14 files changed, 32 insertions, 8 deletions
diff --git a/profiles/Manifest.gz b/profiles/Manifest.gz
index 7d3d5bd05a3b..05906af47377 100644
--- a/profiles/Manifest.gz
+++ b/profiles/Manifest.gz
diff --git a/profiles/arch/alpha/package.use.mask b/profiles/arch/alpha/package.use.mask
index 17d95fde6aba..c6638dd0ea00 100644
--- a/profiles/arch/alpha/package.use.mask
+++ b/profiles/arch/alpha/package.use.mask
@@ -317,6 +317,7 @@ dev-db/percona-server cjk
 # Mikle Kolyada <zlogene@gentoo.org> (2018-10-05)
 # Not keyworded (see bug #540540c#8)
 app-admin/sudo sssd
+sys-auth/pambase sssd
 
 # Andreas Sturmlechner <asturm@gentoo.org> (2018-09-30)
 # Optional dependency blocking security cleanup, bug #627316
diff --git a/profiles/arch/amd64/package.use.stable.mask b/profiles/arch/amd64/package.use.stable.mask
index 60c17f53ac61..420f3a193b95 100644
--- a/profiles/arch/amd64/package.use.stable.mask
+++ b/profiles/arch/amd64/package.use.stable.mask
@@ -105,6 +105,7 @@ media-libs/opencv contribcvv contribhdf contribsfm contribxfeatures2d gflags glo
 # Mikle Kolyada <zlogene@gentoo.org> (2018-11-07)
 # unmask sssd for sudo
 app-admin/sudo -sssd
+sys-auth/pambase -sssd
 
 # Thomas Deutschmann <whissi@gentoo.org> (2018-06-01)
 net-analyzer/wireshark -doc
diff --git a/profiles/arch/ia64/package.use.mask b/profiles/arch/ia64/package.use.mask
index 8cc19146acaf..e89122890252 100644
--- a/profiles/arch/ia64/package.use.mask
+++ b/profiles/arch/ia64/package.use.mask
@@ -16,6 +16,7 @@ dev-lang/php capstone
 # David Seifert <soap@gentoo.org> (2023-12-30)
 # sys-auth/sssd not keyworded here anymore
 app-admin/sudo sssd
+sys-auth/pambase sssd
 
 # Mart Raudsepp <leio@gentoo.org> (2023-12-25)
 # sys-apps/xdg-desktop-portal not keyworded here yet
diff --git a/profiles/arch/loong/package.use.mask b/profiles/arch/loong/package.use.mask
index d3a86ae2589b..050e85be038b 100644
--- a/profiles/arch/loong/package.use.mask
+++ b/profiles/arch/loong/package.use.mask
@@ -184,6 +184,7 @@ media-video/ffmpeg libilbc libtesseract
 # WANG Xuerui <xen0n@gentoo.org> (2022-12-05)
 # sys-auth/sssd isn't keyworded here yet
 app-admin/sudo sssd
+sys-auth/pambase sssd
 
 # WANG Xuerui <xen0n@gentoo.org> (2022-12-04)
 # neither app-text/ronn or app-text/ronn-ng can be built with
diff --git a/profiles/arch/s390/package.use.mask b/profiles/arch/s390/package.use.mask
index 5091c2e592c6..212cdaa36630 100644
--- a/profiles/arch/s390/package.use.mask
+++ b/profiles/arch/s390/package.use.mask
@@ -123,6 +123,7 @@ app-crypt/pinentry efl
 # Sam James <sam@gentoo.org> (2022-04-24)
 # sssd not keyworded here
 app-admin/sudo sssd
+sys-auth/pambase sssd
 
 # Sam James <sam@gentoo.org> (2022-04-24)
 # app-crypt/dieharder and dev-libs/softhsm:2 unkeyworded here
diff --git a/profiles/arch/x86/package.use.stable.mask b/profiles/arch/x86/package.use.stable.mask
index f2ea6348296f..9410ac3510fd 100644
--- a/profiles/arch/x86/package.use.stable.mask
+++ b/profiles/arch/x86/package.use.stable.mask
@@ -1,4 +1,4 @@
-# Copyright 1999-2023 Gentoo Authors
+# Copyright 1999-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # When you add an entry to the top of this file, add your name, the date, and
@@ -97,6 +97,7 @@ media-libs/opencv contribcvv contribhdf contribsfm contribxfeatures2d gflags glo
 # Mikle Kolyada <zlogene@gentoo.org> (2018-11-07)
 # unmask sssd for sudo
 app-admin/sudo -sssd
+sys-auth/pambase -sssd
 
 # Thomas Deutschmann <whissi@gentoo.org> (2018-06-01)
 net-analyzer/wireshark -doc
diff --git a/profiles/base/package.use.force b/profiles/base/package.use.force
index bd0c560a5ae5..9a47d64fea28 100644
--- a/profiles/base/package.use.force
+++ b/profiles/base/package.use.force
@@ -1,4 +1,4 @@
-# Copyright 1999-2023 Gentoo Authors
+# Copyright 1999-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Michael Orlitzky <mjo@gentoo.org> (2023-11-22)
@@ -211,11 +211,6 @@ net-misc/netkit-bootparamd libtirpc
 sci-astronomy/esomidas libtirpc
 sys-cluster/glusterfs libtirpc
 
-# David Seifert <soap@gentoo.org> (2017-03-07)
-# Only ever use system ffmpeg, allow kodi bundled ffmpeg
-# only for debug pruposes.
-media-tv/kodi system-ffmpeg
-
 # Maciej Mrozowski <reavertm@gentoo.org> (2016-09-01)
 # Workaround until resolved upstream (bug #586840)
 >=dev-games/simgear-2016.2.1 dns
diff --git a/profiles/base/package.use.stable.mask b/profiles/base/package.use.stable.mask
index e085e0dbed80..2aaf3a6f944c 100644
--- a/profiles/base/package.use.stable.mask
+++ b/profiles/base/package.use.stable.mask
@@ -168,6 +168,7 @@ media-plugins/grilo-plugins chromaprint
 # Mikle Kolyada <zlogene@gentoo.org> (2018-11-07)
 # sssd is only stable for amd64 and x86
 app-admin/sudo sssd
+sys-auth/pambase sssd
 
 # Thomas Deutschmann <whissi@gentoo.org> (2018-06-01)
 # Needs dev-ruby/asciidoctor which has a lot of unstable deps
diff --git a/profiles/categories b/profiles/categories
index 691304863fd1..f7f5996e1810 100644
--- a/profiles/categories
+++ b/profiles/categories
@@ -39,6 +39,7 @@ dev-dotnet
 dev-embedded
 dev-erlang
 dev-games
+dev-gap
 dev-go
 dev-haskell
 dev-java
diff --git a/profiles/desc/cpu_flags_x86.desc b/profiles/desc/cpu_flags_x86.desc
index 5c8a9bceaee6..d7dee6227a71 100644
--- a/profiles/desc/cpu_flags_x86.desc
+++ b/profiles/desc/cpu_flags_x86.desc
@@ -1,4 +1,4 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Whenever the flag name does not correspond to /proc/cpuinfo flags,
@@ -10,8 +10,18 @@
 aes - Enable support for Intel's AES instruction set (AES-NI)
 avx - Adds support for Advanced Vector Extensions instructions
 avx2 - Adds support for Advanced Vector Extensions 2 instructions
+avx512_4fmaps - Use AVX-512 Fused Multiply-Accumulate Packed Single Precision instruction set
+avx512_4vnniw - Use AVX-512 Vector Neural Network Instructions Word Variable Precision
+avx512_bf16 - Use AVX-512 BFloat16 instruction set
+avx512_bitalg - Use AVX-512 Bit Algorithms instruction set
+avx512_fp16 - Use general-purpose numeric operations for 16-bit half-precision instruction set
+avx512_vbmi2 - Use AVX-512 Vector Bit Manipulation Instructions 2
+avx512_vnni - Use vector neural network instructions for 8- and 16-bit multiply-add operations
+avx512_vp2intersect - Use AVX-512 Intersect instruction set
+avx512_vpopcntdq - Use AVX-512 Vector Population Count Doubleword and Quadword instruction set
 avx512dq - Use AVX-512 double- and quad-word instructions
 avx512f - Adds support for AVX-512 Foundation instructions
+avx512ifma - Use AVX-512 Integer Fused Multiply-Add instruction set
 avx512vl - Use AVX-512 vector-length instructions
 f16c - Adds support for F16C instruction set for converting between half-precision and single-precision floats
 fma3 - Use the Fused Multiply Add 3 instruction set ([fma] in cpuinfo)
@@ -30,4 +40,5 @@ sse4_1 - Enable SSE4.1 instruction support
 sse4_2 - Enable SSE4.2 instruction support
 sse4a - Enable SSE4a instruction support
 ssse3 - Use the SSSE3 instruction set (NOT sse3/pni)
+vpclmulqdq - Use Vector Carry-Less Multiplication of Quadwords instruction set
 xop - Enable the XOP instruction set
diff --git a/profiles/features/musl/package.mask b/profiles/features/musl/package.mask
index 9829802af07b..a4ca6bcf9e00 100644
--- a/profiles/features/musl/package.mask
+++ b/profiles/features/musl/package.mask
@@ -1,6 +1,10 @@
 # Copyright 1999-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Giuseppe Foti  <foti.giuseppe@gmail.com> (2024-01-22)
+# Binary package, which is compiled against glibc
+app-office/drawio-desktop-bin
+
 # Maciej Barć <xgqt@gentoo.org> (2024-01-06)
 # Binary package, which is compiled against glibc
 app-office/joplin-desktop
@@ -147,6 +151,7 @@ app-backup/tsm
 app-benchmarks/geekbench
 app-benchmarks/geekbench-ml
 app-crypt/rainbowcrack
+app-crypt/yubioath-flutter-bin
 app-editors/sublime-text
 app-editors/vscode
 app-editors/vscodium
diff --git a/profiles/features/musl/package.use.mask b/profiles/features/musl/package.use.mask
index e37fc86b0889..c134af6cab69 100644
--- a/profiles/features/musl/package.use.mask
+++ b/profiles/features/musl/package.use.mask
@@ -52,6 +52,7 @@ dev-scheme/scm readline
 # Sam James <sam@gentoo.org> (2022-10-04)
 # sys-auth/sssd is masked on musl
 app-admin/sudo sssd
+sys-auth/pambase sssd
 
 # Sam James <sam@gentoo.org> (2022-10-04)
 # sys-libs/libsmbios is masked on musl
diff --git a/profiles/use.local.desc b/profiles/use.local.desc
index 6e9f812c2c36..1008847e03e9 100644
--- a/profiles/use.local.desc
+++ b/profiles/use.local.desc
@@ -1550,6 +1550,7 @@ dev-games/physfs:wad - Enable Doom WAD archive support
 dev-games/simgear:dns - Enable DNS resolver via net-libs/udns
 dev-games/simgear:gdal - Enable alternative terrain engine based on pagedLOD via sci-libs/gdal
 dev-games/simgear:subversion - Enable terrasync scenery downloader
+dev-gap/grape:bliss - Use sci-libs/bliss instead of sci-mathematics/nauty as the backend.
 dev-haskell/abstract-deque:usecas - Enable the reference implementation to use hardware compare-and-swap.
 dev-haskell/aeson:cffi - Controls whether to include c-ffi bits or pure haskell. Default to False for security.
 dev-haskell/aeson:ordered-keymap - Use ordered @Data.Map.Strict@ for KeyMap implementation.
@@ -7481,6 +7482,8 @@ sci-mathematics/fricas:cmucl - Add support for CMU Common Lisp (dev-lisp/cmucl)
 sci-mathematics/fricas:ecl - Add support for Embeddable Common Lisp (dev-lisp/ecl)
 sci-mathematics/fricas:gcl - Add support for GNU Common Lisp (dev-lisp/gcl)
 sci-mathematics/fricas:sbcl - Add support for Steel Bank Common Lisp (dev-lisp/sbcl)
+sci-mathematics/gap:memcheck - Enable memory checking
+sci-mathematics/gap:minimal - Install only the GAP packages that are strictly required for GAP to run. GAP will complain about the others unless you either start it with the "-A" flag or set "AutoloadPackages" in your gap.ini.
 sci-mathematics/geomview:motionaveraging - Enable experimental motion averaging technique
 sci-mathematics/giac:ecm - Enable the use of sci-mathematics/gmp-ecm
 sci-mathematics/giac:gc - Enable garbage collection support via dev-libs/boehm-gc
@@ -7941,6 +7944,7 @@ sys-auth/pambase:pwhistory - Enable pam_pwhistory module on system auth stack to
 sys-auth/pambase:pwquality - Enable pam_pwquality module on system auth stack for passwd quality validation. It is used by default by Fedora GNU/*/Linux.
 sys-auth/pambase:securetty - Enable pam_securetty module in the login stack. Not generally relevant anymore as the login stack only refers to local logins and local terminals imply secure access in the first place.
 sys-auth/pambase:sha512 - Switch Linux-PAM's pam_unix module to use sha512 for passwords hashes rather than MD5. This option requires sys-libs/pam version 1.0.1 built against sys-libs/glibc version 2.7, if it's built against an earlier version, it will silently be ignored, and MD5 hashes will be used. All the passwords changed after this USE flag is enabled will be saved to the shadow file hashed using SHA512 function. The password previously saved will be left untouched. Please note that while SHA512-hashed passwords will still be recognised if the USE flag is removed, the shadow file will not be compatible with systems using an earlier glibc version.
+sys-auth/pambase:sssd - Add System Security Services Daemon (sys-auth/sssd) support via pam_sss.
 sys-auth/pambase:systemd - Use pam_systemd module to register user sessions in the systemd control group hierarchy.
 sys-auth/pambase:yescrypt - Switch Linux-PAM's pam_unix module to use yescrypt for passwords hashes rather than MD5
 sys-auth/polkit:daemon - Build polkitd in addition to libpolkit.