diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index 70296fded5..a000297660 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -115,3 +115,7 @@ dev-util/checkbashisms # dev-libs/openssl-3.0.0 is still in testing phase at this point =dev-libs/openssl-3.0.0 ~amd64 ~arm64 + +# To address security issues like CVE-2021-31879, we need to accept +# keywords for wget 1.21.2. +=net-misc/wget-1.21.2 ~amd64 ~arm64