[Debian] Medium CVE: CVE-2024-2961 glibc

[Yue Tao]

CVE-2024-2961: https://nvd.nist.gov/vuln/detail/CVE-2024-2961

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

Base Score: Medium

Reference:

['libc6_2.31-13+deb11u7_amd64.deb===>libc6_2.31-13+deb11u9_amd64.deb', 'libc6-dev_2.31-13+deb11u7_amd64.deb===>libc6-dev_2.31-13+deb11u9_amd64.deb', 'libc-bin_2.31-13+deb11u7_amd64.deb===>libc-bin_2.31-13+deb11u9_amd64.deb', 'libc-dev-bin_2.31-13+deb11u7_amd64.deb===>libc-dev-bin_2.31-13+deb11u9_amd64.deb', 'libc-l10n_2.31-13+deb11u7_all.deb===>libc-l10n_2.31-13+deb11u9_all.deb', 'locales_2.31-13+deb11u7_all.deb===>locales_2.31-13+deb11u9_all.deb', 'locales-all_2.31-13+deb11u7_amd64.deb===>locales-all_2.31-13+deb11u9_amd64.deb']
https://security-tracker.debian.org/tracker/DSA-5673-1

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/tools/+/917289

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/tools/+/917289
Committed: https://opendev.org/starlingx/tools/commit/660f7ad92effc65387cda1b2f728b6313730733e
Submitter: "Zuul (22348)"
Branch: master

commit 660f7ad92effc65387cda1b2f728b6313730733e
Author: Wentao Zhang <email address hidden>
Date: Sun Apr 28 03:19:25 2024 -0700

    Debian: glibc : fix CVE-2024-2961

    Upgrade libc6 to 2.31-13+deb11u9
    Upgrade libc6-dev to 2.31-13+deb11u9
    Upgrade libc-bin to 2.31-13+deb11u9
    Upgrade libc-dev-bin to 2.31-13+deb11u9
    Upgrade libc-l10n to 2.31-13+deb11u9
    Upgrade locales to 2.31-13+deb11u9
    Upgrade locales-all to 2.31-13+deb11u9

    Refer to:
    https://nvd.nist.gov/vuln/detail/CVE-2024-2961
    https://security-tracker.debian.org/tracker/DSA-5673-1

    Test Plan:
    Pass: downloader
    Pass: build-pkgs --clean --all
    Pass: build-image
    Pass: boot

    Closes-bug: #2063188

    Change-Id: Ie741471bcb05c15d96037020fba168d0a2f4566f
    Signed-off-by: Wentao Zhang <email address hidden>