tree 4d79b8754701da2ea936fd9aebdb4a13beae76e1
parent de11c8b31f33321892489fcea660226fe9e10104
author Arnav Kansal <rnv@google.com> 1695339834 +0000
committer Arnav Kansal <rnv@google.com> 1695414381 +0000

Fix multiple CVEs in glib and glib-utils.

Introduces patches:
1. https://gitlab.gnome.org/GNOME/glib/-/merge_requests/3126 Backport !3125
   “Various fixes to normal form handling in GVariant” to glib-2-74
To fix CVE-2023-29499, CVE-2023-32665, CVE-2023-32611.

The set of first patches introduces more vulnerabilities which are fixed in

2. https://gitlab.gnome.org/GNOME/glib/-/merge_requests/3164 Backport !3163
   “gvariant: Check offset table doesn’t fall outside variant bounds and speed
   up text parsing” to glib-2-74
To fix CVE-2023-32636, CVE-2023-32643

BUG=b/301208987, b/301383832, b/301208986, b/301219422, b/301219451, b/301394701, b/301219743, b/301394621, b/301208945, b/301382032, b/301219919, b/301394702, b/301214643, b/301151645, b/301152946, b/301318568, b/301152847, b/301321855, b/301220192, b/301397146, b/301220055, b/301393170, b/301217297, b/301206803, b/301203614, b/301379067, b/301207397, b/301383831, b/301216401, b/301394620, b/301152837, b/301320043, b/301152761, b/301172478, b/301172933, b/301347449, b/301171741, b/301349120, b/301152754, b/301322359, b/301150464, b/301319883, b/301151036, b/301152815, b/301320399, b/301244156, b/301427580, b/301244157, b/301245412, b/301427579
TEST=presubmit
RELEASE_NOTE=Fix CVE-2023-32636, CVE-2023-29499, CVE-2023-32643, CVE-2023-32665,
CVE-2023-32611 in glib and glib-utils.

cos-patch: security-low
Change-Id: Id521c349937eac9308689a6982c984f31f9074d7
Reviewed-on: https://cos-review.googlesource.com/c/third_party/overlays/chromiumos-overlay/+/57694
Reviewed-by: Oleksandr Tymoshenko <ovt@google.com>
Main-Branch-Verified: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>