[Deepin Integration]~[V23-Beta3] fixes CVE-2022-0529, CVE-2022-0530 and CVE-2021-4217 by UTsweetyfish@deepin-community/unzip by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
unzip	6.0.1-deepin2

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-2400/testing/ ./

Changelog | 更新信息

unzip (6.0.1-deepin2) unstable; urgency=medium

[ Marc Deslauriers ]

• SECURITY UPDATE: Null pointer dereference in unzip (LP: #1957077)
  • debian/patches/CVE-2021-4217.patch: Fix null pointer dereference and
    use of uninitialized data.
  • CVE-2021-4217

[deepin-bot]

Integration Test Info

deepin-community/sig-deepin-security#28

Test suggestion | 测试建议

CVE-2021-4217

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@UTsweetyfish: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#2400

[babyfengfjx]

@kobe337 请优先处理~

[kobe337]

【环境】：
镜像：Deepin OS-25-20241107064136-1_x86_64
内核：Linux deepin-PC 6.12.1-amd64-desktop-rolling #23.01.01.13 SMP PREEMPT_DYNAMIC Tue Nov 26 15:29:22 CST 2024 x86_64 GNU/Linux

【结论】：
测试通过，暂无严重问题及影响, 覆盖以下内容：
1、安装校验、版本核对
2、基于deepin23 stable版本与内测最新版本验证
3、poc验证unzip的安全漏洞
4、升级后的相关应用包安装验证：patool、mc、printer-driver-foo2zjs、git-buildpackage、xarchiver、systemtap-client、systemtap-server、ruby-zip、java-wrappers、hunspell、engrampa、python3-stdeb、r-base-core、opam、audacious、ark、unzip-dbgsym
以上内容验证通过，请研发同事确认，是否合入仓库