mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-09-26 16:11:56 +02:00
Code Issues Packages Projects Releases Wiki Activity

overlay profiles: Add some security-related accept keywords

Browse Source
This commit is contained in:
Krzesimir Nowak 2025-02-25 14:42:23 +01:00
parent 9e49193f0d
commit d3ed097aff
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords vendored
View File

@ -10,6 +10,9 @@
# Keep versions on both arches in sync.
=app-containers/cri-tools-1.32.0 ~arm64
# Needed to address CVE-2024-11218.
=app-containers/podman-5.3.2 ~amd64 ~arm64
# Seems to be the only available ebuild in portage-stable right now.
=app-crypt/adcli-0.9.2 ~arm64
@ -39,6 +42,9 @@
# The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet.
=dev-libs/jose-12 **
# Needed to address CVE-2024-12133.
=dev-libs/libtasn1-4.20.0 ~amd64 ~arm64
# The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet.
=dev-libs/luksmeta-9-r1 **
@ -54,8 +60,18 @@
# Keep versions on both arches in sync.
=net-firewall/conntrack-tools-1.4.8-r1 ~arm64
# Needed to address CVE-2024-12243.
=net-libs/gnutls-3.8.9 ~amd64 ~arm64
# Keep versions on both arches in sync.
=net-libs/libnetfilter_cthelper-1.0.1-r1 ~arm64
=net-libs/libnetfilter_cttimeout-1.0.1 ~arm64
# Needed to address CVE-2025-0167, CVE-2025-0665, CVE-2025-0725.
=net-misc/curl-8.12.1 ~amd64 ~arm64
# Keep versions on both arches in sync.
=net-misc/openssh-9.9_p2 ~arm64
# Needed to address CVE-2024-54661
@ -82,6 +98,11 @@
# Enable ipvsadm for arm64.
=sys-cluster/ipvsadm-1.31-r1 ~arm64
# Needed to address CVE-2024-53589, CVE-2025-1176, CVE-2025-1178,
# CVE-2025-1179, CVE-2025-1180, CVE-2025-1181, CVE-2025-1182.
=sys-devel/binutils-2.44 ~amd64 ~arm64
=sys-libs/binutils-libs-2.44 ~amd64 ~arm64
# Keep versions on both arches in sync.
=sys-libs/libsemanage-3.7 ~arm64
=sys-process/audit-4.0.2-r1 ~arm64