* [#287043] p10 EPERM glpi.git=9.5.6-alt1
@ 2021-10-13 14:01 Girar awaiter (zidex)
2021-10-14 16:08 ` [#287043] p10 DONE (try 2) glpi.git=9.5.6-alt1 Girar pender (snowmix)
0 siblings, 1 reply; 2+ messages in thread
From: Girar awaiter (zidex) @ 2021-10-13 14:01 UTC (permalink / raw)
To: Pavel Zilke; +Cc: girar-builder-p10, sisyphus-incominger, girar-builder-p10
http://git.altlinux.org/tasks/287043/logs/events.1.1.log
subtask name aarch64 armh i586 ppc64le x86_64
#100 glpi 1:35 2:29 1:40 1:43 1:27
2021-Oct-13 13:54:54 :: task #287043 for p10 started by zidex:
2021-Oct-13 13:54:54 :: message: security_fix
#100 build 9.5.6-alt1 from /people/zidex/packages/glpi.git fetched at 2021-Oct-13 13:54:19
2021-Oct-13 13:54:54 :: [i586] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-13 13:54:54 :: [armh] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-13 13:54:54 :: [aarch64] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-13 13:54:54 :: [x86_64] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-13 13:54:54 :: [ppc64le] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-13 13:56:21 :: [x86_64] #100 glpi.git 9.5.6-alt1: build OK
2021-Oct-13 13:56:29 :: [aarch64] #100 glpi.git 9.5.6-alt1: build OK
2021-Oct-13 13:56:34 :: [i586] #100 glpi.git 9.5.6-alt1: build OK
2021-Oct-13 13:56:37 :: [ppc64le] #100 glpi.git 9.5.6-alt1: build OK
2021-Oct-13 13:57:23 :: [armh] #100 glpi.git 9.5.6-alt1: build OK
2021-Oct-13 13:57:45 :: #100: glpi.git 9.5.6-alt1: build check OK
2021-Oct-13 13:57:46 :: build check OK
2021-Oct-13 13:58:04 :: noarch check OK
2021-Oct-13 13:58:06 :: plan: src +1 -1 =17602, noarch +3 -3 =16261
#100 glpi 9.5.5-alt1 -> 9.5.6-alt1
Tue Oct 12 2021 Pavel Zilke <zidex at altlinux dot org> 9.5.6-alt1
- New version 9.5.6
- This is a security release, upgrading is recommended
- Security fixes:
+ CVE-2021-39211 : Disclosure of GLPI and server informations in telemetry endpoint
+ CVE-2021-39210 : Autologin cookie accessible by scripts
+ CVE-2021-39209 : Bypassable CSRF protection on ajax endpoints
+ CVE-2021-39213 : Bypassable IP restriction on GLPI API using custom header injection
2021-Oct-13 13:58:06 :: glpi: mentions vulnerabilities: CVE-2021-39211 CVE-2021-39210 CVE-2021-39209 CVE-2021-39213
2021-Oct-13 13:58:29 :: patched apt indices
2021-Oct-13 13:58:40 :: created next repo
2021-Oct-13 13:58:47 :: duplicate provides check OK
2021-Oct-13 13:59:13 :: dependencies check OK
2021-Oct-13 13:59:41 :: [aarch64] #100 glpi: install check OK
2021-Oct-13 13:59:45 :: [x86_64] #100 glpi: install check OK
2021-Oct-13 13:59:46 :: [ppc64le] #100 glpi: install check OK
2021-Oct-13 13:59:47 :: [armh] #100 glpi: install check OK
2021-Oct-13 13:59:50 :: [i586] #100 glpi: install check OK
2021-Oct-13 13:59:54 :: [aarch64] #100 glpi-apache2: install check OK
2021-Oct-13 14:00:05 :: [aarch64] #100 glpi-php7: install check OK
2021-Oct-13 14:00:06 :: [ppc64le] #100 glpi-apache2: install check OK
2021-Oct-13 14:00:12 :: [armh] #100 glpi-apache2: install check OK
2021-Oct-13 14:00:14 :: [i586] #100 glpi-apache2: install check OK
2021-Oct-13 14:00:18 :: [x86_64] #100 glpi-apache2: install check OK
2021-Oct-13 14:00:20 :: [ppc64le] #100 glpi-php7: install check OK
2021-Oct-13 14:00:25 :: [i586] #100 glpi-php7: install check OK
2021-Oct-13 14:00:31 :: [x86_64] #100 glpi-php7: install check OK
2021-Oct-13 14:00:39 :: [armh] #100 glpi-php7: install check OK
2021-Oct-13 14:00:40 :: gears inheritance check OK
2021-Oct-13 14:00:40 :: srpm inheritance check OK
girar-check-perms: access to glpi DENIED for zidex: project `glpi' is not listed in the acl file for repository `p10', and the policy for such projects in `p10' is to deny
check-subtask-perms: #100: glpi: needs approvals from members of @maint and @tester groups
2021-Oct-13 14:00:41 :: acl check FAILED
2021-Oct-13 14:01:00 :: created contents_index files
2021-Oct-13 14:01:09 :: created hash files: noarch src
2021-Oct-13 14:01:11 :: task #287043 for p10 EPERM
^ permalink raw reply [flat|nested] 2+ messages in thread
* [#287043] p10 DONE (try 2) glpi.git=9.5.6-alt1
2021-10-13 14:01 [#287043] p10 EPERM glpi.git=9.5.6-alt1 Girar awaiter (zidex)
@ 2021-10-14 16:08 ` Girar pender (snowmix)
0 siblings, 0 replies; 2+ messages in thread
From: Girar pender (snowmix) @ 2021-10-14 16:08 UTC (permalink / raw)
To: Pavel Zilke; +Cc: girar-builder-p10, sisyphus-incominger, girar-builder-p10
http://git.altlinux.org/tasks/archive/done/_280/287043/logs/events.2.1.log
2021-Oct-14 16:04:07 :: task #287043 for p10 resumed by snowmix:
2021-Oct-14 16:04:07 :: message: security_fix
#100 build 9.5.6-alt1 from /people/zidex/packages/glpi.git fetched at 2021-Oct-13 13:54:19
2021-Oct-14 16:04:09 :: [ppc64le] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-14 16:04:09 :: [armh] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-14 16:04:09 :: [aarch64] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-14 16:04:09 :: [i586] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-14 16:04:09 :: [x86_64] #100 glpi.git 9.5.6-alt1: build start
2021-Oct-14 16:04:22 :: [i586] #100 glpi.git 9.5.6-alt1: build OK (cached)
2021-Oct-14 16:04:22 :: [x86_64] #100 glpi.git 9.5.6-alt1: build OK (cached)
2021-Oct-14 16:04:24 :: [aarch64] #100 glpi.git 9.5.6-alt1: build OK (cached)
2021-Oct-14 16:04:26 :: [ppc64le] #100 glpi.git 9.5.6-alt1: build OK (cached)
2021-Oct-14 16:04:30 :: [armh] #100 glpi.git 9.5.6-alt1: build OK (cached)
2021-Oct-14 16:04:53 :: #100: glpi.git 9.5.6-alt1: build check OK
2021-Oct-14 16:04:53 :: build check OK
2021-Oct-14 16:05:14 :: noarch check OK
2021-Oct-14 16:05:16 :: plan: src +1 -1 =17600, noarch +3 -3 =16259
#100 glpi 9.5.5-alt1 -> 9.5.6-alt1
Tue Oct 12 2021 Pavel Zilke <zidex at altlinux dot org> 9.5.6-alt1
- New version 9.5.6
- This is a security release, upgrading is recommended
- Security fixes:
+ CVE-2021-39211 : Disclosure of GLPI and server informations in telemetry endpoint
+ CVE-2021-39210 : Autologin cookie accessible by scripts
+ CVE-2021-39209 : Bypassable CSRF protection on ajax endpoints
+ CVE-2021-39213 : Bypassable IP restriction on GLPI API using custom header injection
2021-Oct-14 16:05:16 :: glpi: mentions vulnerabilities: CVE-2021-39211 CVE-2021-39210 CVE-2021-39209 CVE-2021-39213
2021-Oct-14 16:05:42 :: patched apt indices
2021-Oct-14 16:05:54 :: created next repo
2021-Oct-14 16:06:01 :: duplicate provides check OK
2021-Oct-14 16:06:30 :: dependencies check OK
2021-Oct-14 16:06:41 :: [i586] #100 glpi: install check OK (cached)
2021-Oct-14 16:06:42 :: [x86_64] #100 glpi: install check OK (cached)
2021-Oct-14 16:06:43 :: [aarch64] #100 glpi: install check OK (cached)
2021-Oct-14 16:06:43 :: [i586] #100 glpi-apache2: install check OK (cached)
2021-Oct-14 16:06:44 :: [x86_64] #100 glpi-apache2: install check OK (cached)
2021-Oct-14 16:06:45 :: [ppc64le] #100 glpi: install check OK (cached)
2021-Oct-14 16:06:45 :: [i586] #100 glpi-php7: install check OK (cached)
2021-Oct-14 16:06:46 :: [x86_64] #100 glpi-php7: install check OK (cached)
2021-Oct-14 16:06:46 :: [aarch64] #100 glpi-apache2: install check OK (cached)
2021-Oct-14 16:06:48 :: [ppc64le] #100 glpi-apache2: install check OK (cached)
2021-Oct-14 16:06:49 :: [aarch64] #100 glpi-php7: install check OK (cached)
2021-Oct-14 16:06:50 :: [armh] #100 glpi: install check OK (cached)
2021-Oct-14 16:06:51 :: [ppc64le] #100 glpi-php7: install check OK (cached)
2021-Oct-14 16:06:54 :: [armh] #100 glpi-apache2: install check OK (cached)
2021-Oct-14 16:06:59 :: [armh] #100 glpi-php7: install check OK (cached)
2021-Oct-14 16:06:59 :: gears inheritance check OK
2021-Oct-14 16:06:59 :: srpm inheritance check OK
girar-check-perms: access to @maint ALLOWED for cas: member of approved group
girar-check-perms: access to @tester ALLOWED for snowmix: member of approved group
check-subtask-perms: #100: glpi: approved by cas, approved by snowmix
2021-Oct-14 16:07:01 :: acl check OK
2021-Oct-14 16:07:21 :: created contents_index files
2021-Oct-14 16:07:29 :: created hash files: noarch src
2021-Oct-14 16:07:31 :: task #287043 for p10 TESTED
2021-Oct-14 16:07:32 :: task is ready for commit
2021-Oct-14 16:07:37 :: repo clone OK
2021-Oct-14 16:07:37 :: packages update OK
2021-Oct-14 16:07:40 :: [noarch] update OK
2021-Oct-14 16:07:40 :: repo update OK
2021-Oct-14 16:07:51 :: repo save OK
2021-Oct-14 16:07:51 :: src index update OK
2021-Oct-14 16:07:51 :: updated /gears/g/glpi.git branch `p10'
2021-Oct-14 16:08:08 :: gears update OK
2021-Oct-14 16:08:08 :: task #287043 for p10 DONE
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2021-10-14 16:08 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-10-13 14:01 [#287043] p10 EPERM glpi.git=9.5.6-alt1 Girar awaiter (zidex)
2021-10-14 16:08 ` [#287043] p10 DONE (try 2) glpi.git=9.5.6-alt1 Girar pender (snowmix)
ALT Linux Girar Builder robot reports
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \
sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com
public-inbox-index sisyphus-incominger
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git