bd151f96e9e31325751f46dce29589410e04ad2e - third_party/overlays/chromiumos-overlay

commit	bd151f96e9e31325751f46dce29589410e04ad2e	[log] [tgz]
author	Oleksandr Tymoshenko <ovt@google.com>	Tue Apr 30 00:26:18 2024 +0000
committer	Oleksandr Tymoshenko <ovt@google.com>	Thu May 02 19:43:02 2024 +0000
tree	00c643bc1c6974342be169d74d963446bab97671
parent	fdb6f1038c1ed27df7454def0e1133a876c017af [diff]

sys-libs/glibc: fix multiple CVEs

BUG=b/334209382,b/335882683,b/337757315,b/337757574,b/337757764,b/337757765
TEST=sudo emerge sys-libs/glibc
RELEASE_NOTE=Fixed CVE-2023-0687, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 in sys-libs/glibc.

cos-patch: security-high
Change-Id: I780f3f6faf9e36cc407719e6f7d3eaa23f7b8fcd
Reviewed-on: https://cos-review.googlesource.com/c/third_party/overlays/chromiumos-overlay/+/70872
Main-Branch-Verified: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Michael Kochera <kochera@google.com>
Tested-by: Oleksandr Tymoshenko <ovt@google.com>

sys-libs/glibc/files/local/glibc-2.33/0012-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.33/0013-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.33/0014-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.33/0015-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.33/0016-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two-.patch[Added - diff]
sys-libs/glibc/files/local/glibc-2.33/0017-gmon-Fix-allocated-buffer-overflow-bug-29444.patch[Added - diff]
sys-libs/glibc/glibc-2.33-r18.ebuild[Renamed from sys-libs/glibc/glibc-2.33-r17.ebuild - diff]

7 files changed