[Debian] CVE: CVE-2022-24805/CVE-2022-24806/.../CVE-2022-24810: net-snmp: multiple

[Yue Tao]

CVE-2022-24805: https://nvd.nist.gov/vuln/detail/CVE-2022-24805

CVE-2022-24806: https://nvd.nist.gov/vuln/detail/CVE-2022-24806

CVE-2022-24807: https://nvd.nist.gov/vuln/detail/CVE-2022-24807

CVE-2022-24808: https://nvd.nist.gov/vuln/detail/CVE-2022-24808

CVE-2022-24809: https://nvd.nist.gov/vuln/detail/CVE-2022-24809

CVE-2022-24810: https://nvd.nist.gov/vuln/detail/CVE-2022-24810

Base Score: High (refer to https://www.tenable.com/plugins/nessus/164160)

References:

['libsnmp-base_5.9+dfsg-3_all.deb===>libsnmp-base_5.9+dfsg-4+deb11u1_all.deb', 'libsnmp40_5.9+dfsg-3_amd64.deb===>libsnmp40_5.9+dfsg-4+deb11u1_amd64.deb']

https://www.debian.org/security/2022/dsa-5209

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/tools/+/884589

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/tools/+/884589
Committed: https://opendev.org/starlingx/tools/commit/8923527683178de49fd78e25406a096597c93278
Submitter: "Zuul (22348)"
Branch: master

commit 8923527683178de49fd78e25406a096597c93278
Author: Zhixiong Chi <email address hidden>
Date: Thu May 25 18:00:27 2023 +0800

    net-snmp: fix multiple CVEs

    Upgrade sub-packages to 5.9+dfsg-4+deb11u1 for the CVEs:
    CVE-2022-24805
    CVE-2022-24806
    CVE-2022-24807
    CVE-2022-24808
    CVE-2022-24809
    CVE-2022-24810

    Refer to:
    https://www.debian.org/security/2022/dsa-5209

    TestPlan:
    PASS: downloader
    PASS: build-pkgs -a -c
    PASS: build-image
    PASS: Jenkins Installation.
    PASS: dpkg -l |grep libsnmp
    ii libsnmp-base 5.9+dfsg-4+deb11u1
    ii libsnmp40:amd64 5.9+dfsg-4+deb11u1

    Closes-Bug: 2020729

    Signed-off-by: Zhixiong Chi <email address hidden>
    Change-Id: Ic8530f2e19c4fdfe11f05db83a35c84a756a76dd