Weekly portage-stable package updates 2026-07-20

sdk_container/src/third_party/portage-stable/acct-user/nobody/nobody-0-r2.ebuild

@@ -1,4 +1,4 @@
-# Copyright 2020-2024 Gentoo Authors
+# Copyright 2020-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -13,5 +13,3 @@ ACCT_USER_HOME_PERMS=0755
 ACCT_USER_GROUPS=( nobody )
 
 acct-user_add_deps
-
-RDEPEND+=" acct-user/root"

sdk_container/src/third_party/portage-stable/app-admin/eselect/Manifest

@@ -1,3 +1 @@
-DIST eselect-1.4.30.tar.xz 186060 BLAKE2B f58c2bdacfcb933aef2414e65866a4be33d02ddc42005770fd4f3200a7aa0437d31301ac35991309d51f2e95e8be2eafa0590600281801c6c63db08b3451b9ef SHA512 89ff9af40849e5d712716c35705e21bfc5d073536da8750566368d519d1b7de823575ffe730faabab4170ca773df31e7bb9d633d8e48361704102987c5d3e681
-DIST eselect-1.4.31.tar.xz 186520 BLAKE2B f40851ffea69c0d8b0142b49669e1112fc34384b0c8f1f6ce8aebbfd48fb6a6f8239e8682d7fe8b49c9d27cc9f7cee4b7c781baef7780e347df90f7cd4b5131e SHA512 ffcd6cdb5aef51b2949893abfc3af356d3011e256671eaae588e3fe6ff41f7bf74167dccef8c794422704097c3351f5c457009b051bbc8f008b2d2f250fa9c1b
 DIST eselect-1.4.32.tar.xz 189020 BLAKE2B 18cf181f23f0a6cd95ca78fd1c5e039ca2222101b12957e640afb25f34033777e0554421613699b08b9f985a45ee803b16c202e2c2a3a0f55b741cdf5e5d8836 SHA512 facc2c75508175123ed4f4f8f79c157e0f8ce797f3bb98f4978379d6b75c5d502ab5a97497f5d7a8a1f21adc9f580bf59245502a4b3058eb7a25a03caca7c8f9

sdk_container/src/third_party/portage-stable/app-admin/eselect/eselect-1.4.32.ebuild

@@ -16,7 +16,7 @@ SRC_URI="https://dev.gentoo.org/~ulm/eselect/${P}.tar.xz"
 
 LICENSE="GPL-2+ || ( GPL-2+ CC-BY-SA-4.0 )"
 SLOT="0"
-KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~arm64-macos ~x64-macos ~x64-solaris"
+KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86 ~arm64-macos ~x64-macos ~x64-solaris"
 IUSE="doc emacs vim-syntax"
 
 # coreutils for realpath

sdk_container/src/third_party/portage-stable/app-admin/logrotate/files/logrotate-3.22.0-tests-locale.patch

@@ -0,0 +1,28 @@
+https://bugs.gentoo.org/934983
+https://github.com/logrotate/logrotate/commit/04b21743980c4e236ca5e8de18173fbd3848573b
+
+From 04b21743980c4e236ca5e8de18173fbd3848573b Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <cgzones@googlemail.com>
+Date: Sat, 8 Jun 2024 17:59:40 +0200
+Subject: [PATCH] test: avoid locale dependent errno string
+
+String representations of errno values are locale dependent, thus avoid
+using them.
+---
+ test/test-0112.sh | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/test/test-0112.sh b/test/test-0112.sh
+index 812632b1..fa9eed65 100755
+--- a/test/test-0112.sh
++++ b/test/test-0112.sh
+@@ -23,7 +23,7 @@ test_reg.log.1.gz 1 zero
+ test_reg.log.2.gz 1 first
+ EOF
+
+-grep "test_fifo.log.1 (read-only) for compression: Operation not supported" error.log >/dev/null
++grep "^error: unable to open .*/test_fifo\.log\.1 (read-only) for compression: " error.log >/dev/null
+ if [ $? != 0 ]; then
+ 	echo "No error printed, but there should be one."
+ 	exit 3
+

sdk_container/src/third_party/portage-stable/app-admin/logrotate/files/logrotate-3.22.0-tests-selinux.patch

@@ -0,0 +1,184 @@
+https://github.com/logrotate/logrotate/issues/632
+https://github.com/logrotate/logrotate/pull/633
+
+From d2e090a9c0ba62aeab8c415aecf3067297f3eccc Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <cgzones@googlemail.com>
+Date: Sat, 3 Aug 2024 19:07:38 +0200
+Subject: [PATCH] Avoid opening log file for getting SELinux context
+
+Currently setSecCtxByName() uses open_logfile() to get a file descriptor
+to the current log file to retrieve its security context.
+open_logfile() performs additional checks, like whether the file is a
+regular file, which alter the control flow between systems with SELinux
+enabled and disabled.  This can be observed in the reported issue #632.
+Use lgetfilecon_raw() instead to have the same behavior for SELinux
+enabled and disabled systems and delay the checks for invalid log files
+to code executed in both cases.
+
+Closes: #632
+---
+ logrotate.c | 89 ++++++++++++++++++++++++++++++-----------------------
+ 1 file changed, 51 insertions(+), 38 deletions(-)
+
+diff --git a/logrotate.c b/logrotate.c
+index ba779950..c62e7c78 100644
+--- a/logrotate.c
++++ b/logrotate.c
+@@ -361,27 +361,9 @@ static int movefd(int oldfd, int newfd)
+     return rc;
+ }
+
+-static int setSecCtx(int fdSrc, const char *src, char **pPrevCtx)
+-{
+ #ifdef WITH_SELINUX
+-    char *srcCtx;
+-    *pPrevCtx = NULL;
+-
+-    if (!selinux_enabled)
+-        /* pretend success */
+-        return 0;
+-
+-    /* read security context of fdSrc */
+-    if (fgetfilecon_raw(fdSrc, &srcCtx) < 0) {
+-        if (errno == ENOTSUP)
+-            /* pretend success */
+-            return 0;
+-
+-        message(MESS_ERROR, "getting file context %s: %s\n", src,
+-                strerror(errno));
+-        return selinux_enforce;
+-    }
+-
++static int setSecCtx(char *srcCtx, char **pPrevCtx)
++{
+     /* save default security context for restoreSecCtx() */
+     if (getfscreatecon_raw(pPrevCtx) < 0) {
+         message(MESS_ERROR, "getting default context: %s\n", strerror(errno));
+@@ -401,37 +383,68 @@ static int setSecCtx(int fdSrc, const char *src, char **pPrevCtx)
+
+     message(MESS_DEBUG, "set default create context to %s\n", srcCtx);
+     freecon(srcCtx);
++
++    return 0;
++}
++#endif /* WITH_SELINUX */
++
++static int setSecCtxByFd(int fdSrc, const char *src, char **pPrevCtx)
++{
++#ifdef WITH_SELINUX
++    char *srcCtx;
++    *pPrevCtx = NULL;
++
++    if (!selinux_enabled)
++        /* pretend success */
++        return 0;
++
++    /* read security context of fdSrc */
++    if (fgetfilecon_raw(fdSrc, &srcCtx) < 0) {
++        if (errno == ENOTSUP)
++            /* pretend success */
++            return 0;
++
++        message(MESS_ERROR, "getting file context %s: %s\n", src,
++                strerror(errno));
++        return selinux_enforce;
++    }
++
++    return setSecCtx(srcCtx, pPrevCtx);
+ #else
+     (void) fdSrc;
+     (void) src;
+     (void) pPrevCtx;
+-#endif
+     return 0;
++#endif /* WITH_SELINUX */
+ }
+
+-static int setSecCtxByName(const char *src, const struct logInfo *log, char **pPrevCtx)
++static int setSecCtxByName(const char *src, char **pPrevCtx)
+ {
+-    int hasErrors = 0;
+ #ifdef WITH_SELINUX
+-    int fd;
++    char *srcCtx;
++    *pPrevCtx = NULL;
+
+     if (!selinux_enabled)
+         /* pretend success */
+         return 0;
+
+-    fd = open_logfile(src, log, 0);
+-    if (fd < 0) {
+-        message(MESS_ERROR, "error opening %s: %s\n", src, strerror(errno));
+-        return 1;
++    /* read security context of src */
++    if (lgetfilecon_raw(src, &srcCtx) < 0) {
++        if (errno == ENOTSUP)
++            /* pretend success */
++            return 0;
++
++        message(MESS_ERROR, "getting file context %s: %s\n", src,
++                strerror(errno));
++        return selinux_enforce;
+     }
+-    hasErrors = setSecCtx(fd, src, pPrevCtx);
+-    close(fd);
++
++    return setSecCtx(srcCtx, pPrevCtx);
+ #else
+     (void) src;
+-    (void) log;
+     (void) pPrevCtx;
+-#endif
+-    return hasErrors;
++    return 0;
++#endif /* WITH_SELINUX */
+ }
+
+ static void restoreSecCtx(char **pPrevCtx)
+@@ -874,7 +887,7 @@ static int compressLogFile(const char *name, const struct logInfo *log, const st
+         return 1;
+     }
+
+-    if (setSecCtx(inFile, name, &prevCtx) != 0) {
++    if (setSecCtxByFd(inFile, name, &prevCtx) != 0) {
+         /* error msg already printed */
+         close(inFile);
+         return 1;
+@@ -1307,7 +1320,7 @@ static int copyTruncate(const char *currLog, const char *saveLog, const struct s
+         if (!skip_copy) {
+             char *prevCtx;
+
+-            if (setSecCtx(fdcurr, currLog, &prevCtx) != 0) {
++            if (setSecCtxByFd(fdcurr, currLog, &prevCtx) != 0) {
+                 /* error msg already printed */
+                 goto fail;
+             }
+@@ -1905,7 +1918,7 @@ static int prerotateSingleLog(const struct logInfo *log, unsigned logNum,
+     message(MESS_DEBUG, "dateext suffix '%s'\n", dext_str);
+     message(MESS_DEBUG, "glob pattern '%s'\n", dext_pattern);
+
+-    if (setSecCtxByName(log->files[logNum], log, &prev_context) != 0) {
++    if (setSecCtxByName(log->files[logNum], &prev_context) != 0) {
+         /* error msg already printed */
+         return 1;
+     }
+@@ -2186,7 +2199,7 @@ static int rotateSingleLog(const struct logInfo *log, unsigned logNum,
+     if (!hasErrors) {
+
+         if (!(log->flags & (LOG_FLAG_COPYTRUNCATE | LOG_FLAG_COPY))) {
+-            if (setSecCtxByName(log->files[logNum], log, &savedContext) != 0) {
++            if (setSecCtxByName(log->files[logNum], &savedContext) != 0) {
+                 /* error msg already printed */
+                 return 1;
+             }
+@@ -2730,7 +2743,7 @@ static int writeState(const char *stateFilename)
+
+     /* get attributes, to assign them to the new state file */
+
+-    if (setSecCtx(fdcurr, stateFilename, &prevCtx) != 0) {
++    if (setSecCtxByFd(fdcurr, stateFilename, &prevCtx) != 0) {
+         /* error msg already printed */
+         free(tmpFilename);
+         close(fdcurr);
+