diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 09ad6f16f2..447fad8bca 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -55,6 +55,9 @@ dev-cpp/azure-security-keyvault-keys
 =dev-libs/cowsql-1.15.9 ~arm64
 =dev-libs/ding-libs-0.6.2-r1 ~arm64
 
+# CVE-2025-7039
+=dev-libs/glib-2.84.4 ~amd64 ~arm64
+
 # The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet.
 =dev-libs/jose-12 **
 =dev-libs/luksmeta-9-r1 **
@@ -71,6 +74,10 @@ dev-cpp/azure-security-keyvault-keys
 # Catalyst 4 is not stable yet, but earlier versions are masked now.
 =dev-util/catalyst-4.0.0 ~amd64 ~arm64
 
+# CVE-2025-7039
+=dev-util/gdbus-codegen-2.84.4 ~amd64 ~arm64
+=dev-util/glib-utils-2.84.4 ~amd64 ~arm64
+
 # Keep versions on both arches in sync.
 =dev-util/xdelta-3.0.11-r1 ~arm64