From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=ham autolearn_force=no version=3.4.1 Date: Sun, 4 Oct 2026 07:05:12 +0000 From: "Girar awaiter (lav)" To: Vitaly Lipatov Subject: [#435308] p10 EPERM (try 3) npm.git=8.19.3-alt3 Message-ID: Mail-Followup-To: Girar awaiter robot References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-girar-task-id: 435308 X-girar-task-owner: lav X-girar-task-repo: p10 X-girar-task-try: 3 X-girar-task-iter: 1 X-girar-task-status: EPERM X-girar-task-URL: https://git.altlinux.org/tasks/435308/ X-girar-task-log: logs/events.3.1.log X-girar-task-summary: [#435308] p10 EPERM (try 3) npm.git=8.19.3-alt3 User-Agent: Mutt/1.10.1 (2018-07-13) Cc: girar-builder-p10@altlinux.org, sisyphus-incominger@lists.altlinux.org, girar-builder-p10@lists.altlinux.org X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Oct 2026 07:05:15 -0000 Archived-At: List-Archive: https://git.altlinux.org/tasks/435308/logs/events.3.1.log https://packages.altlinux.org/tasks/435308 2026-Oct-04 07:01:14 :: task #435308 for p10 resumed by lav: 2026-Oct-04 07:01:14 :: message: CVE fixes #40 build 8.19.3-alt3 from /people/lav/packages/npm.git fetched at 2026-Oct-03 09:49:11 #100 removed 2026-Oct-04 07:01:15 :: [aarch64] #40 npm.git 8.19.3-alt3: build start 2026-Oct-04 07:01:15 :: [i586] #40 npm.git 8.19.3-alt3: build start 2026-Oct-04 07:01:15 :: [x86_64] #40 npm.git 8.19.3-alt3: build start 2026-Oct-04 07:01:15 :: [armh] #40 npm.git 8.19.3-alt3: build start 2026-Oct-04 07:01:26 :: [i586] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-04 07:01:26 :: [x86_64] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-04 07:01:32 :: [aarch64] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-04 07:01:40 :: [armh] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-04 07:01:40 :: 40: build check OK (cached) 2026-Oct-04 07:01:41 :: build check OK 2026-Oct-04 07:01:47 :: #40: npm.git 8.19.3-alt3: version check OK 2026-Oct-04 07:01:47 :: build version check OK 2026-Oct-04 07:01:51 :: noarch check OK 2026-Oct-04 07:01:53 :: plan: src +1 -1 =19176, aarch64 +1 -1 =32051, armh +1 -1 =29777, i586 +1 -1 =32343, x86_64 +1 -1 =33392 #40 npm 8.19.3-alt1.p10 -> 8.19.3-alt3 Sat Oct 03 2026 Vitaly Lipatov 8.19.3-alt3 - update semver to 7.5.4 (CVE-2022-25883) - update http-cache-semantics to 4.1.1 (CVE-2022-25881) - update brace-expansion in rimraf to 1.1.12 (CVE-2025-5889) - merge p10 changes (alternatives for npm/npx), build the same for p10 and c10f2 Tue Sep 30 2025 Vitaly Lipatov 8.19.3-alt2 - update node-ip to 2.0.1 (CVE-2023-42282) - update node-ip to 2.0.2 from fork https://github.com/eggjs/node-ip (CVE-2024-29415) - update brace-expansion to 1.1.12 and 2.0.2 (CVE-2025-5889) - update tar to 6.2.1 (CVE-2024-28863) 2026-Oct-04 07:01:54 :: npm: mentions vulnerabilities: CVE-2022-25883 CVE-2022-25881 CVE-2025-5889 CVE-2023-42282 CVE-2024-29415 CVE-2025-5889 CVE-2024-28863 2026-Oct-04 07:02:46 :: patched apt indices 2026-Oct-04 07:02:59 :: created next repo 2026-Oct-04 07:03:07 :: duplicate provides check OK 2026-Oct-04 07:03:47 :: dependencies check OK 2026-Oct-04 07:03:48 :: [x86_64 i586 aarch64 armh] no need to repeat ELF symbols check 2026-Oct-04 07:03:48 :: [x86_64 i586 aarch64 armh] ELF symbols check OK warning [i586]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 i586: npm=8.19.3-alt3 post-install unowned files: /usr/lib/node /usr/lib/node/bin /usr/lib/node/etc 2026-Oct-04 07:03:59 :: [i586] #40 npm: install check OK (cached) warning [x86_64]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 x86_64: npm=8.19.3-alt3 post-install unowned files: /usr/lib64/node /usr/lib64/node/bin /usr/lib64/node/etc 2026-Oct-04 07:03:59 :: [x86_64] #40 npm: install check OK (cached) warning [aarch64]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 aarch64: npm=8.19.3-alt3 post-install unowned files: /usr/lib64/node /usr/lib64/node/bin /usr/lib64/node/etc 2026-Oct-04 07:04:05 :: [aarch64] #40 npm: install check OK (cached) warning [armh]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 armh: npm=8.19.3-alt3 post-install unowned files: /usr/lib/node /usr/lib/node/bin /usr/lib/node/etc 2026-Oct-04 07:04:12 :: [armh] #40 npm: install check OK (cached) 2026-Oct-04 07:04:32 :: [x86_64-i586] generated apt indices 2026-Oct-04 07:04:32 :: [x86_64-i586] created next repo 2026-Oct-04 07:04:44 :: [x86_64-i586] dependencies check OK 2026-Oct-04 07:04:45 :: gears inheritance check OK 2026-Oct-04 07:04:45 :: srpm inheritance check OK girar-check-perms: access to npm DENIED for lav: project `npm' is not listed in the acl file for repository `p10', and the policy for such projects in `p10' is to deny check-subtask-perms: #40: npm: needs approvals from members of @maint and @tester groups 2026-Oct-04 07:04:48 :: acl check FAILED 2026-Oct-04 07:04:58 :: created contents_index files 2026-Oct-04 07:05:09 :: created hash files: aarch64 armh i586 src x86_64 2026-Oct-04 07:05:12 :: task #435308 for p10 EPERM