https://git.altlinux.org/tasks/390836/logs/events.1.1.log
https://packages.altlinux.org/tasks/390836
subtask name aarch64 i586 x86_64
#100 firefox-esr 46:41 - 26:51
2025-Jul-26 06:18:48 :: test-only task #390836 for sisyphus started by pav:
#100 build firefox-esr/128.13.0-alt1 from /people/pav/packages/firefox-esr.git
fetched at 2025-Jul-26 06:16:56
2025-Jul-26 06:18:49 :: [aarch64] #100 firefox-esr.git
firefox-esr/128.13.0-alt1: build start
2025-Jul-26 06:18:49 :: [i586] #100 firefox-esr.git firefox-esr/128.13.0-alt1:
build start
2025-Jul-26 06:18:49 :: [x86_64] #100 firefox-esr.git
firefox-esr/128.13.0-alt1: build start
2025-Jul-26 06:19:13 :: [i586] #100 firefox-esr.git firefox-esr/128.13.0-alt1:
build SKIPPED
2025-Jul-26 06:45:40 :: [x86_64] #100 firefox-esr.git
firefox-esr/128.13.0-alt1: build OK
2025-Jul-26 07:05:30 :: [aarch64] #100 firefox-esr.git
firefox-esr/128.13.0-alt1: build OK
2025-Jul-26 07:06:04 :: #100: firefox-esr.git firefox-esr/128.13.0-alt1: build
check OK
2025-Jul-26 07:06:05 :: build check OK
2025-Jul-26 07:08:21 :: noarch check OK
2025-Jul-26 07:08:23 :: plan: src +1 -1 =20362, aarch64 +3 -3 =35477, i586 +0
-3 =34115, x86_64 +3 -3 =36299
#100 firefox-esr 128.10.1-alt1 -> 128.13.0-alt1
Sat Jul 26 2025 Pavel Vasenkov <pav@altlinux> 128.13.0-alt1
- New ESR version.
- Security fixes:
+ CVE-2025-8027 JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028 Large branch table could lead to truncated instruction
+ CVE-2025-8029 javascript: URLs executed on object and embed tags
+ CVE-2025-8030 Potential user-assisted code execution in 'Copy as cURL'
command
+ CVE-2025-8031 Incorrect URL stripping in CSP reports
+ CVE-2025-8032 XSLT documents could bypass CSP
+ CVE-2025-8033 Incorrect JavaScript state machine for generators
[...]
2025-Jul-26 07:08:24 :: firefox-esr: mentions vulnerabilities: CVE-2025-8027
CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
CVE-2025-8033 CVE-2025-8034 CVE-2025-8035 CVE-2025-6424 CVE-2025-6425
CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVE-2025-5283 CVE-2025-5263
CVE-2025-5264 CVE-2025-5265 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268
CVE-2025-5269
2025-Jul-26 07:09:28 :: patched apt indices
2025-Jul-26 07:09:38 :: created next repo
2025-Jul-26 07:09:57 :: duplicate provides check OK
i586: NEW unmet dependencies detected:
alt-mate-ayatana-settings#0.01-alt2:sisyphus+375381.100.1.1@1739978022
firefox-esr
gnome-kiosk-search-appliance#48.0-alt1.1:sisyphus+389151.200.1.1@1751826043
/usr/bin/firefox
kde-small#25.07.1-alt1:sisyphus+390539.100.1.1@1753184990
/usr/bin/x-www-browser
ACLs of affected packages (3):
alt-mate-ayatana-settings snk @qa
gnome-kiosk aris
kde-set zerg
2025-Jul-26 07:10:59 :: unmets: i586 +3 -0 =3
2025-Jul-26 07:10:59 :: dependencies check FAILED
2025-Jul-26 07:10:59 :: task #390836 for sisyphus FAILED
_______________________________________________
Sisyphus-incominger mailing list
Sisyphus-incominger@lists.altlinux.org
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
