Weekly portage-stable package updates 2026-07-06

.github/workflows/portage-stable-packages-list

@@ -118,10 +118,6 @@ app-containers/aardvark-dns
 app-containers/catatonit
 app-containers/conmon
 app-containers/containerd
-app-containers/containers-common
-app-containers/containers-image
-app-containers/containers-shortnames
-app-containers/containers-storage
 app-containers/cri-tools
 app-containers/crun
 app-containers/docker
@@ -175,6 +171,7 @@ app-misc/mime-types
 app-misc/pax-utils
 
 app-portage/elt-patches
+app-portage/gemato
 app-portage/gentoolkit
 app-portage/getuto
 app-portage/portage-utils
@@ -305,12 +302,10 @@ dev-libs/tree-sitter-bash
 dev-libs/userspace-rcu
 dev-libs/xmlsec
 dev-libs/xxhash
-dev-libs/yajl
 
 dev-perl/File-Slurper
 dev-perl/Parse-Yapp
 
-dev-python/backports-tarfile
 dev-python/cachecontrol
 dev-python/certifi
 dev-python/cffi
@@ -354,6 +349,7 @@ dev-python/packaging
 dev-python/pathspec
 dev-python/pefile
 dev-python/pip
+dev-python/pkg-resources
 dev-python/platformdirs
 dev-python/pluggy
 dev-python/ply
@@ -444,7 +440,6 @@ eclass/kernel-2.eclass
 eclass/libtool.eclass
 eclass/linux-info.eclass
 eclass/linux-mod-r1.eclass
-eclass/linux-mod.eclass
 eclass/llvm-r1.eclass
 eclass/llvm-r2.eclass
 eclass/llvm-utils.eclass
@@ -480,6 +475,7 @@ eclass/python-r1.eclass
 eclass/python-single-r1.eclass
 eclass/python-utils-r1.eclass
 eclass/qmake-utils.eclass
+eclass/qt-utils.eclass
 eclass/readme.gentoo-r1.eclass
 eclass/rpm.eclass
 eclass/ruby-single.eclass
@@ -738,6 +734,7 @@ sys-process/audit
 sys-process/lsof
 sys-process/procps
 sys-process/psmisc
+sys-process/time
 sys-process/tini
 
 virtual/acl

changelog/security/2026-07-06-weekly-updates.md

@@ -0,0 +1,16 @@
+- libarchive ([CVE-2026-14164](https://www.cve.org/CVERecord?id=CVE-2026-14164))
+- aardvark-dns ([CVE-2026-35406](https://www.cve.org/CVERecord?id=CVE-2026-35406))
+- crun ([CVE-2026-30892](https://www.cve.org/CVERecord?id=CVE-2026-30892))
+- incus ([CVE-2026-33542](https://www.cve.org/CVERecord?id=CVE-2026-33542), [CVE-2026-33711](https://www.cve.org/CVERecord?id=CVE-2026-33711), [CVE-2026-33743](https://www.cve.org/CVERecord?id=CVE-2026-33743), [CVE-2026-33897](https://www.cve.org/CVERecord?id=CVE-2026-33897), [CVE-2026-33898](https://www.cve.org/CVERecord?id=CVE-2026-33898), [CVE-2026-33945](https://www.cve.org/CVERecord?id=CVE-2026-33945), [CVE-2026-35527](https://www.cve.org/CVERecord?id=CVE-2026-35527), [CVE-2026-40195](https://www.cve.org/CVERecord?id=CVE-2026-40195), [CVE-2026-40197](https://www.cve.org/CVERecord?id=CVE-2026-40197), [CVE-2026-40243](https://www.cve.org/CVERecord?id=CVE-2026-40243), [CVE-2026-40251](https://www.cve.org/CVERecord?id=CVE-2026-40251), [CVE-2026-41647](https://www.cve.org/CVERecord?id=CVE-2026-41647), [CVE-2026-41648](https://www.cve.org/CVERecord?id=CVE-2026-41648), [CVE-2026-41684](https://www.cve.org/CVERecord?id=CVE-2026-41684), [CVE-2026-41685](https://www.cve.org/CVERecord?id=CVE-2026-41685), [CVE-2026-48749](https://www.cve.org/CVERecord?id=CVE-2026-48749), [CVE-2026-48750](https://www.cve.org/CVERecord?id=CVE-2026-48750), [CVE-2026-48751](https://www.cve.org/CVERecord?id=CVE-2026-48751), [CVE-2026-48752](https://www.cve.org/CVERecord?id=CVE-2026-48752), [CVE-2026-48755](https://www.cve.org/CVERecord?id=CVE-2026-48755), [CVE-2026-48769](https://www.cve.org/CVERecord?id=CVE-2026-48769), [CVE-2026-55621](https://www.cve.org/CVERecord?id=CVE-2026-55621), [CVE-2026-55622](https://www.cve.org/CVERecord?id=CVE-2026-55622))
+- lxc ([CVE-2026-39402](https://www.cve.org/CVERecord?id=CVE-2026-39402))
+- podman ([CVE-2026-33414](https://www.cve.org/CVERecord?id=CVE-2026-33414), [CVE-2026-44517](https://www.cve.org/CVERecord?id=CVE-2026-44517), [CVE-2026-57231](https://www.cve.org/CVERecord?id=CVE-2026-57231))
+- gnupg ([gnupg-20260513](https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000505.html))
+- expat ([CVE-2026-50219](https://www.cve.org/CVERecord?id=CVE-2026-50219), [CVE-2026-56131](https://www.cve.org/CVERecord?id=CVE-2026-56131), [CVE-2026-56132](https://www.cve.org/CVERecord?id=CVE-2026-56132), [CVE-2026-56403](https://www.cve.org/CVERecord?id=CVE-2026-56403), [CVE-2026-56404](https://www.cve.org/CVERecord?id=CVE-2026-56404), [CVE-2026-56405](https://www.cve.org/CVERecord?id=CVE-2026-56405), [CVE-2026-56406](https://www.cve.org/CVERecord?id=CVE-2026-56406), [CVE-2026-56407](https://www.cve.org/CVERecord?id=CVE-2026-56407), [CVE-2026-56408](https://www.cve.org/CVERecord?id=CVE-2026-56408), [CVE-2026-56409](https://www.cve.org/CVERecord?id=CVE-2026-56409), [CVE-2026-56410](https://www.cve.org/CVERecord?id=CVE-2026-56410), [CVE-2026-56411](https://www.cve.org/CVERecord?id=CVE-2026-56411), [CVE-2026-56412](https://www.cve.org/CVERecord?id=CVE-2026-56412))
+- glib ([CVE-2025-14512](https://www.cve.org/CVERecord?id=CVE-2025-14512), [CVE-2026-0988](https://www.cve.org/CVERecord?id=CVE-2026-0988), [CVE-2026-58010](https://www.cve.org/CVERecord?id=CVE-2026-58010), [CVE-2026-58011](https://www.cve.org/CVERecord?id=CVE-2026-58011), [CVE-2026-58012](https://www.cve.org/CVERecord?id=CVE-2026-58012), [CVE-2026-58013](https://www.cve.org/CVERecord?id=CVE-2026-58013), [CVE-2026-58014](https://www.cve.org/CVERecord?id=CVE-2026-58014), [CVE-2026-58015](https://www.cve.org/CVERecord?id=CVE-2026-58015), [CVE-2026-58016](https://www.cve.org/CVERecord?id=CVE-2026-58016))
+- bind ([CVE-2025-13878](https://www.cve.org/CVERecord?id=CVE-2025-13878), [CVE-2026-1519](https://www.cve.org/CVERecord?id=CVE-2026-1519), [CVE-2026-3039](https://www.cve.org/CVERecord?id=CVE-2026-3039), [CVE-2026-3592](https://www.cve.org/CVERecord?id=CVE-2026-3592), [CVE-2026-3593](https://www.cve.org/CVERecord?id=CVE-2026-3593), [CVE-2026-5946](https://www.cve.org/CVERecord?id=CVE-2026-5946), [CVE-2026-5947](https://www.cve.org/CVERecord?id=CVE-2026-5947), [CVE-2026-5950](https://www.cve.org/CVERecord?id=CVE-2026-5950))
+- cifs-utils ([CVE-2026-12505](https://www.cve.org/CVERecord?id=CVE-2026-12505))
+- libmicrohttpd ([CVE-2025-59777](https://www.cve.org/CVERecord?id=CVE-2025-59777), [CVE-2025-62689](https://www.cve.org/CVERecord?id=CVE-2025-62689))
+- nghttp2 ([CVE-2026-27135](https://www.cve.org/CVERecord?id=CVE-2026-27135))
+- curl ([CVE-2026-4873](https://www.cve.org/CVERecord?id=CVE-2026-4873), [CVE-2026-5545](https://www.cve.org/CVERecord?id=CVE-2026-5545), [CVE-2026-5773](https://www.cve.org/CVERecord?id=CVE-2026-5773), [CVE-2026-6253](https://www.cve.org/CVERecord?id=CVE-2026-6253), [CVE-2026-6276](https://www.cve.org/CVERecord?id=CVE-2026-6276), [CVE-2026-6429](https://www.cve.org/CVERecord?id=CVE-2026-6429), [CVE-2026-7009](https://www.cve.org/CVERecord?id=CVE-2026-7009), [CVE-2026-7168](https://www.cve.org/CVERecord?id=CVE-2026-7168), [CVE-2026-8286](https://www.cve.org/CVERecord?id=CVE-2026-8286), [CVE-2026-8458](https://www.cve.org/CVERecord?id=CVE-2026-8458), [CVE-2026-8924](https://www.cve.org/CVERecord?id=CVE-2026-8924), [CVE-2026-8925](https://www.cve.org/CVERecord?id=CVE-2026-8925), [CVE-2026-8926](https://www.cve.org/CVERecord?id=CVE-2026-8926), [CVE-2026-8927](https://www.cve.org/CVERecord?id=CVE-2026-8927), [CVE-2026-8932](https://www.cve.org/CVERecord?id=CVE-2026-8932), [CVE-2026-9079](https://www.cve.org/CVERecord?id=CVE-2026-9079), [CVE-2026-9080](https://www.cve.org/CVERecord?id=CVE-2026-9080), [CVE-2026-9545](https://www.cve.org/CVERecord?id=CVE-2026-9545), [CVE-2026-9546](https://www.cve.org/CVERecord?id=CVE-2026-9546), [CVE-2026-9547](https://www.cve.org/CVERecord?id=CVE-2026-9547), [CVE-2026-10536](https://www.cve.org/CVERecord?id=CVE-2026-10536), [CVE-2026-11352](https://www.cve.org/CVERecord?id=CVE-2026-11352), [CVE-2026-11564](https://www.cve.org/CVERecord?id=CVE-2026-11564), [CVE-2026-11586](https://www.cve.org/CVERecord?id=CVE-2026-11586), [CVE-2026-11856](https://www.cve.org/CVERecord?id=CVE-2026-11856), [CVE-2026-12064](https://www.cve.org/CVERecord?id=CVE-2026-12064))
+- sed ([CVE-2026-5958](https://www.cve.org/CVERecord?id=CVE-2026-5958))
+- perl ([CVE-2026-4176](https://www.cve.org/CVERecord?id=CVE-2026-4176), [CVE-2026-13221](https://www.cve.org/CVERecord?id=CVE-2026-13221), [CVE-2026-57432](https://www.cve.org/CVERecord?id=CVE-2026-57432))

changelog/updates/2026-07-06-weekly-updates.md

@@ -0,0 +1,150 @@
+- SDK: crossdev ([20260501](https://gitweb.gentoo.org/proj/crossdev.git/log/?h=20260501))
+- SDK: cryptography
+([48.0.0](https://raw.githubusercontent.com/pyca/cryptography/refs/tags/48.0.0/CHANGELOG.rst))
+- SDK: docutils ([0.23](https://docutils.sourceforge.io/HISTORY.html#release-0-23-2026-05-27))
+- SDK: editables
+([0.6](https://raw.githubusercontent.com/pfmoore/editables/refs/tags/0.6/CHANGELOG.md))
+- SDK: gdbus-codegen ([2.88.2](https://gitlab.gnome.org/GNOME/glib/-/releases/2.88.2))
+- SDK: glib-utils ([2.88.2](https://gitlab.gnome.org/GNOME/glib/-/releases/2.88.2))
+- SDK: gobject-introspection-common ([1.86.0](https://gitlab.gnome.org/GNOME/gobject-introspection/-/releases/1.86.0))
+- SDK: hatchling ([1.30.1](https://github.com/pypa/hatch/releases/tag/hatchling-v1.30.1))
+- SDK: installer
+([1.0.1](https://github.com/pypa/installer/releases/tag/1.0.1) (includes
+[1.0.0](https://github.com/pypa/installer/releases/tag/1.0.0)))
+- SDK: maturin ([1.13.3](https://github.com/PyO3/maturin/releases/tag/v1.13.3))
+- SDK: meson ([1.11.1](https://mesonbuild.com/Release-notes-for-1-11-0.html)
+(includes [1.10.0](https://mesonbuild.com/Release-notes-for-1-10-0.html)))
+- SDK: nspr ([4.39](https://hg-edge.mozilla.org/projects/nspr/log/54e7c1b0803d151e142e30dc0d05f12e1ec67a13))
+- SDK: patchutils
+([0.4.5](https://github.com/twaugh/patchutils/releases/tag/0.4.5) (includes
+[0.4.4](https://github.com/twaugh/patchutils/releases/tag/0.4.4),
+[0.4.3](https://github.com/twaugh/patchutils/releases/tag/0.4.3)))
+- SDK: pathspec ([1.1.1](https://raw.githubusercontent.com/cpburnz/python-pathspec/refs/tags/v1.1.1/CHANGES.rst))
+- SDK: perf (6.19.12)
+- SDK: perl ([5.42.2](https://perldoc.perl.org/perl5422delta))
+- SDK: poetry-core ([2.4.1](https://github.com/python-poetry/poetry-core/releases/tag/2.4.1))
+- SDK: rapidjson ([1.1.0_p20250205](TODO))
+- SDK: rhash ([1.4.6](https://github.com/rhash/RHash/releases/tag/v1.4.6))
+- SDK: rust ([1.95.0](https://blog.rust-lang.org/2026/04/16/Rust-1.95.0/)
+(includes [1.94.0](https://blog.rust-lang.org/2026/03/05/Rust-1.94.0/)))
+- SDK: tcl ([8.6.17](https://sourceforge.net/p/tcl/mailman/message/59221153/))
+- azure, dev, gce, sysext-python: ensurepip-pip ([26.1.2](https://raw.githubusercontent.com/pypa/pip/refs/tags/26.1.2/NEWS.rst))
+- base, dev: bind ([9.20.23](https://bind9.readthedocs.io/en/v9.20.23/notes.html#notes-for-bind-9-20-23))
+- base, dev: btrfs-progs ([7.0](https://github.com/kdave/btrfs-progs/releases/tag/v7.0))
+- base, dev: checkpolicy ([3.10](https://github.com/SELinuxProject/selinux/releases/tag/3.10))
+- base, dev: curl ([8.21.0](https://curl.se/ch/8.21.0.html) (includes
+[8.20.0](https://curl.se/ch/8.20.0.html)))
+- base, dev: dracut ([111](https://github.com/dracut-ng/dracut/releases/tag/111))
+- base, dev: ethtool ([7.0](https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/plain/NEWS?h=v7.0))
+- base, dev: expat ([2.8.2](https://blog.hartwork.org/posts/expat-2-8-2-released/))
+- base, dev: gcc (15.3.0)
+- base, dev: gentoo-functions ([1.7.7](https://gitweb.gentoo.org/proj/gentoo-functions.git/log/?h=gentoo-functions-1.7.7))
+- base, dev: git ([2.54.0](https://raw.githubusercontent.com/git/git/refs/tags/v2.54.0/Documentation/RelNotes/2.54.0.adoc))
+- base, dev: glib
+([2.88.2](https://gitlab.gnome.org/GNOME/glib/-/releases/2.88.2) (includes
+[2.88.1](https://gitlab.gnome.org/GNOME/glib/-/releases/2.88.1),
+[2.88.0](https://gitlab.gnome.org/GNOME/glib/-/releases/2.88.0)))
+- base, dev: glibc ([2.43](https://sourceware.org/pipermail/libc-announce/2026/000052.html))
+- base, dev: gnupg
+([2.5.20](https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000505.html)
+(includes [2.5.19](https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000504.html)))
+- base, dev: iproute2 ([7.0.0](https://lwn.net/Articles/1067497/))
+- base, dev: kbd ([2.10.0](https://github.com/legionus/kbd/releases/tag/v2.10.0))
+- base, dev: libgpg-error ([1.60](https://dev.gnupg.org/T8112.html))
+- base, dev: libksba ([1.8.0](https://dev.gnupg.org/T8253.html))
+- base, dev: libmd ([1.2.0](https://git.hadrons.org/cgit/libmd.git/log/?h=1.2.0))
+- base, dev: libselinux ([3.10](https://github.com/SELinuxProject/selinux/releases/tag/3.10))
+- base, dev: libsepol
+([3.10](https://github.com/SELinuxProject/selinux/releases/tag/3.10))
+- base, dev: libunistring ([1.4.2](https://gitweb.git.savannah.gnu.org/gitweb/?p=libunistring.git;a=blob;f=NEWS;h=e97ee06e03d6fea559665306c82f02e09725893a;hb=7dee51196310a703972a94843ecaf92decce6f82))
+- base, dev: libuv
+([1.52.1](https://github.com/libuv/libuv/releases/tag/v1.52.1) (includes
+[1.52.0](https://github.com/libuv/libuv/releases/tag/v1.52.0)))
+- base, dev: mit-krb5 ([1.22.2](https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.2.html))
+- base, dev: openldap (2.6.13)
+- base, dev: qemu-guest-agent ([10.2.2](https://wiki.qemu.org/ChangeLog/10.2#Guest_agent))
+- base, dev: rsync ([3.4.4](https://github.com/RsyncProject/rsync/releases/tag/v3.4.4))
+- base, dev: sed ([4.10](https://lists.gnu.org/archive/html/info-gnu/2026-04/msg00009.html))
+- base, dev: selinux-base
+([2.20260312_p1](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20260312)
+(includes
+[2.20250923](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250923)))
+- base, dev: selinux-base-policy ([2.20260312_p1](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20260312))
+- base, dev: selinux-container
+([2.20260312_p1](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20260312)
+(includes
+[2.20250923](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250923)))
+- base, dev: selinux-dbus
+([2.20260312_p1](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20260312)
+(includes
+[2.20250923](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250923)))
+- base, dev: selinux-policykit
+([2.20260312_p1](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20260312)
+(includes
+[2.20250923](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250923)))
+- base, dev: selinux-sssd
+([2.20260312_p1](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20260312)
+(includes
+[2.20250923](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250923)))
+- base, dev: selinux-unconfined
+([2.20260312_p1](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20260312)
+(includes
+[2.20250923](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250923)))
+- base, dev: semodule-utils ([3.10](https://github.com/SELinuxProject/selinux/releases/tag/3.10))
+- base, dev: sqlite ([3.53.1](https://sqlite.org/releaselog/3_53_1.html))
+- base, dev: strace ([7.0](https://github.com/strace/strace/releases/tag/v7.0))
+- base, dev: talloc ([2.4.4](https://gitlab.com/samba-team/samba/-/commit/51d05da70e8461834396d361eead807127751b76))
+- base, dev: tdb ([1.4.15](https://gitlab.com/samba-team/samba/-/commit/c05d12c4fefa0272fb06a040ff8ba2b03ab42fb3))
+- base, dev: timezone-data ([2026b](https://lists.iana.org/hyperkitty/list/tz@iana.org/thread/VX2Z3CBO6KHTYZNBBKFFWM7ZCI6TVCXP/))
+- base, dev: xfsprogs
+([7.0.1](https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/plain/doc/CHANGES?h=v7.0.1)
+(includes
+[7.0.0](https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/plain/doc/CHANGES?h=v7.0.0)))
+- dev: eselect ([1.4.32](https://gitweb.gentoo.org/proj/eselect.git/plain/NEWS?id=1ff2aea90d6cd2bb93019deb40d3c7c7a0b5c36f))
+- dev: gdb ([17.2](https://sourceware.org/pipermail/gdb-announce/2026/000148.html))
+- dev: getuto ([2.0](https://github.com/projg2/getuto/commits/getuto-2.0/))
+- dev: i2c-tools ([4.4](https://git.kernel.org/pub/scm/utils/i2c-tools/i2c-tools.git/tree/CHANGES?h=v4.4))
+- dev: portage ([3.0.81.1](https://gitweb.gentoo.org/proj/portage.git/plain/NEWS?h=portage-3.0.81.1))
+- sysext-docker: docker
+([29.1.3](https://github.com/moby/moby/releases/tag/docker-v29.1.3) (includes
+[29.1.2](https://github.com/moby/moby/releases/tag/docker-v29.1.2),
+[29.1.1](https://github.com/moby/moby/releases/tag/docker-v29.1.1),
+[29.1.0](https://github.com/moby/moby/releases/tag/docker-v29.1.0),
+[29.0.0](https://github.com/moby/moby/releases/tag/docker-v29.0.0)))
+- sysext-incus: incus
+([7.2](https://discuss.linuxcontainers.org/t/incus-7-2-has-been-released/26879)
+(includes
+[7.0](https://discuss.linuxcontainers.org/t/incus-7-0-lts-has-been-released/26641)))
+- sysext-incus: lxc ([7.0.0](https://discuss.linuxcontainers.org/t/lxc-7-0-lts-has-been-released/26612))
+- sysext-incus: lxcfs ([7.0.0](https://discuss.linuxcontainers.org/t/lxcfs-7-0-lts-has-been-released/26607))
+- sysext-podman: aardvark-dns
+([2.0.0](https://github.com/containers/aardvark-dns/releases/tag/v2.0.0)
+(includes
+[1.17.1](https://github.com/containers/aardvark-dns/releases/tag/v1.17.1)))
+- sysext-podman: conmon
+([2.2.1](https://github.com/containers/conmon/releases/tag/v2.2.1) (includes
+[2.2.0](https://github.com/containers/conmon/releases/tag/v2.2.0)))
+- sysext-podman: crun
+([1.28](https://github.com/containers/crun/releases/tag/1.28))
+- sysext-podman: netavark
+([2.0.0](https://github.com/containers/netavark/releases/tag/v2.0.0) (includes
+[1.17.2](https://github.com/containers/netavark/releases/tag/v1.17.2)))
+- sysext-podman: passt ([2026.05.26](https://archives.passt.top/passt-user/20260527093624.6349111e@elisabeth/T/#u))
+- sysext-podman: podman
+([6.0.0](https://github.com/podman-container-tools/podman/releases/tag/v6.0.0)
+(includes
+[5.8.0](https://github.com/podman-container-tools/podman/releases/tag/v5.8.0)))
+- sysext-python: distlib ([0.4.1](https://raw.githubusercontent.com/pypa/distlib/refs/tags/0.4.1/CHANGES.rst))
+- sysext-python: idna ([3.18](https://github.com/kjd/idna/releases/tag/v3.18)
+(includes [3.17](https://github.com/kjd/idna/releases/tag/v3.17),
+[3.16](https://github.com/kjd/idna/releases/tag/v3.16),
+[3.15](https://github.com/kjd/idna/releases/tag/v3.15)))
+- sysext-python: jaraco-functools ([4.5.0](https://raw.githubusercontent.com/jaraco/jaraco.functools/refs/tags/v4.5.0/NEWS.rst))
+- sysext-python: markdown-it-py ([4.2.0](https://github.com/executablebooks/markdown-it-py/releases/tag/v4.2.0))
+- sysext-python: more-itertools ([11.1.0](https://github.com/more-itertools/more-itertools/releases/tag/v11.1.0))
+- sysext-python: packaging ([26.2](https://github.com/pypa/packaging/releases/tag/26.2))
+- sysext-python: pip ([26.1.2](https://raw.githubusercontent.com/pypa/pip/refs/tags/26.1.2/NEWS.rst))
+- sysext-python: platformdirs ([4.10.0](https://github.com/tox-dev/platformdirs/releases/tag/4.10.0))
+- sysext-python: requests ([2.34.2](https://github.com/psf/requests/releases/tag/v2.34.2) (includes [2.34.1](https://github.com/psf/requests/releases/tag/v2.34.1), [2.34.0](https://github.com/psf/requests/releases/tag/v2.34.0)))
+- sysext-python: trove-classifiers ([2026.6.1.19](https://github.com/pypa/trove-classifiers/releases/tag/2026.6.1.19))
+- vmware: xmlsec ([1.3.11](https://github.com/lsh123/xmlsec/releases/tag/1.3.11))

sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-dns/bind

@@ -21,7 +21,7 @@ unset ndb_install_mask
 # Override fowners to ignore changing owner or group to named. The
 # only files that this happens for are files that we have put into
 # {PKG_,}INSTALL_MASK. This will help us avoid installing
-# acct-user/named and acct-user/group.
+# acct-user/named and acct-group/named.
 if [[ -z ${flatcar_hacked_fowners:-} ]]; then
     flatcar_hacked_fowners=$(command -v fowners)
 fi