From: "Girar awaiter (vseleznv)" <girar-builder@altlinux.org> To: "Vladimir D. Seleznev" <vseleznv@altlinux.org> Cc: sisyphus-incominger@lists.altlinux.org, girar-builder-p8@altlinux.org Subject: [#293697] p8 EPERM (try 4) expat.git=2.4.3-alt1 Date: Wed, 2 Feb 2022 15:44:59 +0000 Message-ID: <girar.task.293697.4.1@gyle.mskdc.altlinux.org> (raw) In-Reply-To: <girar.task.293697.1.1@gyle.mskdc.altlinux.org> https://git.altlinux.org/tasks/293697/logs/events.4.1.log 2022-Feb-02 15:41:50 :: task #293697 for p8 resumed by vseleznv: 2022-Feb-02 15:41:50 :: message: Security backport #100 build 2.4.3-alt1 from /people/vseleznv/packages/expat.git fetched at 2022-Jan-18 12:26:47 2022-Feb-02 15:41:51 :: [i586] #100 expat.git 2.4.3-alt1: build start 2022-Feb-02 15:41:51 :: [x86_64] #100 expat.git 2.4.3-alt1: build start 2022-Feb-02 15:42:11 :: [i586] #100 expat.git 2.4.3-alt1: build OK (cached) 2022-Feb-02 15:42:12 :: [x86_64] #100 expat.git 2.4.3-alt1: build OK (cached) 2022-Feb-02 15:42:20 :: #100: expat.git 2.4.3-alt1: build check OK 2022-Feb-02 15:42:20 :: build check OK 2022-Feb-02 15:42:23 :: noarch check OK 2022-Feb-02 15:42:24 :: plan: src +1 -1 =18243, i586 +5 -5 =35350, x86_64 +5 -5 =35354 #100 expat 2.2.4-alt0.M80P.1 -> 2.4.3-alt1 Tue Jan 18 2022 Vladimir D. Seleznev <vseleznv@altlinux> 2.4.3-alt1 - Updated to 2.4.3 (with multiple security fixes). - Fixes: + CVE-2021-45960 issues with left shift by >= 29 places in function storeAtts that can lead to realloc misbehavior; + CVE-2021-46143 Integer overflow on variable m_groupSize in function doProlog; + CVE-2022-22822 Integer overflows near memory allocation in function addBinding; + CVE-2022-22823 Integer overflows near memory allocation in function build_model; + CVE-2022-22824 Integer overflows near memory allocation in function defineAttribute; + CVE-2022-22825 Integer overflows near memory allocation in function lookup; [...] 2022-Feb-02 15:42:24 :: expat: closes bugs: 41571 2022-Feb-02 15:42:24 :: expat: fixes vulnerabilities: CVE-2018-20843 CVE-2019-15903 2022-Feb-02 15:42:24 :: expat: mentions vulnerabilities: CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 2022-Feb-02 15:42:53 :: patched apt indices 2022-Feb-02 15:42:57 :: created next repo 2022-Feb-02 15:43:05 :: duplicate provides check OK 2022-Feb-02 15:43:36 :: dependencies check OK 2022-Feb-02 15:43:36 :: [i586 x86_64] no need to repeat ELF symbols check 2022-Feb-02 15:43:36 :: [i586 x86_64] ELF symbols check OK 2022-Feb-02 15:43:59 :: [i586] #100 expat: install check OK (cached) 2022-Feb-02 15:43:59 :: [x86_64] #100 expat: install check OK (cached) 2022-Feb-02 15:44:03 :: [i586] #100 expat-debuginfo: install check OK (cached) 2022-Feb-02 15:44:03 :: [x86_64] #100 expat-debuginfo: install check OK (cached) 2022-Feb-02 15:44:07 :: [i586] #100 libexpat: install check OK (cached) 2022-Feb-02 15:44:07 :: [x86_64] #100 libexpat: install check OK (cached) 2022-Feb-02 15:44:11 :: [i586] #100 libexpat-debuginfo: install check OK (cached) 2022-Feb-02 15:44:11 :: [x86_64] #100 libexpat-debuginfo: install check OK (cached) i586: libexpat-devel=2.4.3-alt1 post-install unowned files: /usr/lib/cmake 2022-Feb-02 15:44:15 :: [i586] #100 libexpat-devel: install check OK (cached) x86_64: libexpat-devel=2.4.3-alt1 post-install unowned files: /usr/lib64/cmake 2022-Feb-02 15:44:15 :: [x86_64] #100 libexpat-devel: install check OK (cached) 2022-Feb-02 15:44:16 :: [x86_64-i586] plan: #0 +2 -2 =11977 2022-Feb-02 15:44:29 :: [x86_64-i586] generated apt indices 2022-Feb-02 15:44:30 :: [x86_64-i586] created next repo 2022-Feb-02 15:44:39 :: [x86_64-i586] dependencies check OK warning: #100: expat.git tag `2.4.3-alt1' is not inherited from /gears/e/expat.git branch `p8' (relaxed by sotor) 2022-Feb-02 15:44:39 :: gears inheritance check COND-OK for: #100 warning: #100: expat-2.4.3-alt1.src.rpm: missing last changelog entry from expat-2.2.4-alt0.M80P.1.src.rpm (relaxed by sotor): * Mon Aug 28 2017 at@altlinux 2.2.4-alt0 2022-Feb-02 15:44:39 :: srpm inheritance check COND-OK for: #100 girar-check-perms: access to expat DENIED for vseleznv: project `expat' is not listed in the acl file for repository `p8', and the policy for such projects in `p8' is to deny check-subtask-perms: #100: expat: Operation not permitted 2022-Feb-02 15:44:44 :: acl check FAILED 2022-Feb-02 15:44:51 :: created contents_index files 2022-Feb-02 15:44:57 :: created hash files: i586 src x86_64-i586 x86_64 2022-Feb-02 15:44:59 :: task #293697 for p8 EPERM
next prev parent reply other threads:[~2022-02-02 15:44 UTC|newest] Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top 2022-01-31 15:18 [#293697] p8 FAILED expat.git=2.4.3-alt1 Girar awaiter (vseleznv) 2022-02-01 11:08 ` [#293697] p8 FAILED (try 2) expat.git=2.4.3-alt1 Girar awaiter (vseleznv) 2022-02-02 13:24 ` [#293697] p8 FAILED (try 3) expat.git=2.4.3-alt1 Girar awaiter (vseleznv) 2022-02-02 15:44 ` Girar awaiter (vseleznv) [this message] 2022-02-03 13:16 ` [#293697] p8 FAILED (try 5) expat.git=2.4.3-alt1 lxc.git=4.0.11-alt1 del=cgmanager del=libnih Girar awaiter (vseleznv)
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=girar.task.293697.4.1@gyle.mskdc.altlinux.org \ --to=girar-builder@altlinux.org \ --cc=devel@lists.altlinux.org \ --cc=girar-builder-p8@altlinux.org \ --cc=sisyphus-incominger@lists.altlinux.org \ --cc=vseleznv@altlinux.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
ALT Linux Girar Builder robot reports This inbox may be cloned and mirrored by anyone: git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git # If you have public-inbox 1.1+ installed, you may # initialize and index your mirror using the following commands: public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \ sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com public-inbox-index sisyphus-incominger Example config snippet for mirrors. Newsgroup available over NNTP: nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger AGPL code for this site: git clone https://public-inbox.org/public-inbox.git