Dear Michel,
In RHEL/CentOS we currently provide a double versioning for
OPENSSL_strcasecmp and OPENSSL_strncasecmp functions.
They were added in 3.0.1 downstream and 3.0.3 upstream.
0056-strcasecmp.patch in CentOS stream fixes the test in question.
On Thu, Feb 9, 2023 at 9:47 PM Michel Alexandre Salim
<salimma(a)fedoraproject.org> wrote:
Hi Dmitry,
On Thu, 2023-02-09 at 18:02 +0100, Dmitry Belyavskiy wrote:
> Dear colleagues,
>
> I've just pushed updates of OpenSSL to the 3.0.8 version to f36/37.
> I will also push to f38 and rawhide later today.
>
> This is a security release, it fixes 8 MODERATE CVEs
> (
https://www.openssl.org/news/secadv/20230207.txt)
>
> I kindly ask you to test the version so it could be rolled up
> earlier.
>
Would you happen to have any insight into why some tests are failing
when rebuilt on EPEL 8?
This is with a scratch build of EPEL 8's openssl3 (which is just a
rebuild of openssl but renamed and with some subpackages removed)
https://koji.fedoraproject.org/koji/taskinfo?taskID=97314920
The errors are all identical, so to be doubly sure I rebuilt the centos
9 srpm (only on x86_64), just slightly modified to change the g++ BR to
gcc-c++, and it failed identically
https://koji.fedoraproject.org/koji/taskinfo?taskID=97318473
# The following symbols are missing in libcrypto.so.3:
# OPENSSL_strcasecmp
# OPENSSL_strncasecmp
# The following symbols are extra in libcrypto.so.3:
# BIO_dgram_is_sctp
# BIO_dgram_sctp_msg_waiting
# BIO_dgram_sctp_notification_cb
# BIO_dgram_sctp_wait_for_dry
# BIO_new_dgram_sctp
# BIO_s_datagram_sctp
not ok 2 - check that there are no missing symbols in libcrypto.so.3
# ---------------------------------------------------------------------
---------03-test_internal_modes.t ........... ok
03-test_internal_namemap.t ......... ok
03-test_internal_curve448.t ........ ok
03-test_internal_poly1305.t ........ ok
# Looks like you failed 1 test of 4.01-test_symbol_presence.t
..........
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/4 subtests
02-test_lhash.t .......
Thanks,
--
Michel Alexandre Salim
identities:
https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2
_______________________________________________
devel mailing list -- devel(a)lists.fedoraproject.org
To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue