October 27, 2025 15:44

krnowak merged commit 541bab1 into main Oct 27, 2025
1 of 4 checks passed

krnowak deleted the buildbot/weekly-portage-stable-package-updates-2025-10-13 branch October 27, 2025 15:45

github-project-automation bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Oct 27, 2025

krnowak requested a deployment to development October 27, 2025 15:46 — with GitHub Actions Waiting

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Weekly portage-stable package updates 2025-10-13 #3366

Weekly portage-stable package updates 2025-10-13 #3366

Uh oh!

github-actions bot commented Oct 13, 2025 •

edited by krnowak

Loading

Uh oh!

krnowak commented Oct 24, 2025

Uh oh!

github-actions bot commented Oct 24, 2025 •

edited

Loading

Uh oh!

Uh oh!

krnowak commented Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Weekly portage-stable package updates 2025-10-13 #3366

Weekly portage-stable package updates 2025-10-13 #3366

Uh oh!

Conversation

github-actions bot commented Oct 13, 2025 • edited by krnowak Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

krnowak commented Oct 24, 2025

Uh oh!

github-actions bot commented Oct 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

krnowak commented Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions bot commented Oct 13, 2025 •

edited by krnowak

Loading

github-actions bot commented Oct 24, 2025 •

edited

Loading