[Debian] High CVE: CVE-2023-4911 glibc

[Yue Tao]

CVE-2023-4911: https://nvd.nist.gov/vuln/detail/CVE-2023-4911

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Base Score: High

Reference:

['libc6_2.31-13+deb11u6_amd64.deb===>libc6_2.31-13+deb11u7_amd64.deb', 'libc6-dev_2.31-13+deb11u6_amd64.deb===>libc6-dev_2.31-13+deb11u7_amd64.deb', 'libc-bin_2.31-13+deb11u6_amd64.deb===>libc-bin_2.31-13+deb11u7_amd64.deb', 'libc-dev-bin_2.31-13+deb11u6_amd64.deb===>libc-dev-bin_2.31-13+deb11u7_amd64.deb', 'libc-l10n_2.31-13+deb11u6_all.deb===>libc-l10n_2.31-13+deb11u7_all.deb', 'locales_2.31-13+deb11u6_all.deb===>locales_2.31-13+deb11u7_all.deb', 'locales-all_2.31-13+deb11u6_amd64.deb===>locales-all_2.31-13+deb11u7_amd64.deb']
https://www.debian.org/security/2023/dsa-5514
https://www.tenable.com/plugins/nessus/182473

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/tools/+/898081

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/tools/+/898081
Committed: https://opendev.org/starlingx/tools/commit/a84aae22a927e5c89833076eadf98226d84cc8f1
Submitter: "Zuul (22348)"
Branch: master

commit a84aae22a927e5c89833076eadf98226d84cc8f1
Author: Li Zhou <email address hidden>
Date: Fri Oct 6 23:37:33 2023 -0700

    Debian: glibc: fix CVE-2023-4911

    Upgrade glibc related packages' version from 2.31-13+deb11u6
    to 2.31-13+deb11u7 to fix CVE-2023-4911.

    Test Plan:
     Pass: downloader
     Pass: build-pkgs --clean --all
     Pass: build-image
     Pass: boot

    Closes-bug: #2038708

    Signed-off-by: Li Zhou <email address hidden>
    Change-Id: Ic3da36041676ff43de5d6170c5d76a3995a9113f