* [#391566] p11 TESTED nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 ...
@ 2025-08-02 16:54 Girar awaiter (rauty)
2025-08-02 17:33 ` [#391566] p11 EPERM (try 2) " Girar awaiter (rauty)
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Girar awaiter (rauty) @ 2025-08-02 16:54 UTC (permalink / raw)
To: Ajrat Makhmutov; +Cc: sisyphus-incominger, girar-builder-p11, girar-builder-p11
https://git.altlinux.org/tasks/391566/logs/events.1.1.log
https://packages.altlinux.org/tasks/391566
subtask name aarch64 i586 x86_64
#100 nss 1:00:05 1:02:57 36:43
#200 ca-certificates 46 27 27
#300 firefox 54:40 - 30:48
#400 thunderbird 1:00:41 - 35:38
2025-Aug-02 13:43:04 :: test-only task #391566 for p11 started by rauty:
#100 build 3.114-alt1 from /people/rauty/packages/nss.git fetched at 2025-Aug-02 11:23:02
#200 build 2025.07.29-alt1 from /people/rauty/packages/ca-certificates.git fetched at 2025-Aug-02 11:24:51
#300 build 141.0-alt1 from /people/rauty/packages/firefox.git fetched at 2025-Aug-02 11:32:34
#400 build 141.0-alt1 from /people/rauty/packages/thunderbird.git fetched at 2025-Aug-02 12:57:46
2025-Aug-02 13:43:04 :: created build repo
2025-Aug-02 13:43:05 :: [aarch64] #100 nss.git 3.114-alt1: build start
2025-Aug-02 13:43:05 :: [i586] #100 nss.git 3.114-alt1: build start
2025-Aug-02 13:43:05 :: [x86_64] #100 nss.git 3.114-alt1: build start
2025-Aug-02 14:19:48 :: [x86_64] #100 nss.git 3.114-alt1: build OK
2025-Aug-02 14:19:48 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-02 14:20:15 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build OK
2025-Aug-02 14:20:16 :: [x86_64] #300 firefox.git 141.0-alt1: build start
2025-Aug-02 14:43:10 :: [aarch64] #100 nss.git 3.114-alt1: build OK
2025-Aug-02 14:43:11 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-02 14:43:57 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build OK
2025-Aug-02 14:43:57 :: [aarch64] #300 firefox.git 141.0-alt1: build start
2025-Aug-02 14:46:02 :: [i586] #100 nss.git 3.114-alt1: build OK
2025-Aug-02 14:46:02 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-02 14:46:29 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build OK
2025-Aug-02 14:46:30 :: [i586] #300 firefox.git 141.0-alt1: build start
2025-Aug-02 14:46:50 :: [i586] #300 firefox.git 141.0-alt1: build SKIPPED
2025-Aug-02 14:46:51 :: [i586] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-02 14:47:14 :: [i586] #400 thunderbird.git 141.0-alt1: build SKIPPED
2025-Aug-02 14:51:04 :: [x86_64] #300 firefox.git 141.0-alt1: build OK
2025-Aug-02 14:51:05 :: [x86_64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-02 15:26:43 :: [x86_64] #400 thunderbird.git 141.0-alt1: build OK
2025-Aug-02 15:38:37 :: [aarch64] #300 firefox.git 141.0-alt1: build OK
2025-Aug-02 15:38:38 :: [aarch64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-02 16:39:19 :: [aarch64] #400 thunderbird.git 141.0-alt1: build OK
2025-Aug-02 16:39:43 :: #100: nss.git 3.114-alt1: build check OK
2025-Aug-02 16:39:50 :: #200: ca-certificates.git 2025.07.29-alt1: build check OK
2025-Aug-02 16:40:17 :: #300: firefox.git 141.0-alt1: build check OK
2025-Aug-02 16:40:44 :: #400: thunderbird.git 141.0-alt1: build check OK
2025-Aug-02 16:40:46 :: build check OK
warning (#100): libnss-nssckbi-checkinstall-3.114-alt1.x86_64.rpm should be .noarch.rpm
2025-Aug-02 16:44:27 :: noarch check OK
2025-Aug-02 16:44:29 :: plan: src +4 -4 =19749, aarch64 +12 -12 =34799, i586 +7 -7 =33850, noarch +1 -1 =20867, x86_64 +12 -12 =35579
#200 ca-certificates 2025.02.10-alt1 -> 2025.07.29-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 2025.07.29-alt1
- mozilla: sync with nss-3.114.
Mon May 12 2025 Ajrat Makhmutov <rauty@altlinux> 2025.05.12-alt1
- mozilla: sync with nss-3.111.
#300 firefox 140.0.2-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version (141.0).
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8041: Incorrect URL truncation in Firefox for Android
+ CVE-2025-8042: Sandboxed iframe could start downloads
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
[...]
#100 nss 3.113-alt1 -> 3.114-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 3.114-alt1
- New version (3.114).
- Certificate Authority Changes:
+ Remove CN=Baltimore CyberTrust Root,OU=CyberTrust
+ Add CN=SwissSign RSA SMIME Root CA 2022 - 1
+ Add CN=SwissSign RSA TLS Root CA 2022 - 1
+ Add CN=TrustAsia SMIME ECC Root CA
+ Add CN=TrustAsia SMIME RSA Root CA
+ Add CN=TrustAsia TLS ECC Root CA
+ Add CN=TrustAsia TLS RSA Root CA
[...]
#400 thunderbird 139.0.2-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version.
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
+ CVE-2025-8030: Potential user-assisted code execution in "Copy as cURL" command
+ CVE-2025-8043: Incorrect URL truncation
[...]
2025-Aug-02 16:44:29 :: firefox: closes bugs: 54713
2025-Aug-02 16:44:29 :: firefox: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8041 CVE-2025-8042 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-02 16:44:29 :: thunderbird: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-02 16:44:29 :: thunderbird: mentions vulnerabilities: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6427 CVE-2025-6429 CVE-2025-6430 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436
2025-Aug-02 16:45:27 :: patched apt indices
2025-Aug-02 16:45:36 :: created next repo
2025-Aug-02 16:45:45 :: duplicate provides check OK
2025-Aug-02 16:46:24 :: dependencies check OK
2025-Aug-02 16:47:11 :: [x86_64 i586 aarch64] ELF symbols check OK
warning [i586]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-02 16:47:26 :: [i586] #200 ca-certificates: install check OK
warning [x86_64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-02 16:47:27 :: [x86_64] #200 ca-certificates: install check OK
2025-Aug-02 16:47:32 :: [i586] #100 libnss: install check OK
warning [aarch64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-02 16:47:35 :: [aarch64] #200 ca-certificates: install check OK
2025-Aug-02 16:47:41 :: [i586] #100 libnss-debuginfo: install check OK
x86_64: firefox=141.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-02 16:47:44 :: [x86_64] #300 firefox: install check OK
2025-Aug-02 16:47:48 :: [i586] #100 libnss-devel: install check OK
2025-Aug-02 16:47:59 :: [i586] #100 libnss-devel-static: install check OK
2025-Aug-02 16:48:02 :: [x86_64] #300 firefox-config-privacy: install check OK
aarch64: firefox=141.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-02 16:48:02 :: [aarch64] #300 firefox: install check OK
2025-Aug-02 16:48:06 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK
2025-Aug-02 16:48:13 :: [i586] #100 nss-utils: install check OK
2025-Aug-02 16:48:21 :: [i586] #100 nss-utils-debuginfo: install check OK
2025-Aug-02 16:48:29 :: [aarch64] #300 firefox-config-privacy: install check OK
2025-Aug-02 16:48:55 :: [x86_64] #300 firefox-debuginfo: install check OK
2025-Aug-02 16:49:02 :: [x86_64] #100 libnss: install check OK
2025-Aug-02 16:49:11 :: [x86_64] #100 libnss-debuginfo: install check OK
2025-Aug-02 16:49:18 :: [x86_64] #100 libnss-devel: install check OK
2025-Aug-02 16:49:28 :: [x86_64] #100 libnss-devel-static: install check OK
2025-Aug-02 16:49:35 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK
2025-Aug-02 16:49:42 :: [x86_64] #100 nss-utils: install check OK
2025-Aug-02 16:49:50 :: [x86_64] #100 nss-utils-debuginfo: install check OK
2025-Aug-02 16:49:51 :: [aarch64] #300 firefox-debuginfo: install check OK
2025-Aug-02 16:50:03 :: [aarch64] #100 libnss: install check OK
x86_64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-02 16:50:06 :: [x86_64] #400 thunderbird: install check OK
2025-Aug-02 16:50:16 :: [aarch64] #100 libnss-debuginfo: install check OK
2025-Aug-02 16:50:27 :: [aarch64] #100 libnss-devel: install check OK
2025-Aug-02 16:50:43 :: [aarch64] #100 libnss-devel-static: install check OK
2025-Aug-02 16:50:55 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK
2025-Aug-02 16:51:03 :: [x86_64] #400 thunderbird-debuginfo: install check OK
2025-Aug-02 16:51:06 :: [aarch64] #100 nss-utils: install check OK
2025-Aug-02 16:51:20 :: [aarch64] #100 nss-utils-debuginfo: install check OK
aarch64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-02 16:51:44 :: [aarch64] #400 thunderbird: install check OK
2025-Aug-02 16:53:07 :: [aarch64] #400 thunderbird-debuginfo: install check OK
2025-Aug-02 16:53:09 :: [x86_64-i586] plan: #3 +3 -3 =11697
2025-Aug-02 16:53:32 :: [x86_64-i586] arepo build OK
2025-Aug-02 16:53:47 :: [x86_64-i586] generated apt indices
2025-Aug-02 16:53:49 :: [x86_64-i586] created next repo
2025-Aug-02 16:53:59 :: [x86_64-i586] dependencies check OK
2025-Aug-02 16:54:03 :: gears inheritance check OK
2025-Aug-02 16:54:03 :: srpm inheritance check OK
girar-check-perms: access to nss DENIED for rauty: project `nss' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: nss: needs approvals from members of @maint and @tester groups
girar-check-perms: access to ca-certificates DENIED for rauty: project `ca-certificates' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #200: ca-certificates: needs approvals from members of @maint and @tester groups
girar-check-perms: access to firefox DENIED for rauty: project `firefox' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #300: firefox: needs approvals from members of @maint and @tester groups
girar-check-perms: access to thunderbird DENIED for rauty: project `thunderbird' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #400: thunderbird: needs approvals from members of @maint and @tester groups
2025-Aug-02 16:54:07 :: acl check IGNORED
2025-Aug-02 16:54:28 :: created contents_index files
2025-Aug-02 16:54:40 :: created hash files: aarch64 i586 noarch src x86_64-i586 x86_64
2025-Aug-02 16:54:44 :: task #391566 for p11 TESTED
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#391566] p11 EPERM (try 2) nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 ...
2025-08-02 16:54 [#391566] p11 TESTED nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 Girar awaiter (rauty)
@ 2025-08-02 17:33 ` Girar awaiter (rauty)
2025-08-07 18:16 ` [#391566] p11 EPERM (try 3) " Girar awaiter (rauty)
2025-08-14 13:40 ` [#391566] p11 EPERM (try 4) firefox.git=141.0.2-alt1 thunderbird.git=141.0-alt1 Girar awaiter (rauty)
2 siblings, 0 replies; 4+ messages in thread
From: Girar awaiter (rauty) @ 2025-08-02 17:33 UTC (permalink / raw)
To: Ajrat Makhmutov; +Cc: sisyphus-incominger, girar-builder-p11, girar-builder-p11
https://git.altlinux.org/tasks/391566/logs/events.2.1.log
https://packages.altlinux.org/tasks/391566
2025-Aug-02 17:20:48 :: task #391566 for p11 resumed by rauty:
2025-Aug-02 17:20:48 :: message: New versions
#100 build 3.114-alt1 from /people/rauty/packages/nss.git fetched at 2025-Aug-02 11:23:02
#200 build 2025.07.29-alt1 from /people/rauty/packages/ca-certificates.git fetched at 2025-Aug-02 11:24:51
#300 build 141.0-alt1 from /people/rauty/packages/firefox.git fetched at 2025-Aug-02 11:32:34
#400 build 141.0-alt1 from /people/rauty/packages/thunderbird.git fetched at 2025-Aug-02 12:57:46
2025-Aug-02 17:20:48 :: created build repo
2025-Aug-02 17:20:50 :: [i586] #100 nss.git 3.114-alt1: build start
2025-Aug-02 17:20:50 :: [aarch64] #100 nss.git 3.114-alt1: build start
2025-Aug-02 17:20:50 :: [x86_64] #100 nss.git 3.114-alt1: build start
2025-Aug-02 17:21:07 :: [i586] #100 nss.git 3.114-alt1: build OK (cached)
2025-Aug-02 17:21:08 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-02 17:21:09 :: [x86_64] #100 nss.git 3.114-alt1: build OK (cached)
2025-Aug-02 17:21:09 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-02 17:21:21 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Aug-02 17:21:21 :: [i586] #300 firefox.git 141.0-alt1: build start
2025-Aug-02 17:21:22 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Aug-02 17:21:23 :: [x86_64] #300 firefox.git 141.0-alt1: build start
2025-Aug-02 17:21:24 :: [aarch64] #100 nss.git 3.114-alt1: build OK (cached)
2025-Aug-02 17:21:24 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-02 17:21:47 :: [i586] #300 firefox.git 141.0-alt1: build SKIPPED
2025-Aug-02 17:21:48 :: [i586] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-02 17:21:48 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Aug-02 17:21:49 :: [aarch64] #300 firefox.git 141.0-alt1: build start
2025-Aug-02 17:21:50 :: [x86_64] #300 firefox.git 141.0-alt1: build OK (cached)
2025-Aug-02 17:21:50 :: [x86_64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-02 17:22:11 :: [i586] #400 thunderbird.git 141.0-alt1: build SKIPPED
2025-Aug-02 17:22:17 :: [x86_64] #400 thunderbird.git 141.0-alt1: build OK (cached)
2025-Aug-02 17:22:35 :: [aarch64] #300 firefox.git 141.0-alt1: build OK (cached)
2025-Aug-02 17:22:36 :: [aarch64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-02 17:23:22 :: [aarch64] #400 thunderbird.git 141.0-alt1: build OK (cached)
2025-Aug-02 17:23:46 :: #100: nss.git 3.114-alt1: build check OK
2025-Aug-02 17:23:54 :: #200: ca-certificates.git 2025.07.29-alt1: build check OK
2025-Aug-02 17:24:20 :: #300: firefox.git 141.0-alt1: build check OK
2025-Aug-02 17:24:47 :: #400: thunderbird.git 141.0-alt1: build check OK
2025-Aug-02 17:24:49 :: build check OK
warning (#100): libnss-nssckbi-checkinstall-3.114-alt1.x86_64.rpm should be .noarch.rpm
2025-Aug-02 17:28:19 :: noarch check OK
2025-Aug-02 17:28:21 :: plan: src +4 -4 =19749, aarch64 +12 -12 =34799, i586 +7 -7 =33850, noarch +1 -1 =20867, x86_64 +12 -12 =35579
#200 ca-certificates 2025.02.10-alt1 -> 2025.07.29-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 2025.07.29-alt1
- mozilla: sync with nss-3.114.
Mon May 12 2025 Ajrat Makhmutov <rauty@altlinux> 2025.05.12-alt1
- mozilla: sync with nss-3.111.
#300 firefox 140.0.2-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version (141.0).
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8041: Incorrect URL truncation in Firefox for Android
+ CVE-2025-8042: Sandboxed iframe could start downloads
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
[...]
#100 nss 3.113-alt1 -> 3.114-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 3.114-alt1
- New version (3.114).
- Certificate Authority Changes:
+ Remove CN=Baltimore CyberTrust Root,OU=CyberTrust
+ Add CN=SwissSign RSA SMIME Root CA 2022 - 1
+ Add CN=SwissSign RSA TLS Root CA 2022 - 1
+ Add CN=TrustAsia SMIME ECC Root CA
+ Add CN=TrustAsia SMIME RSA Root CA
+ Add CN=TrustAsia TLS ECC Root CA
+ Add CN=TrustAsia TLS RSA Root CA
[...]
#400 thunderbird 139.0.2-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version.
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
+ CVE-2025-8030: Potential user-assisted code execution in "Copy as cURL" command
+ CVE-2025-8043: Incorrect URL truncation
[...]
2025-Aug-02 17:28:21 :: firefox: closes bugs: 54713
2025-Aug-02 17:28:21 :: firefox: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8041 CVE-2025-8042 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-02 17:28:21 :: thunderbird: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-02 17:28:21 :: thunderbird: mentions vulnerabilities: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6427 CVE-2025-6429 CVE-2025-6430 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436
2025-Aug-02 17:29:11 :: patched apt indices
2025-Aug-02 17:29:20 :: created next repo
2025-Aug-02 17:29:29 :: duplicate provides check OK
2025-Aug-02 17:30:05 :: dependencies check OK
2025-Aug-02 17:30:06 :: [x86_64 i586 aarch64] no need to repeat ELF symbols check
2025-Aug-02 17:30:06 :: [x86_64 i586 aarch64] ELF symbols check OK
warning [i586]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-02 17:30:18 :: [i586] #200 ca-certificates: install check OK (cached)
warning [x86_64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-02 17:30:19 :: [x86_64] #200 ca-certificates: install check OK (cached)
2025-Aug-02 17:30:22 :: [i586] #100 libnss: install check OK (cached)
x86_64: firefox=141.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-02 17:30:24 :: [x86_64] #300 firefox: install check OK (cached)
2025-Aug-02 17:30:26 :: [i586] #100 libnss-debuginfo: install check OK (cached)
warning [aarch64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-02 17:30:27 :: [aarch64] #200 ca-certificates: install check OK (cached)
2025-Aug-02 17:30:29 :: [x86_64] #300 firefox-config-privacy: install check OK (cached)
2025-Aug-02 17:30:31 :: [i586] #100 libnss-devel: install check OK (cached)
2025-Aug-02 17:30:35 :: [i586] #100 libnss-devel-static: install check OK (cached)
2025-Aug-02 17:30:35 :: [x86_64] #300 firefox-debuginfo: install check OK (cached)
aarch64: firefox=141.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-02 17:30:35 :: [aarch64] #300 firefox: install check OK (cached)
2025-Aug-02 17:30:39 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Aug-02 17:30:40 :: [x86_64] #100 libnss: install check OK (cached)
2025-Aug-02 17:30:43 :: [i586] #100 nss-utils: install check OK (cached)
2025-Aug-02 17:30:44 :: [aarch64] #300 firefox-config-privacy: install check OK (cached)
2025-Aug-02 17:30:44 :: [x86_64] #100 libnss-debuginfo: install check OK (cached)
2025-Aug-02 17:30:47 :: [i586] #100 nss-utils-debuginfo: install check OK (cached)
2025-Aug-02 17:30:48 :: [x86_64] #100 libnss-devel: install check OK (cached)
2025-Aug-02 17:30:53 :: [x86_64] #100 libnss-devel-static: install check OK (cached)
2025-Aug-02 17:30:54 :: [aarch64] #300 firefox-debuginfo: install check OK (cached)
2025-Aug-02 17:30:57 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Aug-02 17:31:01 :: [x86_64] #100 nss-utils: install check OK (cached)
2025-Aug-02 17:31:02 :: [aarch64] #100 libnss: install check OK (cached)
2025-Aug-02 17:31:06 :: [x86_64] #100 nss-utils-debuginfo: install check OK (cached)
2025-Aug-02 17:31:09 :: [aarch64] #100 libnss-debuginfo: install check OK (cached)
x86_64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-02 17:31:10 :: [x86_64] #400 thunderbird: install check OK (cached)
2025-Aug-02 17:31:17 :: [x86_64] #400 thunderbird-debuginfo: install check OK (cached)
2025-Aug-02 17:31:17 :: [aarch64] #100 libnss-devel: install check OK (cached)
2025-Aug-02 17:31:24 :: [aarch64] #100 libnss-devel-static: install check OK (cached)
2025-Aug-02 17:31:32 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Aug-02 17:31:39 :: [aarch64] #100 nss-utils: install check OK (cached)
2025-Aug-02 17:31:47 :: [aarch64] #100 nss-utils-debuginfo: install check OK (cached)
aarch64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-02 17:31:55 :: [aarch64] #400 thunderbird: install check OK (cached)
2025-Aug-02 17:32:06 :: [aarch64] #400 thunderbird-debuginfo: install check OK (cached)
2025-Aug-02 17:32:08 :: [x86_64-i586] plan: #0 +3 -3 =11697
2025-Aug-02 17:32:24 :: [x86_64-i586] generated apt indices
2025-Aug-02 17:32:26 :: [x86_64-i586] created next repo
2025-Aug-02 17:32:36 :: [x86_64-i586] dependencies check OK
2025-Aug-02 17:32:39 :: gears inheritance check OK
2025-Aug-02 17:32:39 :: srpm inheritance check OK
girar-check-perms: access to nss DENIED for rauty: project `nss' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: nss: needs approvals from members of @maint and @tester groups
girar-check-perms: access to ca-certificates DENIED for rauty: project `ca-certificates' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #200: ca-certificates: needs approvals from members of @maint and @tester groups
girar-check-perms: access to firefox DENIED for rauty: project `firefox' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #300: firefox: needs approvals from members of @maint and @tester groups
girar-check-perms: access to thunderbird DENIED for rauty: project `thunderbird' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #400: thunderbird: needs approvals from members of @maint and @tester groups
2025-Aug-02 17:32:43 :: acl check FAILED
2025-Aug-02 17:33:04 :: created contents_index files
2025-Aug-02 17:33:17 :: created hash files: aarch64 i586 noarch src x86_64-i586 x86_64
2025-Aug-02 17:33:20 :: task #391566 for p11 EPERM
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#391566] p11 EPERM (try 3) nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 ...
2025-08-02 16:54 [#391566] p11 TESTED nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 Girar awaiter (rauty)
2025-08-02 17:33 ` [#391566] p11 EPERM (try 2) " Girar awaiter (rauty)
@ 2025-08-07 18:16 ` Girar awaiter (rauty)
2025-08-14 13:40 ` [#391566] p11 EPERM (try 4) firefox.git=141.0.2-alt1 thunderbird.git=141.0-alt1 Girar awaiter (rauty)
2 siblings, 0 replies; 4+ messages in thread
From: Girar awaiter (rauty) @ 2025-08-07 18:16 UTC (permalink / raw)
To: Ajrat Makhmutov; +Cc: sisyphus-incominger, girar-builder-p11, girar-builder-p11
https://git.altlinux.org/tasks/391566/logs/events.3.1.log
https://packages.altlinux.org/tasks/391566
subtask name aarch64 i586 x86_64
#240 firefox 53:04 - 31:26
#400 thunderbird 1:00:13 - 35:36
2025-Aug-07 16:07:30 :: task #391566 for p11 resumed by rauty:
2025-Aug-07 16:07:30 :: message: New versions
#100 build 3.114-alt1 from /people/rauty/packages/nss.git fetched at 2025-Aug-02 11:23:02
#200 build 2025.07.29-alt1 from /people/rauty/packages/ca-certificates.git fetched at 2025-Aug-02 11:24:51
#240 build 141.0.2-alt1 from /gears/f/firefox.git fetched at 2025-Aug-07 15:16:17 from sisyphus
#300 removed
#400 build 141.0-alt1 from /people/rauty/packages/thunderbird.git fetched at 2025-Aug-02 12:57:46
2025-Aug-07 16:07:31 :: created build repo
2025-Aug-07 16:07:32 :: [x86_64] #100 nss.git 3.114-alt1: build start
2025-Aug-07 16:07:32 :: [i586] #100 nss.git 3.114-alt1: build start
2025-Aug-07 16:07:32 :: [aarch64] #100 nss.git 3.114-alt1: build start
2025-Aug-07 16:07:50 :: [i586] #100 nss.git 3.114-alt1: build OK (cached)
2025-Aug-07 16:07:50 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-07 16:07:51 :: [x86_64] #100 nss.git 3.114-alt1: build OK (cached)
2025-Aug-07 16:07:51 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-07 16:08:03 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Aug-07 16:08:03 :: [i586] #240 firefox.git 141.0.2-alt1: build start
2025-Aug-07 16:08:04 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Aug-07 16:08:05 :: [x86_64] #240 firefox.git 141.0.2-alt1: build start
2025-Aug-07 16:08:07 :: [aarch64] #100 nss.git 3.114-alt1: build OK (cached)
2025-Aug-07 16:08:07 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Aug-07 16:08:30 :: [i586] #240 firefox.git 141.0.2-alt1: build SKIPPED
2025-Aug-07 16:08:30 :: [i586] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-07 16:08:31 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Aug-07 16:08:31 :: [aarch64] #240 firefox.git 141.0.2-alt1: build start
2025-Aug-07 16:08:54 :: [i586] #400 thunderbird.git 141.0-alt1: build SKIPPED
2025-Aug-07 16:39:31 :: [x86_64] #240 firefox.git 141.0.2-alt1: build OK
2025-Aug-07 16:39:31 :: [x86_64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-07 17:01:35 :: [aarch64] #240 firefox.git 141.0.2-alt1: build OK
2025-Aug-07 17:01:35 :: [aarch64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-07 17:15:07 :: [x86_64] #400 thunderbird.git 141.0-alt1: build OK
2025-Aug-07 18:01:48 :: [aarch64] #400 thunderbird.git 141.0-alt1: build OK
2025-Aug-07 18:02:12 :: #100: nss.git 3.114-alt1: build check OK
2025-Aug-07 18:02:20 :: #200: ca-certificates.git 2025.07.29-alt1: build check OK
2025-Aug-07 18:02:49 :: #240: firefox.git 141.0.2-alt1: build check OK
2025-Aug-07 18:03:19 :: #400: thunderbird.git 141.0-alt1: build check OK
2025-Aug-07 18:03:20 :: build check OK
warning (#100): libnss-nssckbi-checkinstall-3.114-alt1.x86_64.rpm should be .noarch.rpm
2025-Aug-07 18:06:58 :: noarch check OK
2025-Aug-07 18:07:00 :: plan: src +4 -4 =19751, aarch64 +12 -12 =34800, i586 +7 -7 =33850, noarch +1 -1 =20872, x86_64 +12 -12 =35580
#200 ca-certificates 2025.02.10-alt1 -> 2025.07.29-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 2025.07.29-alt1
- mozilla: sync with nss-3.114.
Mon May 12 2025 Ajrat Makhmutov <rauty@altlinux> 2025.05.12-alt1
- mozilla: sync with nss-3.111.
#240 firefox 140.0.2-alt1 -> 141.0.2-alt1
Wed Aug 06 2025 Ajrat Makhmutov <rauty@altlinux> 141.0.2-alt1
- New version (141.0.2).
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version (141.0).
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8041: Incorrect URL truncation in Firefox for Android
+ CVE-2025-8042: Sandboxed iframe could start downloads
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
[...]
#100 nss 3.113-alt1 -> 3.114-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 3.114-alt1
- New version (3.114).
- Certificate Authority Changes:
+ Remove CN=Baltimore CyberTrust Root,OU=CyberTrust
+ Add CN=SwissSign RSA SMIME Root CA 2022 - 1
+ Add CN=SwissSign RSA TLS Root CA 2022 - 1
+ Add CN=TrustAsia SMIME ECC Root CA
+ Add CN=TrustAsia SMIME RSA Root CA
+ Add CN=TrustAsia TLS ECC Root CA
+ Add CN=TrustAsia TLS RSA Root CA
[...]
#400 thunderbird 139.0.2-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version.
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
+ CVE-2025-8030: Potential user-assisted code execution in "Copy as cURL" command
+ CVE-2025-8043: Incorrect URL truncation
[...]
2025-Aug-07 18:07:01 :: firefox: closes bugs: 54713
2025-Aug-07 18:07:01 :: firefox: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8041 CVE-2025-8042 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-07 18:07:01 :: thunderbird: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-07 18:07:01 :: thunderbird: mentions vulnerabilities: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6427 CVE-2025-6429 CVE-2025-6430 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436
2025-Aug-07 18:07:55 :: patched apt indices
2025-Aug-07 18:08:04 :: created next repo
2025-Aug-07 18:08:15 :: duplicate provides check OK
2025-Aug-07 18:08:51 :: dependencies check OK
2025-Aug-07 18:09:31 :: [x86_64 i586 aarch64] ELF symbols check OK
warning [i586]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-07 18:09:43 :: [i586] #200 ca-certificates: install check OK (cached)
warning [x86_64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-07 18:09:44 :: [x86_64] #200 ca-certificates: install check OK (cached)
2025-Aug-07 18:09:47 :: [i586] #100 libnss: install check OK (cached)
2025-Aug-07 18:09:51 :: [i586] #100 libnss-debuginfo: install check OK (cached)
warning [aarch64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Aug-07 18:09:52 :: [aarch64] #200 ca-certificates: install check OK (cached)
2025-Aug-07 18:09:56 :: [i586] #100 libnss-devel: install check OK (cached)
2025-Aug-07 18:10:00 :: [i586] #100 libnss-devel-static: install check OK (cached)
x86_64: firefox=141.0.2-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-07 18:10:02 :: [x86_64] #240 firefox: install check OK
2025-Aug-07 18:10:04 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Aug-07 18:10:08 :: [i586] #100 nss-utils: install check OK (cached)
2025-Aug-07 18:10:12 :: [i586] #100 nss-utils-debuginfo: install check OK (cached)
aarch64: firefox=141.0.2-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-07 18:10:19 :: [aarch64] #240 firefox: install check OK
2025-Aug-07 18:10:19 :: [x86_64] #240 firefox-config-privacy: install check OK
2025-Aug-07 18:10:45 :: [aarch64] #240 firefox-config-privacy: install check OK
2025-Aug-07 18:11:13 :: [x86_64] #240 firefox-debuginfo: install check OK
2025-Aug-07 18:11:17 :: [x86_64] #100 libnss: install check OK (cached)
2025-Aug-07 18:11:22 :: [x86_64] #100 libnss-debuginfo: install check OK (cached)
2025-Aug-07 18:11:26 :: [x86_64] #100 libnss-devel: install check OK (cached)
2025-Aug-07 18:11:31 :: [x86_64] #100 libnss-devel-static: install check OK (cached)
2025-Aug-07 18:11:35 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Aug-07 18:11:39 :: [x86_64] #100 nss-utils: install check OK (cached)
2025-Aug-07 18:11:44 :: [x86_64] #100 nss-utils-debuginfo: install check OK (cached)
x86_64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-07 18:11:59 :: [x86_64] #400 thunderbird: install check OK
2025-Aug-07 18:12:07 :: [aarch64] #240 firefox-debuginfo: install check OK
2025-Aug-07 18:12:16 :: [aarch64] #100 libnss: install check OK (cached)
2025-Aug-07 18:12:23 :: [aarch64] #100 libnss-debuginfo: install check OK (cached)
2025-Aug-07 18:12:31 :: [aarch64] #100 libnss-devel: install check OK (cached)
2025-Aug-07 18:12:38 :: [aarch64] #100 libnss-devel-static: install check OK (cached)
2025-Aug-07 18:12:46 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Aug-07 18:12:53 :: [aarch64] #100 nss-utils: install check OK (cached)
2025-Aug-07 18:12:56 :: [x86_64] #400 thunderbird-debuginfo: install check OK
2025-Aug-07 18:13:01 :: [aarch64] #100 nss-utils-debuginfo: install check OK (cached)
aarch64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-07 18:13:25 :: [aarch64] #400 thunderbird: install check OK
2025-Aug-07 18:14:49 :: [aarch64] #400 thunderbird-debuginfo: install check OK
2025-Aug-07 18:14:51 :: [x86_64-i586] plan: #0 +3 -3 =11697
2025-Aug-07 18:15:08 :: [x86_64-i586] generated apt indices
2025-Aug-07 18:15:09 :: [x86_64-i586] created next repo
2025-Aug-07 18:15:20 :: [x86_64-i586] dependencies check OK
2025-Aug-07 18:15:22 :: gears inheritance check OK
2025-Aug-07 18:15:23 :: srpm inheritance check OK
girar-check-perms: access to @maint ALLOWED for cas: member of approved group
check-subtask-perms: #100: nss: approved by cas, needs an approval from a member of @tester group
girar-check-perms: access to @maint ALLOWED for cas: member of approved group
check-subtask-perms: #200: ca-certificates: approved by cas, needs an approval from a member of @tester group
girar-check-perms: access to firefox DENIED for rauty: project `firefox' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #240: firefox: needs approvals from members of @maint and @tester groups
girar-check-perms: access to @maint ALLOWED for cas: member of approved group
check-subtask-perms: #400: thunderbird: approved by cas, needs an approval from a member of @tester group
2025-Aug-07 18:15:27 :: acl check FAILED
2025-Aug-07 18:15:48 :: created contents_index files
2025-Aug-07 18:16:00 :: created hash files: aarch64 i586 noarch src x86_64-i586 x86_64
2025-Aug-07 18:16:04 :: task #391566 for p11 EPERM
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#391566] p11 EPERM (try 4) firefox.git=141.0.2-alt1 thunderbird.git=141.0-alt1
2025-08-02 16:54 [#391566] p11 TESTED nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 Girar awaiter (rauty)
2025-08-02 17:33 ` [#391566] p11 EPERM (try 2) " Girar awaiter (rauty)
2025-08-07 18:16 ` [#391566] p11 EPERM (try 3) " Girar awaiter (rauty)
@ 2025-08-14 13:40 ` Girar awaiter (rauty)
2 siblings, 0 replies; 4+ messages in thread
From: Girar awaiter (rauty) @ 2025-08-14 13:40 UTC (permalink / raw)
To: Ajrat Makhmutov; +Cc: sisyphus-incominger, girar-builder-p11, girar-builder-p11
https://git.altlinux.org/tasks/391566/logs/events.4.1.log
https://packages.altlinux.org/tasks/391566
subtask name aarch64 i586 x86_64
#240 firefox 56:15 - 31:34
#400 thunderbird 1:13:57 - 36:34
2025-Aug-14 11:17:29 :: task #391566 for p11 resumed by rauty:
2025-Aug-14 11:17:29 :: message: New versions
#100 removed
#200 removed
#240 build 141.0.2-alt1 from /gears/f/firefox.git fetched at 2025-Aug-07 15:16:17 from sisyphus
#300 removed
#400 build 141.0-alt1 from /people/rauty/packages/thunderbird.git fetched at 2025-Aug-02 12:57:46
2025-Aug-14 11:17:30 :: created build repo
2025-Aug-14 11:17:31 :: [i586] #240 firefox.git 141.0.2-alt1: build start
2025-Aug-14 11:17:31 :: [x86_64] #240 firefox.git 141.0.2-alt1: build start
2025-Aug-14 11:17:31 :: [aarch64] #240 firefox.git 141.0.2-alt1: build start
2025-Aug-14 11:18:03 :: [i586] #240 firefox.git 141.0.2-alt1: build SKIPPED
2025-Aug-14 11:18:03 :: [i586] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-14 11:18:27 :: [i586] #400 thunderbird.git 141.0-alt1: build SKIPPED
2025-Aug-14 11:49:05 :: [x86_64] #240 firefox.git 141.0.2-alt1: build OK
2025-Aug-14 11:49:05 :: [x86_64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-14 12:13:46 :: [aarch64] #240 firefox.git 141.0.2-alt1: build OK
2025-Aug-14 12:13:47 :: [aarch64] #400 thunderbird.git 141.0-alt1: build start
2025-Aug-14 12:25:39 :: [x86_64] #400 thunderbird.git 141.0-alt1: build OK
2025-Aug-14 13:27:44 :: [aarch64] #400 thunderbird.git 141.0-alt1: build OK
2025-Aug-14 13:28:14 :: #240: firefox.git 141.0.2-alt1: build check OK
2025-Aug-14 13:28:44 :: #400: thunderbird.git 141.0-alt1: build check OK
2025-Aug-14 13:28:45 :: build check OK
2025-Aug-14 13:32:43 :: noarch check OK
2025-Aug-14 13:32:45 :: plan: src +2 -2 =19750, aarch64 +5 -5 =34788, x86_64 +5 -5 =35569
#240 firefox 140.0.2-alt1 -> 141.0.2-alt1
Wed Aug 06 2025 Ajrat Makhmutov <rauty@altlinux> 141.0.2-alt1
- New version (141.0.2).
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version (141.0).
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8041: Incorrect URL truncation in Firefox for Android
+ CVE-2025-8042: Sandboxed iframe could start downloads
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
[...]
#400 thunderbird 139.0.2-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1
- New version.
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
+ CVE-2025-8030: Potential user-assisted code execution in "Copy as cURL" command
+ CVE-2025-8043: Incorrect URL truncation
[...]
2025-Aug-14 13:32:45 :: firefox: closes bugs: 54713
2025-Aug-14 13:32:45 :: firefox: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8041 CVE-2025-8042 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-14 13:32:45 :: thunderbird: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Aug-14 13:32:45 :: thunderbird: mentions vulnerabilities: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6427 CVE-2025-6429 CVE-2025-6430 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436
2025-Aug-14 13:33:40 :: patched apt indices
2025-Aug-14 13:33:49 :: created next repo
2025-Aug-14 13:33:59 :: duplicate provides check OK
2025-Aug-14 13:34:39 :: dependencies check OK
2025-Aug-14 13:35:21 :: [x86_64 aarch64] ELF symbols check OK
x86_64: firefox=141.0.2-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-14 13:35:46 :: [x86_64] #240 firefox: install check OK
aarch64: firefox=141.0.2-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Aug-14 13:36:00 :: [aarch64] #240 firefox: install check OK
2025-Aug-14 13:36:04 :: [x86_64] #240 firefox-config-privacy: install check OK
2025-Aug-14 13:36:26 :: [aarch64] #240 firefox-config-privacy: install check OK
2025-Aug-14 13:36:57 :: [x86_64] #240 firefox-debuginfo: install check OK
x86_64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-14 13:37:13 :: [x86_64] #400 thunderbird: install check OK
2025-Aug-14 13:37:49 :: [aarch64] #240 firefox-debuginfo: install check OK
2025-Aug-14 13:38:10 :: [x86_64] #400 thunderbird-debuginfo: install check OK
aarch64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Aug-14 13:38:13 :: [aarch64] #400 thunderbird: install check OK
2025-Aug-14 13:39:37 :: [aarch64] #400 thunderbird-debuginfo: install check OK
2025-Aug-14 13:39:55 :: [x86_64-i586] generated apt indices
2025-Aug-14 13:39:55 :: [x86_64-i586] created next repo
2025-Aug-14 13:40:06 :: [x86_64-i586] dependencies check OK
2025-Aug-14 13:40:08 :: gears inheritance check OK
2025-Aug-14 13:40:09 :: srpm inheritance check OK
girar-check-perms: access to @maint ALLOWED for cas: member of approved group
check-subtask-perms: #240: firefox: approved by cas, needs an approval from a member of @tester group
girar-check-perms: access to @maint ALLOWED for cas: member of approved group
check-subtask-perms: #400: thunderbird: approved by cas, needs an approval from a member of @tester group
2025-Aug-14 13:40:11 :: acl check FAILED
2025-Aug-14 13:40:22 :: created contents_index files
2025-Aug-14 13:40:36 :: created hash files: aarch64 src x86_64
2025-Aug-14 13:40:39 :: task #391566 for p11 EPERM
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2025-08-14 13:40 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-08-02 16:54 [#391566] p11 TESTED nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 Girar awaiter (rauty)
2025-08-02 17:33 ` [#391566] p11 EPERM (try 2) " Girar awaiter (rauty)
2025-08-07 18:16 ` [#391566] p11 EPERM (try 3) " Girar awaiter (rauty)
2025-08-14 13:40 ` [#391566] p11 EPERM (try 4) firefox.git=141.0.2-alt1 thunderbird.git=141.0-alt1 Girar awaiter (rauty)
ALT Linux Girar Builder robot reports
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \
sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com
public-inbox-index sisyphus-incominger
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git