2167bc9f7ddad4c42398a818db90f16c67ebe9f3 - third_party/overlays/chromiumos-overlay

commit	2167bc9f7ddad4c42398a818db90f16c67ebe9f3	[log] [tgz]
author	Oleksandr Tymoshenko <ovt@google.com>	Tue Apr 30 01:07:03 2024 +0000
committer	Oleksandr Tymoshenko <ovt@google.com>	Wed May 01 03:55:24 2024 +0000
tree	20d5cabf72bb8c9032809aed330b80efd41d3107
parent	959b3b89bcea0cfa395cbb9251b7f0a09586a0b6 [diff]

sys-libs/glibc: fix multiple CVEs

BUG=b/334352798,b/335669188,b/337679760,b/337680086,b/337680163,b/337680226
TEST=sudo emerge sys-libs/glibc
RELEASE_NOTE=Fixed CVE-2023-0687, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 in sys-libs/glibc.

cos-patch: security-high
Change-Id: I780f3f6faf9e36cc407719e6f7d3eaa23f7b8fcd
Reviewed-on: https://cos-review.googlesource.com/c/third_party/overlays/chromiumos-overlay/+/70853
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Robert Kolchmeyer <rkolchmeyer@google.com>

sys-libs/glibc/files/local/glibc-2.35/0011-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.35/0012-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.35/0013-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.35/0014-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.35/0015-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two-.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.35/0016-gmon-Fix-allocated-buffer-overflow-bug-29444.patch[Added - diff]
sys-libs/glibc/glibc-2.35-r22.ebuild[Renamed from sys-libs/glibc/glibc-2.35-r21.ebuild - diff]

7 files changed

tree: 20d5cabf72bb8c9032809aed330b80efd41d3107