[#408094] p9 EPERM (try 3) openvpn.git=2.6.19-alt1

["Girar awaiter (naf)" <girar-builder@altlinux.org>]

https://git.altlinux.org/tasks/408094/logs/events.3.1.log
https://packages.altlinux.org/tasks/408094

2026-Mar-10 07:32:32 :: task #408094 for p9 resumed by naf:
2026-Mar-10 07:32:32 :: message: Fixes: CVE-2025-13086 (and Windows-only CVE-2025-13751)
#100 build 2.6.19-alt1 from /people/naf/packages/openvpn.git fetched at 2026-Feb-13 06:21:14
2026-Mar-10 07:32:33 :: [armh] #100 openvpn.git 2.6.19-alt1: build start
2026-Mar-10 07:32:33 :: [x86_64] #100 openvpn.git 2.6.19-alt1: build start
2026-Mar-10 07:32:33 :: [i586] #100 openvpn.git 2.6.19-alt1: build start
2026-Mar-10 07:32:33 :: [aarch64] #100 openvpn.git 2.6.19-alt1: build start
2026-Mar-10 07:32:42 :: [i586] #100 openvpn.git 2.6.19-alt1: build OK (cached)
2026-Mar-10 07:32:42 :: [x86_64] #100 openvpn.git 2.6.19-alt1: build OK (cached)
2026-Mar-10 07:32:47 :: [aarch64] #100 openvpn.git 2.6.19-alt1: build OK (cached)
2026-Mar-10 07:32:53 :: [armh] #100 openvpn.git 2.6.19-alt1: build OK (cached)
2026-Mar-10 07:32:54 :: 100: build check OK (cached)
2026-Mar-10 07:32:55 :: build check OK
2026-Mar-10 07:33:17 :: #100: openvpn.git 2.6.19-alt1: version check OK
2026-Mar-10 07:33:17 :: build version check OK
2026-Mar-10 07:33:23 :: noarch check OK
2026-Mar-10 07:33:25 :: plan: src +1 -1 =18274, aarch64 +4 -4 =30679, armh +4 -4 =28320, i586 +4 -4 =32639, noarch +2 -2 =19113, x86_64 +4 -4 =33107
#100 openvpn 2.5.6-alt1 -> 2.6.19-alt1
 Thu Feb 12 2026 Nikolay A. Fetisov <naf@altlinux> 2.6.19-alt1
 - New version
 - Fixes:
    + CVE-2025-13751: Windows/interactive service erroneous exit on error
    + CVE-2025-13086: fix memcmp check for the HMAC 3-way handshake verification
    + Fix errors checks in auth plugin/script handling
    + Fix socket FDs leaking to child processes for incoming TCP connections
    + Repair client-side interaction on reconnect between DCO event handling
      and '--persist-tun'
 Wed Nov 05 2025 Nikolay A. Fetisov <naf@altlinux> 2.6.15-alt1
 [...]
2026-Mar-10 07:33:25 :: openvpn: closes bugs: 46933
2026-Mar-10 07:33:26 :: openvpn: fixes vulnerabilities: CVE-2025-13751 CVE-2025-13086 CVE-2025-2704 CVE-2024-5594 CVE-2024-28882 CVE-2024-4877 CVE-2023-46850 CVE-2023-46849
2026-Mar-10 07:33:26 :: openvpn: mentions vulnerabilities: CVE-2024-27459 CVE-2024-24974 CVE-2024-27903 CVE-2023-7235
2026-Mar-10 07:34:06 :: patched apt indices
2026-Mar-10 07:34:17 :: created next repo
2026-Mar-10 07:34:27 :: duplicate provides check OK
2026-Mar-10 07:35:10 :: dependencies check OK
2026-Mar-10 07:35:56 :: [x86_64 i586 aarch64 armh] ELF symbols check OK
	x86_64: openvpn=2.6.19-alt1 post-install unowned files:
 /var/lib/openvpn/dev/urandom
 /var/lib/openvpn/etc/host.conf
 /var/lib/openvpn/etc/hosts
 /var/lib/openvpn/etc/nsswitch.conf
 /var/lib/openvpn/etc/resolv.conf
 /var/lib/openvpn/etc/services
 /var/lib/openvpn/lib64/libnss_files.so.2
 /var/lib/openvpn/lib64/libresolv.so.2
2026-Mar-10 07:36:07 :: [x86_64] #100 openvpn: install check OK (cached)
	i586: openvpn=2.6.19-alt1 post-install unowned files:
 /var/lib/openvpn/dev/urandom
 /var/lib/openvpn/etc/host.conf
 /var/lib/openvpn/etc/hosts
 /var/lib/openvpn/etc/nsswitch.conf
 /var/lib/openvpn/etc/resolv.conf
 /var/lib/openvpn/etc/services
 /var/lib/openvpn/lib/libnss_files.so.2
 /var/lib/openvpn/lib/libresolv.so.2
2026-Mar-10 07:36:07 :: [i586] #100 openvpn: install check OK (cached)
2026-Mar-10 07:36:11 :: [x86_64] #100 openvpn-debuginfo: install check OK (cached)
2026-Mar-10 07:36:11 :: [i586] #100 openvpn-debuginfo: install check OK (cached)
2026-Mar-10 07:36:15 :: [x86_64] #100 openvpn-devel: install check OK (cached)
2026-Mar-10 07:36:15 :: [i586] #100 openvpn-devel: install check OK (cached)
2026-Mar-10 07:36:19 :: [x86_64] #100 openvpn-docs: install check OK (cached)
2026-Mar-10 07:36:19 :: [i586] #100 openvpn-docs: install check OK (cached)
2026-Mar-10 07:36:23 :: [i586] #100 openvpn-plugins: install check OK (cached)
2026-Mar-10 07:36:23 :: [x86_64] #100 openvpn-plugins: install check OK (cached)
2026-Mar-10 07:36:27 :: [i586] #100 openvpn-plugins-debuginfo: install check OK (cached)
2026-Mar-10 07:36:27 :: [x86_64] #100 openvpn-plugins-debuginfo: install check OK (cached)
2026-Mar-10 07:36:28 :: [x86_64-i586] plan: #0 +1 -1 =10835
2026-Mar-10 07:36:46 :: [x86_64-i586] generated apt indices
2026-Mar-10 07:36:47 :: [x86_64-i586] created next repo
2026-Mar-10 07:36:58 :: [x86_64-i586] dependencies check OK
2026-Mar-10 07:37:05 :: gears inheritance check OK
2026-Mar-10 07:37:06 :: srpm inheritance check OK
girar-check-perms: access to openvpn DENIED for naf: project `openvpn' is not listed in the acl file for repository `p9', and the policy for such projects in `p9' is to deny
check-subtask-perms: #100: openvpn: needs approvals from members of @maint and @tester groups
2026-Mar-10 07:37:12 :: acl check FAILED
2026-Mar-10 07:37:31 :: created contents_index files
2026-Mar-10 07:37:40 :: created hash files: aarch64 armh i586 noarch src x86_64-i586 x86_64
2026-Mar-10 07:37:43 :: task #408094 for p9 EPERM