* [#395604] [test-only] FAILED firefox-esr.git=firefox-esr/140.3.0-alt1
@ 2025-09-28 3:08 Girar awaiter (pav)
2025-10-02 6:43 ` [#395604] [test-only] FAILED (try 2) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Girar awaiter (pav) @ 2025-09-28 3:08 UTC (permalink / raw)
To: Pavel Vasenkov; +Cc: sisyphus-incominger, girar-builder-sisyphus
https://git.altlinux.org/tasks/395604/logs/events.1.1.log
https://packages.altlinux.org/tasks/395604
subtask name aarch64 i586 x86_64
#100 firefox-esr failed failed failed
2025-Sep-28 02:07:26 :: test-only task #395604 for sisyphus started by pav:
#100 build firefox-esr/140.3.0-alt1 from /people/pav/packages/firefox-esr.git fetched at 2025-Sep-28 02:06:09
2025-Sep-28 02:07:28 :: [aarch64] #100 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Sep-28 02:07:28 :: [i586] #100 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Sep-28 02:07:28 :: [x86_64] #100 firefox-esr.git firefox-esr/140.3.0-alt1: build start
[x86_64] 9:08.61 In file included from Unified_cpp_certverifier0.cpp:2:
[x86_64] 9:08.61 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:602:30: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[x86_64] 9:08.61 602 | NSSCertDBTrustDomain trustDomain(
[x86_64] 9:08.61 | ^
[x86_64] 9:08.61 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:665:30: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[x86_64] 9:08.61 665 | NSSCertDBTrustDomain trustDomain(
[x86_64] 9:08.61 | ^
[x86_64] 9:08.61 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:737:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[x86_64] 9:08.61 737 | NSSCertDBTrustDomain trustDomain(
[x86_64] 9:08.61 | ^
[x86_64] 9:08.61 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:756:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[x86_64] 9:08.61 756 | NSSCertDBTrustDomain trustDomain(
[x86_64] 9:08.61 | ^
[x86_64] 9:08.61 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:785:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[x86_64] 9:08.61 785 | NSSCertDBTrustDomain trustDomain(
[x86_64] 9:08.61 | ^
[x86_64] 9:08.61 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:831:32: error: variable type 'mozilla::psm::AppTrustDomain' is an abstract class
[x86_64] 9:08.61 831 | mozilla::psm::AppTrustDomain trustDomain(std::move(emptyCertList));
2025-Sep-28 02:31:49 :: [x86_64] firefox-esr.git firefox-esr/140.3.0-alt1: remote: build failed
2025-Sep-28 02:31:49 :: [x86_64] #100 firefox-esr.git firefox-esr/140.3.0-alt1: build FAILED
2025-Sep-28 02:31:49 :: [x86_64] requesting cancellation of task processing
[i586] 18:44.76 /usr/src/RPM/BUILD/firefox-140.3.0/mozbuild/srcdirs/firefox-140.3.0-dc4b1166f0c0/_virtualenvs/build/bin/python -m mozbuild.action.check_binary --networking ../../../i686-unknown-linux-gnu/release/libgkrust.a
[i586] 18:44.76 toolkit/library/rust/libgkrust.a
[i586] 18:44.76 :
[i586] 18:44.76 gmake[2]: *** [/usr/src/RPM/BUILD/firefox-140.3.0/config/recurse.mk:34: compile] Error 2
[i586] 18:44.76 gmake[1]: *** [/usr/src/RPM/BUILD/firefox-140.3.0/config/rules.mk:359: default] Error 2
[i586] 18:44.76 gmake: *** [client.mk:60: build] Error 2
[i586] 18:44.86 W 934 compiler warnings present.
[i586] error: Bad exit status from /usr/src/tmp/rpm-tmp.15455 (%build)
[i586] RPM build errors:
[i586] Macro %00 not found
2025-Sep-28 02:33:04 :: [i586] firefox-esr.git firefox-esr/140.3.0-alt1: remote: build failed
2025-Sep-28 02:33:04 :: [i586] #100 firefox-esr.git firefox-esr/140.3.0-alt1: build FAILED
[aarch64] 32:02.54 In file included from Unified_cpp_certverifier0.cpp:2:
[aarch64] 32:02.54 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:568:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 32:02.54 568 | NSSCertDBTrustDomain trustDomain(
[aarch64] --
[aarch64] 32:02.54 In file included from Unified_cpp_certverifier0.cpp:2:
[aarch64] 32:02.54 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:602:30: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 32:02.54 602 | NSSCertDBTrustDomain trustDomain(
[aarch64] 32:02.54 | ^
[aarch64] 32:02.54 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:665:30: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 32:02.54 665 | NSSCertDBTrustDomain trustDomain(
[aarch64] 32:02.54 | ^
[aarch64] 32:02.54 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:737:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 32:02.54 737 | NSSCertDBTrustDomain trustDomain(
[aarch64] 32:02.54 | ^
[aarch64] 32:02.54 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:756:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 32:02.54 756 | NSSCertDBTrustDomain trustDomain(
[aarch64] 32:02.54 | ^
[aarch64] 32:02.54 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:785:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 32:02.54 785 | NSSCertDBTrustDomain trustDomain(
[aarch64] 32:02.54 | ^
[aarch64] 32:02.54 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:831:32: error: variable type 'mozilla::psm::AppTrustDomain' is an abstract class
[aarch64] 32:02.54 831 | mozilla::psm::AppTrustDomain trustDomain(std::move(emptyCertList));
2025-Sep-28 03:08:29 :: [aarch64] firefox-esr.git firefox-esr/140.3.0-alt1: remote: build failed
2025-Sep-28 03:08:29 :: [aarch64] #100 firefox-esr.git firefox-esr/140.3.0-alt1: build FAILED
2025-Sep-28 02:31:50 :: [x86_64] build FAILED
2025-Sep-28 02:33:05 :: [i586] build FAILED
2025-Sep-28 03:08:29 :: [aarch64] build FAILED
2025-Sep-28 03:08:29 :: task #395604 for sisyphus FAILED
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#395604] [test-only] FAILED (try 2) firefox-esr.git=firefox-esr/140.3.0-alt1
2025-09-28 3:08 [#395604] [test-only] FAILED firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
@ 2025-10-02 6:43 ` Girar awaiter (pav)
2025-10-03 16:17 ` [#395604] TESTED (try 3) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
2025-10-03 17:24 ` [#395604] DONE (try 4) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar pender (pav)
2 siblings, 0 replies; 4+ messages in thread
From: Girar awaiter (pav) @ 2025-10-02 6:43 UTC (permalink / raw)
To: Pavel Vasenkov; +Cc: sisyphus-incominger, girar-builder-sisyphus
https://git.altlinux.org/tasks/395604/logs/events.2.1.log
https://packages.altlinux.org/tasks/395604
subtask name aarch64 i586 x86_64
#200 firefox-esr failed failed failed
2025-Oct-02 06:02:03 :: test-only task #395604 for sisyphus resumed by pav:
#100 removed
#200 build firefox-esr/140.3.0-alt1 from /people/pav/packages/firefox-esr.git fetched at 2025-Oct-02 05:59:37
2025-Oct-02 06:02:05 :: [i586] #200 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-02 06:02:05 :: [aarch64] #200 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-02 06:02:05 :: [x86_64] #200 firefox-esr.git firefox-esr/140.3.0-alt1: build start
[x86_64] 9:17.76 | ^
[x86_64] 9:17.76 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:750:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[x86_64] 9:17.76 750 | NSSCertDBTrustDomain trustDomain(
[x86_64] 9:17.76 | ^
[x86_64] 9:17.76 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:778:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[x86_64] 9:17.76 778 | NSSCertDBTrustDomain trustDomain(
[x86_64] 9:17.76 | ^
[x86_64] 9:17.76 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:823:32: error: variable type 'mozilla::psm::AppTrustDomain' is an abstract class
[x86_64] 9:17.76 823 | mozilla::psm::AppTrustDomain trustDomain(std::move(emptyCertList));
2025-Oct-02 06:26:15 :: [x86_64] firefox-esr.git firefox-esr/140.3.0-alt1: remote: build failed
2025-Oct-02 06:26:15 :: [x86_64] #200 firefox-esr.git firefox-esr/140.3.0-alt1: build FAILED
2025-Oct-02 06:26:15 :: [x86_64] requesting cancellation of task processing
[i586] 13:48.73 Compiling gkrust v0.1.0 (/usr/src/RPM/BUILD/firefox-140.3.0/toolkit/library/rust)
[i586] 13:48.73 Running `CARGO=/usr/bin/cargo CARGO_CRATE_NAME=gkrust CARGO_MANIFEST_DIR=/usr/src/RPM/BUILD/firefox-140.3.0/toolkit/library/rust CARGO_MANIFEST_PATH=/usr/src/RPM/BUILD/firefox-140.3.0/toolkit/library/rust/Cargo.toml CARGO_PKG_AUTHORS='The Mozilla Project Developers' CARGO_PKG_DESCRIPTION='Rust code for libxul' CARGO_PKG_HOMEPAGE='' CARGO_PKG_LICENSE=MPL-2.0 CARGO_PKG_LICENSE_FILE='' CARGO_PKG_NAME=gkrust CARGO_PKG_README='' CARGO_PKG_REPOSITORY='' CARGO_PKG_RUST_VERSION=1.82.0 CARGO_PKG_VERSION=0.1.0 CARGO_PKG_VERSION_MAJOR=0 CARGO_PKG_VERSION_MINOR=1 CARGO_PKG_VERSION_PATCH=0 CARGO_PKG_VERSION_PRE='' CARGO_PRIMARY_PACKAGE=1 CARGO_SBOM_PATH='' LD_LIBRARY_PATH=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/release/deps /usr/bin/rustc --crate-name gkrust --edition=2015 toolkit/library/rust/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type staticlib --emit=dep-info,link -C opt-level=2 -C panic=abort -C embed-bitcode=no --cfg 'feature="mozilla-central-workspace-hack"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values("mozilla-central-workspace-hack"))' -C metadata=6121092abcdea3eb -C extra-filename=-ac5c63225a3d73d9 --out-dir /usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/deps --target i686-unknown-linux-gnu -C linker=/usr/src/RPM/BUILD/firefox-140.3.0/build/cargo-linker -C strip=debuginfo -L dependency=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/deps -L dependency=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/release/deps --extern gkrust_shared=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/deps/libgkrust_shared-5f5afb5eae56eb2d.rlib --extern lmdb_sys=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/deps/liblmdb_sys-f5b90af077e5d4c2.rlib --extern mozglue_static=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/deps/libmozglue_static-9c58fc3d8691239b.rlib --extern mozilla_central_workspace_hack=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/deps/libmozilla_central_workspace_hack-f598d45006af9cba.rlib --extern swgl=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/deps/libswgl-2ed884470dd97796.rlib -Clto -C debuginfo=2 --cap-lints warn -Clink-args=-fPIC -Cdebuginfo=0 -Cembed-bitcode=yes -C codegen-units=1 -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/build/audioipc2-4907c19b8bf7a1c3/out -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/build/mozglue-static-087907831323b12d/out -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/build/lmdb-rkv-sys-d63091c22307d289/out -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/i686-unknown-linux-gnu/release/build/swgl-15358753359b9378/out -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/dist/bin -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/security/nss/lib/nss/nss_nss3 -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/security/nss/lib/ssl/ssl_ssl3 -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/config/external/nspr/pr -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/dist/bin -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/security/nss/lib/nss/nss_nss3 -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/security/nss/lib/ssl/ssl_ssl3 -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/config/external/nspr/pr -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/dist/bin -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/security/nss/lib/nss/nss_nss3 -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/security/nss/lib/ssl/ssl_ssl3 -L native=/usr/src/RPM/BUILD/firefox-140.3.0/objdir/config/external/nspr/pr`
[i586] 20:58.03 Finished `release` profile [optimized] target(s) in 20m 42s
[i586] 21:00.56 /usr/src/RPM/BUILD/firefox-140.3.0/mozbuild/srcdirs/firefox-140.3.0-dc4b1166f0c0/_virtualenvs/build/bin/python -m mozbuild.action.check_binary --networking ../../../i686-unknown-linux-gnu/release/libgkrust.a
[i586] 21:00.56 toolkit/library/rust/libgkrust.a
[i586] 21:00.56 :
[i586] 21:00.56 gmake[2]: *** [/usr/src/RPM/BUILD/firefox-140.3.0/config/recurse.mk:34: compile] Error 2
[i586] 21:00.56 gmake[1]: *** [/usr/src/RPM/BUILD/firefox-140.3.0/config/rules.mk:359: default] Error 2
[i586] 21:00.56 gmake: *** [client.mk:60: build] Error 2
[i586] 21:00.66 W 935 compiler warnings present.
2025-Oct-02 06:30:31 :: [i586] firefox-esr.git firefox-esr/140.3.0-alt1: remote: build failed
2025-Oct-02 06:30:31 :: [i586] #200 firefox-esr.git firefox-esr/140.3.0-alt1: build FAILED
[aarch64] 16:51.50 In file included from Unified_cpp_certverifier0.cpp:2:
[aarch64] 16:51.50 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:566:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 16:51.50 566 | NSSCertDBTrustDomain trustDomain(
[aarch64] --
[aarch64] 16:51.51 In file included from Unified_cpp_certverifier0.cpp:2:
[aarch64] 16:51.51 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:599:30: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 16:51.51 599 | NSSCertDBTrustDomain trustDomain(
[aarch64] 16:51.51 | ^
[aarch64] 16:51.51 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:661:30: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 16:51.51 661 | NSSCertDBTrustDomain trustDomain(
[aarch64] 16:51.51 | ^
[aarch64] 16:51.51 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:732:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 16:51.51 732 | NSSCertDBTrustDomain trustDomain(
[aarch64] 16:51.51 | ^
[aarch64] 16:51.51 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:750:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 16:51.51 750 | NSSCertDBTrustDomain trustDomain(
[aarch64] 16:51.51 | ^
[aarch64] 16:51.51 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:778:28: error: variable type 'NSSCertDBTrustDomain' is an abstract class
[aarch64] 16:51.51 778 | NSSCertDBTrustDomain trustDomain(
[aarch64] 16:51.51 | ^
[aarch64] 16:51.51 /usr/src/RPM/BUILD/firefox-140.3.0/security/certverifier/CertVerifier.cpp:823:32: error: variable type 'mozilla::psm::AppTrustDomain' is an abstract class
[aarch64] 16:51.51 823 | mozilla::psm::AppTrustDomain trustDomain(std::move(emptyCertList));
2025-Oct-02 06:43:05 :: [aarch64] firefox-esr.git firefox-esr/140.3.0-alt1: remote: build failed
2025-Oct-02 06:43:05 :: [aarch64] #200 firefox-esr.git firefox-esr/140.3.0-alt1: build FAILED
2025-Oct-02 06:26:15 :: [x86_64] build FAILED
2025-Oct-02 06:30:32 :: [i586] build FAILED
2025-Oct-02 06:43:06 :: [aarch64] build FAILED
2025-Oct-02 06:43:06 :: task #395604 for sisyphus FAILED
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#395604] TESTED (try 3) firefox-esr.git=firefox-esr/140.3.0-alt1
2025-09-28 3:08 [#395604] [test-only] FAILED firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
2025-10-02 6:43 ` [#395604] [test-only] FAILED (try 2) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
@ 2025-10-03 16:17 ` Girar awaiter (pav)
2025-10-03 17:24 ` [#395604] DONE (try 4) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar pender (pav)
2 siblings, 0 replies; 4+ messages in thread
From: Girar awaiter (pav) @ 2025-10-03 16:17 UTC (permalink / raw)
To: Pavel Vasenkov
Cc: sisyphus-incominger, girar-builder-sisyphus, Andrey Cherepanov
https://git.altlinux.org/tasks/395604/logs/events.3.1.log
https://packages.altlinux.org/tasks/395604
subtask name aarch64 i586 x86_64
#300 firefox-esr 1:01:14 25:21 32:02
2025-Oct-03 15:06:53 :: test-only task #395604 for sisyphus resumed by pav:
#100 removed
#200 removed
#300 build firefox-esr/140.3.0-alt1 from /people/pav/packages/firefox-esr.git fetched at 2025-Oct-03 15:06:06
2025-Oct-03 15:06:54 :: [x86_64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-03 15:06:54 :: [i586] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-03 15:06:54 :: [aarch64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-03 15:32:15 :: [i586] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build OK
2025-Oct-03 15:38:56 :: [x86_64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build OK
2025-Oct-03 16:08:08 :: [aarch64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build OK
2025-Oct-03 16:08:49 :: #300: firefox-esr.git firefox-esr/140.3.0-alt1: build check OK
2025-Oct-03 16:08:50 :: build check OK
warning (#300): firefox-esr-config-privacy-140.3.0-alt1.x86_64.rpm should be .noarch.rpm
2025-Oct-03 16:10:47 :: noarch check OK
2025-Oct-03 16:10:49 :: plan: src +1 -1 =20709, aarch64 +3 -3 =36559, i586 +3 -3 =35063, x86_64 +3 -3 =37393
#300 firefox-esr 140.2.0-alt2 -> 140.3.0-alt1
Tue Sep 23 2025 Pavel Vasenkov <pav@altlinux> 140.3.0-alt1
- New ESR version.
- Security fixes:
+ CVE-2025-10527 Sandbox escape due to use-after-free in the Graphics: Canvas2D component
+ CVE-2025-10528 Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
+ CVE-2025-10529 Same-origin policy bypass in the Layout component
+ CVE-2025-10532 Incorrect boundary conditions in the JavaScript: GC component
+ CVE-2025-10533 Integer overflow in the SVG component
+ CVE-2025-10536 Information disclosure in the Networking: Cache component
+ CVE-2025-10537 Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
2025-Oct-03 16:10:49 :: firefox-esr: mentions vulnerabilities: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533 CVE-2025-10536 CVE-2025-10537
2025-Oct-03 16:11:40 :: patched apt indices
2025-Oct-03 16:11:50 :: created next repo
2025-Oct-03 16:12:00 :: duplicate provides check OK
2025-Oct-03 16:12:38 :: dependencies check OK
2025-Oct-03 16:13:16 :: [x86_64 i586 aarch64] ELF symbols check OK
x86_64: firefox-esr=140.3.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Oct-03 16:13:41 :: [x86_64] #300 firefox-esr: install check OK
i586: firefox-esr=140.3.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Oct-03 16:13:43 :: [i586] #300 firefox-esr: install check OK
aarch64: firefox-esr=140.3.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Oct-03 16:13:55 :: [aarch64] #300 firefox-esr: install check OK
2025-Oct-03 16:13:58 :: [x86_64] #300 firefox-esr-config-privacy: install check OK
2025-Oct-03 16:14:03 :: [i586] #300 firefox-esr-config-privacy: install check OK
2025-Oct-03 16:14:21 :: [aarch64] #300 firefox-esr-config-privacy: install check OK
2025-Oct-03 16:14:32 :: [i586] #300 firefox-esr-debuginfo: install check OK
2025-Oct-03 16:14:51 :: [x86_64] #300 firefox-esr-debuginfo: install check OK
2025-Oct-03 16:15:42 :: [aarch64] #300 firefox-esr-debuginfo: install check OK
2025-Oct-03 16:15:44 :: [x86_64-i586] plan: #1 +1 -1 =11927
2025-Oct-03 16:16:19 :: [x86_64-i586] arepo build OK
2025-Oct-03 16:16:39 :: [x86_64-i586] generated apt indices
2025-Oct-03 16:16:40 :: [x86_64-i586] created next repo
2025-Oct-03 16:16:53 :: [x86_64-i586] dependencies check OK
2025-Oct-03 16:16:54 :: gears inheritance check OK
2025-Oct-03 16:16:55 :: srpm inheritance check OK
girar-check-perms: access to firefox-esr ALLOWED for pav: project leader
check-subtask-perms: #300: firefox-esr: allowed for pav
2025-Oct-03 16:16:55 :: acl check OK
2025-Oct-03 16:17:09 :: created contents_index files
2025-Oct-03 16:17:20 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2025-Oct-03 16:17:23 :: task #395604 for sisyphus TESTED
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#395604] DONE (try 4) firefox-esr.git=firefox-esr/140.3.0-alt1
2025-09-28 3:08 [#395604] [test-only] FAILED firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
2025-10-02 6:43 ` [#395604] [test-only] FAILED (try 2) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
2025-10-03 16:17 ` [#395604] TESTED (try 3) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
@ 2025-10-03 17:24 ` Girar pender (pav)
2 siblings, 0 replies; 4+ messages in thread
From: Girar pender (pav) @ 2025-10-03 17:24 UTC (permalink / raw)
To: Pavel Vasenkov
Cc: sisyphus-incominger, girar-builder-sisyphus, Andrey Cherepanov
https://git.altlinux.org/tasks/archive/done/_386/395604/logs/events.4.1.log
https://packages.altlinux.org/tasks/395604
2025-Oct-03 17:17:06 :: task #395604 for sisyphus resumed by pav:
#100 removed
#200 removed
#300 build firefox-esr/140.3.0-alt1 from /people/pav/packages/firefox-esr.git fetched at 2025-Oct-03 15:06:06
2025-Oct-03 17:17:08 :: [i586] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-03 17:17:08 :: [x86_64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-03 17:17:08 :: [aarch64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build start
2025-Oct-03 17:17:31 :: [i586] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build OK (cached)
2025-Oct-03 17:17:34 :: [x86_64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build OK (cached)
2025-Oct-03 17:17:51 :: [aarch64] #300 firefox-esr.git firefox-esr/140.3.0-alt1: build OK (cached)
2025-Oct-03 17:18:29 :: #300: firefox-esr.git firefox-esr/140.3.0-alt1: build check OK
2025-Oct-03 17:18:30 :: build check OK
warning (#300): firefox-esr-config-privacy-140.3.0-alt1.x86_64.rpm should be .noarch.rpm
2025-Oct-03 17:20:19 :: noarch check OK
2025-Oct-03 17:20:21 :: plan: src +1 -1 =20710, aarch64 +3 -3 =36561, i586 +3 -3 =35065, x86_64 +3 -3 =37395
#300 firefox-esr 140.2.0-alt2 -> 140.3.0-alt1
Tue Sep 23 2025 Pavel Vasenkov <pav@altlinux> 140.3.0-alt1
- New ESR version.
- Security fixes:
+ CVE-2025-10527 Sandbox escape due to use-after-free in the Graphics: Canvas2D component
+ CVE-2025-10528 Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
+ CVE-2025-10529 Same-origin policy bypass in the Layout component
+ CVE-2025-10532 Incorrect boundary conditions in the JavaScript: GC component
+ CVE-2025-10533 Integer overflow in the SVG component
+ CVE-2025-10536 Information disclosure in the Networking: Cache component
+ CVE-2025-10537 Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
2025-Oct-03 17:20:21 :: firefox-esr: mentions vulnerabilities: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533 CVE-2025-10536 CVE-2025-10537
2025-Oct-03 17:21:02 :: patched apt indices
2025-Oct-03 17:21:11 :: created next repo
2025-Oct-03 17:21:20 :: duplicate provides check OK
2025-Oct-03 17:21:58 :: dependencies check OK
2025-Oct-03 17:22:30 :: [x86_64 i586 aarch64] ELF symbols check OK
i586: firefox-esr=140.3.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Oct-03 17:22:42 :: [i586] #300 firefox-esr: install check OK (cached)
x86_64: firefox-esr=140.3.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Oct-03 17:22:43 :: [x86_64] #300 firefox-esr: install check OK (cached)
2025-Oct-03 17:22:47 :: [i586] #300 firefox-esr-config-privacy: install check OK (cached)
2025-Oct-03 17:22:48 :: [x86_64] #300 firefox-esr-config-privacy: install check OK (cached)
aarch64: firefox-esr=140.3.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Oct-03 17:22:51 :: [aarch64] #300 firefox-esr: install check OK (cached)
2025-Oct-03 17:22:52 :: [i586] #300 firefox-esr-debuginfo: install check OK (cached)
2025-Oct-03 17:22:54 :: [x86_64] #300 firefox-esr-debuginfo: install check OK (cached)
2025-Oct-03 17:23:00 :: [aarch64] #300 firefox-esr-config-privacy: install check OK (cached)
2025-Oct-03 17:23:11 :: [aarch64] #300 firefox-esr-debuginfo: install check OK (cached)
2025-Oct-03 17:23:12 :: [x86_64-i586] plan: #0 +1 -1 =11927
2025-Oct-03 17:23:28 :: [x86_64-i586] generated apt indices
2025-Oct-03 17:23:30 :: [x86_64-i586] created next repo
2025-Oct-03 17:23:40 :: [x86_64-i586] dependencies check OK
2025-Oct-03 17:23:42 :: gears inheritance check OK
2025-Oct-03 17:23:42 :: srpm inheritance check OK
girar-check-perms: access to firefox-esr ALLOWED for pav: project leader
check-subtask-perms: #300: firefox-esr: allowed for pav
2025-Oct-03 17:23:43 :: acl check OK
2025-Oct-03 17:23:55 :: created contents_index files
2025-Oct-03 17:24:05 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2025-Oct-03 17:24:08 :: task #395604 for sisyphus TESTED
2025-Oct-03 17:24:09 :: task is ready for commit
2025-Oct-03 17:24:14 :: repo clone OK
2025-Oct-03 17:24:16 :: packages update OK
2025-Oct-03 17:24:23 :: [x86_64 i586 aarch64] update OK
2025-Oct-03 17:24:23 :: [x86_64-i586] update OK
2025-Oct-03 17:24:23 :: repo update OK
2025-Oct-03 17:24:37 :: repo save OK
2025-Oct-03 17:24:37 :: src index update OK
2025-Oct-03 17:24:40 :: updated /gears/f/firefox-esr.git branch `sisyphus'
2025-Oct-03 17:24:46 :: gears update OK
2025-Oct-03 17:24:46 :: task #395604 for sisyphus DONE
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2025-10-03 17:24 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-09-28 3:08 [#395604] [test-only] FAILED firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
2025-10-02 6:43 ` [#395604] [test-only] FAILED (try 2) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
2025-10-03 16:17 ` [#395604] TESTED (try 3) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar awaiter (pav)
2025-10-03 17:24 ` [#395604] DONE (try 4) firefox-esr.git=firefox-esr/140.3.0-alt1 Girar pender (pav)
ALT Linux Girar Builder robot reports
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \
sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com
public-inbox-index sisyphus-incominger
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git