* [#426330] TESTED nss.git=3.126-alt1
@ 2026-07-22 12:04 Girar awaiter (rauty)
2026-07-22 14:36 ` [#426330] [test-only] FAILED (try 2) nss.git=3.126-alt1 firefox.git=153.0-alt1 Girar awaiter (rauty)
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Girar awaiter (rauty) @ 2026-07-22 12:04 UTC (permalink / raw)
To: Ajrat Makhmutov
Cc: sisyphus-incominger, girar-builder-sisyphus, Alexey Gladkov
https://git.altlinux.org/tasks/426330/logs/events.1.1.log
https://packages.altlinux.org/tasks/426330
subtask name aarch64 i586 x86_64
#100 nss 20:59 21:09 20:07
2026-Jul-22 11:37:08 :: test-only task #426330 for sisyphus started by rauty:
#100 build 3.126-alt1 from /people/rauty/packages/nss.git fetched at 2026-Jul-22 11:37:04
2026-Jul-22 11:37:10 :: [x86_64] #100 nss.git 3.126-alt1: build start
2026-Jul-22 11:37:10 :: [i586] #100 nss.git 3.126-alt1: build start
2026-Jul-22 11:37:10 :: [aarch64] #100 nss.git 3.126-alt1: build start
2026-Jul-22 11:57:17 :: [x86_64] #100 nss.git 3.126-alt1: build OK
2026-Jul-22 11:58:09 :: [aarch64] #100 nss.git 3.126-alt1: build OK
2026-Jul-22 11:58:19 :: [i586] #100 nss.git 3.126-alt1: build OK
2026-Jul-22 11:58:29 :: 100: build check OK
2026-Jul-22 11:58:30 :: build check OK
2026-Jul-22 11:58:48 :: #100: nss.git 3.126-alt1: version check OK
2026-Jul-22 11:58:48 :: build version check OK
warning (#100): libnss-nssckbi-checkinstall-3.126-alt1.x86_64.rpm should be .noarch.rpm
2026-Jul-22 11:58:58 :: noarch check OK
2026-Jul-22 11:59:00 :: plan: src +1 -1 =22473, aarch64 +7 -7 =39870, i586 +7 -7 =37369, x86_64 +7 -7 =40950
#100 nss 3.124-alt1 -> 3.126-alt1
Wed Jul 22 2026 Ajrat Makhmutov <rauty@altlinux> 3.126-alt1
- New version.
+ Add CN=SECOM SMIME RSA Root CA 2024
+ Add CN=SECOM TLS ECC Root CA 2024
+ Add CN=SECOM TLS RSA Root CA 2024
+ Add CN=Telia EC Email Root CA v3
+ Add CN=Telia EC TLS Root CA v3
+ Add CN=Telia RSA Email Root CA v3
+ Add CN=Telia RSA TLS Root CA v3
+ Remove OU=ePKI Root Certification Authority
2026-Jul-22 11:59:55 :: patched apt indices
2026-Jul-22 12:00:07 :: created next repo
2026-Jul-22 12:00:20 :: duplicate provides check OK
2026-Jul-22 12:01:12 :: dependencies check OK
2026-Jul-22 12:01:59 :: [x86_64 i586 aarch64] ELF symbols check OK
2026-Jul-22 12:02:10 :: [i586] #100 libnss: install check OK
2026-Jul-22 12:02:11 :: [x86_64] #100 libnss: install check OK
2026-Jul-22 12:02:15 :: [i586] #100 libnss-debuginfo: install check OK
2026-Jul-22 12:02:16 :: [x86_64] #100 libnss-debuginfo: install check OK
2026-Jul-22 12:02:19 :: [i586] #100 libnss-devel: install check OK
2026-Jul-22 12:02:20 :: [aarch64] #100 libnss: install check OK
2026-Jul-22 12:02:21 :: [x86_64] #100 libnss-devel: install check OK
2026-Jul-22 12:02:26 :: [i586] #100 libnss-devel-static: install check OK
2026-Jul-22 12:02:28 :: [x86_64] #100 libnss-devel-static: install check OK
2026-Jul-22 12:02:31 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK
2026-Jul-22 12:02:31 :: [aarch64] #100 libnss-debuginfo: install check OK
2026-Jul-22 12:02:33 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK
2026-Jul-22 12:02:35 :: [i586] #100 nss-utils: install check OK
2026-Jul-22 12:02:37 :: [x86_64] #100 nss-utils: install check OK
2026-Jul-22 12:02:40 :: [i586] #100 nss-utils-debuginfo: install check OK
2026-Jul-22 12:02:42 :: [aarch64] #100 libnss-devel: install check OK
2026-Jul-22 12:02:43 :: [x86_64] #100 nss-utils-debuginfo: install check OK
2026-Jul-22 12:02:56 :: [aarch64] #100 libnss-devel-static: install check OK
2026-Jul-22 12:03:07 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK
2026-Jul-22 12:03:17 :: [aarch64] #100 nss-utils: install check OK
2026-Jul-22 12:03:30 :: [aarch64] #100 nss-utils-debuginfo: install check OK
2026-Jul-22 12:03:31 :: [x86_64-i586] plan: #3 +3 -3 =12615
2026-Jul-22 12:03:48 :: [x86_64-i586] arepo build OK
2026-Jul-22 12:04:10 :: [x86_64-i586] generated apt indices
2026-Jul-22 12:04:12 :: [x86_64-i586] created next repo
2026-Jul-22 12:04:26 :: [x86_64-i586] dependencies check OK
2026-Jul-22 12:04:27 :: gears inheritance check OK
2026-Jul-22 12:04:28 :: srpm inheritance check OK
girar-check-perms: access to nss ALLOWED for rauty: approved builder
check-subtask-perms: #100: nss: allowed for rauty
2026-Jul-22 12:04:28 :: acl check OK
2026-Jul-22 12:04:43 :: created contents_index files
2026-Jul-22 12:04:53 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2026-Jul-22 12:04:57 :: task #426330 for sisyphus TESTED
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#426330] [test-only] FAILED (try 2) nss.git=3.126-alt1 firefox.git=153.0-alt1
2026-07-22 12:04 [#426330] TESTED nss.git=3.126-alt1 Girar awaiter (rauty)
@ 2026-07-22 14:36 ` Girar awaiter (rauty)
2026-07-23 11:52 ` [#426330] TESTED (try 3) " Girar awaiter (rauty)
2026-07-23 16:59 ` [#426330] DONE (try 4) " Girar pender (rauty)
2 siblings, 0 replies; 4+ messages in thread
From: Girar awaiter (rauty) @ 2026-07-22 14:36 UTC (permalink / raw)
To: Ajrat Makhmutov; +Cc: sisyphus-incominger, girar-builder-sisyphus
https://git.altlinux.org/tasks/426330/logs/events.2.1.log
https://packages.altlinux.org/tasks/426330
subtask name aarch64 i586 x86_64
#100 nss 22:59 20:37 20:11
#200 firefox failed - failed
2026-Jul-22 14:07:49 :: test-only task #426330 for sisyphus resumed by rauty:
#100 build 3.126-alt1 from /people/rauty/packages/nss.git fetched at 2026-Jul-22 11:37:04
#200 build 153.0-alt1 from /people/rauty/packages/firefox.git fetched at 2026-Jul-22 12:39:51
2026-Jul-22 14:07:50 :: created build repo
2026-Jul-22 14:07:51 :: [i586] #100 nss.git 3.126-alt1: build start
2026-Jul-22 14:07:51 :: [x86_64] #100 nss.git 3.126-alt1: build start
2026-Jul-22 14:07:51 :: [aarch64] #100 nss.git 3.126-alt1: build start
2026-Jul-22 14:28:02 :: [x86_64] #100 nss.git 3.126-alt1: build OK
2026-Jul-22 14:28:02 :: [x86_64] #200 firefox.git 153.0-alt1: build start
2026-Jul-22 14:28:28 :: [i586] #100 nss.git 3.126-alt1: build OK
2026-Jul-22 14:28:29 :: [i586] #200 firefox.git 153.0-alt1: build start
2026-Jul-22 14:28:45 :: [i586] #200 firefox.git 153.0-alt1: build SKIPPED
2026-Jul-22 14:30:50 :: [aarch64] #100 nss.git 3.126-alt1: build OK
2026-Jul-22 14:30:50 :: [aarch64] #200 firefox.git 153.0-alt1: build start
[x86_64] 0:02.64 DEBUG: /usr/bin/cbindgen has version 0.29.2
[x86_64] 0:02.64 E ERROR: cbindgen version 0.29.2 is too old. At least version 0.29.4 is required.
[x86_64] 0:02.64 Please update using 'cargo install cbindgen --force' or running
2026-Jul-22 14:31:09 :: [x86_64] firefox.git 153.0-alt1: remote: build failed
2026-Jul-22 14:31:09 :: [x86_64] #200 firefox.git 153.0-alt1: build FAILED
2026-Jul-22 14:31:09 :: [x86_64] requesting cancellation of task processing
[aarch64] 0:07.40 DEBUG: /usr/bin/cbindgen has version 0.29.2
[aarch64] 0:07.40 E ERROR: cbindgen version 0.29.2 is too old. At least version 0.29.4 is required.
[aarch64] 0:07.40 Please update using 'cargo install cbindgen --force' or running
2026-Jul-22 14:36:48 :: [aarch64] firefox.git 153.0-alt1: remote: build failed
2026-Jul-22 14:36:48 :: [aarch64] #200 firefox.git 153.0-alt1: build FAILED
2026-Jul-22 14:31:09 :: [x86_64] build FAILED
2026-Jul-22 14:36:48 :: [aarch64] build FAILED
2026-Jul-22 14:36:48 :: task #426330 for sisyphus FAILED
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#426330] TESTED (try 3) nss.git=3.126-alt1 firefox.git=153.0-alt1
2026-07-22 12:04 [#426330] TESTED nss.git=3.126-alt1 Girar awaiter (rauty)
2026-07-22 14:36 ` [#426330] [test-only] FAILED (try 2) nss.git=3.126-alt1 firefox.git=153.0-alt1 Girar awaiter (rauty)
@ 2026-07-23 11:52 ` Girar awaiter (rauty)
2026-07-23 16:59 ` [#426330] DONE (try 4) " Girar pender (rauty)
2 siblings, 0 replies; 4+ messages in thread
From: Girar awaiter (rauty) @ 2026-07-23 11:52 UTC (permalink / raw)
To: Ajrat Makhmutov
Cc: sisyphus-incominger, girar-builder-sisyphus, Sergey Bolshakov,
Alexey Gladkov
https://git.altlinux.org/tasks/426330/logs/events.3.1.log
https://packages.altlinux.org/tasks/426330
subtask name aarch64 i586 x86_64
#100 nss 20:33 20:26 20:03
#200 firefox 40:25 - 22:50
2026-Jul-23 10:39:44 :: test-only task #426330 for sisyphus resumed by rauty:
#100 build 3.126-alt1 from /people/rauty/packages/nss.git fetched at 2026-Jul-22 11:37:04
#200 build 153.0-alt1 from /people/rauty/packages/firefox.git fetched at 2026-Jul-22 12:39:51
2026-Jul-23 10:39:45 :: created build repo
2026-Jul-23 10:39:46 :: [x86_64] #100 nss.git 3.126-alt1: build start
2026-Jul-23 10:39:46 :: [aarch64] #100 nss.git 3.126-alt1: build start
2026-Jul-23 10:39:46 :: [i586] #100 nss.git 3.126-alt1: build start
2026-Jul-23 10:59:49 :: [x86_64] #100 nss.git 3.126-alt1: build OK
2026-Jul-23 10:59:49 :: [x86_64] #200 firefox.git 153.0-alt1: build start
2026-Jul-23 11:00:12 :: [i586] #100 nss.git 3.126-alt1: build OK
2026-Jul-23 11:00:12 :: [i586] #200 firefox.git 153.0-alt1: build start
2026-Jul-23 11:00:19 :: [aarch64] #100 nss.git 3.126-alt1: build OK
2026-Jul-23 11:00:20 :: [aarch64] #200 firefox.git 153.0-alt1: build start
2026-Jul-23 11:00:29 :: [i586] #200 firefox.git 153.0-alt1: build SKIPPED
2026-Jul-23 11:22:39 :: [x86_64] #200 firefox.git 153.0-alt1: build OK
2026-Jul-23 11:40:45 :: [aarch64] #200 firefox.git 153.0-alt1: build OK
2026-Jul-23 11:40:54 :: 100: build check OK
2026-Jul-23 11:41:22 :: 200: build check OK
2026-Jul-23 11:41:23 :: build check OK
2026-Jul-23 11:41:43 :: #100: nss.git 3.126-alt1: version check OK
2026-Jul-23 11:41:48 :: #200: firefox.git 153.0-alt1: version check OK
2026-Jul-23 11:41:48 :: build version check OK
warning (#100): libnss-nssckbi-checkinstall-3.126-alt1.x86_64.rpm should be .noarch.rpm
2026-Jul-23 11:44:06 :: noarch check OK
2026-Jul-23 11:44:08 :: plan: src +2 -2 =22519, aarch64 +10 -10 =39879, i586 +7 -7 =37377, x86_64 +10 -10 =40959
#200 firefox 152.0.6-alt1 -> 153.0-alt1
Wed Jul 22 2026 Ajrat Makhmutov <rauty@altlinux> 153.0-alt1
- New version.
- Build with llvm21.1 (upstream requires clang >= 19.0).
- Raise minimal rust/cargo version to 1.90.0.
- Fixes:
+ CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
+ CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component
+ CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
+ CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component
+ CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component
[...]
#100 nss 3.124-alt1 -> 3.126-alt1
Wed Jul 22 2026 Ajrat Makhmutov <rauty@altlinux> 3.126-alt1
- New version.
+ Add CN=SECOM SMIME RSA Root CA 2024
+ Add CN=SECOM TLS ECC Root CA 2024
+ Add CN=SECOM TLS RSA Root CA 2024
+ Add CN=Telia EC Email Root CA v3
+ Add CN=Telia EC TLS Root CA v3
+ Add CN=Telia RSA Email Root CA v3
+ Add CN=Telia RSA TLS Root CA v3
+ Remove OU=ePKI Root Certification Authority
2026-Jul-23 11:44:09 :: firefox: fixes vulnerabilities: CVE-2026-16349 CVE-2026-16350 CVE-2026-16362 CVE-2026-16351 CVE-2026-16352 CVE-2026-16363 CVE-2026-16364 CVE-2026-16365 CVE-2026-16366 CVE-2026-16353 CVE-2026-16354 CVE-2026-16367 CVE-2026-16368 CVE-2026-16369 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16370 CVE-2026-16371 CVE-2026-16372 CVE-2026-16373 CVE-2026-16374 CVE-2026-16375 CVE-2026-16376 CVE-2026-16377 CVE-2026-16378 CVE-2026-16379 CVE-2026-16358 CVE-2026-16380 CVE-2026-16381 CVE-2026-16382 CVE-2026-16383 CVE-2026-16384 CVE-2026-16385 CVE-2026-16386 CVE-2026-16387 CVE-2026-16388 CVE-2026-16389 CVE-2026-16390 CVE-2026-16391 CVE-2026-16392 CVE-2026-16393 CVE-2026-16359 CVE-2026-16394 CVE-2026-16395 CVE-2026-16396 CVE-2026-16397 CVE-2026-16398 CVE-2026-16399 CVE-2026-16400 CVE-2026-16401 CVE-2026-16402 CVE-2026-16403 CVE-2026-16404 CVE-2026-16405 CVE-2026-16406 CVE-2026-16407 CVE-2026-16408 CVE-2026-16409 CVE-2026-16410 CVE-2026-16411 CVE-2026-16412 CVE-2026-16360
2026-Jul-23 11:45:06 :: patched apt indices
2026-Jul-23 11:45:16 :: created next repo
2026-Jul-23 11:45:27 :: duplicate provides check OK
2026-Jul-23 11:46:11 :: dependencies check OK
2026-Jul-23 11:46:58 :: [x86_64 i586 aarch64] ELF symbols check OK
2026-Jul-23 11:47:08 :: [i586] #100 libnss: install check OK
2026-Jul-23 11:47:13 :: [i586] #100 libnss-debuginfo: install check OK
x86_64: firefox=153.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2026-Jul-23 11:47:18 :: [x86_64] #200 firefox: install check OK
2026-Jul-23 11:47:18 :: [i586] #100 libnss-devel: install check OK
2026-Jul-23 11:47:25 :: [i586] #100 libnss-devel-static: install check OK
2026-Jul-23 11:47:30 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK
2026-Jul-23 11:47:30 :: [x86_64] #200 firefox-config-privacy: install check OK
2026-Jul-23 11:47:34 :: [i586] #100 nss-utils: install check OK
aarch64: firefox=153.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2026-Jul-23 11:47:38 :: [aarch64] #200 firefox: install check OK
2026-Jul-23 11:47:40 :: [i586] #100 nss-utils-debuginfo: install check OK
2026-Jul-23 11:48:04 :: [aarch64] #200 firefox-config-privacy: install check OK
2026-Jul-23 11:48:12 :: [x86_64] #200 firefox-debuginfo: install check OK
2026-Jul-23 11:48:16 :: [x86_64] #100 libnss: install check OK
2026-Jul-23 11:48:22 :: [x86_64] #100 libnss-debuginfo: install check OK
2026-Jul-23 11:48:27 :: [x86_64] #100 libnss-devel: install check OK
2026-Jul-23 11:48:34 :: [x86_64] #100 libnss-devel-static: install check OK
2026-Jul-23 11:48:38 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK
2026-Jul-23 11:48:43 :: [x86_64] #100 nss-utils: install check OK
2026-Jul-23 11:48:48 :: [x86_64] #100 nss-utils-debuginfo: install check OK
2026-Jul-23 11:49:11 :: [aarch64] #200 firefox-debuginfo: install check OK
2026-Jul-23 11:49:25 :: [aarch64] #100 libnss: install check OK
2026-Jul-23 11:49:40 :: [aarch64] #100 libnss-debuginfo: install check OK
2026-Jul-23 11:49:54 :: [aarch64] #100 libnss-devel: install check OK
2026-Jul-23 11:50:11 :: [aarch64] #100 libnss-devel-static: install check OK
2026-Jul-23 11:50:25 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK
2026-Jul-23 11:50:39 :: [aarch64] #100 nss-utils: install check OK
2026-Jul-23 11:50:55 :: [aarch64] #100 nss-utils-debuginfo: install check OK
2026-Jul-23 11:50:56 :: [x86_64-i586] plan: #3 +3 -3 =12617
2026-Jul-23 11:51:20 :: [x86_64-i586] arepo build OK
2026-Jul-23 11:51:40 :: [x86_64-i586] generated apt indices
2026-Jul-23 11:51:42 :: [x86_64-i586] created next repo
2026-Jul-23 11:51:57 :: [x86_64-i586] dependencies check OK
2026-Jul-23 11:52:00 :: gears inheritance check OK
2026-Jul-23 11:52:01 :: srpm inheritance check OK
girar-check-perms: access to nss ALLOWED for rauty: approved builder
check-subtask-perms: #100: nss: allowed for rauty
girar-check-perms: access to firefox ALLOWED for rauty: approved builder
check-subtask-perms: #200: firefox: allowed for rauty
2026-Jul-23 11:52:02 :: acl check OK
2026-Jul-23 11:52:16 :: created contents_index files
2026-Jul-23 11:52:29 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2026-Jul-23 11:52:32 :: task #426330 for sisyphus TESTED
^ permalink raw reply [flat|nested] 4+ messages in thread
* [#426330] DONE (try 4) nss.git=3.126-alt1 firefox.git=153.0-alt1
2026-07-22 12:04 [#426330] TESTED nss.git=3.126-alt1 Girar awaiter (rauty)
2026-07-22 14:36 ` [#426330] [test-only] FAILED (try 2) nss.git=3.126-alt1 firefox.git=153.0-alt1 Girar awaiter (rauty)
2026-07-23 11:52 ` [#426330] TESTED (try 3) " Girar awaiter (rauty)
@ 2026-07-23 16:59 ` Girar pender (rauty)
2 siblings, 0 replies; 4+ messages in thread
From: Girar pender (rauty) @ 2026-07-23 16:59 UTC (permalink / raw)
To: Ajrat Makhmutov
Cc: sisyphus-incominger, girar-builder-sisyphus, Sergey Bolshakov,
Alexey Gladkov
https://git.altlinux.org/tasks/archive/done/_416/426330/logs/events.4.3.log
https://packages.altlinux.org/tasks/426330
subtask name aarch64 i586 x86_64
#200 firefox 39:33 - 23:15
2026-Jul-23 16:49:03 :: task #426330 for sisyphus resumed by rauty:
#100 build 3.126-alt1 from /people/rauty/packages/nss.git fetched at 2026-Jul-22 11:37:04
#200 build 153.0-alt1 from /people/rauty/packages/firefox.git fetched at 2026-Jul-22 12:39:51
2026-Jul-23 16:49:04 :: created build repo
2026-Jul-23 16:49:05 :: [i586] #100 nss.git 3.126-alt1: build start
2026-Jul-23 16:49:05 :: [x86_64] #100 nss.git 3.126-alt1: build start
2026-Jul-23 16:49:05 :: [aarch64] #100 nss.git 3.126-alt1: build start
2026-Jul-23 16:49:17 :: [i586] #100 nss.git 3.126-alt1: build OK (cached)
2026-Jul-23 16:49:18 :: [i586] #200 firefox.git 153.0-alt1: build start
2026-Jul-23 16:49:19 :: [x86_64] #100 nss.git 3.126-alt1: build OK (cached)
2026-Jul-23 16:49:20 :: [x86_64] #200 firefox.git 153.0-alt1: build start
2026-Jul-23 16:49:34 :: [aarch64] #100 nss.git 3.126-alt1: build OK (cached)
2026-Jul-23 16:49:34 :: [aarch64] #200 firefox.git 153.0-alt1: build start
2026-Jul-23 16:49:34 :: [i586] #200 firefox.git 153.0-alt1: build SKIPPED
2026-Jul-23 16:49:44 :: [x86_64] #200 firefox.git 153.0-alt1: build OK (cached)
2026-Jul-23 16:50:24 :: [aarch64] #200 firefox.git 153.0-alt1: build OK (cached)
2026-Jul-23 16:50:24 :: 100: build check OK (cached)
2026-Jul-23 16:50:24 :: 200: build check OK (cached)
2026-Jul-23 16:50:25 :: build check OK
2026-Jul-23 16:50:43 :: #100: nss.git 3.126-alt1: version check OK
2026-Jul-23 16:50:48 :: #200: firefox.git 153.0-alt1: version check OK
2026-Jul-23 16:50:49 :: build version check OK
warning (#100): libnss-nssckbi-checkinstall-3.126-alt1.x86_64.rpm should be .noarch.rpm
2026-Jul-23 16:52:50 :: noarch check OK
2026-Jul-23 16:52:52 :: plan: src +2 -2 =22520, aarch64 +10 -10 =39877, i586 +7 -7 =37373, x86_64 +10 -10 =40957
#200 firefox 152.0.6-alt1 -> 153.0-alt1
Wed Jul 22 2026 Ajrat Makhmutov <rauty@altlinux> 153.0-alt1
- New version.
- Build with llvm21.1 (upstream requires clang >= 19.0).
- Raise minimal rust/cargo version to 1.90.0.
- Fixes:
+ CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
+ CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component
+ CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
+ CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component
+ CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component
[...]
#100 nss 3.124-alt1 -> 3.126-alt1
Wed Jul 22 2026 Ajrat Makhmutov <rauty@altlinux> 3.126-alt1
- New version.
+ Add CN=SECOM SMIME RSA Root CA 2024
+ Add CN=SECOM TLS ECC Root CA 2024
+ Add CN=SECOM TLS RSA Root CA 2024
+ Add CN=Telia EC Email Root CA v3
+ Add CN=Telia EC TLS Root CA v3
+ Add CN=Telia RSA Email Root CA v3
+ Add CN=Telia RSA TLS Root CA v3
+ Remove OU=ePKI Root Certification Authority
2026-Jul-23 16:52:52 :: firefox: fixes vulnerabilities: CVE-2026-16349 CVE-2026-16350 CVE-2026-16362 CVE-2026-16351 CVE-2026-16352 CVE-2026-16363 CVE-2026-16364 CVE-2026-16365 CVE-2026-16366 CVE-2026-16353 CVE-2026-16354 CVE-2026-16367 CVE-2026-16368 CVE-2026-16369 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16370 CVE-2026-16371 CVE-2026-16372 CVE-2026-16373 CVE-2026-16374 CVE-2026-16375 CVE-2026-16376 CVE-2026-16377 CVE-2026-16378 CVE-2026-16379 CVE-2026-16358 CVE-2026-16380 CVE-2026-16381 CVE-2026-16382 CVE-2026-16383 CVE-2026-16384 CVE-2026-16385 CVE-2026-16386 CVE-2026-16387 CVE-2026-16388 CVE-2026-16389 CVE-2026-16390 CVE-2026-16391 CVE-2026-16392 CVE-2026-16393 CVE-2026-16359 CVE-2026-16394 CVE-2026-16395 CVE-2026-16396 CVE-2026-16397 CVE-2026-16398 CVE-2026-16399 CVE-2026-16400 CVE-2026-16401 CVE-2026-16402 CVE-2026-16403 CVE-2026-16404 CVE-2026-16405 CVE-2026-16406 CVE-2026-16407 CVE-2026-16408 CVE-2026-16409 CVE-2026-16410 CVE-2026-16411 CVE-2026-16412 CVE-2026-16360
2026-Jul-23 16:53:47 :: patched apt indices
2026-Jul-23 16:53:57 :: created next repo
2026-Jul-23 16:54:08 :: duplicate provides check OK
2026-Jul-23 16:54:51 :: dependencies check OK
2026-Jul-23 16:54:52 :: [i586] no need to repeat ELF symbols check
2026-Jul-23 16:55:34 :: [x86_64 i586 aarch64] ELF symbols check OK
2026-Jul-23 16:55:43 :: [i586] #100 libnss: install check OK (cached)
x86_64: firefox=153.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2026-Jul-23 16:55:45 :: [x86_64] #200 firefox: install check OK (cached)
2026-Jul-23 16:55:46 :: [i586] #100 libnss-debuginfo: install check OK (cached)
2026-Jul-23 16:55:48 :: [x86_64] #200 firefox-config-privacy: install check OK (cached)
2026-Jul-23 16:55:48 :: [i586] #100 libnss-devel: install check OK (cached)
2026-Jul-23 16:55:51 :: [i586] #100 libnss-devel-static: install check OK (cached)
aarch64: firefox=153.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2026-Jul-23 16:55:53 :: [aarch64] #200 firefox: install check OK (cached)
2026-Jul-23 16:55:53 :: [x86_64] #200 firefox-debuginfo: install check OK (cached)
2026-Jul-23 16:55:53 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2026-Jul-23 16:55:55 :: [x86_64] #100 libnss: install check OK (cached)
2026-Jul-23 16:55:56 :: [i586] #100 nss-utils: install check OK (cached)
2026-Jul-23 16:55:58 :: [x86_64] #100 libnss-debuginfo: install check OK (cached)
2026-Jul-23 16:55:58 :: [i586] #100 nss-utils-debuginfo: install check OK (cached)
2026-Jul-23 16:55:59 :: [aarch64] #200 firefox-config-privacy: install check OK (cached)
2026-Jul-23 16:56:01 :: [x86_64] #100 libnss-devel: install check OK (cached)
2026-Jul-23 16:56:04 :: [x86_64] #100 libnss-devel-static: install check OK (cached)
2026-Jul-23 16:56:06 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2026-Jul-23 16:56:09 :: [x86_64] #100 nss-utils: install check OK (cached)
2026-Jul-23 16:56:09 :: [aarch64] #200 firefox-debuginfo: install check OK (cached)
2026-Jul-23 16:56:12 :: [x86_64] #100 nss-utils-debuginfo: install check OK (cached)
2026-Jul-23 16:56:15 :: [aarch64] #100 libnss: install check OK (cached)
2026-Jul-23 16:56:21 :: [aarch64] #100 libnss-debuginfo: install check OK (cached)
2026-Jul-23 16:56:27 :: [aarch64] #100 libnss-devel: install check OK (cached)
2026-Jul-23 16:56:32 :: [aarch64] #100 libnss-devel-static: install check OK (cached)
2026-Jul-23 16:56:38 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2026-Jul-23 16:56:43 :: [aarch64] #100 nss-utils: install check OK (cached)
2026-Jul-23 16:56:49 :: [aarch64] #100 nss-utils-debuginfo: install check OK (cached)
2026-Jul-23 16:56:51 :: [x86_64-i586] plan: #0 +3 -3 =12616
2026-Jul-23 16:57:10 :: [x86_64-i586] generated apt indices
2026-Jul-23 16:57:12 :: [x86_64-i586] created next repo
2026-Jul-23 16:57:26 :: [x86_64-i586] dependencies check OK
2026-Jul-23 16:57:29 :: gears inheritance check OK
2026-Jul-23 16:57:29 :: srpm inheritance check OK
girar-check-perms: access to nss ALLOWED for rauty: approved builder
check-subtask-perms: #100: nss: allowed for rauty
girar-check-perms: access to firefox ALLOWED for rauty: approved builder
check-subtask-perms: #200: firefox: allowed for rauty
2026-Jul-23 16:57:29 :: acl check OK
2026-Jul-23 16:57:44 :: created contents_index files
2026-Jul-23 16:57:58 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2026-Jul-23 16:58:01 :: task #426330 for sisyphus TESTED
2026-Jul-23 16:58:02 :: task is ready for commit
2026-Jul-23 16:58:08 :: repo clone OK
2026-Jul-23 16:58:10 :: packages update OK
2026-Jul-23 16:58:20 :: [x86_64 i586 aarch64] update OK
2026-Jul-23 16:58:21 :: [x86_64-i586] update OK
2026-Jul-23 16:58:21 :: repo update OK
2026-Jul-23 16:58:36 :: repo save OK
2026-Jul-23 16:58:37 :: src index update OK
2026-Jul-23 16:59:21 :: updated /gears/f/firefox.git branch `sisyphus'
2026-Jul-23 16:59:22 :: updated /gears/n/nss.git branch `sisyphus'
2026-Jul-23 16:59:34 :: gears update OK
2026-Jul-23 16:59:34 :: task #426330 for sisyphus DONE
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-07-23 16:59 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-22 12:04 [#426330] TESTED nss.git=3.126-alt1 Girar awaiter (rauty)
2026-07-22 14:36 ` [#426330] [test-only] FAILED (try 2) nss.git=3.126-alt1 firefox.git=153.0-alt1 Girar awaiter (rauty)
2026-07-23 11:52 ` [#426330] TESTED (try 3) " Girar awaiter (rauty)
2026-07-23 16:59 ` [#426330] DONE (try 4) " Girar pender (rauty)
ALT Linux Girar Builder robot reports
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \
sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com
public-inbox-index sisyphus-incominger
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git