From: Girar Builder pender robot <girar-builder@altlinux.org>
To: Alexey Shabalin <shaba@altlinux.org>
Cc: sisyphus-incominger@lists.altlinux.org,
girar-builder-sisyphus@altlinux.org
Subject: [#247881] DONE cacti.git=1.2.10-alt1 cacti-spine.git=1.2.10-alt1
Date: Sun, 15 Mar 2020 20:38:22 +0000
Message-ID: <20200315203822.GA4076@gyle.altlinux.org> (raw)
http://git.altlinux.org/tasks/archive/done/_242/247881/logs/events.1.1.log
2020-Mar-15 20:29:40 :: task #247881 for sisyphus started by shaba:
#100 build 1.2.10-alt1 from /people/shaba/packages/cacti.git fetched at 2020-Mar-15 20:23:09
#200 build 1.2.10-alt1 from /people/shaba/packages/cacti-spine.git fetched at 2020-Mar-15 20:29:32
2020-Mar-15 20:29:57 :: created build repo
2020-Mar-15 20:29:59 :: [i586] #100 cacti.git 1.2.10-alt1: build start
2020-Mar-15 20:29:59 :: [ppc64le] #100 cacti.git 1.2.10-alt1: build start
2020-Mar-15 20:29:59 :: [aarch64] #100 cacti.git 1.2.10-alt1: build start
2020-Mar-15 20:29:59 :: [x86_64] #100 cacti.git 1.2.10-alt1: build start
2020-Mar-15 20:31:19 :: [x86_64] #100 cacti.git 1.2.10-alt1: build OK
2020-Mar-15 20:31:19 :: [x86_64] #200 cacti-spine.git 1.2.10-alt1: build start
2020-Mar-15 20:31:27 :: [i586] #100 cacti.git 1.2.10-alt1: build OK
2020-Mar-15 20:31:27 :: [i586] #200 cacti-spine.git 1.2.10-alt1: build start
2020-Mar-15 20:31:36 :: [aarch64] #100 cacti.git 1.2.10-alt1: build OK
2020-Mar-15 20:31:36 :: [aarch64] #200 cacti-spine.git 1.2.10-alt1: build start
2020-Mar-15 20:31:41 :: [ppc64le] #100 cacti.git 1.2.10-alt1: build OK
2020-Mar-15 20:31:41 :: [ppc64le] #200 cacti-spine.git 1.2.10-alt1: build start
2020-Mar-15 20:32:01 :: [x86_64] #200 cacti-spine.git 1.2.10-alt1: build OK
2020-Mar-15 20:32:10 :: [i586] #200 cacti-spine.git 1.2.10-alt1: build OK
2020-Mar-15 20:32:23 :: [aarch64] #200 cacti-spine.git 1.2.10-alt1: build OK
2020-Mar-15 20:32:33 :: [ppc64le] #200 cacti-spine.git 1.2.10-alt1: build OK
2020-Mar-15 20:32:45 :: #100: cacti.git 1.2.10-alt1: build check OK
2020-Mar-15 20:32:55 :: #200: cacti-spine.git 1.2.10-alt1: build check OK
2020-Mar-15 20:32:55 :: build check OK
2020-Mar-15 20:33:11 :: noarch check OK
2020-Mar-15 20:33:13 :: plan: src +2 -2 =17538, aarch64 +2 -2 =28782, i586 +2 -2 =30625, noarch +2 -2 =17714, ppc64le +2 -2 =29273, x86_64 +2 -2 =30970
2020-Mar-15 20:33:13 :: version check OK
#100 cacti 1.2.3-alt1 -> 1.2.10-alt1
Sun Mar 15 2020 Alexey Shabalin <shaba@altlinux> 1.2.10-alt1
- 1.2.10
- Fixes:
+ CVE-2019-17357 When viewing graphs, some input variables are not properly checked (SQL injection possible)
+ CVE-2019-17358 When deserializating data, ensure basic sanitization has been performed
+ CVE-2019-16723 Security issue allows to view all graphs
+ CVE-2020-7106 Lack of escaping on some pages can lead to XSS exposure
+ CVE-2020-7237 Remote Code Execution due to input validation failure in Performance Boost Debug Log
+ CVE-2020-8813 When guest users have access to realtime graphs, remote code could be executed
#200 cacti-spine 1.2.3-alt1 -> 1.2.10-alt1
Sun Mar 15 2020 Alexey Shabalin <shaba@altlinux> 1.2.10-alt1
- 1.2.10
2020-Mar-15 20:33:13 :: cacti: mentions vulnerabilities: CVE-2019-17357 CVE-2019-17358 CVE-2019-16723 CVE-2020-7106 CVE-2020-7237 CVE-2020-8813
2020-Mar-15 20:34:06 :: generated apt indices
2020-Mar-15 20:34:06 :: created next repo
2020-Mar-15 20:34:34 :: dependencies check OK
2020-Mar-15 20:35:06 :: [x86_64 i586 aarch64 ppc64le] ELF symbols check OK
2020-Mar-15 20:35:29 :: [i586] #100 cacti: install check OK
2020-Mar-15 20:35:30 :: [x86_64] #100 cacti: install check OK
2020-Mar-15 20:35:32 :: [ppc64le] #100 cacti: install check OK
2020-Mar-15 20:35:40 :: [i586] #100 cacti-setup: install check OK
2020-Mar-15 20:35:41 :: [x86_64] #100 cacti-setup: install check OK
2020-Mar-15 20:35:47 :: [ppc64le] #100 cacti-setup: install check OK
2020-Mar-15 20:35:52 :: [i586] #200 cacti-spine: install check OK
2020-Mar-15 20:35:52 :: [x86_64] #200 cacti-spine: install check OK
2020-Mar-15 20:36:02 :: [ppc64le] #200 cacti-spine: install check OK
2020-Mar-15 20:36:07 :: [i586] #200 cacti-spine-debuginfo: install check OK
2020-Mar-15 20:36:08 :: [x86_64] #200 cacti-spine-debuginfo: install check OK
2020-Mar-15 20:36:21 :: [ppc64le] #200 cacti-spine-debuginfo: install check OK
2020-Mar-15 20:36:38 :: [x86_64-i586] generated apt indices
2020-Mar-15 20:36:38 :: [x86_64-i586] created next repo
2020-Mar-15 20:36:46 :: [x86_64-i586] dependencies check OK
2020-Mar-15 20:36:47 :: gears inheritance check OK
2020-Mar-15 20:36:47 :: srpm inheritance check OK
girar-check-perms: access to cacti ALLOWED for shaba: project leader
check-subtask-perms: #100: cacti: allowed for shaba
girar-check-perms: access to cacti-spine ALLOWED for shaba: project leader
check-subtask-perms: #200: cacti-spine: allowed for shaba
2020-Mar-15 20:36:47 :: acl check OK
2020-Mar-15 20:37:20 :: created contents_index files
2020-Mar-15 20:37:30 :: created hash files: aarch64 i586 noarch ppc64le src x86_64
2020-Mar-15 20:37:32 :: task #247881 for sisyphus TESTED
2020-Mar-15 20:37:32 :: task is ready for commit
2020-Mar-15 20:37:39 :: repo clone OK
2020-Mar-15 20:37:39 :: packages update OK
2020-Mar-15 20:37:48 :: [x86_64 i586 aarch64 ppc64le noarch] update OK
2020-Mar-15 20:37:48 :: repo update OK
2020-Mar-15 20:38:05 :: repo save OK
2020-Mar-15 20:38:11 :: src index update OK
2020-Mar-15 20:38:17 :: updated /gears/c/cacti.git branch `sisyphus'
2020-Mar-15 20:38:18 :: updated /gears/c/cacti-spine.git branch `sisyphus'
2020-Mar-15 20:38:22 :: gears update OK
2020-Mar-15 20:38:22 :: task #247881 for sisyphus DONE
reply other threads:[~2020-03-15 20:38 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200315203822.GA4076@gyle.altlinux.org \
--to=girar-builder@altlinux.org \
--cc=girar-builder-sisyphus@altlinux.org \
--cc=shaba@altlinux.org \
--cc=sisyphus-incominger@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Girar Builder robot reports
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \
sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com
public-inbox-index sisyphus-incominger
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git