From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=ham autolearn_force=no version=3.4.1 Date: Wed, 6 Dec 2023 06:56:05 +0000 From: "Girar pender (amakeenk)" To: Evgeny Sinelnikov Subject: [#333866] p10 DONE (try 4) sudo.git=1.9.15p1-alt1 Message-ID: Mail-Followup-To: Girar pender robot References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-girar-task-id: 333866 X-girar-task-owner: sin X-girar-task-repo: p10 X-girar-task-try: 4 X-girar-task-iter: 1 X-girar-task-status: DONE X-girar-task-URL: https://git.altlinux.org/tasks/archive/done/_326/333866/ X-girar-task-log: logs/events.4.1.log X-girar-task-summary: [#333866] p10 DONE (try 4) sudo.git=1.9.15p1-alt1 User-Agent: Mutt/1.10.1 (2018-07-13) Cc: girar-builder-p10@altlinux.org, sisyphus-incominger@lists.altlinux.org, girar-builder-p10@lists.altlinux.org X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Dec 2023 06:56:08 -0000 Archived-At: List-Archive: https://git.altlinux.org/tasks/archive/done/_326/333866/logs/events.4.1.log 2023-Dec-06 06:48:23 :: task #333866 for p10 resumed by amakeenk: 2023-Dec-06 06:48:23 :: message: security_update #100 build 1.9.15p1-alt1 from /people/sin/packages/sudo.git fetched at 2023-Nov-08 03:42:43 2023-Dec-06 06:48:26 :: [i586] #100 sudo.git 1.9.15p1-alt1: build start 2023-Dec-06 06:48:26 :: [armh] #100 sudo.git 1.9.15p1-alt1: build start 2023-Dec-06 06:48:26 :: [x86_64] #100 sudo.git 1.9.15p1-alt1: build start 2023-Dec-06 06:48:26 :: [ppc64le] #100 sudo.git 1.9.15p1-alt1: build start 2023-Dec-06 06:48:26 :: [aarch64] #100 sudo.git 1.9.15p1-alt1: build start 2023-Dec-06 06:48:34 :: [i586] #100 sudo.git 1.9.15p1-alt1: build OK (cached) 2023-Dec-06 06:48:34 :: [x86_64] #100 sudo.git 1.9.15p1-alt1: build OK (cached) 2023-Dec-06 06:48:42 :: [aarch64] #100 sudo.git 1.9.15p1-alt1: build OK (cached) 2023-Dec-06 06:48:44 :: [ppc64le] #100 sudo.git 1.9.15p1-alt1: build OK (cached) 2023-Dec-06 06:48:51 :: [armh] #100 sudo.git 1.9.15p1-alt1: build OK (cached) 2023-Dec-06 06:49:21 :: #100: sudo.git 1.9.15p1-alt1: build check OK 2023-Dec-06 06:49:23 :: build check OK 2023-Dec-06 06:49:31 :: noarch check OK 2023-Dec-06 06:49:34 :: plan: src +1 -1 =18674, aarch64 +6 -6 =31099, armh +6 -6 =28931, i586 +6 -6 =31521, noarch +1 -1 =20045, ppc64le +6 -6 =30603, x86_64 +6 -6 =32400 #100 sudo 1.9.14p1-alt2 -> 1:1.9.15p1-alt1 Wed Nov 08 2023 Evgeny Sinelnikov 1:1.9.15p1-alt1 - Update to latest stable bugfix and security release (fixes: CVE-2023-42465): + The sudoers plugin has been modified to make it more resilient to ROWHAMMER attacks on authentication and policy matching. + The sudoers plugin now constructs the user time stamp file path name using the user-ID instead of the user name. This avoids a potential problem with user names that contain a path separator ('/') being interpreted as part of the path name. A similar issue in sudo-rs has been assigned CVE-2023-42456. - Fixes in behavior: + The visudo utility will no longer create an empty file when the specified [...] 2023-Dec-06 06:49:34 :: sudo: fixes vulnerabilities: CVE-2023-42465 2023-Dec-06 06:49:34 :: sudo: mentions vulnerabilities: CVE-2023-42456 2023-Dec-06 06:50:27 :: patched apt indices 2023-Dec-06 06:50:50 :: created next repo 2023-Dec-06 06:50:59 :: duplicate provides check OK 2023-Dec-06 06:51:46 :: dependencies check OK 2023-Dec-06 06:52:25 :: [x86_64 i586 aarch64 ppc64le armh] ELF symbols check OK 2023-Dec-06 06:52:35 :: [i586] #100 sudo: install check OK (cached) 2023-Dec-06 06:52:36 :: [x86_64] #100 sudo: install check OK (cached) 2023-Dec-06 06:52:38 :: [i586] #100 sudo-debuginfo: install check OK (cached) 2023-Dec-06 06:52:39 :: [x86_64] #100 sudo-debuginfo: install check OK (cached) 2023-Dec-06 06:52:42 :: [i586] #100 sudo-devel: install check OK (cached) 2023-Dec-06 06:52:42 :: [x86_64] #100 sudo-devel: install check OK (cached) 2023-Dec-06 06:52:42 :: [aarch64] #100 sudo: install check OK (cached) 2023-Dec-06 06:52:44 :: [ppc64le] #100 sudo: install check OK (cached) 2023-Dec-06 06:52:45 :: [i586] #100 sudo-logsrvd: install check OK (cached) 2023-Dec-06 06:52:46 :: [x86_64] #100 sudo-logsrvd: install check OK (cached) 2023-Dec-06 06:52:48 :: [i586] #100 sudo-logsrvd-debuginfo: install check OK (cached) 2023-Dec-06 06:52:49 :: [x86_64] #100 sudo-logsrvd-debuginfo: install check OK (cached) 2023-Dec-06 06:52:49 :: [aarch64] #100 sudo-debuginfo: install check OK (cached) 2023-Dec-06 06:52:51 :: [armh] #100 sudo: install check OK (cached) 2023-Dec-06 06:52:51 :: [i586] #100 sudo-python: install check OK (cached) 2023-Dec-06 06:52:52 :: [x86_64] #100 sudo-python: install check OK (cached) 2023-Dec-06 06:52:52 :: [ppc64le] #100 sudo-debuginfo: install check OK (cached) 2023-Dec-06 06:52:55 :: [i586] #100 sudo-python-debuginfo: install check OK (cached) 2023-Dec-06 06:52:56 :: [x86_64] #100 sudo-python-debuginfo: install check OK (cached) 2023-Dec-06 06:52:56 :: [aarch64] #100 sudo-devel: install check OK (cached) 2023-Dec-06 06:53:00 :: [ppc64le] #100 sudo-devel: install check OK (cached) 2023-Dec-06 06:53:02 :: [armh] #100 sudo-debuginfo: install check OK (cached) 2023-Dec-06 06:53:03 :: [aarch64] #100 sudo-logsrvd: install check OK (cached) 2023-Dec-06 06:53:08 :: [ppc64le] #100 sudo-logsrvd: install check OK (cached) 2023-Dec-06 06:53:10 :: [aarch64] #100 sudo-logsrvd-debuginfo: install check OK (cached) 2023-Dec-06 06:53:14 :: [armh] #100 sudo-devel: install check OK (cached) 2023-Dec-06 06:53:16 :: [ppc64le] #100 sudo-logsrvd-debuginfo: install check OK (cached) 2023-Dec-06 06:53:17 :: [aarch64] #100 sudo-python: install check OK (cached) 2023-Dec-06 06:53:24 :: [aarch64] #100 sudo-python-debuginfo: install check OK (cached) 2023-Dec-06 06:53:25 :: [ppc64le] #100 sudo-python: install check OK (cached) 2023-Dec-06 06:53:26 :: [armh] #100 sudo-logsrvd: install check OK (cached) 2023-Dec-06 06:53:33 :: [ppc64le] #100 sudo-python-debuginfo: install check OK (cached) 2023-Dec-06 06:53:37 :: [armh] #100 sudo-logsrvd-debuginfo: install check OK (cached) 2023-Dec-06 06:53:49 :: [armh] #100 sudo-python: install check OK (cached) 2023-Dec-06 06:54:01 :: [armh] #100 sudo-python-debuginfo: install check OK (cached) 2023-Dec-06 06:54:03 :: [x86_64-i586] plan: #2 +2 -2 =10945 2023-Dec-06 06:54:19 :: [x86_64-i586] arepo build OK 2023-Dec-06 06:54:34 :: [x86_64-i586] generated apt indices 2023-Dec-06 06:54:35 :: [x86_64-i586] created next repo 2023-Dec-06 06:54:45 :: [x86_64-i586] dependencies check OK 2023-Dec-06 06:54:46 :: gears inheritance check OK 2023-Dec-06 06:54:47 :: srpm inheritance check OK girar-check-perms: access to @maint ALLOWED for cas: member of approved group girar-check-perms: access to @tester ALLOWED for amakeenk: member of approved group check-subtask-perms: #100: sudo: approved by cas, approved by amakeenk 2023-Dec-06 06:54:50 :: acl check OK 2023-Dec-06 06:55:10 :: created contents_index files 2023-Dec-06 06:55:20 :: created hash files: aarch64 armh i586 noarch ppc64le src x86_64-i586 x86_64 2023-Dec-06 06:55:24 :: task #333866 for p10 TESTED 2023-Dec-06 06:55:24 :: task is ready for commit 2023-Dec-06 06:55:31 :: repo clone OK 2023-Dec-06 06:55:31 :: packages update OK 2023-Dec-06 06:55:43 :: [x86_64 i586 aarch64 ppc64le armh noarch] update OK 2023-Dec-06 06:55:43 :: [x86_64-i586] update OK 2023-Dec-06 06:55:43 :: repo update OK 2023-Dec-06 06:56:01 :: repo save OK 2023-Dec-06 06:56:01 :: src index update OK 2023-Dec-06 06:56:01 :: updated /gears/s/sudo.git branch `p10' 2023-Dec-06 06:56:05 :: gears update OK 2023-Dec-06 06:56:05 :: task #333866 for p10 DONE