From d2c835e6bbeb9ed94be1ea42a1b4879b0dd8688e Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Mon, 23 Jan 2023 11:42:24 +0100 Subject: [PATCH] profiles: Add accept keywords for net-misc/curl --- .../profiles/coreos/base/package.accept_keywords | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index ef0b6ba53d..b5dee58e10 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -28,6 +28,10 @@ # Required for addressing CVE-2022-29154 =net-misc/rsync-3.2.7-r1 ~amd64 ~arm64 +# Keep the version of curl the same on all arches. +# Also needed for CVE-2022-43551 and CVE-2022-43552. +=net-misc/curl-7.87.0-r2 ~arm64 + =sys-fs/cryptsetup-2.4.1-r1 ~amd64 ~arm64 # Keep iproute in sync with kernel version.