[#371801] p10 EPERM (try 5) node.git=16.20.3-alt1 node-gyp.git=5.0.7-alt2

Thu Feb 6 01:28:48 MSK 2025

https://git.altlinux.org/tasks/371801/logs/events.5.1.log
https://packages.altlinux.org/tasks/371801

subtask  name      aarch64  armh  i586  ppc64le  x86_64
   #200  node-gyp       42    59    26       46      25

2025-Feb-05 22:19:15 :: task #371801 for p10 resumed by lav:
2025-Feb-05 22:19:15 :: message: fix CVEs
#40 build 16.20.3-alt1 from /people/lav/packages/node.git fetched at 2025-Jan-29 09:23:51
#100 removed
#200 build 5.0.7-alt2 from /people/lav/packages/node-gyp.git fetched at 2025-Feb-05 22:17:02
2025-Feb-05 22:19:16 :: created build repo
2025-Feb-05 22:19:18 :: [armh] #40 node.git 16.20.3-alt1: build start
2025-Feb-05 22:19:18 :: [x86_64] #40 node.git 16.20.3-alt1: build start
2025-Feb-05 22:19:18 :: [ppc64le] #40 node.git 16.20.3-alt1: build start
2025-Feb-05 22:19:18 :: [i586] #40 node.git 16.20.3-alt1: build start
2025-Feb-05 22:19:18 :: [aarch64] #40 node.git 16.20.3-alt1: build start
2025-Feb-05 22:19:38 :: [i586] #40 node.git 16.20.3-alt1: build OK (cached)
2025-Feb-05 22:19:38 :: [i586] #200 node-gyp.git 5.0.7-alt2: build start
2025-Feb-05 22:19:39 :: [x86_64] #40 node.git 16.20.3-alt1: build OK (cached)
2025-Feb-05 22:19:39 :: [x86_64] #200 node-gyp.git 5.0.7-alt2: build start
2025-Feb-05 22:19:52 :: [aarch64] #40 node.git 16.20.3-alt1: build OK (cached)
2025-Feb-05 22:19:52 :: [aarch64] #200 node-gyp.git 5.0.7-alt2: build start
2025-Feb-05 22:20:00 :: [ppc64le] #40 node.git 16.20.3-alt1: build OK (cached)
2025-Feb-05 22:20:01 :: [ppc64le] #200 node-gyp.git 5.0.7-alt2: build start
2025-Feb-05 22:20:03 :: [armh] #40 node.git 16.20.3-alt1: build OK (cached)
2025-Feb-05 22:20:03 :: [armh] #200 node-gyp.git 5.0.7-alt2: build start
2025-Feb-05 22:20:04 :: [i586] #200 node-gyp.git 5.0.7-alt2: build OK
2025-Feb-05 22:20:04 :: [x86_64] #200 node-gyp.git 5.0.7-alt2: build OK
2025-Feb-05 22:20:34 :: [aarch64] #200 node-gyp.git 5.0.7-alt2: build OK
2025-Feb-05 22:20:47 :: [ppc64le] #200 node-gyp.git 5.0.7-alt2: build OK
2025-Feb-05 22:21:02 :: [armh] #200 node-gyp.git 5.0.7-alt2: build OK
x86_64/rpms/node-devel-16.20.3-alt1.x86_64.rpm: license not found in '/usr/share/license' directory: license
i586/rpms/node-devel-16.20.3-alt1.i586.rpm: license not found in '/usr/share/license' directory: license
aarch64/rpms/node-devel-16.20.3-alt1.aarch64.rpm: license not found in '/usr/share/license' directory: license
ppc64le/rpms/node-devel-16.20.3-alt1.ppc64le.rpm: license not found in '/usr/share/license' directory: license
armh/rpms/node-devel-16.20.3-alt1.armh.rpm: license not found in '/usr/share/license' directory: license
2025-Feb-05 22:21:32 :: #40: node.git 16.20.3-alt1: build check OK
2025-Feb-05 22:21:42 :: #200: node-gyp.git 5.0.7-alt2: build check OK
2025-Feb-05 22:21:44 :: build check OK
2025-Feb-05 22:23:40 :: noarch check OK
2025-Feb-05 22:23:43 :: plan: src +2 -2 =19012, aarch64 +3 -3 =31664, armh +3 -3 =29512, i586 +3 -3 =31991, noarch +2 -2 =20408, ppc64le +3 -3 =31009, x86_64 +3 -3 =33003
#40 node 16.19.1-alt1 -> 16.20.3-alt1
 Sun Jan 26 2025 Vitaly Lipatov <lav at altlinux.ru> 16.20.3-alt1
 - fixed CVEs:
  + CVE-2024-27983: Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash
  + CVE-2024-27982: HTTP Request Smuggling via Content Length Obfuscation
  + CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
  + CVE-2025-22150, CVE-2024-24758, CVE-2023-45143 via updated undici to v5.28.5
 Mon Oct 21 2024 Alexander Danilov <admsasha at altlinux> 16.20.2-alt1
 - new version 16.20.2 (fixes: CVE-2023-30581, CVE-2023-30585, CVE-2023-30588
   CVE-2023-30589, CVE-2023-30590, CVE-2023-32002).
#200 node-gyp 5.0.7-alt1 -> 5.0.7-alt2
 Thu Feb 06 2025 Vitaly Lipatov <lav at altlinux.ru> 5.0.7-alt2
 - node-gyp install: interrrupt for the current version
2025-Feb-05 22:23:43 :: node: fixes vulnerabilities: CVE-2023-30581 CVE-2023-30585 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 CVE-2023-32002
2025-Feb-05 22:23:43 :: node: mentions vulnerabilities: CVE-2024-27983 CVE-2024-27982 CVE-2024-22019 CVE-2025-22150 CVE-2024-24758 CVE-2023-45143
2025-Feb-05 22:24:38 :: patched apt indices
2025-Feb-05 22:24:55 :: created next repo
2025-Feb-05 22:25:04 :: duplicate provides check OK
2025-Feb-05 22:25:44 :: dependencies check OK
2025-Feb-05 22:26:11 :: [x86_64 i586 aarch64 ppc64le armh] ELF symbols check OK
warning [i586]: node=16.20.3-alt1: circular dependencies on npm=8.19.3-alt1
2025-Feb-05 22:26:23 :: [i586] #40 node: install check OK (cached)
warning [x86_64]: node=16.20.3-alt1: circular dependencies on npm=8.19.3-alt1
2025-Feb-05 22:26:23 :: [x86_64] #40 node: install check OK (cached)
2025-Feb-05 22:26:27 :: [i586] #40 node-debuginfo: install check OK (cached)
2025-Feb-05 22:26:28 :: [x86_64] #40 node-debuginfo: install check OK (cached)
warning [aarch64]: node=16.20.3-alt1: circular dependencies on npm=8.19.3-alt1
2025-Feb-05 22:26:30 :: [aarch64] #40 node: install check OK (cached)
warning [ppc64le]: node=16.20.3-alt1: circular dependencies on npm=8.19.3-alt1
2025-Feb-05 22:26:31 :: [ppc64le] #40 node: install check OK (cached)
2025-Feb-05 22:26:31 :: [i586] #40 node-devel: install check OK (cached)
2025-Feb-05 22:26:33 :: [x86_64] #40 node-devel: install check OK (cached)
2025-Feb-05 22:26:36 :: [i586] #40 node-doc: install check OK (cached)
warning [armh]: node=16.20.3-alt1: circular dependencies on npm=8.19.3-alt1
2025-Feb-05 22:26:37 :: [armh] #40 node: install check OK (cached)
2025-Feb-05 22:26:37 :: [x86_64] #40 node-doc: install check OK (cached)
2025-Feb-05 22:26:38 :: [aarch64] #40 node-debuginfo: install check OK (cached)
2025-Feb-05 22:26:41 :: [ppc64le] #40 node-debuginfo: install check OK (cached)
2025-Feb-05 22:26:45 :: [aarch64] #40 node-devel: install check OK (cached)
2025-Feb-05 22:26:48 :: [armh] #40 node-debuginfo: install check OK (cached)
2025-Feb-05 22:26:49 :: [ppc64le] #40 node-devel: install check OK (cached)
2025-Feb-05 22:26:52 :: [x86_64] #200 node-gyp: install check OK
2025-Feb-05 22:26:52 :: [i586] #200 node-gyp: install check OK
2025-Feb-05 22:26:53 :: [aarch64] #40 node-doc: install check OK (cached)
2025-Feb-05 22:26:58 :: [ppc64le] #40 node-doc: install check OK (cached)
2025-Feb-05 22:27:00 :: [armh] #40 node-devel: install check OK (cached)
2025-Feb-05 22:27:11 :: [armh] #40 node-doc: install check OK (cached)
2025-Feb-05 22:27:15 :: [aarch64] #200 node-gyp: install check OK
2025-Feb-05 22:27:26 :: [ppc64le] #200 node-gyp: install check OK
2025-Feb-05 22:27:45 :: [armh] #200 node-gyp: install check OK
2025-Feb-05 22:28:02 :: [x86_64-i586] generated apt indices
2025-Feb-05 22:28:02 :: [x86_64-i586] created next repo
2025-Feb-05 22:28:11 :: [x86_64-i586] dependencies check OK
2025-Feb-05 22:28:12 :: gears inheritance check OK
2025-Feb-05 22:28:13 :: srpm inheritance check OK
girar-check-perms: access to @tester ALLOWED for amakeenk: member of approved group
check-subtask-perms: #40: node: disapproved by amakeenk
girar-check-perms: access to node-gyp DENIED for lav: project `node-gyp' is not listed in the acl file for repository `p10', and the policy for such projects in `p10' is to deny
check-subtask-perms: #200: node-gyp: needs approvals from members of @maint and @tester groups
2025-Feb-05 22:28:17 :: acl check FAILED
2025-Feb-05 22:28:35 :: created contents_index files
2025-Feb-05 22:28:45 :: created hash files: aarch64 armh i586 noarch ppc64le src x86_64
2025-Feb-05 22:28:48 :: task #371801 for p10 EPERM