[Deepin Integration]~[V23-Beta3] fix: merge upstream commit,fix CVE-2024-6119 by alongnice@deepin-community/openssl by deepin-community-ci-bot[bot]

deepin-bot[bot] commented 1 week ago

Package information | 软件包信息

包名	版本
openssl	3.2.0-2deepin2

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-2111/testing/ ./

Changelog | 更新信息

openssl (3.2.0-2deepin2) unstable; urgency=medium

fix CVE-2024-6119.

deepin-bot[bot] commented 1 week ago

Integration Test Info

Test suggestion | 测试建议

安全漏洞修复 fix https://github.com/advisories/GHSA-7m4m-pwhv-49c5.

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

deepin-bot[bot] commented 1 week ago

IntegrationProjector Notify the author @alongnice: Integrated issue updated

deepin-bot[bot] commented 1 week ago

IntegrationProjector Bot Deepin Testing Integration Project Manager Info Link to https://github.com/deepin-community/Repository-Integration/pull/2111

babyfengfjx commented 1 week ago

@kobe337 请开展集成验证。

kobe337 commented 1 week ago

【环境】：镜像：Deepin OS-23-20241017072316-1_x86_64 内核：Linux node1 6.6.52-amd64-desktop-hwe #23.01.00.38 SMP PREEMPT_DYNAMIC Tue Sep 24 17:30:32 CST 2024 x86_64 GNU/Linux

【结论】：测试通过，暂无严重问题及影响, 覆盖场景如下： 1、安装校验、版本核对 2、openssl生成证书基本功能验证 3、openssl网络连接验证 4、cve漏洞修复：CVE-2024-6119漏洞关于X.509 证书漏洞，可能会尝试读取无效的内存地址，导致终止应用程序异常，查看本次提交的内容，对比上游提供的修复代码，本次提交debian/patches/CVE-2024-6119.patch 中，32~250行已做修复处理。 5、本地注销与重启，登入。以上内容验证通过。

生成证书：网络连接测试：上游修复代码片段：

linuxdeepin / developer-center