diff --git a/sdk_container/src/third_party/portage-stable/changelog/security/2022-11-22-cpio-2.13.md b/sdk_container/src/third_party/portage-stable/changelog/security/2022-11-22-cpio-2.13.md
new file mode 100644
index 0000000000..f6b3697672
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/changelog/security/2022-11-22-cpio-2.13.md
@@ -0,0 +1 @@
+- cpio ([CVE-2021-38185](https://nvd.nist.gov/vuln/detail/CVE-2021-38185))
diff --git a/sdk_container/src/third_party/portage-stable/changelog/updates/2022-11-22-cpio-2.13.md b/sdk_container/src/third_party/portage-stable/changelog/updates/2022-11-22-cpio-2.13.md
new file mode 100644
index 0000000000..cc55a3d77e
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/changelog/updates/2022-11-22-cpio-2.13.md
@@ -0,0 +1 @@
+- cpio ([2.13](https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00000.html)