[Deepin Integration]~[V23-Release] merge upstream patch,fix CVE-2024-5564 by alongnice@deepin-community/libndp by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
libndp	1.8-1deepin1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-1950/testing/ ./

Changelog | 更新信息

libndp (1.8-1deepin1) unstable; urgency=medium

• merge upstream patch,fix CVE-2024-5564.

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@alongnice: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#1950

[alongnice]

Integration Test Info

Test suggestion | 测试建议

测试基本功能即可

Influence | 影响范围

无

ADDITIONAL INFORMATION | 额外补充

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.

[babyfengfjx]

@xuqi27837288 请开展集成验证。

[xuqi27837288]

【验证环境】：v23 Release镜像
镜像：https://packagesupdate.uniontech.com/repo/uos-professional/image-beige/CUSTOM/lichenggang/20240814
仓库：deb https://ci.deepin.com/repo/deepin/deepin-community/testing/ unstable main dde community commercial
内核：Linux test-PC 6.9.6-amd64-desktop-hwe
【验证步骤】：问题单中描述的步骤
【验证结果】：集成测试通过.使用过程中暂未发现严重问题