diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index 62a04d5959..c268f1c9f5 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -19,8 +19,8 @@ =net-misc/openssh-8.8_p1-r3 ~amd64 ~arm64 -# Required for addressing CVE-2018-25032 in its bundled zlib -=net-misc/rsync-3.2.4-r1 ~amd64 ~arm64 +# Required for addressing CVE-2022-29154 +=net-misc/rsync-3.2.6 ~amd64 ~arm64 # To address security issues like CVE-2021-31879, we need to accept # keywords for wget 1.21.2. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use index 4fb4e507f1..baeb75273c 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use @@ -100,9 +100,6 @@ app-emulation/docker-runc selinux # enable regular expression processing in jq app-misc/jq oniguruma -# Disable sse2 from CPU_FLAGS_X86 to avoid config error around simd -net-misc/rsync -cpu_flags_x86_sse2 - # Don't read the firmware config from /etc/portage/savedconfig/ sys-kernel/coreos-firmware -savedconfig