gentoo auto-resync : 20:05:2023 - 10:17:50

3 files changed, 124 insertions, 11 deletions

diff --git a/app-crypt/sequoia-chameleon-gnupg/Manifest b/app-crypt/sequoia-chameleon-gnupg/Manifest
index 81226012d9f1..00feaa0763e8 100644
--- a/app-crypt/sequoia-chameleon-gnupg/Manifest
+++ b/app-crypt/sequoia-chameleon-gnupg/Manifest
@@ -1,3 +1,4 @@
+AUX sequoia-chameleon-gnupg-0.2.0-sec-fixes.patch 2914 BLAKE2B 91232aab0fb2612f43ed65b4dc4e2770595090550713a1b39a900f3e4b8e5f298536c4f2c32171ca926528092593e103478f143af5d3bc5b7213af0c439fc546 SHA512 b89f9f47289bb877953fc025c4ddd59351cd61d2f027b7bff34465ae7b91f8b04a8d05ac2df3157dfe3a6f97d35cc6bf21eb92d528345a596b840c578c4636b7
 AUX sequoia-chameleon-gnupg-0.2.0-tests.patch 1959 BLAKE2B 13c41928e6778d1268fdec42266993f48590e93ec4735a7c7dbaaa2084fc0036b718f6ad0aa38db471d967da8a7420a8f6a35613066868edccff13e6d955c307 SHA512 d103f5f06cf1dbf0ed8ef1aa1edda03973dab3eddcab95dd6207710cdda485c2f7aa274d987aa26194293e5e71b0ae66814c2c4a08b0841aa27e974838945e56
 DIST addr2line-0.19.0.crate 33210 BLAKE2B a6b393dcddfa0f858297efb6b261d3a23f118be45a3211ee15f6c58808f241dbcf5282f4a86be579360513f23ac4035819e923f2587b7499110af42e9ac3ab88 SHA512 18da72e412bb89028e2ccb838192330535e45300f6fd8edc7d1d64397792a3db12418aa24a3312730c5414e2a1b1d65e6b9d5691ba234c9142b5d885523a5e94
 DIST adler-1.0.2.crate 12778 BLAKE2B a1dc17786adae945ac09d3525e609ed944e6465690787bbb831a1b9d53793cba1989793d0a5606d5d23ee20d36457923d451b1b3530c9ec7072a487aa3e55bbd SHA512 7ab190d31890fc05b0b55d8e2c6527a505e06793d5496be0b3831e0513412f9ba97f8148f6f68ed0770fa9cd980a5092d885e058becf1d5506b7c74b82674aa1
@@ -10,11 +11,12 @@ DIST atty-0.2.14.crate 5470 BLAKE2B 2db856a9e898a430258f059aeaf7c844a153293e8856
 DIST autocfg-1.1.0.crate 13272 BLAKE2B 7724055c337d562103f191f4e36cab469e578f0c51cc24d33624dea155d108a07578703766341fd6a4cc1ef52acda406e7dba1650d59115f18261281e5b40203 SHA512 df972c09abbdc0b6cb6bb55b1e29c7fed706ece38a62613d9e275bac46a19574a7f96f0152cccb0239efea04ee90083a146b58b15307696c4c81878cd12de28f
 DIST backtrace-0.3.67.crate 78564 BLAKE2B 8c77d3d182c7e1ec3840fd6c7f4214322e473ba79a71b2d11d98696f8ae4440350f3c84a891b2ec79fffde107fb2ebb99fffca202d6ed235d3abd68215a1089b SHA512 8603a3b63f4f08be315176908134243680bf1a4b0e6cb26ed81f5fc1060279126ca0ef28f209a10289e1a85214b35db6b496affd71ad21524094f3ee3acd31b6
 DIST base64-0.13.1.crate 61002 BLAKE2B 3b3a5b26e2ef18e9b4f1ede72b1bd160a1494751878e8441d463f8a514e6cb9ac859231536989e19fb1261fd864617fe31440df1b5855a0ec625521fc6fcef91 SHA512 1eb76aff9a84057f2ccb7082e9c57b015c2d71a28173089b02e7aacd09a7d311bedf0a943529611ada29f8d7b536d7ae4de256d98eee8450003a3a9a652bda4b
+DIST base64-0.21.0.crate 72180 BLAKE2B c7aeaf671bdeac67703f9c4ee1be003eb8d6f46fbaa0adf61a4da304458742938db04291d5f626115e3fcc901eb3abb3f9baf8247f6344b4d49f60a200fc6fd2 SHA512 60bcc157c6449a2160e083611e6d53e07bbff7db8cd550d9056cb804e99e990d4a20092ba4347306a3c6b6c42474a06d92cb3895125c50cef9b74cd3cbd83a2f
 DIST bindgen-0.63.0.crate 201856 BLAKE2B a99470e5878c90d0ff4cdcba5d16177eb765822041203c7224f9baf1fda23f83d92c3b9cd83759ed9ca779f9d3961509b4d7e038b716b9d68bf6563743ca8141 SHA512 43ac3067b3635c968c3a4bf6d665d633b9b80ff4eec36aad353019fc16e25c2338ea3f00a7fb077ae0dc055d10ea3ed6c304055a18dcf0c31bf980c26b110796
 DIST bit-set-0.5.3.crate 14470 BLAKE2B f6525500a494236103df2b27e964bae0b2caf718156879f972b9972fa509794bcc663c2130e3d872ecadb7ead0982b415dfa4468ef12523ee248fb1bbec2559e SHA512 c5ce7ef71559706d996505e138ce95d9f008ac3375928012a36339bfec48986ad935b384e2d21fa0d505d4cf98bd3e93be15955ecd9607d253b8a276351334c6
 DIST bit-vec-0.6.3.crate 19927 BLAKE2B f5bd3bb9c87fdf3b206739b74df20cab50a1a45af3a58b2642a5a061c26207884be58ef8369a3cd06dfd3615bff0ce15915fdd4b6b6f03facc4a0f86c0b7e910 SHA512 b4b4a82c80d0ff13527ae4fff449ac9c1c7bc519c013af6ea3428348e0e5b9306b725c0a13a42d7d9dcf0f895a9eee0c63695a2503eb7fd2200083c9ea3a9aa8
 DIST bitflags-1.3.2.crate 23021 BLAKE2B eb990bb27b2bdeb66fd7212ce582cb36e1c616debbac85df642d0c82b25439e6bf9b1e811fac76b59e58ea3c1bbea6170d03a61e8f9a395e4334a0e2e2987eda SHA512 3c698f757b5cc62f815f9a1cce365c3d2dd88e4db71f331dff8bba86c2865f755b81cb4c9bfc59bd86b7643b0943f9e09a7c4f8ad75eb2ab0e714803d0129f62
-DIST buffered-reader-1.1.4.crate 61347 BLAKE2B ff722a8346bb4b644c0b463168337620c82e28763c2251afe7bb14ddbb981217b83495d18b5f6389beb7e268045d6a3daa9f9ad5703e2eac9fb90075a235ee15 SHA512 1d5cffd9c02f0f4cdb550764c75cd22df44012264710530fb36a9c77a5d64d803c14ce7a4f1244511b3895147e2f70f9dd8e7ad705222712f9846459ff36b746
+DIST buffered-reader-1.2.0.crate 62127 BLAKE2B 8ca2e10f69121a08169e082b34e2412502673f24f2c373c66c49e24160b340e9078fe16b9dccc4f1cc51f3f0867d9e605c04bb002abb61b8891618b95f79e8e3 SHA512 4e7f9d75720b10a04577220ead4ca96e0c34a573469f80a50288e156d7aa99a1820850aa69c3f2db0505d0204bbd3aa6bd4b5823925481f0358d13936ad54770
 DIST bumpalo-3.12.0.crate 81604 BLAKE2B 2370094f0c23a3e9b75c8e523e54637189543d9df90ae7ddc349d316054d3d1abd1319e51cf1578f1630be0673fd7f65d130469b2729aa32617372e8bc5dd5f7 SHA512 37f2228f251340e82c27f2b34da2af6eb520077b3809331547cbe4887c0b4791b1a7d75a017decccef162cd02a088d504214b7a44b484a7d93eb6a278b329ee4
 DIST bytes-1.4.0.crate 58080 BLAKE2B 99a9d343424e04649bd209bf2a6c3a089a6cc9fdb799968f8c3a711189328e4499df2e09cc6a2a8ce05d2cc668149b364cf30cb3b09e96e21d50a39519c2f49f SHA512 502c63b9fdcd36ed28ede55a63cd359dc7b28658ecd43020511d17d48d7c34e45aa8ff7e4b17770f12197451040c2b724fe68d2aa3ab4f81c9171d052f2aa000
 DIST bzip2-0.4.4.crate 34197 BLAKE2B b69f8ad38b44eb4912b33d53467492b0ebe6ed740451bdfe9133e71c47a8dbd85b1110a9607c4cc627fbabc44cd86fe0396bb545864632ffb6169f9cfa547b6c SHA512 9cd2b9159bd0b42ac908ecad41f0a737272af94ae0d6dcfe182d2f44bcea4632d32b0456f02322047ea9d6f46377db6cd083f468782bccd6126bcc75cb852555
@@ -137,8 +139,8 @@ DIST minimal-lexical-0.2.1.crate 94841 BLAKE2B e6b8919b80d938d0b98d60d4f5f29ce43
 DIST miniz_oxide-0.6.2.crate 54536 BLAKE2B 8127ebec5a2cee1c2101d9533da573e01ef1a0fcb169bb0fb1419973ddd2e6953d8dfe85f9509a5d1226643ad290f0ee1479fc68f1788ade7ddf9633d90bfe1e SHA512 250782e214572acdd11df87c2788cd5f78e8388d9b285d0a850918219678e262e8b9905cc88728f5b70d13920ef9d19c43d243dad8fbcc18f8c8462662ce1419
 DIST mio-0.8.5.crate 93993 BLAKE2B 6c20d66c3b5753234c0ab0461642b63e84383128db775c6e01d50bade5a69081f7da1626f87244c2c45c2451690e8cdca02e2d1ca20f279ba6f8401fb006c7cc SHA512 e92bbc1d06ad8d4311d76f878d514d0c91e47de2c511c54bb53096ad689012c3d1ffeec18e2de05a5f66c03ad83150cd45d31edd203e9b9522ece13be00bcede
 DIST native-tls-0.2.11.crate 29008 BLAKE2B 594511c364e639e309f32f37ae20ecfc5ddeeb39c3f7180c5f3f2cf304d8c323b977af933ffe70cce696a5a63e17c5fa7ddb119d46fc3db819a28e31a388640b SHA512 7e77959932f2859757f1aeb37b78fdd459b7b6fd02424f4b7399525b94c21d1f499a718775503b8f3dfe3b4b740e1cfbee77052a2ebd0994468addb3fa665e6c
-DIST nettle-7.2.0.crate 574708 BLAKE2B 27ed4dd6f5c1543be9dc00f10b955607b86808239449d56cbd47a1417685638b94f37752d3e854968f93273216213bb0e7a66b6339ae21c318b679f4a05c7a32 SHA512 a1c8480d2ddccbc41c5cd164f769f7c56a7f37d699b7c5025e8fb67c56319cb6a4209d529a1dd53da4c063342464532d88aef47cf7e2d2feb509ebb27a307a1d
-DIST nettle-sys-2.1.1.crate 28024 BLAKE2B 479bc5479a835abf0d959835cd2b57913180a9d0022a78af01f295f5db864ba82e3b240b63fd54fbcb51794f937595baa1fb0e41319a291ea5ed8707fa524dea SHA512 a9a299ae3e55d54603430fdd46c0b26d07ce21ebd94c759e76407ac97f5b9568808bdcf43d4981b550f6a416860e703314867a25939d985418bde922644bc288
+DIST nettle-7.3.0.crate 580277 BLAKE2B f70a60e47a633a399843a7d2cae466c3695e09f442968009c93a26aa40a806966c693765cd3f9e361e3e8550efd54e4c72d7ac3263eb159da850f55b7a8c52f0 SHA512 658b7c72eaa86c574ccec8c10ea4aa37480c1d7b92711a96274c7ea75d89c96d669d2e05145598c835a1f34ffb1b2be005cef278f7bf103b8d2c8b8d96213cb6
+DIST nettle-sys-2.2.0.crate 28559 BLAKE2B 87da765ad2e88e595a6fbaad4f3d972e72c0a1fe4b5e16efd91e9c0f601c307c3891586f27e9f6096224775253479a4e63b37f2c73133e5ee9122b53ca863625 SHA512 db72ab5f0bfd79230489d1310ba6d91ff55ec8d7229f0c21cc309fcf50aba6c8db44fda946c01642b4b9d348c7d113d77d3c13f7cc395f7fde7e9c50cbb6e90f
 DIST new_debug_unreachable-1.0.4.crate 2561 BLAKE2B 5c9831b04e2a44b2dd27816df0a331a8108991a84ebdfefe4e42f325ec3519ee50e89a99d490020a65a3d75acc371316c2253d2c6382453a0b15f4c3d5b96520 SHA512 6f964bb322aa8f2ff92078381dd720527600c6449e237b703278cbcf47b39a2581fddfc2f34ebb7cf31229e33d58de48bb5050e083fec6dad9aefddc1d771c85
 DIST nibble_vec-0.1.0.crate 11796 BLAKE2B 2e80648e4e18d17fdd41671acc1e166a8337fe1ec1765e5a7f08c19fbcb23ce43b11d1cb396b867b9a2c0ae58e30225d9b13fa337793d8c32abf99969e7c11af SHA512 21bc50bfa5f11f50b19a20691346f098db083ceb6891faed72fb91d2e911cee060ad4d19ee1c98792c5809cb6ab2bd65061bc051a1dea75d9096060b87497f67
 DIST nix-0.18.0.crate 209962 BLAKE2B 3ff822e3d49a6c477d5da3702fc88bbe270202acb4f7c449a78969ada9b8fc8855a90ee194bd2943dd27c28286b88e1b22a6003e08260e19f7c8ed6036bc2891 SHA512 b86660bfa2533fdfb945a3ef840c692b5d96108e3e73b76d6489b65039cde87ae04935d2f10878cab1ea38f039083aebf4ec9b2bb6ba66ee204be700e3e96581
@@ -200,7 +202,7 @@ DIST security-framework-sys-2.8.0.crate 17911 BLAKE2B ed066e2cb8986930bdcf55060f
 DIST sequoia-chameleon-gnupg-0.2.0-v0.2.0.tar.bz2 298591 BLAKE2B 7ae8a1187028a3e90e90c807d00dc1f1f14241101ba838ef18e2a6cbbf3ad7d9019ee65e76903072d1cfa4dca29e8dd84d8fad0687cd526625be438912fd07cd SHA512 ed8fae9f4d991267340e6365361fd2d3db9c6658d69a3b104bc33a4eb829220af24b501dda3013b219906e773a40e8bdbdb2468f46054e4b718311d9acbbe53f
 DIST sequoia-ipc-0.30.1.crate 4502011 BLAKE2B 5347054fa19f41a205820d8a9df00ae0c21cf183ec41c7d6eaadbbd7fcc5fef2d88cafee3774afcf1d715e89304e7c2378304af71e7a8b308849dcc86bf53e4e SHA512 ac3eeb3000951cb2d5c9864c6c59b92dc80f2fe859a57db254ff36db3063e85d0a0bf021b8dccf18bbeaa92d25b229baf7b0c86313b9c7584eb6eed9cbe01c99
 DIST sequoia-net-0.26.0.crate 32385 BLAKE2B 8fd7f257ca57082aaadba97a1a1727a193ef3a52caafbb427f8813edc23f8165402c22bc687c2ee7ca5981f7d94d1550b6251c566778835bd465c3db447bf5de SHA512 dfc72a28ec42cd0fc160e5999a9b86d65ccfe54e8f67f6590129ec2e0c0654f48e79bb522c4f7c96aae663921c572d17fed1279ede1d1077b3ae724bd25c4e13
-DIST sequoia-openpgp-1.13.0.crate 2912398 BLAKE2B a6ce2f437d5d11ed838aef15b4a0c8cc5fd11cf5fd478a61c81643788cb23ece375a77d7c1808bef3aeeacd58f66a8150e14d52d8aac1c68b8b36f7d72b37749 SHA512 45ff000500e9919216a543981cc3b0eb6a2e354ff8bf76bf5829b0a98344766b88b7d25bc174649d85d92a14b6cbf12ce56f54f6fedd4ff9c79ba662a9e79ef1
+DIST sequoia-openpgp-1.16.0.crate 2937534 BLAKE2B 127ff229f0374fc07fe30dffa98a18c716a332057bb90177ef23aa55dfbf102ede058b92a19930cf1760ecbc3f3f3604df5be1779ecdcb6a11e4c28af8e1b706 SHA512 0f51a494b8c011b77e98adef1747ba84eb36bf1b629c02341c10cf33b86cc2a7da9a99f57b65f44f23f8a2969fc83a1326288133b904ee5ebf54078034f6d5fc
 DIST sequoia-openpgp-mt-0.1.0.crate 29965 BLAKE2B 7aaa128f00728ddfafec2a3cc05c7fe8961a1536c586196d4829377cf647e4c2693b920a91f6cb83db05a38379c8427b26fbed79f8127cf02c4c943d1fe8cd6b SHA512 ff3e41731d37cb0897bac740059086e54d8c4015b05867f8f51e94e8bbd05afe346039b54be7140bd716425e69d55f7642c07b3ecef1f9da188259e73b19c9dd
 DIST sequoia-policy-config-0.5.0.crate 41914 BLAKE2B 342f814370cd44e56d929991bf4d24b7ec03b472f608b936d98665bab67e3645739b36d91042e01a9feccdd52fa70f05a7bb4b59cde4b6be8fb93277b50f5880 SHA512 93b1b6f1f84b2abd74089819d972a9c5ad3d30e2a43eeeb0634d92934802c6ab03eb0ef51487ef3d13894b2863b78c1cc72dcafa51f57a03ddbff8ca5fa0167b
 DIST sequoia-wot-0.4.1.crate 1047172 BLAKE2B 8235b5bcf5c9ec6fdb309c4a4a11c489bc17cbec28e6be50ab266ebfb255f84606947aaf8d50b43712a422ac2ee585996b28bee94847718a1cbb5dcaf07458ee SHA512 188aeffb2a64731bff37a6b461066dda1fc630fe3eb3f04644198c7c7998a43fd6a0f0e376d489debb1a1bda13245c3a66c3b9134a38b8dc5356116ef3647bee
@@ -280,5 +282,5 @@ DIST windows_x86_64_msvc-0.42.1.crate 664606 BLAKE2B 6c460cfa392aad0d11add200d65
 DIST winreg-0.10.1.crate 25725 BLAKE2B db536f2a098e4ff6ae4ff80a19bd2029030d68007c3d6100f5135da1a7c223463fc17640f533bc1d4e8c53e9becb186d98351719b3b6276802c68cc755b9ba4e SHA512 09f2d18f62c3c427ebed40d667b672bb778629502ad3c39541f324b2d5ac41f0822c98b7e5320314144130580da46f1e8e51928941850e7d4af28455a564360c
 DIST xxhash-rust-0.8.6.crate 18569 BLAKE2B 35ef46ca26bf4155b9eb9b5e6b108c588af52b39a9e093b28c87360056547d2e9a4ebf73e17208b441aec848e00307a8dbfa179abae512e444e4788734425b95 SHA512 d073b4aab435fe60f2d297b25fb5eb03262ba1b8b95a852b19cf8e35388a86eba7df20f5e4df46beb6d27e01570d050cebafc2b7b629717ddb96eaaf482f6af2
 DIST zbase32-0.1.2.crate 8721 BLAKE2B d7f5881c8d3f06f5fd78669ae6943ffa5ebe35b5e34db2718825e88e5602fa03bbc33c11589021ad2e8754414b355b86a9391335e4df9361627aede9336b14d3 SHA512 50d703350a6404f0084b4d341ac1aef16f7a5f8924662c4d180ffaece00d295aec3f9925168d39c20837c7306ef88f98ffc5ef4c945d01c7fc6e5078c5dfb4bc
-EBUILD sequoia-chameleon-gnupg-0.2.0.ebuild 6711 BLAKE2B 7583e1bcc3b7bf935a24cd8e28a7f70e0acfe71fc83f03b0862a8043df634dd1ecee63a2656ed8e618deae81293462ecd02592640efe05ebed9957c4985bc649 SHA512 c3ca40837fb4666cdfb2c7ac354d39013490824c24addcf69c4831d0e1157689662b42b06da411aa0764221c0b649724b6de6cc93f36797b6b65e92723a26eec
+EBUILD sequoia-chameleon-gnupg-0.2.0-r1.ebuild 6881 BLAKE2B e6243211737fb91003924aa757750f604c8aa0c89f93738212062d4bf9b37753763ce7d1d56465dff621428c99ed4a0e61b413aef88432c8e089836746ebdc90 SHA512 d7792ff696ff13a5969494ff76da8adb08906218fdac4a3956384fff18832d3985f89254774fce0e3be50aaf6bcdc3dda4ce10420b7d74286a0c2bdb3f5c3dd9
 MISC metadata.xml 340 BLAKE2B 4957e2da72656fd28478434701ac782670128d80bbbd36eda8a63b02666e1d02618728a77d7ceb769ec8442b005ec466c6d337b8fee05297af02e37078c068db SHA512 84da88f0f7389fe55cf12ef92db053982440feb742154204a443cbaf4e56f98ec808af1f55c4ab1bf8553b0479f4413ec47d37418afb6f8f3959aaa49bb3d526
diff --git a/app-crypt/sequoia-chameleon-gnupg/files/sequoia-chameleon-gnupg-0.2.0-sec-fixes.patch b/app-crypt/sequoia-chameleon-gnupg/files/sequoia-chameleon-gnupg-0.2.0-sec-fixes.patch
new file mode 100644
index 000000000000..cd5753829d1f
--- /dev/null
+++ b/app-crypt/sequoia-chameleon-gnupg/files/sequoia-chameleon-gnupg-0.2.0-sec-fixes.patch
@@ -0,0 +1,104 @@
+https://lists.sequoia-pgp.org/hyperkitty/list/announce@lists.sequoia-pgp.org/thread/SN2E3QRT4DMQ5JNEK6VIN6DJ5SH766DI/
+--- a/Cargo.lock
++++ b/Cargo.lock
+@@ -102,6 +102,12 @@ version = "0.13.1"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "9e1b586273c5702936fe7b7d6896644d8be71e6314cfe09d3167c95f712589e8"
+ 
++[[package]]
++name = "base64"
++version = "0.21.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "a4a4ddaa51a5bc52a6948f74c06d20aaaddb71924eab79b8c97a8c556e942d6a"
++
+ [[package]]
+ name = "bindgen"
+ version = "0.63.0"
+@@ -145,9 +151,9 @@ checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+ 
+ [[package]]
+ name = "buffered-reader"
+-version = "1.1.4"
++version = "1.2.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "d0dd286184b392a1ce6b3deecd073f0330df194bf935b87f852147d50d0d2d18"
++checksum = "66d3bea5bcc3ecc38fe5388e6bc35e6fe7bd665eb3ae9a44283e15b91ad3867d"
+ dependencies = [
+  "bzip2",
+  "flate2",
+@@ -1310,21 +1316,22 @@ dependencies = [
+ 
+ [[package]]
+ name = "nettle"
+-version = "7.2.0"
++version = "7.3.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "f5d193a809310369c5d16e45bc0a88cb27935edd5d3375bcfc2371b167694035"
++checksum = "b9fdccf3eae7b161910d2daa2f0155ca35041322e8fe5c5f1f2c9d0b12356336"
+ dependencies = [
+  "getrandom 0.2.8",
+  "libc",
+  "nettle-sys",
+  "thiserror",
++ "typenum",
+ ]
+ 
+ [[package]]
+ name = "nettle-sys"
+-version = "2.1.1"
++version = "2.2.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "5df7cd7e8d5d2997055f31318d1ec648c84886e662bbef7b4a60e3cbc899522b"
++checksum = "b5e81c347b9002da0b6b0c4060993c280e99eb14b42ecf65a2fefcd6eb3d8a73"
+ dependencies = [
+  "bindgen",
+  "cc",
+@@ -1873,7 +1880,7 @@ name = "sequoia-chameleon-gnupg"
+ version = "0.2.0"
+ dependencies = [
+  "anyhow",
+- "base64",
++ "base64 0.13.1",
+  "buffered-reader",
+  "chrono",
+  "diff",
+@@ -1937,7 +1944,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "7cca7e201e65a2acd3fbbb6004f843e622959f00afbbe8f3308a7997c9784dfa"
+ dependencies = [
+  "anyhow",
+- "base64",
++ "base64 0.13.1",
+  "futures-util",
+  "http",
+  "hyper",
+@@ -1957,25 +1964,26 @@ dependencies = [
+ 
+ [[package]]
+ name = "sequoia-openpgp"
+-version = "1.13.0"
++version = "1.16.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "70af2f594bf5261eb87be5060db1e40d6445686d2bb3ec41c014cf53701130a2"
++checksum = "30efff3f9930e85b4284e76bbdad741f36412dfb1e370efd0de5866ae1a11dfc"
+ dependencies = [
+  "anyhow",
+- "base64",
++ "base64 0.21.0",
+  "buffered-reader",
+  "bzip2",
+  "chrono",
+  "dyn-clone",
+  "flate2",
+  "getrandom 0.2.8",
+- "idna 0.3.0",
++ "idna 0.2.3",
+  "lalrpop",
+  "lalrpop-util",
+  "lazy_static",
+  "libc",
+  "memsec",
+  "nettle",
++ "once_cell",
+  "rand 0.7.3",
+  "regex",
+  "regex-syntax",
diff --git a/app-crypt/sequoia-chameleon-gnupg/sequoia-chameleon-gnupg-0.2.0.ebuild b/app-crypt/sequoia-chameleon-gnupg/sequoia-chameleon-gnupg-0.2.0-r1.ebuild
index 8d540fb60c0f..6c1708514742 100644
--- a/app-crypt/sequoia-chameleon-gnupg/sequoia-chameleon-gnupg-0.2.0.ebuild
+++ b/app-crypt/sequoia-chameleon-gnupg/sequoia-chameleon-gnupg-0.2.0-r1.ebuild
@@ -17,11 +17,12 @@ CRATES="
 	autocfg-1.1.0
 	backtrace-0.3.67
 	base64-0.13.1
+	base64-0.21.0
 	bindgen-0.63.0
 	bit-set-0.5.3
 	bit-vec-0.6.3
 	bitflags-1.3.2
-	buffered-reader-1.1.4
+	buffered-reader-1.2.0
 	bumpalo-3.12.0
 	bytes-1.4.0
 	bzip2-0.4.4
@@ -144,8 +145,8 @@ CRATES="
 	miniz_oxide-0.6.2
 	mio-0.8.5
 	native-tls-0.2.11
-	nettle-7.2.0
-	nettle-sys-2.1.1
+	nettle-7.3.0
+	nettle-sys-2.2.0
 	new_debug_unreachable-1.0.4
 	nibble_vec-0.1.0
 	nix-0.18.0
@@ -206,7 +207,7 @@ CRATES="
 	security-framework-sys-2.8.0
 	sequoia-ipc-0.30.1
 	sequoia-net-0.26.0
-	sequoia-openpgp-1.13.0
+	sequoia-openpgp-1.16.0
 	sequoia-openpgp-mt-0.1.0
 	sequoia-policy-config-0.5.0
 	sequoia-wot-0.4.1
@@ -288,7 +289,8 @@ CRATES="
 	zbase32-0.1.2
 "
 
-inherit cargo xdg-utils
+LLVM_MAX_SLOT=16
+inherit cargo llvm xdg-utils
 
 DESCRIPTION="Sequoia's reimplementation of the GnuPG interface"
 HOMEPAGE="https://sequoia-pgp.org/"
@@ -319,14 +321,19 @@ DEPEND="
 "
 RDEPEND="${DEPEND}"
 # Needed for bindgen
-BDEPEND="sys-devel/clang"
+BDEPEND="<sys-devel/clang-$((${LLVM_MAX_SLOT} + 1))"
 
 QA_FLAGS_IGNORED="usr/bin/gpg-sq usr/bin/gpgv-sq"
 
 PATCHES=(
 	"${FILESDIR}"/${P}-tests.patch
+	"${FILESDIR}"/${P}-sec-fixes.patch
 )
 
+llvm_check_deps() {
+	has_version -b "sys-devel/clang:${LLVM_SLOT}"
+}
+
 src_test() {
 	export GNUPGHOME="${T}"/.gnupg
 	export REAL_GPG_BIN="${BROOT}"/usr/bin/gpg