tree 54fe2383280e857779999f9260fd6fbea0e1e2e6
parent bed64389bea4beb31f03df2195ca5805ea89db07
author Robert Kolchmeyer <rkolchmeyer@google.com> 1596673498 -0700
committer Robert Kolchmeyer <rkolchmeyer@google.com> 1596739282 -0700

lakitu: Uprev grub to pick up security fixes

The addressed CVEs are:
- CVE-2020-14308
- CVE-2020-14311
- CVE-2020-15705

In order to compile grub with the new changes, we needed to switch to
clang. I made the necessary ebuild changes for this to happen. I'm not
worried about clang introducing regressions, since our usage of grub is
pretty predictable. I think our tests are pretty comprehensive for our
relatively simple grub use case.

BUG=b/162782466,b/137884271
TEST=tryjob,shielded_vm_test
RELEASE_NOTE=Backported fixes for CVE-2020-14308, CVE-2020-14311,
and CVE-2020-15705 in grub.

Change-Id: I3f742f8d5503a1bfa6ba10debdb2231a702d3969