* [#429320] TESTED roundcube.git=1.7.3-alt1
@ 2026-08-12 22:47 Girar awaiter (lav)
2026-08-14 0:10 ` [#429320] DONE (try 2) roundcube.git=1.7.3-alt1 Girar pender (lav)
0 siblings, 1 reply; 2+ messages in thread
From: Girar awaiter (lav) @ 2026-08-12 22:47 UTC (permalink / raw)
To: Vitaly Lipatov; +Cc: sisyphus-incominger, girar-builder-sisyphus
https://git.altlinux.org/tasks/429320/logs/events.1.1.log
https://packages.altlinux.org/tasks/429320
subtask name aarch64 i586 x86_64
#100 roundcube 53 31 29
2026-Aug-12 22:43:29 :: test-only task #429320 for sisyphus started by lav:
#100 build 1.7.3-alt1 from /people/lav/packages/roundcube.git fetched at 2026-Aug-12 22:43:27
2026-Aug-12 22:43:31 :: [i586] #100 roundcube.git 1.7.3-alt1: build start
2026-Aug-12 22:43:31 :: [aarch64] #100 roundcube.git 1.7.3-alt1: build start
2026-Aug-12 22:43:31 :: [x86_64] #100 roundcube.git 1.7.3-alt1: build start
2026-Aug-12 22:44:00 :: [x86_64] #100 roundcube.git 1.7.3-alt1: build OK
2026-Aug-12 22:44:02 :: [i586] #100 roundcube.git 1.7.3-alt1: build OK
2026-Aug-12 22:44:24 :: [aarch64] #100 roundcube.git 1.7.3-alt1: build OK
2026-Aug-12 22:44:30 :: 100: build check OK
2026-Aug-12 22:44:31 :: build check OK
2026-Aug-12 22:44:39 :: #100: roundcube.git 1.7.3-alt1: version check OK
2026-Aug-12 22:44:40 :: build version check OK
2026-Aug-12 22:44:44 :: noarch check OK
2026-Aug-12 22:44:46 :: plan: src +1 -1 =22545, noarch +2 -2 =23426
#100 roundcube 1.7.2-alt1 -> 1.7.3-alt1
Tue Aug 11 2026 Vitaly Lipatov <lav@altlinux.ru> 1.7.3-alt1
- new version (1.7.3) via gear-uupdate
- fixes vulnerabilities:
+ Fix SSRF bypass via specific local address URLs (100.64.0.0/10, fe80::/10)
+ Fix SSRF filter bypass via nip.io/sslip.io hostnames evading is_local_url()
+ Fix remote content blocking bypass via unclosed url() in FuncIRI attribute
+ Fix LDAP filter injection via unescaped %u/%fu/%d substitution in search_filter
+ Fix arbitrary Sieve script injection via filter rule name bypassing managesieve_disabled_actions
+ Fix RCE via cmd_learn driver of markasjunk plugin
+ Fix IMAP command injection via mail search and LITERAL+ byte-count desynchronization
[...]
2026-Aug-12 22:45:19 :: patched apt indices
2026-Aug-12 22:45:30 :: created next repo
2026-Aug-12 22:45:41 :: duplicate provides check OK
2026-Aug-12 22:46:25 :: dependencies check OK
2026-Aug-12 22:46:37 :: [i586] #100 roundcube: install check OK
2026-Aug-12 22:46:37 :: [x86_64] #100 roundcube: install check OK
2026-Aug-12 22:46:44 :: [i586] #100 roundcube-apache2: install check OK
2026-Aug-12 22:46:44 :: [x86_64] #100 roundcube-apache2: install check OK
2026-Aug-12 22:46:48 :: [aarch64] #100 roundcube: install check OK
2026-Aug-12 22:47:03 :: [aarch64] #100 roundcube-apache2: install check OK
2026-Aug-12 22:47:05 :: gears inheritance check OK
2026-Aug-12 22:47:05 :: srpm inheritance check OK
girar-check-perms: access to roundcube ALLOWED for lav: project leader
check-subtask-perms: #100: roundcube: allowed for lav
2026-Aug-12 22:47:05 :: acl check OK
2026-Aug-12 22:47:31 :: created contents_index files
2026-Aug-12 22:47:38 :: created hash files: noarch src
2026-Aug-12 22:47:42 :: task #429320 for sisyphus TESTED
^ permalink raw reply [flat|nested] 2+ messages in thread
* [#429320] DONE (try 2) roundcube.git=1.7.3-alt1
2026-08-12 22:47 [#429320] TESTED roundcube.git=1.7.3-alt1 Girar awaiter (lav)
@ 2026-08-14 0:10 ` Girar pender (lav)
0 siblings, 0 replies; 2+ messages in thread
From: Girar pender (lav) @ 2026-08-14 0:10 UTC (permalink / raw)
To: Vitaly Lipatov; +Cc: sisyphus-incominger, girar-builder-sisyphus
https://git.altlinux.org/tasks/archive/done/_419/429320/logs/events.2.3.log
https://packages.altlinux.org/tasks/429320
subtask name aarch64 i586 x86_64
#100 roundcube 54 32 29
2026-Aug-14 00:06:55 :: task #429320 for sisyphus resumed by lav:
#100 build 1.7.3-alt1 from /people/lav/packages/roundcube.git fetched at 2026-Aug-12 22:43:27
2026-Aug-14 00:06:57 :: [i586] #100 roundcube.git 1.7.3-alt1: build start
2026-Aug-14 00:06:57 :: [x86_64] #100 roundcube.git 1.7.3-alt1: build start
2026-Aug-14 00:06:57 :: [aarch64] #100 roundcube.git 1.7.3-alt1: build start
2026-Aug-14 00:07:07 :: [i586] #100 roundcube.git 1.7.3-alt1: build OK (cached)
2026-Aug-14 00:07:11 :: [x86_64] #100 roundcube.git 1.7.3-alt1: build OK (cached)
2026-Aug-14 00:07:14 :: [aarch64] #100 roundcube.git 1.7.3-alt1: build OK (cached)
2026-Aug-14 00:07:15 :: 100: build check OK (cached)
2026-Aug-14 00:07:16 :: build check OK
2026-Aug-14 00:07:25 :: #100: roundcube.git 1.7.3-alt1: version check OK
2026-Aug-14 00:07:25 :: build version check OK
2026-Aug-14 00:07:30 :: noarch check OK
2026-Aug-14 00:07:31 :: plan: src +1 -1 =22574, noarch +2 -2 =23449
#100 roundcube 1.7.2-alt1 -> 1.7.3-alt1
Tue Aug 11 2026 Vitaly Lipatov <lav@altlinux.ru> 1.7.3-alt1
- new version (1.7.3) via gear-uupdate
- fixes vulnerabilities:
+ Fix SSRF bypass via specific local address URLs (100.64.0.0/10, fe80::/10)
+ Fix SSRF filter bypass via nip.io/sslip.io hostnames evading is_local_url()
+ Fix remote content blocking bypass via unclosed url() in FuncIRI attribute
+ Fix LDAP filter injection via unescaped %u/%fu/%d substitution in search_filter
+ Fix arbitrary Sieve script injection via filter rule name bypassing managesieve_disabled_actions
+ Fix RCE via cmd_learn driver of markasjunk plugin
+ Fix IMAP command injection via mail search and LITERAL+ byte-count desynchronization
[...]
2026-Aug-14 00:08:08 :: patched apt indices
2026-Aug-14 00:08:19 :: created next repo
2026-Aug-14 00:08:30 :: duplicate provides check OK
2026-Aug-14 00:09:16 :: dependencies check OK
2026-Aug-14 00:09:28 :: [i586] #100 roundcube: install check OK (cached)
2026-Aug-14 00:09:31 :: [x86_64] #100 roundcube: install check OK (cached)
2026-Aug-14 00:09:32 :: [i586] #100 roundcube-apache2: install check OK (cached)
2026-Aug-14 00:09:32 :: [aarch64] #100 roundcube: install check OK (cached)
2026-Aug-14 00:09:36 :: [x86_64] #100 roundcube-apache2: install check OK (cached)
2026-Aug-14 00:09:39 :: [aarch64] #100 roundcube-apache2: install check OK (cached)
2026-Aug-14 00:09:40 :: gears inheritance check OK
2026-Aug-14 00:09:40 :: srpm inheritance check OK
girar-check-perms: access to roundcube ALLOWED for lav: project leader
check-subtask-perms: #100: roundcube: allowed for lav
2026-Aug-14 00:09:41 :: acl check OK
2026-Aug-14 00:10:05 :: created contents_index files
2026-Aug-14 00:10:13 :: created hash files: noarch src
2026-Aug-14 00:10:16 :: task #429320 for sisyphus TESTED
2026-Aug-14 00:10:16 :: task is ready for commit
2026-Aug-14 00:10:22 :: repo clone OK
2026-Aug-14 00:10:22 :: packages update OK
2026-Aug-14 00:10:25 :: [noarch] update OK
2026-Aug-14 00:10:25 :: repo update OK
2026-Aug-14 00:10:39 :: repo save OK
2026-Aug-14 00:10:39 :: src index update OK
2026-Aug-14 00:10:39 :: updated /gears/r/roundcube.git branch `sisyphus'
2026-Aug-14 00:10:50 :: gears update OK
2026-Aug-14 00:10:50 :: task #429320 for sisyphus DONE
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-08-14 0:10 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-12 22:47 [#429320] TESTED roundcube.git=1.7.3-alt1 Girar awaiter (lav)
2026-08-14 0:10 ` [#429320] DONE (try 2) roundcube.git=1.7.3-alt1 Girar pender (lav)
ALT Linux Girar Builder robot reports
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus-incominger/0 sisyphus-incominger/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus-incominger sisyphus-incominger/ http://lore.altlinux.org/sisyphus-incominger \
sisyphus-incominger@lists.altlinux.org sisyphus-incominger@lists.altlinux.ru sisyphus-incominger@lists.altlinux.com
public-inbox-index sisyphus-incominger
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus-incominger
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git