From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 Date: Fri, 10 Jul 2026 08:28:08 +0000 From: "Girar awaiter (lav)" To: Vitaly Lipatov Subject: [#424760] TESTED roundcube.git=1.6.17-alt1 Message-ID: Mail-Followup-To: Girar awaiter robot MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-girar-task-id: 424760 X-girar-task-owner: lav X-girar-task-repo: sisyphus X-girar-task-try: 1 X-girar-task-iter: 1 X-girar-task-status: TESTED X-girar-task-URL: https://git.altlinux.org/tasks/424760/ X-girar-task-log: logs/events.1.1.log X-girar-task-summary: [#424760] TESTED roundcube.git=1.6.17-alt1 User-Agent: Mutt/1.10.1 (2018-07-13) Cc: sisyphus-incominger@lists.altlinux.org, girar-builder-sisyphus@altlinux.org X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jul 2026 08:28:11 -0000 Archived-At: List-Archive: https://git.altlinux.org/tasks/424760/logs/events.1.1.log https://packages.altlinux.org/tasks/424760 subtask name aarch64 i586 x86_64 #100 roundcube 48 29 29 2026-Jul-10 08:23:50 :: test-only task #424760 for sisyphus started by lav: #100 build 1.6.17-alt1 from /people/lav/packages/roundcube.git fetched at 2026-Jul-10 08:23:49 2026-Jul-10 08:23:52 :: [aarch64] #100 roundcube.git 1.6.17-alt1: build start 2026-Jul-10 08:23:52 :: [i586] #100 roundcube.git 1.6.17-alt1: build start 2026-Jul-10 08:23:52 :: [x86_64] #100 roundcube.git 1.6.17-alt1: build start 2026-Jul-10 08:24:21 :: [x86_64] #100 roundcube.git 1.6.17-alt1: build OK 2026-Jul-10 08:24:21 :: [i586] #100 roundcube.git 1.6.17-alt1: build OK 2026-Jul-10 08:24:40 :: [aarch64] #100 roundcube.git 1.6.17-alt1: build OK 2026-Jul-10 08:24:44 :: 100: build check OK 2026-Jul-10 08:24:45 :: build check OK 2026-Jul-10 08:24:54 :: #100: roundcube.git 1.6.17-alt1: version check OK 2026-Jul-10 08:24:54 :: build version check OK 2026-Jul-10 08:24:58 :: noarch check OK 2026-Jul-10 08:25:00 :: plan: src +1 -1 =22429, noarch +2 -2 =23130 #100 roundcube 1.6.15-alt1 -> 1.6.17-alt1 Fri Jul 10 2026 Vitaly Lipatov 1.6.17-alt1 - new version 1.6.17 (with rpmrb script) - fixes vulnerabilities: + Fix stored XSS via unescaped attachment MIME type [CVE-2026-54432] + Fix zero-click stored XSS in plain-text rendering [CVE-2026-54433] + Fix various vulnerabilities in the password plugin + Fix SSRF bypass via specific local address URLs + Fix infinite loop and DoS via crafted TNEF (winmail.dat) 2026-Jul-10 08:25:00 :: roundcube: mentions vulnerabilities: CVE-2026-54432 CVE-2026-54433 2026-Jul-10 08:25:39 :: patched apt indices 2026-Jul-10 08:25:50 :: created next repo 2026-Jul-10 08:26:02 :: duplicate provides check OK 2026-Jul-10 08:26:48 :: dependencies check OK 2026-Jul-10 08:27:00 :: [i586] #100 roundcube: install check OK 2026-Jul-10 08:27:00 :: [x86_64] #100 roundcube: install check OK 2026-Jul-10 08:27:07 :: [i586] #100 roundcube-apache2: install check OK 2026-Jul-10 08:27:07 :: [x86_64] #100 roundcube-apache2: install check OK 2026-Jul-10 08:27:08 :: [aarch64] #100 roundcube: install check OK 2026-Jul-10 08:27:22 :: [aarch64] #100 roundcube-apache2: install check OK 2026-Jul-10 08:27:23 :: gears inheritance check OK 2026-Jul-10 08:27:23 :: srpm inheritance check OK girar-check-perms: access to roundcube ALLOWED for lav: project leader check-subtask-perms: #100: roundcube: allowed for lav 2026-Jul-10 08:27:23 :: acl check OK 2026-Jul-10 08:27:53 :: created contents_index files 2026-Jul-10 08:28:03 :: created hash files: noarch src 2026-Jul-10 08:28:08 :: task #424760 for sisyphus TESTED