From: "Girar awaiter (pav)" <girar-builder@altlinux.org>
To: Pavel Vasenkov <pav@altlinux.org>
Cc: sisyphus-incominger@lists.altlinux.org,
girar-builder-p11@altlinux.org,
girar-builder-p11@lists.altlinux.org
Subject: [#377017] p11 EPERM (try 2) firefox-esr.git=firefox-esr/128.8.0-alt1
Date: Thu, 6 Mar 2025 14:45:45 +0000
Message-ID: <girar.task.377017.2.1@gyle.mskdc.altlinux.org> (raw)
In-Reply-To: <girar.task.377017.1.1@gyle.mskdc.altlinux.org>
https://git.altlinux.org/tasks/377017/logs/events.2.1.log
https://packages.altlinux.org/tasks/377017
subtask name aarch64 i586 x86_64
#100 firefox-esr 46:26 25:13 28:30
2025-Mar-06 13:50:54 :: task #377017 for p11 resumed by pav:
2025-Mar-06 13:50:54 :: message: New_version_with_CVE
#100 build firefox-esr/128.8.0-alt1 from /gears/f/firefox-esr.git fetched at 2025-Mar-06 05:03:06 from sisyphus
2025-Mar-06 13:50:56 :: [x86_64] #100 firefox-esr.git firefox-esr/128.8.0-alt1: build start
2025-Mar-06 13:50:56 :: [aarch64] #100 firefox-esr.git firefox-esr/128.8.0-alt1: build start
2025-Mar-06 13:50:56 :: [i586] #100 firefox-esr.git firefox-esr/128.8.0-alt1: build start
2025-Mar-06 14:16:09 :: [i586] #100 firefox-esr.git firefox-esr/128.8.0-alt1: build OK
2025-Mar-06 14:19:26 :: [x86_64] #100 firefox-esr.git firefox-esr/128.8.0-alt1: build OK
2025-Mar-06 14:37:22 :: [aarch64] #100 firefox-esr.git firefox-esr/128.8.0-alt1: build OK
2025-Mar-06 14:37:55 :: #100: firefox-esr.git firefox-esr/128.8.0-alt1: build check OK
2025-Mar-06 14:37:56 :: build check OK
warning (#100): firefox-esr-config-privacy-128.8.0-alt1.x86_64.rpm should be .noarch.rpm
2025-Mar-06 14:39:30 :: noarch check OK
2025-Mar-06 14:39:32 :: plan: src +1 -1 =19707, aarch64 +3 -3 =34036, i586 +3 -3 =33189, x86_64 +3 -3 =34812
#100 firefox-esr 128.7.0-alt1 -> 128.8.0-alt1
Tue Mar 04 2025 Pavel Vasenkov <pav@altlinux> 128.8.0-alt1
- New ESR version.
- Security fixes:
+ CVE-2024-43097 Overflow when growing an SkRegion's RunArray
+ CVE-2025-1930 AudioIPC StreamData could trigger a use-after-free in the Browser process
+ CVE-2025-1931 Use-after-free in WebTransportChild
+ CVE-2025-1932 Inconsistent comparator in XSLT sorting led to out-of-bounds access
+ CVE-2025-1933 JIT corruption of WASM i32 return values on 64-bit CPUs
+ CVE-2025-1934 Unexpected GC during RegExp bailout processing
+ CVE-2025-1935 Clickjacking the registerProtocolHandler info-bar
[...]
2025-Mar-06 14:39:32 :: firefox-esr: mentions vulnerabilities: CVE-2024-43097 CVE-2025-1930 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934 CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938
2025-Mar-06 14:40:18 :: patched apt indices
2025-Mar-06 14:40:27 :: created next repo
2025-Mar-06 14:40:36 :: duplicate provides check OK
2025-Mar-06 14:41:13 :: dependencies check OK
2025-Mar-06 14:41:49 :: [x86_64 i586 aarch64] ELF symbols check OK
x86_64: firefox-esr=128.8.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Mar-06 14:42:13 :: [x86_64] #100 firefox-esr: install check OK
i586: firefox-esr=128.8.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Mar-06 14:42:15 :: [i586] #100 firefox-esr: install check OK
aarch64: firefox-esr=128.8.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Mar-06 14:42:26 :: [aarch64] #100 firefox-esr: install check OK
2025-Mar-06 14:42:30 :: [x86_64] #100 firefox-esr-config-privacy: install check OK
2025-Mar-06 14:42:34 :: [i586] #100 firefox-esr-config-privacy: install check OK
2025-Mar-06 14:42:51 :: [aarch64] #100 firefox-esr-config-privacy: install check OK
2025-Mar-06 14:43:02 :: [i586] #100 firefox-esr-debuginfo: install check OK
2025-Mar-06 14:43:20 :: [x86_64] #100 firefox-esr-debuginfo: install check OK
2025-Mar-06 14:44:07 :: [aarch64] #100 firefox-esr-debuginfo: install check OK
2025-Mar-06 14:44:08 :: [x86_64-i586] plan: #1 +1 -1 =11424
2025-Mar-06 14:44:40 :: [x86_64-i586] arepo build OK
2025-Mar-06 14:44:59 :: [x86_64-i586] generated apt indices
2025-Mar-06 14:45:01 :: [x86_64-i586] created next repo
2025-Mar-06 14:45:13 :: [x86_64-i586] dependencies check OK
2025-Mar-06 14:45:14 :: gears inheritance check OK
2025-Mar-06 14:45:14 :: srpm inheritance check OK
girar-check-perms: access to firefox-esr DENIED for pav: project `firefox-esr' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: firefox-esr: needs approvals from members of @maint and @tester groups
2025-Mar-06 14:45:16 :: acl check FAILED
2025-Mar-06 14:45:30 :: created contents_index files
2025-Mar-06 14:45:42 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2025-Mar-06 14:45:45 :: task #377017 for p11 EPERM
prev parent reply other threads:[~2025-03-06 14:45 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-03-06 7:19 [#377017] p11 TESTED firefox-esr.git=firefox-esr/128.8.0-alt1 Girar awaiter (pav)
2025-03-06 14:45 ` Girar awaiter (pav) [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=girar.task.377017.2.1@gyle.mskdc.altlinux.org \
--to=girar-builder@altlinux.org \
--cc=devel@lists.altlinux.org \
--cc=girar-builder-p11@altlinux.org \
--cc=girar-builder-p11@lists.altlinux.org \
--cc=pav@altlinux.org \
--cc=sisyphus-incominger@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Girar Builder robot reports
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \
sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com
public-inbox-index sisyphus-incominger
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git