diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index e09d468d74..69b45abcdb 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -7,14 +7,20 @@
 # Gentoo upstream package stabilisation
 # (the following packages are "unstable" upstream; we're stabilising these)
 
+# We always want the latest version available.
+=app-containers/containerd-2.1* ~amd64 ~arm64
+
 # Keep versions on both arches in sync.
-=app-containers/cri-tools-1.32.0 ~arm64
-=app-containers/incus-6.0.4-r1 ~arm64
-=app-containers/lxc-6.0.4-r1 ~arm64
+=app-containers/cri-tools-1.33.0 ~arm64
+=app-containers/incus-6.0.5 ~arm64
+=app-containers/lxc-6.0.5 ~arm64
 
 # CVE-2025-6032
 =app-containers/podman-5.5.2 ~amd64 ~arm64
 
+# We always want the latest version available.
+=app-containers/runc-1.3* ~amd64 ~arm64
+
 # No stable keywords.
 =app-containers/syft-1.18.1 ~amd64 ~arm64
 
@@ -32,6 +38,9 @@ app-crypt/azure-keyvault-pkcs11
 # The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet.
 =app-crypt/clevis-19-r1 **
 
+# Keep versions on both arches in sync.
+=app-crypt/mit-krb5-1.21.3-r1 ~arm64
+
 # Needed by arm64-native SDK.
 =app-emulation/open-vmdk-1.0 *
 
@@ -51,15 +60,20 @@ dev-cpp/azure-security-keyvault-keys
 =dev-lang/yasm-1.3.0-r1 ~arm64
 =dev-libs/cowsql-1.15.9 ~arm64
 =dev-libs/ding-libs-0.6.2-r1 ~arm64
+=dev-libs/elfutils-0.194 ~amd64
 
 # The only available ebuild has ~amd64 and no keyword for arm64 yet.
 =dev-libs/jose-14 **
 
+# Keep versions on both arches in sync.
+=dev-libs/libnl-3.11.0 ~amd64
+
 # The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet.
 =dev-libs/luksmeta-9-r1 **
 
 # Keep versions on both arches in sync.
 =dev-libs/raft-0.22.1 ~arm64
+=dev-libs/xxhash-0.8.3-r1 ~arm64
 
 # No arm64 keyword in package.
 =dev-util/bsdiff-4.3-r4 **
@@ -97,7 +111,6 @@ sys-apps/azure-vm-utils
 =sys-cluster/ipvsadm-1.31-r1 ~arm64
 
 # Keep versions on both arches in sync.
-=sys-fs/lxcfs-6.0.4 ~arm64
-
-=app-containers/containerd-2.1* ~amd64 ~arm64
-=app-containers/runc-1.3* ~amd64 ~arm64
+=sys-fs/lxcfs-6.0.5 ~arm64
+=sys-fs/zfs-2.3.4 ~arm64
+=sys-fs/zfs-kmod-2.3.4 ~arm64