From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 Date: Thu, 1 Feb 2024 09:22:22 +0000 From: "Girar awaiter (egori)" To: Egor Ignatov Subject: [#339548] TESTED (try 2) shim.git=15.8-alt1 Message-ID: Mail-Followup-To: Girar awaiter robot References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-girar-task-id: 339548 X-girar-task-owner: egori X-girar-task-cc: mike, nickel, rider X-girar-task-repo: sisyphus X-girar-task-try: 2 X-girar-task-iter: 1 X-girar-task-status: TESTED X-girar-task-URL: https://git.altlinux.org/tasks/339548/ X-girar-task-log: logs/events.2.1.log X-girar-task-summary: [#339548] TESTED (try 2) shim.git=15.8-alt1 User-Agent: Mutt/1.10.1 (2018-07-13) Cc: Nikolai Kostrigin , sisyphus-incominger@lists.altlinux.org, Anton Farygin , girar-builder-sisyphus@altlinux.org, Michael Shigorin X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2024 09:22:25 -0000 Archived-At: List-Archive: https://git.altlinux.org/tasks/339548/logs/events.2.1.log subtask name aarch64 armh i586 ppc64le x86_64 #200 shim - - - - 27 2024-Feb-01 09:19:01 :: test-only task #339548 for sisyphus resumed by egori: #100 removed #200 build 15.8-alt1 from /people/egori/packages/shim.git fetched at 2024-Feb-01 09:18:56 2024-Feb-01 09:19:03 :: [x86_64] #200 shim.git 15.8-alt1: build start 2024-Feb-01 09:19:03 :: [armh] #200 shim.git 15.8-alt1: build start 2024-Feb-01 09:19:03 :: [aarch64] #200 shim.git 15.8-alt1: build start 2024-Feb-01 09:19:03 :: [i586] #200 shim.git 15.8-alt1: build start 2024-Feb-01 09:19:03 :: [ppc64le] #200 shim.git 15.8-alt1: build start 2024-Feb-01 09:19:12 :: [i586] #200 shim.git 15.8-alt1: build SKIPPED 2024-Feb-01 09:19:20 :: [aarch64] #200 shim.git 15.8-alt1: build SKIPPED 2024-Feb-01 09:19:22 :: [ppc64le] #200 shim.git 15.8-alt1: build SKIPPED 2024-Feb-01 09:19:29 :: [armh] #200 shim.git 15.8-alt1: build SKIPPED 2024-Feb-01 09:19:30 :: [x86_64] #200 shim.git 15.8-alt1: build OK 2024-Feb-01 09:19:35 :: #200: shim.git 15.8-alt1: build check OK 2024-Feb-01 09:19:37 :: build check OK 2024-Feb-01 09:19:37 :: noarch check OK 2024-Feb-01 09:19:39 :: plan: src +1 -1 =18974, x86_64 +1 -1 =32737 #200 shim 15.7-alt4 -> 15.8-alt1 Thu Feb 01 2024 Egor Ignatov 15.8-alt1 - new version - update shim-15.8-alt-Bump-grub-SBAT-revocation-to-4 patch - Fixes: + CVE-2023-40546 mok: fix LogError() invocation + CVE-2023-40547 - avoid incorrectly trusting HTTP headers + CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system + CVE-2023-40549 Authenticode: verify that the signature header is in bounds. + CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat() + CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries 2024-Feb-01 09:19:40 :: shim: mentions vulnerabilities: CVE-2023-40546 CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551 2024-Feb-01 09:20:19 :: patched apt indices 2024-Feb-01 09:20:33 :: created next repo 2024-Feb-01 09:20:42 :: duplicate provides check OK 2024-Feb-01 09:21:19 :: dependencies check OK 2024-Feb-01 09:21:20 :: [x86_64] ELF symbols check OK 2024-Feb-01 09:21:31 :: [x86_64] #200 shim-unsigned: install check OK 2024-Feb-01 09:21:48 :: [x86_64-i586] generated apt indices 2024-Feb-01 09:21:48 :: [x86_64-i586] created next repo 2024-Feb-01 09:21:58 :: [x86_64-i586] dependencies check OK 2024-Feb-01 09:21:59 :: gears inheritance check OK 2024-Feb-01 09:21:59 :: srpm inheritance check OK girar-check-perms: access to shim DENIED for egori: does not belong to approved builders list: nickel mike rider @qa check-subtask-perms: #200: shim: Operation not permitted 2024-Feb-01 09:22:00 :: acl check IGNORED 2024-Feb-01 09:22:10 :: created contents_index files 2024-Feb-01 09:22:20 :: created hash files: src x86_64 2024-Feb-01 09:22:22 :: task #339548 for sisyphus TESTED