From ef621681ce419af22e493ca2c9836bd79ede2013 Mon Sep 17 00:00:00 2001 From: Dongsu Park Date: Wed, 22 Feb 2023 10:49:59 +0100 Subject: [PATCH] profiles: accept keyword ~arm64 for net-dns/dnsmasq 2.89 Accept keyword ~arm64 for net-dns/dnsmasq 2.89, to keep the same version 2.89 for both arches, addressing CVE-2022-0934. --- .../profiles/coreos/arm64/package.accept_keywords | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords index 774d3072fd..c08824d3d8 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords @@ -16,6 +16,10 @@ =dev-util/bpftool-5.19.12 ** =net-dns/c-ares-1.17.2 ~arm64 + +# needed to address CVE-2022-0934 +=net-dns/dnsmasq-2.89 ~arm64 + =net-firewall/conntrack-tools-1.4.6-r1 ~arm64 =net-libs/libnetfilter_cthelper-1.0.0-r1 ~arm64 =net-libs/libnetfilter_cttimeout-1.0.0-r1 ~arm64