diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 182d6dee25..43c14ced69 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -28,6 +28,9 @@
 # The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet.
 =app-crypt/clevis-19-r1 **
 
+# Keep versions on both arches in sync.
+=app-crypt/tpm2-tss-4.1.3-r2 ~amd64
+
 # Needed by arm64-native SDK.
 =app-emulation/open-vmdk-1.0 *
 
@@ -62,6 +65,7 @@
 =dev-util/catalyst-4.0.0 ~amd64 ~arm64
 
 # Keep versions on both arches in sync.
+=net-dns/bind-9.18.31-r1 ~arm64
 =net-firewall/conntrack-tools-1.4.8-r1 ~arm64
 
 # Needed to address CVE-2025-2312.
@@ -92,7 +96,7 @@ sys-apps/azure-vm-utils
 =sys-apps/zram-generator-1.2.1 ~arm64
 
 # Needed to avoid pulling python into production images.
-=sys-auth/sssd-2.9.6-r1 ~arm64
+=sys-auth/sssd-2.9.6-r3 ~arm64
 
 # Keep versions on both arches in sync.
 =sys-boot/mokutil-0.7.2 **
@@ -101,5 +105,6 @@ sys-apps/azure-vm-utils
 =sys-cluster/ipvsadm-1.31-r1 ~arm64
 
 # Keep versions on both arches in sync.
+=sys-fs/fuse-3.17.2 ~arm64
 =sys-libs/libsemanage-3.7 ~arm64
 =sys-process/audit-4.0.2-r1 ~arm64