Re: Heads-up: OpenSSL update

[Michel Alexandre Salim]

Hi Dmitry,

On Thu, 2023-02-09 at 18:02 +0100, Dmitry Belyavskiy wrote:
>  Dear colleagues,
>  
>  I've just pushed updates of OpenSSL to the 3.0.8 version to f36/37.
>  I will also push to f38 and rawhide later today.
>  
>  This is a security release, it fixes 8 MODERATE CVEs
>  (https://www.openssl.org/news/secadv/20230207.txt)
>  
>  I kindly ask you to test the version so it could be rolled up
>  earlier.
>   
Would you happen to have any insight into why some tests are failing
when rebuilt on EPEL 8?

This is with a scratch build of EPEL 8's openssl3 (which is just a
rebuild of openssl but renamed and with some subpackages removed)
https://koji.fedoraproject.org/koji/taskinfo?taskID=97314920

The errors are all identical, so to be doubly sure I rebuilt the centos
9 srpm (only on x86_64), just slightly modified to change the g++ BR to
gcc-c++, and it failed identically
https://koji.fedoraproject.org/koji/taskinfo?taskID=97318473

# The following symbols are missing in libcrypto.so.3:
#   OPENSSL_strcasecmp
#   OPENSSL_strncasecmp
# The following symbols are extra in libcrypto.so.3:
#   BIO_dgram_is_sctp
#   BIO_dgram_sctp_msg_waiting
#   BIO_dgram_sctp_notification_cb
#   BIO_dgram_sctp_wait_for_dry
#   BIO_new_dgram_sctp
#   BIO_s_datagram_sctp
not ok 2 - check that there are no missing symbols in libcrypto.so.3
# ---------------------------------------------------------------------
---------03-test_internal_modes.t ........... ok
03-test_internal_namemap.t ......... ok
03-test_internal_curve448.t ........ ok
03-test_internal_poly1305.t ........ ok
# Looks like you failed 1 test of 4.01-test_symbol_presence.t
.......... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/4 subtests 
02-test_lhash.t .......

Thanks,

-- 
Michel Alexandre Salim
identities:
https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2