Merge pull request #1343 from flatcar/buildbot/weekly-portage-stable-package-updates-2023-11-06

Weekly portage-stable package updates 2023-11-06

Author: t-lo

changelog/security/2023-11-09-weekly-updates.md

@@ -0,0 +1 @@
+- zlib ([CVE-2023-45853](https://nvd.nist.gov/vuln/detail/CVE-2023-45853))

changelog/updates/2023-11-09-weekly-updates.md

@@ -0,0 +1,3 @@
+- hwdata ([v0.375](https://github.com/vcrhonek/hwdata/releases/tag/v0.375))
+- nvme-cli ([v2.6](https://github.com/linux-nvme/nvme-cli/releases/tag/v2.6), libnvme [v1.6](https://github.com/linux-nvme/libnvme/releases/tag/v1.6))
+- SDK: python packaging ([23.2](https://github.com/pypa/packaging/releases/tag/23.2)), platformdirs ([3.11.0](https://github.com/platformdirs/platformdirs/releases/tag/3.11.0)) 

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords

@@ -11,7 +11,6 @@
 =app-containers/cri-tools-1.27.0 ~amd64 ~arm64
 =app-containers/docker-24.0.6 ~amd64 ~arm64
 =app-containers/docker-cli-24.0.6 ~amd64 ~arm64
-=app-containers/runc-1.1.9 ~amd64 ~arm64
 
 # Seems to be the only available ebuild in portage-stable right now.
 =app-crypt/adcli-0.9.2 ~amd64 ~arm64

sdk_container/src/third_party/portage-stable/app-arch/bzip2/bzip2-1.0.8-r4.ebuild

@@ -6,7 +6,7 @@
 
 EAPI=7
 
-VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/bzip2.gpg
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/bzip2.gpg
 inherit toolchain-funcs multilib multilib-minimal usr-ldscript verify-sig
 
 DESCRIPTION="A high-quality data compressor used extensively by Gentoo Linux"

sdk_container/src/third_party/portage-stable/app-arch/gzip/gzip-1.12-r4.ebuild

@@ -3,7 +3,7 @@
 
 EAPI=7
 
-VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/gzip.asc
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/gzip.asc
 inherit flag-o-matic verify-sig
 
 DESCRIPTION="Standard GNU compressor"

sdk_container/src/third_party/portage-stable/app-arch/gzip/gzip-1.13.ebuild

@@ -3,7 +3,7 @@
 
 EAPI=8
 
-VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/gzip.asc
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/gzip.asc
 inherit flag-o-matic verify-sig
 
 DESCRIPTION="Standard GNU compressor"

sdk_container/src/third_party/portage-stable/app-arch/libarchive/libarchive-3.7.1.ebuild

@@ -18,7 +18,7 @@ LICENSE="BSD BSD-2 BSD-4 public-domain"
 SLOT="0/13"
 KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris"
 IUSE="acl blake2 +bzip2 +e2fsprogs expat +iconv lz4 +lzma lzo nettle static-libs xattr zstd"
-VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/libarchive.org.asc
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/libarchive.org.asc
 
 RDEPEND="
 	sys-libs/zlib[${MULTILIB_USEDEP}]

sdk_container/src/third_party/portage-stable/app-arch/libarchive/libarchive-3.7.2.ebuild

@@ -18,7 +18,7 @@ LICENSE="BSD BSD-2 BSD-4 public-domain"
 SLOT="0/13"
 KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris"
 IUSE="acl blake2 +bzip2 +e2fsprogs expat +iconv lz4 +lzma lzo nettle static-libs xattr zstd"
-VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/libarchive.org.asc
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/libarchive.org.asc
 
 RDEPEND="
 	sys-libs/zlib[${MULTILIB_USEDEP}]

sdk_container/src/third_party/portage-stable/app-arch/pigz/pigz-2.8.ebuild

@@ -3,7 +3,7 @@
 
 EAPI=8
 
-VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/madler.asc
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/madler.asc
 inherit toolchain-funcs flag-o-matic verify-sig
 
 DESCRIPTION="A parallel implementation of gzip"

sdk_container/src/third_party/portage-stable/app-arch/tar/tar-1.34-r2.ebuild

@@ -3,7 +3,7 @@
 
 EAPI=7
 
-VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/tar.asc
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/tar.asc
 inherit verify-sig
 
 DESCRIPTION="Use this to make tarballs :)"