starlingx
/
tools
Code Issues Proposed changes

Debian: glibc : fix CVE-2024-2961 

Upgrade libc6 to 2.31-13+deb11u9
Upgrade libc6-dev to 2.31-13+deb11u9
Upgrade libc-bin to 2.31-13+deb11u9
Upgrade libc-dev-bin to 2.31-13+deb11u9
Upgrade libc-l10n to 2.31-13+deb11u9
Upgrade locales to 2.31-13+deb11u9
Upgrade locales-all to 2.31-13+deb11u9

Refer to:
https://nvd.nist.gov/vuln/detail/CVE-2024-2961
https://security-tracker.debian.org/tracker/DSA-5673-1

Test Plan:
Pass: downloader
Pass: build-pkgs --clean --all
Pass: build-image
Pass: boot

Closes-bug: #2063188

Change-Id: Ie741471bcb05c15d96037020fba168d0a2f4566f
Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com>
This commit is contained in:
Wentao Zhang 2024-04-28 03:19:25 -07:00 committed by Wentao Zhang
parent 7c759a4764
commit 660f7ad92e
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -274,8 +274,8 @@ libbrotli1 1.0.9-2+b2
libbsd0 0.11.3-1
libbson-1.0-0 1.17.6-1
libbz2-1.0 1.0.8-4
libc6 2.31-13+deb11u7 https://snapshot.debian.org/archive/debian-security/20231003T172636Z/pool/updates/main/g/glibc/libc6_2.31-13%2Bdeb11u7_amd64.deb
libc6-dev 2.31-13+deb11u7 https://snapshot.debian.org/archive/debian-security/20231003T172636Z/pool/updates/main/g/glibc/libc6-dev_2.31-13%2Bdeb11u7_amd64.deb
libc6 2.31-13+deb11u9 https://snapshot.debian.org/archive/debian-security/20240423T070953Z/pool/updates/main/g/glibc/libc6_2.31-13%2Bdeb11u9_amd64.deb
libc6-dev 2.31-13+deb11u9 https://snapshot.debian.org/archive/debian-security/20240423T070953Z/pool/updates/main/g/glibc/libc6-dev_2.31-13%2Bdeb11u9_amd64.deb
libc6.1-dev-alpha-cross 2.31-9cross4
libcairo2 1.16.0-5
libcap2 1:2.44-1
@ -287,11 +287,11 @@ libcapstone4 4.0.2-3
libcacard-dev 1:2.8.0-3
libcacard0 1:2.8.0-3
libc-ares2 1.17.1-1+deb11u3 https://snapshot.debian.org/archive/debian-security/20230607T043432Z/pool/updates/main/c/c-ares/libc-ares2_1.17.1-1%2Bdeb11u3_amd64.deb
libc-bin 2.31-13+deb11u7 https://snapshot.debian.org/archive/debian-security/20231003T172636Z/pool/updates/main/g/glibc/libc-bin_2.31-13%2Bdeb11u7_amd64.deb
libc-bin 2.31-13+deb11u9 https://snapshot.debian.org/archive/debian-security/20240423T070953Z/pool/updates/main/g/glibc/libc-bin_2.31-13%2Bdeb11u9_amd64.deb
libcbor0 0.5.0+dfsg-2
libcc1-0 10.2.1-6
libc-dev-bin 2.31-13+deb11u7 https://snapshot.debian.org/archive/debian-security/20231003T172636Z/pool/updates/main/g/glibc/libc-dev-bin_2.31-13%2Bdeb11u7_amd64.deb
libc-l10n 2.31-13+deb11u7 https://snapshot.debian.org/archive/debian-security/20231003T172636Z/pool/updates/main/g/glibc/libc-l10n_2.31-13%2Bdeb11u7_all.deb
libc-dev-bin 2.31-13+deb11u9 https://snapshot.debian.org/archive/debian-security/20240423T070953Z/pool/updates/main/g/glibc/libc-dev-bin_2.31-13%2Bdeb11u9_amd64.deb
libc-l10n 2.31-13+deb11u9 https://snapshot.debian.org/archive/debian-security/20240423T070953Z/pool/updates/main/g/glibc/libc-l10n_2.31-13%2Bdeb11u9_all.deb
libcgroup1 0.41-11
libcollection4 0.6.1-2
libcom-err2 1.46.2-2
@ -772,8 +772,8 @@ libzmq5 4.3.4-1
libzstd1 1.4.8+dfsg-2.1
linux-base 4.6
linux-cpupower 5.10.106-1 https://snapshot.debian.org/archive/debian/20220703T032011Z/pool/main/l/linux/linux-cpupower_5.10.106-1_amd64.deb
locales 2.31-13+deb11u7 https://snapshot.debian.org/archive/debian-security/20231003T172636Z/pool/updates/main/g/glibc/locales_2.31-13%2Bdeb11u7_all.deb
locales-all 2.31-13+deb11u7 https://snapshot.debian.org/archive/debian-security/20231003T172636Z/pool/updates/main/g/glibc/locales-all_2.31-13%2Bdeb11u7_amd64.deb
locales 2.31-13+deb11u9 https://snapshot.debian.org/archive/debian-security/20240423T070953Z/pool/updates/main/g/glibc/locales_2.31-13%2Bdeb11u9_all.deb
locales-all 2.31-13+deb11u9 https://snapshot.debian.org/archive/debian-security/20240423T070953Z/pool/updates/main/g/glibc/locales-all_2.31-13%2Bdeb11u9_amd64.deb
login 1:4.8.1-1
logrotate 3.18.0-2+deb11u1 https://snapshot.debian.org/archive/debian/20220702T033910Z/pool/main/l/logrotate/logrotate_3.18.0-2%2Bdeb11u1_amd64.deb
logsave 1.46.2-2