Weekly portage-stable package updates 2026-09-07

[github-actions]

CI: https://jenkins.flatcar.org/job/container/job/sdk/194/cldsv/

Closes flatcar/Flatcar#2346
Closes flatcar/Flatcar#2352
Closes flatcar/Flatcar#2359
Closes flatcar/Flatcar#2385

--

• app-arch/unzip: [PROD] [DEV]

  • still at 6.0_p31
  • package became stable on 'amd64'
  • package became stable on 'arm64'

• app-arch/zip: [PROD] [DEV]

  • still at 3.0_p16
  • package became stable on 'amd64'
  • package became stable on 'arm64'

• app-containers/docker: [SYSEXT-DOCKER]

  • from 29.5.2 to 29.8.0
  • fixes CVE-2026-46680
    • update: docker Flatcar#2346
  • package became unstable on 'amd64'
  • package became unstable on 'arm64'
  • build dependencies:
    • changes for dev-lang/go:
      • changed version constraint from >=1.25.5 to >=1.26.3
  • runtime dependencies:
    • changes for app-containers/docker-cli weak blocker:
      • changed version constraint from <29.5.2 to <29.8.0
  • release notes: https://github.com/moby/moby/releases/tag/docker-v29.8.0 https://github.com/moby/moby/releases/tag/docker-v29.7.0 https://github.com/moby/moby/releases/tag/docker-v29.6.0

• app-containers/docker-cli: [SYSEXT-DOCKER]

  • from 29.5.2 to 29.8.0
  • package became unstable on 'amd64'
  • package became unstable on 'arm64'
  • build dependencies:
    • changes for dev-lang/go:
      • changed version constraint from >=1.25.0 to >=1.26.3
  • release notes: https://github.com/moby/moby/releases/tag/docker-v29.8.0 https://github.com/moby/moby/releases/tag/docker-v29.7.0 https://github.com/moby/moby/releases/tag/docker-v29.6.0

• app-crypt/pinentry: [PROD] [DEV]

  • from 1.3.2-r1 to 1.3.3
  • release notes: https://raw.githubusercontent.com/gpg/pinentry/refs/tags/pinentry-1.3.3/NEWS

• app-editors/nano:

  • from 9.1 to 9.2
  • release notes: https://lists.gnu.org/archive/html/info-gnu/2026-07/msg00007.html

• app-portage/gemato:

  • from 20.12 to 20.13
  • dependencies:
    • added a dependency 'dev-lang/python:3.13[threads(+),ssl(+)]' for USE 'python_targets_python3_13?'
  • release notes: https://github.com/gentoo/gemato/commits/v20.13/

• dev-db/etcd: [PROD] [DEV]

  • from 3.5.18 to 3.5.33
  • fixes CVE-2025-22869, CVE-2025-30204, CVE-2026-33186, CVE-2026-73500
    • update: etcdctl / dev-db/etcd Flatcar#2352
  • package became unstable on 'amd64'
  • package became unstable on 'arm64'
  • build dependencies:
    • added a dependency '>=dev-lang/go-1.25.12'
  • release notes: https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md#v3533-2026-07-23

• dev-lang/python: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 3.13.14 to 3.13.15
  • fixes CVE-2026-15308
    • update: python Flatcar#2359
  • build dependencies:
    • changes for sec-keys/openpgp-keys-python with USE conditionals 'verify-sig?':
      • changed version constraint from >=20221025 to >=20260805
  • release notes: https://docs.python.org/release/3.13.15/whatsnew/changelog.html#python-3-13-15-final

• dev-lang/rust:

  • from 1.96.1 to 1.97.1
  • build dependencies:
    • added a dependency 'dev-lang/rust:1.97.1' for USE '||'
    • added a dependency 'dev-lang/rust-bin:1.97.1' for USE '||'
  • release notes: https://blog.rust-lang.org/2026/07/16/Rust-1.97.1/ https://blog.rust-lang.org/2026/07/09/Rust-1.97.0/

• dev-lang/rust-common:

  • from 1.96.1 to 1.97.1

• dev-lang/swig:

  • from 4.2.1 to 4.3.1
  • package became unstable on 'arm64'
  • release notes: https://github.com/swig/swig/blob/v4.3.1/RELEASENOTES

• dev-libs/expat: [PROD] [DEV]

  • from 2.8.3 to 2.8.4
  • fixes CVE-2026-66046, CVE-2026-76641, CVE-2026-76957, CVE-2026-76956
    • no Flatcar issue yet
  • release notes: https://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes

• dev-libs/glib: [PROD] [DEV]

  • still at 2.88.3
  • package became stable on 'arm64'

• dev-libs/jansson: [PROD] [DEV]

  • from 2.14.1 to 2.15.1
  • release notes: https://jansson.readthedocs.io/en/latest/changes.html#version-2-15-1

• dev-python/cffi:

  • from 2.0.0 to 2.1.1
  • licenses:
    • dropped license 'MIT'
    • added license 'MIT-0'
  • release notes: https://raw.githubusercontent.com/python-cffi/cffi/refs/tags/v2.1.1/doc/source/whatsnew.rst

• dev-python/cryptography:

  • from 49.0.0 to 50.0.0
  • release notes: https://raw.githubusercontent.com/pyca/cryptography/refs/tags/50.0.0/CHANGELOG.rst

• dev-python/flit-core:

  • from 3.12.0 to 4.0.2
  • dependencies:
    • added a dependency 'dev-lang/python:3.13' for USE 'python_targets_python3_13?'
  • release notes: https://raw.githubusercontent.com/pypa/flit/refs/tags/4.0.2/doc/history.rst

• dev-python/packaging: [SYSEXT-PYTHON]

  • from 26.2 to 26.3
  • release notes: https://github.com/pypa/packaging/releases/tag/26.3

• dev-python/pygments: [SYSEXT-PYTHON]

  • from 2.19.2 to 2.20.0
  • dependencies:
    • added a dependency 'dev-lang/python:3.13' for USE 'python_targets_python3_13?'
  • release notes: https://github.com/pygments/pygments/releases/tag/2.20.0

• dev-python/setuptools-scm: [SYSEXT-PYTHON]

  • from 10.1.2 to 10.2.1
  • build and runtime dependencies:
    • added a dependency '>=dev-python/vcs-versioning-2.2[python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14t(-)?,python_targets_python3_14(-)?,python_targets_python3_15t(-)?,python_targets_python3_15(-)?]'
  • release notes: https://github.com/pypa/setuptools-scm/releases/tag/setuptools-scm-v10.2.1

• dev-python/snakeoil:

  • from 0.11.4 to 0.11.5
  • release notes: https://github.com/pkgcore/snakeoil/releases/tag/v0.11.5

• dev-python/vcs-versioning: [SYSEXT-PYTHON]

  • from 2.2.2 to 2.2.4
  • build and runtime dependencies:
    • changes for dev-python/packaging:
      • changed version constraint from >=20 to >=26.2
  • release notes: https://github.com/pypa/setuptools-scm/releases/tag/vcs-versioning-v2.2.4

• dev-util/gdbus-codegen:

  • still at 2.88.3
  • package became stable on 'arm64'

• dev-util/glib-utils:

  • still at 2.88.3
  • package became stable on 'arm64'

• dev-vcs/git: [PROD] [DEV]

  • from 2.54.0 to 2.55.0
  • IUSE flag 'rust' became enabled by default
  • release notes: https://raw.githubusercontent.com/git/git/refs/tags/v2.55.0/Documentation/RelNotes/2.55.0.adoc

• net-dns/bind: [PROD] [DEV]

  • still at 9.20.26
  • removed IUSE flag 'static-libs'

• net-libs/ngtcp2: [PROD] [DEV]

  • still at 1.24.0
  • build dependencies:
    • added a dependency '>=app-portage/elt-patches-20250306'

• net-misc/openssh: [PROD] [DEV]

  • still at 10.5_p1
  • added IUSE flag 'seccomp'

• sys-apps/bubblewrap:

  • from 0.11.2-r1 to 0.12.0
  • fixes GHSA-pxhw-h44j-8pfx
    • GHSA-pxhw-h44j-8pfx
    • no flatcar issue yet
  • package became unstable on 'arm64'
  • removed IUSE flag 'suid'
  • dependencies and runtime dependencies:
    • dropped a dependency 'sys-libs/libseccomp'
    • changes for sys-libs/libselinux with USE conditionals 'selinux?':
      • changed version constraint from >=2.1.9 to >=2.3
  • licenses:
    • dropped license 'LGPL-2+'
    • added license 'LGPL-2.1+'
  • release notes: https://github.com/containers/bubblewrap/releases/tag/v0.12.0

• sys-apps/pkgcore:

  • from 0.12.39 to 0.12.41
  • build and runtime dependencies:
    • changes for dev-python/snakeoil:
      • changed version constraint from >=0.11.4 to >=0.11.5
  • release notes: https://github.com/pkgcore/pkgcore/releases/tag/v0.12.41

• sys-apps/shadow: [PROD] [DEV]

  • from 4.19.4 to 4.20.0
  • removed IUSE flag 'xattr'
  • dependencies:
    • added a dependency 'sys-apps/attr' for USE 'acl?'
  • dependencies and runtime dependencies:
    • dropped a dependency 'sys-apps/attr:=' for USE 'xattr?'
  • release notes: https://github.com/shadow-maint/shadow/releases/tag/4.20.0

• sys-apps/systemd: [PROD] [DEV]

  • from 260.4 to 261.2
  • package became stable on 'amd64'
  • package became stable on 'arm64'
  • added IUSE flag 'imds'
  • dependencies and runtime dependencies:
    • added a dependency 'sys-libs/libucontext' for USE 'elibc_musl?'
    • changes for sys-libs/musl with USE conditionals 'elibc_musl?':
      • changed version constraint from >=1.2.5-r8 to >=1.2.6
  • runtime dependencies:
    • added a dependency 'acct-user/systemd-imds' for USE 'imds?'
  • release notes: https://github.com/systemd/systemd/releases/tag/v261

• sys-firmware/edk2-bin:

  • from 202605 to 202608
  • release notes: https://github.com/tianocore/edk2/releases/tag/edk2-stable202608

• sys-fs/btrfs-progs: [PROD] [DEV]

  • from 7.0 to 7.1
  • release notes: https://github.com/kdave/btrfs-progs/releases/tag/v7.1

• sys-fs/cryptsetup: [PROD] [DEV]

  • from 2.8.6-r2 to 2.8.7
  • release notes: https://gitlab.com/cryptsetup/cryptsetup/-/raw/v2.8.7/docs/v2.8.7-ReleaseNotes

• sys-fs/zfs: [SYSEXT-ZFS]

  • from 2.4.3 to 2.4.4
  • fixes CVE-2026-79619
    • update: sys-fs/zfs Flatcar#2385
  • runtime dependencies:
    • changes for sys-fs/zfs-kmod weak blocker:
      • dropped version constraint
    • changes for virtual/dist-kernel with USE conditionals 'dist-kernel-cap?' -> 'dist-kernel?':
      • changed version constraint from <7.1 to <7.3
  • release notes: https://github.com/openzfs/zfs/releases/tag/zfs-2.4.4

• sys-libs/libselinux: [PROD] [DEV]

  • from 3.11 to 3.11-r1
  • dependencies and runtime dependencies:
    • dropped a dependency 'dev-libs/libpcre2:=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]'
    • added a dependency 'virtual/libpcre2-internals:=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]'

• sys-libs/liburing: [PROD] [DEV]

  • from 2.9 to 2.12
  • package became unstable on 'arm64'
  • release notes: https://github.com/axboe/liburing/releases/tag/liburing-2.1{2..0}

• sys-process/lsof: [PROD] [DEV]

  • from 4.99.6 to 4.99.7
  • release notes: https://github.com/lsof-org/lsof/releases/tag/4.99.7

--

• changelog
• image diff