From 805e1b1a926eb2089835100fcc22732f84c30aba Mon Sep 17 00:00:00 2001
From: David Michael <david.michael@coreos.com>
Date: Mon, 16 Apr 2018 13:19:34 -0400
Subject: [PATCH] bump(metadata/glsa): sync with upstream

---
 .../portage-stable/metadata/glsa/Manifest     |  30 ++++-----
 .../metadata/glsa/Manifest.files.gz           | Bin 421068 -> 421384 bytes
 .../metadata/glsa/glsa-201804-11.xml          |  61 ++++++++++++++++++
 .../metadata/glsa/glsa-201804-12.xml          |  50 ++++++++++++++
 .../metadata/glsa/timestamp.chk               |   2 +-
 .../metadata/glsa/timestamp.commit            |   2 +-
 6 files changed, 128 insertions(+), 17 deletions(-)
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-11.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-12.xml

diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
index d06381fc60..eb5b254c6b 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
@@ -1,23 +1,23 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA512
 
-MANIFEST Manifest.files.gz 421068 BLAKE2B 7dadce7e4b041a3441a6b63ed7a860af4bdcb72f0c20dfbfdd9e4fb6e577a48f6a4fcb0599fba15eed3a96fa7c8c225773cd2e3d3942a286fd74ab527c15651e SHA512 acf6ff1943f0998753e92be7360ecf6e135b838a2681d49f8c91bef5155aaca01686c562e9e52ce269826b172b3f86851233b7716507c7b52394116ff6101c02
-TIMESTAMP 2018-04-10T15:38:31Z
+MANIFEST Manifest.files.gz 421384 BLAKE2B bfbe5e356f9fb5467472e01b9ffa4c7ab788e49c049d40c7633dfa4d2ebb5c4bf4f92a4fa43049b85dad5d10c593ecd0e243ea7c1975e84055fc34386f72a4e8 SHA512 f0c1e1729862aec592153456994003bbdbb8f9bff919d3e8a74ef963808bc6065be99f22297469abc9678fd65da4c09918d0a860c5e2f27c193f04efea6f9560
+TIMESTAMP 2018-04-16T16:38:37Z
 -----BEGIN PGP SIGNATURE-----
 
-iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlrM2ndfFIAAAAAALgAo
+iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlrU0Y1fFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx
 RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY
-klBM2hAAhxjdROZlLwG2CxokiwKkVTLMepPK80nnhs85wEgE/DD4+zDo7qeKsRvi
-24x/hzxUrr+B82GoEGK6nhCq90CCj54FMZNu+3csa8T8JaFJrzJ+HAU6iNtfdKjE
-vMsE6Vdvehx6pgTEmVXrcc0iGQHKu8FNItd4z6MXvQg6s7UUJqdhw+mIV1t7jOB3
-rbGrzpYFgn1fZggmRrhIk82Lf3cTlSe5AU5/3625wrYpNUkYzS0cgkIA+vTjWo0N
-2bOpNXSJQobx1mILAivJHyjcz2TU38Po63soohfjyj1qpDF1FNKcYaidbR7ytFXS
-V3NmV0eoXmstXDMBsH1r01YtVxs6zpHSWkoZDEZTixGGxhJdPqyO0eQo1fCzCg0k
-AlIDdmNkfZAJiguSz8ZOjhIbhBrED7jyxl7q6bkfzC99rJwLSHeXk4h9bsGNdcFG
-WKByqf2HACL8J+XRpiwUX/lF8YxQ6PkXr3fWi4/i6zrGMa/Mu2U+RKDzFEHTTbXc
-nPuk4fY8aQt1FCXIjqBWUmhy4S/8VFCYKzru+s7NWNxFQsTzVXA8A5E4/KxOO4Ui
-jkUACXpPNWH/wAN55j5kZ4GwfvNDhQZ2Q/kiQAAWkcKUoYrQVrfB/gPy+eTTfa6N
-naEOmfnrFKuN0C0rYr6iLloS79cwvVSqZw2IjNsrcvAB7anhlUM=
-=iVON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+=AM/3
 -----END PGP SIGNATURE-----
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz
index 0c5cc77ecc00823eabc6d6b017459473f67626b8..88a05be6bc960cbbbde0a182aa87a57934858a8e 100644
GIT binary patch
delta 4215
zcmV--5Qy*0*%^r38GwWVgaU*Egam{Iv<6^C0}KYcmt#f-jRBvx@kR!n0e=qtO*x!I
zL5*ApI2N@mza(|tsXDbP-)oEK%WD1Dwtd_uPL0?B^3BGz9Ai5~z?9mZ1E+>%BPxY9
z&#ki&rqYoL+)7AS1aeQ~DUKpPjOPQ<k|Vbls>1wF7Gv@7<JPsH#WQS)wUq990bpM_
zQS~1ENP_n1$F@FIU--yVIe)O6HC6VqCXj5GqyxRU>Iz<JfHB<Rn$2H)pylEmYSmHz
ziK?{KCCh9+l`~0k^M?Dq=evRveqVCp&-@nf^nDUX*@L(aLfVl7bdIUG8kq~QoNwEF
zkC{8@-J!fP;my}fv|o}{*(L;yBKzwiaDq6<YzMf;$*D4$W3$eI>wk3vu**)Zm(6q`
z_`O$ajS$*WE@%}YL>~Oai^O0hOC)D6<P=%p%xMN~w7e}9n@vJ>0RnZ_ZL?p+_a`1|
zUpfnG!&YNe&6!lkk18O<;ImOS@G9>iBl^o~{l@a~qjx&IqXW3Li{IerTbEelr8A*x
z%hWVVv6RXGt5Etxn|~u&&k5m?{+!#~eor5qB2e<(O45BJnCjqj<y)qru1BX<We)Ad
zP^f_}@Y;IML8uEjo$qZ+ysw@tg=?0b!NaAC$B0^2KB_=lGAym>2XVhG#hIkr>GWFU
zFenJ5I=|)9bgpH4I;gv|t|S9anb+Wz8R4v7`CHujncw=5&wsGDx9f<<K-ldgHjO2T
zgPw?~yeZ+=S#E>&s)T9|rfM<@erNt+FRPCa!aAueo$_UoWxQ!or}gLAfm&259J9xP
z8x;=OFh+n^4}uH@R=9#%n`~Ca7NzkFMcQtny(6bAviH93+S9!_)yL=|Dx(FcS#mzL
z3YLbmrc?0_aDOBM=+V3-yY5KrlKPsCM_xg1Y({%X&mXt1@u$C)fKneb&3OijJ$)_!
zNL>J356g24epzd`BHGHxP3^yaT?$f9C=8jTzUrKMb)se&z4OMM29vC)%Dm<vTmD*b
z-xV9rf-yan0g4al|8<K&6*?|Z?a=<9dV@5nd9|%0{eJ+_B+OhQPQny%0~qV2{A}4O
zl=!-IQ_-ab1nh_s`)@cpHv@6jZfP<5vjfQ*i37o|SK3y_N1}lFvRc2ThmVh&eXnK8
z?d<C%JNlO=?VLiGld^Y9k9bS@OfY6p^f0L$?Inw1uN2(uGuKXU_;?fRZI|=+)g7e7
zkW+j|Eq_RqZI&o@b8fSi<lZsA5QGlYSs@^~s<!EpX0wV?M0H}4H_idjtDhzDNgxr{
zBUKU*N*uQ}66GaK%KJ@QPix!kP$9+VX#^7%^#RHdQmAN&e(K3YSwNa)e_5>`>ERE_
zbfvpAE}@tkHZ#CULmD?bYK41yOxj4UyltmlWq+GBr_K&yB}+PPwtU#UF6xZo&6U@G
zC!a;4q=S{hKw)7Vin}<UU!0jylkv(gb^!>N62iV|Rey0`yl#f8N*-IkbFwTP8tw9K
zo}@+bvD*CnNq8E$GJ^L)2QN!OReWS_%0~k_k`<KIWwD7`eQNF&v?EK}=iQ*-FRPXR
zoPXa^e~(%rZ<WJL5izUdB1f~fGtMYGcW?LLL&L4p@6m}&-V%tPb23%fu8Be@OUwhy
zC{ULsA6aqJrA=G4e52f9Tis;B;^lqTmhy$=gEm-!GZH}L*)c(}?X~3pY<m3AFU@(?
zWNHkB3RWhAV~MLgPHO?c&O@fKWHut#>VL|UXUW=^GhQKY>y{EUp_JO`T^2P`ntw&7
zz?_!_bNLXmDSJ3W1-)=eNCuDUWFfCmrv?ssc=#>pWSy+J^0jreBHKd$3Xl<ieoqjq
z&a64x>3}gcY?rxlNlfgZRYm^P-#X>a9qvHOhWpi*Uu&=d>^3?ku7~=;0doBxw*njg
zw*^iH3IPGXw-8ST2L*q><)m(5d%VSTNneQ{c&elo;w07uB74^<X_)1L447QJ@@xbM
z@3|GlU(X?Vg;Q?k<}W8t{d9(~sv>e{`#VaD-x7ySxH?rt?_%T-@)Ikk_6s`wkxV~6
z>?Xx7s;J#srsO^Nbg-#vB<J!%o2}m)Om`~esbgJJI`BLu`<j205QwU&t4p)DUo~is
zA|X+l>D?SB&&u;kOI_?2ovcWfIgFcha=f~MRb4dQ0v)#}GlyB!;G%RU@0+Z(ARZ@M
zR;@9;7TC;1QS`zOtz?Yd86^9H(#WD=b8~fI*Mx+e^mK>osIV`ma_=czaUfakmvnqV
z5I=o+>a=&<T5W&uXl(i<UbG8)JOG(<3jNe@CTct*coV06M%6RsehyvJh7%fm3W?g`
z_SP>00`(&nsu%sCifVE4Pe>d({;G>zIJ4eXXU&n{Y);ZSM;r*QOeuKYAJ-gPnd%3a
z{|SJU>XI6=H`#!JqWZd&>`rae?9Tu<!T3}ln=!eqFe!h=d3DXZ@+vWy7z{Ac%4<66
zRM`prOO*fJm(StD{^-<aEpFLJn@^Fdx=-OGC7Q33qR8G9zmvB*jO5gP_RFn*9ik4W
z>WinmN+m%Gv6#0_{A%KAeTb=20RFQlV$aGZI%*fP=2PqQ>dWVz3vq@7mgn5C)GZ2X
z0o<LMVNrhtDq82=k9>HI%7~}g8cPGrETvL6(Rx})JbHBTqDA^%_X1~#>+5R6`x7mb
z6{B-5YG~^CHOl|+s?+C05*0w#`0(Bi8^1<w2%jL&V{0ZW*QyI3b-yxYsj;aZ9V7K1
z7;=@s=6oFQS#-PemR)!5o>W8(cAhEPYSIvPNRoeH16cZBPG-dqEYId7C@QyCyx+*H
zX+NykJh5erZIqrL#k{=;%0Sia&`eO9ls9^F@=SxLqR6`T%<)Ac4qj;A%7<FZC1-o~
z-L1+n7kRep_Ef&0)1SWl^}&6$p`x)(E4Ex%xRZ@tXWHZ3#bFWP4<!wu7W`ZsRq~qn
zVYh!>S_CVVF_bA}$4WmXI0q-^r+N%*6cwA!MU}f+)QpEz+TCAK^DUn0)q_yHvWVHu
z8~3jPWFY;uwUKlKJXn>bOQFu6=8v&|lv=cop(i~?_v|YN&K^`yg5uGmnrtBBy*5Wi
z9B!I1b1od?5Bpo5zp5<m)%wBmA7Z+^c4B{ZzBFi5*ODJTy@L1X6kRU057rKJZ>5l&
zr~~jRV8!M(j3?3aF|{utLta}zr5;L4s`bRqx`mj97f#tCMLj6I5pDX^a=%5u9}cYw
zF3R>^&LmF?j7+xGEyS8qeesc;#agWBY);tNW{{+Q>rQz;ieW@G8dQB!>-g?QSZ{wj
z$3@l-oI`e&wq{*5d~f<l11o*0s(&QY+1&3L8~-LCqL;bnx(}-tip8eG@F_z{xwv2B
zLfIBrG;p5ERO>5z>3ykg40-<!w_|MVg6S3LIk%SVW!$(~ThF<w#QH!~Ez=Kb@mE!?
z?!a=YUS*j8PFALHdwU=Ij^EKyrA~h}ZdOg4&}rY$Ly?<{b#ARs{Uv}y-YqzuIuAv}
zyt5FkUFy05AxR)n!=z4%Umzy?pkG$&2g`pbvj}gL2T;X}2yg)Xl<<ku*10i!KI(B^
zV53utc~{TJou%CF6P0SBu#4KMWw6^MbMp-VdE4sxj6`oy=Q=xQIiALp&C`E~zvhXa
zcU7(KBFOI!!6T~Oref}=6KzSt?AA~+57;_54(DY<bP}pK-+JphIOX7QlqneJu~j!5
z?&TeMF0MhkK0~;++`QBkC)%CZQ|9H*)p|*$f6O#rLlC~ecHK)>;J1{Tw(asZm(&j4
zQ*Md2`3i(E&B+EwM57fs6PJIC%j;0)w?E23Y3e3HVcOCyWG=QP5##p4%?6Wvx1u**
zN^hRevaZrz5P(Faxq-gqOyXfsm9ZSxwvcDj%2Mz8sxA;N(5jr?<g4$m*J37kfmW+-
z<NC6Ia-MJmGA<Pvn0R<yzG6S`Ew7n$GA^FozpmE%J`wQop@i2QSGa$S%e?!87h#_|
zD&pF<3Rnr6o8HudlnHib4)tKW1}|L`<LKlINNmdetx90IroYA-Y=5UyQ`EfeWa~C;
zit5%W{1NNx&Sxn-zHhd&iAPnJMfFnDdstqUIXtL3=u(VC-#v||jcYL{4&~!f>#ET5
zKx*Ab^&r4`v1@XW9h`rX&oOruswtAw2VQF^%p22})rvoz=8yYC5=y$IiZqR{LZcp5
zAiJvO<%ov~TBsiFFdv8Q07_bG2?rfpy{Lo5H5vg?fs}G@F%Y)=J=5jwU%YN9f({tV
zW50+j9BDyodz*7^vVXOjstcHM?C_{T3dLA-wDyQfv+|k@gU)~DN~mz~rZh=v+xhQl
zi^IqJ((|ONa>o0ri=(EkZ?Mm-_7kWT=%}=(o}yx>n7^#nFDwsKd{@<%Zp(Z)4I)*l
zf8rD<gzIr4Of+s+Dk)R9Z_ljHRQpnrj0&7sS~<oSJDyUa1lb5djCw4)C{!#qr<&sp
z;`7eFaIWo;KAwN6wcln@20e<%TZc0l%S12LPxZ#>Uj7iBNdg2MCk)gW)|%wtm=@)d
zl60L##U1p0)WqSi*Fb%uQ(!E28P;=Ci7uTjyJnMzbMGpw^T1zL>lc=nKk$z7%1816
zf_-uQQkJ6KQ-c^4Jb^xQYwPd|1PIDB$-cjA;s=$0y&r#S;gRGeiOWkh!utizEwXM-
z2h%7D_2<$~(2n-%013%E>207mqqmFKR6tA*9%nt4BVFO7!nZfSsRws3mxk(q?!&3l
zHQwMOtxd7H=nN*m^4@j=HnyFfjl=e4P{xUu(3aAymMv6>Dv#7ZCcyV<{b2bIl|^EW
zQ_<1+phtg4-rI_9DAg@zfs@y!1abDv!7&Mk=9^=Wz}?%`k-Ts3Z3wT4WcHqt?<_v{
zU-$r&ktVC7vrjql-5h%QxP`OuHjCO_zIseWO^NAUR}}E%h?hF6#3E`59rU`|E^}A`
zs>-GMv0UMG&9(EU<UuEvzzx(NXR(>2P}UZE8_q~IMMEEuY$>Cl-MgIcFRN95>?S|%
ze9r5XmdG(a$&1C7vQ*-1br&SQYwdcbOeQC5-%hzWBbLkBJSL4Tw+Mxo=a~pLd0PIr
zO<e{}4}X7It=~NeV$NF+VygObs0ORiua@>_(b!UjeO?WTX6m^dd@si@Nn}L=s)}k|
z-gA%#9-rshH)gl0@^UsFXZxcw?t}`7@19aSJD0rzL1^`Lyby%f5mWK_3s93ED!H3~
zhQt-cjvYtjuqvYBlm|;9G0=H~V1tM);<V(W!GG70cQ;UKl#uz-Ky_vNy(){}q;H4M
zeS7(eYT;fy%9qvpeV<rACX&v_>!svuJNWXR-Ksbic}tHaWIU6a0D};@1lg;R06nE7
zFi|@QmS4<Ibd<#=`J8(ym6v8)Ea)}P7IBQ|np>C9%gDqhx30QgQGS#B0or*hPp3_{
z<!~EVhOh(YT0Q7jeR8m-H+q>Rvhsht`ch$6rw(2#!GaRHX|EUkQ=1h8RB-Fl<=Z~x
zaE3O?`Q|v1MR?HG|KVT%<=_7OKmPe2|NdWpd;ah5{cr#KPxC+j`^y*q=Wl=eufPAp
N{{wTg2HEQ}3;=)@W<>x1

delta 3897
zcmV-95619_+!@T-8GwWVgaU*Egam{Iv<6^C11tu!mt#f-jRCK>@kR!n0e>6%n{qgb
zf*QFHa4c$Beo5-OQ*~-pzSkDdm(}{QZTq-SoEotM<eQCaImUK~fGM>*2Tl#kMpO!I
zo?B-lOr;|gxRsEu2;`o|QyfKp7|#cyB}Z;ARE7DUEXLyD$E|BYi)YvpYbo9J0>Hj<
zqUt^Rkp%72k8ORbzVMN!a(`esYpU#JO(5AWNe6my)fK$d0AskrHJiWqK+DBB)T*Tb
z5>;udOP1MuDrb`7<_-6I&vykU{J!MGpZP7|>H8#(vIlV;gtQ|E=p0jVH8K}qIp4PV
z9y52)yF+<p!ke#|Xul+@vP}pYMfTT4-~@4y*$!}xlT&3h$7Y=a*MI8<V3(a*FPrH?
z@O!V;8X>f$T+k{)h&=d-7m2}2mPpQC$SJbGnbQo~Xn9*IHk*X%0tD);+h)It?@v6`
zzH}DWhONe`nlq`6A5}nz!Dpjv;8os3M)a4}`i<q|NAGlaM+b0g7r(*Lw=S{9OJ_pY
zmZ@o!VkwjVSE2NYHh)L5o)f|&{W-U}{hmHJMWE!nm8APdFxA25%C}5KU5`$!${gB@
zp-=-|;I;LhgHRW6I^WxtcwaqP3fC+<gNI8Oj}f)5d{lw9WLR3$58{4XiZe;K)9JOy
zVNeiAb$-jI>0Hb9bWnF^T}cL<GOxiaGs0QF^0&D4Gr#pApMPO*Z`Tozfw0?0Y#K`v
z2R#u}c~io#v)l&lRSDG`Ox0u*{LcKtUREC;gmqF`I_1kE%XrhGPV3LJ1GT7BIA)In
zH!2*mVT=H;9t0T*tZ)UjHrcF-ElT4VinQHCdq+-LWbb|5wWoV=s*lk_R7ML>v*dhg
z6)X*BO{d}=;D1O2(4%=vcHNQKCG|BOkGz83*o^j&o<DA1<4=Dp0i`}>n)3`4d-_}e
zkh%c69+u}8{Ib?=MYNTXo7#W<x)h|IP#7{vebqVj>O{>ldgqNh4JKJpm3hrUw*0l=
zzAHAK1!H<D0~8<9|LYcmDs)_++M)eH^#*BD^J-g1`hNkUNtn4roP;Uj1~Ar3`Ps5n
zDDidarlLy=2-p!N_TO-HZU*A4-O^(AX9tos5(k1^ue7a<k3<3UWwm}w4<8>l`(DeG
z+u7GkcJwb#+Bt<VCuQ%J9`Tm)nPAMI=wVVh+DjJ2UMaZQXRe*z@bM<r+b-wtt2;=E
zA*c9`T7Qrz+bmJ+=G<m2$-QHKAqX9)vqC^}Rc+HH&1My)i0Z^7Z=3_5S3gVQlRzS@
zN2(+slsIl{B+5&el=qvqp4PV6p+bt!(+DOk>I0M^q)^ck{nV3*vVb(p{<2y>(!(E;
z=}LELTtYE7Y-WIyhBR(=)C%|Zn6!~xdD~9A%6~R%PMsaZN|tooZ27QxUDO%Fn=7yX
zPCko7Ne3&1fx^N#6nAkxzc@3aCgYV~>;e!jC4_y`s{Z1>c-;(Fl{~h7=VVzpG}`6e
zJV}e<W3~DDlkhZhWd!eq4qldms`$v<l#d2<Br7PZ%VHC?`qbPlXh)W`&$~gvUsfys
zIe)*U{vNeL-YSQgB4Sp@MUG}|XPi-X?%wXfhlX3H-=h<myd@An=VYp|T@!^+mY4^Y
zQJ^kOKC<GbOPjW8`9`_Jwz|oL#moDwE#(W#2W_wdXC#2gvtxo{+iS`H+4T6KUz+o(
z$<!DM6|77K#}Ze0oYn$>org?e$!tWf)qj;I&yuw-XS_n*)-5GyLMgS=yDVy?H2;cD
zfjKV==JFwAQ}%F%3VPv`kPIHx$wFSCP7NIN@bFvG$vRnc<!kF`MYe_h6(A!3{hlCJ
zomq3X(*a{@*e-M9l9<>*tBU-ozjex;JKTYm4fm@rzt&&_*ll!7To3hw1LXQYZUQ&{
zw*^iH3IPG%w-8ST2L*rs%1PbA_IQiwlD-l@@Ki}F#7V3RME0&z(lE;f88Eqc<=F@j
z-g7I8zn(+#3a8x6&0kKQ`soZ|RYl~^_IH#Pza<WvaCNGP-o?lv<R?~6?H6?VBbk1D
z*iDLER8hONOv!uj>0ndUNY3SjHe0_pnC?`_Q^&fdbl`bR_BDSgArMtlSC?jQziQAN
zMM9!9)4MrNo|Wg7mb%z4I$4n{a~L=2<al)htGZ~q1v+j|W)8Ec!A0pz-ZxomK|D^j
ztXgAwEwGu3qUePmTFDr@Gf4IYrIAI$=H}|at_cY_>FEyFQDI+B<=#`c;y|+6FX{M#
zAb$Gt)M@Xywc3B+(b)7!yl5BpcmOiz6#A**Ow@Qr@Fq_CjH+kM{T#Zc4JS1C6cV+=
z?X6!11nNgDR4@8N71iS8pO83o{8bmbaAv)&&YB~?*_@<vjyMopnNsk)Kdw2pGSv?-
z{}TWy)g?7#Z?XXcMfG(l*`3;`*`EP!g7K+9He+&IVN!pL^Xi&+<yB%ZF&JQ?mDhCC
zsj?ILmni?cFQ3DQ{n4q<THLacHlHF@b)UjXN;F?5MUlNJekX5r7|E&o?3Y{rIz$~#
z)fZ2Bl}dsXVli)<_|?SK`Vdp40Q_f9#GaK+bkr_n&8ODq)tApb7vc;FEYG=Nsaq7(
z0=PRh!=ir*RJ6{!ANlYal@U*~HI@dLSxTjDqV=?pc=YJvMT_*k?gh>e*VomC_a|B=
zD@NyB)X>!NYn1=tRj1F1Br1Te@!`E4HhzuV5I#Yk$JR_%u2mO6>V9R)Qe#s+I!5Y2
zFytzM&G|Uqv*>o`ExYdAJ*kKo>^xJn)ubWpkR*S@2C($MoXm<JSf0&EP*iTOc)yWX
z(|%a7d1A{L+bBIhig|kxl!2<-p_!mIDR1=V<e3IfMUi#wnd6H@9K6uJl@GO+OV0M}
zyIYlEF7j;G?Wuf0r$2r9>x27hLq%hoR&2Sja3>qP&a}t5i^C$oA4(cRE%>=Os^m5C
z!)|}Ov<OxzV<=O|j+K5&a1Kt+PxTnsC@MCciz;`us2LBbw7b8e=36|~s|TTYWf8NR
zH|}2p$UypQYa{6fc(5u<mqMLC%^zd`D79!ELr;2)?%7ukoIR+Z1jVCAHQ7MMdu@)4
zINUU2=3F?&ANIFAe^puBtM!BBKg4u-?ZkiTd}+|At|dQwdIj&%DY{&0AFLhd-bx`k
zQ3v2tz>3Xn7*C?-V`^VQhP<|bN<Ea8RO^YIbqg^IFPySPih59ZBii(-<$jBRKO9;W
zT$Js-oJpP(7@2IVTZlEK`r;!wi?vwM*_^Pk%^*qr)}8Wx6vK#WG^qNd*74nqu-<=m
zj*F}vIEU;kZOyuB_}=u923Gn~RsTq)v$@|hHvUaOL@#sCbsttQ6pKxV;Zuf^a&f=L
zg|aQMXy81Rsn%Ec()&`~81nudZpYZz1=B0gb8ao!%eZl~ww`lUiS>b~TBaY=;;*V&
z-GSv)y~;8HoUBaY_VzyZ9lxWaN}Ydd+^m{7q0_#hhaxu@>)cwO`bz+ZyjyTQbsma{
zd1oP7yVP|BLXtqDhDn_izd%g(LBFil50?K>W)a>f51@({5#Rv&Dd7{Rt#f1eeAMH-
zz(%JO^RAwcJ4?CUCo0uMVHdSi%V4)j=H?p!^0w9W8HwJa&UJRqay*SGo2P#ff6Ws;
z@2XneMUdYef=5)lO~u?#C)$#P*{z{u9<X(A9L~#z=p<BezV+61aLU2qC{r-bW2<gB
z+{-)iTwH^6eTHytxp}E8PP99*r_9TrtM!sh|CnjMh9G=_?Yft&z;7uvZQJE-E~y>7
zr`!^4^A!kTnv)HVh(;@NCN6&&m)D`pZ-117($r0Y!nCDZ$XskoBF627n++!UZbfgr
zl-@j_WnHDcAOML-a|3<JnZ(1ODq}gWZ6VL5m8IVGRb3!lpjA1&$yeWBuf<I80<Biv
z#`R?Z<vigCWLzpTF!AuZe8qm=TV6BiWL!MEe_gHjeInrFLkX`ru5f=DmwERGFTy@`
zRK&Gy6|fRCH@&F^DHH6>9O}V#4PLq?#?i?akl2*_Tb00aO@ECw*#1tZrl@(_$<}Sy
z6xFR$_#@WWozGHweBW$k6OXDci|VDQ_prPyb9hj7(4`oOzIz%^8`ok^9LmR|)>Wb9
zfz-N>>Op|>V%Ov#J2-zOpJVPSR8u6U54_e;m^Y>`s}+Ab%^&xPB$RYZ6=@n@g+@KB
zKz3El%MlL~v`{_TVLlGq0hF}X5)L}HdQk_9Ycv9)0x9L*Vjyh!d#20Vzj)nJ1RXGz
z$9@r6IMRaF_BQ9-WdCY4RTnVj*x^xw6pFFvXzdY|X5}>*2AzM)l~Cc}O=*(Uw)5Z9
z7Ke}brRPak<&5`L7e`H7-(a6v?I%zx&{1hmJw?S%F@IUDUsxWf_^zri-In=q8bqp8
z|HLU!2-o98m}uOtR8ppH-=0~YsrIEL85KCOv~r9uc08p-39=D_81-0oQK(pKPBq6H
z#OIxT;auAxeLR0tYroB+40;riw+?4AmWf`fpX!a%z5F3MlLQDjP8g^$tToBOF)hj^
zCFwegiaY50sENa2uYvkRr@&b5GOXvO5?wl5cFiUa=iXIV=YhYh)-NnCf8ZVEm5<~D
z1pDIpr7T6erv@=9cmjRq*4E(_2oRKMl6`;K#1AR~dq02F!XwE`5|@{1g!c=aTV&mw
z4yI8Q>d&Q}pdIbi0TPmT(%V3BMsF9dseqUsJkEM7N4mmEg>P?uQxEQ7E)CTI-G@`9
zYrMfnTAN~X(HTsB<-P3$Y-~F{8;9-9po|kQp)I9ZEnBD%RUWB-On~pz`oZ!aDvQJ#
zr=p|tL63iqytftIP^w$b0w=Fc3F7RTgJTj7%{Rv$fxEY>BYEH6+Ynw8$?QEP-&uU@
zzwiMlBTZIEXP<K9yE*jqaSLbRZ5Fk=eD#=$niA8yt|;Ki5ifOCiAB^BI_Pz^UFNU?
zRFzBhW4XfXnrr7x$%9TTfg7kl&SEo3p{y<THk?RniiSQQ*-}P9yLUO?UskLB*iC-i
z`JC4&Es<k<k{63DWvRs3>Mlrp*V^?=nM_XBzMXP$Ml6@Lc}yBxZV?JE&odEh^0fT7
zO<e{}4>JG5zy8a={ri9X^FRLmzy9|8-{1S+{`a5efByHEFaFQp{`Oyg|A+qvZ>QtY
Hk1z}X`kT32

diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-11.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-11.xml
new file mode 100644
index 0000000000..915c8d2867
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-11.xml
@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201804-11">
+  <title>Adobe Flash Player: Multiple vulnerabilities</title>
+  <synopsis>Multiple vulnerabilities have been found in Adobe Flash Player, the
+    worst of which allows remote attackers to execute arbitrary code.
+  </synopsis>
+  <product type="ebuild">flash</product>
+  <announced>2018-04-11</announced>
+  <revised count="1">2018-04-11</revised>
+  <bug>652960</bug>
+  <access>remote</access>
+  <affected>
+    <package name="www-plugins/adobe-flash" auto="yes" arch="*">
+      <unaffected range="ge">29.0.0.140</unaffected>
+      <vulnerable range="lt">29.0.0.140</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>The Adobe Flash Player is a renderer for the SWF file format, which is
+      commonly used to provide interactive websites.
+    </p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in Adobe Flash Player.
+      Please review the CVE identifiers referenced below for details.
+    </p>
+  </description>
+  <impact type="high">
+    <p>A remote attacker could possibly execute arbitrary code with the
+      privileges of the process, disclose sensitive information or bypass
+      security restrictions.
+    </p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Adobe Flash users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose
+      "&gt;=www-plugins/adobe-flash-29.0.0.140"
+    </code>
+    
+  </resolution>
+  <references>
+    <uri link="https://helpx.adobe.com/security/products/flash-player/apsb18-08.html">
+      APSB18-08
+    </uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-4932">CVE-2018-4932</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-4933">CVE-2018-4933</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-4934">CVE-2018-4934</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-4935">CVE-2018-4935</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-4936">CVE-2018-4936</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-4937">CVE-2018-4937</uri>
+  </references>
+  <metadata tag="requester" timestamp="2018-04-11T11:03:48Z">whissi</metadata>
+  <metadata tag="submitter" timestamp="2018-04-11T20:08:20Z">whissi</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-12.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-12.xml
new file mode 100644
index 0000000000..097160fddf
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201804-12.xml
@@ -0,0 +1,50 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201804-12">
+  <title>Go: Arbitrary code execution</title>
+  <synopsis>A vulnerability in Go allows remote attackers to execute arbitrary
+    commands.
+  </synopsis>
+  <product type="ebuild">go</product>
+  <announced>2018-04-15</announced>
+  <revised count="1">2018-04-15</revised>
+  <bug>650014</bug>
+  <access>remote</access>
+  <affected>
+    <package name="dev-lang/go" auto="yes" arch="*">
+      <unaffected range="ge">1.10.1</unaffected>
+      <vulnerable range="lt">1.10.1</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>Go is an open source programming language that makes it easy to build
+      simple, reliable, and efficient software.
+    </p>
+  </background>
+  <description>
+    <p>A vulnerability in Go was discovered which does not validate the import
+      path of remote repositories.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>Remote attackers, by enticing a user to import from a crafted website,
+      could execute arbitrary commands.
+    </p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Go users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=dev-lang/go-1.10.1"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-7187">CVE-2018-7187</uri>
+  </references>
+  <metadata tag="requester" timestamp="2018-04-14T16:24:01Z">b-man</metadata>
+  <metadata tag="submitter" timestamp="2018-04-15T23:23:53Z">b-man</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
index 688d038381..14d5754e1d 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
@@ -1 +1 @@
-Tue, 10 Apr 2018 15:38:27 +0000
+Mon, 16 Apr 2018 16:38:33 +0000
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
index f481b3dc74..3c4f54fe8d 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
@@ -1 +1 @@
-6d341a6c00fd52a41ddaf7e932d941b6c7f9bf88 1523293654 2018-04-09T17:07:34+00:00
+aa26a212e36fbca3a9091a00250a459fd6576eae 1523834733 2018-04-15T23:25:33+00:00