From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 Date: Tue, 11 Aug 2026 10:48:01 +0000 From: "Girar awaiter (admsasha)" To: Alexander Danilov Subject: [#429170] p11 EPERM srpm=yarn-1.22.22-alt2.src.rpm Message-ID: Mail-Followup-To: Girar awaiter robot MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-girar-task-id: 429170 X-girar-task-owner: admsasha X-girar-task-repo: p11 X-girar-task-try: 1 X-girar-task-iter: 1 X-girar-task-status: EPERM X-girar-task-URL: https://git.altlinux.org/tasks/429170/ X-girar-task-log: logs/events.1.1.log X-girar-task-summary: [#429170] p11 EPERM srpm=yarn-1.22.22-alt2.src.rpm User-Agent: Mutt/1.10.1 (2018-07-13) Cc: sisyphus-incominger@lists.altlinux.org, girar-builder-p11@altlinux.org, girar-builder-p11@lists.altlinux.org X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Aug 2026 10:48:04 -0000 Archived-At: List-Archive: https://git.altlinux.org/tasks/429170/logs/events.1.1.log https://packages.altlinux.org/tasks/429170 subtask name aarch64 i586 x86_64 #100 yarn 1:07 40 39 2026-Aug-11 10:44:00 :: task #429170 for p11 started by admsasha: 2026-Aug-11 10:44:00 :: message: fix_CVE-2023-26136,CVE-2025-8262,CVE-2025-8263,CVE-2025-9308 #100 build yarn-1.22.22-alt2.src.rpm from sisyphus 2026-Aug-11 10:44:01 :: [aarch64] #100 yarn-1.22.22-alt2.src.rpm: build start 2026-Aug-11 10:44:01 :: [i586] #100 yarn-1.22.22-alt2.src.rpm: build start 2026-Aug-11 10:44:01 :: [x86_64] #100 yarn-1.22.22-alt2.src.rpm: build start 2026-Aug-11 10:44:40 :: [x86_64] #100 yarn-1.22.22-alt2.src.rpm: build OK 2026-Aug-11 10:44:41 :: [i586] #100 yarn-1.22.22-alt2.src.rpm: build OK 2026-Aug-11 10:45:08 :: [aarch64] #100 yarn-1.22.22-alt2.src.rpm: build OK 2026-Aug-11 10:45:13 :: 100: build check OK 2026-Aug-11 10:45:14 :: build check OK 2026-Aug-11 10:45:19 :: #100: yarn-1.22.22-alt2.src.rpm: version check OK 2026-Aug-11 10:45:20 :: build version check OK 2026-Aug-11 10:45:21 :: noarch check OK 2026-Aug-11 10:45:23 :: plan: src +1 -1 =20597, noarch +1 -1 =21460 #100 yarn 1.22.22-alt1 -> 1.22.22-alt2 Fri Jun 26 2026 Alexey Shabalin 1.22.22-alt2 - Rebuild the self-contained lib/cli.js bundle from source against a refreshed, security-patched dependency tree instead of shipping the upstream prebuilt bundle (devDependencies reduced, js-yaml bumped to 4.x and mkdirp pinned via prebundle patches, dependencies refreshed via `yarn install`+`yarn audit fix`). - The refreshed dependency tree also pulls newer, fixed versions of other bundled runtime modules; build-only dependencies are no longer shipped. - Fixes: + CVE-2025-8262 ReDoS in explodeHostedGitFragment (yarn hosted-git-resolver) + CVE-2025-9308 ReDoS in RequestManager.setOptions cafile parsing (yarn) [...] 2026-Aug-11 10:45:23 :: yarn: fixes vulnerabilities: CVE-2025-8262 CVE-2025-9308 CVE-2025-8263 CVE-2023-26136 2026-Aug-11 10:45:57 :: patched apt indices 2026-Aug-11 10:46:07 :: created next repo 2026-Aug-11 10:46:19 :: duplicate provides check OK 2026-Aug-11 10:47:01 :: dependencies check OK 2026-Aug-11 10:47:17 :: [i586] #100 yarn: install check OK 2026-Aug-11 10:47:17 :: [x86_64] #100 yarn: install check OK 2026-Aug-11 10:47:26 :: [aarch64] #100 yarn: install check OK 2026-Aug-11 10:47:27 :: gears inheritance check OK 2026-Aug-11 10:47:27 :: srpm inheritance check OK girar-check-perms: access to yarn DENIED for admsasha: project `yarn' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny check-subtask-perms: #100: yarn: needs approvals from members of @maint and @tester groups 2026-Aug-11 10:47:28 :: acl check FAILED 2026-Aug-11 10:47:51 :: created contents_index files 2026-Aug-11 10:47:58 :: created hash files: noarch src 2026-Aug-11 10:48:01 :: task #429170 for p11 EPERM