From 1a92e6aafd2dee47fd415e4e1c6f5c9b3be2df30 Mon Sep 17 00:00:00 2001
From: David Michael <dm0@redhat.com>
Date: Tue, 2 Apr 2019 15:20:48 +0000
Subject: [PATCH] bump(metadata/glsa): sync with upstream

---
 .../portage-stable/metadata/glsa/Manifest     |  30 ++---
 .../metadata/glsa/Manifest.files.gz           | Bin 438854 -> 440123 bytes
 .../metadata/glsa/glsa-201904-01.xml          |  49 ++++++++
 .../metadata/glsa/glsa-201904-02.xml          |  50 ++++++++
 .../metadata/glsa/glsa-201904-03.xml          |  46 ++++++++
 .../metadata/glsa/glsa-201904-04.xml          |  47 ++++++++
 .../metadata/glsa/glsa-201904-05.xml          |  51 ++++++++
 .../metadata/glsa/glsa-201904-06.xml          |  69 +++++++++++
 .../metadata/glsa/glsa-201904-07.xml          | 109 ++++++++++++++++++
 .../metadata/glsa/glsa-201904-08.xml          |  52 +++++++++
 .../metadata/glsa/timestamp.chk               |   2 +-
 .../metadata/glsa/timestamp.commit            |   2 +-
 12 files changed, 490 insertions(+), 17 deletions(-)
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-01.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-02.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-03.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-04.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-05.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-06.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-07.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-08.xml

diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
index 88817494ae..fe1b572b30 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
@@ -1,23 +1,23 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA512
 
-MANIFEST Manifest.files.gz 438854 BLAKE2B ca65213463786d39d41485af7ea84eff3024cf674a90349e25e12c216efcd63b50848be0dd7fb7c54db79b6279385d7b09488386ffd96909db99671090ea4f08 SHA512 6572d8ad2e9aad4fbe11ff52d8aa91113cb87e207974cdb6aa98101ae4a50b77b173f68eba733267e1a109e70f86139ed901b5a4ee05472f22a8d3024aa9acb5
-TIMESTAMP 2019-03-28T13:38:46Z
+MANIFEST Manifest.files.gz 440123 BLAKE2B 47652947d6c26c7bbac6a5c0bd24fb3c439032faa43da521eacb80cffe306ba49152b4848845d3bd677e90481d8a7f19855a790d203085d2cb6d866eca1771b5 SHA512 51daf36dd12ed79db6c4817f04ce4f65259ca3bdd0a5bba3ce51df64b42b9630e4a8a51c1c35db67c1d1be1b6a33e8ba1a2a4597de4a7ffe2b7186f3fd88503a
+TIMESTAMP 2019-04-02T14:38:49Z
 -----BEGIN PGP SIGNATURE-----
 
-iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlyczmZfFIAAAAAALgAo
+iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlyjc/lfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx
 RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY
-klDYWhAAo1sblmnGYIlx9TtDfDwZAhcScB0WxacZHB1VfQlHTv99u5+rtGZHRbrS
-OgsjKvrvHGyAdL11mOncCxusWKLMICEbukgv9bAwPDSe4ZJssgCA6dWBlKqs08rD
-9T+xcGop/7L9hOOOjRCkjp5oiT11XT1QO3CmxCAudvBGWL3warElsl0NqXlR3pQU
-2wFHj1VjlN5TZ3aAKx327N+TO4PzV7OI4IXz1F1I40H3o7df4k1QA01QMKwqngov
-fcVUpuCaS6j+szZg/34On/eGqL6P3Zlgi2nA1Bj/L39DoCRzzdsWo50qhD8ckApa
-VLVqL7mur7j8h0Q4cStu/7F0H66cEpqEvRfiEv6eMEQ2QWPoGWTI3lo+Rmoz3QC/
-fIrCsAWMxWIZCNbtSdDLKklhPFsDcTFyBpUF1ZBS0oFWkQioK8BWvs0A5w/sLVL1
-sat5Apk1ygCTeeeX8KBQizu3I6uKco17SqihcAwRHooCJuNPAPRxM9lbpWiQ+PPE
-C+w0MSbDD77Vq89+BKo8eA/LGvaIn4pfV+39ijhhsEIWmv/RjXMr9noKkID8wTAK
-Dfe2HY9P/o6zhziXpiskTN8hk5ootmODbC3jAPOAfLqQeDIHyTXN+bYKpVtZCFh7
-lWdqHx9+3V3xlcBrW8MDxMq0Gpghcc0eCLPx3kSHYzgoXvi3ZPg=
-=0j+W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+=ydvg
 -----END PGP SIGNATURE-----
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz
index a3e404e2fdf5ad94011c5eff55470fef70b0ea41..91c7580233b54231bf0a2f2edffe0e9a8e7fe74a 100644
GIT binary patch
delta 3253
zcmV;m3`+CH<Qlu~8i0fWgaU*Egam{Iv<9`Rf9H}TNp1wuy-uMM2*Kbd$O8-p+DL$I
zz=$BBfzX%%)c1$pV`XI~G+B#YH0l${Al=QK=4R5$E!_5=<jAVFI4GT#BcO&U`nGZM
zUY%wFis+j7)l&mTk<65OGtYa`qdRJ~#3ZI#t=>y;Qr#+|t<*5RE_X_=Q{h9!k8eF%
ze})nRTIzHKfDirpHo)knf(uU&z>W^Gqz|k0xW(Y;ybweM9c_+f2g&)#rf>)2k?s_U
zu#_iSA6?cYh@$Q_lDL5Q$%epOW=JdnkW1~%LG5BpSg>1Z{GI)Iae$_2ta=T7+IsHG
z@DqskauF%gK=^~4b@noKZkYtFqc33=f2sK6&~@|JbpKLbNa={_u!;`Sx=!qFageO@
zozxtC0`^Ylw1_SM5i2!T#tCRGllH7PrY`kl<NMQUeKRTZD<?WDeQ1o#@tew}Qh`w_
z9QqdsP)KSTxJhLhdP&>7^}4`G(yDoM+Eg&&X#oiAt*)fGTBMWO(kat30JU9oe~p5h
zQe1tUUEWd9@&4K0D!{XtPQ49S+cPQ^s>6$>#rI%Icn`$Ae&<S5rk-uniBKsm)S!Kt
zTpcov!J2J2BV+$@lBuXTtye0+qol1my5dX)l~rvTK}v=GbP~VyPQ#nRfud?8r+KTg
zL-J_4wrx?RFB^D8`@fTPvatkdf4jU2C9-E*wHnzqIb8Y^6^E(LrSas;3sMZ03wYD%
zbCS;V+SZeW7koO&2a<d7Ab_;g#RU1LomMFnbtKzecRJ<8!lrYc{5F|lPE8wsyi{C%
z$J#!zyPXe;tX4Qj*_?$@+);&tQHY<r+8|UI9C0l>^W60{4Hg=+d|0gqf0J^1>jp|-
z246iIXhAoUWmnpW-i!RH2SK13PKR<6hct#{e?EY6+(^gC56^qaT2#^yuX$7P{wnip
z!`lek&4B6=-%d}cE=FOHmEw4!Q=oj+ERe8x<fU_3^ti36=BO&EiON=G#1~?t{_*U7
z0%EaHRGgid(y4=Z*Hb0se=5?tH6;YzQI-@(Wr+Y13@B4>A$VL$tl`}LpY66*>v4-w
z-)_iKzwMp}jS??ScoU_+`l7{OqK{o)S0mK9^3T98!-3CbYiCPJO->aflteLfY?@m5
zTnaKIeNgO3`OKt8ausMyLfB;)tPjqs2cdwmW5%q{p}QbQE<3Ldf8h6$BzT*@_b5SD
zbELQ^*Ck}bh%%u@R!`_~<i~+;Rta2WyOk2`sLrsAK&{%`ASywy@$vyap&<Uyv3W2l
zWlp@}7DvFQ_F`Fl`DHs{Sc)BxrW(ez%#NpWnmsyaN^D=!wfj=kAl=!VP<c&D8Nk^I
z_|ErI`2)c<&2SaWf4mR-7;M&)_e|<Py*_*@;i&;kPT7VHJ>?5>HIXgHmmt;MoU*Kj
zzyl-}a>X!iZhEc8;C0(EvsW%_YUJDn*SZLRHmaj-K_&c6=U0wUU;JFT6nu;A=1+0!
z>16s^t!?>EYgET^Iil9}Wliz|OUbzk0;-16mRf04T-QdHe<Li#0%lj#!>dgvU=*O4
zU$O$(yPEyDl^wiP8{3sr)*#72k>q}jc6Y){H<0XZDX1iD02p&Fqay{><%TFnLoH~5
z9k*o@tH3EGH#IWnU8sp1_wYV^XD#Q~+`ft$0PA^37fiB*fqt7K9z%!Jp&+RRE3fL$
ztMy<~a^zoFe_r3mcB#k4(KuzDC-U1~h0#2UIFdLb#q&#xjvPf~k$Yo%K@S-{1<$s3
zmW~5JO+pG)nE}95(&?B8hx=l~fK&MniX|~mv75<9dpR%<Ub(8W&Uz@E&Q`5WKaL?A
zI#K;7`#~WSowKH7ZJ9R_J$yF7)i)dR;)N%hoTUSZe;il)Lh~t#Xq~K-*Cljiljos$
z`T+tzuMc(NlS!FgIdKk6QFzorrr?e4o+v7N%Czcaq?h!8_Y{>x-*Z<r+VDeNwxx?0
zcSmiJYEvjluDTNzoV2|G0KaZto9t8ay^fu#AT6gJuSy+;ey&!xdksJfq<f2JP7Ya)
zRPA+*f2Px%v`97OcSMJCmrTSa*ifK09Fn{5WfTPpIu_`2hCn(>CvE1b$x6K3S!eMr
z@K$%dSJh|uP$xc^l=}R=>O_*eAY#$=2nb$IZ{51q(Wa;?A_a*|Mgfei=;l1Gqr#N&
z7u%Gw{3dNRhb+cCWiIJwo>JgwC}glp^COcGf0HzNP|kYeSF5&GpXwR>?Y;%7EWV+W
z-T~Z-<ZpWkPKo50oIBczc=J+*WEQ)+AugfjQ@<=r2++||17j&UgRJBxs|%FJm-b+O
z1;tPNkUXyTinb*`?XCDgr}b^MyyXcXPJJ=i$GHc6%#JfQCocd798NYy(-u_k^=9Wr
zf7hkSl6Ihmx9^q1NzNf?UK&F>n@UxAI)f?+BIx=s`XG_tmu6UHlFa}N=QGL^K8Boz
zg^zdday5&)wuQ0SY{{PrE{TI}mqemgEHt#7B&}0Yf)j$Kte~*WtK_-Jc0r|UsviA`
zDHQ=4%~>>EC#zB*L`Xv9^{3uxdilP-e<6qq>>O0f9g_COlFqmV+d~%Vp4s>+$((Gk
zt|Xz}msLc(nnbrg2wl+?LOD^I{Y5|kIf7|`4rvCm(@j0*l{X6xTnfu@OtWs@a(eUT
zl&!VjGxbwP0Jh~&LDWE)rA&BhRF*+6K|+20%ch1ltXX^7Q8`myV&7_IQ+rU*e}Sa*
zsEND8qzRy{HaWb(;wZ&T9Yn5e-qw%tVYR+}U*A-J(rGDv8vnG3CjA}JZLljS<p3Pz
zOtmJ_&z^j(UV+7f&S)~w6^!x1aLR{@iab&f=vM~_O)4uA>Aa`ry=oy!2{KE{GU+!y
z;PJfksVW63`Qn@%XVL+9wrQ=0e^NsP$XhbFMwcq9$`JuRl{Lai5Lk>2t+KC6?KJ+H
zrYgEHL>plWH9FnKdIGMC98vXZm#0!=52V;Wtk$Ed&iT#hA@r~Dfx;)VJh86UI-byD
zIeQW?g7ee75vzGnz+Jks4!7Z>=St>tDxRHSKTdBHuMHipR}G}->>YG|f8^KYusph0
zXQg`-DQd6VSGGWwo*gZ#0NayfMoh_|V&2rT+icUASnUoCB0+JES8*KcY88Tl05hBb
zXU;b<pL$DUThL6B*4;SACIlAhUIbJ<sbtFV&xh6e)@eT8m07?-Dg>&UW#zBVLgyrz
z<)b}fssm|CRJMfm!FdRWe@&)M4f-xIoveAWV>%xaeA&oc=TJ(BNE<Buc~15o3wwH_
z05D>UOwD+V(J%g%iouE|-kKT@U3gmIxXyN}fPQO+lQm9dYgvbptB&N#sCzb4+_~d$
zUQ<&%#}aLd@=?fqmlCm+6GfmWk~#0DoxpOiJ#Fvu+#go!yQ<Ewf4HR(n97zxcb?sQ
z!H}+{AfytDv&SMic2bs+G1gsT@-j$;7V{qwXakm2X)V+6zG-Iby`FxW{Ex%@CtDx*
zu04gEfh}GnjH1-=vtyH2_#A+jYXm-x7bQwvrgc$$-fqbTkOmNHz;-Ap;-wAi7_`=Q
z06pl4sTjt6c{N>if5=%A_R5r4Q%k>NA8L~pv)sI(g$Je5r<3@&AxrU1OLv#~v3z^H
zpy527B<za}t(qI)w`7UP+J#C1NcN}5><*q6JIQmI6cA%LV~hB&ZLYOMN)kF`QK@=E
zpsp<6ndODs$!N|F%=BC>PBB&ckz~@`g?ejuYIW$r>?G)1e<0rJfVP88<?C#ArerWL
zH;Oe1m-R>(%h&h<QiD-<FFy-!G_2gg&#HCRSg^@%AQ7CZPls`TSgpr=VhwNV8Ko7u
zWYHlH7Uobus5!$jWo-r-S)xq#Sea32D@7hj)q0LcXL9c@JIL~RvGaD0re;`O3UMQ&
zY7_yu)kyMgf0<B5k~`N#f-1wW%EvLjJd(;QsVsuGt!>Se5<x1gTVQ3c^-i>Jzg@f?
z3TuU6r^cz?&k3^RTXu(N_nV502(wAob+V|4!&Fw8&PSVkG_`l`{?p#7-@Vhf$(86t
zF97FMY;sZjv;D1^NzsJjL&7NWw5p92*#S0@?CQoDe-_0{ahWdvPY#WG8&n}|Ml<x}
zW2h9fDa|nD{sNk6na6dg4}4R5)|dOyP=m_u&*f~uVGM0bzff97wF6`TyHQAi`Y35?
zaoYywO*AQlUL8!kZDQ=mhS3FC_HxK<fXy4Gvx^8-(Fq<$fQJek6!Gk>zyJD=fBx&2
nzyAE~AIJFb&;H|&zg_?S&xil~{l|~re*WcuR?wk3AHEC#&0$x5

delta 1974
zcmV;n2TAz5?i$AA8i0fWgaU*Egam{Iv<9`Re`l8?Neu+y_dNwCKz9AO>;oXg3rO6+
zuCm1njX+}WFTT&++ckoo$5GErjmyrANM}aaRxWW{>Sm9uYKtA}G#vpoOwqTElXq8|
z2`Hj#;#b`YFp6ZR)SG$UiyqxkvlNq<DqFp#;H0`$L|a?K^txQ2UQOXc#g8vNTDlSg
ze_HBP1%MCz`T}4ysNljAM6jcSEZdvadfsAibZ!KZK}W%{>}YfTW>L6;@kn=yL`da{
z)<?B#5=4=gypp(p_?rcRG0l)z0w9;#nH}z8Oqj4+Y5ax#d2)b;X)JpU-7G!VY4{05
zyIn+*Z6N$X&N_P;o|^_i>!?$h#a8@&f9Se-1l_-s7g9Q6IIN<Bw5}72TO1_od?%cv
z4!~Y>PK)RQ5Rs{|GEP8inY8SBW9m{*Hoo4i*7r`z{mzNbN*@{{bNq&KsW338!l8eG
z0EMKcft#%?T`y^iw_X=GNt!i}-hv87JS_l$y;YSoSBrGOEuAuL5vc8=YZP3Rf8wgW
zRr`*jj`y$nRsx=_ThrTswQZ|Xp*p;1T6}eug!e$)tJj{1%JA7ToCvk01rA!L$<<+}
zF<7&7XJo8D4l)&tQ@)Z39%&2N(G_PZU{<+k1ZgYuyOa1`?=*f=I8aoL<TNf-c1RvY
z*S4^#^ko4rY5&(qCxIo{!s%5gf02E+RI8C)v4=~4qU11Dn;K8Pyl9KTbOA3qeGbx@
zUfX)I@PeC@d?2~I4+2OFFDA$r?X*&Y)RAl#-RYDUi$Ui+``hdkb86c7<E7&CJJ$Az
z-R*qP%4)^dQ*ahWaYq#ndLn)<YJ<QqIO1A%?qku{G)go^db3*3PRj79e;Q~5Gx+LR
zK#RJOOuN!T^q$S1dJsg|@OCISaoEPNS)Y%f95>R@_~CI)S&K{>;xz{q@6R+I8{R_L
zVg^)?_;Pwebuoy+t`x@$odV^vW`TsoW1l*wNsrsCYL2Rsny7?qM|>hS>L1VUCm<$?
zqT=ktlnM{xT@RI%vq<aGf0Ph-2Q5jC$`S!=Fo339LhyAevBnnu+wC@2>v@ZjKi!aR
z^|E>%HA*}+;oYGA>We0Si9U99UX8$W?LPy*bO%1Ct(_$)H91v`P!h$^5j3^%xfEpB
z^g*#A<uj8W$yJ~+8^TU$us%3<4MG89$BbE@Lw7-r-0r+OfZt1!f9P%gQdb*fHAh-!
z%XNyoVMLiwBdaI0JM!beH>(6LvfK&<JF+t@J;GIs8$=}tHr{@KPawo^DmKqfN;@a+
zxWy5$s6D$Z9)8(Q7^Y+eq^O2*PP5~ooMv5}GbOf9>Dpx~YLM<MPN=-5r3~P#0lxQZ
zs{DcAie|V9W?qMNe+)Kj<2{r5o7aagB|J5N$tj^*&{Mu(&nB|z_!4b(H>XUiA@Bf+
zg<R2%n?bMDHG184jNL1jIW^K2!L=>|ppEQkTT}@@=={nNs<S`WUJ5>9x%pk(dO4Zi
zs}-j2v_^Ftmt)nsKFvv9U@19QK|s||%2X>|71y<p<p@iXf50q?dU&<z1dIYS;~^`s
zdsnj@m$HMWYGaFX${Hj&D6+X<SF1bm)(s@PO9hpLjR0fL<?2WQyxb7wXsCo1*l|gl
zSOrcgxv7vjuLLJ@+{63ug|!@yxqTHi0M_HMU2wBY80Z%q@#s3Fb_Gc#th}oKuhz4Z
zk|Td(d3_(tf2kfDN2A$wzLDRSER5z+#F4}iTRb0HbmS-^i@i6N7xa+PQ?Qk#vUD5(
zI0-3KWd;CK+L~h`9PX1115V`=kR>rsvYN@ib~`Y4Ub(8W&Uz@E&Q{GuKaOrU^alG;
z_5&ibI%f@KEjw>w_3&8)SKqAL7cV>s_ADJh<aL%We>9(hMC)Xwye^?@H+de4ryn5j
zcD~_>uTIMC&WWRIio&CIG6ipR@kGJwp=sI4NH6Il?`c&Mec7w3(S{#*S=dfu+_h?p
zl#4=1_NqH!!AV;R0Pu11TI@b0-|N_^3et4y@v78e=+|mhtJeUuNV=Cib8^UXq-w8g
zG@a(8f32`7Ke0NTJ7pq*U_*i0c-Y*1O`|AK&@n-uGX%DyRMO@?G+9|scUDWj1>WkS
z_p15~Z+POflTx3*n<tXo1rf7dkAUFibg1%LN1Ik%5g{aYG74ZUMHlCB9TkSgpKMcT
z`9<0)4q5ck>|D~%eA^;NLm`93Ha{{6F-fBbf90$Lzgo4m{8G>0Z`TlES$v?9-T~Z-
z<cB3ir$qL3bM7c4@#d)v$w*dp<2r?!n|@hR2++|~17j&UgREq*s|%FJm-b+OMa572
zCwW}$6)j7?+gs}so#s!g<t<MHaq5f7KHh88$Lwfpaq<FSz~N+L6m3EEUN2T|bX^)O
ze`y73c>A6?oa7vW=BY8Hv#GGk<_xM$5K-5MUOS2WIyJ*egKP$1Xs;+w_~`aDOnkg}
zm#bOa879VJvu*xVbV(d+J8dK?Nur_UBxxN=2~LQbvVy{PUM0^(wu>rV!+P{5hAILy
zinD0CPG+S*h>(QHbA0*b=U;#O{ih$kAbtJl|9q<-fB$&?@#mXw{`K+k_1l+!0cFB5
IA+NLy00n5pV*mgE

diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-01.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-01.xml
new file mode 100644
index 0000000000..413cf96f36
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-01.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-01">
+  <title>Cairo: Denial of Service</title>
+  <synopsis>Multiple vulnerabilities were found in Cairo, the worst of which
+    could cause a Denial of Service condition.
+  </synopsis>
+  <product type="ebuild">cairo</product>
+  <announced>2019-04-02</announced>
+  <revised count="1">2019-04-02</revised>
+  <bug>596756</bug>
+  <bug>625636</bug>
+  <bug>672908</bug>
+  <access>remote</access>
+  <affected>
+    <package name="x11-libs/cairo" auto="yes" arch="*">
+      <unaffected range="ge">1.16.0-r3</unaffected>
+      <vulnerable range="lt">1.16.0-r3</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>Cairo is a 2D vector graphics library with cross-device output support.</p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in Cairo. Please review
+      the CVE identifiers referenced below for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>Please review the referenced CVE identifiers for details.</p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Cairo users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=x11-libs/cairo-1.16.0-r2"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2016-9082">CVE-2016-9082</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2017-9814">CVE-2017-9814</uri>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-27T00:20:40Z">BlueKnight</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:14:37Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-02.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-02.xml
new file mode 100644
index 0000000000..dbf891e06d
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-02.xml
@@ -0,0 +1,50 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-02">
+  <title>Libical: Multiple vulnerabilities</title>
+  <synopsis>Multiple vulnerabilities have been found in Libical, the worst of
+    which could result in a Denial of Service condition.
+  </synopsis>
+  <product type="ebuild">libical</product>
+  <announced>2019-04-02</announced>
+  <revised count="1">2019-04-02</revised>
+  <bug>587572</bug>
+  <bug>587574</bug>
+  <access>remote</access>
+  <affected>
+    <package name="dev-libs/libical" auto="yes" arch="*">
+      <unaffected range="ge">3.0.0</unaffected>
+      <vulnerable range="lt">3.0.0</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>An Open Source implementation of the iCalendar protocols and protocol
+      data units.
+    </p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in Libical. Please review
+      the referenced CVE identifiers for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>Please review the referenced CVE identifiers for details.</p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Libical users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=dev-libs/libical-3.0.0"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2016-5823">CVE-2016-5823</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2016-5824">CVE-2016-5824</uri>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-29T18:17:49Z">b-man</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:17:39Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-03.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-03.xml
new file mode 100644
index 0000000000..8a5ae4cdfa
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-03.xml
@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-03">
+  <title>Unbound: Multiple vulnerabilities </title>
+  <synopsis>Multiple vulnerabilities have been found in Unbound, the worst of
+    which could lead to privilege escalation.
+  </synopsis>
+  <product type="ebuild">unbound</product>
+  <announced>2019-04-02</announced>
+  <revised count="1">2019-04-02</revised>
+  <bug>641042</bug>
+  <bug>677054</bug>
+  <access>remote</access>
+  <affected>
+    <package name="net-dns/unbound" auto="yes" arch="*">
+      <unaffected range="ge">1.8.3</unaffected>
+      <vulnerable range="lt">1.8.3</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>Unbound is a validating, recursive, and caching DNS resolver.</p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in Unbound. Please review
+      the referenced bugs for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>Please review the referenced bugs for details.</p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Unbound users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=net-dns/unbound-1.8.3"
+    </code>
+  </resolution>
+  <references>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-10T00:48:50Z">BlueKnight</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:20:03Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-04.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-04.xml
new file mode 100644
index 0000000000..4dbd20dd48
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-04.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-04">
+  <title>Poppler: Multiple vulnerabilities</title>
+  <synopsis>Multiple vulnerabilities have been found in Poppler, the worst of
+    which could allow a Denial of Service.
+  </synopsis>
+  <product type="ebuild">poppler</product>
+  <announced>2019-04-02</announced>
+  <revised count="1">2019-04-02</revised>
+  <bug>659828</bug>
+  <bug>670880</bug>
+  <access>remote</access>
+  <affected>
+    <package name="app-text/poppler" auto="yes" arch="*">
+      <unaffected range="ge">0.70.0</unaffected>
+      <vulnerable range="lt">0.70.0</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>Poppler is a PDF rendering library based on the xpdf-3.0 code base.</p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in Poppler. Please review
+      the CVE identifiers referenced below for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>Please review the referenced CVE identifiers for details.</p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Poppler users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=app-text/poppler-0.70.0"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-19149">CVE-2018-19149</uri>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-27T05:17:10Z">BlueKnight</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:21:51Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-05.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-05.xml
new file mode 100644
index 0000000000..32f4490fde
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-05.xml
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-05">
+  <title>BURP: Root privilege escalation</title>
+  <synopsis>A vulnerability was discovered in Gentoo's ebuild for BURP which
+    could lead to root privilege escalation.
+  </synopsis>
+  <product type="ebuild">burp</product>
+  <announced>2019-04-02</announced>
+  <revised count="1">2019-04-02</revised>
+  <bug>641842</bug>
+  <access>local</access>
+  <affected>
+    <package name="app-backup/burp" auto="yes" arch="*">
+      <unaffected range="ge">2.1.32-r1</unaffected>
+      <vulnerable range="lt">2.1.32-r1</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>A network backup and restore program.</p>
+  </background>
+  <description>
+    <p>It was discovered that Gentoo’s BURP ebuild does not properly set
+      permissions or place the pid file in a safe directory. Additionally, the
+      first set of patches did not completely address this.  As such, a
+      revision has been made available that addresses all concerns of the
+      initial report.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>A local attacker could escalate privileges.</p>
+  </impact>
+  <workaround>
+    <p>Users should ensure the proper permissions are set as discussed in the
+      referenced bugs.
+    </p>
+  </workaround>
+  <resolution>
+    <p>All BURP users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=app-backup/burp-2.1.32-r1"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2017-18285">CVE-2017-18285</uri>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-27T01:35:48Z">BlueKnight</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:23:38Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-06.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-06.xml
new file mode 100644
index 0000000000..e5338d314d
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-06.xml
@@ -0,0 +1,69 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-06">
+  <title>GlusterFS: Multiple Vulnerabilities</title>
+  <synopsis>Multiple vulnerabilities have been found in GlusterFS, the worst of
+    which could result in the execution of arbitrary code.
+  </synopsis>
+  <product type="ebuild">glusterfs</product>
+  <announced>2019-04-02</announced>
+  <revised count="2">2019-04-02</revised>
+  <bug>653070</bug>
+  <bug>658606</bug>
+  <bug>664336</bug>
+  <bug>670088</bug>
+  <access>remote</access>
+  <affected>
+    <package name="sys-cluster/glusterfs" auto="yes" arch="*">
+      <unaffected range="ge">4.1.8</unaffected>
+      <vulnerable range="lt">4.1.8</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>A free and open source software scalable network filesystem.</p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in GlusterFS. Please
+      review the referenced CVE identifiers for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>Please review the referenced CVE identifiers for details.</p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All GlusterFS users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=sys-cluster/glusterfs-4.1.8"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10841">CVE-2018-10841</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-1088">CVE-2018-1088</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10904">CVE-2018-10904</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10907">CVE-2018-10907</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10911">CVE-2018-10911</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10913">CVE-2018-10913</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10914">CVE-2018-10914</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10923">CVE-2018-10923</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10924">CVE-2018-10924</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10926">CVE-2018-10926</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10927">CVE-2018-10927</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10928">CVE-2018-10928</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10929">CVE-2018-10929</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-10930">CVE-2018-10930</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14651">CVE-2018-14651</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14652">CVE-2018-14652</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14653">CVE-2018-14653</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14654">CVE-2018-14654</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14659">CVE-2018-14659</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14660">CVE-2018-14660</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14661">CVE-2018-14661</uri>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-24T12:37:38Z">BlueKnight</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:26:59Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-07.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-07.xml
new file mode 100644
index 0000000000..0cddfaf2c8
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-07.xml
@@ -0,0 +1,109 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-07">
+  <title>Mozilla Thunderbird and Firefox: Multiple vulnerabilities</title>
+  <synopsis>Multiple vulnerabilities have been found in Mozilla Thunderbird and
+    Firefox, the worst of which could lead to the execution of arbitrary code.
+  </synopsis>
+  <product type="ebuild">thunderbird,firefox,mozilla</product>
+  <announced>2019-04-02</announced>
+  <revised count="1">2019-04-02</revised>
+  <bug>676954</bug>
+  <bug>678072</bug>
+  <bug>681834</bug>
+  <bug>681836</bug>
+  <access>remote</access>
+  <affected>
+    <package name="mail-client/thunderbird" auto="yes" arch="*">
+      <unaffected range="ge">60.6.1</unaffected>
+      <vulnerable range="lt">60.6.1</vulnerable>
+    </package>
+    <package name="mail-client/thunderbird-bin" auto="yes" arch="*">
+      <unaffected range="ge">60.6.1</unaffected>
+      <vulnerable range="lt">60.6.1</vulnerable>
+    </package>
+    <package name="www-client/firefox" auto="yes" arch="*">
+      <unaffected range="ge">60.6.1</unaffected>
+      <vulnerable range="lt">60.6.1</vulnerable>
+    </package>
+    <package name="www-client/firefox-bin" auto="yes" arch="*">
+      <unaffected range="ge">60.6.1</unaffected>
+      <vulnerable range="lt">60.6.1</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>Mozilla Thunderbird is a popular open-source email client from the
+      Mozilla project.
+      Mozilla Firefox is a popular open-source web browser from the Mozilla
+      Project.
+    </p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in Mozilla Thunderbird and
+      Firefox. Please review the referenced Mozilla Foundation Security
+      Advisories and CVE identifiers below for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>Please review the referenced Mozilla Foundation Security Advisories and
+      CVE identifiers below for details.
+    </p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Thunderbird users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=mail-client/thunderbird-60.6.1"
+    </code>
+    
+    <p>All Thunderbird bin users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose
+      "&gt;=mail-client/thunderbird-bin-60.6.1"
+    </code>
+    
+    <p>All Firefox users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=www-client/firefox-60.6.1"
+    </code>
+    
+    <p>All Firefox bin users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=www-client/firefox-bin-60.6.1"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2016-5824">CVE-2016-5824</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18335">CVE-2018-18335</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18356">CVE-2018-18356</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18500">CVE-2018-18500</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18501">CVE-2018-18501</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18505">CVE-2018-18505</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18506">CVE-2018-18506</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18509">CVE-2018-18509</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18512">CVE-2018-18512</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-18513">CVE-2018-18513</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-5785">CVE-2019-5785</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9788">CVE-2019-9788</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9790">CVE-2019-9790</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9791">CVE-2019-9791</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9792">CVE-2019-9792</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9793">CVE-2019-9793</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9795">CVE-2019-9795</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9796">CVE-2019-9796</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9810">CVE-2019-9810</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2019-9813">CVE-2019-9813</uri>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-27T02:10:22Z">BlueKnight</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:32:51Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-08.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-08.xml
new file mode 100644
index 0000000000..9a634deb75
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201904-08.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201904-08">
+  <title>Subversion: Denial of Service</title>
+  <synopsis>A vulnerability in Subversion could lead to a Denial of Service
+    condition.
+  </synopsis>
+  <product type="ebuild">subversion</product>
+  <announced>2019-04-02</announced>
+  <revised count="1">2019-04-02</revised>
+  <bug>676094</bug>
+  <access>remote</access>
+  <affected>
+    <package name="dev-vcs/subversion" auto="yes" arch="*">
+      <unaffected range="ge">1.10.4</unaffected>
+      <vulnerable range="lt">1.10.4</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>Subversion is a version control system intended to eventually replace
+      CVS. Like CVS, it has an optional client-server architecture (where the
+      server can be an Apache server running mod_svn, or an ssh program as in
+      CVS’s :ext: method). In addition to supporting the features found in
+      CVS, Subversion also provides support for moving and copying files and
+      directories.
+    </p>
+  </background>
+  <description>
+    <p>A vulnerability was discovered in Subversion’s mod_dav_svn, that could
+      lead to a Denial of Service Condition.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>An attacker could cause a possible enial of Service condition.</p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Subversion users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=dev-vcs/subversion-1.10.4"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-11803">CVE-2018-11803</uri>
+  </references>
+  <metadata tag="requester" timestamp="2019-03-22T00:07:51Z">BlueKnight</metadata>
+  <metadata tag="submitter" timestamp="2019-04-02T04:35:47Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
index 6a887f3f03..26ed3b258b 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
@@ -1 +1 @@
-Thu, 28 Mar 2019 13:38:42 +0000
+Tue, 02 Apr 2019 14:38:45 +0000
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
index f476da4fbe..c5e0ca87f2 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
@@ -1 +1 @@
-821df578dd1e4239ed7205c587587491907ef45c 1553739754 2019-03-28T02:22:34+00:00
+30de0bf9ee6986a07eef489491b435e55fc9cafe 1554179778 2019-04-02T04:36:18+00:00