From 164bdd524b255ff5e64b316397614b79a554c61e Mon Sep 17 00:00:00 2001 From: Dongsu Park Date: Thu, 5 May 2022 17:17:55 +0200 Subject: [PATCH] profiles: accept keywords for net-misc/rsync We need to allow net-misc/rsync 3.2.4-r1, to address security issues in its bundled zlib. --- .../profiles/coreos/base/package.accept_keywords | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index 963b4fb395..59105fac1e 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -19,7 +19,8 @@ =net-misc/openssh-8.8_p1-r3 ~amd64 ~arm64 -=net-misc/rsync-3.2.3-r5 ~amd64 ~arm64 +# Required for addressing CVE-2018-25032 in its bundled zlib +=net-misc/rsync-3.2.4-r1 ~amd64 ~arm64 # To address security issues like CVE-2021-31879, we need to accept # keywords for wget 1.21.2.