From c207188a81bfc8bc2f697aea30b1c069ef57ffe0 Mon Sep 17 00:00:00 2001 From: Dongsu Park Date: Tue, 1 Nov 2022 12:21:09 +0100 Subject: [PATCH] profiles: accept keywords for multipath-tools 0.9.3 Accept keywords ~amd64, ~arm64 for sys-fs/multipath-tools 0.9.3 to address CVE-2022-41973, CVE-2022-41974. --- .../profiles/coreos/base/package.accept_keywords | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index 329722c461..7fb122ad69 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -42,6 +42,9 @@ # Keep iproute in sync with kernel version. =sys-apps/iproute2-5.15.0 ~amd64 ~arm64 +# To address CVE-2022-41973, CVE-2022-41974 +=sys-fs/multipath-tools-0.9.3 ~amd64 ~arm64 + # FIPS support is still being tested =sys-fs/cryptsetup-2.4.3-r1 ~amd64 ~arm64