From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 Date: Wed, 13 Oct 2021 14:04:24 +0000 From: "Girar awaiter (zidex)" To: Pavel Zilke Subject: [#287044] p9 FAILED glpi.git=9.5.6-alt1 Message-ID: Mail-Followup-To: Girar awaiter robot MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-girar-task-id: 287044 X-girar-task-owner: zidex X-girar-task-repo: p9 X-girar-task-try: 1 X-girar-task-iter: 1 X-girar-task-status: FAILED X-girar-task-URL: http://git.altlinux.org/tasks/287044/ X-girar-task-log: logs/events.1.1.log X-girar-task-summary: [#287044] p9 FAILED glpi.git=9.5.6-alt1 User-Agent: Mutt/1.10.1 (2018-07-13) Cc: sisyphus-incominger@lists.altlinux.org, girar-builder-p9@altlinux.org X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: zidex@altlinux.org List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Oct 2021 14:04:28 -0000 Archived-At: List-Archive: http://git.altlinux.org/tasks/287044/logs/events.1.1.log subtask name aarch64 armh i586 ppc64le x86_64 #100 glpi 2:45 3:45 2:30 2:36 2:13 2021-Oct-13 13:57:45 :: task #287044 for p9 started by zidex: 2021-Oct-13 13:57:45 :: message: security_fix #100 build 9.5.6-alt1 from /people/zidex/packages/glpi.git fetched at 2021-Oct-13 13:55:41 2021-Oct-13 13:57:46 :: [i586] #100 glpi.git 9.5.6-alt1: build start 2021-Oct-13 13:57:46 :: [aarch64] #100 glpi.git 9.5.6-alt1: build start 2021-Oct-13 13:57:46 :: [ppc64le] #100 glpi.git 9.5.6-alt1: build start 2021-Oct-13 13:57:46 :: [armh] #100 glpi.git 9.5.6-alt1: build start 2021-Oct-13 13:57:46 :: [x86_64] #100 glpi.git 9.5.6-alt1: build start 2021-Oct-13 13:59:59 :: [x86_64] #100 glpi.git 9.5.6-alt1: build OK 2021-Oct-13 14:00:16 :: [i586] #100 glpi.git 9.5.6-alt1: build OK 2021-Oct-13 14:00:22 :: [ppc64le] #100 glpi.git 9.5.6-alt1: build OK 2021-Oct-13 14:00:31 :: [aarch64] #100 glpi.git 9.5.6-alt1: build OK 2021-Oct-13 14:01:31 :: [armh] #100 glpi.git 9.5.6-alt1: build OK 2021-Oct-13 14:01:52 :: #100: glpi.git 9.5.6-alt1: build check OK 2021-Oct-13 14:01:52 :: build check OK 2021-Oct-13 14:02:11 :: noarch check OK 2021-Oct-13 14:02:13 :: plan: src +1 -1 =18253, noarch +3 -3 =19161 #100 glpi 9.5.5-alt1 -> 9.5.6-alt1 Tue Oct 12 2021 Pavel Zilke 9.5.6-alt1 - New version 9.5.6 - This is a security release, upgrading is recommended - Security fixes: + CVE-2021-39211 : Disclosure of GLPI and server informations in telemetry endpoint + CVE-2021-39210 : Autologin cookie accessible by scripts + CVE-2021-39209 : Bypassable CSRF protection on ajax endpoints + CVE-2021-39213 : Bypassable IP restriction on GLPI API using custom header injection 2021-Oct-13 14:02:13 :: glpi: mentions vulnerabilities: CVE-2021-39211 CVE-2021-39210 CVE-2021-39209 CVE-2021-39213 2021-Oct-13 14:02:38 :: patched apt indices 2021-Oct-13 14:02:47 :: created next repo 2021-Oct-13 14:02:55 :: duplicate provides check OK 2021-Oct-13 14:03:31 :: dependencies check OK 2021-Oct-13 14:03:53 :: [i586] #100 glpi: install check OK 2021-Oct-13 14:03:58 :: [x86_64] #100 glpi: install check OK 2021-Oct-13 14:04:08 :: [i586] #100 glpi-apache2: install check OK 2021-Oct-13 14:04:09 :: [x86_64] #100 glpi-apache2: install check OK 2021-Oct-13 14:04:20 :: [x86_64] #100 glpi-php7: install check OK 2021-Oct-13 14:04:23 :: [i586] #100 glpi-php7: install check OK 2021-Oct-13 14:04:23 :: gears inheritance check OK 2021-Oct-13 14:04:23 :: srpm inheritance check OK 2021-Oct-13 14:04:24 :: #100: src package `glpi' version `9.5.6-alt1' is greater than its version `9.5.5-alt1' in `p10' 2021-Oct-13 14:04:24 :: neighbour version check FAILED 2021-Oct-13 14:04:24 :: task #287044 for p9 FAILED