[23.11] iwd: apply patches for CVE-2023-52161 and buffer overflows

[LeSuisse]

Description of changes

AFAIK the buffer overflows did not get a CVE ID assigned and I'm not sure it can be exploited in a meaningful way. The patches are pretty small and self contained so it should be fine to include them "just in case".

unstable is using the latest version that include all the patches.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 308218 run on x86_64-linux 1

4 packages built:

• iwd
• iwd.doc
• iwd.man
• iwd.test

---

Add a 👍 reaction to pull requests you find important.

[leona-ya]

Wonderful. More buffer overflows in iwd sigh