From 8dcba5fecb3491e729901b9e1179acd2c578f1af Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Mon, 23 Jun 2025 13:28:50 +0200 Subject: [PATCH] overlay profiles: Add accept keywords for glib packages --- .../profiles/coreos/base/package.accept_keywords | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index e558d44782..17c0943342 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -49,6 +49,10 @@ =dev-libs/ding-libs-0.6.2-r1 ~arm64 =dev-libs/cowsql-1.15.8 ~arm64 +# Needed to address CVE-2025-4373 +=dev-libs/glib-2.84.3 ~amd64 ~arm64 +=dev-libs/gobject-introspection-common-1.84.0 ~amd64 ~arm64 + # The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet. =dev-libs/jose-12 ** =dev-libs/luksmeta-9-r1 ** @@ -62,6 +66,10 @@ # Catalyst 4 is not stable yet, but earlier versions are masked now. =dev-util/catalyst-4.0.0 ~amd64 ~arm64 +# Needed to address CVE-2025-4373 +=dev-util/glib-utils-2.84.3 ~amd64 ~arm64 +=dev-util/gdbus-codegen-2.84.3 ~amd64 ~arm64 + # Keep versions on both arches in sync. =dev-util/xdelta-3.0.11-r1 ~arm64