From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 Date: Wed, 13 Jul 2022 08:27:19 +0000 From: "Girar awaiter (rider)" To: Anton Farygin Subject: [#303604] p9 EPERM curl.git=7.83.1-alt1 Message-ID: Mail-Followup-To: Girar awaiter robot MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-girar-task-id: 303604 X-girar-task-owner: rider X-girar-task-repo: p9 X-girar-task-try: 1 X-girar-task-iter: 1 X-girar-task-status: EPERM X-girar-task-URL: https://git.altlinux.org/tasks/303604/ X-girar-task-log: logs/events.1.1.log X-girar-task-summary: [#303604] p9 EPERM curl.git=7.83.1-alt1 User-Agent: Mutt/1.10.1 (2018-07-13) Cc: sisyphus-incominger@lists.altlinux.org, girar-builder-p9@altlinux.org X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jul 2022 08:27:23 -0000 Archived-At: List-Archive: https://git.altlinux.org/tasks/303604/logs/events.1.1.log subtask name aarch64 armh i586 ppc64le x86_64 #100 curl 10:58 14:10 8:45 12:23 8:23 2022-Jul-13 08:08:50 :: task #303604 for p9 started by rider: 2022-Jul-13 08:08:50 :: message: security update #100 build 7.83.1-alt1 from /gears/c/curl.git fetched at 2022-Jul-13 08:08:36 from p10 2022-Jul-13 08:08:51 :: [aarch64] #100 curl.git 7.83.1-alt1: build start 2022-Jul-13 08:08:51 :: [armh] #100 curl.git 7.83.1-alt1: build start 2022-Jul-13 08:08:51 :: [i586] #100 curl.git 7.83.1-alt1: build start 2022-Jul-13 08:08:51 :: [ppc64le] #100 curl.git 7.83.1-alt1: build start 2022-Jul-13 08:08:51 :: [x86_64] #100 curl.git 7.83.1-alt1: build start 2022-Jul-13 08:17:14 :: [x86_64] #100 curl.git 7.83.1-alt1: build OK 2022-Jul-13 08:17:36 :: [i586] #100 curl.git 7.83.1-alt1: build OK 2022-Jul-13 08:19:49 :: [aarch64] #100 curl.git 7.83.1-alt1: build OK 2022-Jul-13 08:21:14 :: [ppc64le] #100 curl.git 7.83.1-alt1: build OK 2022-Jul-13 08:23:01 :: [armh] #100 curl.git 7.83.1-alt1: build OK 2022-Jul-13 08:23:28 :: #100: curl.git 7.83.1-alt1: build check OK 2022-Jul-13 08:23:29 :: build check OK 2022-Jul-13 08:23:37 :: noarch check OK 2022-Jul-13 08:23:39 :: plan: src +1 -1 =18280, aarch64 +6 -6 =30607, armh +6 -6 =28234, i586 +6 -6 =32574, ppc64le +6 -6 =30910, x86_64 +6 -6 =33031 #100 curl 7.79.0-alt2 -> 7.83.1-alt1 Wed May 11 2022 Anton Farygin 7.83.1-alt1 - 7.83.1 - Fixes: * CVE-2022-30115: HSTS bypass via trailing dot * CVE-2022-27782: TLS and SSH connection too eager reuse * CVE-2022-27781: CERTINFO never-ending busy-loop * CVE-2022-27780: percent-encoded path separator in URL host * CVE-2022-27779: cookie for trailing dot TLD * CVE-2022-27778: curl removes wrong file on error Thu Apr 28 2022 Anton Farygin 7.83.0-alt1 [...] 2022-Jul-13 08:23:39 :: curl: fixes vulnerabilities: CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776 2022-Jul-13 08:23:39 :: curl: mentions vulnerabilities: CVE-2022-30115 CVE-2022-27782 CVE-2022-27781 CVE-2022-27780 CVE-2022-27779 CVE-2022-27778 2022-Jul-13 08:24:15 :: patched apt indices 2022-Jul-13 08:24:26 :: created next repo 2022-Jul-13 08:24:33 :: duplicate provides check OK 2022-Jul-13 08:25:06 :: dependencies check OK 2022-Jul-13 08:25:34 :: [x86_64 i586 aarch64 ppc64le armh] ELF symbols check OK 2022-Jul-13 08:25:44 :: [x86_64] #100 curl: install check OK 2022-Jul-13 08:25:44 :: [i586] #100 curl: install check OK 2022-Jul-13 08:25:49 :: [x86_64] #100 curl-debuginfo: install check OK 2022-Jul-13 08:25:50 :: [i586] #100 curl-debuginfo: install check OK 2022-Jul-13 08:25:52 :: [x86_64] #100 libcurl: install check OK 2022-Jul-13 08:25:53 :: [i586] #100 libcurl: install check OK 2022-Jul-13 08:25:57 :: [x86_64] #100 libcurl-debuginfo: install check OK 2022-Jul-13 08:25:59 :: [i586] #100 libcurl-debuginfo: install check OK 2022-Jul-13 08:26:00 :: [x86_64] #100 libcurl-devel: install check OK 2022-Jul-13 08:26:03 :: [i586] #100 libcurl-devel: install check OK 2022-Jul-13 08:26:06 :: [x86_64] #100 libcurl-devel-static: install check OK 2022-Jul-13 08:26:09 :: [i586] #100 libcurl-devel-static: install check OK 2022-Jul-13 08:26:10 :: [x86_64-i586] plan: #3 +3 -3 =10814 2022-Jul-13 08:26:27 :: [x86_64-i586] arepo build OK 2022-Jul-13 08:26:40 :: [x86_64-i586] generated apt indices 2022-Jul-13 08:26:42 :: [x86_64-i586] created next repo 2022-Jul-13 08:26:51 :: [x86_64-i586] dependencies check OK 2022-Jul-13 08:26:51 :: gears inheritance check OK 2022-Jul-13 08:26:51 :: srpm inheritance check OK girar-check-perms: access to curl DENIED for rider: project `curl' is not listed in the acl file for repository `p9', and the policy for such projects in `p9' is to deny check-subtask-perms: #100: curl: needs approvals from members of @maint and @tester groups 2022-Jul-13 08:26:58 :: acl check FAILED 2022-Jul-13 08:27:06 :: created contents_index files 2022-Jul-13 08:27:17 :: created hash files: aarch64 armh i586 ppc64le src x86_64-i586 x86_64 2022-Jul-13 08:27:18 :: task #303604 for p9 EPERM