https://git.altlinux.org/tasks/archive/done/_381/391139/logs/events.4.3.log https://packages.altlinux.org/tasks/391139
2025-Jul-30 06:52:16 :: task #391139 for sisyphus resumed by rauty: #100 build 3.114-alt1 from /people/rauty/packages/nss.git fetched at 2025-Jul-29 12:26:27 #200 build 2025.07.29-alt1 from /people/rauty/packages/ca-certificates.git fetched at 2025-Jul-29 12:26:40 #210 build 141.0-alt1 from /people/rauty/packages/firefox.git fetched at 2025-Jul-29 20:49:48 #220 removed #240 removed #300 removed #340 build 141.0-alt1 from /people/rauty/packages/thunderbird.git fetched at 2025-Jul-29 20:37:10 #400 removed 2025-Jul-30 06:52:17 :: created build repo 2025-Jul-30 06:52:18 :: [i586] #100 nss.git 3.114-alt1: build start 2025-Jul-30 06:52:18 :: [aarch64] #100 nss.git 3.114-alt1: build start 2025-Jul-30 06:52:18 :: [x86_64] #100 nss.git 3.114-alt1: build start 2025-Jul-30 06:52:37 :: [i586] #100 nss.git 3.114-alt1: build OK (cached) 2025-Jul-30 06:52:37 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build start 2025-Jul-30 06:52:38 :: [x86_64] #100 nss.git 3.114-alt1: build OK (cached) 2025-Jul-30 06:52:38 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build start 2025-Jul-30 06:52:50 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached) 2025-Jul-30 06:52:51 :: [i586] #210 firefox.git 141.0-alt1: build start 2025-Jul-30 06:52:52 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached) 2025-Jul-30 06:52:53 :: [x86_64] #210 firefox.git 141.0-alt1: build start 2025-Jul-30 06:52:56 :: [aarch64] #100 nss.git 3.114-alt1: build OK (cached) 2025-Jul-30 06:52:57 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build start 2025-Jul-30 06:53:18 :: [i586] #210 firefox.git 141.0-alt1: build SKIPPED 2025-Jul-30 06:53:18 :: [i586] #340 thunderbird.git 141.0-alt1: build start 2025-Jul-30 06:53:22 :: [x86_64] #210 firefox.git 141.0-alt1: build OK (cached) 2025-Jul-30 06:53:22 :: [x86_64] #340 thunderbird.git 141.0-alt1: build start 2025-Jul-30 06:53:23 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached) 2025-Jul-30 06:53:23 :: [aarch64] #210 firefox.git 141.0-alt1: build start 2025-Jul-30 06:53:42 :: [i586] #340 thunderbird.git 141.0-alt1: build SKIPPED 2025-Jul-30 06:53:51 :: [x86_64] #340 thunderbird.git 141.0-alt1: build OK (cached) 2025-Jul-30 06:54:22 :: [aarch64] #210 firefox.git 141.0-alt1: build OK (cached) 2025-Jul-30 06:54:22 :: [aarch64] #340 thunderbird.git 141.0-alt1: build start 2025-Jul-30 06:55:13 :: [aarch64] #340 thunderbird.git 141.0-alt1: build OK (cached) 2025-Jul-30 06:55:39 :: #100: nss.git 3.114-alt1: build check OK 2025-Jul-30 06:55:48 :: #200: ca-certificates.git 2025.07.29-alt1: build check OK 2025-Jul-30 06:56:16 :: #210: firefox.git 141.0-alt1: build check OK 2025-Jul-30 06:56:47 :: #340: thunderbird.git 141.0-alt1: build check OK 2025-Jul-30 06:56:49 :: build check OK warning (#100): libnss-nssckbi-checkinstall-3.114-alt1.x86_64.rpm should be .noarch.rpm 2025-Jul-30 07:00:20 :: noarch check OK 2025-Jul-30 07:00:22 :: plan: src +4 -4 =20449, aarch64 +12 -12 =35886, i586 +7 -7 =34524, noarch +1 -1 =21513, x86_64 +12 -12 =36710 #200 ca-certificates 2025.05.12-alt1 -> 2025.07.29-alt1 Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 2025.07.29-alt1 - mozilla: sync with nss-3.114. #210 firefox 140.0.4-alt1 -> 141.0-alt1 Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1 - New version (141.0). - Fixes: + CVE-2025-8027: JavaScript engine only wrote partial return value to stack + CVE-2025-8028: Large branch table could lead to truncated instruction + CVE-2025-8041: Incorrect URL truncation in Firefox for Android + CVE-2025-8042: Sandboxed iframe could start downloads + CVE-2025-8029: javascript: URLs executed on object and embed tags + CVE-2025-8036: DNS rebinding circumvents CORS + CVE-2025-8037: Nameless cookies shadow secure cookies [...] #100 nss 3.113.1-alt1 -> 3.114-alt1 Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 3.114-alt1 - New version (3.114). - Certificate Authority Changes: + Remove CN=Baltimore CyberTrust Root,OU=CyberTrust + Add CN=SwissSign RSA SMIME Root CA 2022 - 1 + Add CN=SwissSign RSA TLS Root CA 2022 - 1 + Add CN=TrustAsia SMIME ECC Root CA + Add CN=TrustAsia SMIME RSA Root CA + Add CN=TrustAsia TLS ECC Root CA + Add CN=TrustAsia TLS RSA Root CA #340 thunderbird 140.0.1-alt1 -> 141.0-alt1 Tue Jul 29 2025 Ajrat Makhmutov <rauty@altlinux> 141.0-alt1 - New version. - Fixes: + CVE-2025-8027: JavaScript engine only wrote partial return value to stack + CVE-2025-8028: Large branch table could lead to truncated instruction + CVE-2025-8029: javascript: URLs executed on object and embed tags + CVE-2025-8036: DNS rebinding circumvents CORS + CVE-2025-8037: Nameless cookies shadow secure cookies + CVE-2025-8030: Potential user-assisted code execution in "Copy as cURL" command + CVE-2025-8043: Incorrect URL truncation [...] 2025-Jul-30 07:00:23 :: firefox: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8041 CVE-2025-8042 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035 2025-Jul-30 07:00:23 :: thunderbird: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035 2025-Jul-30 07:01:20 :: patched apt indices 2025-Jul-30 07:01:30 :: created next repo 2025-Jul-30 07:01:41 :: duplicate provides check OK 2025-Jul-30 07:02:28 :: dependencies check OK 2025-Jul-30 07:03:03 :: [x86_64 i586 aarch64] ELF symbols check OK warning [i586]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1 2025-Jul-30 07:03:17 :: [i586] #200 ca-certificates: install check OK (cached) warning [x86_64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1 2025-Jul-30 07:03:18 :: [x86_64] #200 ca-certificates: install check OK (cached) 2025-Jul-30 07:03:21 :: [i586] #100 libnss: install check OK (cached) x86_64: firefox=141.0-alt1 post-install unowned files: /usr/share/gnome-shell /usr/share/gnome-shell/search-providers /usr/share/icons/hicolor/22x22 /usr/share/icons/hicolor/22x22/apps /usr/share/icons/hicolor/24x24 /usr/share/icons/hicolor/24x24/apps /usr/share/icons/hicolor/256x256 /usr/share/icons/hicolor/256x256/apps 2025-Jul-30 07:03:23 :: [x86_64] #210 firefox: install check OK (cached) 2025-Jul-30 07:03:25 :: [i586] #100 libnss-debuginfo: install check OK (cached) warning [aarch64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1 2025-Jul-30 07:03:26 :: [aarch64] #200 ca-certificates: install check OK (cached) 2025-Jul-30 07:03:28 :: [x86_64] #210 firefox-config-privacy: install check OK (cached) 2025-Jul-30 07:03:29 :: [i586] #100 libnss-devel: install check OK (cached) 2025-Jul-30 07:03:33 :: [i586] #100 libnss-devel-static: install check OK (cached) 2025-Jul-30 07:03:34 :: [x86_64] #210 firefox-debuginfo: install check OK (cached) aarch64: firefox=141.0-alt1 post-install unowned files: /usr/share/gnome-shell /usr/share/gnome-shell/search-providers /usr/share/icons/hicolor/22x22 /usr/share/icons/hicolor/22x22/apps /usr/share/icons/hicolor/24x24 /usr/share/icons/hicolor/24x24/apps /usr/share/icons/hicolor/256x256 /usr/share/icons/hicolor/256x256/apps 2025-Jul-30 07:03:34 :: [aarch64] #210 firefox: install check OK (cached) 2025-Jul-30 07:03:38 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK (cached) 2025-Jul-30 07:03:39 :: [x86_64] #100 libnss: install check OK (cached) 2025-Jul-30 07:03:42 :: [i586] #100 nss-utils: install check OK (cached) 2025-Jul-30 07:03:43 :: [aarch64] #210 firefox-config-privacy: install check OK (cached) 2025-Jul-30 07:03:43 :: [x86_64] #100 libnss-debuginfo: install check OK (cached) 2025-Jul-30 07:03:46 :: [i586] #100 nss-utils-debuginfo: install check OK (cached) 2025-Jul-30 07:03:48 :: [x86_64] #100 libnss-devel: install check OK (cached) 2025-Jul-30 07:03:52 :: [x86_64] #100 libnss-devel-static: install check OK (cached) 2025-Jul-30 07:03:54 :: [aarch64] #210 firefox-debuginfo: install check OK (cached) 2025-Jul-30 07:03:56 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK (cached) 2025-Jul-30 07:04:01 :: [x86_64] #100 nss-utils: install check OK (cached) 2025-Jul-30 07:04:02 :: [aarch64] #100 libnss: install check OK (cached) 2025-Jul-30 07:04:05 :: [x86_64] #100 nss-utils-debuginfo: install check OK (cached) 2025-Jul-30 07:04:10 :: [aarch64] #100 libnss-debuginfo: install check OK (cached) x86_64: thunderbird=141.0-alt1 post-install unowned files: /usr/lib64/mozilla /usr/lib64/mozilla/extensions /usr/share/icons/hicolor/128x128 /usr/share/icons/hicolor/128x128/apps /usr/share/icons/hicolor/22x22 /usr/share/icons/hicolor/22x22/apps /usr/share/icons/hicolor/24x24 /usr/share/icons/hicolor/24x24/apps /usr/share/icons/hicolor/256x256 /usr/share/icons/hicolor/256x256/apps /usr/share/icons/hicolor/64x64 /usr/share/icons/hicolor/64x64/apps /usr/share/icons/hicolor/symbolic /usr/share/icons/hicolor/symbolic/apps /usr/share/mozilla /usr/share/mozilla/extensions 2025-Jul-30 07:04:10 :: [x86_64] #340 thunderbird: install check OK (cached) 2025-Jul-30 07:04:17 :: [x86_64] #340 thunderbird-debuginfo: install check OK (cached) 2025-Jul-30 07:04:18 :: [aarch64] #100 libnss-devel: install check OK (cached) 2025-Jul-30 07:04:26 :: [aarch64] #100 libnss-devel-static: install check OK (cached) 2025-Jul-30 07:04:34 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK (cached) 2025-Jul-30 07:04:42 :: [aarch64] #100 nss-utils: install check OK (cached) 2025-Jul-30 07:04:50 :: [aarch64] #100 nss-utils-debuginfo: install check OK (cached) aarch64: thunderbird=141.0-alt1 post-install unowned files: /usr/lib64/mozilla /usr/lib64/mozilla/extensions /usr/share/icons/hicolor/128x128 /usr/share/icons/hicolor/128x128/apps /usr/share/icons/hicolor/22x22 /usr/share/icons/hicolor/22x22/apps /usr/share/icons/hicolor/24x24 /usr/share/icons/hicolor/24x24/apps /usr/share/icons/hicolor/256x256 /usr/share/icons/hicolor/256x256/apps /usr/share/icons/hicolor/64x64 /usr/share/icons/hicolor/64x64/apps /usr/share/icons/hicolor/symbolic /usr/share/icons/hicolor/symbolic/apps /usr/share/mozilla /usr/share/mozilla/extensions 2025-Jul-30 07:04:58 :: [aarch64] #340 thunderbird: install check OK (cached) 2025-Jul-30 07:05:10 :: [aarch64] #340 thunderbird-debuginfo: install check OK (cached) 2025-Jul-30 07:05:11 :: [x86_64-i586] plan: #0 +3 -3 =11744 2025-Jul-30 07:05:30 :: [x86_64-i586] generated apt indices 2025-Jul-30 07:05:32 :: [x86_64-i586] created next repo 2025-Jul-30 07:05:45 :: [x86_64-i586] dependencies check OK 2025-Jul-30 07:05:58 :: gears inheritance check OK 2025-Jul-30 07:05:59 :: srpm inheritance check OK girar-check-perms: access to nss ALLOWED for rauty: approved builder check-subtask-perms: #100: nss: allowed for rauty girar-check-perms: access to ca-certificates ALLOWED for rauty: approved builder check-subtask-perms: #200: ca-certificates: allowed for rauty girar-check-perms: access to firefox ALLOWED for rauty: approved builder check-subtask-perms: #210: firefox: allowed for rauty girar-check-perms: access to thunderbird ALLOWED for rauty: project leader check-subtask-perms: #340: thunderbird: allowed for rauty 2025-Jul-30 07:06:00 :: acl check OK 2025-Jul-30 07:06:25 :: created contents_index files 2025-Jul-30 07:06:39 :: created hash files: aarch64 i586 noarch src x86_64-i586 x86_64 2025-Jul-30 07:06:43 :: task #391139 for sisyphus TESTED 2025-Jul-30 07:06:45 :: task is ready for commit 2025-Jul-30 07:06:50 :: repo clone OK 2025-Jul-30 07:06:53 :: packages update OK 2025-Jul-30 07:07:05 :: [x86_64 i586 aarch64 noarch] update OK 2025-Jul-30 07:07:06 :: [x86_64-i586] update OK 2025-Jul-30 07:07:06 :: repo update OK 2025-Jul-30 07:07:25 :: repo save OK 2025-Jul-30 07:07:26 :: src index update OK 2025-Jul-30 07:07:26 :: updated /gears/c/ca-certificates.git branch `sisyphus' 2025-Jul-30 07:07:54 :: updated /gears/f/firefox.git branch `sisyphus' 2025-Jul-30 07:07:55 :: updated /gears/n/nss.git branch `sisyphus' 2025-Jul-30 07:08:12 :: updated /gears/t/thunderbird.git branch `sisyphus' 2025-Jul-30 07:08:32 :: gears update OK 2025-Jul-30 07:08:32 :: task #391139 for sisyphus DONE _______________________________________________ Sisyphus-incominger mailing list Sisyphus-incominger@lists.altlinux.org https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger