diff --git a/sdk_container/src/third_party/portage-stable/app-containers/containerd/Manifest b/sdk_container/src/third_party/portage-stable/app-containers/containerd/Manifest
index 237fcc5c6a..1a06b858fa 100644
--- a/sdk_container/src/third_party/portage-stable/app-containers/containerd/Manifest
+++ b/sdk_container/src/third_party/portage-stable/app-containers/containerd/Manifest
@@ -1,2 +1,2 @@
-DIST containerd-2.0.1.tar.gz 10423945 BLAKE2B 7f77678557bf649c71475d3ff08a57579b8959ef19a5f8fc1c27b8e8eacea01572d44d3f6dff1f53b72c1b7cf153413a5152391a78b0d5bd624a4c5267381144 SHA512 7875eee0fb274545acb4d62f5bca808105580177db6007e59164fd57830ea3e8ab646b8e227027016bf8dd4816341d38a620bfef48bb0fd83de006b1a91826b7
 DIST containerd-2.0.2.tar.gz 10379986 BLAKE2B aee39f749f056965b899f6525bebe00d46b72b6c437efbd01ed890c5ae9c5d812464bc6d10e32aea20fd0c6df00d98cd30502dd73f9a27b0d8d143a5542976d9 SHA512 86eb24acfa5d4d87ae396f8888e2484693823fad897a29f1a5ada78e2318640927cfcff1e85415bfd6c66f5417e582203eb94976d52e3dd373997e6e2cbae354
+DIST containerd-2.0.3.tar.gz 10450757 BLAKE2B 5dec56a40dc2874fb0b6fd4d72704f6417858eefd983c8ec5dfb2c9ef8be1e9e309cff83395e03c2d5fef30ed5c0561329ffbcd3dfba91e40d8017f7a605771b SHA512 9528a65d9d9f13d15d861f7ce71ab483958020bda83947d18868b477204e9e2e33eccc69280502c54b2be9ce577724e3e2b1772229c99636099b04bac1079ac1
diff --git a/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.2.ebuild b/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.2.ebuild
index 37fb931e51..f205a48da4 100644
--- a/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.2.ebuild
+++ b/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.2.ebuild
@@ -11,7 +11,7 @@ SRC_URI="https://github.com/containerd/containerd/archive/v${PV}.tar.gz -> ${P}.
 
 LICENSE="Apache-2.0"
 SLOT="0"
-KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
+KEYWORDS="amd64 ~arm arm64 ppc64 ~riscv ~x86"
 IUSE="apparmor btrfs device-mapper +cri hardened +seccomp selinux test"
 
 COMMON_DEPEND="
diff --git a/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.1.ebuild b/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.3.ebuild
similarity index 92%
rename from sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.1.ebuild
rename to sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.3.ebuild
index 82e4dbe7a8..e7315295f1 100644
--- a/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.1.ebuild
+++ b/sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.0.3.ebuild
@@ -3,7 +3,7 @@
 
 EAPI=8
 inherit go-module systemd
-GIT_REVISION=88aa2f531d6c2922003cc7929e51daf1c14caa0a
+GIT_REVISION=06b99ca80cdbfbc6cc8bd567021738c9af2b36ce
 
 DESCRIPTION="A daemon to control runC"
 HOMEPAGE="https://containerd.io/"
@@ -11,7 +11,7 @@ SRC_URI="https://github.com/containerd/containerd/archive/v${PV}.tar.gz -> ${P}.
 
 LICENSE="Apache-2.0"
 SLOT="0"
-KEYWORDS="amd64 ~arm arm64 ppc64 ~riscv ~x86"
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
 IUSE="apparmor btrfs device-mapper +cri hardened +seccomp selinux test"
 
 COMMON_DEPEND="
@@ -26,7 +26,7 @@ ${COMMON_DEPEND}
 # recommended minimum version of runc is found in script/setup/runc-version
 RDEPEND="
 	${COMMON_DEPEND}
-	>=app-containers/runc-1.2.1[apparmor?,seccomp?]
+	>=app-containers/runc-1.2.5[apparmor?,seccomp?]
 "
 
 BDEPEND="