diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index 943371daef..cb0af60e6c 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -16,11 +16,13 @@ dev-util/catalyst ~amd64 ~arm64 # Handled by automation? =app-containers/cri-tools-1.27.0 ~amd64 ~arm64 +# Needed to address CVE-2024-3727 +=app-containers/podman-5.0.3 ~amd64 ~arm64 + # These seem to be the versions we initially got, but the # modifications made to the ebuilds were clobbered, so these are here # to keep using the same version. Can be dropped when these or newer # get stabilized in Gentoo. -=app-containers/podman-5.0.2 ~amd64 ~arm64 =app-containers/runc-1.1.13 ~amd64 ~arm64 # Seems to be the only available ebuild in portage-stable right now.